PAGES
← all tools
◆ Attack Surface & Exposure Management

Surface Command

commercial
rss ↗ What is a cyber toolchain?

Summary

Surface Command is a commercial exposure-management platform, sold by Rapid7, that unifies external asset discovery with internal inventory data to give a real-time view of an organization's attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources.. It runs as a hosted service accessed through Rapid7's Command Platform, with onboarding built around connecting asset connectors over the first few days before teams move into custom dashboards and querying. It's aimed at security and IT teams responsible for asset visibility, misconfiguration detection, and compliance gaps rather than at individual analysts running point tools. Within an asset's detail view it generates a cached AI summary covering identity, business, operational, and security context, and it enriches discovered IPs with Autonomous System data sourced from IPLocate.io. Rapid7 has offered the product since 2016, positioning it as a longer-standing entry in the attack-surface management space rather than a newer arrival.

How Surface Command helps

What does the organization actually own across cloud, on-prem, and SaaS that no single tool has recorded before?

pulls asset data from internal inventory tools and external discovery connectors into one place, regardless of which security or IT tool originally tracked each asset

Which assets are misconfigured or drifting from expected settings?

compares configuration details gathered from connectors against expected state and surfaces the assets where they diverge

Which systems are shadow IT that never went through provisioning?

surfaces assets found through external discovery that have no matching record in the connected internal inventory tools

Where are the compliance gaps hiding across the environment?

correlates internal inventory records with discovered configuration data to flag assets that fall outside expected compliance posture

What is the identity, business, and security context behind an unfamiliar asset during an investigation?

generates a cached AI summary the first time the asset is opened, pulling together its identity, business, operational, and security context in one view

What network or organization does a discovered IP address actually belong to?

enriches discovered IPs with Autonomous System data sourced from IPLocate.io

all 5 features, with the evidence for each →

Features

5 capabilities

Built from Surface Command's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Surface Command offers you

  • User-defined detection rules1
All capabilities 5 capabilities
AI asset summaries documented Generates and caches a concise AI-produced overview of an asset's identity, business, operational, and security context to help users quickly understand an asset. 4 other sources · first seen Jul 2026

docs

  • The Assets & Identities section of the Command Platform also hosts all seeds and discoveries from the Rapid7 External Asset Engine. seen Sep 2026 · source
  • View an AI summary of your asset details The AI summary provides a concise overview of an asset’s key information so that you can quickly understand the identity, business, operational, and security context of an asset. It is generated when you first open an asset and is cached for faster access on subsequent views. docs update · Jul 2026 · source
  • View an AI summary of your asset details The AI summary provides a concise overview of an asset’s key information so that you can quickly understand the identity, business, operational, and security context of an asset. It is generated when you first open an asset and is cached for faster access on subsequent views. docs update · Jul 2026 · source
  • Rapid7 ASM AI Usage Use of AI at Rapid7 Rapid7 has established requirements for Artificial Intelligence (AI) usage across all products and services, including an approval process, data privacy standards, model lifecycle management, and security measures. seen Jul 2026 · source
Attack Surface Data Enrichment documented Enriches discovered IP addresses with Autonomous System (AS) data, including AS Number and network operator, sourced from IPLocate.io. 1 other source

docs

  • About Autonomous System (AS) data AS data associated with discovered IP addresses is sourced from IPLocate.io . This includes the AS Number (ASN) and the network operator for a given IP address. Rapid7 acknowledges IPLocate.io for making this data available. seen Jul 2026 · source
Attack Surface Management Data Connector documented Utilizes a connector architecture to import feeds from information sources and execute operations for collecting attack surface data. 1 other source

docs

  • A connector can include the following components: Profiles - Allows for connecting additional logins and instances to the same connector. Import feeds - Collects data from an information source and execute operations on behalf of a connector. A single connector can have multiple import feeds. seen Sep 2026 · source
Attack Surface Management Workflows documented Provides a workflow automation engine for Attack Surface Management that allows users to monitor status, assign tags, and review errors. 1 other source

docs

  • Go to Automation > (Attack Surface Management) Workflows You can monitor workflows, assign tags and review error messages. Go to Automation > (Attack Surface Management) Workflows from the Command Platform to see a list of existing workflows. The table displays the following information for each workflow: seen Sep 2026 · source
Custom correlation rules documented Allows users to copy built-in correlation rules and edit the copies to create custom rules suited to their environment. 1 other source

Also counts toward: User-defined detection rules

docs

  • Sometimes a built-in rule doesn’t fit your environment, and you need to change it. You can’t edit a built-in rule directly, but you can copy it and edit the copy. Copy a built-in correlation rule You can copy a built-in correlation rule to use it as a starting point for a custom rule. seen Oct 2026 · source

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Release-note detail over time

See how much detail Surface Command puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

8 entries

  1. September 20261
  3. July 20267

    8 entries

    1. docs update Sep 15, 2026 · issue 075

      Surface Command adds an Attack Surface Overview report under Reports & Dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

      └──▷ HOW TO FIND IT
      Review your organisation's full attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. posture in one place.
      📍In the Surface Command console, go to Reports & Dashboards › Attack Surface Overview.
    2. docs update Jul 31, 2026 · issue 031

      Surface Command adds AI-generated asset summaries covering identity, business context, and detected vulnerabilities.

      └──▷ HOW TO FIND IT
      Quickly understand the security and business context of an internal asset without manually reviewing all data points.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset to open the asset details panel, and view the AI Summary section on the General tab (expanded by default).
      • New AI Summary panel on asset detail pages provides a concise, auto-generated overview of an asset's identity, business context, configured mitigations, and detected vulnerabilities.
      • AI summaries are cached for faster repeat access and automatically regenerated when new data is ingested.
      • Supports one-click copy of the full formatted AI summary to clipboard.
      • Enables practitioner feedback on AI summary quality via thumbs-up/thumbs-down rating with optional context form.

      4 details in Everything

    3. docs update Jul 24, 2026 · issue 024

      Surface Command adds AI-generated asset summaries covering identity, vulnerabilities, mitigations, and business context.

      └──▷ HOW TO FIND IT
      Quickly orient on an unfamiliar asset during an investigation without manually reading through all raw data.
      📍In the console, go to Assets (Internal) › select an asset › General tab › AI Summary section (expanded by default). Click Copy to paste the full context into a ticket or report.
      • Adds AI Summary panel on asset detail pages that provides a concise overview of identity, business context, operational context, associated users, configured mitigations, and detected vulnerabilities.
      • AI summaries are generated on first open and cached for faster subsequent access, with automatic regeneration when new data is ingested.
      • Enables one-click copy of the full formatted AI summary to clipboard from the General tab.
      • Adds thumbs-up/thumbs-down feedback form on AI summaries, allowing practitioners to rate and annotate summary quality — submittable multiple times per asset.

      4 details in Everything

    4. docs update Jul 24, 2026 · docs issue 004

      Surface Command adds AI-generated asset summaries covering identity, vulnerabilities, mitigations, and business context.

      └──▷ HOW TO FIND IT
      Quickly orient on an unfamiliar asset during an investigation without manually reading through all raw data.
      📍In the console, go to Assets (Internal) › select an asset › General tab › AI Summary section (expanded by default). Click Copy to paste the full context into a ticket or report.
      • Adds AI Summary panel on asset detail pages that provides a concise overview of identity, business context, operational context, associated users, configured mitigations, and detected vulnerabilities.
      • AI summaries are generated on first open and cached for faster subsequent access, with automatic regeneration when new data is ingested.
      • Enables one-click copy of the full formatted AI summary to clipboard from the General tab.
      • Adds thumbs-up/thumbs-down feedback form on AI summaries, allowing practitioners to rate and annotate summary quality — submittable multiple times per asset.

      4 details in Everything

    5. docs update Jul 24, 2026 · issue 024

      Surface Command adds AI-generated asset summaries covering identity, vulnerabilities, mitigations, and business context.

      └──▷ HOW TO FIND IT
      Quickly understand an internal asset's security posture — including vulnerabilities and mitigations — without digging through raw data.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset to open the asset details panel, then review the AI Summary section on the General tab (expanded by default).
      Copy an AI-generated asset summary to clipboard for pasting into an incident ticket or report.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset, then on the General tab in the AI Summary section click Copy.
      • Adds AI Summary panel on asset detail pages that auto-generates a concise overview of an asset's identity, classification, associated users, configured mitigations, and detected vulnerabilities.
      • Caches AI summaries for faster repeat access and automatically regenerates them when new data is ingested.
      • Enables one-click copy of the full AI summary (with formatting) to clipboard for use in reports or tickets.
      • Supports thumbs-up/thumbs-down inline feedback on AI summaries with free-text context, submittable multiple times per asset.

      4 details in Everything

    6. docs update Jul 24, 2026 · docs issue 004

      Surface Command: Caches AI summaries for faster repeat access and automatically regenerates them when new data is ingested.

      └──▷ HOW TO FIND IT
      Quickly understand an internal asset's security posture — including vulnerabilities and mitigations — without digging through raw data.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset to open the asset details panel, then review the AI Summary section on the General tab (expanded by default).
      Copy an AI-generated asset summary to clipboard for pasting into an incident ticket or report.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset, then on the General tab in the AI Summary section click Copy.
      • Enables one-click copy of the full AI summary (with formatting) to clipboard for use in reports or tickets.
      • Supports thumbs-up/thumbs-down inline feedback on AI summaries with free-text context, submittable multiple times per asset.

      2 details in Everything

    7. docs update Jul 24, 2026 · issue 024

      Surface Command adds AI-generated asset summaries covering identity, business context, and detected vulnerabilities.

      └──▷ HOW TO FIND IT
      Quickly understand the security and business context of an internal asset without manually reviewing all raw data.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset to open the asset details panel, and view the AI Summary section (expanded by default) on the General tab.
      Copy an AI-generated asset summary to the clipboard to paste into a ticket or incident report.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset, open the General tab, and in the AI Summary section click Copy.
      • Adds AI Summary panel on asset detail pages that provides a concise overview of asset identity, associated users, configured mitigations, and detected vulnerabilities.
      • AI summaries are generated on first open and cached for faster subsequent access, with automatic regeneration when new data is ingested.
      • Enables practitioners to copy the full formatted AI summary to the clipboard for use in reports or incident notes.
      • Supports thumbs-up/thumbs-down feedback submission directly from the AI Summary section to rate and improve summary quality.

      4 details in Everything

    8. docs update Jul 24, 2026 · docs issue 004

      Surface Command: Enables practitioners to copy the full formatted AI summary to the clipboard for use in reports or incident notes.

      └──▷ HOW TO FIND IT
      Quickly understand the security and business context of an internal asset without manually reviewing all raw data.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset to open the asset details panel, and view the AI Summary section (expanded by default) on the General tab.
      Copy an AI-generated asset summary to the clipboard to paste into a ticket or incident report.
      📍In the console, go to Assets & Identities › Attack Surface Management › Assets (Internal), select an asset, open the General tab, and in the AI Summary section click Copy.
      • Supports thumbs-up/thumbs-down feedback submission directly from the AI Summary section to rate and improve summary quality.

      1 detail in Everything

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    compare.md

      Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

      my-toolchain — 0 tools

        Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
        browse all tools → score card for your toolchain →
        cyber-toolchain / feedback

        Send us feedback