Rapid7 – Senior Technical and Interactive Media Writer

Challenge: The product requires customers to enter network credentials in order to identify what an attacker would be able to do if they gained access to credentials at that level. The users of this product often need to make the case to others in their organization as to why they should use such high-level network credentials in their work.

How I helped: Found a relevant article in a magazine that addressed the problems with using incorrect or weak credentials. Used own knowledge of product to think of solutions. Interviewed other people with detailed knowledge of software and customers. Discussed the specific architecture of the Nexpose product and how it uses credentials. Recommended resources for how to configure credentials and how to verify that they are configured correctly.

Solution: Blog post that addresses why and how to use credentials.

People involved: Developers, product managers, solutions engineers