Rapid7, Inc. Form 10-K Summary
Reporting period: Fiscal year ended December 31, 2022. The filing is an annual Form 10-K, not a standalone fourth-quarter report; quarterly financial figures are not clearly provided in the supplied text.
Business Context
Rapid7 provides cloud-based cybersecurity products, managed services, professional services and term software licenses through its Insight Platform. Offerings address incident detection and response, cloud security, vulnerability risk management, application security, threat intelligence, and security orchestration and automation. At year-end, Rapid7 had 10,929 customers in 146 countries and 2,623 full-time employees. Recurring revenue represented 94% of total revenue, compared with 92% in 2021.
Financial Performance and Key Metrics
| Metric | 2022 | 2021 | Change |
|---|---|---|---|
| Total revenue | $685.1 million | $535.4 million | 28.0% increase |
| Products revenue | $647.5 million | $500.8 million | 29.3% increase |
| Professional services revenue | $37.5 million | $34.6 million | 8.6% increase |
| Gross profit | $470.7 million | $366.5 million | 28.5% increase |
| Gross margin | 68.7% | 68.4% | 30 basis-point increase |
| Loss from operations | $(111.6) million | $(120.1) million | Loss narrowed |
| GAAP net loss | $(124.7) million | $(146.3) million | Loss narrowed |
| GAAP net loss per share | $(2.13) | $(2.65) | Improved |
| Non-GAAP operating income | $30.4 million | $7.6 million | Improved |
| Non-GAAP operating margin | 4.4% | 1.4% | Improved |
| Adjusted EBITDA | $49.4 million | $23.8 million | Improved |
| Cash flow from operations | $78.2 million | $53.9 million | Increase |
| Free cash flow | $40.7 million | $35.1 million | Increase |
| ARR at year-end | $714.2 million | $599.0 million | 19.2% increase |
Revenue growth was driven primarily by existing customers: of the $133.9 million of organic growth, $121.2 million came from renewals, upsells and cross-sells, while $12.7 million came from new customers. IntSights contributed $15.8 million of reported 2022 revenue. Channel partners generated 57% of revenue, up from 52% in 2021.
Liquidity, Debt and Capital Resources
- Cash and cash equivalents were $207.3 million at December 31, 2022; investments totaled $93.9 million.
- Total cash, cash equivalents and restricted cash ended at $207.8 million.
- Convertible senior notes had $830.0 million of aggregate principal outstanding: $230.0 million due in 2025 and $600.0 million due in 2027. Net carrying value was $815.9 million.
- The company had no borrowings under its $100.0 million revolving credit facility and was in compliance with its covenants. Letters of credit of $9.8 million reduced availability.
- Debt fair values were $220.3 million for the 2025 Notes and $468.6 million for the 2027 Notes.
- Capital expenditures were $20.4 million and capitalized internal-use software costs were $17.1 million.
- Accumulated deficit was $860.7 million, and stockholders’ equity remained negative at $(120.1) million.
Material Changes Versus the Prior Comparable Period
- Revenue growth moderated to 28.0% from 30.1%, while ARR growth declined to 19.2% from 38.4%.
- Customer count increased 6.3% to 10,929, and ARR per customer increased 12.2% to $65.4 thousand.
- Gross margin improved modestly because of a higher mix of products revenue, although professional services margin declined to 14.4% from 18.5%.
- Research and development, sales and marketing, and general and administrative expenses increased in dollars, but each declined as a percentage of revenue. Sales and marketing remained the largest expense category at 44.9% of revenue.
- Stock-based compensation increased to $119.9 million from $102.6 million, representing a significant recurring non-cash expense.
- Operating cash flow increased by $24.3 million, supported in part by a $52.5 million increase in deferred revenue.
- Investing cash use declined substantially because 2022 included no major business acquisition payments; 2021 included $358.4 million of acquisition cash payments.
- Interest expense declined to $11.0 million from $14.3 million, partly because 2021 included induced conversion expense and interest associated with the retired 2023 Notes.
- Rapid7 contributed an additional $0.5 million to the Rapid7 Cybersecurity Foundation in 2022 and announced a subsequent $1.5 million multi-year commitment to a cybersecurity laboratory at the University of South Florida.
Guidance, Outlook and Management Commentary
The supplied filing does not present specific 2023 revenue, ARR, margin, earnings or cash-flow guidance. Management stated that it expects continued investment in product development, sales and marketing, international expansion, customer success, infrastructure and potential strategic acquisitions. The company expects to continue generating losses for the foreseeable future, although it reported positive non-GAAP operating income and free cash flow in 2022.
Management believes existing cash, investments, available credit and operating cash flows will be sufficient to meet operating and capital requirements for at least the next 12 months and longer-term expected obligations. Significant future cash needs include cloud infrastructure commitments, capital expenditures, lease obligations, potential acquisitions and convertible-note obligations.
Risks, Contingencies and Unusual Items
- Rapid7 has a significant loss history, substantial accumulated deficit and significant convertible debt. Refinancing, conversion or required repurchase of the Notes could affect liquidity and shareholder dilution.
- Revenue depends heavily on subscription renewals, upsells and cross-sells, while 57% of revenue is generated through channel partners.
- Approximately half of 2022 revenue was attributable to vulnerability management offerings, creating product concentration risk.
- Competition is intense across XDR/SIEM, cloud security, vulnerability management, application security and threat intelligence, including from larger vendors with greater resources and bundled offerings.
- Cybersecurity incidents, product defects, service outages, third-party hosting failures or misuse of Metasploit could harm customer trust, revenue and results.
- Privacy, cybersecurity, export-control and data-transfer regulations may increase compliance costs or restrict operations, particularly under the GDPR, UK GDPR and evolving U.S. privacy laws.
- Economic weakness, inflation, higher interest rates, foreign-exchange volatility and geopolitical events could delay purchases, reduce renewals or pressure pricing.
- Finjan, Inc. has asserted infringement of seven patents in ongoing Delaware litigation. The ultimate outcome and potential liability are uncertain.
- Non-cancellable purchase commitments totaled $294.5 million, including $113.9 million due in 2023, primarily for cloud infrastructure and software subscriptions.
- Internal controls over financial reporting were assessed as effective by management and KPMG. The critical audit matter involved estimates of standalone selling prices for revenue performance obligations.
Important Facts for Investors to Verify
- Reconcile ARR growth, customer additions and retention metrics with reported subscription revenue, deferred revenue and future performance obligations.
- Assess the sustainability of positive free cash flow given GAAP losses, high stock-based compensation, capitalized software costs and deferred-revenue-driven working-capital benefits.
- Review the maturity, conversion conditions, potential dilution and refinancing requirements for the 2025 and 2027 Notes.
- Evaluate the concentration of revenue in vulnerability management, existing-customer expansion and channel partners.
- Monitor gross-margin trends as cloud-based subscriptions and managed services represent a larger portion of the business.
- Review the Finjan litigation, purchase commitments, lease obligations and any subsequent developments after February 24, 2023.
- Confirm that the company’s liquidity and credit-facility availability remain adequate under weaker renewal rates, slower sales cycles or increased operating costs.