Rapid7 Partners with HITRUST to Streamline Cybersecurity Assurance

In a strategic move aimed at addressing the growing complexities of cybersecurity compliance, Rapid7, Inc. (NASDAQ: RPD) has announced a partnership with HITRUST on December 2, 2025. This collaboration aims to automate compliance processes, reduce costs, and enhance cybersecurity assurance for organizations across regulated industries. The integration of Rapid7’s Surface Command with HITRUST’s assurance framework promises to revolutionize the way companies manage their security controls and compliance efforts.

Organizations today are grappling with increased pressure to demonstrate ongoing security readiness in an ever-evolving threat landscape. Traditional compliance methods, which often rely on periodic audits and manual evidence collection, are becoming increasingly outdated. These methods are not only costly and time-consuming but also leave room for potential vulnerabilities as they quickly become irrelevant in the face of new threats.

Through this partnership, Rapid7 and HITRUST aim to shift the paradigm from infrequent audits to a model of continuous, evidence-based validation of a company’s cybersecurity posture. This shift not only enhances security governance but also improves the ability to communicate compliance status to various stakeholders.

With the integration of Rapid7’s Command Platform and the HITRUST Framework, organizations can continuously assess their systems against control drift. This feature ensures that compliance requirements are consistently updated in response to active threats and risk thresholds, providing organizations with a clear view of their security status at all times.

The partnership will enable organizations to integrate vulnerability and exposure management with threat data aligned to compliance mandates. This proactive approach addresses the complexities of modern enterprise environments, allowing businesses to effectively manage and mitigate risks before they escalate.

By enabling continuous compliance, organizations can expect extended certification intervals and a significant reduction in the effort required for information collection. This means that organizations will not only save time and resources but also maintain assurance that their controls are effective beyond scheduled audit engagements.

Demonstrating consistent risk management practices will make it easier for organizations to engage with insurers. This could potentially lead to lower premiums and more streamlined policy renewals, further easing the financial burden of maintaining cybersecurity insurance.

The partnership aims to minimize the resource-intensive nature of annual compliance audits, ultimately leading to a reduction in costs associated with the compliance process. This financial relief is a significant incentive for organizations looking to optimize their cybersecurity budgets.

Jon Schipp, Senior Director of Product Management at Rapid7, emphasized the importance of this collaboration, stating, “Rapid7 solutions already deliver unmatched visibility and context, enabling our customers to proactively prevent and detect security incidents. With this collaboration, we are now able to benchmark customers against HITRUST, ultimately reducing both the cost and burden of compliance while also enabling them to achieve continuous assurance against the comprehensive framework for greater protection from threats.”

Blake Sutherland, Executive Vice President of Market Engagement at HITRUST, highlighted the effectiveness of their controls, mentioning that organizations implementing HITRUST controls achieve an average annual breach rate of only 0.59%. He stated, “This collaboration with Rapid7 maps our controls to their proactive protections, giving joint customers the ability to maintain evidence of compliance, reduce evidence decay, and ensure that the utmost security requirements are relevant, reliable, and recorded for continuous assurance and even higher levels of trust in security postures.”

The partnership between Rapid7 and HITRUST marks a significant advancement in the field of cybersecurity assurance. By automating compliance and enhancing the continuous assessment of security controls, this collaboration promises to streamline the compliance process for organizations while reducing costs and improving overall cyber resilience. As businesses continue to navigate the complexities of the digital landscape, such innovations will be crucial in maintaining robust security postures and ensuring regulatory compliance.

For more information on how Rapid7 and HITRUST can assist organizations in bolstering their cybersecurity compliance efforts, interested parties can visit Rapid7's official website.