Rapid7 Announces Second Quarter 2018 Financial Results

• Revenue of $58.4 million under ASC 606
  
  
• Revenue growth of 30% year-over-year under ASC 605
  
  
• Annualized recurring revenue of $198.6 million, an increase of 44% year-over-year

BOSTON, Aug. 06, 2018 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD), powering SecOps through its visibility, analytics and automation cloud, today announced its financial results for the second quarter of 2018.

“Rapid7 had a great second quarter, with strong performance around the world and across our solutions,” said Corey Thomas, President and CEO of Rapid7.  “For the fourth quarter in a row, ARR growth accelerated, reaching 44%, driven by new customer growth, upsells and cross-sells, and the success of our shift towards recurring revenue.  As a result, we are raising our guidance for 2018 ARR growth to over 40%.”

“Rapid7’s cloud-based solutions that provide visibility, analytics and automation are powering SecOps and addressing the fastest growing markets in security. Our customers appreciate that our solutions are easy-to-install and easy-to-use, and they increasingly view these solutions as strategic to their success, as evidenced by increasing adoption of our cloud-based Insight platform.”

Second Quarter 2018 Financial Results (under ASC 606)

• Total revenue for the second quarter of 2018 was $58.4 million.
  
  
• For the second quarter of 2018, GAAP loss from operations was $(14.3) million and non-GAAP loss from operations was $(6.0) million.
  
  
• For the second quarter of 2018, GAAP net loss was $(14.3) million or a GAAP loss per share of $(0.31) and non-GAAP net loss was $(6.0) million or a non-GAAP net loss per share of $(0.13).
  
  
• Adjusted EBITDA was $(4.2) million in the second quarter of 2018.
  
  
• For the second quarter of 2018, total revenue from North America was $49.5 million and comprised 85% of total revenue. Total revenue from the rest of world was $8.9 million and comprised 15% of total revenue in the second quarter of 2018.
  
  
• Cash flow from operating activities was $(9.1) million for the second quarter of 2018, compared to $(4.0) for the second quarter of 2017. Cash flow from operating activities was $(1.8) million in the first six months of 2018, compared to $(0.7) million in the first six months of 2017.

Second Quarter 2018 Financial Results (under ASC 605)

• Total revenue for the second quarter of 2018 was $61.6 million, an increase of 30% year-over-year.
  
  
• For the second quarter of 2018, GAAP loss from operations was $(14.0) million, compared to GAAP loss from operations of $(11.9) million in the second quarter of 2017. For the second quarter of 2018, non-GAAP loss from operations was $(5.7) million, compared to non-GAAP loss from operations of $(6.2) million in the second quarter of 2017.
  
  
• For the second quarter of 2018, GAAP net loss was $(14.0) million or a GAAP loss per share of $(0.30), compared to a GAAP net loss of $(11.6) million or a GAAP loss per share of $(0.27) for the second quarter of 2017. For the second quarter of 2018, non-GAAP net loss was $(5.7) million or a non-GAAP net loss per share of $(0.12), compared to a non-GAAP net loss of $(5.9) million or a non-GAAP net loss per share of $(0.14) for the second quarter of 2017.
  
  
• Adjusted EBITDA was $(3.9) million in the second quarter of 2018, compared to adjusted EBITDA of $(5.0) million in the second quarter of 2017.
  
  
• For the second quarter of 2018, total revenue from North America increased 29% year-over-year to $52.0 million and comprised 84% of total revenue. Total revenue from the rest of the world increased 33% year-over-year to $9.6 million and comprised 16% of total revenue for the second quarter of 2018.

Recent Business Metrics and Highlights

• Annualized recurring revenue (ARR) for the second quarter of 2018 was $198.6 million, an increase of 44% year-over-year.
  
  
• Our renewal rate for the second quarter of 2018, which includes upsells and cross-sells of additional products and services, was 122%. The expiring renewal rate, which excludes upsells and cross-sells of additional products and services, was 89% in the second quarter of 2018.
  
  
• 79% (under ASC 606) and 77% (under ASC 605) of total revenue in the second quarter of 2018 was recurring revenue, which is comprised of content subscriptions, maintenance and support, cloud-based subscriptions, managed services subscriptions, and term licenses, up from 70% (under ASC 605) in the second quarter of 2017, an increase of 43% year-over-year.
  
  
• 83% (under ASC 606) and 87% (under ASC 605) of total revenue for the second quarter of 2018 came from deferred revenue on the balance sheet at the beginning of the quarter.
  
  
• Ended the second quarter of 2018 with over 7,200 customers, an increase of 10% year-over-year.
  
  
• Calculated billings were $63.9 million (under ASC 606) and $64.0 million (under ASC 605) for the second quarter of 2018, an increase of 6% year-over-year.   Growth in calculated billings was depressed by an anticipated decrease in weighted average contract lengths from 23 months to 17 months year-over-year as we shift the business towards recurring revenue, and a decrease in professional services growth.  During the transition to a more subscription-based model, we believe calculated billings will be a less meaningful metric for our operations.
  
  
• On May 14, 2018, we closed on a public offering of 3.0 million shares, all which were sold by certain existing stockholders. We did not receive any of the proceeds from the sale of shares by the selling stockholders.
  
  
• Rapid7 introduced Canada and Australia instances of our Security Analytics and Automation Platform. By expanding the platform’s global presence, Rapid7 will give customers in both countries, in addition to our other instances in North America, Europe, and Asia, the ability to better address data governance requirements and the flexibility to keep security data local.
  
  
• We announced integration between Rapid7’s Insight platform and Microsoft Azure. This integration provides modern vulnerability management, analytics-driven incident detection for hybrid environments, and simplified agent deployment within the Azure infrastructure. Rapid7 customers utilizing Azure now have, through InsightVM and InsightIDR, increased visibility into security vulnerability and attacks within their cloud and hybrid environments.
  
  
• Announced a new capability, Attacker Behavior Analytics (ABA), in our InsightIDR solution. Attacker Behavior Analytics are detections that reveal unknown variants of successful attacker techniques, and are continually crafted by Rapid7’s global security analysts and threat intelligence teams. With ABA, InsightIDR customers directly benefit from this stream of intelligence from Rapid7 SOCs, resulting in earlier attack chain detection and faster possible response to evolving attacks.
  
  
• Rapid7 won the Best Security Company Award at SC Awards Europe, based on “an extensive product and services portfolio with good customer service capability, research capability, and community involvement”.
  
  
• Our research team published several reports, including 2018 National Exposure Index Research Report: Internet Security Posture by Country; Rapid7 Quarterly Threat Report: 2018 Q1; and, Off the Chain! A Research Paper Observing Bitcoin Nodes on the Public Internet.
  
  
• Please see investors.rapid7.com for our Financial Metrics spreadsheet.
  
  
• For additional details on the reconciliation of non-GAAP measures to their nearest comparable GAAP measures, please refer to the accompanying financial data tables contained in this press release.

Third Quarter and Full-Year 2018 Guidance

Rapid7 anticipates total revenue, non-GAAP loss from operations, and non-GAAP net loss per share to be in the following ranges:

Guidance for the third quarter and full-year 2018 does not include any potential impact of foreign exchange gains or losses.

Non-GAAP guidance excludes estimates for stock-based compensation expense, amortization of acquired intangible assets, and certain non-recurring items. Rapid7 has provided a reconciliation of historical non-GAAP financial measures to the most comparable GAAP measures in the financial statement tables included in this press release. A reconciliation of non-GAAP guidance measures to the most comparable GAAP measures is not available on a forward-looking basis.

For the second quarter of 2018, we recognized revenue under ASC 606. For the second quarter of 2017, however, we recognized revenue under ASC 605. Therefore, the periods are not directly comparable. In addition, since we adopted ASC 606 using the modified retrospective method, we have presented in the table below, for the second quarter of 2018, a summary of certain consolidated financial statement line items impacted by the adoption of ASC 606 with a comparison of these line items to ASC 605.

Conference Call and Webcast Information

Rapid7 will host a conference call today, August 6, 2018, to discuss its results at 4:30 p.m. Eastern Time. The call will be accessible by telephone at 877-357-4230 (domestic) or 629-228-0721 (international). The call will also be available live via webcast on the Company’s website at https://investors.rapid7.com. A telephone replay of the conference call will be available at 855-859-2056 or 404-537-3406 (access code 4169935) until August 13, 2018. A webcast replay will be available at https://investors.rapid7.com.

About Rapid7

Rapid7 (NASDAQ:RPD) powers the practice of SecOps by delivering shared visibility, analytics, and automation so that security, IT, and Development teams can work together more effectively. The Rapid7 Insight platform empowers these teams to jointly manage and reduce risk, detect and contain attackers, and analyze and optimize operations. Rapid7 technology, services, and research drive vulnerability management, application security, incident detection and response (SIEM), orchestration and automation, and log management for more than 7,200 organizations across more than 120 countries, including 54% of the Fortune 100.  To learn more about Rapid7 or join our threat research, visit www.rapid7.com.

Non-GAAP Financial Measures and Other Business Metrics

To supplement our consolidated financial statements, which are prepared and presented in accordance with generally accepted accounting principles in the United States, or GAAP, we provide investors with certain non-GAAP financial measures and other business metrics, which we believe are helpful to our investors. We use these non-GAAP financial measures and other business metrics for financial and operational decision-making purposes and as a means to evaluate period-to-period comparisons. We also use certain non-GAAP financial measures as performance measures under our executive bonus plan. We believe that these non-GAAP financial measures and other business metrics provide useful information about our operating results, enhance the overall understanding of past financial performance and future prospects and allow for greater transparency with respect to metrics used by our management in its financial and operational decision-making. 

The presentation of non-GAAP financial information and other business metrics is not meant to be considered in isolation or as a substitute for the directly comparable financial measures prepared in accordance with GAAP.  While our non-GAAP financial measures and other business metrics are an important tool for financial and operational decision-making and for evaluating our own operating results over different periods of time, we urge investors to review the reconciliation of these financial measures to the comparable GAAP financial measures included below, and not to rely on any single financial measure to evaluate our business.

Adjusted EBITDA. We define adjusted EBITDA as net loss before (1) interest income (expense), net, (2) other income (expense), net, (3) provision for income taxes, (4) depreciation expense, (5) amortization of intangible assets, (6) stock-based compensation expense, and (7) certain non-recurring items.  We believe that the use of adjusted EBITDA is useful to investors and other users of our financial statements in evaluating our operating performance because it provides them with an additional tool to compare business performance across companies and across periods. Adjusted EBITDA should not be considered as a substitute for other measures of financial performance reported in accordance with GAAP. There are limitations to using this non-GAAP financial measure, including that other companies may calculate this measure differently than we do, that it does not reflect our capital expenditures or future requirements for capital expenditures and that it does not reflect changes in, or cash requirements for, our working capital and excludes some items that are cash based.

We also monitor operating measures of non-GAAP gross profit, non-GAAP operating loss, non-GAAP net loss and non-GAAP net loss per share.  These non-GAAP financial measures exclude the effect of stock-based compensation expense, amortization of acquired intangible assets, and certain non-recurring items such as acquisition-related expenses, secondary public offering costs and litigation-related expenses.  We believe that these non-GAAP financial measures provide useful information about our operating results, enhance the overall understanding of past financial performance and future prospects and allow for greater transparency with respect to metrics used by our management in its financial and operational decision-making. While our non-GAAP financial measures are an important tool for financial and operational decision-making and for evaluating our own operating results over different periods of time, you should review the reconciliation of our non-GAAP financial measures to the comparable GAAP financial measures included below, and not rely on any single financial measure to evaluate our business.

Annualized Recurring Revenue (ARR). ARR is a financial measure that we define as the annual value of all recurring revenue related contracts in place at the end of the quarter. ARR should be viewed independently of revenue and deferred revenue as ARR is a performance metric and is intended as a supplemental metric, not a replacement for these items.

Calculated Billings (non-GAAP). Calculated billings is a non-GAAP measure that we define as total revenue recognized in accordance with GAAP plus the change in deferred revenue from the beginning to the end of the period. Historically, we have considered calculated billings to be a useful metric for management and investors, as a supplement to the corresponding GAAP measure of total revenue, because billings drive deferred revenue, which is an important indicator of the health and visibility of trends in our business. With the expansion of our subscription, cloud-based product offerings (InsightVM, InsightIDR, InsightAppSec, and InsightOps) on the Insight platform, the shift of our other products to subscription pricing, and the shift of our sales compensation plans to Annualized Recurring Revenue, we believe calculated billings will be a less meaningful metric for our operations. Our use of calculated billings has limitations as an analytical tool and should not be considered in isolation or as a substitute for revenue recognition or revenue measurement, or an analysis of our results as reported under GAAP. Also, it is important to note that other companies, including companies in our industry, may not use calculated billings as a measure of their business, may calculate billings differently, may have different billing frequencies, or may use other financial measures to evaluate their performance, all of which could reduce the usefulness of calculated billings as a comparative measure.

While a reconciliation of non-GAAP guidance measures to corresponding GAAP measures is not available on a forward-looking basis as a result of the uncertainty regarding, and the potential variability of, many of these costs and expenses that we may incur in the future, we have provided a reconciliation of historical non-GAAP financial measures and other business metrics to the nearest comparable GAAP measures in the accompanying financial statement tables included in this press release.

Cautionary Language Concerning Forward-Looking Statements

This press release includes forward-looking statements. All statements contained in this press release other than statements of historical facts, including, without limitation, statements regarding demand for our product and service offerings, guidance for the third quarter and full-year 2018 and the potential benefits of the integration with Microsoft Azure and ABA, are forward-looking statements. The words “anticipate,” “believe,” “continue,” “estimate,” “expect,” “intend,” “may,” “will” and similar expressions are intended to identify forward-looking statements. We have based these forward-looking statements largely on our current expectations and projections about future events and financial trends that we believe may affect our financial condition, results of operations, business strategy, short-term and long-term business operations and objectives and financial needs. These forward-looking statements are subject to a number of risks and uncertainties, including, without limitation, risks related to our rapid growth and ability to sustain our revenue growth rate, the ability of our products and professional services to correctly detect vulnerabilities, competition in the markets in which we operate, market growth, our ability to innovate and manage our growth, our ability to operate in compliance with applicable laws as well as other risks and uncertainties set forth in the “Risk Factors” section of our Quarterly Report on Form 10-Q filed with the Securities and Exchange Commission for the quarter ended March 31, 2018 filed with the Securities and Exchange Commission on May 9, 2018, and subsequent reports that we file with the Securities and Exchange Commission.  Moreover, we operate in a very competitive and rapidly changing environment. New risks emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements we may make. In light of these risks, uncertainties and assumptions, we cannot guarantee future results, levels of activity, performance, achievements or events and circumstances reflected in the forward-looking statements will occur. We are under no duty to update any of these forward-looking statements after the date of this press release to conform these statements to actual results or revised expectations, except as required by law. You should, therefore, not rely on these forward-looking statements as representing our views as of any date subsequent to the date of this press release.

Investor contact:

Jeff Bray, CFA
Vice President, Investor Relations
investors@rapid7.com
(857) 990-4074

Press contact:

Caitlin Doherty
press@rapid7.com
(857) 990-4136

RAPID7, INC.
Consolidated Balance Sheets (Unaudited)
(in thousands)

RAPID7, INC.
Consolidated Statements of Operations (Unaudited)
(in thousands, except share and per share data)

RAPID7, INC.
Consolidated Statements of Cash Flows (Unaudited)
(in thousands)

RAPID7, INC.
GAAP to Non-GAAP Reconciliation (Unaudited)
(in thousands, except share and per share data)

RAPID7, INC.
Reconciliation of Total Revenue to Calculated Billings (Unaudited)
(in thousands)

Reconciliation of Net Loss to Adjusted EBITDA (Unaudited)
(in thousands)

RAPID7, INC.
Adjusted Opening Consolidated Balance Sheet Under ASC 606 (Unaudited)
(in thousands)