Welcome to our dedicated page for Rapid7 news (Ticker: RPD), a resource for investors and traders seeking the latest updates and insights on Rapid7 stock.
Rapid7, Inc. develops AI-powered managed cybersecurity operations software and services centered on the Rapid7 Command Platform. Company news commonly covers managed detection and response, exposure management, security information and event management, cloud security capabilities, threat intelligence research from Rapid7 Labs, and updates to products such as Exposure Command.
Recurring developments also include quarterly financial results, annualized recurring revenue and subscription revenue trends, investor conference participation, equity compensation grants, and completed acquisitions that extend Rapid7’s security operations technology, including the acquisition of Kenzo Security.
Rapid7 (NASDAQ: RPD) released its Q2 2026 Quarterly Threat Landscape Report, highlighting that newly exploited vulnerabilities surged from 8% to 40% and that 62% of newly exploited flaws required no user interaction or authentication, breaking traditional, periodic patching models.
According to Rapid7, high and critical vulnerability disclosures doubled year over year to 8,539, critical vulnerabilities rose 21% quarter over quarter, and publicly available proof-of-concept code increased 12% QoQ and 76% YoY. Disclosures involving missing authentication climbed 247% YoY, from 45 to 156. The report also tracks ransomware, with the United States recording 881 listed victims versus 99 in Germany, and notes state-aligned activity from Iran, North Korea, and Russia targeting critical infrastructure and enterprise sectors.
Rapid7 (NASDAQ: RPD) released Omdia-commissioned global research showing that AI is now widely embedded in security operations centers, shifting focus from adoption to governance and accountability. In a survey of 500 security professionals, executive security leaders were 1.6x more likely than operational managers to be highly concerned about how AI vendors handle organizational security data, signaling a governance and oversight gap. The study found 97% of respondents see AI positively impacting security operations and 98% of AI users report reduced alert fatigue, while 92% say human oversight remains essential and 86% believe AI-enabled managed detection and response providers offer an advantage over traditional MDR, positioning governance and transparency as key differentiators in AI-driven security.
Rapid7 (Nasdaq: RPD) reported second quarter 2026 total revenue of $210.9 million, down 1.5% year-over-year, and product revenue of $205.1 million, also down 1.5%. Annualized recurring revenue was $824.0 million, a 2.0% year-over-year decline.
Rapid7 generated GAAP income from operations of $3.0 million and non-GAAP income from operations of $28.9 million. GAAP net income was $6.1 million ($0.09 diluted EPS), while non-GAAP net income reached $33.0 million ($0.44 diluted EPS). Operating cash flow was $37.0 million and free cash flow $31.9 million, with cash and investments totaling $702.6 million as of June 30, 2026.
During Q2, Rapid7 began a restructuring to align around its Core Platform Solutions, affecting approximately 12% of its workforce and expected to incur $10–$11 million in charges. For Q3 2026, Rapid7 guides revenue to $208–$210 million and non-GAAP operating income to $34–$36 million; full-year 2026 revenue is forecast at $837–$841 million with non-GAAP operating income of $129–$133 million and free cash flow of about $130 million.
Rapid7 (NASDAQ: RPD) announced the general availability of Rapid7 Cyber GRC, adding native governance, risk, and compliance capabilities to the Rapid7 Command Platform. The offering connects GRC workflows with live SecOps data to give security, risk, and compliance teams a unified, continuously updated view of controls, active threats, and organizational risk.
According to Rapid7, Cyber GRC enables continuous control validation using platform telemetry, automated audit readiness across multiple frameworks, AI-assisted third-party risk management, and policy and risk register management. It is positioned as part of Rapid7’s broader Preemptive Security strategy and is being showcased at Black Hat USA 2026.
Rapid7 (NASDAQ: RPD) announced it will release its second quarter 2026 financial results on Monday, August 10, 2026, after the market close. The company will host a conference call and live webcast at 4:30 p.m. Eastern Time to discuss results and business outlook.
Investors can register for the live event via Rapid7’s earnings call registration link, and access the webcast, accompanying press release, and replay through the company’s investor relations website at https://investors.rapid7.com.
Rapid7 (NASDAQ:RPD) granted an inducement award of 525,000 restricted stock units (RSUs) to Chief Product and Technology Officer Dejan Deklich on June 15, 2026, under its 2015 Equity Incentive Plan.
The RSUs vest over three years, contingent on Mr. Deklich’s continued employment and were unanimously approved by the independent Compensation Committee in accordance with Nasdaq Listing Rule 5635(c)(4).
Rapid7 (NASDAQ:RPD) announced that board member Wael Mohamed has been appointed Chief Executive Officer, while current CEO Corey Thomas becomes Executive Chairman, effective immediately.
The company reaffirmed its Q2 and full-year 2026 guidance, highlighted its AI-SOC strategy, recent Kenzo acquisition, and a refreshed senior leadership team.
Rapid7 (NASDAQ:RPD) released its Q1 2026 Threat Landscape Report, showing that vulnerability exploitation overtook social engineering as the top initial access vector, driving 38% of incident response cases. Social engineering accounted for 24% and compromised accounts 14%.
Half of actively exploited CVEs were zero-click, network-facing, requiring no authentication or user interaction. High and critical vulnerabilities saw the median time from public disclosure to CISA KEV inclusion fall from 8.5 to 5.0 days, highlighting shrinking remediation windows.
The report also notes SQL injection as the most exploited vulnerability type, fragmented ransomware activity led by Qilin, and abused Remote Monitoring and Management tools representing 22.9% of observed threat activity.
Rapid7 (NASDAQ:RPD) launched its Cyber GRC Early Access Program with 360 Advanced to connect security operations with governance, risk, and compliance workflows.
Built on the Rapid7 Command Platform, the program targets continuous, threat-aware compliance across frameworks like SOC 2, HITRUST, ISO 27001, PCI DSS, FedRAMP, GovRAMP, and CMMC, with broader rollout planned in 2026.
Rapid7 (NASDAQ:RPD) launched an early access Cyber Governance, Risk, and Compliance (GRC) program built on the Rapid7 Command Platform. The offering unifies security operations with governance, risk, and compliance workflows using real-time exposure data as the foundation.
Cyber GRC integrates AI-driven third-party risk management, a live threat-aware risk register, and continuous control monitoring. Rapid7 is partnering with HITRUST, Insight Assurance, and 360 Advanced, and adding features like HITRUST control coverage, audit-ready user access exports, unified policy bulk export, and VM Export MCP Server & Skill. Broader availability is planned later in 2026.