Rapid7, Inc. is an American cybersecurity company headquartered in Boston, Massachusetts. It serves organizations seeking to better understand their exposure to attacks and strengthen their monitoring capabilities. Its offering combines software, data analysis and human expertise, with an approach that links risk prevention to incident handling. Its corporate website is available at rapid7.com.
A history rooted in vulnerability research
Founded in 2000, Rapid7 initially grew around IT vulnerability assessment, particularly with Nexpose. In 2009, its acquisition of Metasploit gave it a distinctive position in the offensive security ecosystem. This open-source project, used to test the resilience of systems, remains associated with a community of researchers and professionals. Rapid7 also offers a commercial version designed for penetration testing.
The company went public on Nasdaq in 2015 under the ticker symbol RPD. It subsequently broadened its scope through product development and targeted acquisitions. The acquisition of DivvyCloud in 2020 strengthened its cloud security expertise, while that of IntSights in 2021 expanded its external threat intelligence capabilities. This trajectory reflects its transition from a vulnerability specialist to a provider covering several functions of security teams.
Connecting risk exposure and security operations
Vulnerability management remains a cornerstone of the business. With InsightVM, Rapid7 helps companies identify weaknesses in their IT assets and prioritize remediation. The goal is not simply to produce a technical inventory: it is to determine which exposures should be addressed first, based on their context and the threats observed.
In detection and response, InsightIDR collects and analyzes events from the IT environment to identify suspicious behavior and facilitate investigations. Rapid7 also markets managed detection and response services, providing monitoring and operational support to organizations that do not have all the necessary resources in-house.
Its portfolio also includes cloud environment security with InsightCloudSec, application security testing and the automation of certain tasks. Research into attackers, vulnerabilities and exploitation techniques informs this offering. Its business model primarily combines software subscriptions and services, in a market where customers are seeking to reduce fragmentation across their tools.
What next?
For Rapid7, the challenge is to make this broad coverage cohesive and practical for day-to-day use. The proliferation of cloud resources, identities and applications increases the need for visibility, but also the volume of alerts to process. Its ability to bring together exposure data, threat intelligence and operational response will be decisive. With competitors also consolidating their offerings, integration quality, the relevance of recommended priorities and the effectiveness of managed services will be tangible differentiators.