Getting Started


This document describes nature and order in which we tackle the documentation.


This set of documentation is for developing integrations (A.K.A plugins) for the insightConnect and legacy Komand SOAR (Security Orchestration, Automation, and Response) products.

Note: You can develop plugins without having the insightConnect or legacy Komand product but you must have the product to use and orchestrate your plugins.

Plugins can be shared and contributed to the Marketplace or they can be kept and used privately, .

We have over 200+ plugins available as open-source on Github. Contributions will improve integrations for all users.


The standalone tooling is available below through Linux or MacOS packages and is compatible with insightConnect or legacy Komand. The packages are the preferred installation method as they will keep your tooling current with ease.

Once the packages are installed the binary is located at /usr/local/bin/icon-plugin.

Debian Linux

$ curl -s | sudo bash

$ sudo apt-get install icon-plugin

Enterprise Linux

$ curl -s | sudo bash

$ sudo yum install icon-plugin


$ brew tap rapid7/icon-plugin-homebrew

$ brew install icon-plugin

See, the Plugin Tooling documentation for more information on using the tools.