8-K: Rapid7 Q3 2025 Results Show Slowed Growth, New CFO Appointed

Rapid7 reported a 2% year-over-year increase in ARR and total revenue for Q3 2025, alongside a significant decline in GAAP operating income and free cash flow, while announcing Rafe Brown as its new Chief Financial Officer.

Summary

• Q3 2025 Annualized Recurring Revenue (ARR) reached $838 million, a 2% increase year-over-year.
• Total revenue for Q3 2025 was $218 million, also up 2% year-over-year.
• Product subscriptions revenue grew 2% year-over-year to $210 million.
• GAAP operating income significantly decreased by 54% to $5.9 million from $12.817 million in Q3 2024.
• Non-GAAP operating income declined by 16% to $37 million.
• Net cash provided by operating activities fell by 13.6% to $38 million.
• Free cash flow decreased by 22% to $30 million.
• Rafe Brown has been appointed as the new Chief Financial Officer, effective December 1, 2025, succeeding Tim Adams who will retire.
• The company provided Q4 2025 guidance, expecting ARR to be approximately flat compared to Q3 2025, and revenue between $214 million and $216 million.
• Full-year 2025 revenue guidance is set at $856 million to $858 million, representing 1% to 2% year-over-year growth.

Sentiment

Score: 3

Explanation: While revenue and ARR saw slight growth, significant declines in GAAP and non-GAAP operating income, net income, and free cash flow, coupled with flat ARR and potentially negative revenue growth guidance for Q4, indicate a challenging financial period. The new CFO appointment is a positive, but the overall financial performance is concerning.

Positives

• Annualized Recurring Revenue (ARR) increased by 2% year-over-year to $838 million.
• Total revenue grew by 2% year-over-year to $218 million.
• Product subscriptions revenue increased by 2% year-over-year to $210 million.
• Rest of world revenue showed strong growth, up 8% year-over-year to $55.250 million.
• Appointment of Rafe Brown as CFO brings extensive industry and executive leadership experience from Mimecast, SevOne, Pegasystems, and salesforce.com.
• The company's AI-driven Command Platform continues to gain market validation.
• Expanded partnership with Microsoft to advance modern detection and response.
• Introduced new AI-generated risk intelligence through Remediation Hub.
• Recognized in Gartner Magic Quadrant for Security Information and Event Management (SIEM) for the seventh consecutive year.
• Named a leader in the IDC MarketScape for Exposure Management.
• Launched Vector Command Advanced, expanding continuous red teaming and exposure validation services.

Negatives

• GAAP operating income decreased significantly by 54% year-over-year, from $12.817 million in Q3 2024 to $5.9 million in Q3 2025.
• Non-GAAP operating income declined by 16% year-over-year, from $43.952 million in Q3 2024 to $36.906 million in Q3 2025.
• Net cash provided by operating activities decreased by 13.6% year-over-year, from $43.969 million to $38.199 million.
• Free cash flow decreased by 22% year-over-year, from $38.502 million to $30.111 million.
• GAAP net income decreased by 36% year-over-year, from $15.410 million to $9.809 million.
• Non-GAAP net income decreased by 12% year-over-year, from $47.762 million to $41.910 million.
• Adjusted EBITDA decreased by 13% year-over-year, from $50.083 million to $43.514 million.
• Professional services revenue declined by 14% year-over-year to $7.814 million.
• North America revenue decreased by 1% year-over-year to $162.710 million.
• Number of customers remained flat year-over-year at 11,618.
• Q4 2025 ARR guidance is approximately flat compared to Q3 2025, indicating a slowdown in recurring revenue growth.
• Q4 2025 revenue guidance projects a potential year-over-year decline of 1% to 0%.
• Full-year 2025 revenue growth guidance is modest at 1% to 2%.

Risks

• Growing macroeconomic uncertainty.
• Unstable market and economic conditions.
• Fluctuations in quarterly results.
• Ability to successfully grow sales of cloud-based solutions, including through a consolidated platform sales approach.
• Effectiveness of the restructuring plan completed during fiscal year 2024.
• Failure to meet publicly announced guidance or other expectations about the business.
• Ability to sustain revenue growth rate.
• Ability of products and professional services to correctly detect vulnerabilities.
• Renewal of customer subscriptions.
• Competition in the markets in which the company operates.
• Market growth.
• Ability to innovate and manage growth.
• Sales cycles.
• Ability to integrate acquired companies.
• Exposure to greater than anticipated tax liabilities.
• Ability to operate in compliance with applicable laws.

Future Outlook

Rapid7 anticipates Q4 2025 ARR to be approximately flat compared to Q3 2025, with revenue projected between $214 million and $216 million, indicating a potential year-over-year decline of 1% to 0%. For the full year 2025, the company expects total revenue of $856 million to $858 million, representing 1% to 2% year-over-year growth, and free cash flow between $125 million and $135 million. The company aims to scale growth and profitability in the years ahead, leveraging its AI-driven Command Platform and strategic go-to-market enhancements.

Management Comments

• "We ended the third quarter with $838 million in ARR as our AI-driven Command Platform continues to gain market validation."
• "With our differentiated approach to expert-guided AI and automation, combined with strategic go-to-market enhancements, we're well-positioned to capitalize on the growing demand for integrated security operations platforms."
• "We are thrilled to welcome Rafe to Rapid7s leadership team. The deep financial and operational expertise he brings to our team will be instrumental in our journey ahead as we look to scale our growth and profitability in the years ahead."

Industry Context

Rapid7's focus on its AI-driven Command Platform and expanded partnership with Microsoft aligns with the broader cybersecurity industry trend towards integrated security operations, leveraging AI and automation for enhanced threat detection and exposure management. The recognition in Gartner's SIEM Magic Quadrant and IDC MarketScape for Exposure Management indicates its competitive positioning in these critical segments. The strategic expansion into the UAE also reflects a global push for cyber resilience, a key driver in the industry.

Management Changes

Corporate Governance

Stakeholder Impact

• Shareholders: Experience slowed revenue growth, declining profitability, and reduced cash flow, which could impact share price. The new CFO appointment aims to drive future growth and profitability.
• Employees: Change in CFO leadership, with Tim Adams transitioning to an advisory role. New CFO brings extensive experience.
• Customers: Continued focus on AI-driven security platforms, expanded partnerships (Microsoft), and new product features (AI-generated risk intelligence) aim to enhance service and protection.
• Management: New CFO Rafe Brown joins the leadership team with a significant compensation package, tasked with scaling growth and profitability.

Next Steps

• Rafe Brown's employment as Chief Financial Officer is expected to commence on or about December 1, 2025.
• Tim Adams will remain with the company in an advisory capacity during a transition period.
• Rafe Brown will be eligible for an annual performance bonus beginning in 2026.
• Rafe Brown is expected to receive a performance-based restricted stock unit award no later than March 31, 2026.
• Rafe Brown is expected to receive a supplemental equity award in the first quarter of 2026.
• Rapid7 will host a conference call on November 4, 2025, to discuss results.

Key Dates

Recommendation

While Rapid7 shows modest revenue and ARR growth, the significant year-over-year declines in GAAP and non-GAAP operating income, net income, and free cash flow are concerning. The Q4 guidance for flat ARR and potentially negative revenue growth suggests ongoing challenges. The appointment of a highly experienced CFO, Rafe Brown, is a positive step towards addressing operational efficiency and scaling growth, but the immediate financial performance indicates a period of transition and uncertainty. Investors should hold to observe if the new leadership and strategic initiatives can reverse the declining profitability and accelerate growth in future quarters.

Keywords

Rapid7, RPD, Cybersecurity, Financial Results, Q3 2025, CFO Appointment, Annualized Recurring Revenue, ARR, Revenue, Operating Income, Free Cash Flow, Guidance, Exposure Management, Threat Detection, Security Operations, AI, SaaS, Executive Change