Exposure Command Overview

Exposure Command extends the power of Surface Command, combining complete attack surface visibility with high-fidelity risk context and insight into your organization’s security posture, aggregating findings from both our native exposure detection capabilities as well as third-party exposure and enrichment sources you’ve already got in place. This situational awareness enables teams to focus on the exposures and vulnerabilities that attackers have in their sights with the threat-aware risk context needed to prioritize more efficiently and effectively. For more details on Surface Command, visit the Surface Command Overview.

Exposure Command goes beyond monitoring and asset inventory mapping, enriching telemetry with compliance and risk findings from Rapid7’s entire set of exposure management capabilities. Combined, on-prem vulnerability management, cloud security, and application testing enable security and risk management teams to shift from reactive to proactive, continuously assessing your attack surface, validating exposures and providing actionable remediation guidance that takes into account existing downstream controls and the blast radius of a potential compromise. Native, no-code automation ensures teams operationalize their exposure management programs efficiently, with more than 450+ out-of-the-box integrations with popular security and ITOps tools.

Exposure Command packages

Rapid7 currently offers the following package tiers:

• Exposure Command Essentials is for teams looking for a holistic view of their attack surface as well as on-premise monitoring, risk prioritization, and vulnerability management.
• Exposure Command Advanced is for teams looking for a holistic view of their attack surface as well as some cloud and on-premise monitoring, including attack path analysis, risk prioritization, and vulnerability management.
• Exposure Command Ultimate is for teams looking for a holistic view of their attack surface as well as extensive cloud and on-premise monitoring, compliance alignment, infrastructure as code (IaC) scanning, least privileged access management, and threat detection.

Surface Command is included with all Exposure Command package tiers.

Feature comparison

The following table lists key differences between the products at a feature-level.

Capability	Surface Command	Exposure Command Essentials	Exposure Command Advanced	Exposure Command Ultimate
Asset discovery and unified inventory, including devices, software, identities, and controls	✓	✓	✓	✓
Asset enrichment with security context	✓	✓	✓	✓
Blast radius mapping with asset graph	✓	✓	✓	✓
Built-in automation and policy enforcement	✓	✓	✓	✓
External attack surface discovery	✓	✓	✓	✓
Vulnerability and policy scanning	-	✓	✓	✓
Dynamic asset tagging with criticality rating	-	✓	✓	✓
Threat-aware active risk score	✓	✓	✓	✓
Customizable live dashboards and reporting	-	✓	✓	✓
Remediation Hub	✓	✓	✓	✓
Bulk data export API	-	✓	✓	✓
Security orchestration, automation, and response (SOAR)	✓	✓	✓	✓
100s of out-of-the-box compliance policies and industry standards	-	✓	✓	✓
Hosted and container vulnerability assessment	-	-	✓	✓
Best practices configuration assessment, including CIS	-	✓	✓	✓
Multi-cloud visibility across AWS, Azure, GCP, and Kubernetes	-	-	✓¹	✓
Cloud hosted and container vulnerability assessment	-	-	✓	✓
Best practices cloud configuration assessment, including CIS	-	-	✓	✓
Contextual risk prioritization	-	-	✓	✓
Attack path analysis	-	-	✓	✓
Notifications and integrations	-	-	✓	✓
Extended Cloud Visibility (Oracle Cloud Infrastructure and Alibaba Cloud)	-	-	-	✓
Infrastructure as Code (IaC) scanning	-	-	-	✓
Cloud threat detection	-	-	-	✓
Real-time cloud visibility with event-driven harvesting (EDH)	-	-	-	✓
Automated cloud remediation	-	-	-	✓
Dynamic Application Security Testing (DAST)	-	-	-	✓
100s of out-of-the-box cloud compliance policies and industry standards	-	-	-	✓