How Rapid7 Makes Money

Rapid7 operates an enterprise Software-as-a-Service (SaaS) subscription and managed services business model with strong recurring revenue and high customer lifetime value: (1) Insight Platform SaaS Subscriptions (~80% of revenue), billed annually on a per-asset, per-user, or data-ingestion basis across InsightVM (vulnerability management), InsightIDR (cloud SIEM/XDR), InsightCloudSec (cloud security), and InsightConnect (SOAR automation); (2) Managed Detection and Response (MDR) Services (~15% of revenue), providing 24/7/365 managed threat monitoring, human-led threat hunting, and automated incident response delivered by Rapid7's elite global Security Operations Centers; and (3) Professional Security Services & Metasploit Pro (~5% of revenue), encompassing adversary emulation, red-teaming penetration testing consulting, and commercial Metasploit software licensing. Rapid7 maintains gross margins exceeding 73% and an annualized recurring revenue base of over $790 million.

Under CEO Corey Thomas, Rapid7 is executing a four-pillar growth strategy: (1) Expanding MDR Market Leadership: Scaling Managed Detection and Response services to mid-sized enterprises facing severe cybersecurity talent shortages, delivering enterprise-grade 24/7 SOC protection at a fraction of internal build costs; (2) Cloud SIEM/XDR Consolidation: Positioning InsightIDR as the primary modern cloud replacement for expensive, complex legacy on-premises SIEM platforms like Splunk; (3) Scaling Cloud Security (InsightCloudSec): Capitalizing on enterprise multi-cloud migrations by offering agentless CSPM, container security, and infrastructure-as-code (IaC) scanning across AWS, Azure, and Google Cloud; and (4) Embedding Generative AI SecOps: Deploying machine learning models to synthesize security alerts, automate threat triage, and provide conversational incident investigation for SOC analysts.