Apr 9, 2026 • 7 min read
Wall Street thinks AI just made security vendors obsolete. After 25 years in the trenches, I think they've got it exactly backwards. Finding vulnerabilities has always been the easy part. The hard part is fixing them at scale, under pressure.
Apr 6, 2020 • 6 min read
At Rapid7, we have made it our top priority to uncover unmet customer needs and create value in new product development that addresses these needs. This post will give you a glimpse into the research that was conducted to pinpoint under-served and unmet customer needs in the vulnerability risk management space. The Rapid7 team approached this research by leveraging the Jobs To Be Done framework, which follows the belief that people hire products and services to get a job done. To complete a job
Mar 20, 2020 • 7 min read
Recently, Rapid7 completed a UX exercise with security professionals from 18 different companies. Based on that work, we derived 97 outcomes (aka “things to do”) that these organizations were trying to achieve within their Detection and Response programs and for their businesses. Today, I wanted to provide some commentary on the top three. As a career responder, I’ve helped build several Managed Detection and Response offerings, consulted in developing Detection and Response programs for large