Rapid7 Stock Price, News & Analysis

Rapid7 (NASDAQ: RPD) has launched Vector Command Advanced, an enhanced continuous red-teaming service that combines attack surface management with internal penetration testing capabilities. The new offering helps organizations validate security controls and meet compliance requirements like PCI, ISO 27001, and NIST standards.

The service integrates with Rapid7's Surface Command platform to provide comprehensive security validation across external and internal environments. Key features include continuous exposure mapping, internal control validation, streamlined audit reporting, and human-led adversary simulation with attack path visualization.

Rapid7 (NASDAQ: RPD) has released its comprehensive 2025 Access Brokers Report, analyzing illicit underground marketplaces where cybercriminals trade corporate network access. The six-month study revealed that 71.4% of access broker sales include privileged access credentials, with nearly 10% offering multiple access vectors and privileges.

Key findings show the average sale price was $2,700, with 40% of offerings priced between $500-$1,000. The most common access types were VPN, Domain User, and RDP. The research emphasizes that initial access often represents deep network compromise, requiring organizations to implement stronger security measures including MFA enforcement and unified threat detection platforms.

Rapid7 (NASDAQ: RPD), a leader in threat detection and exposure management, has announced its participation in two upcoming investor conferences. The company will present at the Canaccord Genuity 45th Annual Growth Conference in Boston on August 12, 2025, at 9:30 a.m. ET, and at the Piper Sandler Growth Frontiers Conference in Nashville on September 10, 2025, at 1:30 p.m. CT.

Both presentations will be available via live webcast and archived for a limited time on the company's investor relations website at investors.rapid7.com.

Rapid7 (NASDAQ: RPD) reported its Q2 2025 financial results, showing moderate growth with ARR of $841 million, up 3% year-over-year. The company achieved total revenue of $214 million (3% YoY growth) and product subscriptions revenue of $208 million (4% YoY growth).

Key financial metrics include GAAP operating income of $3.5 million and non-GAAP operating income of $36 million. The company generated strong cash flows with $48 million from operations and free cash flow of $42 million.

Notable announcements include CFO Tim Adams' planned retirement and several product launches, including AI-native SIEM Incident Command and achieving FedRAMP Authorization. The company provided Q3 guidance projecting ARR between $850-865 million and revenue of $215-217 million.

Rapid7 (NASDAQ: RPD) has launched Incident Command, a next-generation Security Information and Event Management (SIEM) solution built on their Command Platform. This AI-native platform unifies threat detection, investigation, and response capabilities with attack surface management and threat intelligence.

The new solution features Agentic AI workflows trained on Rapid7's SOC expert playbooks, achieving 99.93% accuracy in benign threat triage and saving over 200 SOC hours per week. Key features include AI-powered threat detection, unified analyst experience, integrated data mesh, and embedded threat intelligence, all designed to streamline security operations.

Rapid7 (NASDAQ: RPD) has achieved Federal Risk and Authorization Management Program (FedRAMP) Authorization for its InsightGovCloud Platform, marking a significant milestone for serving U.S. federal agencies. The authorization at Moderate Impact Level 2 validates the platform's security capabilities for government deployment.

The platform offers comprehensive security solutions including vulnerability management, CNAPP, and SOAR capabilities. Key features include dynamic asset discovery, threat-aware vulnerability prioritization, closed-loop exploitability validation, real-time cloud security assessment, and streamlined remediation operations.

This authorization enhances Rapid7's existing certifications portfolio, which includes SOC2 Type 2, ISO 27001, TX-RAMP, IRAP, and others, positioning the company to better serve public sector cybersecurity needs.

Rapid7 (NASDAQ: RPD) has announced its speaker lineup for Black Hat USA 2025 and DEF CON 33 security conferences in Las Vegas this August. The company's security researchers will present four significant sessions covering various cybersecurity topics including:

• Metasploit's latest attack capabilities and workflow improvements
• Akheron Proxy for interchip communication testing
• Weaponization of cellular-based IoT technology
• DisguiseDelimit: Critical vulnerability in Synology NAS devices

The presentations will feature live demonstrations and insights from Rapid7 Labs' research team, building on the company's 25 years of security program expertise. The sessions are scheduled between August 2-10, 2025, at various locations in Las Vegas.

Rapid7 (NASDAQ: RPD) has announced the launch of Active Patching, a new automated patching and remediation solution integrated into their Exposure Command platform. Powered by Automox's Autonomous Endpoint Management platform, this solution enables security and IT teams to automatically address vulnerabilities across their systems.

The new capability provides real-time visibility into systems requiring patches, automated remediation workflows, and protection for assets without known fixes through virtual patching templates. Active Patching offers comprehensive coverage across Linux, MacOS, and Windows operating systems and their third-party software, combining contextual insights and threat intelligence from Rapid7 Labs to prioritize and remediate vulnerabilities efficiently.

Rapid7 (NASDAQ: RPD) has announced the availability of its security solutions InsightCloudSec and InsightAppSec in AWS Marketplace's new AI Agents and Tools category. These offerings are designed to help organizations secure their AI implementations and development processes.

InsightCloudSec provides real-time cloud posture and risk assessment for AI/ML infrastructure security, while InsightAppSec offers automated testing and attack simulation for LLMs in web applications. Together, these solutions provide unified visibility into AI-related risks and help enforce security policies aligned with OWASP Top 10 standards.

The integration with AWS Marketplace enables customers to streamline procurement processes and maintain centralized control over licensing, payments, and access through their AWS accounts.