RPD

Rapid7, Inc. 10-Q Summary: Q2 2025

Business Context and Reporting Period

This summary covers Rapid7, Inc.'s (RPD) quarterly report on Form 10-Q for the period ended June 30, 2025. Rapid7 is a global cybersecurity software and service provider focused on security operations (SecOps), offering cloud-based subscriptions, managed services, and professional services. The company operates as a single reportable segment and serves over 11,000 customers globally, including 40% of the Fortune 100.

Key Financial Metrics

Material Changes vs. Prior Period

• Revenue Growth: Total revenue increased 3.0% year-over-year (YoY) in Q2 and 2.7% YoY for the six months ended June 30, 2025. Growth was driven by a $9.1 million increase in revenue from existing customers (renewals, upsells, cross-sells), partially offset by a $2.9 million decrease in revenue from new customers.
• Profitability: Net income increased 27.5% YoY in Q2 ($8.3M vs $6.5M). However, operating income decreased 33.1% YoY in Q2 ($3.5M vs $5.2M) due to higher operating expenses.
• Expense Trends:
  • R&D: Increased 16.8% YoY in Q2, primarily due to higher personnel costs and cloud infrastructure spending for new product development.
  • Sales & Marketing: Increased 1.4% YoY in Q2, driven by a shift in role responsibilities between product delivery and sales support.
  • G&A: Decreased 8.8% YoY in Q2, largely due to reduced charitable contributions and taxes.
• Debt Management: The company redeemed the remaining $46.5 million of its 2025 Convertible Senior Notes at maturity on May 1, 2025. Outstanding debt now consists of the 2027 and 2029 Notes.
• Acquisition: The company acquired Noetic Cyber, Inc. in July 2024. Revenue and net loss attributable to Noetic for the six months ended June 30, 2025, were not material.

Guidance, Outlook, and Risks

• Key Metrics: Annualized Recurring Revenue (ARR) grew 3.1% YoY to $840.6 million. The customer base grew 1.4% YoY to 11,643 customers.
• Liquidity: On June 25, 2025, Rapid7 entered into a $200 million revolving credit facility with JPMorgan Chase. As of June 30, 2025, there were no outstanding borrowings under this facility. Management believes existing cash, investments, and the credit facility are sufficient for the next 12 months.
• Commitments: In January 2025, the company amended a cloud services agreement, increasing total purchase obligations to $660 million over five years, with a minimum commitment of $125 million annually.
• Tax Legislation: On July 4, 2025, the "One Big Beautiful Bill Act" (OBBBA) was signed, changing corporate income tax laws. The company is currently evaluating the impact on its deferred tax assets and liabilities.
• Risks:
  • Israel Tax Assessment: The company received an initial assessment from the Israel Tax Authority of approximately $88 million related to fiscal year 2021. Rapid7 intends to defend its position and has not recorded a liability, but an unfavorable outcome could adversely affect financial results.
  • Accounting Correction: The company corrected an immaterial error related to stock-based compensation expense in prior periods (2023-2024), resulting in revised comparative financial information.

Investor Verification Checklist

• Revenue Mix: Verify the sustainability of growth from existing customers versus the decline in new customer revenue.
• Operating Leverage: Monitor the trend of operating expenses (specifically R&D and S&M) relative to revenue growth to assess future operating margin expansion.
• Debt Structure: Confirm the terms and covenants of the new $200 million credit facility and the impact of the redeemed 2025 Notes on future interest expenses.
• Tax Contingency: Track the status of the $88 million Israel Tax Authority assessment and any potential impact on future tax provisions.
• Cloud Commitments: Review the utilization of the $660 million cloud services commitment to ensure it aligns with revenue generation.