Item 1. Business
Item 1. Business
Overview
Rapid7 is a global cybersecurity software and services provider on a mission to offer customers greater clarity and control of their attack surface through our comprehensive and consolidated security offerings. For more than twenty years, Rapid7 has partnered with customers across the globe representing a diverse range of industries and sizes to improve the efficacy and productivity of their security operations (“SecOps”). In today's rapidly evolving IT environment, customers are encountering escalating challenges due to the widening spectrum of attackers and techniques, including the proliferation of cyberattacks leveraging artificial intelligence (“AI”) and targeted automation. To fortify their security posture, organizations will require greater visibility, advanced capabilities leveraging increased expertise, and integrated data to effectively anticipate, identify, and respond to threats.
Through our security operations platform, anchored on our cloud security, security information and event management (“SIEM”), advanced detection and response, and vulnerability management offerings, we believe that Rapid7 is poised to expand the capabilities of today's SecOps teams. Rapid7 extends and expands the expertise of the Security Operations Center (“SOC") across information security, cloud operations, development, and IT teams, enabling them to better understand the attacker and leverage that information to take control of their fragmented attack surface. Enriched by years of managed services expertise, our integrated security operations platform enables SecOps teams to move away from a reactive approach, reduce their attack surface, and enhance response efficiency with a deep contextual understanding of their environment.
In the past few years, we have observed the industry undergoing a customer-driven shift to consolidated security platforms. As part of this transition, customers are moving away from cloud security as a specialized function towards cloud security as an integrated capability for SecOps teams. We view this as a demand driver for integrated SecOps, and believe that we have an opportunity to be a leader in delivering integrated risk and threat management across on-premise, cloud, and external attack surfaces. As we have shifted our strategic focus to SecOps consolidation, we are focused on continuing to drive innovation across our core products and capabilities to accelerate customer value and provide a frictionless and integrated cloud security experience.
As the threat landscape continues to grow in complexity, customers are demonstrating demand for integrated expertise to support them in effectively managing their security technologies. The convergence of these key trends – security consolidation, integrated cloud security, and expertise driven outcomes – are the foundation of what we view as the new extended SOC. Our focus is to be the leading provider of integrated security solutions for the extended SOC by providing risk and threat management within the context of overall security.
As of December 31, 2023, we had more than 11,500 customers that rely on Rapid7 technology, services, and research to improve security outcomes and securely advance their organizations. We have experienced strong revenue growth with revenue increasing from $326.9 million in 2019 to $777.7 million in 2023, representing a 24% compound annual growth rate.
In 2023, 2022 and 2021 recurring revenue, defined as revenue from term software licenses, content subscriptions, managed services, cloud-based subscriptions and maintenance and support, was 95%, 94% and 92%, respectively, of total revenue. We incurred net losses of $149.3 million, $124.7 million and $146.3 million in 2023, 2022 and 2021, respectively, as we continued to invest for long-term growth.
Our Platform
Our extended SOC platform provides a high level of scalability and combines integrated technology, managed services, threat intelligence, and threat-aware risk context, enabling us to anticipate, detect, and promptly respond to threats once identified. The platform was built using our extensive experience in collecting and analyzing data from diverse sources, including multi-cloud platforms, applications, endpoints and networks, to enable our customers to create and manage analytics-driven cybersecurity risk management programs. By utilizing our powerful proprietary analytics to assess and understand the context and relationships related to users, IT assets and cyber threats within a customer’s environment, our solutions make it easier for teams to identify and remediate vulnerabilities, monitor for misconfigurations and malicious behavior, investigate and shutdown attacks, and automate operations.
4
Ta ble of Contents
Endpoint to Cloud Data Collection and Sharing
In response to our customers’ expanding digital footprints, we have invested in our capacity to gather, standardize, enrich, and correlate diverse telemetry within our platform. Our cloud architecture utilizes a combination of native collection technologies and application programming interfaces, and third-party event sources, to scale in alignment with the digital transformation occurring within our customers’ organizations.
• Rapid7 Insight Agent: Our universal endpoint agent, the Insight Agent, is a lightweight, software-based agent which can be installed on assets across on-premises and cloud environments to centralize and monitor data on our platform. This single agent enables a number of impactful use cases across the platform, including next-gen antivirus (“NGAV”), vulnerability scanning, endpoint detections, investigation and forensic search capabilities, and threat containment.
• Rapid7 Insight Network Sensor: Our lightweight Insight Network Sensor passively analyzes raw end-to-end network traffic to increase visibility into user activity, pinpoint real threats, and accelerate investigations with granular detail of attacker movement.
• Rapid7 Cloud Event Data Harvesting: Given the scale, complexity, and rapid evolution of modern dynamic cloud environments, real-time detection of risks and threats is paramount. Our event-driven harvesting offers visibility into changes made to vital cloud resources.
• Third-Party Integrations and Ecosystem: We have integrations for hundreds of different technologies and solutions to deliver visibility across a customer’s attack surface customized to their unique ecosystem.
• Orchestration and Automation: The connective tissue of our platform is our ability to orchestrate workflows across both our solutions and the customers’ wider security ecosystem. This connectivity enables our customers to focus on security outcomes, rather than systems integrations, and accelerates both tasks associated with the normal course of business, as well as time-sensitive containment and remediation activities to minimize exposure and eliminate threats.
Our Offerings
Our consolidation offerings combine our compelling platform technology and lean into vendor consolidation as well as the prioritization of security budgets around critical spending areas.
• Rapid7 Managed Threat Complete (“MTC”) is our flagship offering and unifies the leading detection and response of Rapid7 Managed Detection and Response (“MDR”) and the robust exposure management of Rapid7 Managed Vulnerability Management (“MVM”) to manage customers’ most imminent risks, pinpoint and eliminate threats as early as possible, and build resiliency for their future. In addition to our MDR solution, customers purchasing MTC receive unlimited vulnerability management to minimize the potential of an attack and unlimited incident response which leverages our deep forensics capabilities. Customers are also able to add NGAV which delivers high-fidelity prevention against both known static threats and suspicious behavior before they execute, or Managed Digital Risk Protection (“MDRP”), which searches for potential threats from stolen or leaked data and phishing attempts.
• MDR delivers end-to-end threat detection and response, encompassing 24x7 monitoring to incident containment to breach response.
• MVM offloads day-to-day VM operations to experts and extends coverage across the attack surface.
• Rapid7 Threat Complete unifies Rapid7 InsightIDR (“InsightIDR”) and Rapid7 InsightVM (“InsightVM”) to provide complete risk and threat coverage in a single offering. Using a shared agent, customers receive clarity and higher-efficacy detection coverage around priority vulnerabilities, enabling them to eliminate risks and threats faster across their environments.
• InsightIDR is a next-generation SIEM and extended detection and response (“XDR”) solution that delivers highly efficient, accelerated detection and response.
• InsightVM is a vulnerability management solution that provides visibility across on-premise and remote endpoints, enabling security teams to evaluate the business risk of vulnerabilities and configurations and share with their IT counterparts for remediation.
• Rapid7 Cloud Risk Complete (“CRC”) combines the power of Rapid7 InsightCloudSec (“InsightCloudSec”), InsightVM, and for CRC advanced customers, Rapid7 InsightAppSec (“InsightAppSec”) to manage risk across hybrid environments. Our “Executive Risk View” dashboard provides extensive visibility, enabling users to clearly understand, communicate, and prioritize risk. With a single subscription, organizations can secure hybrid environments
5
Ta ble of Contents
from development to production; detect and address risk across endpoints, cloud workloads, and traditional infrastructure; and perform dynamic application security testing to remediate application risk.
• InsightCloudSec is a cloud risk and compliance management solution that provides cloud native application protection platform capabilities and enables organizations to securely accelerate cloud adoption with continuous security and compliance throughout the entire software development lifecycle.
• InsightAppSec is a dynamic application security testing tool, delivered via the cloud, that combines powerful application crawling and attack capabilities, flexibility in scan and scheduling, and accuracy in results with a modern user interface, intuitive workflows, and sensible data organization.
In addition to our consolidation offerings, we individually offer each of our platform solutions, including InsightIDR, InsightCloudSec, InsightIVM, InsightsAppSec, InsightConnect and Rapid7 Threat Command. Our platform products are available globally and reduce the need for customers to manage a large, complex, data infrastructure.
To complement our products, we offer a range of standalone managed services, including MDR, MVM, MDRP and Rapid7 Managed Application Security, based on our software solutions, and professional services, including penetration testing services, incident response services, security advisory services, and deployment and training. Our managed services are delivered out of our SOC’s located in the U.S., Ireland, Australia and the Czech Republic. Each of these SOC’s consist of security analysts, threat engineers, incident responders and customer advisors that provide full-lifecycle support for our global managed services customers.
Our Growth Strategy
Our goal is to help customers command their attack surface by helping them anticipate, pinpoint, and act on exposure-led threats from endpoint to the cloud. The main drivers of our growth strategy are:
• Continued investments in product development: We intend to continue to invest in our product development to enhance our platform and deliver additional features to meet customer demand and grow our addressable markets.
• Expanding Strategic Partnerships: By expanding our strategic partnerships with system integrators we enable our customers to succeed with our technology and platform in their ecosystem and deliver more value from their security operations program. Recent technology alliances that drive this experience include ServiceNow, Microsoft, AWS, GCP and Palo Alto Networks.
• Grow our customer base: We believe we have a strong opportunity to address the security needs of resource constrained organizations of any size. We intend to continue to increase investments in our sales and marketing efforts and foster the growth of our channel relationships to enable acquisition of these customers.
• Upsell and cross-sell to our existing customer base: We see significant opportunities to deepen our relationship with our existing customers. With a strong focus on customer experience, satisfaction, and the value proposition of our platform, we intend to expand customers' usage of products they own (upsell) and help them adopt additional products (cross-sell). Our platform consolidation offerings are helping our customers maximize their budgets and giving them command of their attack surface, becoming our most dominant customer acquisition and expansion motions.
• Further strengthen our customer renewal rate: We intend to continue to drive customer satisfaction and renewals by offering professional services, support, and strong investments in customer success functions. Our customer success teams provide expertise to help our customers realize exceptional value and improve their security outcomes, leading to higher customer satisfaction.
• Managed Security Service Providers (“MSSPs”): Our platform products enable MSSPs to expand existing services to include detection and response (XDR/SIEM/MDR), vulnerability management, cloud security, threat intelligence, and application security. These relationships also allow us to leverage MSSP expertise to further expand our customer outreach.
• Channel partner ecosystem continued investment: We maintain a global channel partner network that complements our sales organization, particularly in Europe, the Middle East and Africa (“EMEA”); and Asia Pacific (“APAC”). We have established strong co-sell relationships with strategic channel partners, who provide additional leverage through customer acquisition, deal execution and providing value in securing renewals. We are focused on expanding our public cloud marketplace motion to support our customers’ move to those models. We will continue to invest in partner models that enable us to create long term customer value.
• International expansion: We continue to make investments to expand our international presence. These include investments in infrastructure, sales and marketing, and strategic partnerships.
6
Ta ble of Contents
• Strategic M&A: We have and may continue to make acquisitions that enhance the value of our Insight Platform and bolster our ability to solve emerging customer challenges, allowing us to deliver on the vision of becoming the SecOps leader.
Research & Development
We also invest substantial resources in research and development to enhance our core technology platform and products, develop new end market-specific solutions and applications, and conduct product and quality assurance testing. We partner with leading universities near our key centers to propel research and innovation and build a talent pipeline. We employ product, engineering and research professionals with a diverse skill set that includes data collection and analytics, AI, SaaS delivery, cloud-native development, and deep security expertise, and research capabilities.
Our experienced research team regularly reviews trending insights from our Platform and broader open source community to prepare industry reports and resources. This includes regular threat reports, common vulnerabilities and exposures, and skunkworks research to spotlight specific security concerns. This focus and intentionality around understanding the attacker mindset is a big part of our Rapid7 culture and is infused into our product development and engineering ethos.
Our research and development teams are located in Boston, Massachusetts; Austin, Texas; Arlington, Virginia; Dublin and Galway, Ireland; Belfast, Northern Ireland; and Tel Aviv, Israel, providing us with exposure to worldwide engineering talent. We are also establishing a new development and service center in Prague, Czech Republic that we anticipate will continue to grow over the next year.
Rapid7 Labs: Open Source Community
Our industry-leading attack experts analyze vulnerabilities, misconfigurations, and threat data to offer proactive guidance for organizations’ security programs. Leveraging threat intelligence from our free and open-source projects, we continuously enhance our products and services to improve the customer experience.
• Metasploit: Our Metasploit framework has an active community of contributors and users, including security researchers who contribute modules to the Metasploit Framework that serve as a resource about real-world attacker techniques. The Metasploit community also provides us with visibility into new cyber attacks as they occur and a deeper understanding of attacker behaviors.
• Project Lorelei: Project Lorelei began in 2014 to understand what attackers, researchers, and organizations are doing in, across, and against cloud environments and gain deeper insights into the tactics, techniques, and procedures employed by both bots and human attackers.
• Project Sonar: We conduct internet-wide scans across many services and protocols to gain insight into global exposures and vulnerabilities and collect data for platform analytics and preparation of core research reports.
• Velociraptor Open Source Digital Forensic and Incident Response ("DFIR"): Velociraptor is an open-source endpoint monitoring, digital forensic and cyber response platform. It was developed by DFIR professionals as an efficient way to hunt for specific artifacts and monitor activities across fleets of endpoints.
Threat Intelligence and Detections Engineering
Rapid7’s threat content library leverages unique raw threat from our open source communities, as well as expertly vetted third party intelligence, and insights from across our platform, to provide customers with a curated repository of detections and emergent threat coverage. With a combination of proprietary AI-driven detections and indicators of compromise mapped to the MITRE framework, our detection content spans both known and unknown threats across the threat life cycle. When analyzed against the diverse telemetry data, this content enables us to pinpoint threats across endpoints, network, users, cloud, and customers’ wider ecosystem. This library is leveraged by our Rapid7 MDR services as well as within our InsightIDR technology, meaning alerts are vetted in the field by our security experts, offering a feedback loop and ensuring strong signal-to-noise alerting.
Professional Services
Our professional services offerings include, but are not limited to, Penetration Testing, Cybersecurity Maturity Assessments, Security & Incident Response Program Development Services, Internet of Things & Internet Embedded Device testing as well as Threat Modeling, TableTop Exercises and Incident Response services. In addition, we offer deployment and training services related to our platform, to further help customers operationalize and customize their platform experience. By accessing our security talent, we help organizations develop an approach and road map to further mature and strengthen their security programs.
7
Ta ble of Contents
Our Customers
Our customer base has grown from approximately 10,000 customers at the end of 2021 to more than 11,500 customers as of December 31, 2023, in 151 countries, including 40% of the organizations in the Fortune 100. We define a customer as any entity that has an active Rapid7 recurring revenue contract as of the specified measurement date, excluding only InsightOps and Logentries customers with a contract value less than $2,400 per year.
Our customers span a wide variety of industries including manufacturing, financial services, healthcare and life sciences, retail, technology, government, media and entertainment, energy, education, transportation, real estate, and other professional services, with customers in the manufacturing industry representing our largest industry in 2023 at 15% of our revenue. In 2023, 45% of our revenue was generated from enterprises, which we define as organizations that have either annual revenue greater than $1.0 billion or more than 2,500 employees, and the balance was generated from middle-market and small organizations.
Our revenue is not concentrated with any individual customer, with no customers representing more than 1% of our revenue in 2023, 2022 or 2021.
Our Competition
The markets we operate in are highly competitive, fragmented, and subject to technology change and innovation. We primarily compete with established and emerging security product vendors, including the following:
• large companies that incorporate security features into their products;
• XDR and SIEM vendors;
• cloud security vendors;
• vulnerability risk management vendors;
• application security vendors;
• threat intelligence vendors; and
• legacy security, systems management, MSSPs, and other IT vendors.
We compete on the basis of a number of factors, including:
• product functionality;
• breadth of offerings;
• depth and expertise of our security service providers;
• performance;
• brand name, reputation and customer satisfaction;
• ease of implementation, use and maintenance;
• total cost of ownership; and
• scalability, reliability and security.
Some of our competitors have greater sales, marketing and financial resources, more extensive geographic presence or greater brand awareness than we do. We may face future competition in our markets from other large, established companies, as well as from emerging companies. In addition, we expect that there is likely to be continued consolidation in our industry that could lead to increased price competition and other forms of competition. With the introduction of new technologies, the evolution of our offerings and new market entrants, we expect competition to intensify in the future. Conditions in our market could change rapidly and significantly as a result of technological advancements, including with respect to AI. Our competitors may more successfully incorporate AI into their products, gain or leverage superior access to certain AI technologies, and achieve higher market acceptance of their AI solutions. For further discussion of the risks related to AI, please see below under “Risks Related to Intellectual Property, Litigation and Government Regulation."
Government Regulations
We are subject to various federal, state and international laws and regulations that affect our business, including those relating to the privacy and security of customer and employee personal information and export or import of our products to certain countries, governments or entities. Additional laws in all of these areas are likely to be passed in the future, which could result
8
Ta ble of Contents
in significant limitations on or changes to the ways in which we can collect, use, host, store or transmit the personal information and data of our customers or employees, communicate with our customers, and deliver products and services, which may significantly increase our compliance costs.
Intellectual Property
Our future success and competitive position depends in part on our ability to protect our intellectual property and proprietary technologies. To safeguard these rights, we rely on a combination of patents, trademarks, copyrights, trade secrets, employee and third-party nondisclosure agreements, licensing arrangements and other contractual protections to protect our intellectual property in the United States and other jurisdictions.
We have over two hundred issued patents and a number of registered and unregistered trademarks. The standard length of our patents is 20 years and while the grant dates of our patents vary, we believe that the duration of our issued patents is sufficient when considering the expected lives of our products. We file patent applications to protect our intellectual property and have a number of patent applications pending. We require our employees, consultants and other third parties to enter into confidentiality and proprietary rights agreements and control access to software, documentation and other proprietary information. Although we rely on intellectual property rights, including trade secrets, patents, copyrights and trademarks, as well as contractual protections to establish and protect our proprietary rights, we believe that factors such as the technological and creative skills of our personnel, creation of new modules, features and functionality, and frequent enhancements to our solutions are more essential to establishing and maintaining our technology leadership position.
We also license software from third parties for integration into our offerings, including open source software and other software available on commercially reasonable terms. We believe our continuing research and product development are not materially dependent on any single license or other agreement with a third party relating to the development of our products.
Human Capital
Rapid7 is dedicated to making the best in security operations achievable for all, and our employees are critical to achieving this mission. In order to continue to innovate, compete and succeed in our highly competitive and rapidly evolving market, it is crucial that we continue to attract and retain experienced employees. As part of these efforts, we strive to offer a competitive compensation and benefits program and foster a community where everyone feels included and empowered to do their best work.
As of December 31, 2023, we had 2,228 full-time employees, including 418 in product and service delivery and support, 840 in sales and marketing, 692 in research and development and 278 in general and administrative. As of December 31, 2023, we had 1,277 full-time employees in the U.S. and 951 full-time employees internationally. None of our U.S. employees are covered by collective bargaining agreements. We believe our employee relations are good and we have not experienced any work stoppages.
Compensation, Benefits and Well-being
Our compensation program is designed to attract and reward talented individuals who possess the skills necessary to support our business objectives, assist in the achievement of our strategic goals and create long-term value for our stockholders and fit within our company culture. In addition to their base salary, eligible employees are compensated for their contributions to the Company’s goals with short-term incentives and long-term equity awards tied to the value of our stock price. We believe that a compensation program with both short-term and long-term awards provides fair and competitive compensation and aligns employee and stockholder interests, including by incentivizing business and individual performance (pay for performance), motivating based on long-term company performance and integrating compensation with our business plans. In addition to cash and equity compensation, we also offer employees a wide array of benefits such as life and health (medical, dental and vision) insurance, travel benefits, paid time off and retirement benefits for all eligible full-time employees, We also provide emotional well-being services through our Employee Assistance Program.
All high performing employees globally are eligible to receive equity under our 2015 Equity Incentive Plan (the “2015 Plan”). Additionally, all employees in the United States, United Kingdom, Ireland, Canada, Australia, Germany and Israel may participate in our Employee Stock Purchase Plan (“ESPP”). As of December 31, 2023, over 90% of our employees were eligible to participate in the ESPP. Under the ESPP, employees may set aside up to 15% of their gross earnings, on an after-tax basis, to purchase our common shares at a discounted price, which is calculated at 85% of the lesser of: (i) the market value of our common stock at the beginning of each offering period and (ii) the market value of our common stock on the applicable purchase date.
We have evolved to a hybrid-first model, in which our employees who are assigned to an office can divide their time between the office and home. We are often iterating our approach to ensure we are balancing the needs of the business with the desires of our people, but remain committed to our view that offices remain a vital environment for fostering mentorship, career
9
Ta ble of Contents
development and collaboration. Additionally, we believe gathering in person allows our people to foster stronger relationships and trust, and helps to contribute to our great work culture.
Talent Development
We believe in investing in the growth and development of all of our employees. “Never Done” is one of our core values, and our employees take advantage of a myriad of opportunities for continuous learning, both through internal training and development experiences, on-demand learning modules, and access to content-specific curriculum based on need and interest. We have designed and implemented learning experiences for our employees at every stage of their careers. including personalized leadership development experiences that build capabilities for both non-technical and technical leaders and managers at each stage of the leadership journey. These experiences align to our core values and promote the leadership skills and behaviors we believe are critical to the success of our mission, customers, and development of our people. As a supporter of internal career growth, we actively mentor and invest in the pipeline of our future leaders. Additionally, new employees engage in our 90-day onboarding experience which is intended to support the embodiment of our core values, and shorten their time to create impact.
To supplement our internal learning experiences, as well as provide opportunities for independent study, employees have access to online education tools, including a digital library, to build the necessary skills to pursue additional certifications related to one’s role. To further invest in the future of cybersecurity and to deliver on our company mission, we created a platform that includes the most recent product training materials, as well as makes certification exams available at zero cost. Electronic certificates can be published to an employee’s LinkedIn professional profile, and the CPEs associated with the exam and learning materials help cybersecurity professionals maintain their minimum “continuing development” points for their professional certifications such as Certified Information Systems Security Professional, Global Information Assurance Certification and Certified Professional Hacker. We believe our investment in these resources, along with flexible working environments, will support our employees in their pursuit of lifelong learning.
We believe we will positively impact the experience of our customers by focusing on the development and engagement of our employees.
Diversity, Equity and Inclusion
Fostering a culture that values the principles of diversity, equity, and inclusion is an essential and fundamental aspect of who we are. We strive to create an environment where every individual, regardless of their background, feels valued and empowered. Diversity, equity and inclusion are key drivers of creativity and innovation, and we know that when teams embrace these drivers, they are able to make better business decisions, which ultimately drive better business outcomes. Our commitment extends beyond just words, it is an ongoing investment that is visible in our partnerships, yearly programming, internal events, training and development and available resources.
Over the past year we have made significant progress on internal programming and support, which in turn allowed us for the first time to be featured on the Human Rights Campaign Equality Index. Our employee resource groups offered roundtables and educational sessions focused on embracing identity, navigating difficult conversations, building a personal brand and reputation, advocating for yourself, celebrating and supporting those who are neurodivergent and more. We welcomed the launch of our newest employee resource group established to create intentional space for those identifying as LatinX and/or Hispanic. We continue to offer our comprehensive e-learning program on diversity, equity, and inclusion, for all new hires. Our efforts also extended to our global talent acquisition teams, holding in-person and virtual training, focused on leveraging the key tenets of cultural competency to support our ongoing efforts to build multidimensional talent pipelines. In addition, all our employees now have access to education geared toward collaborating with supporting neurodivergent team members.
Community Involvement & The Rapid7 Cybersecurity Foundation
We give back to the communities where we live and work, and believe that this commitment helps in our efforts to attract and retain employees. We partner with a variety of STEM and inclusion-focused programs to promote technology education for all. Beyond contributions of cash, we encourage employee volunteerism at all our locations. In 2021, we formed the Rapid7 Cybersecurity Foundation (the “Foundation”). The Foundation’s mission, which aligns closely to that of Rapid7, is to promote a more diverse and inclusive cyber workforce and advance security by supporting cybersecurity programs and solutions that are free and open. These include, among others, Hack.Diversity, the Cyber Peace Institute and its program Cyber Peace Builders and Cyversity. After seeding the Foundation with an initial contribution of $1.0 million in 2021, Rapid7 continued its support of the Foundation with an additional investment of $0.5 million in 2022.
In February 2023, Rapid7 and its Foundation announced a multi-year partnership and a $1.5 million dollar commitment to create the Rapid7 Cyber Threat Intelligence Lab at the University of South Florida (“USF”). The goal of the interdisciplinary lab at USF is to catalyze new collaborative research efforts in cyber threat detection, track malicious threat actors through an extensive sensor network, support an inclusive approach to diverse talent development in cybersecurity, and serve as a hub for thought leadership and community-engaged programming both locally and within the global cybersecurity industry.
10
Ta ble of Contents
Corporate Information
Our principal executive offices are located at 120 Causeway Street, Boston, Massachusetts. Our telephone number is +1 617-247-1717. Our website address is www.rapid7.com .
“Rapid7,” the Rapid7 logo, and other trademarks or service marks of Rapid7, Inc. appearing in this Annual Report on Form 10-K are the property of Rapid7, Inc. This Annual Report on Form 10-K contains additional trade names, trademarks and service marks of others, which are the property of their respective owners. Solely for convenience, trademarks and trade names referred to in this Annual Report on Form 10-K may appear without the ® or TM symbols. The information contained on our website or information that may be accessed through links on our website is not incorporated by reference into this Annual Report on Form 10-K.
Available Information
Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to these reports filed pursuant to Sections 13(a) and 15(d) of the Securities Exchange Act of 1934, as amended, are made available free of charge on or through our website at investors.rapid7.com as soon as reasonably practicable after such reports are filed with, or furnished to, the SEC.
11
Ta ble of Contents