Rapid7 Launches the Command Platform, A Unified Attack Defense and Response Platform That Provides Better Visibility Across The Attack Surface

Rhea-AI Summary

Rapid7 (NASDAQ: RPD) has launched the Command Platform, a unified threat exposure, detection, and response platform. The AI-powered platform integrates critical security data to provide a comprehensive view of vulnerabilities and threats from endpoint to cloud. Two key solutions introduced are:

1. Exposure Command: Helps detect and prioritize exposures across the attack surface.

2. Surface Command: Discovers and provides visibility into assets across internal and external attack surfaces.

The platform aims to help organizations take command of their attack surface, offering greater visibility and trust in security operations. It integrates native cloud and on-prem assessment with data from various IT, security, and business tools to enable efficient risk management.

Positive

• Launch of Command Platform, integrating critical security data for a unified view of vulnerabilities and threats
• Introduction of Exposure Command and Surface Command solutions for comprehensive attack surface management
• AI-powered platform designed to close security gaps and prevent attacks
• Disruptive pricing model aimed at providing immediate return on investment for security teams

Negative

• None.

Financial Analyst

The launch of Rapid7's Command Platform represents a significant strategic move for the company. By integrating critical security data and providing a unified view of vulnerabilities, exposures and threats, Rapid7 is positioning itself as a comprehensive security solution provider. This could potentially increase its market share and improve customer retention.

The pricing strategy for Exposure Command and Surface Command, described as "disruptive all-in value," suggests a focus on competitive pricing to drive adoption. This approach could lead to increased revenue in the short term and stronger customer relationships in the long term. However, investors should monitor the impact on profit margins.

Overall, this product launch positions Rapid7 to capitalize on the growing demand for integrated security solutions, potentially driving future growth and strengthening its market position.

Tech Expert

Rapid7's Command Platform represents a significant technological advancement in the cybersecurity space. The integration of AI-powered analytics with comprehensive data collection across cloud and on-premises environments addresses a critical need in the market for unified security management.

Key technical features like attack path analysis, Infrastructure as Code (IaC) scanning and the 100+ connector library demonstrate Rapid7's commitment to providing a robust, scalable solution. The platform's ability to correlate data from various sources and provide actionable insights is particularly noteworthy.

The inclusion of compliance packs and automated policy enforcement also adds significant value, especially for enterprises dealing with complex regulatory environments. This comprehensive approach could give Rapid7 a competitive edge in the crowded cybersecurity market.

Market Research Analyst

The launch of the Command Platform aligns well with current market trends in cybersecurity. There's a growing demand for integrated, AI-driven security solutions that can provide comprehensive visibility across complex IT environments.

Rapid7's focus on unifying external attack surface management (EASM) with cyber asset attack surface management (CAASM) addresses a significant pain point for many organizations. This could potentially expand Rapid7's addressable market.

The emphasis on cost-effectiveness and immediate ROI is likely to resonate with budget-conscious customers, especially in the current economic climate. However, Rapid7 will face stiff competition from established players in this space.

Investors should monitor adoption rates and customer feedback in the coming quarters to gauge the market's reception of this new platform.

Exposure Command and Surface Command anchor Rapid7’s new Command Platform

BOSTON, Aug. 05, 2024 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a leader in extended risk and threat detection, today announced the launch of its Command Platform, a unified threat exposure, detection, and response platform. Rapid7’s AI-charged Command Platform allows customers to integrate their critical security data to provide a unified view of vulnerabilities, exposures, and threats from endpoint to cloud to close security gaps and prevent attacks. Rapid7 also announced the first two solutions on the Command Platform: Exposure Command, which helps organizations detect and prioritize exposures from endpoint to cloud, and Surface Command, which is designed to discover and provide deep visibility into the assets that the security team is responsible for protecting across their internal and external attack surface and is included with Exposure Command.

The Rapid7 Command Platform integrates native cloud and on-prem assessment with data from an organization’s ecosystem of IT, security, and business tools to help them take command of their attack surface and confidently discover, identify, prioritize, and remediate risk. The fully-integrated platform gives security operations teams greater visibility they can trust that was previously unattainable due to cost.

“Rapid7 customers now can have confidence in comprehensive visibility to truly monitor, manage, and measure exposures and threats across the entirety of their ecosystem with full business and environmental context — whether that data comes from Rapid7 or other providers — at an affordable cost,” said Corey Thomas, chairman and chief executive officer, Rapid7. “When you have trust in what’s happening in your environment, you can quickly zero in on the highest risk vulnerabilities and exposures to focus on the most critical assets that need attention.”

Exposure Command and Surface Command are foundational to Rapid7’s new Command Platform. With Exposure Command, organizations can now discover, assess, prioritize and remediate exposures across their attack surface, take action confidently on threats with assistance from veteran security experts, and drive tangible return on their investment and outcomes that make it easy to demonstrate success.

An essential part of Exposure Command, Surface Command is designed to enable organizations to eliminate blind spots and uncover security control gaps, proactively harden their attack surface with more complete context about identities and assets, and accelerate incident response teams with better data and perspectives.

Both of these solutions are priced at a disruptive all-in value so that security teams can see immediate return on their investment.

“Exposure Command and Surface Command are truly transformational for security teams,” said Craig Adams, senior vice president and chief product officer, Rapid7. “Not only do they eliminate guessing about what is taking place in your environment or which risk to tackle first, they free up the excessive time and money teams spend on a host of tools, manually piecing together inconsistent and disjointed reports to understand only a portion of their attack surface and security posture.”

Exposure Command

Exposure Command is designed to detect and identify exposures from endpoint to cloud. Exposure Command enables security operations teams to enrich continuous attack surface monitoring with deep environmental context and automated risk scoring to identify and remediate ‘toxic combinations.’ It also allows them to understand asset posture and ownership and enforce compliance with internal policies, industry best-practices and regulatory frameworks across hybrid environments, and avoid cloud risk before it reaches production with actionable feedback.

With Exposure Command, organizations can:

• Detect and Remediate Vulnerabilities Across a Hybrid Environment: continuously assess the entire environment for vulnerabilities and prioritize response based on the likelihood and potential impact of an exploit with purpose-built data collection approaches for cloud and on-prem environments.
• Enforce Organizational Standards and Compliance Policies: track adherence to organizational policies and regulatory standards with more than 50 compliance packs and thousands of security policy checks. Security operations teams can also notify relevant stakeholders and leverage native automation to enforce compliance at scale.
• Shift Cloud Security and Compliance Checks Left, Earlier in the Development Lifecycle: leverage Infrastructure as Code (IaC) scanning capabilities to implement the same security and compliance checks used in production earlier on in the continuous integration and continuous deployment (CI/CD) pipelines, identifying potential misconfigurations and non-compliant resources before they’re ever provisioned.
• Monitor Effective Access and Permissions Across All Clouds: continuously track accounts and their effective access across the organization, flagging overly-permissive roles, the potential for privilege escalation and automatically enforcing least privilege access (LPA) policies at scale.
• Identify Paths for Lateral Movement Across Cloud Environment: attack path analysis enables teams to visualize the relationships between interconnected cloud resources and uncover the potential for attackers to move laterally across the environment should they gain access to it.
  

Surface Command

Surface Command provides organizations with unified asset inventory - a more complete, vendor agnostic view of an organization’s internal and external attack surface. Surface Command breaks down data silos by combining comprehensive external attack surface monitoring (EASM) with cyber asset attack surface management (CAASM) across hybrid environments to build a dynamic, 360-degree view of an organization’s entire attack surface in one place.

Surface Command includes a library of more than 100 connectors feeding into Rapid7’s unified machine learning-driven correlation engine. Organizations can identify and mitigate exposures and potential threats with a risk-aware and adversary-driven view of their attack surface. This dynamic map of their digital estate from endpoint to cloud provides organizations with a holistic view of their attack surface.

With Surface Command, organizations can:

• Establish and Maintain a Single Source of Truth: unify and correlate asset inventory and identities across internal tooling and cross reference findings against regular external scans to understand their attack surface and establish a single source of truth across teams.
• Uncover Assets Lacking Proper Security Controls: recurring scanning to spot gaps in security coverage where assets are missing controls - such as endpoint security agents and vulnerability scans - and which identities have admin access or are missing multifactor authentication (MFA).
• Drive Accountability Across Teams: understand asset ownership and drive accountability when compliance standards aren’t met, providing clarity around which stakeholders to engage when remediation actions are required to security and governance, risk, and compliance (GRC) teams.
• Provide Full Context to Incident Responders: security analysts can more effectively prioritize ongoing threats by having asset, vulnerability, and security control context in one place to make decisions. They can also enable organizational wide threat hunts based on known asset information and tactics, techniques, and procedures (TTPs).
• Detect Shadow IT and Ungoverned Use of IT Resources: identify unknown users and assets connected to the network with necessary context to understand the relative risk and necessary remediation steps.
• Augment Configuration Management Database (CMDB) Tools and Assist with Asset Lifecycle Management: track technology adoption across the organization and leverage powerful native querying capabilities to gain deep insight, including if assets are still active, who owns them, and when they were last updated or modified.

Availability
Rapid7’s Command Platform with Exposure Command and Surface Command is available today. Surface Command and Exposure Command are priced based on the average number of assets monitored across an environment. Exposure Command comes in two tiers, depending on an organization’s level of cloud maturity, both of which include Surface Command.

To view a demo, visit https://www.rapid7.com/products/command/request-demo/.

About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is on a mission to create a safer digital world by making cybersecurity simpler and more accessible. We empower security professionals to manage a modern attack surface through our best-in-class technology, leading-edge research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help more than 11,000 global customers unite cloud risk management with threat detection and response to reduce attack surfaces and eliminate threats with speed and precision. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.

Rapid7 Media Relations
Kelly Crummey
Corporate Communications
press@rapid7.com
(617) 921-8089

Rapid7 Investor Contact
Elizabeth Chwalk
Sr. Director, Investor Relations
investors@rapid7.com
(617) 865-4277

A photo accompanying this announcement is available at https://www.globenewswire.com/NewsRoom/AttachmentNg/55f93c2f-5f3d-41b4-a0db-75bd269dbe9e

FAQ

What is Rapid7's new Command Platform?

Rapid7's Command Platform is a unified threat exposure, detection, and response platform that integrates critical security data to provide a comprehensive view of vulnerabilities and threats from endpoint to cloud.

What are the two new solutions launched on Rapid7's Command Platform?

The two new solutions are Exposure Command, which helps detect and prioritize exposures across the attack surface, and Surface Command, which discovers and provides visibility into assets across internal and external attack surfaces.

How does Rapid7's Command Platform benefit security teams?

The Command Platform offers greater visibility and trust in security operations, integrates various data sources, and helps organizations efficiently manage risks across their entire ecosystem at an affordable cost.

When did Rapid7 (RPD) announce the launch of its Command Platform?

Rapid7 (RPD) announced the launch of its Command Platform on August 5, 2024.