Skip navigation
All Places > Metasploit > Blog > Authors Maria Varmazis


3 Posts authored by: Maria Varmazis Employee

As a result of export restrictions placed on Metasploit Community and Pro trials, this year we have introduced some new systems to help process license requests. We have received a lot of questions about this, and this post will hopefully answer some of them for you. If you haven't read the original blog post about the export controls, please take a moment to review the information there on the updates and who is affected.


To help shed light on why some requests from those outside the U.S. or Canada for Metasploit Community or Pro license keys may be denied, below we list some common mistakes we've seen since this process began. To increase the likelihood of your request being quickly approved, be sure to avoid these pitfalls.


1) Supply a legitimate physical mailing address

All applications must include a valid physical mailing address, without exception. We frequently receive applications with blank information, gibberish, numbers, or dashes (e.g. -----,----- or 12345, 12345 or ghjghjgh, ghujhgjg).

  • Please only use Latin characters, without accents. Non-Latin characters, including Cyrillic, Arabic, Chinese, and Japanese characters, cannot be validated (e.g. 瑞安中心 6- 8海港路湾仔香港). Also, accents often render incorrectly, so please do not use any accented characters (e.g. 43 Rue Delarivi�re Lefoullon, Paris).
  • The address must be specific at a street level. Unfortunately geocodes to a neighborhood, city, or county level are not sufficient (e.g. Beijing, Beijing).
  • You must not be located in a U.S.-embargoed country: Cuba, Crimea, North Korea, Iran, Sudan, or Syria.


2) Disclose any government affiliations clearly in your application

In addition to address-related issues, we also have seen a number of problems relating to applications from government agencies. Sometimes we'll receive an application from an agency that either is not eligible for an exemption from export restrictions, or did not self-identify as a government agency when applying. In both cases these kinds of applications will be rejected.


We realize this application process may seem cumbersome and appreciate your patience as we process your license key request, as each application is manually and individually verified by a legal team. We only ask for information that is required by the U.S. Government export regulations, so please note that omitting or falsifying any information on the application form will most certainly invalidate your application.


As always, if you are outside the U.S. or Canada and interested in evaluating Metasploit Pro, don't hesitate to reach out to your Account Executive directly. We appreciate your cooperation as we work to comply with U.S. government regulations.

Metasploit 2014 winning design


Originally posted May 15, 2015

Hacker-designers! We need you! Show us your graphic skills, design an epic Metasploit t-shirt, and win Eternal Fame and Glory!

Ahem, er, rather, we're looking for someone to design this year's Metasploit t-shirt.


And if you are this year's winning Metasploit t-shirt designer, you will get $230USD and the notoriety and/or *immense* personal satisfaction in knowing that you're the 2015 Metasploit t-shirt designer, whose design will be printed on thousands of t-shirts that we'll distribute at this year's BlackHat conference in Las Vegas.

We've had stellar contributions in years past -- last year's design was quite nifty (see image at right) -- and as is only right for anything Metasploit-related, the winner is determined by community votes. So calling in old favors and leaning on your friends is highly encouraged!


This contest doesn't run for long, so act fast -- 2015 Metasploit T-Shirt Design Contest - 489841/brief

Originally posted April 19, 2015


Due to changes in regulatory requirements that are applicable to Metasploit (Pro and Community) and similar products, as of Sunday, April 19, 2015, individuals outside of the US and Canada who would like to use Metasploit Pro or the Metasploit Community Edition will need to request a license and provide additional information regarding themselves or their organization designation. In accordance with the new requirements, the request will be reviewed by Rapid7 and, unless the user is a non-US or non-Canadian government agency (or is otherwise ineligible to receive the products without approval from the US Department of Commerce), the request will be fulfilled. This affects license requests made through as well as any third party sites that currently offer Metasploit Pro or Community products for download.


This does not in any way affect or apply to Metasploit Framework. As an open source project, Metasploit Framework will remain available for download and access outside of the US and Canada without additional process.


Why is this happening?

Rapid7's Metasploit products use encryption and, like other products that use such technologies, are subject to US export requirements.  In addition, Metasploit and other intrusion software products are encountering increasing US and international regulatory review and restrictions.  In compliance with these regulations, we need to change the process by which free and trial versions of Metasploit Pro and Community editions are obtained.


What does this mean?

Due to increasing US and international regulatory restrictions, certain prospective users are ineligible to receive Metasploit Pro and Community editions without approval from the US Department of Commerce.  Users will need to provide reliable and accurate information to Rapid7 in order to request a license. As a general matter, non-governmental users will be eligible to receive a license key.

Please note that while most users will continue to be able to receive a license key for the free Metasploit Community and Pro editions, there will be a longer licensing process than there was historically due to the requirement that we review the information to make an assessment of whether the non-US/non-Canadian user is eligible to receive the products. We will work to process license key requests that have provided complete and accurate information expeditiously, but please anticipate that it may take up to 48 hours to complete. If you are in the United States or Canada, there will be no change for you.


I already have a Metasploit Community license or a Metasploit Pro evaluation. Will my license be revoked?

No, as a general matter this issue should not affect existing licenses retroactively. Once your license expires however, you will need to go through this new process. (Metasploit Pro trials will last for 14 days until they expire, and Metasploit Community licenses last a year.)  We will follow the appropriate US and foreign government regulations and seek authorization to continue serving our customers who already have licenses, but cannot guarantee the success of these applications to continue usage in the future.  We will stay in touch with any impacted customers and keep them apprised of their license status as they renew.


If you are outside the US and Canada, and are currently evaluating a Metasploit Pro license, we encourage you to reach out to your Account Executive for more information on this issue.


Please let us know if you have any questions, and we appreciate your understanding as we comply with US export laws.  Thank you.

Filter Blog

By date: By tag: