Q3 2026 Rapid7 Earnings Call - RAPID7 INC

Financial Performance:

• Total Q3 2026 revenue was $212.4 million, a 3% year-over-year decline, driven by non-core product attrition.
• Total Annual Recurring Revenue (ARR) reached $820 million, $8 million above guidance; Core platform solutions (85% of ARR) grew 1% YoY, while non-core products (15%) declined 19% YoY.
• Detection and Response (D&R) segment, representing 55% of total ARR, maintained 5% YoY growth; Exposure Management segment declined 6% YoY.
• Non-GAAP operating income was $46.2 million (21.7% margin), exceeding guidance; Non-GAAP earnings per share were $0.60.
• Free cash flow totaled $26.5 million for the quarter, with full-year FCF guidance reaffirmed at approximately $130 million.
• Balance sheet strength remains robust with $732 million in cash, cash equivalents, and short-term investments, plus a $200 million undrawn credit facility.

Guidance and Future Outlook:

• Q4 2026 revenue guidance is $208–$210 million (4% YoY decline at midpoint); Full-year 2026 revenue guidance is $841–$843 million (2% YoY decline).
• Q4 non-GAAP operating income is expected to be $40–$42 million; Full-year non-GAAP operating income is $140–$142 million, targeting a 17% operating margin for 2026.
• Q4 ARR is projected to decrease to $812 million, with core solutions expected to be flat sequentially and non-core continuing to decline.
• Management targets exiting 2026 at approximately 20% non-GAAP operating margin.
• No specific 2027 guidance provided; full framework expected in the next earnings call.
• Strategic goal to retire $600 million convertible notes due March 2027 using cash on hand.

Business Segments and Product Lines:

• Core Platform: Focus is shifting entirely to Detection & Response and Exposure Management, which now comprise 85% of ARR.
• Exposure Management: Healthy adoption of "Exposure Command" driving upgrades from legacy vulnerability management solutions, though overall segment ARR declined due to mix and non-core drag.
• Non-Core Portfolio: Declined 19% YoY; management has announced "End of Sale" for standalone versions of certain products (e.g., Cloud and AppSec solutions, Digital Risk Protection) to focus on bundled core offerings; existing customers can still renew and expand these products.
• Service Layer: Consolidated under Chief Global Services Officer Mel Stone to integrate MDR, threat intelligence, and labs into a unified "Rapid7 Intelligence" engine.
• AI & Autonomous SOC: Introduction of "Reasoning" (the next R) with Red, Blue, and Orange agents; "Kenzo" (Acquired technology) is moving from acquisition to adoption. First General Availability (v1.0) for the Autonomous Security Operations Center is targeted around RSAC 2027.

Market and Competitive Landscape:

• Customer Wins: Recent successes include a global facilities management firm, a large religious organization, and a US manufacturer, all consolidating vendors due to frustration with incumbent providers' lack of AI strategy or innovation.
• Ideal Customer Profile (ICP): Focusing on the "heart of the enterprise" (companies seeking simplified, enterprise-grade security), resulting in improved sales productivity and clearer value propositions.
• Competitive Dynamics: Less pricing pressure from private equity-backed competitors; customers are increasingly prioritizing AI strategy and future roadmap over price.
• Vendor Relationships: Evolving from competitive to cooperative with major platform providers as customers recognize Rapid7's value as an adjacent, specialized solution rather than a direct overlap.
• Market Trends: Rising demand driven by the need for machine-speed defense against machine-speed attacks; increasing importance of AI-driven vulnerabilities (e.g., PHP vulnerability) and autonomous operations.

Risks and Challenges:

• ARR Growth: Total ARR remains flat to declining sequentially; the company is not yet out of the "reset" phase, and return to growth is not expected immediately.
• Non-Core Runoff: Continued sequential decline in non-core ARR will persist as sales of standalone products are halted.
• Cost Pressures: AI compute costs and AWS charges are expected to ramp in Q4, moderating gross margins; product engineering investments are accelerating into 2027.
• Execution Risk: Developing the Autonomous SOC and integrating AI agents requires significant time and capital; success depends on proving agent reliability and customer trust.
• Restructuring: Total restructuring charges are expected to be approximately $11 million, with investments in product leadership and AI infrastructure continuing into 2027.

Management Commentary and Tone:

• Tone: Cautiously optimistic and disciplined; management emphasizes "execution" and "stability" over declaring victory. Wael Mohamed (CEO) stated, "One quarter of execution is not a return to growth."
• Strategic Focus: Clear pivot to core business; management is "reinvesting" in product and AI rather than managing for short-term quarters.
• Confidence: High confidence in the sales organization's stability and the "Right to Win" in the core ICP; belief that the focus on core products will drive durable growth.
• Transparency: Willing to acknowledge near-term declines and the specific mechanics of ARR movement (e.g., core flat, non-core declining).

Analyst Questions and Answers:

• Sales Organization: CEO confirmed the sales team is stable and focused, with improved productivity per rep and a clear ICP strategy driving pipeline confidence.
• Service Model: CEO explained the "AI-first service model" using agents to deliver SOC outcomes at software economics, avoiding traditional people-heavy cost structures.
• Non-Core Timeline: Management is evaluating the long-term path for non-core assets but expects a decision on the best shape of the business soon; end-of-sale is already in effect for specific products.
• 2027 Guidance: Management declined to provide 2027 financial targets, deferring all specific guidance to the next earnings cycle.
• ARR Stabilization: D&R growth rate has remained flat (5% YoY) for two quarters, signaling stabilization; future growth is expected to come from new product launches and a cleaner portfolio.
• Cloud/AI Costs: Investments in Kenzo infrastructure and AI compute are ongoing, with efficiency gains and service economics expected to materialize over the course of 2027.

Other Key Points:

• Voice Technology: CEO Wael Mohamed delivered prepared remarks using an AI-generated version of his voice, though he responded to analyst questions live.
• Organizational Changes: Dan Deklich is leading product/technology with a focus on AI-native SDLC and leadership restructuring; Mel Stone is centralizing the service layer.
• Customer Feedback: A Boston Customer Summit with ~50 global customers yielded "extremely positive" feedback on the new roadmap and vision.
• Vulnerability Response: Rapid7 was prepared to handle recent high-profile vulnerabilities (e.g., PHP), proactively advising customers and assisting with executive communication.
• International: While US operations are the primary focus, management sees significant upside and plans to invest in international growth in the coming year.