Rapid7’s new SIEM combines exposure management with threat detection

Rapid7 has released a security information and event management (SIEM) platform with built-in AI-assisted workflows.

The new product, Incident Command, is part of the cybersecurity company’s Command Platform.

It brings together attack and exposure management with threat detection and response, with workflow-based AI assistance that is trained on playbooks developed by Rapid7’s security operations centre staff.

The company claimed the product can automate triage with 99.93% accuracy and provide guidance and recommendations.

Incident Command also provides a single interface for SIEM, SOAR, ASM, and threat intelligence analysis and the Command Platform data mesh allows for simple third-party telemetry integration.

Rapid7 chief executive Corey Thomas said Incident Command was about simplifying access to security outcomes.

“We built the Command Platform to unify all customer data, not just what we collect, so that organisations get the facts from the beginning and reduce their time to action," he said.

"Incident Command, our upgraded Next-Gen SIEM, gives customers the benefit of the Command Platform plus broadened access to our decades of SOC expertise with agentic AI integrated within the workflows they use every day."