Rapid7 MDR Packages
Coverage, response, and guidance to fit your needs. Straightforward, asset-based pricing that delivers predictable value.
Essentials
For lean teams establishing always-on protection
- 24x7x365 SOC monitoring
- Remote containment & remediation
- Incident response
- Vulnerability risk scanning
- SOAR automation
- Unlimited log ingestion
- 13 months data retention
- AI-enhanced SOC
- Proactive threat hunting
- Security posture assessment
Advanced
For growing programs expanding coverage and resilience.
Everything on Essentials plus:
- 3rd party ecosystem monitoring
- Dedicated cybersecurity advisor
- Security posture assessment
- Monthly posture review
- Executive trend reporting
Ultimate
For mature security operations teams managing complex risk
Everything on Advanced plus:
- Expanded 3rd party ecosystem monitoring
- Monthly posture & risk review
- Breach protection warranty
- Embedded DFIR, Velociraptor
- Vulnerability management prioritization & remediation guidance
- Scanning configuration
MDR priced and delivered for cyber resilience
Rapid7 MDR delivers predictable pricing and built-in risk reduction while extending your team’s expertise and organization’s resilience – driving confident security outcomes without added overhead.
Get predictable value, always
Rapid7 MDR pricing is based on the number of endpoints, servers, and networks we protect – not by data volume ingested into our SIEM nor the number of incidents requiring response.
Included risk reduction
Rapid7 MDR features preemptive risk reduction through our market-leading exposure management capabilities – included in your service at no extra cost.
Scale security, not overhead
Rapid7 MDR extends your team with dedicated program guidance, helping strengthen cyber resilience without adding internal headcount.
Get predictable value, always
Rapid7 MDR pricing is based on the number of endpoints, servers, and networks we protect – not by data volume ingested into our SIEM nor the number of incidents requiring response.
Included risk reduction
Rapid7 MDR features preemptive risk reduction through our market-leading exposure management capabilities – included in your service at no extra cost.
Scale security, not overhead
Rapid7 MDR extends your team with dedicated program guidance, helping strengthen cyber resilience without adding internal headcount.
Add-ons for extended coverage
Building resilience isn’t one-size-fits-all. Rapid7 offers additional technology and service add-ons that extend MDR capabilities, allowing you to tailor coverage and strengthen defenses based on your specific environment and risk profile.
Managed Digital Risk Protection
360° expert threat detection coverage to identify early threat signals across the clear, deep, and dark web.
Attack Surface Management
Visualize your entire attack surface by combining continuous external scanning with internal asset context to eliminate blind spots.
Continuous Red Teaming
Validate your external attack surface exposures and test your defenses with continuous red team operations.
Rapid7 MDR Packages
| Essential | Advanced | Ultimate | |
|---|---|---|---|
| Threat Detection and Response | |||
Add-On | |||
Add-On | Add-On | Add-On | |
| Ransomware | |||
Add-On | Add-On | ||
Add-On | Add-On | ||
- | - | ||
| Exposure Management | |||
Limited | Limited | ||
Limited | Limited | ||
Managed DRP Add-On | Managed DRP Add-On | Managed DRP Add-On | |
Managed DRP Add-On | Managed DRP Add-On | Managed DRP Add-On | |
Managed DRP Add-On | Managed DRP Add-On | Managed DRP Add-On | |
Managed DRP Add-On | Managed DRP Add-On | Managed DRP Add-On | |
| Cybersecurity Program Growth | |||
- | |||
- | |||
- | |||
- | - | ||
| Data and Technology | |||
Frequently asked questions
Each Managed Threat Complete solution is custom quoted for your specific environment size. Managed Threat Complete packages have simple and predictable pricing structures based on the number of assets in your environment.
Managed Threat Complete is our MXDR offering, but it offers so much more! Managed Threat Complete includes all Managed Extended Detection and Response (MXDR) capabilities, plus our Managed Cyber Risk service which includes internal and external scanning of your assets and unlimited scanning licensing for you to use with InsightVM.
Yes! All Managed Threat Complete subscriptions include full access to InsightVM solution for exposure management. We’ll perform internal and external exposure scans and generate actionable reports on your behalf, but you’ll have full access to create projects, track resolution, and integrate with your IT ticketing systems to build a holistic Vulnerability Risk Management program.
Current MDR Elite and MDR Essentials customers will continue their service. If you’d like to upgrade your service to Managed Threat Complete, please contact your CSA or AE to learn more.
Assets are hosts running a workstation or server operating system to which data has been attributed in the last 30 days. This would include things like servers, desktops, laptops (physical and virtual), point of sales systems, etc.
The price does not change based on asset type.
Yes. Managed Threat Complete is priced by asset. The price per asset decreases across asset count tiers.
For a price quote, please visit: https://www.rapid7.com/pricing/request-a-quote.
Yes. All Managed Threat Complete subscriptions are offered as an annual contract.
Yes, pricing will shift internationally. For a local price quote, please visit: https://www.rapid7.com/pricing/request-a-quote.
All MTC customers have access to our robust documentation and support resources. Customer Support is available regionally between 8AM and 6PM, worldwide. Rapid7 also provides eSupport, an easy-to-use, integrated web support tool that provides personalized, comprehensive self-help resources integrated with our Support Centers. For customers seeking support, please visit: https://www.rapid7.com/for-customers.
For those who would like additional support, Rapid7 offers services packages to help further accelerate and operationalize their specific initiatives. Learn more about available services here: https://www.rapid7.com/services.
All assets do not have to be in one location. Many Managed Threat Complete customers have assets spread across multiple offices, remote employees, etc. That said, all assets connected to your InsightIDR instance must be in a logically-separated environment for our MXDR analysts to perform proper detections and response.
If you have multiple subsidiaries, business units, or any other type of additional environment coverage, you may qualify for our Multi-Org service delivery. Please contact your CSM or AE to learn more.
Yes! All Managed Threat Complete subscriptions include full access to InsightIDR's unified SIEM and XDR technology. We feel it’s important for you to have full transparency into what our SOC team is seeing and doing as an extension of your team. You can search 13 months of logs, run investigations, monitor activity, and so much more. Whether you want to be 100% hands-off or log in once a day, you have the freedom (and access) to do whatever works best for you.