Corey Thomas
Analyst · RBC Capital Markets. Your line is open
Good afternoon everyone and thank you for joining us today on our third quarter 2023 earnings call. Rapid7 ended the third quarter with $777 million in ARR or 14% over the prior year, while delivering revenue and operating income above our guided ranges. During the third quarter, we continued to see strong demand for integrated security operations solutions across our Insight platform. Our value proposition is resonating with mainstream enterprise customers, particularly with our consolidated offerings. Over 40% of new ARR in the third quarter was from either a threat or cloud risk complete deal, validating our strategic focus around supporting the modern or extended SOC with integrated best-of-breed capabilities across risk management and threat detection. As we sell more of our platform together, we see deal sizes getting larger as ASPs have steadily increased all year. Overall, we saw a customer spending environment that was in line with our expectations and remained stable during the third quarter and into October. Amid the worsening consequences for cybersecurity incidents and the persistent challenge of proactively securing IT environment in an efficient manner, we consistently hear a set of beans from conversations with customers. There is need for integrated cloud security offerings with InsightOps as well as a desire to upgrade to cloud-native detection response programs and automation and integrated expertise are often critical differentiators in choosing technology partners. While security team leaders are prioritizing spending around these areas, the budget environment remains complex. Consistent with the last 12 months, we continue to see higher levels of approval during extended procurement cycles. The good news is that our sellers have become more adept in navigating this environment and there is still urgency from customers on projects around cloud security and detection response, the anchors of our successful risk and threat management offerings. Our critical role as a strategic partner to SecOps team is reflected in the growing number of long-term commitments we're seeing from customers. Our total weighted average contract length in the quarter was up 20% over the prior year, which speaks to the value and confidence our customers have in Rapid7 as a long-term technology partner. Turning now to the restructuring we announced alongside our Q2 earnings results in August. Our efforts to streamline the business are mostly complete and we are progressing on our areas of strategic reinvestment. I am proud of how well our Rapid7 team has responded to the changes as we have worked to optimize our organization and underlying cost structure over the past few months. Collectively, our strategic alignment is benefiting profitability, as we expected, and we continue to expect the full year 2023 operating margin to expand over 750 basis points from the prior year and to generate free cash flows of approximately $80 million. Regarding our customers, we had an intentional focus during the latter half of the third quarter on ensuring continuity and strong overall customer experience as we executed our transition plan. Our customer-facing teams were heavily focused on spending more time engaging with and messaging to existing customers and prospects with less relative focus on scaling incremental pipeline. The result is that our changes were widely well received by customers, driving strong conversion rates that fueled solid overall ARR growth in the quarter. Now, that we are largely through these changes, our teams are incrementally more focused on engaging broadly to drive strong and improving pipeline momentum as we exit the year. And we believe we remain well positioned to achieve our fourth quarter objectives. Regarding reinvestment into our strategic areas of focus. We're accelerating our leadership in the extended side as well as further scaling our ability to offer expertise alongside our technology. While it's still early, we are progressing well in both areas, and I'll give you tangible examples of the positive traction we're seeing in the business. We continue to see strong demand for our integrated consolidation solutions to support the extended SOC and we continue to innovate by adding end-to-end capabilities to expand our value proposition to mainstream in the process. In October, we announced the general availability of multilayered endpoint protection for our managed detection and response customers. By offering integrated next-gen antivirus alongside digital forensics and incident response capabilities, onto our Insight agent, we are elevating the breadth and holistic visibility of our extended detection and response. We saw a meaningful gap in the market for customers with legacy endpoint solutions that are focused on affordable, highly effective solutions. Our expanded offerings will now enable these MGR customers to benefit from reduced endpoint security cost and complexity within their SOC, while freeing up additional budget dollars by consolidating onto our Insight platform. We also continue to see traction cross-selling across our integrated platform of solutions. A good example of this is in the third quarter was a deal with a midsized fintech company owned by a large private equity firm. This customer became a Rapid7 vulnerability management customer in 2022, and earlier this year, extended their enterprise risk visibility with our cloud security offering. They will start again in the third quarter to explore our managed threat complete offering after facing additional resource constraints and regulatory requirements. With transferred dollars that weren't part of their initial budget and after a competitive process, the customer chose Rapid7 for our ability to detect and respond to threats across their entire security environment and throughout each phase of the DNR life cycle. With our Insight agent already deployed, the customer is able to implement our robust monitoring capabilities within days of their purchase, allowing a quick return on their security budget dollars. Our ARR with the customer more than tripled to the high six figures over the course of 18 months, highlighting the urgency and the value resource-constrained enterprises place on best-in-suite solutions within strategic areas of security operations. We're also scaling our ability to offer integrated expertise alongside our SecOps solutions by accelerating our strategic managed services partnerships. I am pleased to announce that we signed a partnership deal in the third quarter with a nationwide leader in communication services, who chose Rapid7 technology as the foundation for their managed detection and response offering. It was a highly competitive process and our new partner needed a single provider to help their customers manage security across their entire network, endpoint server and cloud infrastructure while helping to contain and disrupt ongoing security breaches. This partnership will combine our best-in-class threat detection and response platform and global SOC presence to help small, medium and large enterprise customers better manage an ever-evolving and challenging cyber threat landscape. Over time, we'll have the opportunity to expand our partnership to sell other Rapid7 solutions to their substantial customer base. We're excited about this partnership and our ability to leverage similar partnerships in the future as we scale our ability to offer integrated expertise to more customers. Rapid7 remains focused on being the leading provider of integrated security solutions for the extended SOC by providing risk and threat management within the context of overall security, alongside expertise tailored to the needs of each customer. We are pleased with our third quarter results and continue to march forward towards our goals. When we updated our ARR guidance in August, alongside the announcement of our restructuring and strategic realignment, we established a high confidence range to account for modest degrees of disruption in the business. As we make progress, we've seen performance track within our range of expectations. Given larger deal cycles as well as the heavy concentration of large deals in the fourth quarter, we believe it is prudent to reiterate our full year ARR guidance of $800 million to $805 million. All-in-all, we are pleased with our third quarter results and the early progress we are making as we work to reaccelerate growth by reinvesting into strategic areas of strong customer demand within our business. We were able to outperform on our operating income target in the third quarter and to flow through that upside to our full year guidance range. This speaks to the benefit of our new streamlined cost structure, which will allow us to become a more profitable growth company. We expect to generate approximately $80 million of free cash flow this year and then double that figure to at least $160 million next year in 2024. With that, thank you for joining us on the call today. I will now turn the call over to our CFO, Tim Adams, to share additional detail on our financial results and outlook. Tim?