9 categories · RankedRapid7
Standing by category
| Category | Function | Share | Rank | Negative rate | Labels | Quadrant | Since September 2026 |
|---|---|---|---|---|---|---|---|
| Digital risk protection | Security operations | 2% | 13 of 86 | 0% | 8 | under 10 labels · led by UpGuard BreachSight at 22% | |
| Penetration testing as a service | Security operations | 0% | 20 of 82 | 9% | 11 | accepted challenger | =heldSince September 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise. Read over the models both editions asked. |
| Attack surface management | Security operations | 0% | 22 of 100 | 0% | 6 | under 10 labels · led by Intruder at 49% | =heldSince September 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise. Read over the models both editions asked. |
| Cloud security posture management | Cloud and infrastructure | 0% | 19 of 80 | 17% | 6 | under 10 labels · led by Wiz at 37% | =heldSince September 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise. Read over the models both editions asked. |
| Breach and attack simulation | Security operations | 0% | 61 of 74 | 0% | 1 | under 10 labels · led by Cymulate at 24% | |
| Cyber risk quantification | Security operations | 0% | 99 of 116 | 0% | 1 | under 10 labels · led by CyberSaint CyberStrong at 25% | |
| Endpoint detection and response | Security operations | 0% | 30 of 55 | 0% | 1 | under 10 labels · led by Microsoft Defender for Endpoint at 30% | newNew since September 2026: not ranked then, 0% now. |
| Insider risk management | Security operations | 0% | 69 of 84 | 0% | 1 | under 10 labels · led by Microsoft Purview Insider Risk Management at 22% | |
| Microsegmentation | Network and edge | 0% | 70 of 94 | 0% | 1 | under 10 labels · led by ColorTokens Xshield at 25% |
Movement
By model
How each model treated Rapid7 across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.ShowHide
By model
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 4 | 0 | 5 |
| GPT-5.4 mini | 0 | 1 | 1 | 0 | 2 |
| Gemini 3.5 Flash | 0 | 0 | 1 | 0 | 1 |
| Perplexity Sonar | 0 | 0 | 1 | 0 | 1 |
| Grok 4.20 | 0 | 0 | 1 | 1 | 2 |
| Mistral Small | 0 | 2 | 0 | 0 | 2 |
| DeepSeek V4 Flash | 0 | 1 | 2 | 0 | 3 |
| Llama 4 Maverick | 0 | 0 | 2 | 0 | 2 |
| Qwen 3.7 Flash | 1 | 2 | 3 | 1 | 7 |
| Kimi K2 | 0 | 1 | 1 | 0 | 2 |
| GLM 4.7 FlashX | 0 | 0 | 3 | 0 | 3 |
| MiniMax M2.5 | 0 | 1 | 1 | 0 | 2 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 1 | 2 | 0 | 3 |
By framing
What the models said for it
Verbatim evidence the judge attached to positive labels.
“Rapid7 is widely considered the gold standard for mid-market organizations” Qwen 3.7 Flash · DRP · direct prompt · first choice
“Recommended for mid-market consolidators wanting continuous monitoring and automated remediation” Mistral Small · CSPM · direct prompt · alternative
“Best if you want human analysts validating alerts for you (though pricier)” DeepSeek V4 Flash · DRP · direct prompt · alternative
“Choose Rapid7 if you want managed DRP and SOC-style support.” GPT-5.4 mini · DRP · comparative prompt · alternative
And against it
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“Avoid pure enterprise giants (e.g., Mandiant, Rapid7) which can be pricier/slower” Grok 4.20 · PTaaS · direct prompt · hard negative
“Traditional Vulnerability Scanners Masquerading as CSPM ... Why be cautious” Qwen 3.7 Flash · CSPM · negative prompt · soft negative
Named alongside
The products named in the same answers as Rapid7, over the 88 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Rapid7 was named but was not.ShowHide
Named alongside
What carried it into the answer
Citations exist only for the models that return a source list, five of the fourteen in this edition, so these counts come from 77 of the 88 answers that named Rapid7 and are not a share of its labels.
Domains cited
199 of the 199 domain citations in answers naming Rapid7 came from somebody else's page.
Pages cited
Pages are listed as the models cited them.
Search and answers
rapid7.com ranks 6 on Google for the category's searches. In the answers, Rapid7 takes 2% of first choices and UpGuard BreachSight takes 22%.ShowHide
Search and answers
In search
Google, US estimates- Searches for its name, Google
- 14,800 a month (“rapid7”)
- AI search demand for its name, est.
- 798 a month
- Organic visits to its site
- about 123,299 a month
- Searches its site ranks for
- 15,192 · 1,314 in the top three
- Sites linking to it
- 20,057
- Paid Google search
- 3 searches its ads show for, about 16 clicks and $609 a month (estimate)
In answers
This edition- First choices
- 2 across its categories
- Named in
- 88 answers
- Its own site cited
- in 77 of the answers that named it
Search figures are US estimates from DataForSEO, read September 28, 2026; AI search demand is its modeled, directional estimate, not a count of queries to any assistant. The answers are this edition's. Two measurements side by side: neither is read as the cause of the other.
What it publishes
ShowHide
What it publishes
ShowHide| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 2,030 | 20 | 2026-09-28 | MDR, SIEM | |
| News or press | 296 | 0 | 2018-06-01 | SIEM, MDR | |
| Glossary or explainer | 281 | 0 | 2017-05-01 | SIEM, MDR | |
| Case study | 83 | 0 | 2025-01-01 | MDR | |
| Conference or event | 58 | 0 | 2025-05-01 | MDR | |
| Comparison | 31 | 0 | 2025-04-01 | SIEM, MDR | |
| Report or ebook | 28 | 0 | 2018-09-01 | SIEM | |
| Webinar or virtual event | 11 | 0 | 2025-02-01 | GRC | |
| Podcast or video | 2 | 0 | 2019-10-01 | ||
| Template or tool | 1 | 0 | 2022-06-01 |
Most recent
- 2026-09-28Etr zero day exploitation of citrix netscaler adc and gateway cve 2026 88771 and cve 2026 88772 blog
- 2026-09-25Pt metasploit wrap up belgian waffles chocolates and modules frites blog
- 2026-09-24Ve business email compromise rewriting reality zimbra cve blog
- 2026-09-23Em dynamic application security testing dast validates risk at runtime idc marketscape blog
- 2026-09-23Etr cve 2026 94127 critical unauthenticated rce in f5 big ip apm blog
- 2026-09-15Etr cve 2026 76461 critical cisco secure email gateway vulnerability exploited in the wild blog
How it is countedHide how it is counted
Every page rapid7.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. Of its titles that name a category, most name MDR (59); 12 name its categories the models place it in. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.
Names read as Rapid7
Follow Rapid7
An email the morning each edition publishes: where this product moved, where it held, and by how much against the noise floor. One address, confirmed by a click; a stop link in every email.
Already following? Everything you follow, with a stop for each.
The company
Rapid7 is its own company.ShowHide
The company
In its own words
Stated by the vendor, not checked- Positioning
- Managed cybersecurity: Outpace Attackers. The only endpoint to cloud, unified cybersecurity platform.
- For
- security teams
- Price stated
- Pick your product or solution - explore pricing - contact us - confirm your plan. rapid7.com/pricing
- Starting price
- $1.62/mo for 500 assets, per asset rapid7.com/pricing
- Free plan or trial
- Attack Surface Management Free Trial; InsightVM Free Trial rapid7.com
- Customers named
- ArcadisEVRiAAA NortheastChemung Canal Trust CompanyLake City BankVenbrook GroupBritish LandSO Energy
- Not stated on the pages read
- Integrations, certifications, hosting
What Rapid7's own pages state, read September 28, 2026: rapid7.com, rapid7.com/pricing, trust.rapid7.com, rapid7.com/platform, rapid7.com/customers. A claimed page can correct any of them.
Claim this page
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Rapid7's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Rapid7, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
What a new claim receivesHide what a new claim receives
A new claim receives the current edition's vendor brief for Rapid7 by email, built from the raw record of the edition. It shows:
- where Rapid7 is named, by buyer and by framing, and which cells hold its first choices;
- the claims the models make when they name it, ranked, with the strongest and the weakest quoted;
- its vocabulary against the segment leader's, and the pages the models cited;
- who was chosen in the answers that did not name Rapid7, and every reason the record gives;
- a battlecard for each top rival: the head-to-head split, why they win, and the reservation quoted against them;
- one page of published figures cleared to show a buyer.