Rapid7

Rapid7 was founded in Boston in 2000 and listed in 2015, and it occupies the same territory as Qualys — vulnerability management, detection and response — with a stronger emphasis on the attacker's point of view. It maintains Metasploit, the open-source exploitation framework used by penetration testers everywhere, which it acquired in 2009 and still publishes. Its products run on the Insight platform: InsightVM for vulnerability management, InsightIDR for detection and response, InsightCloudSec for cloud posture and InsightAppSec for application testing, with a managed detection service on top. The Rapid7 Insight Agent listed here is the single agent that feeds all of them. As with Qualys, the agent is bought as part of a security operations platform rather than as antivirus, so comparing it with the endpoint suites in this index is comparing two different purchases.

Country

🇺🇸United States

Headquarters

🇺🇸Boston, United States

Year Established

2000

Employees

3,000

Customers

11.5K organisations (2026)Vendor states: Rapid7 — Company

Users

1M devices protected (2026)Estimated by LLM

Revenue

$859.8M (2025)Source: Web search — SEC

Website

https://www.rapid7.com/

Status

Active