Rapid7
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | partial | 0 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 82 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Rapid7's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/rapid7"><img src="https://thirdpartyindex.com/badge/rapid7.svg" alt="Rapid7 transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/rapid7)Compliance
- FedRAMP
- InsightGovCloud Authorized Moderate · 1 agency authorization · since Jul 11, 2025
FedRAMP status from the FedRAMP Marketplace (evidence)
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
32 third parties, 15 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| 6sense | United States | ||
| Amazon Web Services (AWS) | Australia, Canada, Germany, Ireland, Japan, United States | ||
| Anthropic | United States | ||
| ARMO Security | EU | ||
| Ask-AI | United States | ||
| Box | United States | ||
| Cisco | United Kingdom, United States | ||
| Compyl | United States | ||
| Concentrix | United States, EU | ||
| Confluent | United States | ||
| Datadog | United States | ||
| Dialpad | United States | ||
| Freshworks | United States | ||
| Gong | United States, EU | ||
| Google Cloud | United States, EU | ||
| Google Workspace | United States, EU | ||
| Grafana Labs | United States | ||
| IntSights Cyber Intelligence Ltd. | Israel | ||
| IronScales | United States | ||
| Klarity | United States | ||
| Marketo | United States | ||
| Okta | United States | ||
| OpenAI | United States | ||
| Pendo | United States | ||
| Plextrac | United States | ||
| Productboard | United States | ||
| Rapid, Inc. | United States | ||
| Salesforce | United States | ||
| Slack | United States | ||
| Snowflake | United States | ||
| Tableau | United States | ||
| Zoom | United States |
Rapid7 affiliates (15)
Listed as a subprocessor by (2)
Purposes as each company states them.
Alcide alcide.io
MacStadium macstadium.com Log monitoring, Security Incident Event Management, and 24/7 Security Operations Center Managed Detection & Response services
Service status
- 3 incidents in 12 days
- 0 major or critical
- 1 h 53 min typical time to resolve
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Vulnerability Management - Dashboard and Reporting Degradation | minor | 1 h 53 min | |
| Vulnerability Management - Dashboard and Reporting Degradation | minor | 24 min | |
| Rapid7 Customer Portal Degradation | none | 7 h 3 min |
As Rapid7's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Changes
None since tracking began.