Rapid7 to cut 310 jobs, raise profit view under new CEO Mohamed

Rapid7 handed its new CEO a fresh mandate this month and he moved fast. In an earnings release covered by SiliconANGLE, the cybersecurity vendor said it will cut about 12% of its workforce, roughly 310 jobs on a base of 2,613, at a one-time cost of $10 million to $11 million, mostly severance. The board approved the plan on Aug. 7, roughly two months after Wael Mohamed took over from 13-year CEO Corey Thomas, who is now executive chairman.

The quarter itself was a beat, not a miss. Q2 revenue came in at $210.9 million, down 1.5% year-over-year, but adjusted earnings of 44 cents per share landed well ahead of the 35 cents analysts were looking for. Annualized recurring revenue slid 2% to $824 million, and free cash flow hit $31.9 million against a $702.6 million cash-and-equivalents pile. On the back of the cost cuts, the company raised its full-year adjusted EPS range to $1.78 to $1.83, with revenue guidance of $837 million to $841 million and operating income of $129 million to $133 million.

Mohamed's framing is a classic shrink-to-focus one. 'Rapid7 is a good company ready to be great, but getting there requires clear choices, strong execution and the discipline to focus on what matters most,' he said, adding that customers want the company to go deeper in detection and response and in exposure management rather than continue to broaden the portfolio. This is Rapid7's second major reduction in three years, after an 18% cut in August 2023, so 'ready to be great' is landing on a workforce that has been through this before.

The release stops short of a lot of things a strategic reader would want. It doesn't name which product lines the cuts hit or which teams get spared, doesn't detail what 'deeper' in detection and response means in roadmap terms, and doesn't spell out how Thomas's new executive chairman role will interact with Mohamed's strategy calls. The Q3 revenue guide of $208 million to $210 million already implies a 4-5% year-over-year decline, so the raised EPS view is being paid for with severance rather than growth.

For the rest of the security stack, the interesting question is who benefits. Cybersecurity has been one of the busiest categories in AI Weekly's cybersecurity coverage over the last three months, with 322 alerts in the last 90 days, including this week's Corma $60M seed for defensive cyber AI, and every renewal cycle now surfaces overlap between SIEM, MDR, vulnerability management and exposure management. If Rapid7 quietly deprioritizes a SKU you rely on, that is an opening for the detection-and-response and exposure-management pure-plays it now wants to compete with head-on. If Mohamed executes, the leaner Rapid7 becomes a sharper competitor in those two lanes, or a cleaner acquisition target for someone that wants them.