Factual Product Summary
24/7 managed detection and response bundled with unlimited vulnerability management to detect, investigate, and remediate threats across hybrid environments.
Combines proactive vulnerability scanning with active MDR containment into a single unified subscription.
Documented Capabilities & Sourced Claims
Every claim is checked against official engineering documentation or compliance reports.
24/7/365 SOC monitoring with hands-on containment and proactive threat hunting
Audited Capability Specifications
Structured criteria validated against official vendor documentation for buyer comparison.
SOC operational monitoring schedule (e.g. 24/7/365).
Contractual mean time to investigate or respond to critical alerts.
Supported signal domains (Endpoint, Identity, Network, Cloud, SaaS).
Hands-on-keyboard containment and threat termination performed by provider.
Human-led hypothesis-driven threat hunting included in standard tier.
Capability to manage third-party endpoint agents already deployed.
Official Sources & References
Deployment & Specifications
- Deployment Models
- Managed Cloud Service + Insight Agent
- Supported Platforms
- Windows, macOS, Linux
- Customer Segments
- Enterprise, Mid-Market
- Service Geography
- Global 24/7/365
Pricing Transparency
Per-asset annual subscription covering both MDR and VM.
About the Vendor
Rapid7 offers a portfolio covering finding or addressing weaknesses in software, coordinating repeatable security actions across tools, collecting and analyzing security-relevant events, identifying and prioritizing security weaknesses and adding expert monitoring and response to supported telemetry. The entries in this catalog include InsightAppSec, InsightConnect, InsightIDR, InsightVM and Rapid7 Managed Detection and Response. InsightAppSec focuses on dynamic web application vulnerability testing. InsightConnect focuses on security workflow automation and integration. InsightIDR focuses on security detection and incident investigation. When reviewing Rapid7, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - InsightAppSec: the catalog lists Dynamic application security testing, Developer workflow integration, Finding triage and remediation. - InsightConnect: the catalog lists Workflow orchestration, Alert enrichment. - InsightIDR: the catalog lists Security log investigation, User and entity behavior analytics, Detection and response workflows. - InsightVM: the catalog lists Vulnerability scanning, Risk-based prioritization. - Rapid7 Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.