What happened with RPD today?
No read yet
Uses news and trading volume to explain the day’s move and how it relates to the market.
Stop guessing. Get the call, a three-month target price, the best and worst cases, and a source for every claim.
Rapid7 helps security teams find weaknesses in their systems, detect attacks and respond to breaches. Its Command Platform brings together data from customers’ cloud systems, internal networks and other security tools so teams can decide which problems to address first. Customers can operate the software themselves or pay Rapid7 to run it for them. Managed Threat Complete combines vulnerability management with round-the-clock threat monitoring and incident response.
Businesses of all sizes, public agencies and other organizations pay for these offerings. Nearly all revenue comes from product subscriptions, including cloud access, managed services and fixed-term software licenses. Cloud subscriptions and managed services are generally billed annually in advance under multi-year or single-year contracts. Deployment, training and security advisory work contribute a much smaller share.
Most sales pass through channel partners, but no individual customer supplies a substantial share of revenue. The business depends on customers renewing when contracts expire and buying additional offerings; they have no obligation to renew.
Some government customers require authorizations such as FedRAMP before deployment. Export controls can restrict overseas sales or use of its products, while European privacy rules require safeguards for transferring personal data to other countries.
The risk section is the longest, dullest part of the filing. This keeps only what can really hurt you: where it hits, how hard, when it plays out.
Every company claims an edge. Each one is checked against hard numbers like margins and returns: which hold, and which line gives way first.
Tenable competes with Rapid7 for organizations paying to find and fix security weaknesses. Watch Tenable One, which brings vulnerability checks and guidance on which exposures to address first into one enterprise platform—the same work Rapid7 sells through its exposure-management offerings.
Qualys competes with Rapid7 for enterprise and smaller-business security teams buying subscriptions to find vulnerabilities, reduce risk and protect cloud systems. Customers can add Qualys Cloud Apps over time, making its vulnerability, remediation and cloud-security subscriptions the areas to watch for Rapid7.
CrowdStrike competes with Rapid7 for organizations buying security subscriptions that use data from their devices and cloud analysis to detect, investigate and respond to threats. Falcon lets customers add security functions without installing extra sensors, so its expansion into additional functions is worth watching alongside Rapid7's combined detection-and-response offerings.
SentinelOne competes with Rapid7 for customers buying platforms to detect and respond to threats on devices and in cloud environments. Its Singularity tiers range from basic device protection to broader cloud and security services, making those broader offerings the closest overlap with Rapid7's platform.
Zscaler competes with Rapid7 in services that monitor threats, hunt for attacks and help security teams respond, although its subscription platform focuses more on secure access to applications. Watch its managed detection and response and Agentic Security Operations offerings rather than treating all of its secure-access business as a match for Rapid7.
Datadog competes with Rapid7 in cloud security and analysis of security signals, but much of its business helps paying customers monitor how their infrastructure and applications run. Its security products, which customers can combine with monitoring and log management, are the part to watch for competition with Rapid7—not its whole business.
Tenable Holdings, Inc. earningsTENB
Tenable’s report will show whether organizations’ spending on vulnerability and exposure management is also intensifying competition for Rapid7.
Look at growth in Tenable’s relevant subscriptions alongside any evidence that customers are adopting its broader exposure-management offerings. Strength in both would show buyers are paying to find weaknesses and prioritize what to fix, making those budgets harder for Rapid7 to win. Weakness in both would mean less competitive pressure from Tenable, not proof that customers are shifting to Rapid7. The takeaway is how forcefully Tenable is competing for this work.
Rapid7, Inc. earningsThis company
Rapid7’s report will show whether renewals and add-on sales are growing its subscription business enough to offset weaker new-customer revenue.
Read ending annualized recurring revenue (ARR—the annualized value of recurring revenue under active contracts) alongside product-subscription revenue. Growth in both would show renewals and add-on sales expanding the contract base; flat or falling ARR with weak subscription growth would show that existing customers are not yet providing enough lift. ARR is a point-in-time measure, not a revenue forecast. The question is whether Rapid7 can get its recurring contract base growing again.
CrowdStrike Holdings, Inc. earningsCRWD
CrowdStrike’s report will show whether customers are still adding security functions on one platform, a pattern that affects how hard Rapid7 must compete for security-subscription budgets.
Read growth in CrowdStrike’s security subscriptions alongside whether customers are adding more functions to its platform. Strength in both would show buyers are adding protection within an existing platform, intensifying competition for Rapid7’s combined detection-and-response offerings. Slower growth or less expansion would weaken that competitive signal, but would not mean customers will choose Rapid7. The takeaway is whether buyers are still concentrating more security spending on one platform.
