Rapid7 MDR pricing.
Per-asset annual subscription stacked on top of InsightIDR (per-seat + per-GB ingest). Threat Command (DRP) and Active Response sold as separate bundles.
Rapid7 MDR does not publish a list price on its official page in 2026 (Quote-only ('Get a Quote' on official page)). Field-reported bands cluster at 9 to 28 USD per asset / month all-in (MDR + InsightIDR), sourced from G2 deal data, channel-partner listings, and Reddit r/cybersecurity quote dumps verified 2026-06-19.
Ledger entry
What changes the quote
The headline per-asset band moves with endpoint count, contract length, 24x7 vs business-hours coverage, the inclusion of an incident-response retainer, whether the customer brings their own SIEM, and the compliance overlay (HIPAA, PCI, CMMC L2, FedRAMP, DORA). See /annex/quote-decoder for the question ladder that decodes a Rapid7 MDR quote line by line.
What is bundled and what gets line-itemed
Bundled into the base subscription: 24x7 SOC monitoring, EDR licence (where vendor-supplied), portal access, standard onboarding. Line-itemed at extra cost: ingest overage above the contracted GB/day, non-standard log sources, dedicated tenancy, evidence packs for regulated frameworks, IR retainer hours, and contract off-boarding. Cross-reference /annex/hidden-costs for the full schedule.
Recent changes
Continued Command Platform consolidation through 2026; AWS Marketplace listings expanded; per-asset metering model retained.
Source
Primary source: https://www.rapid7.com/products/managed-services/managed-detection-and-response-services/, verified 2026-06-19. Inferred-band sourcing note: G2 and PeerSpot field data 2025-2026; per-asset metering counts servers, cloud workloads, network devices in addition to endpoints, which is why the band sits above pure per-endpoint vendors.
See notes to the ledger for the source-mark legend and the inferred-band derivation methodology.