Rapid7 MDR Reviews

Name: Rapid7 MDR
Brand: Rapid7
Rating: 4.3 (5 reviews)

4.3 out of 5

5 reviews
100% willing to recommend

What is Rapid7 MDR?

Standing up an effective detection and response program isn’t as simple as buying and implementing the latest security products. It requires a dedicated SOC, staffed with highly skilled and specialized security experts, and 24/7 vigilance using the best technology to ensure stealthy attackers have nowhere to hide. Creating such a program can be expensive, difficult to maintain, and provides limited assurance that you’ve advanced your overall security. Rapid7 MDR is built from the ground up to help security teams of all sizes and security experiences strengthen their security posture, find attackers, and stay ahead of emerging threats. Our MDR service uses a combination of security expertise and technology to detect dynamic threats quickly across your entire ecosystem, providing the hands-on, 24/7/365 monitoring, proactive threat hunting*, effective response support, and tailored security guidance needed to stop nefarious activity and help you accelerate your security maturity.

Get the Managed Detection and Response (MDR) Buyer's Guide and find out what your peers are saying about Rapid7 MDR, Huntress Managed EDR, CrowdStrike Falcon Complete MDR and more!

Rapid7 MDR is the #17 ranked solution in top Managed Detection and Response (MDR) solutions. PeerSpot users give Rapid7 MDR an average rating of 8.6 out of 10. Rapid7 MDR is most commonly compared to Huntress Managed EDR: Rapid7 MDR vs Huntress Managed EDR. Rapid7 MDR is popular among the large enterprise segment, accounting for 46% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 13% of all views.

Buyer's Guide

Managed Detection and Response (MDR)

June 2025

Get the category report

Helped 860,168 peers since 2012

Featured Rapid7 MDR reviews

Oluwaseun Sonaike

Head, Networks and Security at First City Monument Bank Limited

We've filled in crucial gaps we had with our previous solution. This was a key factor in choosing Rapid7 during the selection process. The ROI is already starting to show, too. We saw specific cost reductions. We used to pay extra for external user insight and availability management in our old setup. Now, that's all included in Rapid7, which saves us money and simplifies management.

Read full review

reviewer1388853

Marketing Expert at a comms service provider with 51-200 employees

The features of Rapid7 MDR that I find most effective for threat detection are the threat intelligence capabilities because it already collects many vulnerabilities and exploitations, as well as the configuration of network devices. They integrate everything into one solution. The other solutions such as CrowdStrike or SentinelOne don't collect all the vulnerabilities or threat intelligence except within their product itself, making Rapid7 MDR very strong in this aspect. I have seen an ROI from this solution in terms of time savings. Because it includes everything, including SIEM, EDR, and vulnerability control, other solutions require integration of every module and vendor. It is easier to implement once they start, as the modules of the EDR can be challenging to implement and may require consulting.

Read full review

RussellBurrows

Senior IT Security Specialist at KNIPPERX INC.

It is a good solution. It's not a black box. Our security operations center has similar access to the console that we have access to. It's very open. The product has automation workflows. It has around 5000 detections in it. I trust the solution. The product is continuously developing. Whenever something new comes out, the product is upgraded. We can also bring in community threat feeds. The product allows us to customize our alerts. Log query searching has come a long way. It doesn’t require us to code anymore. We can just type in what we are looking for. We can also deploy our agents. The good thing about agents is that we can use the automation workflow to disable user accounts. We can also make it disable and quarantine an asset. These features are provided right out of the box. The workflows do not cost us more money.

Read full review

Rapid7 MDR mindshare

As of July 2025, the mindshare of Rapid7 MDR in the Managed Detection and Response (MDR) category stands at 2.8%, up from 2.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Managed Detection and Response (MDR)

Key learnings from peers

Last updated May 25, 2025

Valuable Features

Rapid7 MDR is praised for its transparency, automation workflows, and extensive threat detection. It excels in incident response, vulnerability management, and ease of integration, allowing seamless onboarding from other MSSPs. Its threat intelligence capabilities are robust, integrating vulnerabilities and network configurations. Rapid7 MDR includes SIEM and EDR, providing comprehensive security without needing extra modules. Users appreciate its open access, customizable alerts, and cost-effective workflows, enhancing proactive security operations with unlimited incident response.

"The features of Rapid7 MDR that I find most effective for threat detection are the threat intelligence capabilities because it already collects many vulnerabilities and exploitations, as well as the configuration of network devices."
"The solution uses its own SIM solution, InsightIDRC, and offers an unlimited incident response as part of the package."
"We've filled in crucial gaps we had with our previous solution. This was a key factor in choosing Rapid7 during the selection process. The ROI is already starting to show, too."

Room for Improvement

Rapid7 MDR lacks transparency in security operations, leaving users uncertain about activities and results. Report and dashboard enhancements are suggested. Users express concerns about its AI capabilities, noting a lag behind vendors like CrowdStrike, SentinelOne, and Microsoft. Embracing artificial intelligence is essential for innovation to keep pace in the rapidly evolving market.

"Rapid7 MDR is currently weak in AI solutions and intelligence, which is concerning."
"Currently, I can't think of any improvements, although there's always room for improvement in any solution."
"There are potential improvements in reports and dashboards."

Pricing

Rapid7 MDR pricing is considered reasonable and flexible by users, who appreciate its cost-effectiveness. Many highlight that while cheaper options exist, the technology provided justifies the cost. Users frequently mention satisfied cost-benefit outcomes, noting that purchasing the complete service offers significant value over individual technology stacks. Instead of focusing solely on price, evaluations often emphasize the robust technology and overall investment efficiency, making it an attractive option for organizations seeking comprehensive security solutions.

"The product is not overly priced."

Popular Use Cases

Companies primarily utilize Rapid7 MDR in their security and virtual centers to enhance visibility and investigate incidents efficiently. Organizations seek to benefit from its expertise and technology, aiming for quicker incident responses. Rapid7 MDR stands out as a SIEM-type service, distinguishing itself from traditional EDR and XDR solutions, unlike competitors such as CrowdStrike, SentinelOne, or Microsoft. Businesses value Rapid7 MDR for its unique positioning despite facing competition in the EDR market.

Service and Support

Rapid7 MDR provides ample customer service with direct phone access for critical issues. The team offers responsive support including onboarding and custom configurations. Technical assistance is rated highly, with dedicated customer advisors ensuring prioritized handling and agreement on response times according to incident severity. However, it's noted that lower tier support could improve and Japanese clients need representatives fluent in their language, as current support is mainly in English.

Deployment

Initial setup of Rapid7 MDR is rated moderately difficult. It takes approximately three weeks, particularly for deploying all agents. Some describe it as straightforward, with installation taking less than a day, rating it eight or nine out of ten. For existing users, integrating everything is relatively easy, but new users may find it challenging due to numerous modules, cloud deployment, network devices, data collection, and agent installation involved.

Scalability

Rapid7 MDR offers flexibility and scalability, surpassing previous solutions limited by event constraints. Users are not restricted by log volume, making it suitable for enterprises. Its seamless integration with security tools enhances its market position. Ratings for scalability range from seven to eight out of ten, reflecting high levels in most assessments. The platform supports large-scale deployments without performance degradation, appealing to users seeking adaptable and robust cybersecurity solutions.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Managed Detection and Response (MDR) Buyer's Guide for additional reliable information.