10-Q: Rapid7 Q2 2025: Net Income Up, Revenue Growth Slows
Quarterly Report
Rapid7, a cybersecurity software provider, reported increased net income for Q2 2025, despite a slowdown in overall revenue growth and a significant decline in professional services revenue.
Summary
- Total revenue increased by 3.0% to $214.2 million for the three months ended June 30, 2025, compared to $208.0 million in the prior year.
- For the six months ended June 30, 2025, total revenue grew by 2.7% to $424.4 million, up from $413.1 million in the same period of 2024.
- Product subscriptions revenue increased by 4.0% to $208.1 million in Q2 2025 and 3.8% to $412.0 million for the six months.
- Professional services revenue decreased significantly by 23.1% to $6.1 million in Q2 2025 and 22.9% to $12.4 million for the six months.
- Net income for Q2 2025 was $8.3 million ($0.13 per diluted share), an increase from $6.5 million ($0.09 per diluted share) in Q2 2024.
- Net income for the six months ended June 30, 2025, was $10.4 million ($0.16 per diluted share), up from $7.9 million ($0.11 per diluted share) in the prior year period.
- Income from operations decreased by 33.1% to $3.5 million in Q2 2025 and by 77.2% to $3.4 million for the six months.
- Annualized Recurring Revenue (ARR) grew by 3.1% year-over-year to $840.6 million as of June 30, 2025.
- The company had over 11,643 customers in 151 countries, including 40% of the Fortune 100, as of June 30, 2025.
- A new $200.0 million revolving credit facility was established on June 25, 2025, with no outstanding borrowings as of June 30, 2025.
- The company redeemed $46.5 million of its 2025 convertible senior notes on May 1, 2025.
- An immaterial error related to stock-based compensation expense from 2023 and 2024 was corrected, resulting in revised comparative financial information.
Sentiment
Score: 4
Explanation: While net income increased, this was largely influenced by other income and a lower tax provision, masking a significant slowdown in core revenue growth and a sharp decline in operating income. The professional services segment is underperforming. The new credit facility provides liquidity, but the ongoing Israel Tax Authority assessment represents a material contingent liability. The overall operational performance indicates challenges that need to be addressed for sustained growth.
Positives
- Net income increased by 27.5% in Q2 2025 and 31.5% for the six months ended June 30, 2025, demonstrating improved profitability.
- Net cash provided by operating activities increased by 20.9% to $77.3 million for the six months ended June 30, 2025, indicating strong operational cash generation.
- Free cash flow improved by 18.0% to $67.0 million for the six months ended June 30, 2025.
- Total stockholders' equity significantly increased to $90.4 million as of June 30, 2025, from $17.7 million at December 31, 2024.
- The establishment of a new $200.0 million revolving credit facility provides enhanced liquidity and financial flexibility, with no outstanding borrowings as of the reporting date.
- The acquisition of Noetic Cyber, Inc. in July 2024 aims to extend the security operations platform and provide more comprehensive visibility to attack surfaces.
Negatives
- Total revenue growth slowed to 3.0% in Q2 2025 and 2.7% for the six months, compared to 9.2% and 10.6% in the respective prior year periods.
- Professional services revenue experienced a significant decline of 23.1% in Q2 2025 and 22.9% for the six months ended June 30, 2025.
- Income from operations decreased substantially by 33.1% in Q2 2025 and 77.2% for the six months ended June 30, 2025, indicating pressure on core operational profitability.
- Annualized Recurring Revenue (ARR) growth slowed to 3.1% year-over-year, down from 8.6% in the prior year.
- Cash and cash equivalents decreased to $261.3 million as of June 30, 2025, from $334.7 million at December 31, 2024.
- Net cash used in investing activities significantly increased to $120.5 million for the six months ended June 30, 2025, from $34.8 million in the prior year period, primarily due to increased purchases of investments.
Risks
- An initial assessment from the Israel Tax Authority (ITA) of approximately $88 million related to fiscal year 2021, which the company intends to defend but could adversely affect financial condition if unsuccessful.
- Uncertain impacts of prolonged economic uncertainty on business, operating results, financial condition, and cash flows.
- Increased competition and innovations from new and existing competitors in the cybersecurity market.
- Ability to effectively restructure the business in alignment with strategic priorities.
- Ability to adapt to technological change and effectively enhance, innovate, and scale solutions, including the Command Platform.
- Ability to effectively manage or sustain growth and profitability.
- Perceived or actual security, integrity, reliability, quality, or compatibility problems with solutions, including system outages or security breaches.
- Costs associated with defending intellectual property infringement and other claims.
- Fluctuations in foreign currency exchange rates, which can adversely affect results of operations and cash flows.
- Interest rate risk affecting interest income and the fair value of investments and convertible senior notes.
- Inflation risk, potentially preventing the company from fully offsetting higher costs through price increases.
Future Outlook
Management expects operating expenses to increase as a percentage of revenue in the near term due to prioritized investments aimed at driving growth. The company is currently evaluating the impact of the recently signed One Big Beautiful Bill Act (OBBBA) on its business, financial condition, and results of operations under ASC 740.
Management Comments
- Rapid7 is advancing security with visibility, analytics, and automation delivered through its platform solutions, simplifying complexity for security teams.
- We empower security professionals to manage a modern attack surface through our trusted AI infused technology, leading-edge research, and broad, strategic expertise.
- Our focus is to be the leading provider of integrated security operations solutions by providing exposure and threat management that leverages our ability to give customers command of their attack surface.
Industry Context
The cybersecurity industry is undergoing a customer-driven shift towards consolidated security platforms, moving away from cloud security as a specialized function towards an integrated capability for Security Operations (SecOps) teams. There is increasing demand for integrated expertise to support effective management of security technologies, especially as the threat landscape grows in complexity with cyberattacks leveraging artificial intelligence (AI) and targeted automation.
Corporate Governance
| Change Type | Description | Effective Date | Impact Assessment |
|---|---|---|---|
| Policy Update | The Non-Employee Director Compensation Policy was updated, effective June 11, 2025, formalizing annual cash retainers and equity awards for Non-Employee Directors. This includes an annual cash retainer of $35,000, additional retainers for lead independent director ($20,000) and Chairman of the Board ($53,000), and committee service fees. Initial RSU grants of $400,000 fair value and annual RSU grants of $200,000 fair value are also detailed, with vesting provisions. | 2025-06-11 | Aims to attract, retain, and reward Non-Employee Directors by providing competitive compensation, aligning their interests with long-term shareholder value through equity awards and share ownership guidelines. |
| Guideline Adoption | Non-Employee Directors will be subject to share ownership guidelines, as adopted or amended by the company from time to time. | Promotes alignment of Non-Employee Directors' interests with shareholders by requiring them to hold a certain amount of company stock, fostering a long-term perspective. |
Legal Proceedings
- The company is a party to litigation or subject to claims incident to the ordinary course of business, which are not currently believed to have a material adverse effect.
- Received an initial assessment from the Israel Tax Authority (ITA) of approximately 324 million Israeli New Shekels (approximately $88 million) related to fiscal year 2021. The company believes its tax positions are sustainable and intends to defend its position, having not recorded any impact in the financial statements.
Stakeholder Impact
- Shareholders: Mixed financial results with slowing revenue growth and declining operating income, but increased net income and free cash flow. The new credit facility provides financial flexibility, while the Israel Tax Authority assessment poses a contingent liability.
- Employees: Stock-based compensation remains a significant part of compensation. Employees participated in the Employee Stock Purchase Plan, and key employees from the Noetic acquisition received common stock.
- Customers: The company continues to focus on providing integrated security operations solutions, leveraging AI-infused technology and managed services to help customers manage evolving cyber threats and consolidate security platforms.
- Creditors: The company has existing convertible senior notes and has entered into a new $200.0 million revolving credit facility, enhancing its liquidity position.
Next Steps
- Evaluate the impact of the One Big Beautiful Bill Act (OBBBA) on the company's business, financial condition, and results of operations.
- Continue to drive innovation across core products and capabilities to accelerate customer value and provide a frictionless and integrated cloud security experience.
- Reassess the approach to manage risk related to fluctuations in foreign currency rates as international operations grow.
Key Dates
| Date | Description |
|---|---|
| 2020-05-01 | Issuance of $230.0 million aggregate principal amount of 2025 convertible senior notes. |
| 2021-03-15 | Issuance of $600.0 million aggregate principal amount of 2027 convertible senior notes. |
| 2023-09-01 | Issuance of $300.0 million aggregate principal amount of 2029 convertible senior notes and repurchase of $184.0 million of 2025 Notes. |
| 2024-07-03 | Acquisition of Noetic Cyber, Inc. for an aggregate fair value of $51.2 million. |
| 2024-12-31 | Fiscal year end for comparative balance sheet data. |
| 2025-01-01 | Amended cloud services agreement, increasing total purchase obligation to $660 million. |
| 2025-03-14 | Issued 186,793 shares of common stock to employees under the ESPP for $4.4 million. |
| 2025-05-01 | Redeemed the outstanding portion of the 2025 Notes for $46.5 million. |
| 2025-05-20 | Scott Murphy, Chief Accounting Officer, adopted a Rule 10b5-1 trading plan. |
| 2025-06-01 | Issued 31,911 shares of common stock as the first installment to two key Noetic employees. |
| 2025-06-18 | Tim Adams, Chief Financial Officer, adopted a Rule 10b5-1 trading plan. |
| 2025-06-25 | Entered into a $200.0 million revolving credit facility (Credit Agreement). |
| 2025-06-30 | End of the quarterly reporting period. |
| 2025-07-04 | President Donald Trump signed the One Big Beautiful Bill Act (OBBBA), changing current tax law. |
| 2025-08-01 | Date for common stock outstanding count (64,745,948 shares). |
| 2025-08-08 | Filing date of the Quarterly Report on Form 10-Q. |
| 2026-12-15 | Earliest date holders may convert 2027 Notes at their option. |
| 2027-03-15 | Maturity date for 2027 convertible senior notes. |
| 2028-12-15 | Earliest date holders may convert 2029 Notes at their option. |
| 2029-03-15 | Maturity date for 2029 convertible senior notes. |
Recommendation
holdWhile the company reported an increase in net income, this was largely driven by other income and a lower tax provision in the six-month period, masking a significant slowdown in revenue growth and a sharp decline in operating income. The professional services segment is underperforming. The new credit facility provides liquidity, but the ongoing Israel Tax Authority assessment represents a material contingent liability. The company's strategic shift to SecOps consolidation is positive, but its execution needs to demonstrate improved top-line growth and operational efficiency. Given the mixed financial signals and the tax uncertainty, a 'hold' recommendation is appropriate for investors to monitor the company's ability to re-accelerate growth and resolve the tax dispute.
Keywords
Cybersecurity, SecOps, Cloud Security, Vulnerability Management, Threat Detection, Incident Response, Software, SaaS, Enterprise Security, Rapid7, 10-Q, Financial Results
Disclaimer:The information provided here is for general informational purposes only and does not constitute financial advice, recommendation, or endorsement of any kind. It may contain errors or omissions. You should not rely on this information to make financial decisions. Always seek the advice of a qualified financial professional before making any investment or financial decisions. Use of this information is at your own risk.