Combines vulnerability management, external attack surface and cloud posture into one hybrid exposure view. Broad coverage for mixed estates; validation is a managed service rather than a product feature.
Exposure Command is the exposure layer of Rapid7's Command Platform, sitting on top of the long-standing InsightVM scanner and Surface Command, the combined cyber asset and external attack surface product built from the Noetic Cyber acquisition in 2024.
The hybrid framing is the pitch and it is a fair one: many mid-market organisations have on-premises servers, several clouds and a scattering of internet-facing applications, and few products cover all three without stitching. Layered context and attack path analysis then rank across that estate.
Remediation Hub, announced with Exposure Command in August 2024 and available since April 2025, handles mobilisation with grouped fixes and owner routing, which addresses the historic complaint that vulnerability management tools stop at the report.
Validation is where the marketing needs reading carefully. Runtime validation announced in March 2026 uses runtime telemetry to confirm that a vulnerable component is actually running and reachable, which is strong evidence but not adversarial testing. Real red teaming is sold separately as the Vector Command managed service.
Check in a demo: how billable asset counting works across cloud, on-premises and external assets, since the licensing unit is usage-based and the same asset can appear in several places. The older product URL now returns an error; use the one linked here.
Weak in one of these stages? The self-assessment tells you which stage to shop for first, and the directory shows who covers it.
Claim or correct this listing
Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.
Get vendor updates monthly
One email a month: what changed in exposure management, which vendors moved, and one thing worth doing. No spam, unsubscribe any time.