Rapid7's Terms: Security Vendor, Loose Data Guardrails

Rapid7 provides vulnerability management and cybersecurity tools. Their terms contain some standard protections but also hand-offs that deserve attention.

🔴 Terms can change whenever they want. No specific notice required. You might miss an update.

🔴 Anything you send them isn't treated as confidential. Emails, support tickets, feedback—they reserve the right to use it.

🔴 They're not responsible for links to third-party sites or what's on them. Standard disclaimer, but worth knowing if you're relying on their recommendations.

🟡 They can use your personal information for any lawful purpose. Broad framing. Lawful is wide.

🟢 You can download, archive, and print content for personal use. Basic fair use. They let you keep a copy.

A D-grade cybersecurity vendor with a D-grade terms document. Not ideal when you're trusting them with your attack surface data.

This breakdown is based on Rapid7's publicly available Terms of Service and/or Privacy Policy. It may contain mistakes. Spot one? Let us know.