Rapid7, Inc. is a global provider of cybersecurity solutions focused on vulnerability management, extended detection and response (XDR), and cloud security. The company's core offering is the cloud-native Insight platform, which centralizes telemetry, analytics, and threat intelligence to help security teams reduce risk and respond to attacks. Key products include InsightVM for vulnerability management and risk-based prioritization, InsightIDR for incident detection and response, and InsightCloudSec for cloud security posture management. Rapid7 also stewards the Metasploit open-source project, a widely used penetration testing framework that informs its threat intelligence.
The company generates revenue primarily through product subscriptions, which accounted for approximately 96% of its $844 million total revenue in 2024. The remaining 4% of revenue is derived from professional services, including incident response retainers, deployment, and security assessments. Rapid7 employs a hybrid business model that combines automated SaaS tooling with 24/7 managed services, such as its Managed Detection and Response (MDR) offering, which caters to organizations facing cybersecurity talent shortages. The company operates globally, with the majority of its revenue generated in North America, and utilizes both direct sales and a network of channel partners and managed security service providers to reach its enterprise and mid-market customers.