Patents Assigned to Rapid7 LLC
  • Patent number: 10262142
    Abstract: The field of the invention relates to systems and methods for advanced dynamic analysis scanning for vulnerabilities using a universal translator. In an embodiment, the system includes a dynamic analysis scanner subsystem communicatively coupled to a networked computing system; the scanner subsystem is configured to crawl one or more dynamic web pages of the networked computing system, generate test data for the networked computing system, transmit the generated test data to the networked computing system, and record the networked computing system's response to the generated test data. The scanner may further comprise a universal translator configured to detect vulnerabilities and generate test data for the dynamic web pages of the networked computing system. The scanner subsystem may further comprise a smart scheduler.
    Type: Grant
    Filed: March 14, 2016
    Date of Patent: April 16, 2019
    Assignee: Rapid7 LLC
    Inventors: Dan Kuykendall, Matthew Cohen, Dmitriy Kashitsyn, Andrew Tisdale, Michael J. Morton, Artem Astrakhantsev
  • Patent number: 9411965
    Abstract: A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities based on base and optional CVSS vectors and additional factors that represent the evolving nature of vulnerabilities. Likewise, the security tool can determine an overall risk for vulnerabilities, an asset, and/or a collection of assets that encompasses a global view of an asset's risk and/or collection of assets' risk, business considerations of an entity that own and controls the asset and/or the collection of assets, and the entity's associations.
    Type: Grant
    Filed: September 22, 2015
    Date of Patent: August 9, 2016
    Assignee: Rapid7 LLC
    Inventors: Anastasios Giakouminakis, Sheldon E Malm, Chad Loder, Richard D Li
  • Patent number: 9251282
    Abstract: Systems and methods of determining compliance of content in a website or web application are disclosed. The systems and methods comprise a compliance tool to retrieve data associated with website or web application content. The compliance tool can scan the data to determine references to network locations. The compliance tool can compare the references to one or more approval rules to determine whether the references comply with the approval rules. A report can be compiled and outputted that indicates which references comply and which references do not comply with the approval rules. A user can have the option to add non-complying references to an approved list. The compliance tool can further remove non-complying references from the website or web application data and/or register non-complying references with a firewall.
    Type: Grant
    Filed: June 21, 2010
    Date of Patent: February 2, 2016
    Assignee: RAPID7 LLC
    Inventor: Chad Loder
  • Patent number: 9141805
    Abstract: A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities based on base and optional CVSS vectors and additional factors that represent the evolving nature of vulnerabilities. Likewise, the security tool can determine an overall risk for vulnerabilities, an asset, and/or a collection of assets that encompasses a global view of an asset's risk and/or collection of assets' risk, business considerations of an entity that own and controls the asset and/or the collection of assets, and the entity's associations.
    Type: Grant
    Filed: November 17, 2011
    Date of Patent: September 22, 2015
    Assignee: RAPID7 LLC
    Inventors: Anastasios Giakouminakis, Sheldon E. Malm, Chad Loder, Richard D. Li
  • Patent number: D631022
    Type: Grant
    Filed: July 17, 2009
    Date of Patent: January 18, 2011
    Assignee: Rapid7 LLC
    Inventor: Harold Jason Treulich