Rapid7 Earnings Call Balances AI Vision With Headwinds

Rapid7 Inc. ((RPD)) has held its Q1 earnings call. Read on for the main highlights of the call.

Rapid7’s latest earnings call painted a cautiously optimistic picture, as management balanced solid execution on profitability and cash flow with lingering growth challenges. The company’s core detection and response platform showed healthy momentum, and leadership leaned into an AI‑driven SOC vision, but investors were reminded that revenue and ARR growth remain constrained by legacy product drag and integration work still ahead.

Core Platform Anchors a Large but Slow‑Growing ARR Base

Rapid7 closed the quarter with $832 million in annual recurring revenue, underscoring the scale of its subscription footprint. More than 80% of that ARR now comes from core detection and response and exposure management solutions, with detection and response growing about 7% year over year and representing 55% of the total, even as overall core ARR expanded only around 2%.

Revenue Holds Steady Despite Services Softness

Quarterly revenue came in at $209.7 million, effectively flat at $210 million, as product revenue of $204 million was unchanged from a year earlier and services saw a modest decline. Overall, the top line dipped roughly 0.3% year over year, signaling that while Rapid7 is not in a growth phase today, it has found a near‑term revenue floor.

Profitability and Cash Flow Outperform Expectations

Profitability was a key bright spot, with non‑GAAP operating income of $24.4 million translating to an 11.7% margin, ahead of guidance. Non‑GAAP EPS reached $0.36 and free cash flow was a solid $33.4 million in the quarter, giving management enough confidence to lift full‑year free cash flow guidance to a range of $125 million to $135 million.

Robust Liquidity Supports Debt Maturity and Strategy

The balance sheet remains a strategic advantage, featuring $670 million in cash, cash equivalents, and short‑term investments. With an additional $200 million undrawn revolving credit facility, Rapid7 has ample liquidity to address its March 2027 convertible debt and continue funding product development and go‑to‑market execution without immediate capital pressure.

AI‑Driven SOC Strategy Accelerated by Kensile Acquisition

Management spotlighted the acquisition of Kensile Security as a pivotal step toward an AI‑first security operations center and more autonomous investigation and remediation. The technology is expected to enhance managed detection and response efficiency and support margin expansion over time, though investors will be watching closely to see how quickly these capabilities scale in production environments.

Exposure Command Upgrades Target Cloud and Data Risk

Rapid7 rolled out two notable enhancements to its Exposure Command offering, adding runtime validation for cloud environments and data security posture management. These features are designed to highlight exploitable exposures across modern infrastructure and prioritize remediation, positioning the platform more squarely in high‑value cloud and data‑centric security workflows.

Enterprise Wins Signal Ongoing Large‑Customer Traction

Despite macro and portfolio headwinds, Rapid7 notched several significant enterprise deals, including two separate seven‑figure ARR managed detection and response wins with Fortune 500 customers. Additional six‑figure expansions with a global aviation manufacturer and a leading health services provider reinforced the company’s ability to land and grow sizable accounts in critical industries.

Go‑to‑Market Changes Lift Sales Productivity

Earlier commercial reorganization is beginning to show results, with management citing better pipeline focus and stronger sales execution under new leadership. While still early, these improvements suggest that Rapid7’s field organization is adapting to a platform‑centric narrative and may be better positioned to cross‑sell its core offerings in coming quarters.

Non‑Core Product Declines Weigh on ARR Trajectory

Sequential ARR trends remain a concern, with total ARR down about $8 million quarter over quarter and guidance pointing to roughly $820 million in ARR by the end of Q2. Management stressed that most of this erosion is tied to de‑emphasized standalone non‑platform offerings, but the resulting headline declines could continue to obscure healthier performance within the strategic core.

Revenue Outlook Reflects Continued Top‑Line Contraction

Near‑term revenue guidance underscores that Rapid7 is still navigating a reset phase, as Q2 revenue is projected between $207 million and $209 million, implying about a 2.9% year‑over‑year decline at the midpoint. The updated fiscal 2026 revenue outlook of $836 million to $842 million also points to a roughly 2.4% annual decline, keeping the growth story on hold while the portfolio transition plays out.

Exposure Management Stabilizing but Not Yet a Growth Engine

Management characterized exposure management as stable but conceded it is not contributing meaningful growth today, even with ongoing upgrades to Exposure Command. The timing and pace of any re‑acceleration remain uncertain, making this segment more of a strategic option on future growth than a current driver of overall expansion.

Margin Compression from SOC Capacity Investments

Non‑GAAP gross margin slipped to 72%, down about 280 basis points year over year, as Rapid7 staffed up global security operations centers to meet heightened customer demand. While these investments should support service quality and AI‑enabled efficiency down the line, they create short‑term pressure that management aims to offset through automation and scale.

Legacy Standalone Products Continue to Drive Churn

Churn in non‑core standalone products continues to be a key drag on net ARR, and management reiterated that these offerings are no longer central to the company’s long‑term strategy. As Rapid7 de‑emphasizes them, investors should expect ongoing headwinds from this shrinking tail, even as the business pivots more fully toward an integrated platform approach.

Integration and Execution Risks Around New AI Capabilities

The integration of Kensile’s AI SOC technology is still in early stages, with some autonomous capabilities set to roll out over the coming months rather than immediately. This staged deployment introduces execution risk around timing and monetization, leaving the market to gauge whether promised efficiency gains and revenue opportunities can materialize on the schedule management envisions.

Guidance Emphasizes Margin Expansion Over Near‑Term Growth

For Q2, Rapid7 guided to ending ARR of about $820 million, revenue of $207 million to $209 million, and non‑GAAP operating income of $24 million to $26 million, implying roughly a 12% margin and EPS of $0.33 to $0.36. For fiscal 2026, the company now targets revenue of $836 million to $842 million, operating margins near 13.7%, EPS of $1.52 to $1.60, and flat year‑over‑year free cash flow of $125 million to $135 million, signaling a clear focus on profitability while core ARR stays roughly flat and non‑core declines.

Rapid7’s earnings call framed a business in transition, trading near‑term growth softness and legacy product headwinds for improved profitability and a sharper focus on its AI‑enabled security platform. For investors, the story now hinges on whether core ARR can re‑accelerate as non‑core churn abates and new AI‑driven capabilities begin to translate into both operational leverage and sustainable top‑line growth.