Side-by-side from public catalog data. 3 vendors.
These vendors overlap in only Cyber Asset Attack Surface Management (CAASM) — the product rows below reflect that; you may be comparing vendors for different needs.
| Dimension | Rapid7 | Ordr | TrustFour |
|---|---|---|---|
| Independently verifiedHas anyone other than the vendor confirmed this? | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 |
| Operating durabilityIs this a real, durable business? | Strongchecked 3 of 4 | Strongchecked 3 of 4 | Limitedchecked 3 of 4 |
| Behaviour under stressWhat do they do when something goes wrong? | Mixedchecked 2 of 3 | Limitedchecked 2 of 3 | Limitedchecked 2 of 3 |
| Attribute | Rapid7 | Ordr | TrustFour |
|---|---|---|---|
| Website | rapid7.com ↗ | ordr.net ↗ | trustfour.com ↗ |
| Status | Unclaimed | Unclaimed | Unclaimed |
| Categories | Security Information and Event Management (SIEM), Security Orchestration, Automation & Response (SOAR), Breach & Attack Simulation / Pen Testing, Cyber Asset Attack Surface Management (CAASM), Cloud-Native Application Protection (CNAPP), Vulnerability Management, Application Security (ASPM), Threat Exposure Management (CTEM), Digital Risk Protection (DRP) | Security Orchestration, Automation & Response (SOAR), Cyber Asset Attack Surface Management (CAASM), Microsegmentation | Cyber Asset Attack Surface Management (CAASM), Non-Human Identity & Secrets, Certificate Lifecycle Management, Microsegmentation |
| Total products | 16 | 4 | 4 |
| Public materials (datasheets, whitepapers, case studies) | None found | 52 found → | None found |
| Certifications (compliance claims, keyword-matched) | None found | HIPAA, SOC 2 Type II | None found |
| Security headers (vendor's own website) |
| Disclosure postureDo they tell you the awkward things unprompted? | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 |
|---|
| MomentumAre they still shipping, or coasting? | Strongchecked 2 of 2 | Limitedchecked 1 of 2 | Limitedchecked 2 of 2 |
|---|
| 5/5 |
| 5/5 |
| 1/5 |
| Publishes pricing (vs. “contact us”-only) | Yes → | No | No |
|---|
| Publishes a status page | Yes → | No | No |
|---|
| GitHub org (open-source presence) | Yes → | No | No |
|---|
| Domain registered (RDAP, registry record) | 2000 → | 2006 → | 2018 → |
|---|
| DNSSEC (their own domain) | No | No | No |
|---|
| CAA (restricts which CAs can issue certs) | Yes → | No | No |
|---|
| Trust center (live compliance portal) | No | No | No |
|---|
| HSTS preloaded (HTTPS enforced from the first connection) | No | No | No |
|---|
| Strengths (neutral, vendor-sourced) | Security Information and Event Management (SIEM): InsightIDR cloud SIEM with built-in user behavior analytics, curated detections, and an MDR option for lean teams. | — | — |
|---|---|---|---|
| Gaps / watch-outs | Security Information and Event Management (SIEM): Positioned for mid-market simplicity; very large custom-analytics use cases are less central. | — | — |
| Cyber Asset Attack Surface Management (CAASM) |
| Application Security (ASPM) | — | — |
| Breach & Attack Simulation / Pen Testing | — | — |
| Certificate Lifecycle Management | — | — |
| Cloud-Native Application Protection (CNAPP) | — | — |
| Digital Risk Protection (DRP) | — | — |
| Microsegmentation | — |
| Non-Human Identity & Secrets | — | — |
| Security Information and Event Management (SIEM) | — | — |
| Security Orchestration, Automation & Response (SOAR) | — | — |
| Threat Exposure Management (CTEM) | — | — |
| Threat Intelligence | — | — |
| Vulnerability Management | — | — |