Rapid7 Pushes Toward Fully Autonomous SOC Operations with Kenzo Deal

Rapid7’s acquisition of Kenzo Security signals a deeper shift in how security operations are being built and delivered. The move brings agentic AI into the core of its Command Platform, with a focus on automating investigations and scaling detection and response without adding headcount. The underlying issue is familiar. Most SOC teams still investigate only a fraction of alerts, leaving gaps in coverage and slowing response times.

What changes here is how that problem is being approached. Kenzo’s architecture is built around multiple AI agents working across a unified data layer, pulling in signals from endpoint, identity, cloud, and SaaS environments. Instead of analysts manually correlating alerts, the system is designed to investigate and connect activity in real time. That shift matters because it moves security operations closer to continuous analysis rather than selective triage, which has been a limiting factor in scaling MDR services.

For MSSPs, the impact is operational. If every alert can be investigated automatically, the model starts to change from prioritization to full coverage. That has implications for how services are packaged and delivered. It also affects how teams are structured, since the role of the analyst moves toward oversight and decision points rather than manual investigation. The emphasis shifts to how workflows are configured, how AI-driven actions are governed, and how outcomes are measured across environments.

This also points to a broader direction in the market. Security platforms are being redesigned to run at machine speed, with AI handling a larger share of detection, investigation, and response. That raises new questions around consistency, transparency, and control, especially as more decisions move into automated systems. The vendors that can make those systems predictable and usable at scale will shape how MSSPs build and run their next generation of services.