Rapid7

Rapid7 Threat Command (Digital Risk Protection)

Rapid7

Rapid7 Threat Command, also known as Digital Risk Protection (DRP), is a comprehensive external threat intelligence solution designed to proactively identify, monitor, and mitigate threats across an organization's digital footprint, employees, and customers. It continuously scans the clear, deep, and dark web, leveraging advanced data-mining algorithms and cyber reconnaissance capabilities to deliver actionable, contextual threat intelligence. The platform provides real-time alerts on various threats such as leaked credentials, phishing campaigns, brand impersonations, ransomware exposure, and exploits. Threat Command integrates with existing security ecosystems (SIEM, SOAR, XDR) to automate threat blocking and accelerate remediation processes, including takedown services for malicious content. It offers advanced investigation and threat mapping, dynamic asset mapping, and a Vulnerability Risk Analyzer (VRA) to prioritize relevant CVEs. Supported by a team of expert threat intelligence analysts, it helps organizations reduce their external attack surface, enhance incident response, and make informed security decisions to minimize digital risk. It is a core component of Rapid7's Command Platform, working in conjunction with other solutions like Intelligence Hub and Managed Digital Risk Protection services.

Rapid7 Command Platform

Rapid7

The Rapid7 Command Platform is a unified, AI-powered cybersecurity platform designed to provide organizations with a holistic view of their security posture, enabling faster and more confident threat exposure management, detection, and response. It integrates native cloud and on-premise assessment capabilities with data from an organization's entire IT, security, and business ecosystem. The platform leverages real-time threat intelligence and AI-driven insights to unify visibility, predictive context, and real-time response across the attack surface, from endpoint to cloud. Key functionalities include comprehensive attack surface management, proactive exposure mitigation, AI-driven vulnerability prioritization, and streamlined remediation. It also incorporates next-generation SIEM and XDR capabilities, digital risk protection, and security automation to accelerate incident response and optimize security operations. The platform is delivered as a Software-as-a-Service (SaaS) solution, aiming to reduce security gaps, prevent attacks, and enhance overall security maturity by providing clarity, speed, and control when it matters most.

Surface Command

Rapid7

Rapid7 Surface Command is a comprehensive Attack Surface Management (ASM) solution designed to provide organizations with a unified, real-time view of their entire digital attack surface. It integrates Cyber Asset Attack Surface Management (CAASM) and External Attack Surface Management (EASM) capabilities, correlating security data from internal, external, and cloud environments. The platform aims to eliminate security blind spots by continuously discovering and inventorying all cyber assets, including known and unknown assets, shadow IT, and third-party tools. Surface Command leverages threat intelligence and machine learning to identify and prioritize exposed assets, vulnerabilities, misconfigurations, and security control gaps. It offers an adversary's perspective to highlight the most critical exposures likely to be exploited, enabling proactive risk reduction. The solution provides contextual information on findings, visualizes potential attack paths, and streamlines remediation efforts through integrated workflows, ultimately enhancing an organization's security posture and accelerating incident response. It is a foundational component of Rapid7's Command Platform, offering a consolidated approach to managing and mitigating cyber risks across complex hybrid environments.

Metasploit Pro

Rapid7

Metasploit Pro, developed by Rapid7, is a comprehensive commercial penetration testing software designed for cybersecurity professionals and enterprise security teams. It extends the capabilities of the open-source Metasploit Framework by providing an intuitive graphical user interface and advanced features for automating and streamlining various stages of penetration testing. The platform enables users to conduct realistic attack simulations, from reconnaissance and vulnerability identification to exploitation, post-exploitation, and detailed reporting. Metasploit Pro leverages an extensive, continuously updated exploit database to help organizations identify and validate security weaknesses in their systems, applications, and networks. It also facilitates social engineering campaigns, web application testing, and includes features for anti-virus evasion and lateral movement. By simulating real-world threat scenarios, Metasploit Pro helps red teams and security professionals assess the effectiveness of their defenses, prioritize remediation efforts, and enhance overall security awareness and posture. It integrates with other security tools, such as Rapid7 InsightVM, to create a closed-loop vulnerability management and penetration testing workflow.

Exposure Command

Rapid7

Rapid7 Exposure Command is a comprehensive Software-as-a-Service (SaaS) platform designed for unified exposure management across an organization's entire attack surface. It provides 360-degree visibility into on-premises, cloud, and hybrid environments, enabling security teams to proactively identify, prioritize, and remediate vulnerabilities, misconfigurations, and policy gaps. The platform leverages continuous monitoring, deep environmental context, and AI-driven risk scoring to help organizations understand the true impact of exposures and focus remediation efforts on the most critical risks. Exposure Command integrates asset discovery, external attack surface management, and compliance enforcement, offering actionable insights and automated workflows to strengthen security posture, reduce the attack surface, and ensure adherence to regulatory frameworks. It aims to bridge the security visibility gap by consolidating data from various sources, including third-party tools, to provide a single source of truth for risk management and accelerate incident response.

InsightAppSec

Rapid7

Rapid7 InsightAppSec is a cloud-native Dynamic Application Security Testing (DAST) solution designed to identify and remediate security vulnerabilities in modern web applications and APIs. It performs black-box security testing to automatically crawl and assess applications, detecting a wide range of vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF), including those listed in the OWASP Top 10. The platform is built to handle the complexities of modern JavaScript frameworks like React, Angular, and Vue.js through its Universal Translator, ensuring comprehensive coverage. InsightAppSec offers flexible deployment with both cloud-hosted and optional on-premise scan engines, allowing for scanning of applications on closed networks. It integrates with DevOps toolchains, including Jira, Jenkins, and Azure DevOps, to streamline vulnerability management and remediation workflows. The solution provides detailed reporting, compliance assessments (PCI-DSS, HIPAA, SOX), and features like Attack Replay to empower developers in verifying and fixing identified issues efficiently. InsightAppSec aims to reduce application risk, accelerate remediation, and support compliance efforts for organizations of all sizes.

Rapid7 Incident Command

Rapid7

Rapid7 Incident Command is an AI-native, next-generation Security Information and Event Management (SIEM) platform designed to revolutionize how Security Operations Center (SOC) teams detect, investigate, and respond to cyber threats. As a core component of the Rapid7 Command Platform, it unifies traditionally siloed security functions, including SIEM, Security Orchestration, Automation, and Response (SOAR), Attack Surface Management (ASM), and threat intelligence, into a single, intuitive interface. The platform leverages proprietary Agentic AI models, trained on extensive real-world SOC data, to prioritize alerts, enrich findings with critical context, and guide analysts through transparent triage and investigation workflows. This approach significantly reduces alert fatigue, streamlines incident management, and accelerates response times. Incident Command is a cloud-native solution that provides comprehensive visibility across endpoints, networks, cloud environments, and third-party sources, enabling security leaders to monitor risk posture and analysts to efficiently resolve incidents. It supports various use cases, from foundational security data collection and analysis to advanced AI-driven operations and full Extended Detection and Response (XDR) capabilities, catering to organizations seeking to enhance their security posture and operational efficiency.

InsightCloudSec

Rapid7

Rapid7 InsightCloudSec is a comprehensive Cloud-Native Application Protection Platform (CNAPP) designed to secure complex multi-cloud and container environments. It provides unified, real-time visibility and continuous monitoring across various cloud service providers, including AWS, Azure, GCP, Alibaba Cloud, and Oracle Cloud Infrastructure. The platform helps organizations identify and mitigate risks stemming from misconfigurations, policy violations, vulnerabilities, and Identity and Access Management (IAM) challenges. InsightCloudSec integrates security throughout the development lifecycle with Infrastructure as Code (IaC) security and Kubernetes Security Posture Management (KSPM), enabling a 'shift-left' approach. A key strength is its automated, real-time remediation capabilities, which allow for rapid response to security and compliance issues. It also offers risk-based prioritization using layered context to help security teams focus on the most critical threats. InsightCloudSec supports various deployment models, including self-hosted, managed self-hosted, and SaaS, catering to diverse organizational needs. Its core use cases include continuous cloud security and compliance, risk assessment, policy enforcement, and access management, targeting security teams and IT professionals responsible for cloud security.

InsightVM

Rapid7

Rapid7 InsightVM is a comprehensive vulnerability management solution designed to provide continuous visibility into an organization's entire attack surface, encompassing on-premises, cloud, and remote assets. It leverages advanced analytics and real-world threat intelligence to identify, prioritize, and facilitate the remediation of security vulnerabilities. The platform employs an "Active Risk Score" that goes beyond traditional CVSS, incorporating factors like exploitability, business impact, and attacker behavior to highlight the most critical risks. InsightVM integrates flexible scanning options, including agent-based and agentless methods, and offers dynamic asset discovery to ensure complete coverage. It streamlines security operations (SecOps) through automated remediation workflows, policy assessment, and customizable dashboards and reporting, enabling security and IT teams to focus on high-impact threats and measure risk reduction effectively. The solution is built on Rapid7's Insight platform, offering scalability and integration capabilities with various security and IT tools.

Nexpose

Rapid7

Rapid7 Nexpose is an on-premise vulnerability management solution designed to help organizations proactively identify, assess, prioritize, and remediate security weaknesses across their diverse IT environments. It performs comprehensive scans of networks, systems, web applications, databases, and virtual infrastructures, leveraging real-time vulnerability data and a proprietary Real Risk Score (1-1000 scale) to highlight the most critical threats based on exploitability and business impact. Nexpose features adaptive security for continuous asset discovery and vulnerability detection, integrated policy assessment against industry standards (e.g., PCI, HIPAA, CIS, NIST), and actionable remediation reporting. It seamlessly integrates with Rapid7 Metasploit for exploit validation, allowing security teams to confirm the true risk of identified vulnerabilities. Deployment options include software, virtual appliance, hardware appliance, private cloud, or as a managed service, making it suitable for organizations requiring robust on-premises vulnerability intelligence and management.

InsightIDR

Rapid7

Rapid7 InsightIDR is a cloud-native Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution designed to provide comprehensive visibility and accelerated response to modern cyber threats. It unifies diverse security telemetry from endpoints, networks, and cloud environments into a single, intuitive platform. Leveraging advanced analytics, including User Behavior Analytics (UBA) and Attacker Behavior Analytics (ABA), InsightIDR detects stealthy intruder activities, insider threats, and reduces false positives, enhancing the efficiency of security teams. The platform offers embedded threat intelligence, powerful investigation tools, automated response capabilities, and centralized log management, enabling organizations to detect attacks earlier, investigate incidents faster, and automate containment actions. It is delivered as a SaaS solution, collecting data via lightweight on-premises collectors and agents, and securely transmitting it to AWS for analysis. InsightIDR helps organizations meet compliance requirements and strengthen their overall security posture.