Rapid7, Inc.

What they do

Rapid7 sells subscription-based cybersecurity solutions, including its Command Platform for security operations, managed detection and response (MDR), and vulnerability management. The company generates revenue primarily from product subscriptions and related professional services. It targets enterprise customers globally, with a focus on consolidating security tools and leveraging AI to automate threat detection and response.

Revenue drivers

• Product subscriptions — Core revenue stream; Q2 2026 product revenue was $205.1 million, down 1.5% year-over-year, comprising about 97% of total revenue.
• Managed detection and response (MDR) — A key growth area; the company is expanding regional availability through partnerships like the strategic distribution agreement with Mindware, and has achieved GovRAMP authorization to sell to state, local, and educational organizations.
• Command Platform — The integrated security operations platform, with recent updates including Detection as Code via Terraform, bidirectional alert sync with Microsoft Defender, and Ransomware Prevention features, driving customer consolidation and retention.

Recent performance

In Q2 2026, total revenue was $210.9 million, down 1.5% year-over-year, and ARR was $824.0 million, down 2.0%. GAAP income from operations was $3.0 million, with non-GAAP income from operations at $28.9 million. Net cash from operations was $37.0 million and free cash flow was $31.9 million, with cash and government securities at $702.6 million. For full-year 2025, revenue was $859.8 million with net income of $23.4 million.

Strategy

Management is refocusing on core Detection and Response and Exposure Management, not expanding into adjacent areas, as stated by CEO Wael Mohamed. The company is aligning investments behind its Command Platform and AI foundation, including partnerships with OpenAI (GPT-5.5 integration) and Anthropic (Project Glasswing). A restructuring plan initiated in Q2 2026 will reduce workforce by approximately 12% to streamline operations and support these priorities.

Risks

• Revenue decline — Both total revenue and ARR are declining year-over-year, indicating potential customer churn or reduced upsell.
• Restructuring execution — The 12% workforce reduction may disrupt operations, affect morale, or fail to achieve expected cost savings.
• Competitive pressure — The cybersecurity market is competitive, and larger platforms could undercut Rapid7's consolidation strategy.
• AI dependency — Rapid7's strategy relies on third-party AI models (OpenAI, Anthropic); any disruption or failure could impact product performance and customer confidence.

Outlook

For Q3 and full-year 2026, management expects restructuring charges of $10-$11 million, primarily in Q3-Q4 2026. Non-GAAP guidance excludes stock-based compensation, amortization, and other items. The company anticipates continued focus on core platform investments and AI-driven capabilities to drive growth.