Rapid7 delivered a profitability beat that a skeptical market was not positioned for, but the quarter also showed that the business is still contracting. Non-GAAP earnings of $0.60 per share topped the $0.45 consensus by 15.4% and cleared the $0.52 Earnings Whisper number. Revenue of $212.4 million beat the $209.14 million estimate by 1.6%. Yet revenue fell 2.5% year over year and earnings grew only 3.4%. That is the central tension: management is running the company more efficiently, but it has not yet shown that the franchise can grow again.

The beat came from cost cuts rather than demand, and that shapes how the quality of the quarter should be judged. Sales and marketing expense fell to $65.6 million from $79.3 million a year ago, and research and development dropped to $39.6 million from $46.9 million. As a result, non-GAAP operating income rose to $46.2 million from $36.9 million, a 21.7% margin against the 16.7% guidance midpoint. The more modest 3.4% EPS growth reflects a heavier non-GAAP diluted share count of 80.6 million versus 75.6 million a year earlier, which absorbed much of the 13% increase in non-GAAP net income. The GAAP picture is thinner. GAAP net income fell to $3.5 million, or $0.05 per share, from $9.8 million, weighed down by $10.0 million of restructuring charges and a $5.5 million impairment of a strategic equity investment. Cash generation also softened: free cash flow slipped to $26.5 million from $30.1 million, and the deferred revenue drawdown widened.

The call preserved a credible stabilization story, though it falls short of a growth story. ARR of $819.7 million beat the $812 million guide by $8 million. Core ARR held flat sequentially, as promised, and core now accounts for about 85% of ARR. Detection and response grew about 5% for a second straight quarter, which management framed as stabilization. That rate is still down from 7% earlier in the year and from mid-teens growth a year ago. Exposure management ARR declined about 6%, and non-core ARR fell roughly 19%, with that drag expected to persist. ARR per customer slipped to about $69,000 from $70,000 last quarter and $72,000 the quarter before. On the positive side, management cited better rep productivity, saved at-risk accounts and easing competitive pressure from platform vendors. Its tone shifted from last quarter's "focused reset" to "we delivered what we said."

Guidance followed the same split. Full-year non-GAAP operating income was raised to $140-$142 million, the fourth consecutive increase from a starting range of $108-$116 million. Full-year revenue edged up to $841-$843 million. The fourth-quarter outlook, however, points to further shrinkage: revenue of $208-$210 million, down about 4%, and ARR of roughly $812 million, a sequential decline. Revenue declines have widened from -0.3% in the first quarter to -1.5% in the second and roughly -3% in the third. Bears also have legitimate ammunition on margins and the 2027 outlook:

• Gross margin of 72.2% is expected to moderate as AWS and AI compute costs ramp.
• Product, engineering and AI investment will step up in 2027.
• The CFO declined to reaffirm the earlier framing of 2027 free-cash-flow growth and deferred all 2027 guidance.

The forward catalysts are real but mostly dated to next year. The first general-availability release of Autonomous SOC is targeted around RSAC 2027. Kenzo-powered capabilities are moving from acquisition to adoption, and Mel Stone now unifies services and Rapid7 Intelligence under an AI-first model. End-of-sale on standalone non-core cloud and AppSec products should clean up the mix over time, though it will add to near-term ARR attrition. The balance sheet is adequate for the $600 million convertible note due March 2027, with $731.6 million in cash and securities. Retiring the note with cash, as planned, will reduce interest income.

The market setup is more complicated than the surprise implies. Investor sentiment stayed negative and edged slightly lower, from -0.28 to -0.31, ahead of the report. The stock nonetheless entered earnings at $14.84, up 15.7% since the open after the prior report and 56% above its 200-day moving average. Shares had also already pulled back 20% from a 52-week high of $18.56 set on October 28, after rallying from a September low of $10.12. Price and AVWAP trends are positive while momentum has turned negative, consistent with a stock that rerated sharply and then cooled before the print.

The bottom line is that Rapid7 is executing well on the parts of the turnaround it controls, including costs, margins and cash. It has not yet proven the part investors ultimately pay for. Shrinking ARR, widening revenue declines, moderating gross margin and an absent 2027 outlook keep the burden of proof on management. As the CEO acknowledged, one quarter of stability is only a start.