Rapid7, Inc.

RPD

$11.20

-2.35%

2026-09-04 10:00:32 EDT-$0.27

Technology

Software - Infrastructure

NASDAQ

Active Trading

Rapid7, Inc. specializes in delivering cutting-edge cybersecurity solutions. Central to its offerings is a sophisticated, cloud-native platform designed to equip organizations with ...

Key Products & Solutions of RPD

The Rapid7 Command Platform is a cloud-native, AI-powered cybersecurity platform that provides a single pane of glass for managing an organization's security posture. It combines exposure management (vulnerability management, attack surface management, cloud security) with detection and response (SIEM, MDR, threat intelligence). The platform leverages automation and analytics to prioritize risks, detect threats in real-time, and orchestrate responses across endpoints, cloud, and on-premises environments. It includes modules such as InsightVM, InsightCloudSec, InsightAppSec, Metasploit, Nexpose, Incident Command, and Threat Command, all integrated for seamless workflows.

Price Range: Varies by subscription and deployment; contact for quote

Pain Points: Fragmented security tools creating blind spots; difficulty prioritizing vulnerabilities; slow incident response; lack of unified visibility across hybrid environments; alert fatigue from false positives.

Solutions: Unified platform reduces tool sprawl; AI-driven prioritization focuses on critical risks; automated detection and response accelerates mean time to respond; 24/7 managed services (MDR) extend security teams; threat intelligence provides context for faster decisions.

Target Users: Mid-size to large enterprises across technology, financial services, healthcare, manufacturing, retail, and government sectors; security operations teams (SOC) needing scalable, integrated cybersecurity.

Supply Chain

Cloud infrastructure (AWS, Azure, GCP)Data analytics engine (AI/ML models)Threat intelligence feeds (Rapid7 Labs, external sources)Automation and orchestration frameworkThird-party integrations (e.g., Microsoft, AWS, Splunk)

Surface Command is an attack surface management (ASM) solution that provides a unified view of an organization's entire digital estate, including cloud, web, network, and third-party assets. It automatically discovers and maps assets, assesses exposures, and prioritizes remediation based on risk and impact. The tool integrates with other Rapid7 products and third-party systems to enrich findings and streamline workflows. It helps security teams reduce blind spots and proactively manage risks from new, unmanaged, or forgotten assets.

Price Range: Included as part of the Command Platform or available as a standalone subscription; contact for pricing.

Pain Points: Shadow IT and unknown assets expanding the attack surface; manual asset inventories; lack of continuous monitoring; difficulty prioritizing exposures across diverse environments.

Solutions: Automated discovery and classification; continuous monitoring of external and internal assets; prioritized risk scoring; integration with vulnerability management and SIEM for consolidated remediation.

Target Users: Security teams in mid-large enterprises needing to manage and monitor their rapidly expanding digital footprint; especially beneficial for organizations with hybrid cloud environments.

Supply Chain

Cloud infrastructureAsset discovery and crawling enginesThreat intelligence feedsRisk scoring algorithms (AI/ML)Integration APIs for third-party connectors

Exposure Command is an exposure management solution that extends traditional vulnerability management by continuously assessing and validating exposures across endpoints, cloud, and applications. It provides real-time visibility into vulnerabilities, misconfigurations, and policy gaps, and uses threat intelligence and business context to prioritize remediation. The solution automates data collection, correlation, and reporting, enabling security teams to reduce the time between discovery and remediation. It is a key component of Rapid7’s Command Platform, integrating with other modules for a unified risk view.

Price Range: Varies by subscription; typically bundled with Command Platform or available as an add-on.

Pain Points: Overwhelming volume of vulnerabilities with no clear priorities; stale scan data; manual validation of risks; lack of integration with remediation tools; difficulty measuring exposure reduction over time.

Solutions: Real-time, continuous asset and vulnerability visibility; risk-based prioritization using threat context and asset criticality; automated re-scanning and validation; integration with ticketing and automation platforms for faster remediation.

Target Users: Organizations with mature vulnerability management programs looking to adopt a risk-based exposure management approach; security operations and vulnerability management teams in mid-large enterprises.

Supply Chain

Cloud infrastructureVulnerability scanning agents (on-premises and cloud)Risk analytics engineThreat intelligence feeds (Rapid7 Labs)Automated remediation workflows

InsightVM is a vulnerability management solution that enables organizations to discover, assess, and prioritize vulnerabilities across on-premises, cloud, and containerized environments. It provides live dashboards, real-time risk scoring, and integration with Rapid7’s threat intelligence to focus on the most critical vulnerabilities. The solution supports agent-based and agentless scanning, and offers automated remediation workflows. InsightVM helps security teams reduce risk by providing actionable insights and streamlining the vulnerability management lifecycle.

Price Range: Subscription-based pricing based on number of assets and features; contact for quote.

Pain Points: Manual vulnerability scanning processes; inability to prioritize vulnerabilities effectively; lack of visibility into container and cloud workloads; slow remediation cycles; compliance reporting challenges.

Solutions: Automated, continuous scanning with live dashboards; risk-based prioritization using threat context; broad coverage across hybrid environments (physical, virtual, cloud, containers); integration with orchestration tools for automated remediation; compliance and reporting capabilities.

Target Users: Security and IT operations teams in mid-to-large enterprises across all industries; organizations with diverse IT environments including on-premises and cloud.

Supply Chain

Cloud platform for data aggregation and analyticsOn-premises or cloud-hosted scanning agentsVulnerability signatures and threat intelligenceRisk scoring engine (AI/ML)Integration APIs (e.g., ITSM, SIEM)

InsightCloudSec (formerly DivvyCloud) is a cloud-native application protection platform (CNAPP) that secures multi-cloud and hybrid cloud environments. It offers cloud security posture management (CSPM), cloud workload protection (CWP), infrastructure entitlements management (CIEM), and IaC security. The solution continuously monitors cloud resources for misconfigurations, compliance violations, and threats, and automates remediation. It integrates with the Command Platform for unified visibility and response.

Price Range: Subscription-based based on cloud accounts and features; contact for quote.

Pain Points: Cloud misconfigurations leading to breaches; lack of visibility across multiple cloud providers; manual compliance auditing; inability to detect threats in cloud workloads; slow response to cloud security events.

Solutions: Continuous monitoring of cloud resources; automated detection of misconfigurations and policy violations; real-time compliance reporting (CIS, PCI, HIPAA, etc.); cloud workload protection; CIEM for identity and access management; automated remediation via workflows.

Target Users: Organizations with multi-cloud or hybrid cloud deployments; cloud security teams, DevOps, and SecOps teams in mid-large enterprises; regulated industries requiring continuous compliance.

Supply Chain

Cloud infrastructure (multi-cloud support)Cloud API integrations (AWS, Azure, GCP, OCI, etc.)Compliance frameworks (CIS, NIST, SOC 2, etc.)Threat intelligence and anomaly detection engineAutomation engine for remediation

InsightAppSec is a dynamic application security testing (DAST) tool that scans web applications and APIs to uncover security flaws such as SQL injection, cross-site scripting (XSS), and authentication vulnerabilities. It provides automated scanning with customizable attack templates, and integrates with DevOps pipelines for continuous testing. The solution offers detailed remediation guidance and risk scoring to help developers and security teams fix issues quickly.

Price Range: Subscription-based based on number of applications and scans; contact for quote.

Pain Points: Manual security testing bottlenecks; late discovery of vulnerabilities in production; lack of developer-friendly integration; inability to test APIs effectively; overwhelming false positives.

Solutions: Automated DAST scanning with high accuracy; reduced false positives via context-aware analysis; seamless integration with CI/CD pipelines and issue trackers (Jira, GitLab); clear remediation guidance; scalable scanning for large application portfolios.

Target Users: DevSecOps teams, application security (AppSec) professionals, and software developers in organizations of all sizes; particularly valuable for companies with a large number of web applications and APIs.

Supply Chain

Cloud scanning infrastructureAttack engine and vulnerability signaturesApplication crawling and discovery capabilitiesIntegration APIs (CI/CD, bug tracking)Risk scoring and reporting engine

Metasploit is a penetration testing and security validation framework used by security professionals worldwide. It provides a comprehensive library of exploits, payloads, and post-exploitation modules to simulate attacks against networks, applications, and systems. The framework supports both manual and automated testing, and is available in a free open-source edition (Metasploit Framework) and a commercial Pro edition with advanced features like social engineering, web application testing, and reporting.

Price Range: Free (Metasploit Framework) or subscription-based for Metasploit Pro (contact for quote).

Pain Points: Need for validated, real-world attack scenarios; manual exploitation efforts; difficulty simulating advanced persistent threats; compliance requirements for regular penetration testing; lack of integration with vulnerability management.

Solutions: Comprehensive exploit and payload library; automated attack workflows; integration with vulnerability scanners to validate findings; social engineering modules; detailed reporting for compliance and remediation.

Target Users: Penetration testers, red teams, security researchers, and consultants; enterprises needing regular security validation for compliance (PCI DSS, HIPAA); organizations with mature security testing programs.

Supply Chain

Exploit database and module library (community and commercial)Payload generation enginesIntegration with Rapid7 products (InsightVM, Nexpose)Reporting and collaboration features

Nexpose is an on-premises vulnerability scanner that performs deep, real-time scanning of on-premises networks, endpoints, and applications. It discovers vulnerabilities, misconfigurations, and malware, and provides risk scoring based on threat intelligence. Nexpose is integrated with Metasploit for vulnerability validation. It is ideal for organizations with strict data residency or air-gapped environments, and serves as a complement to InsightVM for hybrid deployments.

Price Range: Licensed per asset or per concurrent scan; contact for quote.

Pain Points: Need for offline or air-gapped scanning; data residency compliance; real-time vulnerability detection without cloud connectivity; integration with existing on-premises security tools.

Solutions: On-premises deployment for full control; real-time scanning and risk assessment; integration with Metasploit for validation; extensive reporting; support for complex network architectures.

Target Users: Organizations with strict data sovereignty or compliance requirements; government and defense contractors; enterprises with large on-premises footprints that cannot use cloud-based scanning.

Supply Chain

Vulnerability signatures and threat intelligence databaseScanning engine and agent technologyRisk scoring algorithmsIntegration with MetasploitReporting and dashboard capabilities

Incident Command is Rapid7’s next-generation SIEM that provides cloud-native log management, threat detection, and incident response capabilities. It ingests data from hundreds of sources (endpoints, cloud, network, applications), applies AI-driven analytics and threat intelligence to detect suspicious activity, and automates response workflows. The platform is designed for scalability and ease of use, offering pre-built correlation rules, visual investigation tools, and integration with the broader Command Platform for unified detection and response.

Price Range: Subscription-based based on data volume and features; contact for quote.

Pain Points: Scalability limitations of legacy SIEMs; high cost and complexity of on-premises SIEM; alert fatigue from false positives; slow manual investigations; lack of cloud and cloud workload visibility.

Solutions: Cloud-native, elastic scalability; AI-powered threat detection reduces false positives; integrated threat intelligence; visual investigation workbench; automated response playbooks; compliance and reporting capabilities.

Target Users: Security operations centers (SOC) of mid-to-large enterprises; organizations migrating from on-premises SIEM to cloud; teams needing integrated detection and response with vulnerability management.

Supply Chain

Cloud infrastructure for log ingestion and storageAI/ML analytics engine for anomaly detectionThreat intelligence feeds (Rapid7 Labs, STIX/TAXII)Pre-built correlation rules and detection logicAutomated response and orchestration (SOAR) capabilities

Threat Command (formerly IntSights) is a digital risk protection (DRP) platform that provides external threat intelligence and protection against brand impersonation, data leaks, phishing, and other cyber threats targeting an organization's digital footprint. It monitors the clear and dark web, social media, and common attack channels to detect and disrupt threats. The solution integrates with the Command Platform for incident response and risk management.

Price Range: Subscription-based based on assets monitored and features; contact for quote.

Pain Points: Visibility into external threats targeting the organization; brand impersonation and phishing attacks; data leaks from third parties or employees; lack of integration between external threat intel and internal security tools.

Solutions: Continuous monitoring of external channels (clear web, dark web, social media); detection of brand abuse, credential leaks, and fraudulent domains; automated alerts and takedown actions; integration with SIEM for contextualized alerts.

Target Users: Security teams, brand protection teams, and executive protection teams in mid-to-large enterprises; organizations in high-risk sectors (financial services, technology, healthcare) that are frequently targeted by external threats.

Supply Chain

Web and dark web monitoring infrastructureThreat intelligence feeds (open source and proprietary)Risk scoring analyticsAutomated takedown and response workflowsIntegration with SIEM and ticketing systems

Rapid7's MDR service provides round-the-clock monitoring, detection, and response using the Command Platform. A team of security analysts (SOC analysts, incident responders, and DFIR experts) triages alerts, investigates incidents, and performs remediation actions on behalf of the client. The service includes threat hunting, proactive threat intelligence, and unlimited incident response including digital forensics. It is designed to fill skills gaps and provide mature security operations without the overhead of building an in-house SOC.

Price Range: Subscription-based managed service; pricing depends on assets covered and service level; contact for quote.

Pain Points: Shortage of skilled cybersecurity staff; difficulty scaling security operations; high cost of building and maintaining an in-house SOC; slow incident response and remediation; lack of 24/7 coverage.

Solutions: 24/7 continuous monitoring and analysis; expert incident response and forensic investigation; proactive threat hunting; automated detection and response; unlimited incident response included; access to cutting-edge technology and threat intelligence.

Target Users: Organizations of all sizes lacking internal security expertise or resources to run a 24/7 SOC; particularly beneficial for mid-size enterprises, managed service providers (MSSPs), and industries with high compliance demands (finance, healthcare, government).

Supply Chain

Rapid7 Command Platform (technology stack)SOC analysts and incident responders (human expertise)Threat intelligence from Rapid7 LabsAutomation and orchestration workflowsIntegration with customer infrastructure (endpoint, cloud, network)

Supply Chain of RPD

Upstream / Downstream / Proxies

Upstream

Amazon Web Services (AWS)NASDAQ:AMZN Google Cloud Platform (GCP)NASDAQ:GOOGL Snowflake Inc.NYSE:SNOW Salesforce Inc.NYSE:CRM Atlassian CorporationNASDAQ:TEAM ServiceNow Inc.NYSE:NOW Cisco Systems Inc.NASDAQ:CSCO CyberArk Software Ltd.NASDAQ:CYBRFivetran Inc.

Downstream

Carahsoft Technology Corp.Infinigate Group (Infinigate Deutschland GmbH)Exclusive Networks S.A.EPA:EXNAPTSecure TechnologiesSoftcat plcLSE:SCTInsight Enterprises Inc.NASDAQ:NSITSoftwareOne Holding AGSWX:SWONLongwall SecurityMEO (Managed Enterprise Operations)Cythera Pty LtdIntegrity360U.S. Federal Government (via Carahsoft/GSA Schedule)UK Government (via G-Cloud Framework)Financial Services EnterprisesHigher Education Institutions (300+)

Proxies

Tenable Holdings, Inc.NASDAQ:TENB Qualys, Inc.NASDAQ:QLYS CrowdStrike Holdings, Inc.NASDAQ:CRWD Palo Alto Networks, Inc.NASDAQ:PANW

About UsPrivacy PolicyTerms of ServiceDisclaimerStock DirectoryETFsIndices13F HoldingsAnalyst TargetsFree ToolsTechnology MapJoin our Slack

Plutux is not an investment adviser. Market data and AI-generated analysis are for information and education only, not investment advice. Disclaimer

No matching stocks found

Rapid7, Inc.

Key Products & Solutions of RPD

Rapid7 Command Platform

Surface Command (Attack Surface Management)

Exposure Command (Exposure Management)

InsightVM (Vulnerability Management)

InsightCloudSec (Cloud-Native Application Protection)

InsightAppSec (Application Security)

Metasploit (Penetration Testing)

Nexpose (On-Premises Vulnerability Scanner)

Incident Command (Next-Gen SIEM)

Threat Command (Digital Risk Protection)

Managed Detection and Response (MDR)

Supply Chain of RPD

Upstream

Downstream

Proxies

Key Products & Solutions of RPD

Rapid7 Command Platform

Surface Command (Attack Surface Management)

Exposure Command (Exposure Management)

InsightVM (Vulnerability Management)

InsightCloudSec (Cloud-Native Application Protection)

InsightAppSec (Application Security)

Metasploit (Penetration Testing)

Nexpose (On-Premises Vulnerability Scanner)

Incident Command (Next-Gen SIEM)

Threat Command (Digital Risk Protection)

Managed Detection and Response (MDR)

Supply Chain of RPD

Upstream

Downstream

Proxies