Rapid7

Rapid7, LLC

Type	Private
Industry	Computer security Vulnerability management Penetration testing Computer software for network & IT security Security consulting services
Founded	2000
Headquarters	Boston, Massachusetts
Key people	Mike Tuchen, CEO HD Moore, CSO & Chief Architect, Metasploit [1]
Products	Rapid7 Nexpose Enterprise Edition Rapid7 Nexpose Consultant Edition Rapid7 Nexpose Express Edition Rapid7 Nexpose Community Edition Metasploit Framework Metasploit Community Edition Metasploit Express Metasploit Pro [2]
Employees	150 [3]
Website	http://www.rapid7.com

Rapid7 is a vulnerability management and penetration testing company headquartered in Boston, Massachusetts. Its primary products are Nexpose and Metasploit. Rapid7 has additional offices in El Segundo, CA, Toronto, Austin, and Buenos Aires.^[4]

Contents 1 History 2 Products 3 Services 4 Community 5 Recognition 6 Controversy 7 See also 8 References 9 External links

History

Rapid7 was founded in 2000 by current chairman of the board Alan Matthews, chief technology officer Tas Giakouminakis, vice president of engineering Chad Loder, and board member John Devine.^[5] Mike Tuchen, former general manager of marketing for Microsoft’s SQL Server product, joined Rapid7 in 2008, and in 2009 was promoted from chief operating officer and president to chief executive officer and president.^[6]

Rapid7 entered the penetration testing market with its acquisition of Metasploit in October 2009, an open-source penetration testing framework and a database of tested public exploits. The purchase also resulted in HD Moore joining Rapid7 as Chief Security Officer and Chief Architect of Metasploit.^[7]

Rapid7 received a $7 million investment from Bain Capital Ventures in 2008.^[8] In March 2010, Rapid7 raised an additional $2 million from Bain Capital Ventures of a planned $4 million venture round, bringing its raised venture capital to about $9 million in total.^[9]

In July 2010, Rapid7 announced its sponsorship of and partnership with w3af, a web application security scanner.^[10]

Rapid7 received an additional $50 million in a C-Series funding round in November 2011. ^[11]

Products

• Nexpose provides vulnerability management, policy compliance and remediation management.^[12]
• The Metasploit Project develops the Metasploit Framework for penetration testing and includes an exploit database. The framework is used by network security professionals to perform penetration testing, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide. In October 2009, the Metasploit project was acquired by Rapid7.^[13] While the Metasploit Framework remains free, Rapid7 has added commercial products on top of this open core, namely Metasploit Express^[14] and Metasploit Pro.^[15]

Services

Rapid7 provides training, deployment, and security assessments such as network and application penetration tests, security and compliance audits, Web application security audits, best practices consulting, and penetration testing services.^[6]

Community

After Rapid7 acquired Metasploit, the Metasploit community initially had concerns about the future of the open source project.^[16] However, the Metasploit Framework remains free and updated one year after the acquisition. Rapid7 also offers Nexpose as a free version, the so-called Community Edition, which scans up to 32 IP addresses.^[17]

Recognition

• The Gartner MarketScope for 2010 gave Rapid7 a ‘strong positive’ rating, citing Nexpose's penetration-testing-oriented approach to vulnerability validation and strong remediation reporting.^[18]
• Forrester Research, Inc. named Rapid7 as a "Leader" in their "The Forrester Wave: Vulnerability Management, Q2 2010" report.^[19]
• Rapid7 was recognized as one of the “Hottest Boston Companies” by Lead411.^[20]

Controversy

Rapid7 web-security consultant Joshua D. Abraham was among the first security researchers to point out cross-site scripting (XSS) vulnerabilities on the American Express website that could expose its customers login credentials.^[21]

Rapid7's sales team is known for their aggressive approach, sometimes compared to a so-called "boiler room" environment and often accused of "spamming" their leads.^[22][23]

See also

• Bain Capital Ventures
• Metasploit Project
• w3af
• WarVOX

References

External links

• Official website
• Rapid7 Community