Is RPD a Buy or a Sell? The Bull and Bear Case (2026)
Last updated October 2026
Short answer
Both cases are real, which is why the question is contested. The bull case for Rapid7 (RPD) rests on Platform consolidation: Rapid7's Insight platform spans vulnerability management, detection and response, cloud security, and app security. The bear case rests on rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth. Analysts covering it publish targets from $8.76 to $15.00 against a $12.61 price, so even the professionals disagree by 53% of their own average. We do not give a verdict. What follows is each case at full strength, so you can decide which set of assumptions you actually believe. Walnut is not an investment adviser.
Rapid7 (RPD) is a cybersecurity company providing a cloud-based platform for security operations, vulnerability management, and threat detection. Its Insight platform spans several products: InsightVM for vulnerability management, InsightIDR for detection and response (SIEM and XDR), InsightCloudSec for cloud security posture, and application security testing. Increasingly, Rapid7 packages these into managed detection and response (MDR) services, where its analysts monitor customer environments around the clock, which appeals to mid-market companies that lack large in-house security teams. Rapid7 sells predominantly through subscriptions, so revenue is recurring and measured by annual recurring revenue (ARR). Its sweet spot is mid-size enterprises seeking consolidated, easier-to-operate security rather than assembling many point tools. Founded in 2000 and headquartered in Boston, Massachusetts, Rapid7 competes in a crowded, consolidating market where larger platforms are bundling vulnerability, SIEM, and cloud security together, putting a premium on its ability to show platform breadth and improving profitability. The financial picture in 2026 is one of a business that has stopped growing but still throws off cash. Trailing revenue is about $856 million, and quarterly revenue has slipped from about $218 million in Q3 2025 to about $211 million in Q2 2026, a year-over-year decline of roughly 1.5%. GAAP profit is thin, about $20 million over the trailing twelve months, yet free cash flow is about $133 million. Rapid7 has still beaten the EPS consensus in each of the last four quarters, including $0.44 against $0.35 in Q2 2026, and its August 2026 results filing also reported restructuring costs. The market has repriced the company sharply: its value has fallen to about $833 million, and over the past year the shares have traded between about $5 and $20. Q3 results are due November 4, 2026, with analysts looking for about $0.48 of EPS on revenue near $209 million.
The bull case: what would have to be true for $15.00
The most optimistic published target on RPD is $15.00, +19.0% from the $12.61 price as of October 2026. Getting there needs the following to work close to its best case, not merely to avoid going wrong.
1. Platform consolidation.
Rapid7's Insight platform spans vulnerability management, detection and response, cloud security, and app security. Mid-market customers increasingly want fewer vendors, and a unified platform lets Rapid7 cross-sell modules and lift revenue per customer through the classic land-and-expand SaaS motion.
2. Managed detection and response.
MDR, where Rapid7 analysts monitor customer environments around the clock, is a fast-growing offering that suits mid-size companies without large security teams. Bundling software with managed services deepens stickiness, raises ARR per account, and differentiates Rapid7 from pure-tooling vendors.
3. Vulnerability management core.
InsightVM is a recognized vulnerability-management product and a durable foundation. As attack surfaces expand across cloud and remote work, continuous vulnerability and exposure management remains a structural growth category that anchors customer relationships.
4. Margin improvement.
Rapid7 has been prioritizing profitability and free cash flow after years of growth-first spending, and its August 2026 results came with a restructuring disclosed in an SEC filing. Free cash flow of about $133 million over the trailing twelve months is large relative to a market value near $833 million, and gross margin holds near 69%. GAAP operating margin is only about 2%, so the question is whether cost cuts can widen it while revenue stabilizes.
The bear case: what would have to be true for $8.76
The most pessimistic published target is $8.76, -30.5% from the current price. That is not a floor and not a forecast; it is roughly what one analyst thinks Rapid7 is worth if the risks below bite instead of the drivers above.
Rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth. Revenue has turned slightly negative, and consensus expects 2026 revenue of about $839 million, below 2025's roughly $860 million, so the question is no longer deceleration but whether the top line can stabilize. Net retention and new-logo momentum can soften in tighter IT-budget environments. The balance sheet carries about $962 million of debt against about $703 million of cash, which matters more for a company worth about $833 million. 2026 SEC filings also show restructuring and multiple leadership or board changes, which add execution risk. As a small-cap in a momentum-driven sector, Rapid7 is volatile: its shares have ranged from about $5 to $20 over the past year.
The bear case deserves the same attention as the bull case, and usually gets less. If you are holding RPD already, the question is not whether these risks exist but whether any of them has moved from possible to actually happening in the reported numbers.
Where analysts land on RPD
21 analysts cover RPD, with an average target of $11.81 (-6.3% against $12.61) and a split of 2 buy, 17 hold, 6 sell. Bear in mind sell-side ratings skew positive across the whole market, so that split is not a balanced vote. The full target table, the recent rating actions by firm, and how the consensus has shifted are on the RPD forecast and price target page.
How is RPD valued? (as of October 2026)
Snapshot for RPD as of October 2026, sourced from Yahoo Finance and may be delayed. Valuation figures move with price and earnings; verify the current numbers with your broker before deciding.
- Revenue (TTM): ~$856 million
- Revenue growth: ~-1.5% YoY (Q2 2026)
- Q2 2026 EPS vs estimate: $0.44 vs ~$0.35 (non-GAAP)
- Gross / operating margin: ~69% / ~2% (GAAP)
- Free cash flow (TTM): ~$133 million
- P/E ratio: ~40x trailing GAAP, ~6x forward
- Market cap / price to sales: ~$833 million / ~1x
- Dividend yield: None
Rapid7 now trades at about 1x sales and roughly 6x forward earnings, far below security peers, because revenue has stopped growing and GAAP profit is thin. The gap between a 40x trailing GAAP multiple and a 6x forward multiple comes from the difference between GAAP earnings and the adjusted EPS analysts forecast. Twenty-one analysts rate it a hold on average with a mean target near $11.81, and Q3 results arrive November 4, 2026.
How do you decide if RPD is a buy?
Rather than asking whether RPD is a buy in the abstract, it tends to help to answer four questions:
- Thesis: do you believe the bull case above, and is it still true today?
- Time horizon: a single stock can be volatile, so a longer horizon absorbs more of the swings.
- Position sizing: a thesis can be right and the sizing still wrong; decide how much of your portfolio one name should be.
- Overlap: check whether you already hold RPD indirectly through an index or sector ETF before adding more.
What would change your mind on RPD
Write the tripwires down before you need them. Deciding what would falsify your view is far harder once a position is moving against you.
- Bull case breaks if: Platform consolidation stalls in the reported numbers rather than in the narrative around them.
- Bear case breaks if: rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth fails to materialise over several reporting periods while the drivers keep compounding.
- Neither matters if: the position has grown large enough that being wrong would damage the whole portfolio. Sizing overrides the argument.
For the full picture, see the RPD stock guide (what the company does, the ETFs that hold it, similar stocks, and the themes it fits). In Walnut you can ask its AI about RPD against your real portfolio and see your actual exposure before deciding.
Investing in Rapid7 with AI
Connect the broker you already use and ask Walnut's AI how RPD fits what you actually hold: whether you own it already through a fund, what it would do to your concentration, and how it has tracked the S&P 500. Read-only by default, and you approve anything before it reaches your broker.
FAQ
Is RPD a good stock to buy right now?
+
That depends on which case you find more convincing, and both are on this page. The bull case rests on Platform consolidation, with revenue (ttm) at ~$856 million. The bear case rests on rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth. Analysts covering it are spread from $8.76 to $15.00, which is itself a signal that this is genuinely contested. If you believe the thesis, the real questions become sizing and overlap rather than timing. Walnut is not an investment adviser and this is not a recommendation.
Should I sell RPD?
+
Nobody can answer that for you, and the honest version of the question is narrower: has anything changed in the reason you bought it? The bear case on this page is the place to check. Rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth. If that risk is what you were worried about and it is now playing out, that is a real signal. If the price simply fell while the thesis held, that is a different situation entirely. The most pessimistic published target is $8.76, -30.5% from the $12.61 price, which is one analyst's downside case rather than a floor. Walnut is not an investment adviser.
What is the bull case for RPD?
+
Platform consolidation. Rapid7's Insight platform spans vulnerability management, detection and response, cloud security, and app security. The most optimistic analyst target on RPD is $15.00, +19.0% from the $12.61 price. That figure is only reachable if this thesis works close to its best case.
What is the bear case for RPD?
+
Rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth. Revenue has turned slightly negative, and consensus expects 2026 revenue of about $839 million, below 2025's roughly $860 million, so the question is no longer deceleration but whether the top line can stabilize. Net retention and new-logo momentum can soften in tighter IT-budget environments. The balance sheet carries about $962 million of debt against about $703 million of cash, which matters more for a company worth about $833 million. 2026 SEC filings also show restructuring and multiple leadership or board changes, which add execution risk. As a small-cap in a momentum-driven sector, Rapid7 is volatile: its shares have ranged from about $5 to $20 over the past year. The most pessimistic published target is $8.76, -30.5% from the current price, which is roughly what the stock is worth if these risks bite rather than the drivers.
What does Rapid7 do?
+
Cybersecurity platform spanning vulnerability management, detection-and-response, and managed services for mid-market customers.
What would have to change for RPD to stop being worth holding?
+
Decide that in advance, because it is far harder to think clearly once a position is moving against you. The concrete tripwires here: the driver behind the bull case (Platform consolidation) stalling in the reported numbers rather than in the narrative, the risk above (rapid7 competes against larger, better-capitalized platforms (CrowdStrike, Palo Alto Networks, Microsoft, Tenable, Qualys) that bundle overlapping vulnerability, SIEM, and cloud-security capabilities, pressuring pricing and growth) turning from a possibility into a reported fact, or the position growing large enough that a bad outcome would matter to your whole portfolio regardless of who is right.
What is RPD's ticker symbol?
+
RPD, listed on Nasdaq. Officially Rapid7, Inc. Founded 2000, headquartered in Boston, Massachusetts. Publicly traded since 2015. It trades during US market hours and is available at every major US brokerage. It is now a small-cap cybersecurity name, worth about $833 million as of October 2026.
What does Rapid7 do?
+
Rapid7 provides cloud-based cybersecurity through its Insight platform, covering vulnerability management (InsightVM), detection and response (InsightIDR), cloud security (InsightCloudSec), and application security. It increasingly packages these with managed detection and response services, where its analysts monitor customer environments around the clock.
Who are Rapid7's main competitors?
+
By segment. Vulnerability management: Tenable, Qualys, and Microsoft. Detection and response: CrowdStrike, Palo Alto Networks, Microsoft Sentinel, and Splunk. Cloud security: Wiz, Palo Alto Networks (Prisma Cloud), CrowdStrike, and Microsoft. Larger platforms bundling these capabilities are the main strategic threat.
Walnut is informational, not investment advice, and gives no verdict on RPD. Analyst targets referenced here come from a October 2026 pull of published third-party research and change constantly. Verify current figures with your broker before acting on them.