Rapid7 loses four directors, adds Army cyber chief amid costly board reset

The filing is a material governance reset, not a routine director swap. Four directors resigned effective August 27, 2026, while two replacements join September 1 and the Lead Independent Director changes. With no external consensus benchmark for board composition, the relevant standing expectation was continuity; against that baseline, the abrupt turnover is disruptive. The company says the resignations were not caused by disagreements over operations, policies, or practices. 〔0〕

The incoming board adds meaningful cybersecurity and customer-facing experience. Maria Barrett brings more than 35 years of military leadership, including command of the U.S. Army’s cyber organizations, while Julian Waits moves from Chief Experience Officer to the board. Barrett’s background is directly relevant to Rapid7’s cybersecurity positioning. 〔1〕 Waits also provides internal continuity, but he will not serve on board committees, limiting his immediate governance role. 〔2〕

The turnover carries a real compensation cost and reduces the clean break. Rapid7 approved cash payments to each departing director through June 30, 2027 and accelerated vesting of their unvested director awards. 〔3〕 That makes the transition more expensive than a standard resignation, even though the filing does not quantify the total expense.

Waits’ move is structured as a prolonged transition rather than an immediate departure. He will remain Chief Experience Officer until a successor is appointed, then continue in a non-executive capacity through December 31, 2026, with six months of base salary and continued equity vesting subject to conditions. Net, the filing is mixed: the cyber credentials and internal continuity are constructive, but four simultaneous departures, committee changes, and accelerated compensation make this a significant execution and governance transition rather than an unambiguously positive refresh.