Rapid7’s API security offerings focus on vulnerability assessment and penetration testing. Their InsightAppSec solution scans APIs for vulnerabilities and provides recommendations for remediation, while their Metasploit Pro product facilitates penetration testing for API security.