Guides
  1. Integrations

Rapid7 Application Security Integration

🚧

Prerequisites

To integrate with Rapid7 Application Security, you need:

  • Access to a Rapid7 Application Security instance.
  • Administrator privileges to generate API keys.
  • Your Insight Application Security instance URL (Base URL).

Generating an Application Security API Key

  1. Log into your Rapid7 account .

  2. Navigate to Administration from the left-hand sidebar.


  1. Click API Key Management.


  1. Choose New Organization Key.


  1. In the panel that appears:

    • Select the organization (if applicable).
    • Enter a descriptive name for the key (e.g. Compyl Integration)
    • Click Submit.

  1. Copy the API key from the popup. This is the only time it will be visible.


  1. Click Done.

❗️

Warning

You must copy the API key immediately after generating it. You won't be able to retrieve it again later.


📘

Note

If your organization uses a managed Insight Application Security instance, contact your Rapid7 account representative to obtain API credentials.


Identifying Your Base URL

Your Base URL is the web address you use to access your Application Security instance. It will be in this format:https://{region}.api.insight.rapid7.com/. Ex: https://us2.api.insight.rapid7.com/.


Add Configuration

  1. Navigate to the Integrations tab using the left-hand menu, find Rapid7 AppSec, and select +Add Configuration.


  1. Next, fill in the details below and select Continue.


    Name: Enter a descriptive name for this integration (e.g., AppSec Integration)

    Is Enabled: Toggle ON to enable automatic data synchronization

    Base URL: Enter your Application Security instance URL

    API Key: Paste the API key you generated above

  2. Choose your Endpoints and Begin Validation to validate your connection.


  1. Select any Blueprints you wish to associate with this integration.


  1. After you hit Continue, you'll see a summary screen. Click Return to Integrations to complete the configuration.


Once you have completed filling out the form click Return to Integrations.

You'll know the integration is successfully added when the status updates to Complete.


Data is synced on a recurring schedule configured by your Compyl administrator. Each sync pulls the latest data from all enabled endpoints.

To query the data from the integration, refer to the Blueprints article.

Updated 2 months ago

Did this page help you?