Rapid7
Security and trust center evidence
Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber
Summary
Rapid7 has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 19 Sep 2026, Rapid7 is listed in the FedRAMP registry as FedRAMP Authorized, with the authorization issued on 11 Jul 2025 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, Rapid7 is also listed in the CSA STAR registry at STAR Level 1 as a self-assessment (CAIQ), issued 27 May 2026. Rapid7 is listed in the EU-US Data Privacy Framework registry with an active status covering the UK Extension, SW-US, and EU-US Certifications, as of 17 Sep 2026. That Data Privacy Framework listing was issued on 20 Dec 2016 and is set to expire on 2 Dec 2026, per the registry record as of 17 Sep 2026. No public evidence was found for a SOC 2 Type II report covering this vendor as of 19 Sep 2026.
- FedRAMP: listed as FedRAMP Authorized, issued 11 Jul 2025, audited by Schellman Compliance, LLC (as of 19 Sep 2026).
- CSA STAR: Level 1 self-assessment (CAIQ), issued 27 May 2026 (as of 17 Sep 2026).
- EU-US Data Privacy Framework: listed in the registry, active status, expires 2 Dec 2026 (as of 17 Sep 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among security vendors
3verified rows
Category median 1, across 172 indexed security vendors. Rapid7 has more verified rows than 92 percent of them.
cybersecuritymanaged-servicesthreat-detectionvulnerability-management
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · Schellman Compliance, LLC
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Trend Micro
Security
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital
SentinelOne
Security
SentinelOne is redefining cybersecurity by pushing the boundaries of autonomous
Logicalis
Security
Discover how Logicalis delivers intelligent managed services that strengthen cybersecurity, scale connectivity, and drive
Claroty
Security
Claroty is a global cybersecurity company specializing in the protection of cyber-physical systems (CPS) and the Extended Internet of
Evidence against regulations
All regulations for Rapid7How much of each regulation’s vendor requirements Rapid7’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read