Rapid7 announced on November 4, 2026, that it achieved ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System. The certificate was issued following an independent audit by Schellman Compliance, LLC.
Independent Audit and Certification
Rapid7 announced that it achieved ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System. The certificate was issued by Schellman Compliance, LLC, an ANAB accredited certification body, following an independent audit of how the company governs the AI systems it develops.
The company noted that the certification is not a one-time exercise and is maintained through annual surveillance audits. ISO/IEC 42001 is described as the first international management system standard for artificial intelligence, focusing on how organizations govern AI risks, data management, monitoring, and human oversight.
In-Scope AI Systems
The certification covers the AIMS supporting several AI systems developed within Rapid7 products. These in-scope systems include the Agentic AI Workflow for MDR and the AI Dashboard Summary Card for Managed Detection and Response.
Other covered systems include AI-Generated Risk Summaries for Exposure Command and Surface Command, AI-Powered Log Search and Summary for Incident Command and InsightIDR, Attack Surface Management for Surface Command, and ICS Runtime Event Story for InsightCloudSec and Cloud Runtime.
Key facts and where they come from
- Rapid7 achieved ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System.
Rapid7 has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS).
- The certificate was issued by Schellman Compliance, LLC.
The certificate was issued by Schellman Compliance, LLC, an ANAB accredited certification body
