Rapid7 Launches UAE Operations with Localised Platform and DESC Certification

Rapid7, the US-based cybersecurity company known for its focus on threat detection and exposure management, has just unveiled a new entity in the United Arab Emirates alongside a localised version of its platform. The move reflects a clear bet on the region’s booming digital economy and its growing emphasis on cyber resilience.

The timing isn’t random. With the UAE’s cybersecurity market forecast to hit around $4.5 billion by 2025, international players are jostling for position. What Rapid7 has done differently is earning certification from the Dubai Electronic Security Centre (DESC) right out of the gate—a green light that signals it’s ready to work with government entities and heavily regulated sectors. For companies on their own transformation journey, this could save them a bit of a faff when it comes to compliance.

Corey Thomas, Rapid7’s CEO, described Dubai as an “innovation hub” and stressed how building cloud infrastructure within the country underlines the company’s respect for data sovereignty. In other words, customer data doesn’t have to cross borders, which is becoming a non-negotiable for many Gulf regulators.

The UAE expansion is also supported on the ground. An office has been opened in Dubai, and the company has plans to lean into exposure management tools. These are designed to shine a torch on hidden vulnerabilities across an organisation’s systems, from cloud apps to traditional networks. Recognitions from the likes of IDC and Forrester earlier this year have given that product line a bit of extra credibility.

I reckon this focus on exposure management is where Rapid7 may gain most traction. Too many firms still treat cyber defence as an afterthought—something to plug in when things go wrong. But as every startup founder Arageek has spoken with will tell you, reputation is fragile. One breach, and you’re on the back foot.

On the flip side, competing in such a crowded sector won’t be a walk in the park. Giants like Microsoft and Palo Alto Networks are already courting the same customers across the Gulf. That said, Rapid7’s willingness to anchor itself locally—both in terms of people and infrastructure—does show it’s not just dipping its toes in.

A quick personal note here: sitting in a workshop in Dubai a couple of years ago, I saw first-hand how local entrepreneurs were struggling with fragmented, often piecemeal cybersecurity support. The arrival of companies like Rapid7, with all their global resources but also local investment, feels spot on for strengthening the wider ecosystem.

The company has also tied its announcement to GITEX 2025, where Thomas is billed to speak about AI, trust, and cybersecurity’s role in business. For anyone heading there, it promises to be a lively discussion—these are the conversations shaping how the Gulf’s digital future will actually be secured.

For now, the message is fairly clear: Rapid7 isn’t just parachuting in. With certification secured, offices open, and product tailored to local laws, the firm is chuffed to bits about planting roots in the UAE—and the timing, frankly, couldn’t be better.

🚀 Got exciting news to share?

If you're a startup founder, VC, or PR agency with big updates—funding rounds, product launches 📢, or company milestones 🎉 — AraGeek English wants to hear from you!

✉️ Send Us Your Story 👇

https://en.arageek.com/send-us-your-story-or-a-news-tip