BOSTON, July 14, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, today announced that the company will release its second quarter 2026 financial results on Monday, August 10, 2026, after the financial markets close.
The company will host a conference call that same day to discuss its results and business outlook at 4:30 p.m. Eastern Time. To register for the live event please visit: https://q2-2026-rapid7-earnings-call.open-exchange.net/.
A live webcast of the conference call and the financial results press release will be accessible from the Rapid7 investor relations website at https://investors.rapid7.com. A webcast replay of the call will be available at https://investors.rapid7.com.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
Regulatory recognition in the United States and Europe supports the development of NB4168, a novel small molecule candidate for a rare pediatric disease with no approved treatments
LOS ANGELES--(BUSINESS WIRE)--Niagen Bioscience, Inc. (NASDAQ: NAGE), the global authority on NAD+ (nicotinamide adenine dinucleotide) with a focus on the science of healthy aging, today announced that the U.S. Food & Drug Administration (FDA) granted Rare Pediatric Disease (RPD) Designation for its proprietary lead small molecule drug candidate NB4168 for the treatment of Ataxia Telangiectasia (A-T). NB4168 is an oral small molecule therapy engineered to deliver substantially greater nicotinamide riboside (NR) exposure than conventional NR while maintaining a differentiated pharmacokinetic and safety profile. In addition, the European Medicines Agency (EMA) has granted Orphan Medicinal Product Designation (OMPD) to NB4168 for the treatment of A-T, providing regulatory recognition in the European Union and further supporting the Company's plans to advance the program globally.
Niagen Bioscience Receives Exclusive U.S. FDA Rare Pediatric Disease (RPD) Designation and European Medicines Agency Orphan Medicinal Product Designation (OMPD) for NB4168 for the Treatment of Ataxia Telangiectasia (A-T)
Share The FDA granted RPD Designation based on its determination that A-T is a serious and life-threatening disease that primarily affects individuals from birth through adolescence and meets the statutory definition of a rare disease. The EMA's Committee for Orphan Medicinal Products similarly concluded that NB4168 met the criteria for orphan designation for the treatment of A-T. Together, these regulatory designations recognize the significant unmet medical need in A-T and provide development incentives intended to support and accelerate the advancement of promising therapies for rare diseases.
NB4168 is the first investigational therapeutic candidate to emerge from Niagen Bioscience's recently announced wholly owned subsidiary focused on developing therapies for rare genetic diseases and age-related disorders, NAD Pharmaceuticals Corp. NB4168 is designed to have significantly higher bioavailability and increase NAD+, a coenzyme essential for DNA repair, mitochondrial function, cellular energy production, and stress responses—biological pathways disrupted in A-T. As A-T is categorized as a rare genetic premature aging disease, NB4168 may translate to other age-related diseases.
“Receiving RPD Designation from the U.S. FDA and OMPD from the EMA represents meaningful regulatory validation of NB4168 and our strategy to develop therapies for patients with serious rare diseases,” said Rob Fried, CEO of Niagen Bioscience. “These milestones strengthen our path toward clinical development and reinforce the opportunity to extend our leadership in NAD+ science into regulated medicines.”
About Ataxia Telangiectasia (A-T)
A-T is a rare genetic disease caused by mutations in the ATM gene. The disease typically presents in early childhood and is characterized by progressive loss of motor coordination, impaired immune function, increased susceptibility to infections, pulmonary complications, a substantially elevated risk of cancer, and premature aging. Children living with A-T often experience worsening neurological disability over time, with many requiring wheelchair assistance as the disease progresses. There are currently no FDA-approved therapies for A-T, and treatment is largely limited to supportive care. A-T impacts roughly 1 in 40,000 people in the U.S. (Riboldi et al., 2023; Teive et al., 2015) and 1 in 150,000 people in Europe (Bhatt et al., 2015).
About the U.S. FDA RPD and EMA OMPD
The FDA's RPD Designation is intended to encourage the development of therapies for serious and life-threatening diseases that primarily affect children. The designation provides certain regulatory and development incentives intended to support the advancement of promising therapies for rare pediatric conditions.
The EMA's OMPD is granted to therapies intended to diagnose, prevent, or treat life-threatening or chronically debilitating rare diseases affecting fewer than five in 10,000 people in the European Union. Orphan designation provides access to regulatory support and other development incentives designed to facilitate treatment development for rare diseases.
About NB4168
NB4168 is a distinct, proprietary small molecule designed for oral pharmaceutical development. It is not commercially available as a supplement or approved drug and has robust coverage by Niagen Bioscience's patent portfolio, including a composition-of-matter patent. After oral administration, NB4168 is designed to deliver significantly increased doses of NR to the bloodstream. NR enters cells directly, where it is converted through the nicotinamide riboside kinase pathway into NAD+. Because NAD+ supports DNA repair, mitochondrial function and cellular resilience, increasing intracellular NAD+ may represent a novel therapeutic approach for rare genetic diseases such as A-T in which these biological pathways are impaired.
The compound was designed to build upon Niagen Bioscience's extensive expertise in NR and NAD+ biology. The Company is currently advancing preclinical development activities and plans to submit an Investigational New Drug (IND) application to the FDA in anticipation of initiating human clinical studies, representing another step in Niagen Bioscience's strategy to translate decades of NAD+ science into proprietary medicines for serious rare genetic diseases.
“A-T is characterized by defects in DNA damage repair, mitochondrial dysfunction and chronic cellular stress, all biological processes that rely on adequate NAD+ availability,” said Vilhelm Bohr, M.D., Ph.D., D.Sc., formerly at the National Institute on Aging, NIH, and currently a Professor (AFL) in Molecular Aging at the University of Copenhagen. “The absence of effective treatment options underscores the urgent need for new therapeutic approaches. It is encouraging to see scientific advances in NAD+ biology translated into investigational medicines such as NB4168, as this intervention has implications for similar accelerated aging diseases.”
Niagen Bioscience, Inc. is a publicly traded bioscience company focused on NAD+ science and healthy aging research. The Company's product portfolio includes its flagship patented NR ingredient, Niagen®, Tru Niagen®, Niagen™ Plus and a pharmaceutical development effort focused on proprietary NAD+ precursors. Niagen Bioscience maintains a portfolio of over 50 patents protecting NR and other NAD+ precursors.
For additional information on the Pharmaceutical Program for rare genetic diseases and age-related disorders and NB4168, visit www.niagenbioscience.com/nad-pharmaceuticals.
About Niagen Bioscience
Niagen Bioscience, Inc. (NASDAQ: NAGE) is the global authority in NAD+ (nicotinamide adenine dinucleotide) science and healthy-aging research. As a trusted pioneer of NAD+ discoveries, Niagen Bioscience™ is dedicated to advancing healthspan through precision science and innovative NAD+-boosting solutions.
The Niagen Bioscience team, composed of world-renowned scientists, works with independent investigators from esteemed universities and research institutions around the globe to uncover the full potential of NAD+. A vital coenzyme found in every cell of the human body, NAD+ declines with age and exposure to everyday lifestyle stressors. NAD+ depletion is a key contributor to age-related changes in health and vitality.
Distinguished by state-of-the-art laboratories, rigorous scientific and quality protocols, and collaborations with leading research institutions worldwide, Niagen Bioscience sets the gold standard for research, quality, and innovation. There’s a better way to age.
At the heart of its clinically proven product portfolio is Niagen® (patented nicotinamide riboside, or NR), the most efficient, well-researched, and high-quality NAD+ booster available. Niagen powers the Company’s consumer supplement, Tru Niagen®, the number one NAD+ boosting oral supplement in the United States† (available at www.truniagen.com), and Niagen™ Plus, featuring pharmaceutical-grade intravenous (IV) and injectable Niagen products (www.niagenplus.com). Pharmaceutical-grade Niagen IV and injections are compounded and distributed by U.S. FDA-registered 503B outsourcing facilities and are available exclusively at clinics with a prescription. NAD Pharmaceuticals Corp., the Company’s wholly owned subsidiary focused on developing therapies for rare genetic diseases and age-related disorders, is conducting research on NB4168, a differentiated molecule.
Niagen Bioscience’s robust patent portfolio protects NR and other NAD+ precursors. Niagen Bioscience maintains a website at www.niagenbioscience.com, where copies of press releases, news, and financial information are regularly published.
†Based on revenue per largest U.S. e-commerce marketplace (Jan. 2025 – Dec. 2025)
Forward-Looking Statements
This release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, and Section 21E of the Securities Exchange Act of 1934. Statements that are not a description of historical facts constitute forward-looking statements and may often, but not always, be identified by the use of such words as “expects,” “anticipates,” “intends” “estimates,” “plans,” “potential,” “possible,” “probable,” “believes,” “seeks,” “may,” “will,” “should,” “could,” “predicts,” “projects,” “continue,” “would” or the negative of such terms or other similar expressions.
Forward-looking statements are based on current expectations and assumptions and are subject to risks and uncertainties that could cause actual results to differ materially from those described. These risks and uncertainties include, but are not limited to, statements regarding Niagen Bioscience's NB4168 pharmaceutical development program; planned preclinical, IND-enabling and clinical development activities; the potential timing of an IND submission or first-in-human study; the potential bioavailability, exposure, safety, tolerability, efficacy, pharmacodynamic or clinical profile of NB4168; and the Company's ability to translate its NAD+ platform into pharmaceutical products; inflationary conditions and adverse economic conditions; our history of operating losses; the growth and profitability of our product sales; our ability to maintain and grow sales, marketing and distribution capabilities; changing consumer perceptions of our products; our reliance on a single or limited number of third-party suppliers; risks of conducting business in China; including unanticipated developments in and risks related to the Company’s ability to secure adequate quantities of pharmaceutical-grade Niagen in a timely manner; the Company’s ability to obtain appropriate contracts and arrangements with U.S. FDA-registered 503B outsourcing facilities required to compound and distribute pharmaceutical-grade Niagen to clinics; the Company’s ability to remain on the U.S. FDA Bulk Drug Substances Nominated for Use in Compounding Under Section 503B of the Federal Food, Drug, and Cosmetic Act Category 1 list; the Company’s ability to maintain and enforce the Company’s existing intellectual property and obtain new patents; whether the potential benefits of NRC can be further supported; further research and development and the results of clinical trials possibly being unsuccessful or insufficient to meet applicable regulatory standards or warrant continued development; the ability to enroll sufficient numbers of subjects in clinical trials; determinations made by the FDA and other governmental authorities, including with respect to products seeking to compete in our market; mislabeling or other misleading marketing practices by competitors; economic and market instability, including as a result of tariffs or trade conflicts; and the risks and uncertainties associated with our business and financial condition in general, described in our filings with the Securities and Exchange Commission (SEC), including, without limitation, our most recent Annual Report on Form 10-K and Quarterly Report on Form 10-Q as filed with the SEC.
Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of the date hereof, and actual results may differ materially from those suggested by these forward-looking statements. All forward-looking statements are qualified in their entirety by this cautionary statement and Niagen Bioscience undertakes no obligation to revise or update this release to reflect events or circumstances after the date hereof.
[url="]Niagen Bioscience, Inc.[/url] (NASDAQ: NAGE), the global authority on NAD+ (nicotinamide adenine dinucleotide) with a focus on the science of healthy ag
Rapid7 (RPD) witnessed a jump in share price last session on above-average trading volume. The latest trend in earnings estimate revisions for the stock doesn't suggest further strength down the road.
CHICAGO--(BUSINESS WIRE)--Reveal, the provider of integrated AI-native platforms that span the eDiscovery lifecycle, today announced a major expansion of its European operations, bringing Reveal Private Deployment (RPD), its aji GenAI review engine and Logikcull's government transparency capabilities to organizations across EMEA. The expansion addresses the unique data sovereignty, regulatory compliance and operational requirements of European legal teams while delivering the AI-powered eDiscov.
BOSTON, June 15, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced that the company granted an inducement award comprised of 525,000 restricted stock units (“RSUs”) on June 15, 2026, to Dejan Deklich, the Company’s Chief Product and Technology Officer, under Rapid7’s 2015 Equity Incentive Plan, as amended (the “Equity Plan”) pursuant to the Equity Plan’s inducement award share pool.
The RSUs vest over a three-year period with one-third (1/3) of the RSUs vesting on the one-year anniversary of the vesting commencement date and the remaining two-thirds (2/3) of the RSUs vesting in equal quarterly installments thereafter through the third anniversary of the vesting commencement date, subject to Mr. Deklich’s continued employment through each applicable vesting date.
The RSUs were unanimously approved by Rapid7’s Compensation Committee, which is independent within the meaning of Nasdaq Listing Rule 5605(a)(2), in accordance with Nasdaq Listing Rule 5635(c)(4) as a material inducement for Mr. Deklich to commence employment with Rapid7.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
Rapid7 Media Relations
Alice Randall
Director, Global Communications [email protected]
(857) 216-7804
Issued on behalf of Quantum Secure Encryption Corp.
, /PRNewswire/ -- Equity-Insider.com News Commentary — Anthropic just proved that even the company building the most powerful offensive cyber tool ever created can't keep its own front door locked. A CMS misconfiguration exposed Claude Mythos, a frontier AI model that autonomously finds and exploits zero-day vulnerabilities across every major operating system and browser[1]. The Global X Cybersecurity ETF dropped 4.5% in a single session as Wall Street repriced the entire defensive stack overnight[2]. Anthropic responded with Project Glasswing: restricted Mythos Preview access for 40+ organizations to patch critical infrastructure before adversaries catch up. Five companies sit at pivotal points along that defensive rebuild: Quantum Secure Encryption Corp. (CSE: QSE) (OTCQB: QSEGF) (FSE: VN8), SentinelOne (NYSE: S), Elastic (NYSE: ESTC), Rapid7 (NASDAQ: RPD), and Broadcom (NASDAQ: AVGO).
A Trusted Computing Group survey found 91% of businesses still lack a formal roadmap for quantum-safe encryption migration, even as NIST deprecation timelines and NSA compliance deadlines narrow the window to months[3]. The 2026 Thales Data Threat Report sharpens the picture: only 47% of sensitive cloud data is encrypted today, down from 51% a year ago, while 61% of organizations rank harvest-now-decrypt-later attacks as their top quantum concern[4]. Institutional capital is flowing toward the convergence of cryptographic modernization and AI-native defense, where platforms already in production carry scalable, asymmetric upside.
Quantum Secure Encryption (CSE: QSE) (OTCQB: QSEGF) (FSE: VN8) just launched QPA v2, an enterprise platform that helps large organizations find the weak spots in their encryption and build a clear plan to upgrade before quantum computing turns those weak spots into open doors.
The Vancouver-based company says QPA v2 moves the conversation from 'we know there's a problem' to 'here's how we fix it.' The platform includes a planning wizard for governance, budgets, and migration timelines, AI-powered modules that evaluate how ready an organization's cryptography actually is, and inventory tools that scan software, hardware, and encryption components to flag what needs replacing. An executive dashboard pulls it all together, giving leadership real-time visibility into risk levels and upgrade progress. QSE says the platform is already live and in use with both existing and prospective clients.
"Organizations are now moving from understanding quantum risk to actively planning for it," said Ted Carefoot, CEO of QSE. "QPA v2 is designed to support that transition by providing a structured, repeatable framework that enables enterprises and public-sector organizations to assess their current state, prioritize risk, and plan their migration toward post-quantum cryptographic standards."
That shift into execution has been building since late 2025. QSE recently secured its first municipal government pilot for post-quantum cybersecurity through its membership in MISA (Municipal Information Systems Association), a national network connecting Canadian municipalities with new technology. The participating municipality is using QPA to identify which of its systems rely on encryption that future quantum computers could break, and to start planning upgrades now. QSE noted it is already in conversations with additional municipalities exploring similar assessments.
Since November 2025, QSE has expanded from four to thirteen operational markets worldwide, with eleven value-added distributors now active and two more partnerships expected to close shortly. The company also joined CADSI (Canadian Association of Defence and Security Industries), opening pathways into Canadian defence and public-sector procurement.
QPA v2 integrates with QSE's broader product suite, including its quantum-resilient key infrastructure, QAuth identity platform, and encrypted storage solutions. QSE is a Canadian post-quantum security company building tools to help organizations protect sensitive data from the next generation of cyberattacks that quantum computing is expected to enable, targeting commercial, enterprise, and government clients preparing for a fundamental shift in how encryption works.
CONTINUED… Read this and more on QSE at: https://equity-insider.com/2025/03/18/is-scope-technologies-corp-cse-scpe-otcqb-scpcf-the-next-big-player-in-quantum-cybersecurity/
Other industry developments and happenings in the market include:
SentinelOne (NYSE: S) has expanded its strategic collaboration with Alphabet (NASDAQ: GOOG) (NASDAQ: GOOGL) through a multi-year agreement to develop AI-powered cybersecurity solutions at global scale. The partnership integrates SentinelOne's autonomous endpoint detection and response platform with Alphabet's Google Cloud infrastructure, expanding availability across three strategic regions: North America, Frankfurt, and the Kingdom of Saudi Arabia.
"Customers are under growing pressure to defend increasingly complex environments and protect their highly sensitive data while reducing operational friction," said Melissa Smith, SVP of Global Strategic Partnerships & Initiatives at SentinelOne. "With Google Cloud, we have chosen a highly secure and sophisticated platform for a data sovereignty strategy, and a strategic partner for intelligence sharing."
The collaboration targets enterprises operating in regulated markets, combining SentinelOne's AI-native Singularity Platform with Google Cloud's threat intelligence and generative AI capabilities to replace legacy antivirus and first-generation EDR tooling. SentinelOne currently protects nearly one-fifth of the Fortune 500 and positions the expanded partnership as a path toward autonomous security operations for the AI era.
Elastic (NYSE: ESTC) has achieved FedRAMP High authorization for its Elastic Cloud Hosted platform on AWS GovCloud (US), unlocking access to the most sensitive, unclassified government workloads across law enforcement, emergency response, public health, and national security operations. The FedRAMP High baseline requires more than 400 security controls to protect controlled unclassified information, making it the program's most rigorous certification tier.
"FedRAMP High expands our ability to support agencies operating in highly sensitive environments and underscores Elastic's enduring commitment to help improve our national security posture while driving operational efficiencies," said Chris Townsend, global vice president of public sector at Elastic.
The authorization builds on Elastic's growing federal footprint, including a collaboration with the Cybersecurity and Infrastructure Security Agency and ECS to support a unified SIEM-as-a-Service program for Federal Civilian Executive Branch Agencies, and a volume-based discount agreement with the General Services Administration to streamline procurement across federal agencies. Elastic's open, standards-based architecture supports Kubernetes, OpenTelemetry, and other cloud-native projects, helping agencies reduce vendor lock-in and meet federal data mandates while enabling GenAI use cases through retrieval augmented generation techniques.
Rapid7 (NASDAQ: RPD) announced the acquisition of Kenzo Security, an agentic AI security platform built to scale autonomous security investigations, further enhancing the Rapid7 Command Platform. The deal advances Rapid7's managed detection and response capabilities from AI-assisted workflows to machine-speed security operations, with Kenzo customers reporting a 94% reduction in investigation time and alert coverage increasing from 12% to 100%.
"Reactive security models have reached their limits," said Corey Thomas, CEO of Rapid7. "Attackers are using AI to move faster, attack surface complexity is accelerating, and security teams are expected to improve outcomes without additional resources. Kenzo Security advances our mission to enable security operations that preempt attackers with predictive precision and machine-scale."
By integrating Kenzo's entity-centric data mesh with the Rapid7 Command Platform, the combined offering will deliver full alert coverage at machine speed, 100% decision transparency, and continuous exposure management across endpoint, identity, cloud, and SaaS environments. Rapid7 does not anticipate a material impact to revenue, ARR, profitability, or free cash flows from the transaction, and the company serves more than 11,500 customers worldwide.
Broadcom (NASDAQ: AVGO) announced the launch of Symantec CBX, a cloud-based extended detection and response platform that unifies Broadcom's Symantec and Carbon Black technologies into a single solution. The platform targets under-resourced security operations teams facing enterprise-grade threats without the staffing, budget, or infrastructure to deploy complex security tools.
"This announcement marks a major milestone as we unite the strengths of Symantec and Carbon Black into a single, robust solution," said Jason Rolleston, Vice President and General Manager, Enterprise Security Group, Broadcom. "CBX empowers organizations of all sizes with the advanced, yet intuitive capabilities to tackle modern threats with confidence and efficiency through industry-first technologies and intelligent automation."
Symantec CBX combines Symantec's prevention, adaptive protection, data security, and incident prediction features with Carbon Black's endpoint detection and response technology, delivering correlated visibility across endpoints, networks, cloud, and identity attack surfaces. With 85% of incident flags now carrying AI-powered prediction recommendations, the platform is designed to accelerate investigations and reduce reliance on senior analyst expertise. Broadcom plans to make CBX available later this year through its Enterprise Security Group's Catalyst Partner Program, with migration pathways for existing customers.
FURTHER READING: https://equity-insider.com/2025/03/18/is-scope-technologies-corp-cse-scpe-otcqb-scpcf-the-next-big-player-in-quantum-cybersecurity/
DISCLAIMER: Nothing in this publication should be considered as personalized financial advice. We are not licensed under securities laws to address your particular financial situation. No communication by our employees to you should be deemed as personalized financial advice. Please consult a licensed financial advisor before making any investment decision. This is neither an offer nor recommendation to buy or sell any security. We hold no investment licenses and are thus neither licensed nor qualified to provide investment advice. The content in this report or email is not provided to any individual with a view toward their individual circumstances. Equity Insider is a wholly-owned subsidiary of Market IQ Media Group, Inc. ("MIQ"). MIQ has previously been paid a fee for QSE - Quantum Secure Encryption Corp. advertising and digital media from the company directly, which has since expired. There may be 3rd parties who may have shares QSE - Quantum Secure Encryption Corp., and may liquidate their shares which could have a negative effect on the price of the stock. Previous compensation constitutes a conflict of interest as to our ability to remain objective in our communication regarding the profiled company. Because of this conflict, individuals are strongly encouraged to not use this publication as the basis for any investment decision. The owner/operator of MIQ own shares of QSE - Quantum Secure Encryption Corp. which were purchased as a part of a private placement, and in the open market. MIQ reserves the right to buy and sell, and will buy and sell shares of QSE - Quantum Secure Encryption Corp. at any time hereafter without any further notice. We also expect further compensation in the future as an ongoing digital media effort to increase visibility for the company, no further notice will be given, but let this disclaimer serve as notice that all material disseminated by MIQ has been approved by the above mentioned company; this is a paid advertisement, and we own shares of the mentioned company that we will sell, and we also reserve the right to buy shares of the company in the open market, or through further private placements and/or investment vehicles. While all information is believed to be reliable, it is not guaranteed by us to be accurate. Individuals should assume that all information contained in our newsletter is not trustworthy unless verified by their own independent research. Also, because events and circumstances frequently do not occur as expected, there will likely be differences between any predictions and actual results. Always consult a licensed investment professional before making any investment decision. Be extremely careful, investing in securities carries a high degree of risk; you may likely lose some or all of the investment.
SAN DIEGO, April 29, 2026 (GLOBE NEWSWIRE) -- Johnson Fistel, PLLP is investigating potential claims on behalf of investors of Rapid7, Inc. (NASDAQ: RPD). The investigation focuses on Rapid7’s executive officers and whether investor losses may be recovered under federal securities laws.
What if I purchased Rapid7 securities?
If you purchased Rapid7 securities and suffered losses on your investment, join our investigation now: Click here to join the investigation.
Or for more information, contact Jim Baker at [email protected] or (619) 814-4471.
There is no cost or obligation to you.
Background of the investigation
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other things, the Company disclosed annualized recurring revenue (“ARR”) of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year.
In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
Following this disclosure, Rapid7’s stock price declined sharply, damaging investors.
In light of this disclosure, Johnson Fistel is investigating whether Rapid7 complied with the federal securities laws. If you suffered losses from your investment in Rapid7 stock, contact Johnson Fistel.
About Johnson Fistel, PLLP | Securities Fraud & Investor Rights
Johnson Fistel, PLLP is a nationally recognized shareholder-rights law firm with offices in California, New York, Georgia, Idaho, and Colorado. The firm represents individual and institutional investors in shareholder derivative and securities class action lawsuits and also assists foreign investors who purchased shares on U.S. exchanges. To learn more, visit www.johnsonfistel.com.
Achievements
In 2024, Johnson Fistel was ranked among the Top 10 Plaintiff Law Firms by ISS Securities Class Action Services, reflecting the firm’s effectiveness in advocating for investors and recovering approximately $90,725,000 for clients in cases where it served as lead or co-lead counsel.
Attorney advertising.
Past results do not guarantee future outcomes.
Services may be performed by attorneys in any of our offices.
Johnson Fistel, PLLP has paid for the dissemination of this promotional communication, and Frank J. Johnson is the attorney responsible for its content.
Contact
Johnson Fistel, PLLP
501 W. Broadway, Suite 800
San Diego, CA 92101
James Baker, Investor Relations – or – Frank J. Johnson, Esq.
(619) 814-4471 | [email protected] | [email protected]
Annualized recurring revenue (“ARR”) of $832 millionTotal revenue of $210 million; Product subscriptions revenue of $204 millionGAAP loss from operations of $0.6 million; Non-GAAP operating income of $24 millionNet cash provided by operating activities of $40 million; Free cash flow of $33 million BOSTON, May 05, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (Nasdaq: RPD), a global leader in AI-powered managed cybersecurity operations, today announced its financial results for the first quarter 2026.
"As frontier models reshape the cybersecurity landscape, Rapid7's AI SOC and preemptive security infrastructure are more essential than ever," said Corey Thomas, CEO of Rapid7. "Our Exposure Management and Detection and Response capabilities are increasingly important to customers facing a groundswell of new vulnerabilities and attacks. And Rapid7's business is well positioned to meet that demand."
“During the first quarter, Rapid7 exceeded guidance expectations across all metrics and delivered strong free cash flow,” said Rafe Brown, CFO of Rapid7. “Anchored around our accelerated strategy to deliver the AI SOC capabilities customers need, we are focused on growing our Managed Detection and Response business while improving margins over the medium-term.”
First Quarter 2026 Financial Highlights
Revenue: Total revenue of $210 million a decrease of 0.3% year-over-year. Product revenue of $204 million an increase of 0.1% year-over-year.ARR: Annualized recurring revenue of $832 million, a decrease of 0.6% year-over-year.Operating Income: GAAP loss from operations of $0.6 million; Non-GAAP operating income of $24.4 million.Net Income: GAAP net income of $1.1 million or $0.02 per diluted share and non-GAAP net income of $26.6 million or $0.36 per diluted share.Cash Flow: Net cash provided by operating activities of $39.8 million and free cash flow of $33.4 million.Total cash, cash equivalents, and government securities of $670 million as of March 31, 2026. Recent Business Highlights
In March, Rapid7 announced the acquisition of Kenzo Security, an agentic AI security platform built to scale security investigations autonomously, to accelerate its preemptive, AI-powered security operations, further integrating automated risk prioritization and remediation into its Command Platform.In March, Rapid7 released its 2026 Global Threat Landscape Report, revealing a 105% surge in the exploitation of high and critical-severity vulnerabilities as attack timelines continue to collapse.In March, Rapid7 expanded its Exposure Command platform with new cloud security capabilities, introducing runtime validation and Data Security Posture Management (DSPM) to enable organizations to identify, validate, and prioritize risks based on actual exploitability.In March, Rapid7 Labs published breakthrough research identifying sleeper cells embedded in global telecommunications networks by a state-sponsored actor with implications for government communications and critical systems. Alongside the research, Rapid7 released a free, open-source scanning script to support defenders.In March, Rapid7 launched updates to its PACT Partner Program, introducing a new Platinum tier and streamlined deal motions to drive partner-led growth for its Managed Detection and Response (MDR) services.In February, Rapid7 hosted its 2026 Partner of the Year Awards, recognizing top-performing partners for their excellence in delivering outcomes and scaling security practices within the Rapid7 ecosystem. Second Quarter and Full Year 2026 Guidance
Non-GAAP guidance excludes estimates for stock-based compensation expense, amortization of acquired intangible assets, amortization of debt issuance costs, and certain other items such as acquisition-related expenses, impairment of long-lived assets, restructuring expense, induced conversion expense, change in the fair value of derivative assets, non-ordinary course litigation-related expenses and discrete tax items. Rapid7 has provided a reconciliation of each non-GAAP guidance measure to the most comparable GAAP measures in the financial statement tables included in this press release. The reconciliation does not reflect any items that are unknown at this time, including, but not limited to, non-ordinary course litigation-related expenses, which we are not able to predict without unreasonable effort due to their inherent uncertainty.
Rapid7 anticipates ARR, revenue, non-GAAP income from operations, non-GAAP net income per share and free cash flow to be in the following ranges:
Second Quarter 2026 Full-Year 2026 (in millions, except per share data)ARRApproximately $820 million Not providedYear-over-year growth(2)% Not providedRevenue$207to$209 $836to$842Year-over-year growth(3)%to(2)% (3)%to(2)%Non-GAAP income from operations$24to$26 $112to$118Non-GAAP net income per share, diluted$0.33to$0.36 $1.52to$1.60Weighted average shares used in non-GAAP earnings per share calculation, diluted78.3 79.4Free cash flowNot provided $125to$135 The guidance provided above is forward-looking in nature. Actual results may differ materially. See the cautionary note regarding “Forward-Looking Statements” below. Guidance for the second quarter 2026 and full-year 2026 does not include any potential impact of foreign exchange gains or losses.
Conference Call and Webcast Information
Rapid7 will host a conference call today, May 5, 2026, to discuss its results at 4:30 p.m. Eastern Time. The call will be available live via webcast on Rapid7's website at https://investors.rapid7.com. A webcast replay of the conference call will be available at https://investors.rapid7.com.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
Non-GAAP Financial Measures and Other Metrics
To supplement our consolidated financial statements, which are prepared and presented in accordance with generally accepted accounting principles in the United States (“GAAP”), we provide investors with certain non-GAAP financial measures and other metrics, which we believe are helpful to our investors. We use these non-GAAP financial measures and other metrics for financial and operational decision-making purposes and as a means to evaluate period-to-period comparisons. We also use certain non-GAAP financial measures as performance measures under our executive bonus plan. We believe that these non-GAAP financial measures and other metrics provide useful information about our operating results, enhance the overall understanding of past financial performance and future prospects and allow for greater transparency with respect to metrics used by our management in its financial and operational decision-making.
While our non-GAAP financial measures are an important tool for financial and operational decision-making and for evaluating our own operating results over different periods of time, you should review the reconciliation of our non-GAAP financial measures to the comparable GAAP financial measures included below, and not rely on any single financial measure to evaluate our business.
Non-GAAP Financial Measures
We disclose the following non-GAAP financial measures: non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income, non-GAAP net income per share, adjusted EBITDA and free cash flow. We also disclose non-GAAP gross margin and non-GAAP operating margin derived from these financial measures.
We define non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income and non-GAAP net income per share as the respective GAAP balances excluding the effect of stock-based compensation expense, amortization of acquired intangible assets, amortization of debt issuance costs and certain other items such as acquisition-related expenses, impairment of long-lived assets, change in the fair value of derivative assets, restructuring expense, induced conversion expense and discrete tax items. Non-GAAP net income per basic and diluted share is calculated as non-GAAP net income divided by the weighted average shares used to compute net income per share, with the number of weighted average shares decreased, when applicable, to reflect the anti-dilutive impact of the capped call transactions entered into in connection with our convertible senior notes.
We believe these non-GAAP financial measures are useful to investors in assessing our operating performance due to the following factors:
Stock-based compensation expense. We exclude stock-based compensation expense because of varying available valuation methodologies, subjective assumptions and the variety of equity instruments that can impact our non-cash expense. We believe that providing non-GAAP financial measures that exclude stock-based compensation expense allows for more meaningful comparisons between our operating results from period to period.
Amortization of acquired intangible assets. We believe that excluding the impact of amortization of acquired intangible assets allows for more meaningful comparisons between operating results from period to period as the intangible assets are valued at the time of acquisition and are amortized over several years after the acquisition.
Amortization of debt issuance costs. The expense for the amortization of debt issuance costs related to our convertible senior notes and our former revolving credit facility is a non-cash item, and we believe the exclusion of this interest expense provides a more useful comparison of our operational performance in different periods.
Acquisition-related expenses. We exclude acquisition-related expenses, including accretion expense associated with contingent consideration, as costs that are unrelated to the current operations and are neither comparable to the prior period nor predictive of future results.
Discrete tax items. We exclude certain discrete tax items such as income tax expenses or benefits that are not related to ongoing business operations in the current year and adjustments to uncertain tax position reserves as these charges are not indicative of our ongoing operating results, and they are not considered when we are forecasting our future results.
Adjusted EBITDA. Adjusted EBITDA is a non-GAAP measure that we define as net income (loss) before (1) interest income, (2) interest expense, (3) other (income) expense, net, (4) provision for income taxes, (5) depreciation expense, (6) amortization of intangible assets, (7) stock-based compensation expense, (8) acquisition-related expenses, and (9) discrete tax benefit. We believe that the use of adjusted EBITDA is useful to investors and other users of our financial statements in evaluating our operating performance because it provides them with an additional tool to compare business performance across companies and across periods.
Free Cash Flow. Free cash flow is a non-GAAP measure that we define as cash provided by operating activities less purchases of property and equipment and capitalization of internal-use software costs. We consider free cash flow to be a liquidity measure that provides useful information to management and investors about the amount of cash generated by the business after necessary capital expenditures.
We include all non-GAAP financial measures in the current year or any comparative year that will be included in the non-GAAP reconciliation during the current fiscal year annual Form 10-K. As such, not all non-GAAP financial measures listed above may be included in the current reporting period non-GAAP reconciliation in the GAAP to Non-GAAP Reconciliation section below.
Our non-GAAP financial measures may not provide information that is directly comparable to that provided by other companies in our industry, as other companies in our industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. In addition, there are limitations in using non-GAAP financial measures because the non-GAAP financial measures are not prepared in accordance with GAAP, may be different from non-GAAP financial measures used by other companies and exclude expenses that may have a material impact upon our reported financial results. Further, stock-based compensation expense has been and will continue to be for the foreseeable future a significant recurring expense in our business and an important part of the compensation provided to our employees.
Other Metrics
ARR. Annualized Recurring Revenue and Growth. ARR is defined as the annual value of all recurring revenue related to active contracts as of the last day of the period. ARR is measured at a specific point in time and does not incorporate consideration of any anticipated contract terminations or other prospective events, regardless of whether such events may exert a favorable or adverse influence on the metric. ARR should be viewed independently of revenue and deferred revenue, as ARR is an operating metric and is not intended to be combined with or replace these items. ARR is not a forecast of future revenue, which can be impacted by contract start and end dates and renewal rates and does not include revenue reported as professional services revenue in our consolidated statement of operations. We use ARR and believe it is useful to investors as a measure of the overall success of our business.
Number of Customers. We define a customer as any entity that has an active Rapid7 recurring revenue contract as of the specified measurement date, excluding only InsightOps and Logentries customers with a contract value less than $2,400 per year.
ARR per Customer. We define ARR per customer as ARR divided by the number of customers at the end of the period.
Cautionary Language Concerning Forward-Looking Statements
This press release includes forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements include, but are not limited to, the statements regarding our financial guidance for the second quarter and full-year 2026, and the assumptions underlying such guidance. Our use of the words “anticipate,” “believe,” “estimate,” “expect,” “intend,” “may,” “will” and similar expressions are intended to identify forward-looking statements. The events described in our forward-looking statements are subject to a number of risks and uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Such forward-looking statements are based on our current assumptions, expectations and estimates and involve a number of judgments and risks, many of which are outside of our control. Risks that could cause or contribute to such differences include, but are not limited to, macroeconomic uncertainty, unstable market and economic conditions, fluctuations in our quarterly results, our ability to successfully grow our sales of our cloud-based solutions, including through the shift to a consolidated platform sales approach, failure to meet our publicly announced guidance or other expectations about our business, our ability to grow our revenue, the ability of our products and professional services to correctly detect vulnerabilities, renewal of our customer's subscriptions, competition in the markets in which we operate, market growth, our ability to innovate, our sales cycles, our ability to successfully develop, deploy and realize the expected benefits of our artificial intelligence and automation capabilities, including risks related to performance, reliability, security and customer adoption of such technologies, our ability to successfully integrate acquired companies, including Kenzo Security, and achieve the expected synergies and benefits of such acquisitions in a timely manner or at all, exposure to greater than anticipated tax liabilities, our ability to operate in compliance with applicable laws, fluctuations in foreign currency exchange rates and their impact on our results, risks related to the accuracy, efficacy and perceived reliability of our threat intelligence, detection and response capabilities, including the potential for undetected vulnerabilities, false positives or failures in our systems, as well as other risks and uncertainties that could affect our business and results described in our filings with the Securities and Exchange Commission (the “SEC”), including our most recent Annual Report on Form 10-K filed with the SEC on February 19, 2026, particularly in the section entitled "Item 1.A Risk Factors," and in the subsequent reports that we file with the SEC. Moreover, we operate in a very competitive and rapidly changing environment. New risks and uncertainties emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those expressed in any forward-looking statements we may make. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements. You should, therefore, not rely on these forward-looking statements as representing our views as of any date subsequent to the date of this press release
Investor contact: Press contact:Matthew Wells Alice RandallVP, Investor Relations Director, Global Corporate [email protected][email protected](617) 865-4277 (214) 693-4727 RAPID7, INC.
Condensed Consolidated Balance Sheets (Unaudited)
(in thousands)
March 31, 2026 December 31, 2025Assets Current assets Cash and cash equivalents $343,291 $246,664 Short-term investments 326,967 228,006 Accounts receivable, net 135,128 167,017 Deferred contract acquisition and fulfillment costs, current portion 47,342 48,370 Prepaid expenses and other current assets 47,617 47,230 Total current assets 900,345 737,287 Long-term investments — 184,119 Property and equipment, net 30,492 31,990 Operating lease right-of-use assets 44,250 45,485 Deferred contract acquisition and fulfillment costs, non-current portion 65,554 66,978 Goodwill 593,334 575,268 Intangible assets, net 67,567 65,105 Other assets 18,101 20,232 Total assets $1,719,643 $1,726,464 Liabilities and Stockholders’ Equity Current liabilities Accounts payable $12,304 $11,041 Accrued expenses 84,407 96,998 Convertible senior notes, current portion, net 597,574 — Operating lease liabilities, current portion 17,964 16,176 Deferred revenue, current portion 442,260 451,155 Total current liabilities 1,154,509 575,370 Convertible senior notes, non-current portion, net 295,666 892,284 Operating lease liabilities, non-current portion 53,987 59,908 Deferred revenue, non-current portion 28,417 29,971 Other long-term liabilities 12,292 14,201 Total liabilities 1,544,871 1,571,734 Stockholders' equity: Common stock $667 $658 Treasury stock (4,765) (4,765)Additional paid-in capital 1,142,304 1,120,963 Accumulated other comprehensive income 89 2,527 Accumulated deficit (963,523) (964,653)Total stockholders equity 174,772 154,730 Total liabilities and stockholders’ equity $1,719,643 $1,726,464 RAPID7, INC.
Condensed Consolidated Statements of Operations (Unaudited)
(in thousands, except share and per share data) Three Months Ended March 31, 2026 2025 Revenue: Product subscriptions $204,049 $203,935 Professional services 5,642 6,318 Total revenue 209,691 210,253 Cost of revenue: Product subscriptions 59,154 54,368 Professional services 5,595 5,112 Total cost of revenue 64,749 59,480 Total gross profit 144,942 150,773 Operating expenses: Research and development 48,354 47,888 Sales and marketing 78,934 79,400 General and administrative 18,212 23,586 Total operating expenses 145,500 150,874 Loss from operations (558) (101)Other income (expense), net: Interest income 5,612 5,758 Interest expense (2,498) (2,654)Other (expense) income, net (726) 1,802 Income before income taxes 1,830 4,805 Provision for income taxes 700 2,700 Net income $1,130 $2,105 Net income per share, basic $0.02 $0.03 Net income per share, diluted(1) $0.02 $0.03 Weighted average common shares outstanding, basic 66,174,341 63,835,945 Weighted average common shares outstanding, diluted 66,904,992 64,224,415 (1) We use the if-converted method to compute diluted earnings per share with respect to our convertible senior notes. There was no add-back of interest expense or additional dilutive shares related to the convertible senior notes where the effect was anti-dilutive. On an if-converted basis, for the three months ended March 31, 2026, the 2027 and 2029 Notes were anti-dilutive; for the three months ended March 31, 2025, the 2029 Notes, 2027 Notes and 2025 Notes were anti-dilutive.
RAPID7, INC.
Condensed Consolidated Statements of Cash Flows (Unaudited)
(in thousands) Three Months Ended March 31, 2026 2025 Cash flows from operating activities: Net income $1,130 $2,105 Adjustments to reconcile net income to net cash provided by operating activities: Depreciation and amortization 11,210 11,665 Amortization of debt issuance costs 1,045 1,019 Stock-based compensation expense 19,890 27,151 Deferred income taxes (1,220) — Other 1,489 (1,153)Changes in assets and liabilities: Accounts receivable 31,405 27,668 Deferred contract acquisition and fulfillment costs 2,453 5,295 Prepaid expenses and other assets 1,632 (1,995)Accounts payable 2,342 (6,555)Accrued expenses (14,753) (20,325)Deferred revenue (11,114) (12,874)Other liabilities (5,692) (2,244)Net cash provided by operating activities 39,817 29,757 Cash flows from investing activities: Business acquisitions, net of cash acquired (23,345) — Purchases of property and equipment (2,081) (1,361)Capitalization of internal-use software (4,319) (3,719)Purchases of investments — (144,461)Sales and maturities of investments 85,000 69,000 Other investing activities — 1,328 Net cash provided by (used in) investing activities 55,255 (79,213)Cash flows from financing activities: Taxes paid related to net share settlement of equity awards (255) (1,303)Proceeds from employee stock purchase plan 2,889 4,446 Proceeds from stock option exercises — 1,589 Net cash provided by financing activities 2,634 4,732 Effect of exchange rate changes on cash, cash equivalents and restricted cash (1,079) 1,334 Net increase (decrease) in cash, cash equivalents and restricted cash 96,627 (43,390)Cash, cash equivalents and restricted cash, beginning of period $246,664 $342,101 Cash, cash equivalents and restricted cash, end of period $343,291 $298,711 Supplemental cash flow information: Cash paid for interest on convertible senior notes $2,625 $1,571 Cash paid for income taxes, net of refunds 782 992 Reconciliation of cash, cash equivalents and restricted cash: Cash and cash equivalents 343,291 291,462 Restricted cash included in prepaid expenses and other current assets — 7,249 Total cash, cash equivalents and restricted cash $343,291 $298,711 RAPID7, INC.
GAAP to Non-GAAP Reconciliation (Unaudited)
(in thousands, except share and per share data) Three Months Ended March 31, 2026 2025 GAAP total gross profit $144,942 $150,773 Add: Stock-based compensation expense(1) $1,716 $2,264 Add: Amortization of acquired intangible assets(2) $4,423 $4,423 Non-GAAP total gross profit $151,081 $157,460 Non-GAAP gross margin 72% 75% GAAP gross profit – product subscriptions $144,895 $149,567 Add: Stock-based compensation expense $1,369 $1,731 Add: Amortization of acquired intangible assets $4,423 $4,423 Non-GAAP gross profit – product subscriptions $150,687 $155,721 Non-GAAP gross margin - product subscriptions 74% 76% GAAP gross profit – professional services $47 $1,206 Add: Stock-based compensation expense $347 $533 Non-GAAP gross profit – professional services $394 $1,739 Non-GAAP gross margin - professional services 7% 28% GAAP loss from operations $(558) $(101)Add: Stock-based compensation expense(1) $19,890 $27,151 Add: Amortization of acquired intangible assets(2) $4,494 $5,120 Add: Acquisition-related expenses(3) $606 $183 Non-GAAP income from operations $24,432 $32,353 GAAP net income $1,130 $2,105 Add: Stock-based compensation expense(1) $19,890 $27,151 Add: Amortization of acquired intangible assets(2) $4,494 $5,120 Add: Amortization of debt issuance costs $1,045 $1,019 Add: Acquisition-related expenses(3) $606 $183 Add: Discrete tax items(4) $(600) $— Non-GAAP net income $26,565 $35,578 Add: Interest expense of convertible senior notes(5) $1,313 $1,571 Numerator for non-GAAP earnings per share calculation $27,878 $37,149 Weighted average shares used in GAAP earnings per share calculation, basic 66,174,341 63,835,945 Dilutive effect of convertible senior notes(5) 10,429,891 11,183,611 Dilutive effect of employee equity incentive plans(6) 730,651 388,471 Weighted average shares used in non-GAAP earnings per share calculation, diluted 77,334,883 75,408,027 Non-GAAP net income per share: Basic $0.40 $0.56 Diluted $0.36 $0.49 (1)Includes stock-based compensation expense as follows: Cost of revenue $1,716 $2,264 Research and development $8,406 $10,386 Sales and marketing $5,071 $7,241 General and administrative $4,697 $7,260 (2)Includes amortization of acquired intangible assets as follows: Cost of revenue $4,423 $4,423 Sales and marketing $71 $652 General and administrative $— $45 (3)Includes acquisition-related expenses as follows: General and administrative $606 $183 (4)Includes discrete tax items as follows: (Benefit) Provision for income taxes $(600) $— (5)We use the if-converted method to compute diluted earnings per share with respect to our convertible senior notes. There was no add-back of interest expense or additional dilutive shares related to the convertible senior notes where the effect was anti-dilutive. (6)We use the treasury method to compute the dilutive effect of employee equity incentive awards. RAPID7, INC.
Reconciliation of Net Income to Adjusted EBITDA (Unaudited)
(in thousands) Three Months Ended March 31, 2026 2025 GAAP net income $1,130 $2,105 Interest income (5,612) (5,758)Interest expense 2,498 2,654 Other expense (income), net 726 (1,802)Provision for income taxes 700 2,700 Depreciation expense 2,374 2,791 Amortization of intangible assets 8,836 8,874 Stock-based compensation expense 19,890 27,151 Acquisition-related expenses 606 183 Adjusted EBITDA $31,148 $38,898 RAPID7, INC.
Reconciliation of Net Cash Provided by Operating Activities to Free Cash Flow (Unaudited)
(in thousands) Three Months Ended March 31, 2026 2025 Net cash provided by operating activities $39,817 $29,757 Less: Purchases of property and equipment (2,081) (1,361)Less: Capitalized internal-use software costs (4,319) (3,719)Free cash flow $33,417 $24,677 RAPID7, INC.
Reconciliation of Non-GAAP Guidance
(in millions, except per share data) Anticipated Second Quarter 2026 Anticipated Full-Year 2026 Low High Low HighGAAP income from operations$1to$3 $18 to$24 Add: Stock-based compensation expense 19to 19 76 to 76 Add: Amortization of acquired intangible assets 4to 4 17 to 17 Add: Acquisition-related expenses —to — 1 to 1 Non-GAAP income from operations$24to$26 $112 to$118 GAAP net income$1to$3 $19 to$25 Add: Stock-based compensation expense 19to 19 76 to 76 Add: Amortization of acquired intangible assets 4to 4 17 to 17 Add: Amortization of debt issuance costs 1to 1 4 to 4 Add: Acquisition-related costs —to — 1 to 1 Less: Discrete tax item —to — $(1)to$(1)Non-GAAP net income$25to$27 $116 to$122 Add: Interest expense on convertible senior notes 1to 1 5 to 5 Numerator for non-GAAP earnings per share calculation$26to$28 $121 to$127 GAAP net income per share1$0.01to$0.04 $0.28 to$0.37 Non-GAAP net income per share, diluted$0.33to$0.36 $1.52 to$1.60 Weighted average shares used in non-GAAP earnings per share calculation, diluted 78.3 79.4 1The anticipated GAAP net loss per share is calculated using basic weighted average shares for periods in which the Company anticipated a GAAP net loss. The anticipated GAAP net income per share is calculated using GAAP diluted weighted average shares for periods in which the Company anticipated GAAP net income. The reconciliation does not reflect any items that are unknown at this time, including, but not limited to, non-ordinary course litigation-related expenses, which we are not able to predict without unreasonable effort due to their inherent uncertainty. As a result, the estimates shown for Anticipated GAAP loss from operations, Anticipated GAAP net loss and Anticipated GAAP net loss per share are expected to change.
Full-Year 2026 Low HighNet cash provided by operating activities$149 to$159 Less: Purchases of property and equipment (7)to (7)Less: Capitalized internal-use software costs (17)to (17)Free cash flow$125 $135
Rapid7 (RPD - Free Report) came out with quarterly earnings of $0.36 per share, beating the Zacks Consensus Estimate of $0.3 per share. This compares to earnings of $0.49 per share a year ago. These figures are adjusted for non-recurring items.
This quarterly report represents an earnings surprise of +19.01%. A quarter ago, it was expected that this cybersecurity company would post earnings of $0.4 per share when it actually produced earnings of $0.44, delivering a surprise of +10%.
Over the last four quarters, the company has surpassed consensus EPS estimates four times.
Rapid7, which belongs to the Zacks Internet - Software industry, posted revenues of $209.69 million for the quarter ended March 2026, surpassing the Zacks Consensus Estimate by 0.89%. This compares to year-ago revenues of $210.25 million. The company has topped consensus revenue estimates four times over the last four quarters.
The sustainability of the stock's immediate price movement based on the recently-released numbers and future earnings expectations will mostly depend on management's commentary on the earnings call.
Rapid7 shares have lost about 57.3% since the beginning of the year versus the S&P 500's gain of 5.2%.
What's Next for Rapid7?While Rapid7 has underperformed the market so far this year, the question that comes to investors' minds is: what's next for the stock?
There are no easy answers to this key question, but one reliable measure that can help investors address this is the company's earnings outlook. Not only does this include current consensus earnings expectations for the coming quarter(s), but also how these expectations have changed lately.
Empirical research shows a strong correlation between near-term stock movements and trends in earnings estimate revisions. Investors can track such revisions by themselves or rely on a tried-and-tested rating tool like the Zacks Rank, which has an impressive track record of harnessing the power of earnings estimate revisions.
Ahead of this earnings release, the estimate revisions trend for Rapid7 was mixed. While the magnitude and direction of estimate revisions could change following the company's just-released earnings report, the current status translates into a Zacks Rank #3 (Hold) for the stock. So, the shares are expected to perform in line with the market in the near future. You can see the complete list of today's Zacks #1 Rank (Strong Buy) stocks here.
It will be interesting to see how estimates for the coming quarters and the current fiscal year change in the days ahead. The current consensus EPS estimate is $0.37 on $208.93 million in revenues for the coming quarter and $1.55 on $838.58 million in revenues for the current fiscal year.
Investors should be mindful of the fact that the outlook for the industry can have a material impact on the performance of the stock as well. In terms of the Zacks Industry Rank, Internet - Software is currently in the top 34% of the 250 plus Zacks industries. Our research shows that the top 50% of the Zacks-ranked industries outperform the bottom 50% by a factor of more than 2 to 1.
VERRA MOBILITY CORP (VRRM - Free Report) , another stock in the same industry, has yet to report results for the quarter ended March 2026. The results are expected to be released on May 6.
This company is expected to post quarterly earnings of $0.25 per share in its upcoming report, which represents a year-over-year change of -16.7%. The consensus EPS estimate for the quarter has remained unchanged over the last 30 days.
VERRA MOBILITY CORP's revenues are expected to be $223.66 million, up 0.2% from the year-ago quarter.
Rapid7 (RPD - Free Report) reported $209.69 million in revenue for the quarter ended March 2026, representing a year-over-year decline of 0.3%. EPS of $0.36 for the same period compares to $0.49 a year ago.
The reported revenue represents a surprise of +0.89% over the Zacks Consensus Estimate of $207.84 million. With the consensus EPS estimate being $0.30, the EPS surprise was +19.01%.
While investors closely watch year-over-year changes in headline numbers -- revenue and earnings -- and how they compare to Wall Street expectations to determine their next course of action, some key metrics always provide a better insight into a company's underlying performance.
As these metrics influence top- and bottom-line performance, comparing them to the year-ago numbers and what analysts estimated helps investors project a stock's price performance more accurately.
Here is how Rapid7 performed in the just reported quarter in terms of the metrics most widely monitored and projected by Wall Street analysts:
Annualized recurring revenue: $832.13 billion versus the six-analyst average estimate of $829.94 billion.Number of customers: 11,629 compared to the 11,499 average estimate based on two analysts.ARR per customer: $71,600.00 compared to the $71,818.75 average estimate based on two analysts.Revenue- Professional services: $5.64 million versus the seven-analyst average estimate of $5.72 million. The reported number represents a year-over-year change of -10.7%.Revenue- Product subscriptions: $204.05 million versus the seven-analyst average estimate of $202.12 million. The reported number represents a year-over-year change of +0.1%.Non-Gaap Gross Profit- Professional services: $0.39 million versus the seven-analyst average estimate of $0.79 million.Non-Gaap Gross Profit- Product subscriptions: $150.69 million compared to the $150.42 million average estimate based on seven analysts.View all Key Company Metrics for Rapid7 here>>>
Shares of Rapid7 have returned +12.3% over the past month versus the Zacks S&P 500 composite's +9.5% change. The stock currently has a Zacks Rank #3 (Hold), indicating that it could perform in line with the broader market in the near term.
, /PRNewswire/ -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. ("Rapid7" or the "Company") (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue ("ARR") of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7's stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
BOSTON, May 11, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, today announced that the company will be presenting at the following conferences:
The J.P. Morgan 2026 Global Technology, Media, and Communications Conference in Boston, MA on Wednesday, May 20, 2026.The William Blair 46th Annual Growth Stock Conference in Chicago, IL on Tuesday, June 2, 2026.
The presentations will be webcast live, and replays will be available for a limited time, under the “Events and Presentations” section of the Rapid7 investor relations website at investors.rapid7.com.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
BOSTON, May 12, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced early access to its Cyber Governance, Risk, and Compliance (GRC) program, designed to unify security operations with governance, risk, and compliance workflows. Built on the Rapid7 Command Platform, Cyber GRC uses real time exposure data as the operating foundation for both security and compliance; aligning controls, evidence, and risk decisions to live threats rather than static frameworks to help customers manage their GRC requirements.
Regulatory requirements are expanding across jurisdictions and frameworks, while cyber risk continues to scale in complexity. Most compliance processes remain point-in-time and disconnected from live security operations, reinforcing reactive models that lag behind how risk develops. Rapid7’s Cyber GRC program replaces reactive compliance with a unified model for risk and controls. By combining AI-driven third-party risk management with a live, threat-aware risk register, it integrates GRC into security operations to provide executives with transparent, data-backed visibility.
“Organizations invest heavily in security tools, but many are still left to determine how to validate control effectiveness and demonstrate compliance,” said Jon Schipp, Senior Director of Product Management at Rapid7. “Cyber GRC connects fragmented data across assets, exposures, and controls to the attack surface, giving teams a clear view of risk and enabling consistent, evidence-backed outcomes.”
Rapid7 is building an ecosystem of audit, assurance, and GRC partners on the Command Platform to support continuous assurance:
HITRUST: Provides the industry’s most rigorous, certifiable assurance, enabling organizations to demonstrate proven, defensible security and risk management aligned to recognized standards and requirements.Insight Assurance: A trusted independent assessor, delivering rigorous, technology-enabled assessments across SOC 2, ISO 27001/42001, HITRUST, CMMC and other frameworks It is focused on validating control effectiveness for organizations looking to simplify compliance.360 Advanced: Delivers integrated compliance solutions to a global client base across industries ranging from technology startups to Fortune 500 organizations, with cybersecurity and compliance offerings that include ISO 27001, FedRAMP, HITRUST, SOC, penetration testing, risk assessments, and more. 360 Advanced operates under an alternative practice structure in accordance with all applicable laws, regulations, standards, and codes of conduct of the AICPA.
In addition, Rapid7 is extending capabilities that support continuous control monitoring, evidence collection, and audit workflows, including:
HITRUST e1, i1, and r2 Control Coverage: Continuously updated dashboards and queries monitor HITRUST controls, automate evidence collection, and detect control drift to support certification readiness.Audit-Ready User Access Exports: Self-service export provides a consolidated view of users, groups, roles, and access data to support access reviews and compliance audits.Unified Policy Bulk Export: Standardized bulk export consolidates agent and scan policy data into a single output to simplify policy reporting and support compliance workflows.VM Export MCP Server & Skill: Enables customers and agents to retrieve Rapid7 data for compliance, vulnerability management operations, and reporting in a highly efficient way. “Organizations today are in a constant tug of war between regulatory requirements and daily security operations. With Rapid7 Cyber GRC, the Command Platform now provides a unified place where controls, vulnerability insights and audit details live together. The benefit to practitioners is a single place that not only implements controls but also helps prove them with examination readiness and defensible reporting, “ said Christopher Conklin, VP, Chief Information Security Officer, Chemung Canal Trust Company.
“Today’s organizations need a partner that brings together security operations, risk management, and governance into a cohesive strategy. This technology allows us to deliver on that vision,” said Mat Cornish, Managing Director, Longwall Security, Rapid7 EMEA Services Partner of the Year, 2026
The Cyber GRC Program is currently available for early access, with broader availability planned for later in 2026.
To learn more or to sign up for the program, visit http://www.rapid7.com/blog/post/cds-rapid7-cyber-grc-secops-compliance.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
Rapid7 Media Relations
Alice Randall
Director, Global Communications [email protected]
(857) 216-7804
NEW YORK, May 12, 2026 (GLOBE NEWSWIRE) -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. (“Rapid7” or the “Company”) (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue (“ARR”) of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7’s stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
, /PRNewswire/ -- 360 Advanced, a leading cybersecurity and compliance firm, today announced its participation in the Rapid7 Cyber Governance, Risk, and Compliance (GRC) Early Access Program, designed to help organizations align security operations with compliance and risk management workflows.
Built on the Rapid7 Command Platform, the Cyber GRC program is designed to align security operations, controls, evidence collection, and risk visibility with real-time cybersecurity insights. The initiative enables organizations to move toward more continuous, operationalized compliance models in increasingly complex regulatory environments.
As organizations manage overlapping obligations across frameworks such as SOC 2®, HITRUST®, ISO 27001, PCI DSS, FedRAMP®, GovRAMP™, and CMMC, many face challenges driven by disconnected systems, fragmented evidence collection, and point-in-time compliance activities. Rapid7's Cyber GRC initiative bridges these gaps by providing more continuous, threat-aware visibility into risk and control effectiveness.
"Organizations today are under increasing pressure to align security operations with governance, risk, and compliance in a way that reflects real-time conditions," said Cameron Youngblood, Chief Revenue Officer at 360 Advanced. "By collaborating with Rapid7 on this initiative, we're helping organizations connect security insights with compliance workflows to improve visibility, strengthen operational efficiency, and support ongoing compliance maturity."
As part of the Rapid7 Cyber GRC ecosystem, 360 Advanced will support organizations through integrated advisory, assessment, and assurance services across multiple frameworks and regulatory requirements.
"Businesses are moving away from treating compliance as a once-a-year audit exercise," added Youngblood. "The ability to align real-time security insights with governance and compliance workflows is an important step toward building more resilient programs and more defensible reporting."
360 Advanced delivers cybersecurity and compliance solutions to organizations ranging from emerging technology companies to Fortune 500 enterprises, with services that include:
SOC 1 & SOC 2 Reporting HITRUST Assessments ISO 27001 & ISO 27701 Certifications PCI DSS Assessments FedRAMP & GovRAMP Services CMMC Readiness & Certification Support Penetration Testing & Risk Assessments AI Governance & ISO 42001 Advisory Services The Rapid7 Cyber GRC Early Access Program is currently available to select organizations, with broader availability planned later in 2026.
To learn more about the Rapid7 Cyber GRC initiative, visit Rapid7 Cyber GRC Early Access Program.
For more information about 360 Advanced, visit the 360 Advanced website.
About 360 Advanced, Inc
360 Advanced is Making Better Businesses through their client-centric cybersecurity and compliance offerings. For nearly 20 years, 360 Advanced has delivered integrated compliance solutions to a global base of clients in a wide range of industries, from tech startups to Fortune 500 companies. Their cybersecurity and compliance offerings include ISO 27001, FedRAMP, HITRUST, SOC, Penetration Testing, Risk Assessments, and more.
360 Advanced operates under an alternative practice structure in accordance with all applicable laws, regulations, standards, and codes of conduct of the AICPA. Read full disclaimer here.
Media Contact
Keith Frechette
Director of Marketing
[email protected]
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit www.rapid7.com.
, /PRNewswire/ -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. ("Rapid7" or the "Company") (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue ("ARR") of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7's stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
INVESTOR ALERT: Pomerantz Law Firm Investigates Claims On Behalf of Investors of Rapid7, Inc. - RPD PR Newswire
NEW YORK, May 14, 2026
, /PRNewswire/ -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. ("Rapid7" or the "Company") (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue ("ARR") of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7's stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
View original content to download multimedia:https://www.prnewswire.com/news-releases/investor-alert-pomerantz-law-firm-investigates-claims-on-behalf-of-investors-of-rapid7-inc---rpd-302773096.html
NEW YORK, May 19, 2026 (GLOBE NEWSWIRE) -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. (“Rapid7” or the “Company”) (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue (“ARR”) of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7’s stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
BOSTON, May 21, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, released its Q1 2026 Threat Landscape Report, examining trends in vulnerability exploitation, ransomware activity, and cybercriminal infrastructure. The report found that vulnerability exploitation surpassed social engineering as the leading initial access vector, accounting for 38% of incident response cases. The shift reflects the growing role of AI in accelerating how quickly attackers can identify, weaponize, and exploit unpatched systems at scale, compressing the window defenders have to respond.
Reinforcing this trend, half of vulnerabilities actively exploited in the wild during Q1 were zero-click, network-facing issues requiring no authentication or user interaction, giving attackers direct access to exposed systems without relying on human action. The finding reinforces trends identified in Rapid7’s 2026 Annual Global Threat Landscape Report, which found that exploitation timelines continue to shrink: among high- and critical-severity vulnerabilities, the median time from public disclosure to inclusion in CISA’s Known Exploited Vulnerabilities (KEV) catalog fell from 8.5 days to 5.0 days.
"We've spent years building a security culture around humans being the weakest link, but our Q1 findings show AI is quietly rewriting that equation," said Raj Samani, SVP and Chief Scientist at Rapid7. "Attackers are increasingly bypassing user interaction altogether, prioritizing direct access to exposed infrastructure and dramatically narrowing the window defenders have to respond."
Drawing on select tracked CVEs, MDR incident response data, ransomware leak-site intelligence, and dark web telemetry, the report highlights evolving exploitation patterns, ransomware activity, and changes in attacker infrastructure.
Key findings include:
Vulnerability exploitation was the leading initial access vector in MDR data: Exploitation accounted for 38% of incident response cases, followed by social engineering (24%) and compromised accounts (14%).Zero-click, network-facing vulnerabilities dominated exploited CVEs: Half of vulnerabilities actively exploited in the wild during Q1 required no authentication or user interaction, enabling direct access to exposed systems.Public discussion preceded exploitation activity: Exploited vulnerabilities averaged 1.8 million mentions across blogs, forums, and social media, indicating that widely discussed vulnerabilities can quickly become operational targets.SQL injection became the most exploited vulnerability type: SQL injection overtook OS command injection in Q1, reflecting attacker focus on common, broadly distributed web application weaknesses.Ransomware activity remained fragmented across groups: Qilin led leak-site activity with 357 posts, followed by The Gentlemen (206) and Akira (174), indicating ransomware activity remained fragmented across operators.Abused Remote Monitoring and Management (RMM) tools were the most prevalent threat category: RMM tools accounted for 22.9% of observed activity, followed by ClickFix (18.8%) and Windows Native Scripts (10.4%). What this means for security operations
As exploitation timelines continue to shrink, security teams face increasing pressure to identify, prioritize, and remediate exposed systems before attackers can operationalize vulnerabilities at scale.
“Q1 shows how quickly exposed systems can become operational targets,” said Christiaan Beek, Vice President of Cyber Intelligence at Rapid7. “Security teams can’t apply the same level of investigation and response across every signal when attackers are consistently prioritizing what they can reach and exploit. That gap is where risk accumulates.”
To read a full copy of the report, visit https://www.rapid7.com/research/report/threat-landscape-report-2026-q1/ .
About the Rapid7 Q1 2026 Threat Landscape Report
The Rapid7 Threat Landscape Report is a quarterly analysis of global adversary behavior drawn from the company’s managed detection and response operations, vulnerability intelligence platforms, and threat research telemetry. The Q1 2026 edition examines the impact of vulnerability exploitation, geopolitical cyber activity, ransomware evolution, and cybercriminal infrastructure.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers. As a recognized leader in preemptive managed detection and response (MDR), Rapid7 unifies exposure and detection to transform the cybersecurity operations of more than 11,500 customers worldwide. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.
Rapid7 Media Relations
Alice Randall
Director, Global Communications [email protected]
(857) 216-7804
, /PRNewswire/ -- Pomerantz LLP is investigating claims on behalf of investors of Rapid7, Inc. ("Rapid7" or the "Company") (NASDAQ: RPD). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980.
The investigation concerns whether Rapid7and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices.
[Click here for information about joining the class action]
On February 10, 2026, Rapid7 reported its fourth quarter and full year 2025 financial results. Among other items, the Company disclosed annualized recurring revenue ("ARR") of $840 million, which was flat year-over-year, and total revenue of $217 million for the quarter, an increase of only 1% year-over-year. In addition, Rapid7 issued 2026 guidance that reflected declining revenue expectations, including first quarter 2026 revenue guidance of $207 million to $209 million and full-year 2026 revenue guidance of $835 million to $843 million. The Company also expected first quarter 2026 ARR of approximately $830 million, down 1% year-over-year, and did not provide full-year ARR guidance.
On this news, Rapid7's stock price fell $3.01 per share, or 28.97%, to close at $7.38 per share on February 11, 2026.
Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See www.pomlaw.com.
Attorney advertising. Prior results do not guarantee similar outcomes.
BOSTON, June 01, 2026 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, today announced a leadership transition in which board member Wael Mohamed will assume the role of Chief Executive Officer, and current Chief Executive Officer Corey Thomas will become Executive Chairman of the Board, effective immediately. In conjunction with the announcement, the company is also reaffirming its financial guidance for the second quarter and full year 2026.
Rapid7 is rated 'Buy' due to a promising management transition and AI-driven catalysts. The new CEO boasts over three decades of industry experience and has served on the Board for the past 14 months. RPD's outlook should be strengthened under his direction. Corporates seem willing to spend more on cybersecurity in the new threat landscape; Rapid7's acquisition of AI platform Kenzo will allow it to leverage this trend.
