Publisher

Rapid7

Rapid7 sells term subscriptions to cloud-hosted and on-premises security software under a single Master Software and Services Agreement, metered by Volume Limitations such as unique assessed assets (InsightVM, Nexpose), assets with recent data (InsightIDR, MDR), apps (InsightAppSec), billable cloud resources (InsightCloudSec) and users (Metasploit Pro), with overages invoiced at list price and on-premises usage verified by self-certification.

Start Here

Overview articleRapid7 licensingRapid7 sells term subscriptions to cloud-hosted and on-premises security software under a single Master Software and Services Agreement, metered by Volume Limitations such as unique assessed assets (InsightVM, Nexpose), assets with recent data (InsightIDR, MDR), apps (InsightAppSec), billable cloud resources (InsightCloudSec) and users (Metasploit Pro), with overages invoiced at list price and on-premises usage verified by self-certification.Cited · Edited 2026-09-30 · 22 references

Guides

Rapid7 Master Software and Services AgreementCited · Edited 2026-09-30

Rapid7 InsightVM, Nexpose and Exposure Command licensingCited · Edited 2026-09-30

Rapid7 InsightIDR, Incident Command and MDR licensingCited · Edited 2026-09-30

Rapid7 Metasploit, AppSpider, InsightAppSec and InsightCloudSec licensingCited · Edited 2026-09-30

Licensing Data

From the Rapid7 catalog: how usage is counted, the rules that apply, the programs licences are bought through and the SKUs. Backed by 66 verbatim excerpts from 29 Rapid7 documents.

Metrics 10

App (InsightAppSec)Application Asset (host with data attributed in last 30 days)Asset Asset (unique assessed asset)Asset Billable resource (InsightCloudSec)Cloud resource Covered Endpoint (Breach Protection Warranty)Endpoint Developer license (InsightCloudSec)User Licensed system (AppSpider Pro)Device Monthly data (Fair Use Monthly Data Policy)Gigabyte

Rules 40

Above 110% of licensed assets new scan data may not be retainedCompliance Affiliates may use the Offerings; customer liable for themUse rights AppSpider Pro licence bound to system hardware, physical or virtualTransfer Assignment requires Rapid7 advance written consentTransfer AWS and Azure instances count until terminated; container hosts count onceVirtualization Breach warranty limit set by number of Covered EndpointsWarranty Command Platform Subscription Management lists purchased entitlements and expiryEntitlement Correlated assets counted once across agent and scanCounting

Programs 11

Evaluation and trial licensesEvaluation Exposure Command (Essentials and Ultimate)Platform package Incident Command (Essential, Advanced, Ultimate)Platform package Insight Platform Service Level AgreementService level Limited Breach Protection WarrantyWarranty Managed Threat Complete (MDR packages)Managed service subscription Metasploit legacy perpetual licensePerpetual (legacy)PACT Partner Program for Service ProvidersPartner (service provider)

SKUs 12

InsightAppSec - starting price per appCited InsightCloudSec - 1,000 resource tierCited InsightCloudSec - 10,000 resource tierCited InsightCloudSec - 15,000 resource tierCited InsightCloudSec - 2,000 resource tierCited InsightCloudSec - 3,000 resource tierCited InsightCloudSec - 5,000 resource tierCited InsightCloudSec - 500 resource tierCited

Products

All 16 Products

Vulnerability Management Software 5

Exposure Command Essentials, Exposure Command Ultimate, InsightVM, Metasploit Pro, Nexpose

Incident Response Services Providers 5

Incident Command, Incident Command Advanced, Incident Command Essential, Incident Command Ultimate, InsightIDR

Managed Security Services Providers (MSSPs) 3

Managed Threat Complete Advanced, Managed Threat Complete Essential, Managed Threat Complete Ultimate

Application Security Software 2

AppSpider Pro, InsightAppSec

Cloud Security Software 1

InsightCloudSec