Rapid7 Surface Command
6.4#10 in security ratings softwareWebAPILinuxmacOS
VisitRapid7 Surface Command vs RiskRecon
What both publish
| Fact | Rapid7 Surface Command | RiskRecon |
|---|---|---|
| Asset discovery | The product offers asset discovery and a unified inventory, with internal and external attack surface visibility. | Its asset discovery uses analyst-assisted machine-learning models tailored to each monitored company to attribute assets as they change over time. |
| Headquarters | Boston, Massachusetts, United States | RiskRecon says it is headquartered in Salt Lake City, Utah, with a presence in Boston, Massachusetts. |
| Integrations | Rapid7 says Surface Command has over 150 tool integrations and supports connectors for most major tools, as well as custom connectors for enterprise systems. | RiskRecon lists integrations with RSA Archer, Sigma Ratings, Whistic, ServiceNow and other GRC or workflow platforms. |
| Intended users | Rapid7 describes Surface Command as helping security teams identify what attackers might target and remediate exposures. | The maker describes use by third-party risk teams, internal security analysts, M&A teams, CISOs, and boards. |
| Purpose | Surface Command provides a unified view of internal and external assets across an organization’s digital estate. | RiskRecon provides cybersecurity ratings and insights to help organizations understand and act on cyber risk. |
Rapid7 Surface Command plans
- Surface CommandPriced on request
RiskRecon plans
- 30-day free trialFree
- Free 30-day portal accessFree
- Paid subscriptionPriced on request
- RiskRecon subscriptionsPriced on request
Pick Rapid7 Surface Command if…
Surface Command suits security teams seeking visibility into assets and a way to prioritize and track exposure remediation. Its connector and inventory capabilities are relevant to organizations managing internal and external assets.
Pick RiskRecon if…
RiskRecon is aimed at third-party risk teams, internal security analysts, M&A teams, CISOs, and boards. It suits organizations that need to monitor vendor cyber risk and prioritize remediation.