Rapid7
Rapid7 (NASDAQ: RPD) is a Boston-based cybersecurity vendor selling the unified Rapid7 Command Platform — combining MDR, exposure management, SIEM, CNAPP, vulnerability management, and threat intelligence — to 11,000-plus global organizations via enterprise subscriptions and managed services.
- Company typePublic
- Founded2000
- HeadquartersBoston, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What Rapid7 does
Rapid7 is a Boston-based, publicly traded cybersecurity company (NASDAQ: RPD) founded in 2000 that sells an integrated endpoint-to-cloud security platform — the Rapid7 Command Platform — to more than 11,000 organizations globally. The platform unifies Managed Detection and Response, Exposure Management, Attack Surface Management, Next-Gen SIEM, Cloud-Native Application Protection (InsightCloudSec), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command), with layered managed services including MDR for Microsoft, MDR for Enterprise, Continuous Red Teaming (Vector Command), Managed Application Security, and Incident Response. Technology underpinnings include a multi-region Insight Cloud Platform (US, Canada, Europe, Japan, Australia), Rapid7 Labs threat research, the Metasploit Pro/Framework offensive toolkit, and the recently acquired Kenzo Security agentic AI data mesh for autonomous security investigations.
Revenue is generated predominantly through annual recurring subscription licensing of the Command Platform and its modules, supplemented by recurring managed services revenue from MDR offerings and project-based professional services from Incident Response, Continuous Red Teaming, and Penetration Testing. Pricing is quote-based enterprise subscription, with multi-year contracts common for large customers and a freemium trial available for Attack Surface Management. The go-to-market is enterprise field sales supported by the PACT Partner Program (including MSSP and AWS APN channels), with international presence anchored by offices in Boston, London, and Dublin.
Q1 2026 revenue was $210 million (down 0.3% year-over-year) with annualized recurring revenue of $832 million (down 0.6% year-over-year — the company's first ARR contraction), and full-year 2026 guidance is $836-842 million. The company has executed several acquisitions to broaden platform scope (Minerva Labs in 2023, Noetic Cyber in 2024, Kenzo Security in 2026), added the Cyber GRC Early Access Program in May 2026, and underwent a CEO transition effective June 1, 2026 under a cooperation agreement with activist investor JANA Partners.
Rapid7 firmographics
Firmographics- Name
- Rapid7
- Legal name
- Rapid7, Inc.
- Website
- https://rapid7.com
- Company type
- Public
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- Rapid7 (NASDAQ: RPD) is a Boston-based cybersecurity vendor selling the unified Rapid7 Command Platform — combining MDR, exposure management, SIEM, CNAPP, vulnerability management, and threat intelligence — to 11,000-plus global organizations via enterprise subscriptions and managed services.
- Ownership category
- akta.pro rank
Rapid7 industry classification
Industry- Product category
- Cybersecurity Platform
- NAICS
- Software Publishers (5132), Computer Systems Design and Related Services (5415), Other Computer Related Services (541519), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG)
- akta.pro secondary industries
- Managed Detection & Response (MDR) (BPAEADAA), Security Operations Center (SOC) as a Service (BPAEADAB), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
Keywords
Where Rapid7 is headquartered
LocationHeadquarters
- HQ city
- Boston
- HQ country
- United States
- HQ region
- North America
Markets served
Rapid7 business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription / ARR Platform Licensing: Annualized recurring revenue (ARR) from the Insight Command Platform across Exposure Management, Attack Surface Management, SIEM, CNAPP (InsightCloudSec), Application Security (InsightAppSec), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command). Q1 2026 ARR was $832 million, down 0.6% YoY, marking the first ARR contraction.
- Managed Detection and Response (MDR) Services: Recurring managed services revenue from 24x7 MDR, MDR for Microsoft, MDR for Enterprise, and Managed Threat Complete, including unlimited incident response and DFIR delivered by Rapid7 experts.
- Professional Services: Project-based revenue from Incident Response Services, Continuous Red Teaming, Penetration Testing Services, and Managed Vulnerability Management / Managed Application Security engagements.
- Software License (Perpetual / Subscription Hybrid): Mix of subscription SaaS and licensed on-prem software (e.g., Hosted InsightVM/Nexpose) with total Q1 2026 revenue of $210 million (-0.3% YoY). Full-year 2026 guidance projects $836–$842 million.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Quote-based subscription pricing for enterprise Command Platform buyers |
| Freemium | Pay-as-you-go | Free Trial for Attack Surface Management |
| Subscription | Annual | MDR / Managed Services pricing |
| Hybrid | Multi-year contract | Enterprise multi-year contracts |
Go-to-market motion1 record
Rapid7 product offering
Product offeringCore offering
Rapid7 sells the Rapid7 Command Platform, a unified endpoint-to-cloud cybersecurity platform that combines Managed Detection and Response (MDR), Exposure Management, Attack Surface Management, Next-Gen SIEM, Cloud-Native Application Protection (CNAPP), Vulnerability Management, and Threat Intelligence, layered with managed services such as 24x7 MDR, Continuous Red Teaming, Penetration Testing, and Incident Response. The company sells predominantly via subscription and annual contracts to enterprise and mid-market security teams, with Q1 2026 ARR of $832 million and revenue of $210 million.
Product overview
Rapid7 offers an integrated, platform-plus-modules cybersecurity architecture centered on the Rapid7 Command Platform — described by the company as 'the only endpoint to cloud, unified cybersecurity platform.' The Command Platform serves as the unifying layer that combines seven primary product capabilities: Managed Detection and Response (MDR), Exposure Management, Attack Surface Management (ASM), Next-Gen SIEM, Cloud-Native Application Protection (InsightCloudSec/CNAPP), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command). Layered onto this core platform are several managed services — MDR for Microsoft, MDR for Enterprise, Managed Vulnerability Management, Continuous Red Teaming (Vector Command), Managed Application Security, Penetration Testing Services, and Incident Response Services — along with application security tooling (InsightAppSec). Rapid7 has strengthened the platform via acquisitions of Kenzo Security (agentic AI for autonomous investigations, March 2026) and Minerva Labs (anti-evasion and ransomware prevention, March 2023), and added new modules such as the early-access Cyber GRC Program (May 2026) and Metasploit Pro 5.0.0 for offensive security. Together these products and services provide customers with a continuously managed, AI-driven preemptive security operations stack covering exposure management, detection and response, threat intelligence, governance/risk/compliance, and offensive validation.
Differentiator
Problem solved
Functional benefit
Brands
- Metasploit: Registered trademark of Rapid7 LLC; penetration testing and exploit development framework (Metasploit Pro and Metasploit Community Edition).
- Nexpose
- Vector Command
Products and services
- Rapid7 Command Platform
Companies that use Rapid7
Customer profileIdeal customer profiles3 records
Rapid7 technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability11 records
Feature7 records
Rapid7 partnerships and signals
Strategic signalRecent moves6 records
Expansion highlights6 records
Rapid7 competitors and assessment
Company assessmentDirect peers
- Sophos: Sophos offers endpoint protection, XDR, and MDR services (Sophos MDR) targeting mid-market and SMB customers, and is a frequent competitor to Rapid7 in deals where the buyer is consolidating endpoint and managed detection spend.
- Splunk: Splunk (now part of Cisco) is a leading SIEM and security analytics platform that directly competes with Rapid7's Next-Gen SIEM, and Cisco's broader security portfolio (including Talos threat intelligence) creates additional overlap across the Rapid7 platform.
- CrowdStrike: CrowdStrike's Falcon platform offers endpoint protection, XDR, SIEM (Charlotte AI / LogScale Next-Gen SIEM), and MDR-adjacent services that directly compete with Rapid7's Command Platform across nearly every module. Both vendors target the same enterprise SOC consolidation buyer.
- SentinelOne: SentinelOne's Singularity Platform bundles EDR/XDR, Cloud Workload Security, and Singularity MDR services, directly competing with Rapid7 InsightIDR/MDR/InsightCloudSec for the same enterprise security operations budget.
- Arctic Wolf: Arctic Wolf is a pure-play MDR/SOC-as-a-Service provider that competes head-to-head with Rapid7's Managed Threat Complete and MDR for Enterprise offerings, particularly in the mid-market segment.
- Tenable: Tenable competes directly with Rapid7 InsightVM in vulnerability management and with Exposure Command in exposure management, and is increasingly adding cloud and identity security capabilities that overlap with the Rapid7 platform.
- Qualys: Qualys competes with Rapid7 InsightVM in vulnerability management and with InsightCloudSec in cloud security posture, and has been expanding its own MDR and VM-as-a-service offerings that compete in the same enterprise deals.
Emerging players
- Wiz: Wiz is a fast-growing CNAPP specialist that competes with Rapid7 InsightCloudSec, and following Cisco's announced acquisition, will be bundled into a much broader security platform that could pressure Rapid7 in cloud security deals.
Broad incumbents
- Palo Alto Networks: Palo Alto Networks competes across the full cybersecurity stack via Cortex XSIAM (SIEM/XDR), Prisma Cloud (CNAPP), and Unit 42 MDR, positioning as a broader incumbent than Rapid7 with significantly larger scale and R&D budget.
- Microsoft: Microsoft bundles Defender XDR, Sentinel SIEM, Defender for Cloud (CNAPP), and Security Copilot as part of E5 licensing, creating a default competitor that pressures Rapid7's pricing, particularly in mid-market and Microsoft-heavy enterprise accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights7 records
Customer concentration
Rapid7 social profiles
Digital presenceRapid7 compliance and trust
Trust signalCompliance10 records
Rapid7 financial estimates
Financial estimateRevenue estimate
Valuation estimate
Rapid7 leadership team
Management profileNumber of profiles
Profiles10 records
Rapid7 subsidiaries and ownership
Company hierarchySubsidiaries2 records
Rapid7 funding detail
Funding detailFunding overview
Funding rounds8 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Rapid7 M&A and investment
M&A and investmentM&A14 records
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Rapid7
What does Rapid7 do?
Rapid7 sells the Rapid7 Command Platform, a unified endpoint-to-cloud cybersecurity platform that combines Managed Detection and Response (MDR), Exposure Management, Attack Surface Management, Next-Gen SIEM, Cloud-Native Application Protection (CNAPP), Vulnerability Management, and Threat Intelligence, layered with managed services such as 24x7 MDR, Continuous Red Teaming, Penetration Testing, and Incident Response. The company sells predominantly via subscription and annual contracts to enterprise and mid-market security teams, with Q1 2026 ARR of $832 million and revenue of $210 million.
Is Rapid7 a public or private company?
Rapid7 is a public company. It is classified as public and is currently operating.
When was Rapid7 founded?
Rapid7 was founded in 2000. It employs 1,001 to 5,000 people.
Where is Rapid7 based?
Rapid7 is headquartered in Boston, United States, in the North America region.
How does Rapid7 make money?
Four revenue lines are on record. Subscription / ARR Platform Licensing is the primary driver. The others are managed Detection and Response (MDR) Services, professional Services and software License (Perpetual / Subscription Hybrid).
Who are Rapid7's main competitors?
Direct peers on record are Sophos, Splunk, CrowdStrike, SentinelOne, Arctic Wolf, Tenable and Qualys. Wiz is listed as an emerging player. Broad incumbents are Palo Alto Networks and Microsoft.
Does Rapid7 have an API?
Yes. Rapid7 offers Product Extensions (https://extensions.rapid7.com/) and developer-facing Product Documentation (https://docs.rapid7.com/) for the Insight platform. The platform supports integrations via a Product Extensions marketplace and product toolkits, enabling partners and customers to build integrations with Rapid7's security and analytics products. SDK/client library languages are not specified in the source materials. Developer documentation is at docs.rapid7.com.
What industry is Rapid7 in?
Rapid7's product category is Cybersecurity Platform. Its primary akta.pro industry code is HDADAGAG, Managed Detection & Response (MDR) & SOC Services, with a secondary code of BPAEADAA, Managed Detection & Response (MDR). Its NAICS code is 5132 and its SIC code is 7370.