Rapid7 (RPD) Q4 2025 earnings review
Growth Engine Stalls: Rapid7 Enters Contraction
Rapid7's transition has hit a hard wall. After quarters of decelerating growth, the company reported flat ARR year-over-year in Q4 and, more alarmingly, guided for a revenue decline of 2-3% in FY26. While the company touts 'outperformance' against lowered expectations, the fundamentals show a business shrinking in a growing cybersecurity market. Non-GAAP Operating Income fell 25% YoY in Q4, and Free Cash Flow nearly halved. The pivot to MDR is happening, but it is not offsetting the decay in the legacy vulnerability management business fast enough.
🐂 Bull Case
The Managed Detection and Response (MDR) segment remains a bright spot. The January launch of MDR for Microsoft and strategic partnerships (ARMO) provide a pathway to access a larger customer base and capitalize on the shift to AI-powered SOCs.
Despite the topline contraction, Rapid7 remains cash flow positive, generating $130M in Free Cash Flow for FY25 and guiding for $125-$135M in FY26. This stability offers some downside protection.
🐻 Bear Case
Guidance for FY26 projects a 2-3% revenue decline. This is a significant deterioration from the +2% growth in FY25 and signals that the legacy business churn is accelerating faster than new products can ramp.
Operating leverage is moving in the wrong direction. Q4 Non-GAAP operating income fell from $40M in 24Q4 to $30M in 25Q4, and margins compressed from ~18.5% to ~13.8%.
⚖️ Verdict: 🔴
Bearish. A SaaS company guiding for negative revenue growth and negative ARR growth in a high-demand sector like cybersecurity is a major red flag. The turnaround is proving more painful and prolonged than anticipated.
Key Themes
Guidance Signals Structural Shrinkage
The most critical takeaway is the FY26 outlook. Rapid7 expects revenue to fall to $835-$843M (down from $860M in FY25). Furthermore, Q1 26 ARR is guided to ~$830M, implying a -1% YoY decline. This confirms that the company is currently unable to replace lost legacy revenue with new business.
Profitability Under Pressure
Efficiency metrics deteriorated in Q4. Non-GAAP Operating Income dropped to $30.1M (13.9% margin) from $40.0M (18.5% margin) a year ago. Free Cash Flow followed suit, falling to $32.3M from $58.8M in 24Q4. The company is spending heavily to support a turnaround that hasn't yet materialized in the topline.
Platform Ecosystem Expansion
Rapid7 is aggressively expanding its ecosystem to find growth. Highlights include the General Availability of MDR for Microsoft, a partnership with ARMO for runtime cloud security, and HITRUST automation. These moves are necessary to remain relevant as customers consolidate vendors, but they haven't yielded immediate financial results.
Customer Base Stagnation
Total customers ended at 'over 11,500'. This compares to 11,727 at the end of 2024. The customer count has effectively contracted or stalled over the last 12 months, indicating that churn in the long-tail/SMB segment likely outweighs enterprise wins.
Other KPIs
Stable/Stagnant. ARR was flat year-over-year at $840M. While management claimed this beat their Q3 expectation of 'approximately flat' (which implies it could have been negative), zero growth is significantly below the industry average.
Decelerating. Growth slowed to just 1% YoY. This is the core engine of the company, and it has nearly stopped growing.
Strong. Cash, equivalents, and investments rose significantly from $335M a year ago, providing a fortress balance sheet to navigate the restructuring. However, capital allocation strategy (buybacks vs acquisitions) remains a key question given the stock performance.
Guidance
Reversing. Implies a decline of 1-2% YoY compared to $210M in 25Q1. This marks the official turn from slow growth to contraction.
Reversing. Implies a full-year decline of 2-3%. Management is setting the bar low, acknowledging that the headwinds from legacy products will outweigh growth initiatives for the entire year.
Stable. The range is identical to the FY25 guidance and result ($130M). Management is prioritizing cash preservation over aggressive spending, essentially running the business for cash while trying to fix the topline.
Decelerating. At the midpoint ($112M), this represents a ~17% decline from the $135.7M achieved in FY25. Margins are expected to compress further.
Key Questions
Legacy Churn Magnitude
With MDR reportedly growing, the consolidated revenue contraction implies the legacy Vulnerability Management business is churning rapidly. What is the specific rate of decline in the legacy portfolio, and when do you model a floor?
Competitive Displacement
Given the customer count stagnation (approx 11,500 vs 11,700 a year ago), to whom are you losing the most logos? Is this displacement by consolidated platforms like Palo Alto/CrowdStrike, or budget elimination?
Cost Structure Alignment
With revenue shrinking by 2-3% and Operating Income falling ~17% in the guide, why aren't we seeing more aggressive cost actions to protect margins?