Rapid7 make bold statement acquiring Metasploit Project
Summary: Rapid7 acquired the Metasploit Project, an open-source product, a move Cisco Talos's VRT blog calls a bold endeavor for a vulnerability management company. The post says Rapid7's NeXpose product will be the only vulnerability management tool that can prove what it reports, and that the acquisition lets Rapid7 live test mitigation strategies and defenses.
What's compelling: If one vendor can demonstrate exploits against the vulnerabilities it reports, competitors like nCircle and Tenable are measured against proof rather than findings - and the post raises the open question of how many people will click an "exploit host" button once that capability is built in.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026