Rapid7 Labs
Cybersecurity Intelligence, Threat Data, and Research
Rapid7 Labs tracks adversaries, shares proprietary, curated intelligence and research, and builds trusted open-source communities—all to help you improve your security program.
Yes, you know Rapid7 Labs
Metasploit modules for threat-informed purple teaming
Open-source researchers, pen testers, and threat hunters
Metasploit modules for threat-informed purple teaming
Open-source researchers, pen testers, and threat hunters
The 2024 Attack Intelligence Report
Since 2020, Rapid7 has tracked huge increases in zero-day exploits, ransomware attacks, mass compromise incidents, and evolutions in attacker behavior. Rapid7 Labs has analyzed 14 months of attacker behavior and marquee vulnerabilities, publishing the findings alongside expert analysis and practical guidance for security professionals.
Ransomware Radar Report
The first half of 2024 has witnessed significant changes in the ransomware ecosystem. In the Ransomware Radar Report, Rapid7 Labs researchers conducted independent research and analyzed data samples from Rapid7’s incident response teams to uncover trends in attacker behavior that could indicate a paradigm shift in the way these groups operate.
11,000+ customers are safer, and so is everybody else
Curated threat intel and AI, baked in
Rapid7 Labs holds a slew of AI patents that power risk and threat analysis, and detect threats faster and prioritize vulnerabilities better.
Big issues & emergent threats
In 2023, we tracked over 160 state-sponsored attacks—from one-off APT attacks to ongoing tracking of almost daily activity from APT groups.
Security communities for everyone
Our open-source projects like Metasploit, Velociraptor, and AttackerKB have bi-directional feeds into our platform solutions.
Internet-scale data and research
Get easy insight into public internet exposure with Project Doppler, informed by Sonar scans and our honeypot network Project Lorelei.
Curated threat intel and AI, baked in
Rapid7 Labs holds a slew of AI patents that power risk and threat analysis, and detect threats faster and prioritize vulnerabilities better.
Big issues & emergent threats
In 2023, we tracked over 160 state-sponsored attacks—from one-off APT attacks to ongoing tracking of almost daily activity from APT groups.
Security communities for everyone
Our open-source projects like Metasploit, Velociraptor, and AttackerKB have bi-directional feeds into our platform solutions.
Internet-scale data and research
Get easy insight into public internet exposure with Project Doppler, informed by Sonar scans and our honeypot network Project Lorelei.
Real-time emergent threat guidance
Between Rapid7 Labs and our 24/7 follow-the-sun MDR, we observe 3.3 trillion security events every week. We perform in-depth technical analysis of emergent attack vectors, follow attacks as they evolve, and communicate indicators of compromise and next-step guidance in real time—click below to see our latest emergent threat coverage.
Your data may be everywhere, but so are we
Always-on expertise about known, unknown TTPs
Get insight into widely exploited vulns, ransomware, and dark web marketplaces anytime with this on-demand webinar.
Preventing breaches earlier across your attack surface
Take attackers out before they pop you. It’s proactive, comprehensive coverage for your entire environment from the endpoint to the cloud.
Defending the distributed and far-flung
Japan is an economic juggernaut with subsidiaries and affiliates at unique and elevated risk of attack around the world. Of course Rapid7 Labs studied it.
Always-on expertise about known, unknown TTPs
Get insight into widely exploited vulns, ransomware, and dark web marketplaces anytime with this on-demand webinar.
Preventing breaches earlier across your attack surface
Take attackers out before they pop you. It’s proactive, comprehensive coverage for your entire environment from the endpoint to the cloud.
Defending the distributed and far-flung
Japan is an economic juggernaut with subsidiaries and affiliates at unique and elevated risk of attack around the world. Of course Rapid7 Labs studied it.
Expert intelligence infused into Rapid7 products and services
Intelligence from Rapid7 Labs is built into our products and service offerings to help prioritize risks and uncover threats. This includes vulnerability checks in InsightVM, behavioral detections in InsightIDR and MDR, attack modules in InsightAppSec, exploits in Metasploit, and more.
Meet the research and intelligence teams doing unambiguous good
Raj Samani
Chief scientist
Caitlin Condon
Security research
Christiaan Beek
Threat analytics
Building a more secure future with open source communities
Metasploit
Penetration testing software with a growing database of exploits so you can simulate real-world attacks on your network and train your security team to spot and stop the real thing.
AttackerKB
Alongside the greater security community, discuss, analyze, and expand your knowledge of conditions and characteristics that make vulnerabilities exploitable by attackers.
Metasploit
Penetration testing software with a growing database of exploits so you can simulate real-world attacks on your network and train your security team to spot and stop the real thing.
AttackerKB
Alongside the greater security community, discuss, analyze, and expand your knowledge of conditions and characteristics that make vulnerabilities exploitable by attackers.