Q3 2026 Rapid7 Earnings Call - RAPID7 INC

Financial Performance:

• Total revenue for Q3 2026 was $212.4 million, a 3% year-over-year (YoY) decline.
• Total Annual Recurring Revenue (ARR) ended the quarter at $820 million, exceeding guidance by $8 million.
• Core platform ARR (Detection & Response + Exposure Management) grew approximately 1% YoY; Detection & Response grew 5% YoY, while Exposure Management declined 6% YoY.
• Non-core ARR declined approximately 19% YoY, contributing to a 2% total ARR decline.
• Non-GAAP operating income was $46.2 million (21.7% margin), beating guidance.
• Free cash flow (FCF) generated was $26.5 million for the quarter.
• Non-GAAP earnings per share (EPS) were $0.60.
• Cash, cash equivalents, and short-term investments stood at $732 million.
• GAAP results included a $5.5 million non-cash write-down of a prior-year minority investment.

Guidance and Future Outlook:

• Q4 2026 total revenue guidance: $208–$210 million (approx. 4% YoY decline).
• Q4 2026 non-GAAP operating income guidance: $40–$42 million.
• Q4 2026 non-GAAP EPS guidance: $0.53–$0.55.
• Full-year 2026 revenue guidance: $841–$843 million (approx. 2% YoY decline).
• Full-year 2026 non-GAAP operating income: $140–$142 million (17% margin).
• Full-year 2026 FCF guidance reaffirmed at approximately $130 million.
• Q4 2026 ARR expected to be $812 million, with core ARR flat sequentially and non-core ARR continuing to decline.
• Management expects to exit 2026 with an approximate 20% non-GAAP operating margin.
• The company plans to use cash on hand to retire $600 million in convertible notes due March 2027.
• 2027 guidance details will be provided in the next earnings call.

Business Segments and Product Lines:

• Core platform solutions now represent 85% of total ARR, up from roughly 80% previously.
• Strategic focus is on Detection & Response (D&R) and Exposure Management, with new investments in AI capabilities.
• Non-core products (approx. 15% of ARR) are being de-emphasized; "End of Sale" announced for standalone versions of Cloud, AppSec, and Digital Risk Protection, though existing customers retain support and renewal rights.
• New leadership appointments include Mel Stone (Chief Global Services Officer) to unify Global SOC, MDR, and intelligence under one service layer.
• Product team investments led by CPTO Dan Deklich are accelerating the development of next-generation AI-enabled solutions.
• "Kenzo" (autonomous security agents) is moving from acquisition to adoption, with early capabilities now in customer hands.
• An Autonomous Security Operations Center (ASOC) is being built, with a target General Availability (GA) release around RSAC 2027.

Market and Competitive Landscape:

• Market focus is shifting toward the "heart of the enterprise" (Ideal Customer Profile) with simplified, consolidated security needs.
• Management reports a shift from competitive pressure to cooperative dialogue with large platform providers as customers recognize value in adjacent capabilities.
• New logo wins included a global facilities company, a large religious organization, and a US national manufacturer, citing dissatisfaction with incumbent providers' lack of AI strategy or failed prior implementations.
• Customers are increasingly prioritizing AI strategy, sovereign data handling, and outcome-based service over price sensitivity.
• The "Red, Blue, and Orange" agent framework (probing, defending, and reasoning) is being tested and demonstrated to customers.

Risks and Challenges:

• Continued sequential ARR decline expected in the near term due to the runoff of non-core business ARR.
• Exposure Management segment continues to underperform with a 6% YoY decline.
• Restructuring costs: Approximately $11 million total anticipated, with charges to be excluded from non-GAAP results.
• AI development costs (compute, infrastructure) are ramping up, likely moderating gross margins in Q4 2026 and beyond.
• Full repayment of convertible notes ($600M) creates interest income loss post-2027 that must be replaced by organic growth.
• Non-core portfolio evaluation remains ongoing to determine the long-term strategic path (exit, migration, or retention).

Management Commentary and Tone:

• CEO Wael Mohamed described the quarter as a "step" in a multi-quarter journey, emphasizing that meeting ARR guidance is a sign of stability, not yet a return to growth.
• Tone was disciplined and focused, with a clear rejection of "managing for one quarter" in favor of "durable growth."
• Management emphasized that the company is "building proof" and measuring success across quarters via cash generation, core execution, and reinvestment efficacy.
• CEO noted that while the restructuring was a "reset," the strategy remains focused on the core platform, and the team is executing with greater clarity.
• Management expressed strong confidence in the product roadmap and the ability to win in the core ICP, despite current flat sequential growth.

Analyst Questions and Answers:

• Sales Force Stability: Confirmed the sales organization is stable post-restructuring; CCO Alan Peters has built a focused team driving productivity improvements and positive pipeline feedback.
• Service Layer Economics: The new service layer aims for software-like economics via an AI-first model where agents scale expert support; early progress is showing data processing of ~250k alerts/day.
• Investment Allocation: Bulk of AI and product reinvestment is concentrated in the product and engineering organization (R&D) to prepare for 2027 releases.
• Non-Core Timeline: No specific timeline announced for final resolution on non-core assets, but "End of Sale" is immediate for standalones; migration to core solutions is prioritized.
• Growth Drivers: Return to growth is contingent on the completion of product roadmaps (ASOC) and the stabilization of non-core runoff; 5% D&R growth is seen as a stabilization sign.
• Vulnerability Trends: Security incidents (e.g., PHP vulnerability) are viewed as tailwinds; customers are actively seeking advisory and support during such events.
• Geographic Mix: International business is small but has upside; US market remains the primary focus with significant room to grow within the core ICP.
• Competitive Pricing: Pricing pressure from private MDR providers is not a significant factor; customers are prioritizing AI strategy and future-proofing over price.

Other Key Points:

• The CEO's opening remarks were delivered using an AI-generated voice, while he responded to Q&A questions live.
• Rapid7 introduced "Reasoning" as the third "R" in their brand, alongside the existing Red/Blue/Orange agent concept, to emphasize the need for resolution over simple detection.
• A customer summit in Boston attended by 50 global customers yielded extremely positive feedback regarding the company's roadmap and vision.
• The company clarified that "End of Sale" does not equate to "End of Life"; existing customers can still renew and expand standalone non-core products if they choose.
• Management noted that the restructuring allowed for the creation of capacity to hire new AI leaders and invest in modern AI-focused software development lifecycles (SDLC).