What do Alphabet and Rapid7 sell?

Alphabet sells Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Rapid7 sells Vulnerability Management, Threat Command and Metasploit.

Are Alphabet and Rapid7 in the same category?

They share SIEM. Alphabet's primary category is SIEM and Rapid7's is Vulnerability management.

Who are Alphabet and Rapid7 sold to?

From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. Rapid7 offers vulnerability management for hybrid environments and cloud security for multi-cloud environments.

What have Alphabet and Rapid7 announced recently?

December 22, 2025: Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt.

Vendor comparison · 2 companies

Alphabet vs Rapid7

Alphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements. Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions. CISO Tribune files both under SIEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Alphabet
Rapid7

Add a company

Alphabet vs Rapid7: Products, Customers and Funding Compared
What it sells
	AlphabetAlphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements.cloud.google.com	Rapid7Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions.rapid7.com
What it sells	Google Threat Intelligence^[1][2]Threat intelligence for understanding threat actors and potential attack vectors. Mandiant Consulting Services^[2]Consulting services for understanding threat actors and potential attack vectors. Security Command Center^[1][3]A platform for defending against threats to Google Cloud assets. Identity Platform^[3][5]A customer identity and access management (CIAM) platform for apps. reCAPTCHA Enterprise^[3][5]Helps protect a website from fraudulent activity, spam and abuse. Google Cloud Armor^[3]Helps protect applications and websites against denial of service and web attacks.	Vulnerability Management^[3][4][6]Helps customers understand risk across hybrid environments and prioritize remediation. Threat Command^[7]Monitors the clear, deep, and dark web to identify risks before they become attacks. Metasploit^[9][10][11]Validates vulnerabilities and enables phishing and broader social engineering.
Categories
Categories	SIEM (primary category) Threat intelligence Incident response and forensics Cloud-native application protection (CNAPP)	Vulnerability management (primary category) External attack surface management SIEM MDR and managed SOC
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	December 22, 2025Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt.^[7]	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: listed, seen November 10, 2026^[14] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. Our reading is that Google Cloud addresses organisations migrating from on-premises to the cloud that want to replicate their on-premises network based security architecture as they move data to Google Cloud. Alphabet addresses customers that, as part of a migration to the cloud, may need to validate its compliance documentation, certifications and controls. Alphabet publishes regional compliance papers on the telecommunications industry. Alphabet's industry solutions range from improving retail product discovery to detecting bank fraud.	Rapid7 offers vulnerability management for hybrid environments and cloud security for multi-cloud environments. Rapid7 provides clear, deep and dark web monitoring for threats to an organization, its employees and its customers. Rapid7 states that it has customers around the world.
Last verified
Last verified	November 2, 2026	November 6, 2026

Where they overlap

Alphabet and Rapid7 are both filed under SIEM.

Where they differ, field by field

Alphabet's primary category is SIEM; Rapid7's is Vulnerability management.
Alphabet is also filed under Threat intelligence, Incident response and forensics and Cloud-native application protection (CNAPP). Rapid7 is also filed under External attack surface management and MDR and managed SOC.
Alphabet lists Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Rapid7 lists Vulnerability Management, Threat Command and Metasploit.

What it sells: Alphabet

What Google Threat Intelligence does^[1][2]: Google Threat Intelligence is used to understand threat actors and potential attack vectors. Google Threat Intelligence is offered alongside Mandiant Consulting Services.
What Mandiant Consulting Services does^[2]: Mandiant Consulting Services is offered to understand threat actors and potential attack vectors. Mandiant Consulting Services is offered alongside Google Threat Intelligence.
What Security Command Center does^[1][3]: Security Command Center is a platform for defending against threats. Security Command Center covers Google Cloud assets.
What Identity Platform does^[3][5]: Identity Platform is a customer identity and access management (CIAM) platform for adding identity and access management to apps. Identity Platform integrates with the reCAPTCHA Enterprise API to enhance security for users. With bot protection, Identity Platform provisions score-based reCAPTCHA keys in the customer's project.
What Google Cloud Armor does^[3]: Google Cloud Armor helps protect applications and websites against denial of service attacks. Google Cloud Armor covers web attacks against applications and websites.

What it sells: Rapid7

What Vulnerability Management does^[3][4][6]: Vulnerability management uses agent-based and network scanning across hybrid environments. Remediation is prioritized according to targets that attract attackers the most.
What Threat Command does^[7]: Threat Command takes on takedown management for organizations. A dynamic asset mapping framework tracks a customer's evolving digital footprint.

Questions about Alphabet and Rapid7

What do Alphabet and Rapid7 sell?: Alphabet sells Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Rapid7 sells Vulnerability Management, Threat Command and Metasploit.
Are Alphabet and Rapid7 in the same category?: They share SIEM. Alphabet's primary category is SIEM and Rapid7's is Vulnerability management.
Who are Alphabet and Rapid7 sold to?: From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. Rapid7 offers vulnerability management for hybrid environments and cloud security for multi-cloud environments.
What have Alphabet and Rapid7 announced recently?: December 22, 2025: Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt.

About Alphabet

Alphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements. Alphabet offers security products that help customers meet policy, regulatory and business objectives. Google Threat Intelligence and Mandiant Consulting Services are offered to understand threat actors and potential attack vectors. Google Security Operations is used to detect, investigate and respond to threats.^[1][2][3]

Security Command Center is a platform for defending against threats to Google Cloud assets. Assured Workloads provides compliance and security controls for sensitive workloads. Identity and Access Management is a permissions management system for Google Cloud resources. Google Cloud Armor helps protect applications and websites against denial of service and web attacks. Cloud Key Management is used to manage encryption keys on Google Cloud. Confidential Computing encrypts data in use with Confidential VMs. Cloud NGFW is a global firewall to protect cloud resources. Shielded VMs are virtual machines hardened with security controls and defenses. Secret Manager stores API keys, passwords, certificates and other sensitive data.^[1][3]

Cloud Data Loss Prevention is a platform for inspecting, classifying and redacting sensitive data. Sensitive Data Protection is a fully managed sensitive data protection service. Access Transparency provides cloud provider visibility through near real-time logs. Cloud Asset Inventory is used to view, monitor and analyze Google Cloud and Anthos assets across projects and services. Secure Web Proxy monitors and secures egress web traffic to help protect cloud workloads. Web Risk detects malicious URLs on a website and in client applications. Chrome Enterprise Premium is a zero-trust platform with integrated threat and data protection. Assured Open Source Software lets developers incorporate the same OSS packages that Google uses into their own developer workflows. Sovereign Controls by Partners provides partner-operated sovereignty controls for Google Cloud to meet digital sovereignty requirements.^[3]

VPC Service Controls protects sensitive data in Google Cloud services using security perimeters. VPC Service Controls helps protect against accidental or targeted action by external or insider entities, to minimize data exfiltration risks from Google Cloud services such as Cloud Storage and BigQuery. VPC Service Controls is used to create perimeters that protect the resources and data of services that are explicitly specified. By allowing private access only from authorized VPC networks, VPC Service Controls helps protect against data exfiltration by clients using stolen OAuth or service account credentials. VPC Service Controls adds a layer of security defense for Google Cloud services that is independent of Identity and Access Management (IAM). Google Cloud provides a restricted virtual IP that is integrated with VPC Service Controls. VPC Service Controls lets administrators monitor resource access patterns across service perimeters using Cloud Audit Logs. VPC Service Controls can run in dry run mode to monitor requests to protected services without preventing access. VPC Service Controls configurations are managed at the organization level by default.^[3]

Identity Platform is a customer identity and access management (CIAM) platform for adding identity and access management to apps. Identity Platform integrates with the reCAPTCHA Enterprise API to enhance security for users. With bot protection, Identity Platform provisions score-based reCAPTCHA keys in the customer's project. In audit mode for email-password sign-in, Identity Platform creates reCAPTCHA keys that assess traffic to Identity Platform APIs without blocking any requests. For phone authentication, Identity Platform blocks a request that fails the toll fraud assessment and does not send an SMS verification code. reCAPTCHA Enterprise helps protect a website from fraudulent activity, spam and abuse. Identity-Aware Proxy uses identity and context to guard access to applications and VMs. Cloud Identity is a unified platform for IT admins to manage user devices and apps.^[3][5]

Google Cloud creates and shares mappings of its security, privacy and compliance controls to standards from around the world. Alphabet regularly undergoes independent verification to achieve certifications, attestations and audit reports. An independent third-party auditor has granted formal certifications, attestations or audit reports covering Alphabet's compliance offerings. Alphabet's certifications and attestations include ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO/IEC 42001, PCI DSS, SOC 1, SOC 2 and SOC 3. Alphabet's compliance offerings include FedRAMP, FIPS 140-2 Validated and HITRUST CSF. Alphabet's compliance offerings include Protected B in Canada, StateRAMP, TruSight and the U.S. Cybersecurity Maturity Model Certification (CMMC). Cloud service providers cannot formally certify a customer's compliance with laws and regulations. Alphabet reviews laws and regulations and, where possible, provides guidance documents, mappings and papers that outline its technical capabilities and legal commitments.^[6]

Alphabet's industry solutions range from improving retail product discovery to detecting bank fraud. Gemini platform is a fully managed AI development platform for building and managing AI applications and agents, with access to Agent Studio and 200+ foundation models.^[1][2][6]

Alphabet on the record

About Rapid7

Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions. Rapid7 provides Managed Vulnerability Management, Managed Threat Complete and Managed Detection & Response. Rapid7 offers 24x7 XDR monitoring, remediation and DFIR from experts who extend a customer's team. Rapid7 Insight products can be used individually or together for a tailored security solution.^[1][3][4][5]

Rapid7 exposure management provides continuous assessment of an attack surface to validate vulnerabilities and policy gaps. Rapid7 attack surface management gives a unified view of assets across a digital estate, with native and third-party enrichment. Rapid7 attack surface management discovers unknown internet-facing and internal assets and uncovers shadow IT and coverage gaps. Rapid7 uses that asset context in Exposure Command to prioritize what attackers can reach. Rapid7 attack surface management includes external scans that detect and validate exposures while highlighting high-risk areas. Rapid7 continuous monitoring and discovery cover internal and external asset inventories. Rapid7 offers multi-cloud and container security for AWS, Azure, GCP and K8s. Rapid7 offers application and API security testing covering DAST, API and LLM.^[4][6]

Rapid7 vulnerability management uses agent-based and network scanning across hybrid environments. Rapid7 cloud security addresses multi-cloud environments and provides cloud risk monitoring and detection. Rapid7 threat intelligence includes mapping capabilities for discovering and remediating external threats. Rapid7 Intelligence curates emergent threat response, proprietary intelligence, research and adversary insights that are deployed across Rapid7 solutions and services.^[4][6]

Threat Command monitors the clear, deep, and dark web to identify risks before they become attacks. Rapid7 provides proactive clear, deep and dark web monitoring for threats to an organization, its employees and its customers. Rapid7 offers a dynamic asset mapping framework that tracks a customer's evolving digital footprint and identifies new potential attack vectors. Threat Command takes on takedown management for organizations. A dedicated Rapid7 team gathers prerequisites, accelerates requests and streamlines workflows with a customer's legal team.^[7]

Rapid7 offers technology and service add-ons that extend MDR capabilities. Rapid7 offers expert threat detection coverage to identify early threat signals across the clear, deep and dark web. Rapid7 MDR pricing is based on the number of endpoints, servers and networks protected, and not on data volume ingested into its SIEM or the number of incidents requiring response.^[8]

Rapid7 penetration testing services simulate real-world attacks to assess, evaluate and identify security weaknesses in an organization's people, processes and technology. Rapid7 testers inspect networks, applications, devices and/or people to demonstrate the security level of key systems and infrastructure. Rapid7 penetration testing engagements identify flaws that may violate compliance provisions or regulations. Rapid7 penetration testers contribute directly to the Metasploit Project. Rapid7 consultants spend up to 20% of bench time focused on attacker research and skill development. Rapid7 offers continuous red team operations to validate external attack surface exposures and test defenses. Metasploit validates vulnerabilities and enables phishing and broader social engineering. Rapid7 typically publishes advisories on newly discovered vulnerabilities approximately 60 days after its initial attempts at private disclosure.^[9][10][11]

Rapid7 is a publicly traded company and undergoes SOX audits annually. Rapid7 undergoes a SOC 2 Type II audit annually to ensure the effectiveness of controls relevant to security. Rapid7's ISMS is ISO 27001 certified and was audited by Schellman. Rapid7's AIMS is ISO/IEC 42001 certified in the role of an AI provider. Rapid7 has completed an Information Security Registered Assessors Program (IRAP) assessment to PROTECTED Level for several Insight Platform solutions. Rapid7 undergoes an annual, independent technical assessment by an accredited assessor to hold Cyber Essentials Plus certification. Rapid7 hosts its Insight cloud infrastructure in AWS. Rapid7 participates in and has certified compliance with the EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, and UK Extension to the EU-U.S. Data Privacy Framework.^[4][8][11]

Rapid7 on the record

Sources

Alphabet full record

[1]SecurityGoogle Cloud · cloud.google.com · undated page, accessed November 2, 2026 · Tier A
[2]AI and Cloud Computing Services | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[3]Security and identity products | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[4]Overview of VPC Service Controls | Google Cloud DocumentationGoogle Cloud Documentation · undated page, accessed November 10, 2026 · Tier A
[5]Integrate Identity Platform with the reCAPTCHA Enterprise API | Google Cloud DocumentationGoogle Cloud Documentation · undated page, accessed November 10, 2026 · Tier A
[6]Cloud compliance and regulations resources | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[7]Alphabet to buy clean energy developer Intersect in $4.75 billion deal amid AI pushReuters · published December 22, 2025 · Tier B

Rapid7 full record

[1]rapid7.comRapid7 · rapid7.com · undated page, accessed November 6, 2026 · Tier A
[2]Business supportRapid7 · careers.rapid7.com · undated page, accessed November 6, 2026 · Tier A
[3]PHP CVE-2026-109618 and CVE-2026-109619: Rapid7 StatementRapid7 · undated page, accessed November 10, 2026 · Tier A
[4]Rapid7 Managed Cybersecurity: Outpace AttackersRapid7 · undated page, accessed November 10, 2026 · Tier A
[5]Rapid7 Product PricingRapid7 · undated page, accessed November 10, 2026 · Tier A
[6]Surface Command | Attack Surface Management | Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[7]Threat Command: Digital Risk Protection - Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[8]Rapid7 MDR Pricing | Managed Threat CompleteRapid7 · undated page, accessed November 10, 2026 · Tier A
[9]Penetration Testing Services | Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[10]Penetration Testing Tools and Services - Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[11]Metasploit Editions: Network Pen Testing Tool - Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[12]Coordinated Vulnerability Disclosure (CVD) Policy - Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[13]Compliance - Rapid7Rapid7 · undated page, accessed November 10, 2026 · Tier A
[14]Rapid7 Security Services Reviews & Provider DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.