Rapid7
Acquisitions
7
Major Deals Covered
$636M
Disclosed Deal Value
Rapid7's largest disclosed acquisition here is IntSights for $335M in 2021. This page covers 7 major deals from 2009 to 2023, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Metasploit | 2009 | Undisclosed | Acquired open-source penetration testing framework founded by HD Moore to incorporate real-world exploit verification into vulnerability management. |
| Logentries | 2015 | $68.0M | Acquired cloud-based machine data search and real-time log management software company to eliminate log ingestion bottlenecks. |
| Komand | 2017 | Undisclosed | Acquired security orchestration and automated response (SOAR) pioneer to automate complex incident containment workflows. |
| DivvyCloud | 2020 | $145.0M | Acquired leading Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM) platform. |
| Alcide | 2021 | $50.0M | Acquired Kubernetes security leader to deliver microservices network defense and container runtime threat detection. |
| IntSights | 2021 | $335.0M | Acquired contextual threat intelligence and external digital risk protection startup to monitor external surface threats. |
| Minerva Labs | 2023 | $38.0M | Acquired anti-evasion and ransomware mitigation technology provider to prevent stealthy malware execution on endpoints. |
2023
$38M
Acquired anti-evasion and ransomware mitigation technology provider to prevent stealthy malware execution on endpoints.
Strengthened Rapid7's endpoint agent with patented memory deception and automated ransomware neutralization.
Directly embedded into Rapid7 Managed Detection and Response (MDR) and InsightIDR endpoint monitoring agents.
2021
$50M
Acquired Kubernetes security leader to deliver microservices network defense and container runtime threat detection.
Extended Rapid7's cloud posture governance directly into production Kubernetes and container environments.
Integrated into InsightCloudSec to deliver seamless container security and workload posture analysis.
2021
$335M
Acquired contextual threat intelligence and external digital risk protection startup to monitor external surface threats.
Enabled Rapid7 to deliver continuous external dark web monitoring and proactive adversary intelligence.
Integrated into the Insight Platform as Threat Command, delivering external threat visibility alongside internal telemetry.
2020
$145M
Acquired leading Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM) platform.
Transformed Rapid7's cloud capabilities, providing real-time compliance governance across AWS, GCP, and Azure.
Rebranded as InsightCloudSec, anchoring Rapid7's Cloud Native Application Protection Platform (CNAPP).
2017
Acquired security orchestration and automated response (SOAR) pioneer to automate complex incident containment workflows.
Allowed security teams to connect hundreds of disparate IT tools and automate threat remediation playbooks.
Commercialized as InsightConnect, Rapid7's core security orchestration and workflow automation module.
2015
$68M
Acquired cloud-based machine data search and real-time log management software company to eliminate log ingestion bottlenecks.
Delivered the foundational cloud data indexing engine that powered Rapid7's flagship InsightIDR cloud SIEM.
Fully integrated into the Insight Platform architecture to enable high-speed security analytics.
2009
Acquired open-source penetration testing framework founded by HD Moore to incorporate real-world exploit verification into vulnerability management.
Elevated Rapid7 into a globally recognized authority on offensive security and adversary simulation.
Maintained as the premier open-source penetration framework while commercialized as Metasploit Pro.
Under CEO Corey Thomas, Rapid7 is executing a four-pillar growth strategy: (1) Expanding MDR Market Leadership: Scaling Managed Detection and Response services to mid-sized enterprises facing severe cybersecurity talent shortages, delivering enterprise-grade 24/7 SOC protection at a fraction of internal build costs; (2) Cloud SIEM/XDR Consolidation: Positioning InsightIDR as the primary modern cloud replacement for expensive, complex legacy on-premises SIEM platforms like Splunk; (3) Scaling Cloud Security (InsightCloudSec): Capitalizing on enterprise multi-cloud migrations by offering agentless CSPM, container security, and infrastructure-as-code (IaC) scanning across AWS, Azure, and Google Cloud; and (4) Embedding Generative AI SecOps: Deploying machine learning models to synthesize security alerts, automate threat triage, and provide conversational incident investigation for SOC analysts.
Rapid7 operates an enterprise Software-as-a-Service (SaaS) subscription and managed services business model with strong recurring revenue and high customer lifetime value: (1) Insight Platform SaaS Subscriptions (~80% of revenue), billed annually on a per-asset, per-user, or data-ingestion basis across InsightVM (vulnerability management), InsightIDR (cloud SIEM/XDR), InsightCloudSec (cloud security), and InsightConnect (SOAR automation); (2) Managed Detection and Response (MDR) Services (~15% of revenue), providing 24/7/365 managed threat monitoring, human-led threat hunting, and automated incident response delivered by Rapid7's elite global Security Operations Centers; and (3) Professional Security Services & Metasploit Pro (~5% of revenue), encompassing adversary emulation, red-teaming penetration testing consulting, and commercial Metasploit software licensing. Rapid7 maintains gross margins exceeding 73% and an annualized recurring revenue base of over $790 million.
Rapid7 pursues a disciplined, strategic M&A approach focused on acquiring proprietary technologies, expanding customer distribution reach, and unlocking operational cost synergies rather than pursuing unselective scale.
Transformative transactions in Rapid7's history include pivotal mergers and acquisitions that secured key regional footprints, consolidated core market share, and brought proprietary software intellectual property in-house.
Rapid7 deploys dedicated integration teams to harmonize core software stacks, align regulatory compliance systems, and unite company cultures while preserving entrepreneurial agility.
Yes, Rapid7 periodically evaluates its corporate portfolio, strategically divesting non-core or non-strategic assets to redeploy capital into high-margin core operational divisions.
Compare corporate acquisition records, deal values, and strategic targets
Explore Rapid7
Core profile pages, founders and related research hubs for this company.