Rapid7’s SWOT analysis: cybersecurity firm faces headwinds as stock navigates mixed segment performance

Rapid7, Inc. (NASDAQ:RPD) finds itself at a critical juncture as the cybersecurity solutions provider contends with divergent performance across its business segments. The company has experienced significant challenges in its traditional Vulnerability Management (VM) business while seeing promising growth in its Detection and Response (D&R) and Managed Detection and Response (MDR) offerings. This analysis examines Rapid7’s current position, financial performance, and future prospects based on recent analyst assessments.

Business segment performance reveals shifting dynamics

Rapid7’s business portfolio has undergone a notable transformation, with its D&R/MDR segment now representing just over half of the company’s overall business. This segment continues to demonstrate resilience with double-digit growth rates, growing in the mid-teens percentage range. The expansion of this business line provides some counterbalance to challenges elsewhere in the company’s operations.

In contrast, the company’s traditional VM segment has become a source of concern. Recent reports indicate declining demand for on-premises VM assets, slower upgrade cycles, and customer churn. These factors have contributed to disappointing Annual Recurring Revenue (ARR) performance, with the company reporting negative net new ARR between $2-3 million in recent quarters, falling below analyst expectations.

The divergence between these two segments highlights Rapid7’s ongoing transition from a primarily VM-focused company to a more diversified cybersecurity provider. While this evolution creates opportunities, it also presents challenges as the company works to maintain growth amid shifting market dynamics.

Financial performance shows mixed results

Rapid7’s financial performance has reflected these business challenges. In Q1 2025, the company reported revenue of $210.3 million with an operating profit of $32.4 million and earnings per share (EPS) of $0.49, which exceeded consensus estimates. However, ARR growth of only 4% year-over-year missed expectations, with net new ARR turning negative at $2.6 million.

This ARR shortfall has prompted Rapid7 to reset its fiscal year 2025 ARR guidance to flat year-over-year, a significant adjustment from previous growth expectations. The company has also revised its calendar year 2025 ARR growth guidance to 1-5% year-over-year, down from the previous 4-6% projection. Free Cash Flow (FCF) guidance has been reduced as well, though FCF margin of 12% in recent quarters has been a relative bright spot, slightly exceeding expectations. InvestingPro data shows that Rapid7 boasts a strong free cash flow yield of 19%, one of several metrics suggesting the stock may be undervalued despite its challenges. Analysts forecast EPS of $2.35 for FY2025, indicating expected profitability improvement.

Looking ahead to Q2 2025, the company expects revenue of approximately $212 million with an operating profit of $31 million and EPS of $0.45. For the full calendar year 2025, the revised revenue guidance stands at $858 million with operating profit projected at $130 million and EPS at $1.85.

Market dynamics and competitive landscape

The cybersecurity market continues to evolve rapidly, presenting both opportunities and challenges for Rapid7. Analysts note that macroeconomic uncertainty has created a cautious spending environment, particularly among mid-market customers. This has resulted in increased deal scrutiny, budget uncertainty, and deal slippage, though some delayed deals have subsequently closed in Q2 2025.

Competitive pressures in the VM space have intensified, with limited greenfield opportunities constraining growth potential in this segment. The company faces the challenge of maintaining its position in a mature VM market while simultaneously building momentum in its growing D&R/MDR business.

Customer metrics have shown some concerning trends, with reports indicating a decrease in customer count and declines in Current Remaining Performance Obligations (CRPO) both quarter-over-quarter and year-over-year. These metrics suggest potential challenges in customer retention and new customer acquisition.

Despite these headwinds, analysts maintain a positive industry view overall, suggesting that the broader cybersecurity sector continues to offer growth opportunities. Rapid7’s ability to capitalize on these opportunities while addressing its specific challenges will be crucial to its future performance.

Bear Case

How concerning is the decline in Rapid7’s core Vulnerability Management business?

The deterioration in Rapid7’s VM business represents a significant challenge for the company. This segment has historically been the foundation of Rapid7’s business, but is now experiencing declining demand for on-premises assets, slower upgrade cycles, and customer churn. The negative impact on ARR is evident, with net new ARR turning negative in recent quarters.

This decline is particularly concerning because VM remains a substantial portion of Rapid7’s business despite the growth in D&R/MDR. Analysts have identified several factors contributing to this decline, including competitive pressures and limited greenfield opportunities in a maturing market. The company faces the difficult task of stemming these declines while simultaneously investing in growth areas.

The revised guidance for FY25 ARR assumes some stabilization in VM declines, which analysts view as potentially risky given current trends. If the VM business continues to deteriorate at an accelerating pace, it could further impact overall company growth and necessitate additional downward revisions to guidance.

Will macroeconomic pressures continue to impact Rapid7’s growth trajectory?

Macroeconomic uncertainty has created a challenging environment for Rapid7, particularly affecting mid-market customers who have become more cautious with their spending. This has manifested in increased deal scrutiny, budget uncertainty, and deal slippage, all of which have contributed to disappointing ARR performance.

While some delayed deals have subsequently closed in Q2 2025, suggesting a potential recovery, the broader macroeconomic pressures could persist. Analysts note that longer sales cycles are expected to continue, with approximately three-quarters of net new ARR anticipated to be concentrated in the second half of the year.

The company’s revised guidance reflects these challenges, with more conservative projections for ARR growth and FCF. If macroeconomic conditions deteriorate further or the cautious spending environment persists longer than expected, Rapid7 may face additional headwinds in achieving even these reduced targets. The company’s ability to navigate these macroeconomic pressures will be a key determinant of its near-term performance.

Bull Case

Can Rapid7’s Detection and Response segment offset weakness in Vulnerability Management?

The D&R/MDR business represents a significant growth opportunity for Rapid7, now accounting for more than 50% of the company’s business mix and growing at a double-digit rate in the mid-teens percentage range. This segment has demonstrated resilience even as the VM business has faced challenges, providing a crucial counterbalance to overall company performance.

As this segment continues to expand, it could potentially offset the weakness in the VM business and drive overall company growth. The shift in business mix toward D&R/MDR aligns with broader industry trends, as organizations increasingly prioritize detection and response capabilities alongside traditional vulnerability management.

The growth trajectory of the D&R/MDR segment suggests that Rapid7 has successfully diversified its product portfolio beyond its VM roots. If the company can maintain or accelerate growth in this segment while stabilizing its VM business, it could return to a more positive overall growth trajectory. The continued expansion of D&R/MDR represents one of the most compelling aspects of the bull case for Rapid7.

Is the current deal slippage temporary, with potential for recovery in upcoming quarters?

Recent reports indicate that several large deals were deferred in Q1 2025, contributing to the disappointing ARR performance. However, analysts note that some of these slipped deals have since closed in Q2 2025, suggesting that the issue may be related to timing rather than permanent loss of business.

This pattern of deal slippage followed by subsequent closure provides some optimism that Rapid7’s pipeline remains intact despite macroeconomic pressures. If this trend continues and more delayed deals close in upcoming quarters, it could lead to improved ARR performance and potentially support a return to growth.

The company’s guidance assumes that approximately three-quarters of net new ARR will be concentrated in the second half of the year, reflecting expectations of longer sales cycles but eventual deal closure. If Rapid7 can successfully convert its pipeline and recover from the recent deal slippage, it could outperform the conservative guidance it has now established, potentially leading to positive surprises in future quarters.

SWOT Analysis

Strengths

• D&R/MDR business growing at double-digit rate, now representing over 50% of the business mix
• Diversified product portfolio beyond traditional VM offerings
• Positive FCF margins, slightly exceeding expectations at 12%
• Q1 2025 revenue, operating profit, and EPS exceeded consensus estimates
• Some delayed deals have subsequently closed in Q2 2025

Weaknesses

• Declining core VM business with reduced demand for on-premises assets
• ARR churn and missed expectations, with negative net new ARR
• Customer count decrease indicating potential retention issues
• CRPO decline both quarter-over-quarter and year-over-year
• Revised downward guidance for ARR growth and FCF

Opportunities

• Potential upgrade cycle as VM customers move to broader exposure management solutions
• Continued growth in detection and response business
• Recovery of slipped deals in upcoming quarters
• Positive industry view suggesting favorable market conditions
• Stabilization of VM business could lead to improved overall performance

Threats

• Competitive pressures in VM space limiting growth potential
• Macroeconomic uncertainty creating cautious spending environment
• Budget constraints affecting mid-market customers
• Limited greenfield opportunities in maturing VM market
• Risk of further deceleration in growth, potentially turning negative

Analysts Targets

• Barclays (November 5th, 2025): Equal Weight, $18.00 PT
• D.A. Davidson (May 13th, 2025): Underperform (downgraded from Neutral), $21.00 PT (lowered from $29.00)
• Piper Sandler (May 13th, 2025): Neutral, $30.00 PT
• RBC Capital Markets (May 13th, 2025): Sector Perform, $27.00 PT (raised from $25.00)
• Barclays (May 13th, 2025): Equal Weight, $25.00 PT
• Barclays (May 12th, 2025): Equal Weight, $26.00 PT

This analysis is based on information available as of November 17, 2025, drawing from analyst reports dating from May 12, 2025, to November 5, 2025.

InvestingPro: Smarter Decisions, Better Returns

Gain an edge in your investment decisions with InvestingPro’s in-depth analysis and exclusive insights on RPD. Our Pro platform offers fair value estimates, performance predictions, and risk assessments, along with additional tips and expert analysis. Explore RPD’s full potential at InvestingPro.

Should you invest in RPD right now? Consider this first:

Investing.com’s ProPicks, an AI-driven service trusted by over 130,000 paying members globally, provides easy-to-follow model portfolios designed for wealth accumulation. Curious if RPD is one of these AI-selected gems? Check out our ProPicks platform to find out and take your investment strategy to the next level.

To evaluate RPD further, use InvestingPro’s Fair Value tool for a comprehensive valuation based on various factors. You can also see if RPD appears on our undervalued or overvalued stock lists.

These tools provide a clearer picture of investment opportunities, enabling more informed decisions about where to allocate your funds.

This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.