Rapid7 published an overview on October 28, 2026, detailing how its InsightGovCloud security suite assists organizations in meeting U.S. Cybersecurity and Infrastructure Security Agency Binding Operational Directive 22-01 compliance requirements.
Continuous Inventory and Visibility
Rapid7 stated that InsightVM, included in the suite, supports continuous and automated discovery of internal and external assets using Discovery Connections. These connections allow organizations to poll sources like Active Directory, AWS, and Azure to enumerate connected hosts and launch scans.
Additionally, Rapid7 InsightCloudSec continuously inventories cloud environments for the creation of new resources to automatically scan and assess against compliance frameworks.
Prioritization and Reporting Features
The platform provides automated vulnerability scanning, real-time alerts for known exploited vulnerabilities, and reporting aligned with regulatory requirements. Rapid7 noted that predefined exports in Cyberscope XML reporting format enable seamless ingestion into CyberScope submissions.
The suite also features a built-in audit trail to demonstrate adherence with BOD 22-01, allowing teams to track and assign vulnerabilities with organizational defined timelines and real-time dashboards.
Key facts and where they come from
- InsightGovCloud is Rapid7's FedRAMP-authorized suite of security solutions.
InsightGovCloud, Rapid7’s FedRAMP-authorized suite of security solutions, helps organizations implement BOD 22-01
- Rapid7 maintains 90% coverage for on-premise and cloud-based host vulnerabilities in the CISA KEV catalog.
Rapid7 also maintains up-to-date inventory of CISA KEVs with an industry leading 90% coverage for both on-premise and cloud based host vulnerabilities.
- Discovery Connections allow organizations to poll network sources like Active Directory, AWS, and Azure.
Discovery Connections, which allow organizations to continuously poll network sources like Active Directory, AWS, and Azure to enumerate connected hosts and launch scans.
