Cybersecurity firm Rapid7 will eliminate approximately 310 positions, representing roughly 12% of its 2,613-person workforce, in a strategic pivot announced alongside its second-quarter earnings. The board greenlit the reduction plan on August 7, barely two months after new chief executive Wael Mohamed replaced 13-year veteran Corey Thomas, who moved into an executive chairman role. Mohamed is steering the company away from expanding its product lineup and toward concentrating on two core areas: detection and response capabilities, and exposure management.
The company posted second-quarter revenue of $210.9 million, representing a 1.5% year-over-year decline, but delivered adjusted earnings of 44 cents per share—well above the 35-cent Wall Street consensus. Annualized recurring revenue dropped 2% to $824 million, while free cash flow reached $31.9 million against a cash and equivalents balance of $702.6 million. The restructuring will carry a one-time cost of $10 million to $11 million, predominantly severance payments. On the strength of the cost reductions, Rapid7 lifted its full-year adjusted earnings per share forecast to a range of $1.78 to $1.83, with revenue guidance of $837 million to $841 million and operating income projected between $129 million and $133 million. Third-quarter revenue guidance of $208 million to $210 million suggests a 4% to 5% year-over-year contraction.
Mohamed framed the overhaul as a disciplined refocusing effort. "Rapid7 is a good company ready to be great, but getting there requires clear choices, strong execution and the discipline to focus on what matters most," he stated, adding that clients want the firm to deepen its expertise in detection and response and in exposure management rather than continue portfolio expansion. The announcement marks Rapid7's second major workforce reduction in three years, following an 18% cut in August 2023. The earnings release doesn't identify which product lines will be affected by the cuts, which teams will be preserved, what "deeper" capabilities in detection and response entail in practical roadmap terms, or how Thomas's executive chairman position will interact with Mohamed's strategic decisions.
The narrowed focus creates both competitive threats and opportunities across the cybersecurity market, according to the report. With overlap intensifying between SIEM, managed detection and response, vulnerability management, and exposure management in every renewal cycle, any product lines Rapid7 quietly deprioritizes could open doors for pure-play competitors in detection and response or exposure management. If Mohamed successfully executes the strategy, the leaner organization becomes either a more formidable rival in those two lanes or a more attractive acquisition candidate for a buyer seeking those specific capabilities. The elevated earnings outlook is being funded through severance rather than revenue expansion, as the third-quarter guidance already anticipates continued year-over-year declines. Companies relying on Rapid7 SKUs that fall outside the new strategic priorities may find themselves evaluating alternative vendors in upcoming renewal conversations. The strategic gamble is whether sacrificing breadth for depth will ultimately strengthen Rapid7's competitive position in an increasingly crowded and AI-enabled cybersecurity landscape.