Rapid7 Completes BSI C5 Type 2 Examination: Stronger Cloud Security for DACH Organizations
Rapid7, March 24,2026
If you're a security leader operating in Germany, Austria, or Switzerland, you already know that compliance isn't a checkbox. It's a competitive differentiator. Rapid7 has completed BSI C5 Type 2 attestation for the Rapid7 Command Platform, including Threat Command, and it's a milestone worth unpacking.
This isn't just a badge on a webpage. It's proof that our security controls work, not just on paper, but in practice, over time.
What is BSI C5 and why does it matter?
The Cloud Computing Compliance Criteria Catalogue (C5) was developed by Germany's Federal Office for Information Security (BSI). It sets some of the most rigorous cloud security standards in the world, covering everything from data protection to operational transparency.