skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

implementing-rapid7-insightvm-for-scanning

Deploy and configure Rapid7 InsightVM consoles, scan engines, and credentialed vulnerability scans.

954|172|Updated Mar 13, 2026
Search Tags:#remediation#vulnerability scanning#rapid7#insightvm#nexpose#authenticated scanning#scan engine
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill implementing-rapid7-insightvm-for-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: implementing-rapid7-insightvm-for-scanning
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/vulnerability-management/implementing-rapid7-insightvm-for-scanning
Command: npx skills add https://github.com/xalgord/xalgorix --skill implementing-rapid7-insightvm-for-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests.

What problem does it solve?

Setting up enterprise vulnerability scanning with Rapid7 InsightVM involves many moving parts—Security Console installation, distributed Scan Engine pairing, credentialed scan configuration, and agent deployment—and misconfiguration leads to blind spots, unauthenticated-only coverage, and false positives.

Core Features & Use Cases

  • Console and Engine Deployment: Step-by-step installation of the Security Console and distributed Scan Engines, including Docker-based engine deployment and pairing via shared secrets.
  • Authenticated Scanning Setup: Credential configuration for Windows (WMI/SMB), Linux (SSH with sudo), and databases to capture the 60-80% of vulnerabilities missed by unauthenticated scans.
  • Automation via API: A Python client for the InsightVM API v3 to list sites, trigger scans, retrieve asset vulnerabilities, and create remediation projects.
  • Use Case: A security engineer rolling out vulnerability management across segmented corporate networks uses this Skill to deploy engines per segment, configure weekly credentialed scans, and build remediation projects for critical findings.

Quick Start

Help me deploy a Rapid7 InsightVM Security Console with a Docker-based scan engine and configure an authenticated weekly scan for my 10.0.0.0/8 network.

Frequently Asked Questions about implementing-rapid7-insightvm-for-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a Rapid7 InsightVM Scan Engine with Docker?▼

Pull the rapid7/insightvm-scan-engine image and run it with CONSOLE_HOST, CONSOLE_PORT, ENGINE_NAME, and SHARED_SECRET environment variables. Then pair it in the Security Console under Administration > Scan Engines using the shared secret on port 40814.

How do I set up authenticated scanning in InsightVM?▼

Configure site credentials matching the target platform: Microsoft Windows/Samba for WMI, SSH with key-based auth and sudo elevation for Linux, and database-specific credentials for MSSQL or Oracle. Validate authentication results in the scan output before trusting coverage.

InsightVM vs Nexpose, what is the difference?▼

Nexpose is the former name of Rapid7 InsightVM; they are the same product. InsightVM adds cloud analytics through the Insight Platform and the lightweight Insight Agent for continuous assessment of roaming endpoints.

Why does my InsightVM scan miss vulnerabilities on some hosts?▼

Unauthenticated scans miss 60-80% of local vulnerabilities, so verify credentials succeeded in the scan's authentication results. Also check that each network segment has a paired engine and that roaming assets are covered by the Insight Agent.

Can the InsightVM Security Console run in a container?▼

No, the Security Console is not supported in containerized environments and must be installed on a server meeting minimum requirements of 16 GB RAM and 4 CPU cores. Only Scan Engines are available as Docker images.

How do I automate InsightVM scans with the API?▼

Use the InsightVM API v3 with a Python requests session authenticated via API key. POST to /api/3/sites/{site_id}/scans to trigger scans, and query /api/3/assets/{id}/vulnerabilities to retrieve findings.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

lateral-movement

Plan credential-based lateral movement across hosts using SSH, WinRM, WMI, PSExec, or RDP.

Official
Advanced
UnitOneAIUnitOneAI
44

cve-triage

Prioritize CVEs into SLA tiers using CVSS 4.0, SSVC 2.1, EPSS, and CISA KEV.

Official
Intermediate
starwreckntxstarwreckntx

Vulnerability Management Agent

Track vulnerabilities across assets using CVE/CVSS standards and CVSS scoring.

Community
Basic
DCx7C5DCx7C5

rapid7-SKILL.md

Automate Rapid7 InsightVM console setup, engine deployment, and site scans.

Community
Advanced