10-K: Rapid7's 2025 Annual Report: Cybersecurity Growth Slows Amidst Strategic Shifts

Rapid7 reports a slowdown in revenue growth and a slight dip in net income for 2025, while emphasizing its strategic focus on AI-driven security operations and platform consolidation.

Summary

• Total revenue for the year ended December 31, 2025, increased by 1.9% to $859.8 million, compared to $844.0 million in 2024.
• Net income for 2025 was $23.4 million, a decrease from $25.5 million in 2024, but a significant improvement from a net loss of $152.8 million in 2023.
• Recurring revenue constituted 96% of total revenue in 2025, consistent with 2024, and up from 95% in 2023, highlighting a stable subscription-based business model.
• Annualized Recurring Revenue (ARR) grew by 4.2% to $839.9 million as of December 31, 2025.
• The total number of customers slightly decreased by 0.5% to 11,674 in 2025 from 11,727 in 2024.
• Rapid7 continues to invest heavily in product development, particularly in AI-driven technology, and expanding its managed services portfolio.
• The company completed a restructuring plan in Q1 2024, which included a 16% workforce reduction, aimed at improving operational efficiencies and aligning with strategic priorities.

Sentiment

Score: 6

Explanation: StockSavvy.ai views this filing as moderately positive. While the company maintained profitability and strong recurring revenue, the significant slowdown in overall revenue growth and a slight decrease in customer count indicate challenges. Strategic alignment with industry trends and strong liquidity are positives, but the financial deceleration warrants caution.

Positives

• Achieved net income of $23.4 million in 2025, marking the second consecutive year of profitability after a significant net loss in 2023.
• Maintained a high percentage of recurring revenue at 96% of total revenue in 2025, indicating a stable and predictable revenue stream.
• Annualized Recurring Revenue (ARR) grew by 4.2% to $839.9 million, demonstrating continued expansion within the existing customer base.
• Strategic focus on AI-driven technology, integrated security operations platforms, and managed services aligns with growing industry demand for consolidated SecOps solutions.
• Successful completion of the 2023 Restructuring Plan in Q1 2024, aimed at improving operational efficiencies and reducing costs.
• Strong liquidity position with $246.7 million in cash and cash equivalents and $412.1 million in short-term investments as of December 31, 2025.

Negatives

• Total revenue growth slowed significantly to 1.9% in 2025, down from 8.5% in 2024.
• Net income decreased from $25.5 million in 2024 to $23.4 million in 2025.
• Professional services revenue declined by 18.9% in 2025 to $28.5 million from $35.1 million in 2024.
• The number of customers decreased by 0.5% in 2025, indicating challenges in new customer acquisition.
• Professional services gross margin significantly decreased to 12.5% in 2025 from 27.4% in 2024.
• Operating expenses increased by 6.3% in sales and marketing and 10.1% in research and development in 2025, outpacing revenue growth.

Risks

• Quarterly operating results may vary, potentially leading to failure to meet expectations and stock price decline.
• Inability to effectively manage future growth or scale infrastructure, systems, and processes could negatively affect business.
• Prolonged economic uncertainties or downturns could adversely affect business, including customer spending and renewal rates.
• Real or perceived failures, errors, or defects in solutions could harm brand and reputation, reducing demand.
• Intense competition in the market, including from larger companies and new entrants incorporating AI, could adversely affect business.
• Difficulty in hiring, training, and retaining qualified personnel, especially in sales, marketing, and R&D, could hinder business growth.
• Continued international expansion adds complexity and exposes the company to various risks, including foreign currency fluctuations and regulatory changes.
• Failure to protect proprietary technology and intellectual property rights could substantially harm business and operating results.
• Assertions by third parties of intellectual property infringement could result in significant costs and harm business.
• Initiatives utilizing AI may not be successful and could adversely affect business, reputation, or financial results due to accuracy, bias, or legal risks.
• Reliance on third-party software and data, including open-source components, could lead to errors, failures, or compliance issues.
• Significant amount of debt may decrease business flexibility, access to capital, and/or increase borrowing costs.
• Potential exposure to greater than anticipated tax liabilities, including an initial assessment from the Israel Tax Authority of approximately $102 million for fiscal year 2021.
• The market price of common stock has been and is likely to continue to be volatile.
• Future sales of common stock or equity-linked securities could lower the market price and adversely impact the trading price of the Notes.
• Subject to counterparty risk with respect to capped call transactions, which are unsecured.

Future Outlook

Rapid7 plans to continue significant investments in product development to enhance its Command Platform and expand features, aiming to meet customer demand and grow addressable markets. The company intends to grow its customer base through increased sales and marketing efforts and channel relationships, while also focusing on upsell and cross-sell opportunities within its existing customer base. International expansion remains a key growth driver, supported by investments in infrastructure, sales, marketing, and strategic partnerships. Strategic M&A is also a component of the growth strategy to enhance the Command Platform and address emerging customer challenges. The company expects operating expenses to increase as a percentage of revenue in the near term due to these growth-driving investments.

Management Comments

• Rapid7 is on a mission to create a safer digital world by making cybersecurity simpler and more accessible.
• We empower security professionals to manage a modern attack surface through our best-in-class AI-driven technology, leading-edge research, and broad, strategic expertise.
• Rapid7 is poised to expand the capabilities of today's SecOps teams through our integrated, open data security operations platform which is powered by our AI enabled detection and response, automation, and exposure management capabilities.
• Our focus is to be the leading provider of integrated, AI-driven security solutions infused with human expertise for the modern SOC by providing risk-aware detection and response that outpaces attackers and strengthens security program maturity.
• We believe that our current facilities are suitable and adequate to meet our current needs and intend to add new facilities or expand existing facilities as we add employees.

Industry Context

StockSavvy.ai notes that Rapid7's strategic emphasis on consolidating fragmented point products into unified security operations platforms, coupled with AI-enabled SOC capabilities and integrated cloud security, directly addresses the industry trend of security vendor consolidation. Gartner's report indicating 75% of organizations pursuing security vendor consolidation underscores the market's demand for integrated solutions that improve visibility and operational efficiency. The company's focus on expertise-driven outcomes through managed services like MDR also aligns with the increasing reliance on external expertise to manage complex threat landscapes and augment internal SOC teams. The competitive landscape, however, is intensifying with new technologies, including AI, and potential commoditization of certain software capabilities, which could increase pricing pressure and shorten product life cycles.

Management Changes

Corporate Governance

Legal Proceedings

• Received an initial assessment from the Israel Tax Authority (ITA) of approximately 324 million Israeli New Shekels (approximately $102 million) related to fiscal year 2021 operations of one of its subsidiaries. The company believes its tax positions are sustainable and intends to defend them.

Stakeholder Impact

• Shareholders: Potential for stock price volatility due to mixed financial results and market conditions; dilution risk from convertible notes if converted; reliance on stock appreciation for returns as no dividends are planned.
• Employees: Impact from the 2023 Restructuring Plan (16% workforce reduction); hybrid work model and competition for cybersecurity talent; investment in talent development and well-being programs.
• Customers: Continued focus on integrated, AI-driven security solutions and managed services aims to improve security outcomes and operational efficiency; potential for service disruptions from system failures or security breaches.
• Creditors: Significant amount of debt (convertible senior notes and revolving credit facility) may limit business flexibility and access to capital; compliance with debt covenants is crucial.
• Suppliers/Partners: Expansion of partner ecosystem and reliance on third-party software and data providers; potential for increased demand for cloud infrastructure services due to new commitments.

Next Steps

• Continue investments in product development to enhance the Command Platform and deliver additional features.
• Grow the customer base through increased sales and marketing efforts and foster channel relationships.
• Upsell and cross-sell additional offerings to the existing customer base.
• Expand the partner ecosystem, including strategic technology partnerships and channel partners.
• Strengthen customer renewal rates through professional services, support, and customer success functions.
• Continue international expansion with investments in infrastructure, sales, marketing, and strategic partnerships.
• Potentially pursue strategic M&A to enhance the Command Platform and solve emerging customer challenges.
• Manage the scheduled maturity and complete repayment of the 2027 Notes due March 15, 2027, through refined cash management and investment policies.

Key Dates

Recommendation

Rapid7 presents a mixed financial picture for 2025, with a significant slowdown in revenue growth and a slight decline in net income, alongside a decrease in customer count. However, the company maintains a strong recurring revenue base and is strategically positioned in the growing AI-driven cybersecurity and SecOps consolidation market. The completion of the restructuring plan and robust liquidity are positive, but the deceleration in growth and ongoing tax dispute in Israel introduce uncertainty. A 'hold' recommendation is appropriate as the company navigates these challenges and executes its long-term strategy, with potential for future upside if growth re-accelerates and operational efficiencies are fully realized.

Keywords

Cybersecurity, SecOps, Managed Detection and Response, MDR, SIEM, Exposure Management, AI-driven security, Vulnerability Management, Cloud Security, Attack Surface Management, Software-as-a-Service, SaaS, Form 10-K, Rapid7