Rapid7 (RPD) Q2 2026 earnings review
Shrinking to Grow: Margins Surge as ARR Bleeds
New CEO Wael Mohamed is ripping off the band-aid. In his first quarter at the helm, Rapid7 announced a 12% workforce reduction to aggressively protect profitability as top-line metrics deteriorate. Total Revenue crossed into negative territory (-1.5% YoY), and ARR declined for the second consecutive quarter to $824M. The company is actively shedding 'non-core' products to double down on its Detection & Response and Exposure Management platform. While top-line guidance is brutal—projecting ARR to drop another $12M next quarter—the aggressive cost-cutting allowed management to significantly raise full-year Non-GAAP Operating Income guidance to $129-$133M.
🐂 Bull Case
The 12% restructuring immediately rectifies the margin compression seen in Q1. The raised FY26 operating income guidance ($129-$133M) proves management will not sacrifice the bottom line while re-tooling the product suite.
Shedding legacy distraction to focus entirely on MDR and Exposure Management aligns Rapid7 with enterprise demand for consolidated, AI-driven security operations.
🐻 Bear Case
Revenue growth has gone from +3% a year ago to -1.5% today, with Q3 guidance pointing to an even steeper -4.5% decline. The 'non-core' churn is severe.
A 12% RIF combined with a complete go-to-market overhaul under a brand new CEO creates immense near-term disruption risk for the sales organization.
⚖️ Verdict: ⚪
Neutral. The financial profile is transforming from a 'slow-growth SaaS' to a 'value/cash-flow' play. The top-line destruction is highly concerning, but the swift and severe cost actions place a firm floor under the stock by securing strong free cash flow.
Key Themes
ARR Contraction is Accelerating
The sequential ARR bleed is worsening. After dropping $8M from Q4 to Q1, ARR dropped another $8M in Q2 (to $824M). More alarmingly, Q3 guidance calls for ARR to hit $812M—a massive $12M sequential drop. Management's narrative that this is purely 'non-core' shedding will be severely tested; if core MDR doesn't accelerate soon, the overall business scale is at risk.
Aggressive Profitability Pivot
The initiation of a 12% workforce reduction marks a severe but necessary correction. Rapid7 expects to incur $10M-$11M in restructuring charges, but the operational leverage is immediate. Management raised FY26 Non-GAAP Operating Income guidance to $129-$133M (a massive jump from the $112-$118M range guided just last quarter). The mandate is clear: if the top line won't grow, the bottom line will.
Leaning into Frontier AI
Rapid7 is aggressively integrating external frontier AI models to solve the 'alert fatigue' problem. In May, they gained access to OpenAI's TAC program (using GPT-5.5) to accelerate telemetry triage, claiming a 25% reduction in false-positive queue times. In June, they joined Anthropic's Project Glasswing for deep code reviews and automated patching. This evolution from proprietary AI to leveraging global LLM leaders is a major product evolution.
Gross Margin Compression in Subscriptions
Non-GAAP product subscriptions gross margin fell to 73% in 25Q2, down from 76% a year prior. This validates concerns raised in previous quarters regarding the high human capital costs required to staff Global Security Operations Centers (SOCs) for the MDR business. While Kenzo automation is supposed to help, it hasn't offset the near-term margin pressure yet.
Macro Trend: Vendor Consolidation
CEO Wael Mohamed explicitly stated customers 'want us to go deeper in Detection and Response and Exposure Management, not wider.' This confirms the broader macroeconomic shift where CISOs are abandoning siloed point solutions in favor of deep, integrated platforms. Rapid7's decision to stop funding peripheral products and focus entirely on the Command Platform is a direct response to this buyer behavior.
Expanding Public Sector & Regional Reach
Despite top-line woes, GTM expansions are securing future pipeline. Achieving GovRAMP Authorization in June opens up the State, Local, and Educational (SLED) market for MDR services. Additionally, a new strategic distribution agreement with Mindware aims to scale their AI-powered platform across new regional markets.
Other KPIs
Highly resilient. Despite the top-line chaos, Rapid7 converted its $37M of operating cash flow efficiently, generating $31.9M in FCF for the quarter. With $702.6M in total cash and securities, the balance sheet remains a fortress, easily securing their ability to fund the upcoming restructuring payments in H2 2026.
Decelerating severely. Non-GAAP gross margin for professional services collapsed to 9% from 13% a year ago. Revenue in this segment also dropped to $5.8M (from $6.1M). As Rapid7 pivots harder to automated platform subscriptions, professional services are becoming an increasingly inefficient drag on the business.
Guidance
Decelerating. Implies a 3% YoY contraction and a sharp $12M sequential decline from Q2. This signals that the churn in legacy 'non-core' products is expected to peak in the coming quarter before any platform-consolidation benefits take hold.
Reversing. The midpoint represents an approximate 2.5% YoY decline compared to FY25. This is a slight downgrade from the Q1 guide ($836-$842M) and confirms that 2026 is officially a shrinkage year.
Accelerating significantly. Management raised this guide dramatically from the $112-$118M range provided in Q1. The $10-$11M restructuring charge is excluded from Non-GAAP results, but the payroll savings from the 12% headcount reduction will flow straight to this line item.
Stable. Unchanged from previous guidance, proving that the cash generation mechanics of the business remain intact regardless of top-line turbulence.
Key Questions
Core vs. Non-Core Churn Dynamics
With ARR guided to drop another $12M sequentially in Q3, exactly what percentage of this expected churn is tied to the 'non-core' products versus actual logo loss in the core Detection & Response platform?
Restructuring Targets
The 12% workforce reduction is aggressive. Were these cuts concentrated heavily in the GTM teams for legacy products, or did they impact R&D and SOC staffing which are critical for the MDR margin profile?
Timeline for Top-Line Stabilization
As you actively 'shrink to grow' by focusing on the core, at what ARR baseline do you expect the 'non-core' bleed to finish so the underlying MDR growth can finally turn total ARR positive again?
