Rapid7 Revenue Slips 2.5% as Recurring Base Shrinks

Security software buyers should weigh the company's shrinking recurring revenue against its platform push before renewing contracts.

Updated on Nov. 4, 2026 in Corporate Finance

Isometric editorial illustration of identical dark server cabinets in a concrete hall, with one cabinet pulled forward, evoking a consolidated core.
Rapid7 reported third-quarter 2026 revenue of $212.4 million, down 2.5% year-over-year, as its annualized recurring revenue fell 2.2% to $819.7 million. AI Illustration. Upload story photo >

Rapid7 reported third-quarter 2026 total revenue of $212.4 million, down 2.5% year-over-year, and issued fourth-quarter and full-year 2026 guidance. The company's annualized recurring revenue stood at $819.7 million, down 2.2% from a year earlier, with U.S. public software and security vendors watching closely for signs of stabilization.

Why it matters

Rapid7 said it took decisive action last quarter to focus resources on its core business, a move that reshapes how the company is spending and selling going forward. For operators tracking security software purchasing, a shrinking recurring base alongside rising operating income signals a vendor prioritizing margin over top-line growth.

Rapid7 reported total revenue of $212.4 million, down 2.5% year-over-year, with ARR of $819.7 million, down 2.2%. Free cash flow reached $26.5 million, and the company held $731.6 million in cash and government securities as of September 30, 2026.

The players

Rapid7

A Boston-based cybersecurity software company offering vulnerability management, threat detection, and security operations products to enterprise customers.

The details

Rapid7 launched Rapid7 Intelligence in October, a unified engine combining threat intelligence, vulnerability research, and Rapid7 Labs, and previewed an Autonomous SOC at its October customer summit in Boston. For a security vendor, these product moves mean customers may be asked to adopt a consolidated platform rather than point tools, which changes how buyers evaluate and budget for security services. The company's GAAP net income of $3.5 million, or $0.05 per diluted share, compares with non-GAAP net income of $47.4 million, or $0.60 per diluted share.

Timeline

  1. Rapid7 launched Rapid7 Intelligence and held its customer summit in Boston in October 2026.

  2. Third-quarter 2026 results were announced on November 4, 2026, with an earnings call at 4:30 p.m. ET.

  3. Cash and government securities were measured at $731.6 million as of September 30, 2026.

Market Landscape

The consolidation push in security software has pressured standalone vendors to bundle capabilities into unified platforms. Rapid7's revenue decline alongside its platform launch places it inside that competitive shift.

Operators who buy security software should review renewal terms and ask vendors how platform changes affect pricing and support over the next contract cycle. Finance teams should track whether recurring revenue stabilizes in the fourth-quarter results, since the company guided to ARR of approximately $812 million.

The takeaway

The company's guidance points to a fourth-quarter ARR of approximately $812 million and full-year 2026 revenue of $841 million to $843 million, which gives operators a concrete benchmark to test against. Buyers evaluating security vendors should compare future quarterly ARR against that guidance before committing to multi-year platform contracts.

Further reading

For more on how public companies report and guide investors on their results, explore Corporate Finance.