Rapid7, Inc. (RPD)

Rapid7 is a global cybersecurity operations software and service provider that aims to make cybersecurity simpler and more accessible. It helps security teams manage a modern attack surface by unifying exposure management with threat detection and response, using AI-driven technology, threat research and managed expertise. Its integrated, open Command Platform collects and correlates security data from endpoints, networks, cloud environments and third-party tools. This gives security operations centers a unified view of vulnerabilities, exposures and threats. Revenue was $859.8 million in 2025, up from $535.4 million in 2021, and recurring revenue was 96% of the total. The company reported net income of $23.4 million in 2025.

The platform's offerings are delivered as SaaS solutions, managed services or professional services. In detection and response, they include Managed Threat Complete (managed detection and response, or MDR, combined with Managed Vulnerability Management), the next-generation SIEM and XDR solution Incident Command, Incident Response Services, Intelligence Hub threat intelligence, and Managed Digital Risk Protection. In exposure management, they include Exposure Command, Surface Command (external and internal attack surface management), Vector Command (continuous red-teaming and exposure validation), Rapid7 Cloud Security (CNAPP), and Vulnerability Management. Other offerings include Application Security (DAST), Managed Application Security, and professional services such as penetration testing, maturity assessments and incident response program development. Data collection relies on the Rapid7 Agent, a Network Sensor, cloud event harvesting, hundreds of third-party integrations, and orchestration and automation. Rapid7 also supports open-source projects: Metasploit, Velociraptor, AttackerKB, Project Lorelei and Project Sonar.

As of December 31, 2025, Rapid7 had more than 11,500 customers in 150 countries, including 36% of the Fortune 100. Customers span technology, energy, financial services, healthcare, manufacturing, retail, education, government and professional services, among others. The services industry is the largest at 18% of revenue. Enterprises generated 39% of 2025 revenue, with the rest from middle-market and small organizations, and no customer exceeded 1% of revenue. The company sells directly and through channel partners, public cloud marketplaces, MSSPs and technology alliances such as ServiceNow, Microsoft, AWS, GCP and Palo Alto Networks.

Managed services are delivered from security operations centers in the U.S., Ireland, India, Australia and the Czech Republic. Research and development teams are in Boston, Austin, Arlington, Dublin, Galway, Belfast, Tel Aviv, Prague and Pune. Rapid7 competes in a fragmented, highly competitive market against security platform providers, MDR providers, XDR and SIEM vendors, cloud security, exposure management, vulnerability management, application security and threat intelligence vendors, and legacy security and IT vendors. It protects its intellectual property through more than three hundred issued patents, trademarks, copyrights, trade secrets and contractual protections.