Rapid7 2026: Threat Evolution and SOC Strategies in a Two-Day Summit

The 2026 Rapid7 Summit: A Roadmap for Operational Security

The full program of the Rapid7 2026 Global Cybersecurity Summit has been published, revealing a detailed roadmap on how the conversation around security operations is evolving. The two-day event progressively delves into the evolution of threats and the practices of detection, response, and decision-making in security teams.

Day 1: The Evolution of Threats and Operational Responses

The inaugural day opens with the keynote "Defense Starts Earlier Than You Think," where Brian Castagna and Craig Robinson, Research Vice President of IDC, explore how complexity has become the main obstacle to effective security. The focus is on how the adoption of early measures can reverse this scenario.

The discussion continues with "The Reality of Running a SOC in 2026," featuring Raj Samani, Rachel Tobac, and Graham Cluley analyzing the origins of attacks, from identity abuse to cloud misconfigurations, highlighting why defenders often lag behind the evolution of threats.

Simplification and Outcomes: 2026 Priorities

In the panel "Customer Panel: How Clarity Beats Complexity," CISOs and CTOs from companies like Netscout Systems and Target RWE share strategies to simplify complex environments, shifting focus from outputs to business metrics. A concrete example is the adoption of exposure management frameworks, which go beyond traditional static vulnerability tracking.

Attention then turns to the operability of the modern SOC with "Inside the Modern SOC: Who Carries You Through an Incident," which breaks down a real investigation, showing how alerts are triaged and decisions are made under pressure.

Artificial Intelligence and Red Teaming: Tools for Proactive Defense

The use of AI in security is at the center of "The AI Dilemma: Automating Defense Without Surrendering Judgment," where the role of AI in the SOC is analyzed through the lenses of trust, transparency, and support for analysts' decisions.

An innovative approach is presented in "Using Red Teaming to Power Preemptive MDR," demonstrating how continuous adversary testing can improve detection coverage and optimize response workflows before an incident occurs.

Day 2: Strategy for Leaders, Execution for Practitioners

The second day is divided into two parallel tracks, one for leaders and one for security team practitioners. The session "The CISO’s Role in Enterprise Transformation" explores how the CISO role is evolving beyond technical leadership, embracing a broader influence on the organization.

For leaders, "How Exposure Insights Reframe Risk and Security Decisions" examines how exposure data can redefine priorities and align teams with real risk.

Business-Focused: The Transformation of Security Metrics

The session "A CISO’s Guide to MDR Accountability and Outcomes" shifts focus to measuring effectiveness, moving from activity-based metrics to outcomes that reflect business impact. The final panel, "Customer Panel: What CISOs Would Do Differently If Starting Today," features CISOs from companies like Genesys and TSB Bank reflecting on what they would change or simplify based on their experience.

From Detection to Response: Field Practices

For practitioners, "Hunt or Be Hunted: Frontline Tales of Detection" breaks down a real incident, showing how analysts decide what to investigate and correlate signals across different environments. "The New Rules of Detection Engineering" delves into the concept of detection-as-code and how teams prioritize signals in practice.

A practical case study is presented in "From Cloud Exposure to Runtime Attack," demonstrating how cloud risks can escalate and how to interrupt them early. The day concludes with "IR in Practice: Tools, Tradecraft, and Adversary-Informed Investigation," showing how open-source tools and real workflows integrate during incident response.

A Summit to Transform Operational Security

The Summit agenda reflects a trend that runs through all sessions: security operations are moving towards earlier decisions, better prioritization, and a clearer understanding of what matters in critical moments. If you want to see how this transformation is materializing in strategy, detection, and response, this is where these conversations converge.

The event will take place on May 12-13 and will offer the opportunity to explore the entire agenda in practice. To register and participate, visit the official Summit website.