Rapid7, Inc.

01. Company

Rapid7, Inc. (NASDAQ: RPD) operates as a global provider of AI-powered managed cybersecurity operations designed to advance organizational cyber resilience. The company leverages its Rapid7 Command Platform to integrate security data, threat intelligence, and exposure management capabilities. Recognized for preemptive managed detection and response (MDR), Rapid7 aims to unify security operations and disrupt attackers through continuous innovation. The firm maintains a public presence as a sustaining partner in federal information resources management and actively publishes threat landscape reports to guide enterprise security strategies and operational improvements.

02. Product

The Rapid7 Command Platform delivers unified visibility and analytics across enterprise security infrastructure. Core modules include InsightAppSec for application security testing, InsightIDR for threat detection and response, InsightVM for vulnerability management, and InsightCloudSec for cloud security posture management. The platform operates exclusively in the cloud, which may present deployment limitations for organizations requiring on-premises or air-gapped architectures. Rapid7 positions the suite as an extensible framework that consolidates exposure data with detection tooling to streamline security operations and reduce administrative overhead for protection teams managing complex environments.

03.Security & Risk

Rapid7 maintains a documented security posture anchored by an ISO 27001 certified Information Security Management System (ISMS), which undergoes rigorous annual third-party audits conducted by Schellman. The company also completes annual SOC 2 Type II audits to validate the effectiveness of its security controls. Rapid7 participates in the OneTrust Risk Exchange, granting public access to compliance documentation without requiring an NDA. Additional trust materials, including detailed SOC 2 reports, are available upon request through customer account representatives to support vendor risk assessments and procurement requirements.

Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.

Last observed: Aug 12, 2026, 06:22 PM

• Security headers

  0/6 security headers present

  highFail

• Email authentication (SPF / DMARC)

  highFail

• DNS presence

  lowPass

• Certificate transparency exposure

  crt.sh unavailable

05. AI Risk

How this vendor uses AI/ML with customer data - model providers, training stance, subprocessors, and relevant DPA language when publicly documented.

AI exposure tier: Moderate AI Exposure

Rapid7 explicitly markets itself as a leader in AI-powered managed cybersecurity operations. Its Command Platform utilizes AI to enrich security data and threat intelligence, aiming to automate detection and disrupt attackers. The company references AI-driven automation in its threat landscape reports but does not publicly disclose specific underlying LLM providers, customer data training policies, or opt-out mechanisms in the provided sources. AI integration appears focused on internal security analytics rather than generative AI services for end-users, resulting in a moderate exposure profile.

Training on customer data

Training stance unknown

06. Events

No notable public events recorded for this evaluation.

07. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Tenable

  Vulnerability management and exposure management

  Vet this vendor →

• Qualys

  Vulnerability management and cloud security

  Vet this vendor →

• CrowdStrike

  MDR and threat detection

  Vet this vendor →

• Arctic Wolf

  MDR services

  Vet this vendor →

08. Recent News

Recent corporate developments indicate Rapid7 exceeded financial estimates and raised its profit outlook, a period that coincided with a 12% reduction in staff. The company has garnered multiple industry accolades, including the Managed Security Award at the Computing Security Excellence Awards and recognition in CRN’s 2026 Security 100 list for Security Operations, Risk, and Threat Intelligence. Additionally, Rapid7 was named a Leader in the 2026 IDC MarketScape for Worldwide MDR Services, reinforcing its market position in managed detection and response capabilities and highlighting ongoing product innovation.

09. Citations

1. [1] The company maintains an ISO 27001 certified ISMS audited by Schellman and undergoes annual SOC 2 Type II audits. Compliance - Rapid7
2. [2] Rapid7 participates in the OneTrust Risk Exchange for public compliance documentation. Compliance - Rapid7
3. [3] Rapid7 operates as a global provider of AI-powered managed cybersecurity operations and maintains a public presence as a sustaining partner. Rapid7 - Association for Federal Information Resources ...
4. [4] Rapid7 exceeded financial estimates, raised profit outlook, and cut 12% of staff. Rapid7 beats estimates, raises profit outlook and cuts 12% of staff - SiliconANGLE
5. [5] Core product modules include InsightAppSec, InsightIDR, InsightVM, and InsightCloudSec, operating exclusively in the cloud. Best Rapid7 alternatives and competitors in 2026
6. [6] The company received the Managed Security Award, CRN Security 100 recognition, and IDC MarketScape Leader status. Newsroom - Rapid7

13. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.