Overview

Product video
Incident Command, a core product of the Rapid7 Command Platform, is an AI-native security operations platform that transforms how modern SOCs detect, investigate, and respond to threats. By operationalizing AI across triage, investigation, and guided response, including Rapid7 SOC-trained agentic workflows that learn and adapt, it accelerates outcomes while reducing analyst fatigue. The platform unifies preventative attack & exposure management together with threat detection & response by combining historically siloed capabilities of SIEM, SOAR, ASM, and threat intelligence into one intuitive experience designed to empower every analyst with intelligent, context-rich support. With a focus on automation, unified asset context, and usability, Incident Command enables security teams to scale with confidence, proving value while making advanced detection and response achievable for every organization.
Highlights
- Unified data, instant clarity - Combine logs, telemetry, and asset context from cloud, SaaS, endpoints, and your hybrid environment in a single, actionable view. No more blind spots, just continuous, full-spectrum visibility that powers your investigations from the start.
- Zero in on what matters with the AI SOC - AI-driven behavioral detections, triage, and contextual enrichment cut through alert fatigue and surface the threats that matter. Accelerate threat hunting and response with natural language search across billions of records.
- Respond with speed and confidence - Every alert is enriched with exposure, vulnerability, threat intelligence, 3rd party, and asset risk data, so your team always knows what is urgent and what to do next. SOAR automation and guided AI response shrink dwell time and take the guesswork out of action.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
---|---|---|
Incident Command Essentials | 251+ Assets starting from $70.40 per asset | $17,670.40 |
Incident Command Advanced | 251+ Assets starting from $96.80 per asset | $24,296.80 |
Incident Command Ultimate | 251+ Assets starting from $123.20 per asset | $30,923.20 |
Vendor refund policy
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
