Q3 2025 Rapid7 Inc Earnings Call
Speaker #1: At this time , I would like to welcome you to the Q3 2025 rapid seven Earnings Call . All lines have been placed on mute to prevent any background noise .
Speaker #1: After the speakers remarks , there will be a question and answer session . If you would like to ask a question during this time , and if you have joined via the webinar , please use the raise Hand icon , which can be found at the bottom of your webinar application .
Speaker #1: At this time , I would like to turn the call over to Ryan Gardella , Investor Relations .
Speaker #2: Thank you . Operator , and good afternoon , everyone . We appreciate you joining us today to discuss Rapid7, Inc. third quarter 2020 Financial and operating results .
Speaker #2: In addition to our financial outlook for the fourth quarter and fiscal year 2025 . With me on the call today are Corey Thomas , our CEO and Tim Adams , our CFO .
Speaker #2: We have distributed our earnings press release over the wire , and it is now posted on our website at investors Rapid7, Inc. . Along with the updated company presentation and financial metrics file , this call is being broadcast live via webcast and following the call , an audio replay will be available at investors Rapid7, Inc. .
Speaker #2: During this call , we may make statements related to our business that are considered forward looking . Under federal securities laws . These statements are made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995 and include statements related to the company's financial guidance for the fourth quarter and full year 2025 , and the assumptions underlying such goals and guidance .
Speaker #2: These forward looking statements are based on our current expectations and beliefs , and on information currently available to us . Actual outcomes and results may differ materially from the future results expressed or implied in these statements .
Speaker #2: Due to the number of risks and uncertainties , including those contained in our most recent Quarterly Report on Form 10-q filed on August 8th , 2025 , and in subsequent reports that we file with the SEC .
Speaker #2: The information provided on this conference call should be considered in light of such risks . Actual results and the timing of certain events may differ materially from the results or timing predicted or implied by such forward looking statements , and a reported results should not be considered as an indication of future performance .
Speaker #2: Rapid7 does not assume any obligation to update the information presented on this conference call, except to the extent required by applicable law.
Speaker #2: Our commentary today will primarily be in non-GAAP terms and reconciliations between a historical GAAP and non-GAAP results can be found in today's earnings press release and on our website at investors Rapid7, Inc. .
Speaker #2: Com . At times in our prepared comments are responses to your questions we may offer incremental metrics to provide greater insight into the dynamics of our business or our quarterly results .
Speaker #2: Please be that this additional detail may be one time in nature , or we may or may not update these metrics in the future .
Speaker #2: With that , I'd like to turn the call over to our CEO , Corey Thomas Corey .
Speaker #3: Thank you . Ryan , and welcome to everyone joining us on the call today . Rapid7, Inc. ended the third quarter with $838 million in RR , growing 2% year over year .
Speaker #3: As we innovate on our AI powered SoC vision . But continue to see timing variability within our large scale pipeline . Revenue for the quarter was $218 million and operating income was
Speaker #3: $37 million , both ahead of our advised . We once again delivered strong free cash flow of $30 million generated in the quarter .
Speaker #3: The key message I want to leave you with today is Rapid7 has made and continues to make significant organizational changes to accelerate our go to market motion capture .
Speaker #3: The large opportunity in front of us in AI , SoC and position the company for accelerating top line growth . We have a leading franchise with a competitively strong set of capabilities that we continue to invest behind .
Speaker #3: We have alignment to move as quickly as possible across all dimensions of our organization to improve and capitalize on the opportunities in front of us .
Speaker #3: This includes several recent senior leadership changes , including our new Chief Commercial Officer , Alan Peters , who joined us in early September , and today's announcement of Ralph Brown as our next chief financial officer .
Speaker #3: Beginning in December . It also includes operational changes . Alan is beginning to implement in the fourth quarter to better align resources and incentives for growth in 2026 and beyond , particularly in our MDR business , which is more than half of our IRR and continues to grow double digits , but which is part of our business where we believe we can focus more resources to accelerate growth with attractive margins .
Speaker #3: I will discuss this in more detail in a bit . We are confident that we are making the right changes to accelerate Rapid7, Inc. , but we also acknowledge that we have fallen short of the guidance that we have provided to you in recent history and thus far this year , as we take action across the organization , we view it as imperative that we rebuild confidence in our guidance with the investment community .
Speaker #3: As such, with a new CEO and CFO and recognizing the operational changes, we are enacting may create higher near-term forecast variance.
Speaker #3: We are today reducing our 2025 AR target to reflect a higher confidence outlook . The new target is based on what we have experienced year to date , and now embeds a discount of the new business win benefits expected from PUE .
Speaker #3: Seasonal budget opportunities for the potential impact of the changes that I discussed . Based on our competitive product position and growth across our markets .
Speaker #3: All of us at Rapid7 believe we are capable of executing better . Let me tell you why and where we are investing in our organization to drive us forward .
Speaker #3: It is clear that customers are significantly involved in how they operate their Secops programs , seeking to integrate AI as they look to consolidate core elements of exposure and threat response in the SOC .
Speaker #3: We built Rapid7, Inc. command Platform , an AI powered security operation platform that unifies exposure management and threat detection response to enable quicker execution and accelerate remediation outcomes through deeper and more integrated situational awareness of risk and threats across customers .
Speaker #3: Attack surface . We're optimistic about our roadmap and strategy , yet we maintain a realistic view that these larger platform consolidation opportunities naturally lend themselves to longer , more competitive deal cycles .
Speaker #3: We have seen this affect quarterly deal timing and overall growth performance throughout the year , but the scale and quality of recent wins demonstrates strong market validation of our platform approach .
Speaker #3: And as we are seeing adoption from mainstream customers committing to an integrated solution . A great example of this was a competitive six figure win during the third quarter , with a large tier one public university .
Speaker #3: We were brought in to replace their disparate , multi-vendor tech stack across exposure management , SIM and managed detection response . The customer security team faced friction trying to leverage a fragmented toolset and legacy technologies while their initial exploration was around MDR , our holistic security operations offering , including full visibility and access to a market leading SIM coupled with unlimited IR and integrated vulnerability management and delivered via a global 24 by was a value proposition that no competitor could match .
Speaker #3: These types of deals highlight our leadership position, strong platform value, and our ability to write to seven SoC. We continue to win in our detection response business, which serves as a core growth driver of our company.
Speaker #3: This is a great validation of why Rapid7 is well positioned to help customers integrate leading AI capabilities and experiences into their SoC , while unifying their overall security operations .
Speaker #3: Tech stack . Through our Integrated Command Platform experience . With years of experience operating in a scaled global 24 by seven SoC , we have a significant advantage in proprietary data expertise .
Speaker #3: And as a result , Agentic AI capabilities . And we're taking deliberate steps to sharpen our go to market focus and execution . As we look ahead to 2026 , spearheaded by Allen as our reference .
Speaker #3: Although Allen has only been in the seat for a few weeks , he has already sharpened the discipline and operational focus around the execution as we aim to accelerate our position and market capture in our AI led DNR space .
Speaker #3: Looking ahead, as we'll discuss, we believe we have the product and capabilities to be one of the leading providers in this space. Accelerating our focus to enhance our operational alignment with faster revenue opportunities remains our top priority, and we're confident in our path forward.
Speaker #3: We're doing this through both focus product innovation as well as through deeper partnerships that enable us to more seamlessly extend the value of our customers existing ecosystems .
Speaker #3: A great example of this was our recent announcement of our expanding partnership with Microsoft to advance modern detection response by helping organizations simplify and strengthen their detection and response capabilities across their Microsoft environments .
Speaker #3: Rapid7, Inc. new MDR for Microsoft solution integrates a dedicated service with Microsoft Defender that provides comprehensive coverage across endpoints , cloud identity , and email .
Speaker #3: This new collaboration brings together Rapid7 SoC expertise with Microsoft Security ecosystem to simplify operations , strengthen protection , and unlock new value for customers by combining the power of Microsoft's advanced telemetry and analytics with the Rapid7 human led threat expertise and AI driven operations Organizations can gain faster , more precise detection and more contextually rich response playbooks to stop threats before they impact .
Speaker #3: Overall , our strategy is well aligned to what we're seeing in the market . Customers are increasingly prioritizing unified data collection and AI in the SoC to achieve better security outcomes than they can achieve with their existing fragmented tool sets .
Speaker #3: Security teams need platforms that deliver comprehensive attack surface visibility and threat context to enable efficient decision making and faster , more automated response to threats that are happening in their environment .
Speaker #3: Demand for integrated exposure and detection programs is growing , amplified . by regulatory pressures for compliance and reporting . These trends align directly with the broad SOC capabilities embedded in our command platform .
Speaker #3: Focused on expert guided AI , both for exposure remediation and threat response alongside automation and a strong return on investment . Our Head start from operating our own SOC for years positions us uniquely in this market .
Speaker #3: A great example of this ongoing convergence within customer environments was a six figure deal in the quarter , with an existing exposure management customer .
Speaker #3: This customer was looking to address detection gaps that they were experiencing within their existing program . The combination of our broader telemetry coverage demonstrated superior detections and a cost effective platform value proposition , all of which was fully integrated with their existing exposure management platform , drove this retail customer to displace their existing MDR vendor with Rapid7, Inc. managed threat Complete offering , our long term strategy remains centered on scaling our AI driven security operations command platform with increasing focus on accelerating our growth transition towards our scaled , market leading MDR position .
Speaker #3: As we look ahead to 2026 , the command platform integrates native telemetry , open data integration , curated intelligence , and automation into a unified system for risk remediation and threat response that rests on three core differentiators .
Speaker #3: First , our open platform with over 500 integrations addressing fragmented attack surface use . These integrations unify diverse data into a de-conflicted contextualized perspective , providing holistic environmental understanding .
Speaker #3: Second , our expert trained AI workflows draw from years of stock expertise , live playbooks , and real world feedback . These proprietary engines enhance outcomes in real time and are embedded in our MDR offering .
Speaker #3: Third , we drive automated , measurable progress , not just alerts , but actions from AI informed response to prioritizing misconfigurations and coordinating incidents .
Speaker #3: We reduce mean time to detect , respond and remediate our innovation across these areas . Fuels our unique position as a leading provider across both the exposure management and detection Response market demonstrated by the breadth of analyst recognition .
Speaker #3: We received within just the last quarter , including our seventh consecutive recognition in Gartner's Magic Quadrant for SIM , our position as a leader in Frost Radar for managed detection response .
Speaker #3: Our recognition and Forrester's Unified Vulnerability Management wave , and our leadership position in IDC's Marketscape for Exposure Management . Overall , our AI powered security operation platform that unifies exposure management and detection and response in a single customer experience is resonating with customers and industry analysts alike , and is a strong foundation to support improved execution .
Speaker #3: As we look ahead to 2026 , as we drive towards this unified , AI powered SoC vision , the integrated platform experience between our managed DNR and exposure management capability remains a key differentiator , delivering deeper visibility and contextual awareness around threats .
Speaker #3: We believe we're just scratching the surface here , and we continue to innovate , demonstrated most recently by our announcements of AI generated risk intelligence delivered through Rapid7, Inc. remediation Hub .
Speaker #3: This new AI driven risk and vulnerability intelligence will empower security teams to prioritize and remediate security threats faster and outcome that is core to our vision around unified exposure management in the SOC , a key pillar of our growth this year has been around our exposure expansion engine , which is anchored on transitioning our traditional VM customer base to this integrated , outcome focused exposure management model through exposure command .
Speaker #3: We continue to see steady increase in the upgrades and expansions of our core base of exposure command . In Q3 and looking ahead , Allen is keenly focused on improving our execution around this expansion engine .
Speaker #3: This is an area where we have fallen short of our goals this year . However , we view this as an execution shortcoming and we remain confident that delivering a single contextualized risk view across cloud and on prem environments with AI powered insights , and particularly in the context of managed detection and response program .
Speaker #3: When enable better risk prioritization and remediation , and ultimately deliver improved security outcomes in customer environments . Shifting now to an important and exciting leadership update , which we announced today , I am pleased to welcome our new Chief Financial Officer , Ralph Brown .
Speaker #3: Ralph is an outstanding leader with extensive executive leadership experience across multiple public companies , most recently at Mimecast , where he's initially served as Chief Financial Officer and then later as president and CEO .
Speaker #3: His track record of driving operational excellence , scaling growth and SaaS businesses , and building high performing teams makes him an exceptional addition to our leadership team .
Speaker #3: I'm thrilled to welcome Ralph to Rapid7, Inc. and look forward to his arrival later this year , and to continue work with him to drive our business forward .
Speaker #3: In closing , as we look ahead , we're confident that we have the right strategy and we are moving as fast as possible , including our recent leadership additions to position Rapid7 to improve our mid-term growth execution .
Speaker #3: We believe there are significant inherent value in our platform that is not fully reflected by the market at this time , and we're taking direct action to address this disconnect , manage detection response continues to fuel a strong growth opportunity for us and our differentiated command platform , rooted in automation , integration and expert guided AI is more relevant than ever .
Speaker #3: We're focused on continuing to innovate , execute efficiently , and position ourselves to deliver outcomes for our customers . Our shareholders , and our team .
Speaker #3: Thank you for joining us today . I appreciate your support , and I will now turn the call over to Tim to walk us through our financial results in more detail .
Speaker #4: Thank you , and good afternoon to everyone . We appreciate you taking the time to join us on today's call . Before I turn to the results , a quick reminder that except for revenue , all financial results , we will discuss today are non-GAAP financial measures .
Speaker #4: Unless otherwise stated . Additionally , reconciliations between our GAAP and non-GAAP results can be found in our earnings press release . Rapid7, Inc. ended the third quarter of 2025 with $838 million in IRR , representing a 2% increase year over year .
Speaker #4: Revenue and profitability were above our guided ranges and as in prior quarters , we continue to see promising signs for future growth in detection and response and progress in exposure .
Speaker #4: Command adoption . While in general , we've seen the customer spending environment challenged by additional scrutiny , particularly in large deals , we have been focused on enhancing our product capabilities to address a challenged threat environment driven by escalating AI enhanced threats and cloud migration demands .
Speaker #4: Turning to our financial results for the third quarter, year over year. IRR growth in the third quarter was driven predominantly by 2% in IRR per customer, and we ended the third quarter with over 11,600 customers globally and an average IRR per customer of over $72,000.
Speaker #4: Third quarter revenue of $218 million grew 2% year over year , and exceeded our guided range product subscription revenue also grew 2% year over year to $210 million .
Speaker #4: Professional services continued to decline year over year , consistent with our expectations and decision to de-emphasize certain lower margin services . International revenue represented 25% of total revenue and grew 8% over the prior year .
Speaker #4: On profitability measures , our product gross margin was 75% and total gross margin was 73% . Sales and marketing expenses were 33% of revenue , slightly above the prior year , at 31% .
Speaker #4: R&D and G&A expenses were 17% and 6% of revenue , respectively , compared to 16% and 6% in the prior year . Operating income for the third quarter was $37 million and above .
Speaker #4: Our guidance range , driven by natural leverage in the business as well as timing of spend . As we continue to focus on making targeted growth , investments and scaling our India Capability Center during the second half , adjusted EBITDA was 44 million in the quarter and non-GAAP net income per share was $0.57 .
Speaker #4: Shifting to our balance sheet and cash flow statement , we ended the third quarter with cash . Cash equivalents and investments of $635 million , compared to $600 million at the end of the second quarter .
Speaker #4: We generated free cash flow of $30 million in the third quarter , bringing our year to date free cash flow to $98 million .
Speaker #4: And we remain well on track to achieve our full year free cash flow targets . This brings us to our outlook for the remainder of the year , as Corey referenced , we believe we are well positioned to help customers and prospects integrate our leading AI capabilities and experiences into their SoC .
Speaker #4: As we look ahead at the same time , we are managing active change during the fourth quarter , both from a leadership perspective as well as we accelerate our focus in operational alignment toward our fastest growth opportunities .
Speaker #4: As we look ahead to 2026 , we have factored these dynamics fourth quarter IRR outlook , which now calls for RR to end Q4 approximately flat quarter over quarter .
Speaker #4: Turning to our other guidance metrics , we are tightening our full year revenue guidance range to 856 to $858 million , representing year over year revenue growth of 1 to 2% .
Speaker #4: Full year recurring product revenue growth will continue to outpace total revenue growth , partially offset by year over year declines in professional services .
Speaker #4: Moving to profitability , we are raising our full year operating income guidance to the upper half of our prior range , and now expect to deliver 130 to $135 million in operating income for the year , representing an operating margin of 15 to 16% .
Speaker #4: We continue to generate strong free cash flow in our reiterating our full year free cash flow target range of 125 to $135 million .
Speaker #4: Finally , we now expect non-GAAP net income per share for the full year of $2.02 to $2.09 , based on approximately 75.9 million diluted weighted average shares outstanding .
Speaker #4: Turning to fourth quarter guidance . We expect revenue in the range of 214 million to $216 million . We expect non-GAAP operating income of between 25 and $30 million , and non-GAAP net income per share of $0.37 to $0.44 , based on approximately 76.6 million diluted weighted average shares outstanding .
Speaker #4: In closing , I'd like to thank everyone for their support during my time as Rapid7, Inc. CFO , including our board , our investors and analysts , and most importantly , our team here at Rapid7 .
Speaker #4: I would also like to welcome Ralph Brown to the team and wish him the best . Thanks for everything and I look forward to continuing our relationships in the future .
Speaker #4: With that , I want to thank you for joining us on the call today , and I will now turn the call back to the operator to open the line for questions .
Speaker #5: We will now move to our question and answer session . If you have joined via the webinar , please use the Raise Hand icon , which can be found at the bottom of your webinar application .
Speaker #5: When you are called on , please unmute your line and ask question . We will .
Speaker #1: Now pause a moment to assemble the queue . Our first question will come from Rob Owens with Piper Sandler . Please unmute and ask a question .
Speaker #4: Great . Hopefully you can hear me . Thank you for .
Speaker #6: Taking my question . A couple for you . Corey , is the the business seems to shift towards MDR . Can you talk about the economic model ?
Speaker #6: And despite the success you're seeing here , it doesn't seem to be dragging on margins either . From a gross margin or operating margin standpoint .
Speaker #6: So, I would just love to understand that. And then I'll just ask the second one up front. Can you maybe parse for us the success that you're seeing internationally versus what you're seeing domestically, and just looking at the dispersion between those two growth rates?
Speaker #6: Thank you guys very much for the questions .
Speaker #3: Thank you so much , Robin . We can hear you just fine . So I think part of what you're getting is MDR .
Speaker #3: We run at a higher both gross margin and overall profitability than your average companies . And most of that is based on the fact that we've had to take our time .
Speaker #3: And frankly , gate some of the growth historically to really and market accessibility to make sure that we were building both first , the automation and now the AI capacity to actually map that in , which allows us to actually run it .
Speaker #3: We believe that we can actually run modern managed services at higher quality , better efficacy , and higher gross margins than you could in the last ten years .
Speaker #3: And we think AI is a big part of that story . We think AI is a big part of that story . And so it's something we've been .
Speaker #3: And as you recall , that's one of the big investments that we actually made this year . And we're well on the journey there .
Speaker #3: And we're delivering the economic output , which sets us up well to actually expand our addressability of how much we can actually grow that business , because now we can actually over half our business approach and half of our business , we can actually grow that profitably at scale , with more and more addressability .
Speaker #3: So we do think we have an incredibly strong economic model that sets up a great platform as we actually go forward . But we did actually gate it along the way to make sure that we were building up the automation and the core baseline technology to support a high quality , higher margin business .
Speaker #3: That was profitable over time . And that took time and deliberation . Their second question was .
Speaker #4: Yeah , Corey , I think his second question was the success we're seeing internationally . It's , you know , 25% of revenue growing faster than the business overall .
Speaker #4: So it's got a nice growth rate .
Speaker #3: Yeah . And I would remind you we've been putting more wood internationally from an investment perspective because we were historically a little bit lighter on the international percentage of business .
Speaker #3: We've been investing more . That said , is that one of the things that Allen's really focused on is aligning the sales processes across the business so that we can actually be more consistent , both across segments and regions around the country .
Speaker #3: And we look at the investment profile . And so we do think that we have plenty of opportunity in North America . And we actually think that sales has opportunities to expand and accelerate .
Speaker #3: There . And we still see a lot of growth that we have available for us as we actually go forward internationally . Thank you for the question , Rob .
Speaker #6: Thank you .
Speaker #7: Much .
Speaker #1: Your next question will come from Fatima Bulani with Citi .
Speaker #8: Oh good afternoon . Thank you so much for taking my questions . Corey . The question is for you . Just with respect to MDR , now , almost the majority of the business , but when I map that back to the flat IRR per customer growth , you've experienced sequentially , it is up 2% year on year .
Speaker #8: How can we not conclude that there are elements of pricing pressure and or pricing competition inside the MDR business as well ? And maybe what are you seeing that we aren't necessarily seeing ?
Speaker #8: Or is not ? Necessarily visible to the naked eye for us to give you that confidence because that's space generally is fairly competitive .
Speaker #8: And the AI SoC vision , there are a lot of vendors competing for the hearts and minds of the SoC . So just love your perspective on some of the pricing dynamics and what insulates you and why .
Speaker #8: It may not be visible to us . And I have a follow up . Please .
Speaker #3: Yeah , absolutely . So one , it's a very fair question . So MDR , just to be clear , we're still growing that business double digits .
Speaker #3: And we actually see plenty of capacity to continue to do that and grow that . So we do see that we are quite effective .
Speaker #3: There . Now . We have been gated historically about how much we want to grow . At once , because we had the gross margin concerns .
Speaker #3: And as we actually automate more and more of that business , we feel more and more comfortable unlocking that business , which is why you also see us talking about a little bit more , because we have on the competitive positioning , our competitive position is fairly straightforward .
Speaker #3: Is we are great for organizations that are actually looking to actually get leverage from outsourcing to an AI driven SoC that combines to both the best of technology and people .
Speaker #3: And so if you look at what we're doing today and what we've set up is we have an incredibly thriving practice around MDR that delivers high quality efficacy at scale and results in relatively high retention rates .
Speaker #3: You add on to that , we've extended that , and we're extending that to manage red teaming , managed risk . We have coming up and our value proposition is that for customers that want to scale and outsource the SoC at quality , and they still want to actually have targeted sort of like access to people and talent , where you're getting both the best of AI , but you also have access to people .
Speaker #3: We can do that economically better than anyone else , and we have , you know , we have both the scale and the experience to actually demonstrate that .
Speaker #3: So that's our core value proposition . And it's one that we're leaning into , and it's one that we're actually optimizing around . It's one that shows continued good growth opportunity .
Speaker #3: You said you had a second question .
Speaker #4: Go ahead . If you had another .
Speaker #1: Question .
Speaker #8: Oh , I appreciate that . Thank you . As we think about calendar 26 with the backdrop of , you know , what has been a year of work in progress in calendar 25 , you're layering on further operational changes .
Speaker #8: And , you know , new sales processes . So when we think about calendar 26 at a very high level , how should we internalize the growth versus profitability algorithm .
Speaker #8: And specifically around efficient reinvestments . And I know one of the mandates this past year also was leveraging the channel more . So how should we at a very high level , think about that algorithm , seeing that you outperformed on operating margin and cost control this year ?
Speaker #8: Thank you .
Speaker #3: Yeah , I actually think we have a we built a very a fairly efficient business . I think we can actually build off of that .
Speaker #3: And and continue that trend . Part of the reason that we're making the investments right now is because it's the right opportunity . Like if you look at what we're doing both in the MDR space , if you look at the position that we actually had in our recently announced partnership with Microsoft , where we have a big opportunity to actually help Microsoft customers really manage their security ecosystem in a more scalable way and meet the outsourcing needs that they actually have .
Speaker #3: This is the window that we could have actually either wait it to that right now to tee up for momentum next year . And we decided to actually that we had enough clear opportunity in front of us to actually pull the trigger now and actually move forward with some of the obvious changes that are really about how do we actually scale and rationalize our efforts as we move forward .
Speaker #4: Yeah . Corey , I would just say it , you know , we said earlier in the year that this is an investment year for us as we're building out the innovation center over in India , and that continues to ramp up .
Speaker #4: And you see it in the second half of the year with some of the expense load that we anticipate in Q4 . As we continue to ramp that business .
Speaker #4: But giving us leverage in the business over time .
Speaker #3: And the overall goal was always to actually make sure that we could actually scale profitability as we go forward in the next couple of years .
Speaker #3: Thank you very much for the questions .
Speaker #7: Thank you .
Speaker #1: Your next question will come from Matt Hedberg with RBC .
Speaker #9: Great . Thanks for taking my questions . Guys . Can you hear me ? Okay .
Speaker #3: Just fine .
Speaker #9: Okay . You know , so I guess maybe one for both of you guys . You know , you guys have noted some some timing variability with large deals and it seems like Allen is going to be working on some processes to improve that .
Speaker #9: I guess , you know , as you think about Q4 , can you talk about the large deal pipeline ? And , Tim , how have you sort of contemplated that in in your Q4 outlook ?
Speaker #3: You want to talk about him ?
Speaker #4: Yeah . So , Matt , it's a fair question . And I think Corey had it in his prepared comments that we really wanted to give you a high confidence outlook for Q4 as we come into the quarter .
Speaker #4: So we take a a very hard look at the pipeline , and we're looking at that all the time . As you might imagine , because that is your leading indicator .
Speaker #4: And you're looking at conversion rates , you're looking at cycle times of deals when they're in the pipeline . And Corey mentioned this earlier , that when you're looking at these platform conversions with customers , the great news is these are larger deals that we have .
Speaker #4: The opportunity to win . They do take more time for these deals to work themselves into a closed state .
Speaker #3: And then I would just say , if you're looking at how we actually factored it in , is that we didn't actually try to get over complicated .
Speaker #3: Look , I think that one we saw plenty of opportunities to actually go forward next year . So , you know , the question is always do you hold any sales or organization or any changes in Q4 ?
Speaker #3: You know , in for January ? And we said , listen , we actually think it's straightforward enough that we want to make sure that we're addressing the process , enabling other stuff .
Speaker #3: Now , the second thing that I would just emphasize when you when you think about it , is we acknowledge that there's a range of outcomes .
Speaker #3: I think this part you get to the probably the point that you're actually making , there's an absolute range of outcomes , but also we have not been extraordinarily precise on exactly where we land in those range of outcomes .
Speaker #3: And so , as Allen has come on board and Ray has come on board , we just decided to rebaseline and keep it relatively simple and say we have confidence that we can actually be here .
Speaker #3: We absolutely know that there's a range of outcomes around it, but we did not want to attempt to be overly precise as Allen was actually working through the model.
Speaker #1: Your next question will come from Mike Cikos with Needham .
Speaker #4: Hey guys , thanks .
Speaker #10: For taking the questions here , Corey . Just picking up on that last remark as it pertains to the Chief Commercial Officer , Allen Peters , can you just provide additional detail on what exactly he's doing with respect to that resource alignment behind the MDR opportunity ?
Speaker #10: And execution and transitioning the VM to exposure command ? We just love to get some more color there .
Speaker #3: Yeah . No . So one of them is we have a wide range of practices across . The one is just there's a focus , as you would expect on just standardizing the operating procedures .
Speaker #3: We have a lot of talent , but we do have we have variability across both reps and teams . And so we just want to align that to set up everyone for success .
Speaker #3: And so lots of just the foundations of how we set up people for success . The second thing that's the big thing is I talked about this earlier in the year is that this is our first big upgrade wave that we had in a long time .
Speaker #3: And operationalizing that , maturing that and making that effective is a big deal . We have that both on the VM to exposure management side .
Speaker #3: We also have the detection response side . We have probably the biggest setup for upgrade opportunities . And Allen's partnering with the sales teams and marketing teams about how you actually make sure that we have a well organized process to unlock it .
Speaker #3: And then the last , you know , the last aspect of is we do think that we can be unconstrained in our ability to actually deliver the full AI , managed SoC platform where we're delivering sort of like the AI centric managed both detection response risk and compliance workloads on that .
Speaker #3: Over time and how we actually tee that up and leverage that up . And focus the sales team around the highest converting opportunities is the last piece .
Speaker #3: So if you just think about the three , it's sort of like standardization really building and accelerating the engine around expansion , which we have the biggest upgrade opportunity .
Speaker #3: We we didn't fully tap it this year . I'll just say that . And then the third one is really focusing on the biggest opportunity around MDR and making sure our sales force is aligned around that .
Speaker #3: Thank you for the question .
Speaker #1: Your next question will come from Brian Essex with JP Morgan .
Speaker #9: Hi . Thanks for taking .
Speaker #11: My question . This is John on behalf of Brian . Yeah . So I guess I'm just curious to hear maybe , you know , what were the key criteria .
Speaker #11: In selecting Rafe . And you know , what are the top priorities or changes the team is most excited for him to drive .
Speaker #11: You know , when he joins in December . Thank you .
Speaker #3: Yeah. And we'll talk more about how he has some big shoes to fill with Tim, who I'll talk a little bit about more in the future.
Speaker #3: I mean , later on the call , one of the things that we were actually looking for is someone who could actually meet where we are is as we actually go forward , we are a AI services engine .
Speaker #3: And so we were looking for someone who could actually come in and bring not just the financial acumen , but we wanted someone that could bring the operational acumen as we actually to partner with our go to customers teams to actually , really scale our processes around how do we actually do land expand , how do we scale our pricing and packaging , how do we actually really drive the economic engine , particularly for growth ?
Speaker #3: You know , we've been investing and we're still we're still investing efficiently . Around you . But we have we're in a good place .
Speaker #3: We're in the right markets for growth , which is important more and more customers are looking to outsource more and more of their security workloads .
Speaker #3: We've set it up well , where as people are thinking about how they scale their security operations , we can do that across the text and response .
Speaker #3: We can actually do that across risk . We can do that across compliance . And so we're set up well today . We're tuning the product engine , of course , around that .
Speaker #3: But now it's really about how do we actually take that to market . How do we have the right pricing , packaging , the operations engine behind that .
Speaker #3: And we're looking for someone who has an operationally minded CFO who could really tie the sales and the business model , together with the product strategy to actually drive that sustained growth .
Speaker #3: And that's what we're looking for , and that's what we got in a great candidate with the .
Speaker #7: Right .
Speaker #1: Your next question will come from Eric Heath with KeyBanc.
Speaker #7: Hey .
Speaker #11: Can you hear .
Speaker #7: Me ?
Speaker #4: Yeah . Hey , Eric .
Speaker #7: Okay . Hey , hey . Hey , Tim . Thanks for taking the question , Corey . I wanted to ask on the same side of the business , which does seem to be going strong and even validated in the latest Gartner Magic Quadrant .
Speaker #7: Last month . But my question is to maybe understand the business a little bit more holistically . And how valuable the traditional VM piece is to the SIM MDR side of the business .
Speaker #7: And maybe the second part to that question is we did see another vendor announce the end of life of its on prem business .
Speaker #7: That was a reasonable portion of its overall business . And maybe how you're thinking about similarly bold options for less strategic parts of the business in order to focus on the growth side of the business that is doing well with it .
Speaker #7: That's MDR exposure command .
Speaker #3: Well , absolutely . And by the way , we've been on that journey already to rationalize the business . That's part of the growth dynamics that you see .
Speaker #3: And so while it wasn't a big lights on , lights off thing , we have been actually steadily moving and shifting the business as we think about it going forward .
Speaker #3: You know , I would just say it's pretty straightforward . We think about how the customers who actually look in scale of their operations want to align their their security , outsourcing needs .
Speaker #3: So we think about how do you actually build on top of the managed detection response offering to actually not just deliver managed detection and response ?
Speaker #3: How does that extend to managed risk , manage compliance and manage risk . So what we've been steadily doing over time is moving from the traditional on premise workloads to what we consider more strategic value added workloads that serves a large part of both the mid-market and the I would just say the resource constrained upper enterprise market that are focused on the service layer , not just the technology layer and not the on prem layer .
Speaker #3: So our primary focus is extending the MDR focus , and we've been at that shift for a study . While it's one of the things that we've been talking to you all about , we do feel like we're in the last sort of stages of that shift where we're continuing to accelerate .
Speaker #3: That's why we're retooling some of our sales focus to really align around everything's aligned around that AI managed experience that operates at the service layer , because more and more customers we see do want to actually take workload off of their teams and staff , and they're not able to actually add more and more people .
Speaker #7: Thanks , Corey .
Speaker #3: Thank you .
Speaker #1: Your next question will come from Joseph Gallo with Jefferies .
Speaker #12: Hey , guys . Thanks for the question . I know you have the large deal dynamics , but fundamentally , where does exposure management end ?
Speaker #12: MDR rank in terms of CISO budget priorities right now .
Speaker #3: MDR is actually one of the top 2 or 3 in every survey that we see now , there's ranges of MDR and a smaller and smaller number of customers are looking to actually manage the 24 by seven global SoC themselves .
Speaker #3: And so more and more looking to actually outsource and get leverage , which is why we see plenty of opportunity there . As I said before , the traditional on premise VM for the last call is less and less of a priority .
Speaker #3: But if you look at the modern exposure management , it is a it is a priority . And we've been rebuilding the , I would just say , updating capability around exposure management to tie that to MDR .
Speaker #3: And we see plenty of opportunities there . But that is the transition that we're making . I think the whole industry is making that from the legacy VM .
Speaker #3: We've been heavily focused on the MDR aspects , and then leveraging and extending the exposure management to the workloads there . But I would just say MDR is one of the top three budget spend priorities for most CSOs .
Speaker #1: Your next question will come from Greg Moskowitz with Mizuho .
Speaker #13: All right . Great . Thank you for taking the question . Interesting announcement with Microsoft . And I'm wondering if you could elaborate a bit on your expectations from this going forward .
Speaker #13: And is this purely a technology integration , or could there be a go to market aspect at some point as well ?
Speaker #3: Yeah , we're at the early stage of , I believe it's starting with a technology a deeper technology integration , but we've also been working heavily with the go to customer , their go to market teams .
Speaker #3: Their look , the issue is relatively short . Microsoft has a great technology stack . We've actually been building out our technology stack aligned with theirs .
Speaker #3: They have a large installed customer base . There's not a clear preferred sort of like top tier partner that's actually delivering high quality , efficient managed services on top of their stack .
Speaker #3: They're looking to build their partner portfolio . We're investing heavily behind that , but there's a lot of customers that have the defender ecosystem that we've now tuned , and we're announcing more and more technology integrations on it that we can actually manage their technology infrastructure integration , leveraging our technology stack , do it at scale and do it at great cost .
Speaker #3: Economics for our mutual customers . And so we see it as an incredibly strong growth opportunity as we go forward . We're in the very early stages , but we have been working with both their technology teams on a frequent basis , and their go to customer teams is picking up .
Speaker #1: Your next question will come from Junaid Siddiqui with Truist .
Speaker #14: Great . Thank you for taking my question . Corey . You've mentioned extended use cycles for some time now as your platform becomes more strategic , how comfortable are you getting with the visibility around the pipeline and close rates ?
Speaker #14: So to give you a better ability to forecast , thank you .
Speaker #3: Yeah , I think this and this is why I said , listen , we do have a range of outcomes this quarter as we go forward .
Speaker #3: One of Alan's top things is really to rationalize the process about how we manage the larger deal cycles . He's used to looking at these , and we have to really standardize the process .
Speaker #3: Look , we were somewhat we moved faster to competing in more of the strategic deals at larger ASPs , we were traditionally a mid-market focused lower .
Speaker #3: I would just say mid 40 K , 50 K ASP company . And that's changed relatively quickly over the last 18 months . And we're getting our handle around that .
Speaker #3: That's impacted both the accuracy of what we communicate from guidance . But we also have to upgrade our processes and our systems for how we actually manage that .
Speaker #3: And that's a clear mandate and a focus that Alan's working on .
Speaker #4: Yeah . And he has the experience doing that years of it . He's just a season leader .
Speaker #3: Yeah . So I actually think that that'll be not a problem as we go into next year . But that's also why we didn't want to actually sort of like have Q4 be a distraction around it because he's only been in a little over a month and we did not want to have more precision than was warranted .
Speaker #1: Your next question will come from Joshua Tilton with Wolfe Research .
Speaker #15: Hey , guys . Thanks for thanks for sneaking me in . Can you hear me ?
Speaker #4: Yeah .
Speaker #3: Josh .
Speaker #15: Great . Totally understand the decision to put some incremental conservatism in the guidance for IRR for this year . I guess I'm trying to understand outside of that conservatism , what is the underlying momentum of the business .
Speaker #15: So my question is , you know , assuming you don't see any disruptions right from these one off dynamics , are you still on track to hit the IRR guidance that we had coming into this quarter ?
Speaker #15: Are you running below that prior IRR guidance that you gave ? How do I understand what you're guiding to from an underlying momentum of the business ?
Speaker #15: Does that make sense ?
Speaker #3: Yeah , it does make sense . It does make sense . We're not going to give you two guidances . Just to be clear .
Speaker #3: But what I will say is I'll get to your core thing is that we still have the same I would just say pipeline that we expected to have in , you know , within a couple of points .
Speaker #3: And I won't be overly precise there , but we still have the same pipeline . What's really changing is that we're not actually attempting to be overly precise about how much of that pipeline lands in a specific time frame .
Speaker #3: So what we wanted to give you was a a just an AR guide . When Tim said roughly flat , it was just like a we know we can hit that we're going to move forward .
Speaker #3: We'll tell you what it is and where it lands . Sort of like in Q1 . I know that's not great . I just want to be clear about I know that's not great , but it's also the right thing to do , especially as we have a new CFO and a new CC0 to actually let us get a clean baseline .
Speaker #3: And then we'll reestablish the cadence that we actually all want to have next year .
Speaker #1: Your next question will come from Zach Schneider with Baird .
Speaker #16: Hey guys , this is Zach on for . Thanks for taking the question . So exposure command really feels like a big flagship bet for you guys .
Speaker #16: And I'd love to just hear more about what does the data really show today . Maybe our net new customers landing faster or larger with it .
Speaker #16: And then maybe what's the ASP uplift versus just legacy VM only ? And what's the true ramp timeline ? Thanks .
Speaker #3: Yeah there's there's two dynamics . One , we're actually focusing on again tying the exposure command into our overall services strategy with MBR , which is sort of like an early stages .
Speaker #3: The second is that yeah , we're actually very focused on the upgrade of because it aligns it around the overall MDR strategy , the upgrade of VM to exposure command .
Speaker #3: What we've seen so far is much , much larger deals in terms of ASPs . And when I say like larger , it's like , you know , like over double the ASPs that we were actually expecting .
Speaker #3: And so we've seen much , much larger deals at longer deal cycles than the smaller at bat upgrades . And that has not been .
Speaker #3: And we were really focused on the upgrades . Again , we have not focused a lot on landing new for exposure commands . So we focused just on the upgrades as the primary focus for this year , something that we talked about at the start of the year .
Speaker #3: And so we've not had the volume that we wanted to actually have on the conversions because the pipeline is of larger deals , even though we like the dollars of the pipeline , the size of the pipeline is larger and they're coming in slower .
Speaker #1: Your next question will come from Kingsley Crane with Canaccord Genuity .
Speaker #10: Hi .
Speaker #15: Thanks for . taking the question .
Speaker #10: I just want to double click again on the Microsoft integration as that scales . Just could you speak more to any near-term investment required to support that at the engineering or sales level ?
Speaker #10: And then do you have a sense of what portion of your customer base are already customers of both ? Rapid7 and Microsoft ? Thanks .
Speaker #3: Yeah , it's a little bit under half , but it's still substantial portion of our customer base . That is Microsoft . And frankly , we see a big opportunity to grow it .
Speaker #3: Like we look at this as a primarily a growth opportunity as we go forward . We've been working on the engineering for a while now .
Speaker #3: And so it's one of the investments that we when talked about , we wanted to invest in early this year . We're not done , by the way , just to be clear , we're not done .
Speaker #3: But we actually can do it within the resource outlook that we actually have available . So it's not incremental resources . It is the resources that we have on board .
Speaker #3: This is part of why we're taking the opportunity to refocus and retune and realign the sales engine , though , because it's not more salespeople .
Speaker #3: It is sort of like focusing on training and enabling our sales teams on the partnerships and the that we have in front of us , of which this is a substantial new one that provides net new opportunities .
Speaker #3: Our sales leadership team has been asking for this . It's been one of the priority areas . And so taking the time next year to make sure that we actually start next year with velocity and momentum is a big deal .
Speaker #3: So it's not more sales resources , but it is time and focus to align that engine . And we decided that we wanted to do that as soon as possible , not wait to Q1 , where if you wait to Q1 , you don't see the benefit to the back half of next year .
Speaker #1: Your next question will come from Rudy Kessinger with D.A. Davidson .
Speaker #12: Hey , great .
Speaker #17: Thanks for coming in here , guys . Could you just talk to us about gross churn and how that's trended throughout the year ?
Speaker #17: And your expectations for gross retention and gross churn going forward into '26?
Speaker #3: Yeah , it's a great question . Gross , gross turn has actually been exactly what we expected it to be based on our last set of calls .
Speaker #3: And so that's not been we've had a frankly , if you look at where the issue in the business , it's much more in the landing of new customer IRR and the deal cycles around that , then the churn .
Speaker #3: So what I would just say is we're expecting to see the continuing trends that we saw this year , which were very comfortable with as we go .
Speaker #3: Now , MDR are larger and more strategic . They tend to be longer deal cycles and deal terms . So as the business shift mix towards that , you do see a slightly upward tick on the gross churn dynamics in terms of improving meaning you see higher retention rates , but that's more based on mix shift than anything else on the type of business that MDR is .
Speaker #3: But the that's not been the big issue . This year thus far . The primary thing is just that we're under the new customer at RR and expansion RR that we expected .
Speaker #3: And so it's a great question . I did want to clarify that . That's good . To clarify .
Speaker #1: There are no more questions at this time . I'd now like to turn the call over to Corey Thomas for closing remarks .
Speaker #3: So thank you all for joining us on the call today . I wanted to take this time to thank Tim Adams , our CFO , for his outstanding service , for his time , for his partnership to both myself , the board and the leadership team .
Speaker #3: Tim , I want to thank you . I want to acknowledge it , since this will be your last call . But thank you so much for your time today .