Rapid7 Reviews, Ratings & Features 2026 | Gartner Peer Insights

Cyber asset attack surface management (CAASM) is focused on enabling security teams to overcome asset visibility and exposure challenges. It enables organizations to see all assets (internal and external), primarily through API integrations with existing tools, query consolidated data, identify the scope of vulnerabilities and gaps in security controls. These tools then continuously monitor and analyze detected vulnerabilities to drill down the most critical threats to the business and prioritize necessary remediation and mitigation actions for improved cyber security.

Active

Find the top Cyber Asset Attack Surface Management Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Cyber Asset Attack Surface Management

Surface Command

Rapid7

CYBERSECURITY ENGINEER

The console is good but there are still many improvements to be made along with reporting. 

<50M USD

50M - 250M USD

500M - 1B USD

250M - 500M USD

3B - 10B USD

30B + USD

Gov't/PS/ED 5,000 - 50,000 Employees

VP, IT Security and Risk Management

Rapid7's Surface Command saves me time by consolidating everything I need to know about my attack surface.  Surface Command reduces my concern of blind spots and helps me prioritize risk in my environment.  Surface Command looks beyond just vulnerabilities and helps identify misconfigurations and missing controls.  One of the best benefits gained from Surface Command is having a "source of truth" related to my assets.  

Qualys

Cisco Systems (Splunk)

Axonius

Other...

Lansweeper

JupiterOne

Safe Security (Balbix)

Intel 471

ServiceNow (Armis)

Panaseer

Lucidum

CyAmast

runZero

ThreatAware

OctoXLabs

OverSOC

DigitalXForce

RedHunt Labs

Sweet Security

Breeze Security

Rapid7, Inc. aims to create a safer digital world by simplifying and making cybersecurity simpler and more accessible. Rapid7 empowers security professionals worldwide to manage a modern attack surface through its technology, research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help over 11,000 customers unite cloud risk management with threat detection and response to reduce attack surfaces and eliminate threats quickly and precisely.

Organizations around the globe rely on Rapid7 technology, services, and research to securely advance. The visibility, analytics, and automation delivered through our Insight cloud simplifies the complex and helps security teams reduce vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, and automate routine tasks. 

Rapid7 is a global enterprise focused on advancing security technology and services. Leveraging the power of the Insight cloud platform, Rapid7 provides visibility, analytics, and automation solutions to security teams worldwide. This aids in reducing vulnerabilities, monitoring malicious behavior, investigating and neutralizing cyber attacks, and automating routine tasks. The focus is on simplifying complex security processes, thereby mitigating risks for businesses in the digital landscape.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Easy configuration and intuitive interface simplify monitoring attack surface risks

Critical Review

Single-console access is convenient but faces slow loading and limited reporting features

Likes and dislikes about

likes

dislikes