My main use case for Rapid 7 typically revolves around vulnerability management, but we use it for a number of other things as well.
A specific example of how we're using it for vulnerability management is that we use it to scan and discover vulnerabilities on endpoints, and we use agents as well to discover vulnerabilities, present those in a console, and we work on remediations based upon those findings.
We have a unique setup with Rapid 7 as we're using a variety of their products, including their SIEM, Threat Command, and a few other things as well, and we're just starting to look into their ransomware offerings.