10-Q: Rapid7 Q3 2025: Revenue Up, Net Income Down Amid Investments

Rapid7 reported a 1.5% increase in total revenue for Q3 2025 to $217.96 million, but net income declined by 36.3% to $9.81 million, reflecting increased operating expenses and strategic investments.

Summary

• Total revenue for the three months ended September 30, 2025, increased by 1.5% to $217.96 million, with product subscriptions growing 2.2% to $210.15 million, while professional services declined 13.8% to $7.81 million.
• Net income for Q3 2025 decreased by 36.3% to $9.81 million, resulting in diluted net income per share of $0.15, down from $0.21 in Q3 2024.
• Operating income for the quarter fell 53.9% to $5.90 million, primarily due to a 6.1% increase in total operating expenses, which reached $147.07 million.
• For the nine months ended September 30, 2025, total revenue grew 2.3% to $642.41 million, driven by existing customer renewals, upselling, and cross-selling, despite an $8.5 million decline in new customer revenue.
• Nine-month net income decreased 13.3% to $20.25 million, and operating income dropped 66.5% to $9.30 million.
• Annualized Recurring Revenue (ARR) as of September 30, 2025, increased by 1.8% year-over-year to $837.73 million, while the customer count remained flat at 11,618.
• Free cash flow for the nine-month period rose 2.7% to $97.82 million.
• The company recorded a tax benefit of $0.497 million in Q3 2025 due to the newly enacted One Big Beautiful Bill Act (OBBBA).
• An immaterial error related to stock-based compensation expense from 2023 and 2024 was corrected by revising prior period financial statements.

Sentiment

Score: 4

Explanation: While revenue and ARR show modest growth, profitability metrics (net income, operating income) have significantly declined due to increased operating expenses and strategic investments. Customer growth is stagnant. The new credit facility provides liquidity, but the unresolved $97 million tax assessment from the Israel Tax Authority presents a notable financial risk.

Positives

• Modest revenue growth: Total revenue increased by 1.5% for the quarter and 2.3% for the nine months, primarily driven by product subscriptions and existing customer engagement.
• Stable recurring revenue base: Annualized Recurring Revenue (ARR) grew by 1.8% year-over-year to $837.73 million.
• Improved liquidity: Free cash flow for the nine months increased by 2.7% to $97.82 million, and the company secured a new $200.0 million revolving credit facility with no outstanding borrowings.
• Tax benefit from new legislation: The One Big Beautiful Bill Act (OBBBA) resulted in a $0.497 million tax benefit for Q3 2025.

Negatives

• Significant decline in profitability: Net income for Q3 2025 decreased by 36.3% to $9.81 million, and diluted net income per share fell to $0.15.
• Sharp drop in operating income: Income from operations for Q3 2025 declined by 53.9% to $5.90 million, and by 66.5% for the nine months, indicating pressure on core operations.
• Increased operating expenses: Total operating expenses rose by 6.1% for the quarter, driven by higher personnel costs in R&D and sales & marketing, and increased professional fees.
• Stagnant customer growth: The number of customers remained flat year-over-year at 11,618, with a decline in revenue from new customers.
• Decreased professional services revenue: Professional services revenue declined by 13.8% for the quarter and 19.6% for the nine months.
• Unfavorable foreign exchange impact: Other (expense) income, net, shifted from a gain to a loss in Q3 2025 due to unfavorable foreign exchange rates.

Risks

• Uncertain impacts of prolonged economic uncertainty on business, strategy, operating results, financial condition, and cash flows, including changes in software spending and global economic volatility.
• Intense competition and rapid innovation from new and existing competitors in the cybersecurity market.
• Challenges in effectively restructuring the business to align with strategic priorities.
• The need to continuously adapt to technological change and enhance, innovate, and scale solutions, including the Command Platform, to remain competitive.
• Risks associated with managing and sustaining growth and achieving consistent profitability.
• Potential for perceived or actual security, integrity, reliability, quality, or compatibility problems with solutions, including system outages or security breaches.
• The ability to attract and retain qualified employees and key personnel to support growth.
• Exposure to foreign currency fluctuations, which can adversely affect results of operations and cash flows.
• An initial tax assessment of approximately $97 million from the Israel Tax Authority for fiscal year 2021, which the company disputes and could materially adversely affect financial condition if unsuccessful.
• Costs associated with defending intellectual property infringement and other claims.

Future Outlook

The company expects operating expenses to increase as a percentage of revenue in the near term due to prioritized investments for growth. It aims to continue driving innovation across core products and capabilities to accelerate customer value and provide a frictionless, integrated cloud security experience. The company's focus is to be the leading provider of integrated security operations solutions by providing exposure and threat management. Management believes existing cash, investments, operating cash flow, and the new credit agreement will be sufficient to meet operating and capital requirements for at least the next 12 months.

Management Comments

• "Rapid7 is a global cybersecurity software and service provider on a mission to create a safer digital world by making cybersecurity simpler and more accessible."
• "We empower security professionals to manage a modern attack surface through our trusted AI infused technology, leading-edge research, and broad, strategic expertise."
• "We view this as a demand driver for integrated SecOps, and believe that we have an opportunity to be a leader in delivering integrated risk and threat management across on-premise, cloud, and external attack surfaces."
• "Our focus is to be the leading provider of integrated security operations solutions by providing exposure and threat management that leverages our ability to give customers command of their attack surface."
• "We believe that our existing cash and cash equivalents, our investments, our cash generated by operating activities and our available borrowings under our Credit Agreement will be sufficient to meet our operating and capital requirements for at least the next 12 months."

Industry Context

The cybersecurity industry is experiencing escalating challenges due to a widening spectrum of attackers and techniques, including the proliferation of cyberattacks leveraging artificial intelligence (AI) and targeted automation. There is a customer-driven shift towards consolidated security platforms, moving away from cloud security as a specialized function towards an integrated capability for Security Operations (SecOps) teams. Customers are demanding integrated expertise to support them in effectively managing their security technologies, leading to a convergence of security consolidation, integrated cloud security, and expertise-driven outcomes for the modern SOC.

Comparison to Industry Standards

• The company's Chief Operating Decision Maker (CODM) uses consolidated net income to benchmark against competitors, but specific comparable companies, projects, or results are not provided in the filing.

Corporate Governance

Legal Proceedings

• The company is a party to litigation or subject to claims incident to the ordinary course of business, but currently believes the final outcome will not have a material adverse effect.
• The Israel Tax Authority (ITA) issued an initial assessment of approximately 324 million Israeli New Shekels (approximately $97 million) related to fiscal year 2021. The company believes its tax positions are sustainable and intends to defend its position, thus has not recorded any impact.

Stakeholder Impact

• Shareholders: Potential dilution from convertible senior notes (though anti-dilutive for Q3 2025 diluted EPS calculation), impact of financial performance on stock price, potential adverse effect from ITA assessment if unsuccessful.
• Employees: Stock-based compensation plans (RSUs, PSUs, ESPP), potential for bonuses in common stock, continued employment requirements for contingent consideration shares from Noetic acquisition.
• Customers: Continued provision of security solutions, focus on integrated SecOps, cloud-based subscriptions, managed services.
• Creditors: New $200.0 million revolving credit facility, existing convertible senior notes, covenants in the credit agreement.
• Suppliers: Increased purchase obligations with a cloud services provider ($660 million over five years).

Next Steps

• Continue to drive innovation across core products and capabilities to accelerate customer value.
• Focus on delivering integrated risk and threat management across on-premise, cloud, and external attack surfaces.
• Monitor developments related to the Israel Tax Authority assessment and defend the company's tax position.
• Evaluate the effect of adopting ASU 2023-09, Improvements to Income Tax Disclosures.

Key Dates

Recommendation

While Rapid7 shows modest revenue and ARR growth, the significant decline in net income and operating income, coupled with stagnant customer acquisition, raises concerns about profitability and growth efficiency. The new credit facility provides liquidity, but the substantial Israel Tax Authority assessment represents a material contingent liability. The company is making strategic investments and focusing on integrated SecOps, which could yield future benefits, but current financial performance suggests a 'hold' stance until there's clearer evidence of improved profitability and resolution of the tax dispute.

Keywords

Cybersecurity, Security Operations, Rapid7, Software, Cloud Security, Vulnerability Management, Threat Detection, Annualized Recurring Revenue (ARR), Q3 2025 Earnings, SEC Filing, 10-Q, Convertible Senior Notes, Credit Facility, Noetic Cyber, AI in Cybersecurity