Rapid7

What Rapid7 does

Rapid7 is a Boston-based, publicly traded cybersecurity company (NASDAQ: RPD) founded in 2000 that sells an integrated endpoint-to-cloud security platform — the Rapid7 Command Platform — to more than 11,000 organizations globally. The platform unifies Managed Detection and Response, Exposure Management, Attack Surface Management, Next-Gen SIEM, Cloud-Native Application Protection (InsightCloudSec), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command), with layered managed services including MDR for Microsoft, MDR for Enterprise, Continuous Red Teaming (Vector Command), Managed Application Security, and Incident Response. Technology underpinnings include a multi-region Insight Cloud Platform (US, Canada, Europe, Japan, Australia), Rapid7 Labs threat research, the Metasploit Pro/Framework offensive toolkit, and the recently acquired Kenzo Security agentic AI data mesh for autonomous security investigations.

Revenue is generated predominantly through annual recurring subscription licensing of the Command Platform and its modules, supplemented by recurring managed services revenue from MDR offerings and project-based professional services from Incident Response, Continuous Red Teaming, and Penetration Testing. Pricing is quote-based enterprise subscription, with multi-year contracts common for large customers and a freemium trial available for Attack Surface Management. The go-to-market is enterprise field sales supported by the PACT Partner Program (including MSSP and AWS APN channels), with international presence anchored by offices in Boston, London, and Dublin.

Q1 2026 revenue was $210 million (down 0.3% year-over-year) with annualized recurring revenue of $832 million (down 0.6% year-over-year — the company's first ARR contraction), and full-year 2026 guidance is $836-842 million. The company has executed several acquisitions to broaden platform scope (Minerva Labs in 2023, Noetic Cyber in 2024, Kenzo Security in 2026), added the Cyber GRC Early Access Program in May 2026, and underwent a CEO transition effective June 1, 2026 under a cooperation agreement with activist investor JANA Partners.

Name

Rapid7

Legal name

Rapid7, Inc.

Website

https://rapid7.com

Company type

Public

Founded year

2000

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Rapid7 (NASDAQ: RPD) is a Boston-based cybersecurity vendor selling the unified Rapid7 Command Platform — combining MDR, exposure management, SIEM, CNAPP, vulnerability management, and threat intelligence — to 11,000-plus global organizations via enterprise subscriptions and managed services.

Ownership category

akta.pro rank

Product category

Cybersecurity Platform

NAICS

Software Publishers (5132), Computer Systems Design and Related Services (5415), Other Computer Related Services (541519), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Managed Detection & Response (MDR) (BPAEADAA), Security Operations Center (SOC) as a Service (BPAEADAB), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Cybersecurity platform
• Managed detection response
• Vulnerability management
• Attack surface management
• Cloud security

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Subscription / ARR Platform Licensing: Annualized recurring revenue (ARR) from the Insight Command Platform across Exposure Management, Attack Surface Management, SIEM, CNAPP (InsightCloudSec), Application Security (InsightAppSec), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command). Q1 2026 ARR was $832 million, down 0.6% YoY, marking the first ARR contraction.
2. Managed Detection and Response (MDR) Services: Recurring managed services revenue from 24x7 MDR, MDR for Microsoft, MDR for Enterprise, and Managed Threat Complete, including unlimited incident response and DFIR delivered by Rapid7 experts.
3. Professional Services: Project-based revenue from Incident Response Services, Continuous Red Teaming, Penetration Testing Services, and Managed Vulnerability Management / Managed Application Security engagements.
4. Software License (Perpetual / Subscription Hybrid): Mix of subscription SaaS and licensed on-prem software (e.g., Hosted InsightVM/Nexpose) with total Q1 2026 revenue of $210 million (-0.3% YoY). Full-year 2026 guidance projects $836–$842 million.

Pricing tiers

Go-to-market motion1 record

Core offering

Rapid7 sells the Rapid7 Command Platform, a unified endpoint-to-cloud cybersecurity platform that combines Managed Detection and Response (MDR), Exposure Management, Attack Surface Management, Next-Gen SIEM, Cloud-Native Application Protection (CNAPP), Vulnerability Management, and Threat Intelligence, layered with managed services such as 24x7 MDR, Continuous Red Teaming, Penetration Testing, and Incident Response. The company sells predominantly via subscription and annual contracts to enterprise and mid-market security teams, with Q1 2026 ARR of $832 million and revenue of $210 million.

Product overview

Rapid7 offers an integrated, platform-plus-modules cybersecurity architecture centered on the Rapid7 Command Platform — described by the company as 'the only endpoint to cloud, unified cybersecurity platform.' The Command Platform serves as the unifying layer that combines seven primary product capabilities: Managed Detection and Response (MDR), Exposure Management, Attack Surface Management (ASM), Next-Gen SIEM, Cloud-Native Application Protection (InsightCloudSec/CNAPP), Vulnerability Management (InsightVM), and Threat Intelligence (Threat Command). Layered onto this core platform are several managed services — MDR for Microsoft, MDR for Enterprise, Managed Vulnerability Management, Continuous Red Teaming (Vector Command), Managed Application Security, Penetration Testing Services, and Incident Response Services — along with application security tooling (InsightAppSec). Rapid7 has strengthened the platform via acquisitions of Kenzo Security (agentic AI for autonomous investigations, March 2026) and Minerva Labs (anti-evasion and ransomware prevention, March 2023), and added new modules such as the early-access Cyber GRC Program (May 2026) and Metasploit Pro 5.0.0 for offensive security. Together these products and services provide customers with a continuously managed, AI-driven preemptive security operations stack covering exposure management, detection and response, threat intelligence, governance/risk/compliance, and offensive validation.

Differentiator

Problem solved

Functional benefit

Brands

• Metasploit: Registered trademark of Rapid7 LLC; penetration testing and exploit development framework (Metasploit Pro and Metasploit Community Edition).
• Nexpose
• Vector Command

Products and services

• Rapid7 Command Platform

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability11 records

Feature7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Sophos: Sophos offers endpoint protection, XDR, and MDR services (Sophos MDR) targeting mid-market and SMB customers, and is a frequent competitor to Rapid7 in deals where the buyer is consolidating endpoint and managed detection spend.
• Splunk: Splunk (now part of Cisco) is a leading SIEM and security analytics platform that directly competes with Rapid7's Next-Gen SIEM, and Cisco's broader security portfolio (including Talos threat intelligence) creates additional overlap across the Rapid7 platform.
• CrowdStrike: CrowdStrike's Falcon platform offers endpoint protection, XDR, SIEM (Charlotte AI / LogScale Next-Gen SIEM), and MDR-adjacent services that directly compete with Rapid7's Command Platform across nearly every module. Both vendors target the same enterprise SOC consolidation buyer.
• SentinelOne: SentinelOne's Singularity Platform bundles EDR/XDR, Cloud Workload Security, and Singularity MDR services, directly competing with Rapid7 InsightIDR/MDR/InsightCloudSec for the same enterprise security operations budget.
• Arctic Wolf: Arctic Wolf is a pure-play MDR/SOC-as-a-Service provider that competes head-to-head with Rapid7's Managed Threat Complete and MDR for Enterprise offerings, particularly in the mid-market segment.
• Tenable: Tenable competes directly with Rapid7 InsightVM in vulnerability management and with Exposure Command in exposure management, and is increasingly adding cloud and identity security capabilities that overlap with the Rapid7 platform.
• Qualys: Qualys competes with Rapid7 InsightVM in vulnerability management and with InsightCloudSec in cloud security posture, and has been expanding its own MDR and VM-as-a-service offerings that compete in the same enterprise deals.

Emerging players

• Wiz: Wiz is a fast-growing CNAPP specialist that competes with Rapid7 InsightCloudSec, and following Cisco's announced acquisition, will be bundled into a much broader security platform that could pressure Rapid7 in cloud security deals.

Broad incumbents

• Palo Alto Networks: Palo Alto Networks competes across the full cybersecurity stack via Cortex XSIAM (SIEM/XDR), Prisma Cloud (CNAPP), and Unit 42 MDR, positioning as a broader incumbent than Rapid7 with significantly larger scale and R&D budget.
• Microsoft: Microsoft bundles Defender XDR, Sentinel SIEM, Defender for Cloud (CNAPP), and Security Copilot as part of E5 licensing, creating a default competitor that pressures Rapid7's pricing, particularly in mid-market and Microsoft-heavy enterprise accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/rapid7
• Facebookfacebook.com/rapid7
• LinkedInlinkedin.com/company/rapid7
• Instagraminstagram.com/rapid7

Compliance10 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Subsidiaries2 records

Funding overview

Funding rounds8 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A14 records

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Rapid7