Remediation progress
Maya Okafor, security manager at Acme Ltd, asked what had changed on the finance servers since the last review. Memtro split each server's findings into new, still present and remediated since that date.
Rapid7 InsightVM + Memtro
Which of our assets carry the most critical vulnerabilities?
Rapid7 InsightVM connects Memtro to your vulnerability management through the Insight Platform. It reads assets by host name and operating system with risk score, vulnerability counts by severity and tags, one asset's findings split into new, still present and remediated, the vulnerability catalogue with CVEs, CVSS and exploits, scans, scan engines and sites. When asked, and once an administrator has granted the action by name, it can start a scan of named assets, which sends network probes to those machines, and stop a running scan. IP and MAC addresses, hardware identifiers and finding proof are never returned.
In Memtro
What you can do with Rapid7 InsightVM in Memtro
Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right Rapid7 InsightVM tool, reads what it needs, and answers with the source cited.
What it does
- 01Searches assets with host name, operating system, risk score, critical, severe and moderate vulnerability counts, exploits, last scan time and tags
- 02Reads one asset's findings with status, first and last found and solution summary, split into new, still present and remediated since a date
- 03Searches the vulnerability catalogue by title, CVE or severity with CVSS scores, risk score, exploit counts and a short description
- 04Lists scans with status, start and finish and engine, and lists scan engines and sites
- 05When asked and granted, starts a vulnerability scan of named assets now. The engine sends network probes to those machines, which can disturb fragile services, and the scan can only be stopped
- 06When asked and granted, stops a running scan. Assets it had not reached stay unscanned until another scan starts
Acts when asked
When you ask it to
These tools change something in Rapid7 InsightVM. The model is told to use them only when you ask for exactly that, and an administrator grants each one by name to the teams that may use it; a personal connection acts only after its owner allows it.
- 01Start a vulnerability scan of named assets (sends network probes to those machines)
- 02Stop a running scan
In practice
Ask it like you would a colleague
Once Rapid7 InsightVM is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.
Rapid7 InsightVM + MemtroWhich assets have the most critical vulnerabilities?
What has been remediated on the payroll server since last month?
Which assets are exposed to this CVE?
Which scan engines have not been seen recently?
Start a scan of the two new web servers
Scanning new servers
Tom Reilly, infrastructure lead at Northwind, asked Memtro to scan two web servers that had just gone live. Memtro started the scan in InsightVM on those named assets and reported its status. He was told it could be stopped but not undone.
Teams
Where it fits
The teams that lean on Rapid7 InsightVM most, a question each of them asks, and what they connect beside it.
- EngineeringKeep decisions from evaporatingEngineer, Tech lead, On call, New joiner“Who owns the billing migration, and what did we decide about retries?”Used alongside GitHub, Linear, Jira, Confluence, Slack and 5 more.
- ProductHear what customers actually ask forProduct manager, Researcher, Designer, Head of product“Which customers asked for SSO this quarter, and what is their combined ARR?”Used alongside Help Scout, HubSpot, Linear, Jira, Slack and 6 more.
- Agent buildersMemory and tools for the agents you buildSolo builder, Platform team, Automation engineer, Whoever signs it off“Search memtro for what we know about Acme before drafting the proposal”Used alongside GitHub, Linear and Slack.
Better together
Works with
A record in Rapid7 InsightVM is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.
- Work managementRapid7 InsightVM with JiraJQL search, issue details and projects from Jira Cloud.
- Work managementRapid7 InsightVM with Clio ManageAsk the matter: its client, its fee earner, the time on it and what is still unbilled.
- Work managementRapid7 InsightVM with LinearIssues, projects and teams, synced hourly into memory.
- SupportRapid7 InsightVM with Help ScoutAI that reads your support conversations and cross-references the customer everywhere else.
- SupportRapid7 InsightVM with ZendeskEvery ticket, reply and internal note, ready to be asked about.
- SupportRapid7 InsightVM with IntercomCustomer conversations and the people behind them, in your company memory.
- Documents and wikisRapid7 InsightVM with NotionSearch pages and query databases, and write to them when you ask.
- Documents and wikisRapid7 InsightVM with Google DriveSearch Drive and read Docs, Sheets and Slides as text, and write a Doc when you ask.
- Documents and wikisRapid7 InsightVM with ConfluenceSearch and read wiki pages, and write them when you ask.
Also in Engineering and operations
Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.
- GitHub
- AWS CloudWatch
- Sentry
- ServiceNow
- Okta
- Twilio
- AWS CloudTrail
- GitLab
- Bitbucket
- Vercel
- PagerDuty
- Datadog
- Grafana
- incident.io
- Azure DevOps
- CircleCI
- Cloudflare
- LaunchDarkly
- New Relic
- Rollbar
- Snyk
- Better Stack
- Buildkite
- DigitalOcean
- Heroku
- Netlify
- SonarQube Cloud
- Statuspage
UptimeRobot- Axiom
- BugSnag
- Checkly
- Hetzner Cloud
Honeycomb- Pingdom
- Render
- Statsig
- Sumo Logic
- Supabase
- HCP Terraform
- Vultr
- Airbrake
- Codecov
Cronitor- Dynatrace
FireHydrant- Fly.io
- Honeybadger
- Akamai Linode
- Octopus Deploy
- Pulumi
- Rootly
- Semgrep
- Splunk
StatusCake- Tailscale
- Argo CD
- authentik
- Coolify
- Gitea
GlitchTip
GLPI- Jenkins
Langfuse
LibreNMS- n8n
NetBox- Portainer
- Prefect
Snipe-IT
Woodpecker CI
Zabbix
LangSmith
Helicone- OpenAI (usage and cost)
- Anthropic (usage and cost)
- Algolia
- Flagsmith
- Unleash
GrowthBook
Drata
Intruder
GitGuardian
Secureframe
ilert- KnowBe4
JumpCloud
ConfigCat- Railway
- Fastly
- Postman
- Make
- Braintrust
- OpenRouter
- ElevenLabs
Split- Scaleway
Aikido Security- AssemblyAI
Astronomer- Bamboo
- Baseten
- Bitrise
- Bitwarden
- BrowserStack
- bunny.net
- Cachet
- Checkmk
- Civo
- Cloudsmith
- Codacy
- Codemagic
Comet Opik- Coralogix
CrowdStrike Falcon- Dagster+
- DeepSource
Detectify- Docker Hub
Domotz- Grafana OnCall
- Harness
- Hugging Face
- Instatus
- Koyeb
- Lambda Cloud
LambdaTest
LangWatch
LlamaCloud
Logz.io
Lunary- Mezmo
NinjaOne- Nomad
Northflank- Oh Dear
- OVHcloud
Portkey- Probely (Snyk API & Web)
PromptLayer- Proxmox VE
PRTG Network Monitor- Qase
Raygun
Retell AI- Retool
Runpod- SecurityScorecard
- Semaphore CI
Shodan- SigNoz
- Socket
Spike.sh
Squadcast- SwaggerHub
- TeamCity
Tenable- Together AI
- Travis CI
UpGuard
Uptime.com
Vanta- Vapi
- Windmill
Zenduty- OpsLevel
Cortex- Auth0
- Clerk
WorkOS
Kandji
Automox
Huntress- HackerOne
SimpleMDM- AppSignal
Healthchecks.io- 1Password Events
- JFrog Artifactory
- Sauce Labs
Zenhub- Deepgram
- Replicate
Setup
How to connect
Connect withInsight Platform API key and region
- 1
In the Insight Platform, open Administration → User API Keys and choose Generate New User Key. A user key acts with that user's permissions.
- 2
Choose the organisation, name it Memtro, save, and copy the key: it cannot be shown again.
- 3
In Memtro, open Connections → Rapid7 InsightVM, paste it into Insight Platform API key and set Region from your platform address, such as eu for eu.insight.rapid7.com.
- 4
Ask your first question: which assets have the most critical vulnerabilities?
Also works from
Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The Rapid7 InsightVM tools are the same everywhere.
FAQ
Questions
Can Memtro change anything in Rapid7 InsightVM?+
Only when you ask, and only what it has been granted: start a vulnerability scan of named assets (sends network probes to those machines); stop a running scan. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.
Who can use a Rapid7 InsightVM connection?+
A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.
Does Memtro store my Rapid7 InsightVM data?+
Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.
How do I connect Rapid7 InsightVM?+
Insight Platform API key and region. In the Insight Platform, open Administration → User API Keys and choose Generate New User Key. A user key acts with that user's permissions.
Connect Rapid7 InsightVM in a few minutes
Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.