InboundSecurity

Rapid7 + Alert24

Turn Rapid7 alerts into actionable incidents in Alert24, with on-call routing, escalations, and status updates.

Start Free Trial See Pricing

Receive Rapid7 InsightConnect and InsightIDR alert notifications via webhook.

Auto-detected payloads

Alert24 recognizes Rapid7 webhooks out of the box and maps fields to incidents automatically.

On-call routing & escalations

Page the right engineer over SMS, voice, push, email, or chat with policy-driven escalations.

Auto-updating status pages

Promote incidents to a public or private status page with one click and keep customers informed.

Change correlation & AI RCA

Recent deploys, infra updates, and feature flag flips surface alongside the incident for faster root cause.

Quick Setup

Copy Webhook URL

Go to your Alert24 dashboard and copy the webhook URL for Rapid7.

Configure Rapid7

Add the webhook URL in your Rapid7 settings.

Auto-Detected

Alert24 auto-detects Rapid7 payloads and maps them to incidents.

Step-by-Step Setup Instructions

Rapid7 Webhook Setup

1.In InsightConnect, create a new workflow with a Webhook Trigger

2.Or in InsightIDR, go to Settings → Notifications → Webhook

3.Set the URL to the webhook URL shown above

4.Configure the payload to include alert status, name, and title fields

5.Save and test the connection

Example Webhook Payload

This is a sample payload that Rapid7 sends to Alert24 when an alert fires.

{
  "status": "OPEN",
  "name": "Brute Force Authentication Attempt Detected",
  "title": "Brute Force Authentication Attempt Detected",
  "severity": "HIGH",
  "source": "InsightIDR",
  "investigationId": "INV-12345",
  "alertType": "User Behavior Analytics",
  "createdTime": "2024-01-15T10:30:00Z"
}