8-K: Rapid7 Announces Disappointing First Quarter 2025 Results, But Maintains Optimism for Second Half Recovery

Rapid7 reported a slower-than-expected start to 2025 with a 3% year-over-year increase in total revenue, while expressing confidence in a second-half recovery.

Summary

• Rapid7 announced its financial results for the first quarter of 2025.
• The company's annualized recurring revenue (ARR) reached $837 million, a 4% increase year-over-year.
• Total revenue grew by 3% year-over-year to $210 million, with product subscriptions revenue up 4% to $204 million.
• Rapid7 reported a GAAP operating loss of $0.1 million and a non-GAAP operating income of $32 million.
• Net cash provided by operating activities was $30 million, and free cash flow was $25 million.
• The company anticipates second-quarter ARR between $850 million and $880 million, representing year-over-year growth of 1% to 5%.
• Full-year 2025 revenue is projected to be between $853 million and $863 million, a 1% to 2% increase year-over-year.
• Non-GAAP income from operations is expected to be between $125 million and $135 million for the full year.
• The company expects full-year free cash flow to be between $125 million and $135 million.

Sentiment

Score: 5

Explanation: The sentiment is neutral to slightly negative. While the company highlights positive aspects like ARR growth and new product launches, the slower-than-expected start to the year and decreased profitability metrics temper the overall outlook.

Positives

• ARR increased to $837 million, up 4% year-over-year.
• Total revenue increased to $210 million, up 3% year-over-year.
• The company launched several new products and services, including unified threat-informed remediation and Managed Detection & Response (MDR) for Enterprise.
• Rapid7 is expanding its presence in India with a new global capacity center.

Negatives

• The company had a slower start to 2025 than anticipated.
• GAAP operating loss of $0.1 million.
• Non-GAAP income from operations decreased from $40.3 million to $32.4 million year-over-year.
• Adjusted EBITDA decreased from $46.6 million to $38.9 million year-over-year.
• Professional services revenue decreased by 23% year-over-year.
• Second quarter and full year revenue growth guidance is only 1% to 2%.

Risks

• Growing macroeconomic uncertainty could impact the company's performance.
• The company's ability to sustain its revenue growth rate is uncertain.
• Competition in the cybersecurity market could affect Rapid7's market share.
• Failure to meet publicly announced guidance could negatively impact investor confidence.

Future Outlook

Rapid7 anticipates ARR between $850 million and $880 million for the second quarter of 2025 and revenue between $211 million and $213 million. The company projects full-year 2025 revenue between $853 million and $863 million and non-GAAP income from operations between $125 million and $135 million.

Management Comments

• Corey Thomas, Chairman and CEO of Rapid7, stated that the company had a slower start to 2025 than anticipated but has a clear strategy and strong conviction in its long-term opportunity.
• He also mentioned that the company is executing with increased focus and urgency, investing behind its leadership in MDR, accelerating Exposure Command adoption, and sharpening its go-to-market engine.

Industry Context

Rapid7 operates in the competitive cybersecurity market, facing rivals such as CrowdStrike, Palo Alto Networks, and SentinelOne. The company's focus on MDR and threat detection aligns with industry trends emphasizing proactive security measures and comprehensive risk management.

Comparison to Industry Standards

• Comparing Rapid7's ARR growth of 4% to competitors like CrowdStrike, which has historically shown higher growth rates, indicates a potential lag in market share gains.
• Palo Alto Networks, with its broader security portfolio, may exhibit different growth dynamics, making a direct comparison challenging.
• SentinelOne, another competitor in the endpoint security space, also demonstrates strong growth, putting pressure on Rapid7 to innovate and expand its offerings.
• Rapid7's focus on MDR aligns with the industry's shift towards managed security services, but its success depends on effectively competing with larger players and specialized MDR providers.

Management Changes

Stakeholder Impact

• Shareholders may be concerned about the slower-than-expected start to the year and decreased profitability metrics.
• Employees may be affected by the company's restructuring efforts and focus on operational efficiency.
• Customers may benefit from the company's new product launches and enhancements to its Command Platform.

Next Steps

• Rapid7 will host a conference call on May 12, 2025, to discuss its results.
• The company will continue to focus on executing its strategy, investing in MDR, accelerating Exposure Command adoption, and sharpening its go-to-market engine.

Key Dates

Keywords

Rapid7, financial results, cybersecurity, ARR, revenue, MDR, threat detection, risk management