• Annualized recurring revenue (“ARR”) of $816 million, an increase of 9% year-over-year
• Total revenue of $208 million, up 9% year-over-year; Product subscriptions revenue of $200 million, up 10% year-over-year
• GAAP operating income of $7 million; non-GAAP operating income of $39 million
• Net cash provided by operating activities of $33 million; free cash flow of $29 million

BOSTON, Aug. 06, 2024 (GLOBE NEWSWIRE) -- Rapid7, Inc. (Nasdaq: RPD), a leader in extended risk and threat detection, today announced its financial results for the second quarter of 2024.

“Rapid7 delivered solid second quarter results in line with our expectations, growing ARR by 9% year-over-year to $816 million, and continuing to innovate to bring customers the strongest security operations data platform,” said Corey Thomas, Chairman and CEO of Rapid7. “Yesterday's introduction of the Command Platform is a terrific example of the progress we are making to bring customers comprehensive visibility to risks across their hybrid attack surface. We are laser-focused on supporting customers and this new offering builds on our strategic vision to help customers integrate their critical security data to close security gaps and prevent attacks.”

Second Quarter 2024 Financial Results and Other Metrics

For additional details on the reconciliation of non-GAAP measures and certain other business metrics to their nearest comparable GAAP measures, please refer to the accompanying financial data tables included in this press release.

Recent Business Highlights

• In July, Rapid7 acquired cyber asset attack surface management company, Noetic Cyber, to extend Rapid7’s security operations platform by unlocking more accessible and accurate asset inventory to provide customers more comprehensive visibility to their attack surface.
• In June, Rapid7 announced the incorporation of large-language models into the Rapid7 AI Engine that powers its Managed Detection and Response services, allowing the company’s security operations center to accelerate discovery, detection, investigation, response, and reporting for better customer outcomes.
• In June, Rapid7 was recognized as Best SIEM solution at the SC Awards Europe 2024. “Rapid7 offers an impressive solution that streamlines detection and response through precise alerting, detailed investigations, and actionable automation capabilities with InsightIDR,” commented one of the judges upon reviewing Rapid7’s entry.
• In June, Rapid7 announced its collaboration with Comcast Business in support of the recently announced Comcast Business Managed Detection and Response (MDR) solution. The solution leverages Rapid7’s security analytics platform and expertise to help small, medium, and large enterprise customers better manage an ever-evolving and challenging cyber threat landscape.
• In May, Rapid7 released its 2024 Attack Intelligence Report Examining High-Impact Attacks and Vulnerability Data Trends. The report provides expert insights and guidance that security practitioners can use to better understand and anticipate modern cyber threats.
  

Third Quarter and Full-Year 2024 Guidance

Rapid7 anticipates annualized recurring revenue, revenue, non-GAAP income from operations, non-GAAP net income per share and free cash flow to be in the following ranges:

The guidance provided above is forward-looking in nature. Actual results may differ materially. See the cautionary note regarding “Forward-Looking Statements” below. Guidance for the third quarter and full-year 2024 does not include any potential impact of foreign exchange gains or losses. The guidance provided above is based on a number of assumptions, estimates and expectations as of the date of this press release and, while presented with numerical specificity, this guidance is inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond Rapid7's control and are based upon specific assumptions with respect to future business decisions or economic conditions, some of which may change. Rapid7 undertakes no obligation to update guidance after this date.

Non-GAAP guidance excludes estimates for stock-based compensation expense, amortization of acquired intangible assets, amortization of debt issuance costs, and certain other items. Rapid7 has provided a reconciliation of each non-GAAP guidance measure to the most comparable GAAP measures in the financial statement tables included in this press release. The reconciliation does not reflect any items that are unknown at this time, including, but not limited to, non-ordinary course litigation-related expenses, which we are not able to predict without unreasonable effort due to their inherent uncertainty.

Conference Call and Webcast Information

Rapid7 will host a conference call today, August 6, 2024, to discuss its results at 4:30 p.m. Eastern Time. The call will be accessible by telephone at 888-330-2384 (domestic) or +1 240-789-2701 (international) with the event code 8484206. The call will also be available live via webcast on Rapid7's website at https://investors.rapid7.com. A webcast replay of the conference call will be available at https://investors.rapid7.com.

About Rapid7

Rapid7 (Nasdaq: RPD) is on a mission to create a safer digital world by making cybersecurity simpler and more accessible. We empower security professionals to manage a modern attack surface through our best-in-class technology, leading-edge research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help more than 11,000 global customers unite cloud risk management and threat detection to reduce attack surfaces and eliminate threats with speed and precision. For more information, visit our website, check out our blog, or follow us on LinkedIn or Twitter.

Non-GAAP Financial Measures and Other Metrics

To supplement our consolidated financial statements, which are prepared and presented in accordance with generally accepted accounting principles in the United States (“GAAP”), we provide investors with certain non-GAAP financial measures and other metrics, which we believe are helpful to our investors. We use these non-GAAP financial measures and other metrics for financial and operational decision-making purposes and as a means to evaluate period-to-period comparisons. We also use certain non-GAAP financial measures as performance measures under our executive bonus plan. We believe that these non-GAAP financial measures and other metrics provide useful information about our operating results, enhance the overall understanding of past financial performance and future prospects and allow for greater transparency with respect to metrics used by our management in its financial and operational decision-making.

While our non-GAAP financial measures are an important tool for financial and operational decision-making and for evaluating our own operating results over different periods of time, you should review the reconciliation of our non-GAAP financial measures to the comparable GAAP financial measures included below, and not rely on any single financial measure to evaluate our business.

Non-GAAP Financial Measures

We disclose the following non-GAAP financial measures: non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income, non-GAAP net income per share, adjusted EBITDA and free cash flow. We also disclose non-GAAP gross margin and non-GAAP operating margin derived from these financial measures.

We define non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income and non-GAAP net income per share as the respective GAAP balances excluding the effect of stock-based compensation expense, amortization of acquired intangible assets, amortization of debt issuance costs and certain other items such as acquisition-related expenses, impairment of long-lived assets, change in the fair value of derivative assets, restructuring expense and discrete tax items. Non-GAAP net income per basic and diluted share is calculated as non-GAAP net income divided by the weighted average shares used to compute net income per share, with the number of weighted average shares decreased, when applicable, to reflect the anti-dilutive impact of the capped call transactions entered into in connection with our convertible senior notes.

We believe these non-GAAP financial measures are useful to investors in assessing our operating performance due to the following factors:

Stock-based compensation expense. We exclude stock-based compensation expense because of varying available valuation methodologies, subjective assumptions and the variety of equity instruments that can impact our non-cash expense. We believe that providing non-GAAP financial measures that exclude stock-based compensation expense allows for more meaningful comparisons between our operating results from period to period.

Amortization of acquired intangible assets. We believe that excluding the impact of amortization of acquired intangible assets allows for more meaningful comparisons between operating results from period to period as the intangible assets are valued at the time of acquisition and are amortized over several years after the acquisition.

Acquisition-related expenses. We exclude acquisition-related expenses as costs that are unrelated to the current operations and are neither comparable to the prior period nor predictive of future results.

Amortization of debt issuance costs. The expense for the amortization of debt issuance costs related to our convertible senior notes and revolving credit facility is a non-cash item, and we believe the exclusion of this interest expense provides a more useful comparison of our operational performance in different periods.

Change in fair value of derivative assets. The change in fair value of derivative assets related to our capped calls settlement is a non-cash item and we believe the exclusion of this other income (expense) provides a more useful comparison of our operational performance in different periods.

Impairment of long-lived assets. Impairment of long-lived assets consists of impairment charges allocated to the carrying amount of certain operating right-of-use assets and the associated leasehold improvements when the carrying amounts exceed their respective fair values and we believe the exclusion of the impairment charges provides a more useful comparison of our operational performance in different periods.

Restructuring expense. We exclude non-ordinary course restructuring expenses related to our restructuring plan we announced in August 2023, which was concluded in the three months ended March 31, 2024, because we do not believe these charges are indicative of our core operating performance and we believe the exclusion of the restructuring expenses provides a more useful comparison of our performance in different periods.

Discrete tax items. We exclude certain discrete tax items such as income tax expenses or benefits that are not related to ongoing business operations in the current year and adjustments to uncertain tax position reserves as these charges are not indicative of our ongoing operating results, and they are not considered when we are forecasting our future results.

Anti-dilutive impact of capped call transaction. Our capped calls transactions are intended to offset potential dilution from the conversion features in our convertible senior notes. Although we cannot reflect the anti-dilutive impact of the capped call transactions under GAAP, we do reflect the anti-dilutive impact of the capped call transactions in non-GAAP net income (loss) per diluted share, when applicable, to provide investors with useful information in evaluating our financial performance on a per share basis.

Adjusted EBITDA. Adjusted EBITDA is a non-GAAP measure that we define as net income before (1) interest income, (2) interest expense, (3) other (income) expense, net, (4) provision for income taxes, (5) depreciation expense, (6) amortization of intangible assets, (7) stock-based compensation expense, (8) acquisition-related expenses, (9) impairment of long-lived assets and (10) restructuring expense. We believe that the use of adjusted EBITDA is useful to investors and other users of our financial statements in evaluating our operating performance because it provides them with an additional tool to compare business performance across companies and across periods.  

Free Cash Flow. Free cash flow is a non-GAAP measure that we define as cash provided by operating activities less purchases of property and equipment and capitalization of internal-use software costs. We consider free cash flow to be a liquidity measure that provides useful information to management and investors about the amount of cash generated by the business after necessary capital expenditures.

Our non-GAAP financial measures may not provide information that is directly comparable to that provided by other companies in our industry, as other companies in our industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. In addition, there are limitations in using non-GAAP financial measures because the non-GAAP financial measures are not prepared in accordance with GAAP, may be different from non-GAAP financial measures used by other companies and exclude expenses that may have a material impact upon our reported financial results. Further, stock-based compensation expense has been and will continue to be for the foreseeable future a significant recurring expense in our business and an important part of the compensation provided to our employees.

Other Metrics

Annualized Recurring Revenue (“ARR”). ARR is defined as the annual value of all recurring revenue related contracts in place at the end of the period. ARR should be viewed independently of revenue and deferred revenue as ARR is an operating metric and is not intended to be combined with or replace these items. ARR is not a forecast of future revenue, which can be impacted by contract start and end dates and renewal rates, and does not include revenue reported as professional services revenue in our consolidated statement of operations.

Number of Customers. We define a customer as any entity that has an active Rapid7 recurring revenue contract as of the specified measurement date, excluding InsightOps and Logentries only customers with a contract value less than $2,400 per year.

ARR per Customer. We define ARR per customer as ARR divided by the number of customers at the end of the period.

Cautionary Language Concerning Forward-Looking Statements

This press release includes forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements include, but are not limited to, the statements regarding our financial guidance for the third quarter and full-year 2024, the assumptions underlying such guidance, our strategic plans and their impact on shareholder value, the benefits of the Noetic Cyber acquisition and the benefits of the integration of large-language models into our Managed Detection and Response services. Our use of the words “anticipate,” “believe,” “estimate,” “expect,” “intend,” “may,” “will” and similar expressions are intended to identify forward-looking statements. The events described in our forward-looking statements are subject to a number of risks and uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Risks that could cause or contribute to such differences include, but are not limited to, growing macroeconomic uncertainty, unstable market and economic conditions, fluctuations in our quarterly results, our ability to successfully grow our sales of our cloud-based solutions, including through the shift to a consolidated platform sales approach, effectiveness of our restructuring plan, failure to meet our publicly announced guidance or other expectations about our business, our ability to sustain our revenue growth rate, the ability of our products and professional services to correctly detect vulnerabilities, renewal of our customer's subscriptions, competition in the markets in which we operate, market growth, our ability to innovate and manage our growth, our sales cycles, our ability to integrate acquired companies, actions by activist stockholders, exposure to greater than anticipated tax liabilities, and our ability to operate in compliance with applicable laws as well as other risks and uncertainties that could affect our business and results described in our filings with the Securities and Exchange Commission (the “SEC”), including our most recent Annual Report on Form 10-K filed with the SEC on February 26, 2024, particularly in the section entitled "Item 1.A Risk Factors," and in the subsequent reports that we file with the SEC. Moreover, we operate in a very competitive and rapidly changing environment. New risks emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those expressed in any forward-looking statements we may make. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements. You should, therefore, not rely on these forward-looking statements as representing our views as of any date subsequent to the date of this press release.

Investor contact:

Elizabeth Chwalk
Senior Director, Investor Relations
investors@rapid7.com
(617) 865-4277

Press contact:

Kelly Crummey
Corporate Communications
press@rapid7.com
(617) 921-8089

⁽¹⁾ For the six months ended June 30, 2024, restructuring expense was recorded within general and administrative expense in our condensed consolidated statement of operations.

The reconciliation does not reflect any items that are unknown at this time, including, but not limited to, non-ordinary course litigation-related expenses, which we are not able to predict without unreasonable effort due to their inherent uncertainty. As a result, the estimates shown for Anticipated GAAP income from operations, Anticipated GAAP net income and Anticipated GAAP net income per share are expected to change.