Rapid7 has replaced the legacy InsightVM ? - 5.26.2026

Has anyone else gotten this email?

| We’re reaching out to let you know about an important and exciting update to the integration between InsightVM and InsightIDR.

Rapid7 has replaced the legacy InsightVM Event Source with a seamless, platform-native integration powered by our data mesh architecture. This new integration is already active for customers using both InsightVM (or Exposure Command) and InsightIDR, Managed Detection and Response, Managed Threat Complete, or Incident Command.

The new automatic integration now fully replaces the legacy VM Event Source:

|
|----|

  • Manual configuration is no longer required

  • Vulnerability data is delivered automatically through the platform

  • Existing features and customizations continue to work as expected

  • Reliability and data consistency are significantly improved

Action Recommended
If you currently have the legacy VM Event Source configured, you can now safely disable it and/or remove it. It will be deprecated and removed in 2 weeks. Please note that while your count of Event Sources will go down by one, you will not have lost any functionality.

No disruption or customer impact is expected during this transition.

If you have any questions, please contact Rapid7 Support or your Customer Success team.

1 Like

It is the investigation of Rapid7 Vulnerability Management logs into SIEM.
Which is now done directly within the platform.

I expect the legacy console to integrate into the cloud / platform eventually. But that is now what this communication was about.

Please verify with your Rapid7 CA

The integration of the legacy console into the command platform has already begun. If you enable the “platform login” in InsightVM, all of the InsighVM screens become available in the command console. It’s mostly putting InsightVM into a frame, so not a full integration.