• LIST
  • SCOPE
  • TRIAGE
  • HUMAN

How to identify affected assets with your AI

Connect Rapid7 InsightVM to your AI client. Once connected, you can query your entire infrastructure for specific vulnerabilities using natural language.

Ask AI about this page

Short answer

How can I find all assets vulnerable to a specific CVE?

Your AI pulls the CVE details and then scans your asset list to find matches. You get a direct list of vulnerable machines and their identifiers. This breakdown shows you how the AI handles the search.

Where your data lands.

The results of your query.

The AI processes the InsightVM data into these specific outputs.

LIST

Vulnerable asset lists

The AI identifies every host affected by the CVE. You get a clean list of IP addresses and hostnames to target.

SCOPE

Vulnerability impact

The AI pulls the specific CVE details. You see exactly what the threat is and how it affects your environment.

TRIAGE

Prioritized targets

The AI groups assets based on their vulnerability status. You can decide which systems to patch first.

HUMAN

Manual remediation

The AI provides the target list, but you must execute the actual patches. You handle the final security response.

The workflow

What your AI does when the request arrives.

The AI uses your InsightVM tools to isolate the specific threat you're looking for.

  1. Get CVE info

    The AI pulls the specific vulnerability data to understand the threat profile.

    get_vulnerability

  2. Check vulnerabilities

    The AI checks which assets are currently reporting that specific vulnerability.

    get_asset_vulnerabilities

  3. List assets

    The AI gathers the full list of assets to ensure the mapping is complete.

    list_assets

  4. Match and report

    The AI cross-references the vulnerability findings with your asset inventory.

    get_asset_vulnerabilities

Try it

Copy these to start.

Use these prompts to trigger the search immediately.

Starting points

These are opening lines. Replace the CVE IDs and asset names with your own.

Rapid7 InsightVM Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_nmw1NBAd0c7vaxJkPlmlyGDkr9YvNNJBYZZGurqi/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Rapid7 InsightVM capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "rapid7-insightvm-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_nmw1NBAd0c7vaxJkPlmlyGDkr9YvNNJBYZZGurqi/mcp"
    }
  }
}
Copy into chat04

  • Find all assets in Rapid7 InsightVM that are vulnerable to CVE-2023-23397.

  • Which assets in my infrastructure have the highest severity vulnerabilities right now?

  • List all assets that are currently affected by CVE-2021-44228.

  • Show me the vulnerability details for CVE-2024-1234 and tell me which assets are hit.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Rapid7 InsightVM once, then ask.

Link your account once. Your credentials stay encrypted, and you can start querying your vulnerability data immediately.

Connect Rapid7 InsightVM to your AI

FAQ

How this task behaves.

  • 01

    Can the AI patch these vulnerabilities for me?

    No. The AI only reads vulnerability and asset data. You must perform the actual patching through your own management tools.

  • 02

    Can the AI delete assets from InsightVM?

    No. The tools only allow the AI to read and list data. It cannot modify or delete anything in your InsightVM instance.

  • 03

    Does the AI see all my vulnerability data?

    Yes, it can access any vulnerability or asset data that your InsightVM user permissions allow.

  • 04

    How does the AI know which assets are vulnerable?

    It uses the get_asset_vulnerabilities tool to check the vulnerability status of your assets against the CVE you specify.

  • 05

    Can I ask for a list of all assets regardless of vulnerabilities?

    Yes, you can use the list_assets capability to get a full inventory of your infrastructure.

  • More questions about Rapid7 InsightVM? The Connector page answers them. See everything the Rapid7 InsightVM Connector can do

Connect Rapid7 InsightVM to Claude, Cursor, ChatGPT & more