CyberArk Software Q3 2023 Earnings Call Transcript

Quartr
Provided by Quartr
November 2, 2023

There are 14 speakers on the call.

Operator

Welcome to the CyberArk Earnings Conference Call. All lines have been placed on mute to prevent any background noise. After the speakers' remarks, there will be a question and answer session. I I'll now turn the conference over to Erica Smith, SVP, Investor Relations and ESG. Please go ahead.

Speaker 1

Thank you, JL. Good morning. Thank you for joining us today to review CyberArk's Q3 2023 financial results. With me on the call today are Matt Cohen, our Chief Executive Officer and Josh Siebel, our Chief Financial Officer. After prepared remarks, we will open the call up Before we begin, let me remind you that certain statements made on the call today may be considered forward looking statements, which reflect management's best judgment based on currently available information.

Speaker 1

I refer specifically to the discussion of our expectations and beliefs regarding our projected results of operations for the Q4, full year 2023 and beyond. Our actual results might differ materially from those projected in these forward looking statements. I direct your attention to the risk factors contained in the company's annual report on Form 20 F filed with the U. S. Securities and Exchange Commission And those referenced in today's press release that are posted to CyberArk's website.

Speaker 1

CyberArk expressly disclaims any application or undertaking to release publicly Any updates or revisions to any forward looking statements made today. Additionally, non GAAP financial measures will be discussed on this conference call. Reconciliations to the most directly comparable GAAP financial measures are also available in today's press release as well as in an updated investor presentation that outlines the financial discussion in today's call. A webcast of today's call is available on our website in the Investor Relations section. With that, I'd like to turn the call over to our CEO, Matt Cohen.

Speaker 1

Matt?

Speaker 2

Thanks, Erica, and thanks, everyone, for joining the call today. I want to start off by saying our hearts go out to Israel and the global Israeli community as they navigate through this incredibly difficult time. The atrocities committed by Hamas in Israel are horrific, and as an organization, we condemn these barbaric acts. The health and safety of our team continues to be our top priority. We are providing all of our employees with the flexibility required to care for their well-being, for their families and for their communities.

Speaker 2

The resiliency and spirit of our team Has been nothing short of remarkable. The outreach and support from our customers, our partners And the Wall Street community has helped us all through the last few weeks, and we greatly appreciate it. Moving into the quarter. We had one of the best quarters in the company's history. We saw a significant step up in demand for our platform.

Speaker 2

Our go to market teams continue to deliver and identity security remains a top priority for global CISOs. In the Q3, our bookings growth accelerated and total bookings significantly outpaced Our guidance framework. Demand surged across our platform, resulting in stellar results that beat our guidance across the board. Subscription ARR reached $504,000,000 growing 68% year over year. Total ARR reached $705,000,000 growing 38%.

Speaker 2

We added a robust $52,000,000 in net new ARR And we exceeded our guidance range across revenue, operating income and EPS, with total revenue Accelerating to 25 percent growth, reaching $191,000,000 Non GAAP operating income Came in at approximately $17,000,000 and we generated non GAAP earnings per share of $0.42 Throughout the year, our team has personified excellence and execution, and we have navigated the macroeconomic landscape exceptionally well. While uncertainty persisted in the Q3, we experienced a firming of the macro environment compared to the last few quarters. Our execution was even stronger in Q3 as seen in our meaningful top and bottom line outperformance And the significant step up in our ARR guidance for the full year 2023. Our close rates improved and we had strong conversion of our record pipeline. While we didn't see any outside deals in the Q3, there was a healthy increase in 7 figure ACV contracts as customers are more than willing to allocate significant portions of their cybersecurity budgets to our mission critical solutions.

Speaker 2

In addition to strong execution across our go to market and product development teams, we continue to benefit from robust Secular tailwinds that are becoming even stronger. The exponential growth of identities, cloud migration and the elevated threat landscape Are all contributing to the momentum in our business. One thing remains constant in cybersecurity incidents. All roads in the attack chain lead to identity. The MGM incident is one of the most recent examples of identity and privileged Being leveraged to move laterally regardless of environment and how attackers can inflict devastating damage, including a complete shutdown of an organization.

Speaker 2

As identities across the enterprise become more powerful, cybersecurity leaders recognize that to be secure, All identities need the right level of privilege controls. Organizations are also grappling with how to assign privileges and provision access to provide each identity with the right level of security at the right time. We are the only company with an identity security platform that can offer our customers the flexibility to provide standing access, just in time access or 0 standing privileges. Depending on the type of identity and the nature of the targets they need to access. What differentiates our platform even further Is that we can do this across hybrid and cloud native environments.

Speaker 2

Based on our truly differentiated capabilities, our platform selling motion Continues to gain traction and all our solutions are being adopted by customers at an accelerated pace, driving strong growth. This includes PAM, which despite having a much bigger base, is still one of our fastest growing areas. Equally exciting, customers today understand that EDR is not enough and they need endpoint privilege manager to lock down every endpoint with the least privileged approach. Our access solutions remain both an expansion and landing opportunity. ConjurCloud and SecretsHub are leading a SaaS first strategy for our secrets management business and equally exciting, the early momentum we are seeing With secure cloud access remains very strong and opens up an entirely new group of identities for CyberArk within the developer community.

Speaker 2

We have an all star lineup making up our portfolio. We are empowering our customers throughout their digital transformation journeys by securing access to their cloud environments and protecting their developer communities and the applications they are building, all without getting in the way of innovation. Ensuring every identity across the workforce is truly secure, sets us apart and is helping us achieve these strong results. Digging into some of the key deals in the quarter. The threat landscape is driving customers to adopt our robust Identity security platform and has pushed CyberArk into the top competitive position.

Speaker 2

We had a strong new business quarter and signed about 230 new logos, with customers increasingly landing with 2 or more solutions. A few great wins from the quarter included ProDesk, an international government agency recognizing the mission critical nature of Identity Security and went deep with CyberArk from the start, Landing with PAM, EPM, Access and Secrets in a 7 figure deal. A manufacturing company landed with PAM, VendorPAM and Access, our platform capabilities were a key differentiator over competing identity vendors. Influence from both an advisory firm and a channel partner demonstrates the powerful combination of our platform and partner network in this great new logo win. Glasgow Caledonian University was looking for a modernization and upgrade of their identity stack, Driven by a need for stronger security controls, recognizing the need to look at identities holistically, they brought CyberArk's security first mindset onboard broadly adopting privileged cloud, identity, workforce password manager and secure web sessions.

Speaker 2

The velocity of our business is picking up as customers achieve faster time to value with our SaaS solutions. One thing I want to drive home Is that our expansion business is coming both from our new solutions as well as expanding PAM within our existing customers. The land and expand motion is built into our model and its success is represented by the 33% increase in customers with more than $100,000 in annual recurring revenue to 1585 customers at the end of Q3. We're seeing even faster growth in the larger cohort of customers with over 500,000 ARR. A few examples of expansion deals include a long term CyberArkPAM customer in Financial Services Needed an additional layer of security for its broader workforce.

Speaker 2

This quarter, they added CyberArk Identity, Secure Web Sessions and Workforce Password Manager, Taking the first step into our SaaS capabilities with discussions already underway to go deeper across the platform. We had a great quarter for our Secrets Management business. In a 7 figure ACV deal, a Fortune 500 Financial Services company who added Seqrest Management for the first time for a subsidiary in the end of 2022 is now deploying CyberArk as the Facto provider for all its data centers globally. This is another example of CyberArk serving as the secrets backbone for the enterprise. With the recent uptick in high profile breach activity, EPM remains a must have.

Speaker 2

Adding to its existing CyberArk Portfolio in a 7 figure ACV add on deal, this Fortune 100 retailer was looking to deploy EPM across all its workstations and servers, allowing consistent policy adoption. Removing local admin rights and running in lease privilege at the endpoint delivered measurable risk reduction across the enterprise. We continue to see great alignment and momentum in other channel partners and partnerships providing new valuable routes to market that allow us to extend our footprint even more effectively and reach new customer segments. The number of certifications and unique certified partners continue to show healthy growth across PAM, Access and Secrets Management. The partner community is a big part of our growth and we are thrilled with the depth of our relationships.

Speaker 2

And while MSPs are still a small percentage of our business Momentum is continuing to pick up. Our MSPs deals are on average about 50% larger in size than traditional channel deals with a faster sales cycle. In the Q3, a Nordic MSP doubled the number of PAM And workforce password manager users after our initial purchase in March. Their managed service operations have expanded significantly as they build out their identity security offering. Results like this are becoming commonplace and our MSP pipeline continues to see strong growth.

Speaker 2

Moving on to innovation. In early September, we launched our artificial intelligence center of excellence. The center builds on our long track record of using artificial intelligence and machine learning to fortify and expand generative AI and ML capabilities across our Identity Security platform. We are harnessing these capabilities to drive risk analysis and risk reduction, Threat detection to simplify the user experience through automation and optimize policy to be more effective and boost productivity. AI is also being weaponized by attackers, which is increasing the severity of the threat landscape.

Speaker 2

The CyberArk Labs team was founded on the principle of thinking like an attacker and is providing ongoing research on how generative AI is driving attacker innovation. The Labs team is working closely with the Center of Excellence and together they are fighting attacker innovation with innovation of our own to more effectively secure our global customers. In early October, we announced new risk based controls for identities in the cloud, strengthening our secure cloud access solution. These enhanced capabilities enable just in time access with 0 standing privilege to a diverse set of cloud services that sit behind The cloud management consoles for all cloud service providers. These services run-in multi cloud environments with no added friction to the user experience.

Speaker 2

While many other vendors focus on visibility in the cloud, no other vendor can bring privileged controls to the cloud like CyberArk can. We were excited once again to be named a leader for PAM by 2 major industry analysts, including In the Forrester Wave for Privileged Identity Management, our Identity Security platform received the top score in the current offering category And the highest possible score in 16 criteria, including least privilege access, just in time access, development and DevOps support, Threat Detection and Response, Innovation and Partner Ecosystem. As you have heard from us for a while now, The investment in our Identity security platform has dramatically increased our ability to innovate and bring new integrated services to market at an even faster rate, while driving down our overall cost of development. The threat landscape is evolving quickly, but we are well positioned to live our mission of securing our customers around the world against cyber threats with constant innovation and security first solutions. Switching gears to profitability.

Speaker 2

The effects of our subscription transition are entering its final phase. Our top line growth is accelerating And our outperformance in Q3 shows the inherent operating leverage in our business. We are marching towards our goal of returning to a rule of 40 company or even beyond. We are striking the right balance between investing in growth and innovation and driving profitability. In addition, the final piece of the transition is cash flow, which we expect to expand in 2024.

Speaker 2

With our stellar performance in the quarter, I remain very confident in the long term targets we outlined earlier in the year. To sum up my discussion today, we posted a stellar quarter with our business accelerating. Our industry leading platform drove strong new and add on business. We offer a must have layer of security that is truly differentiated in the market. Our competitive position has never been stronger And you are seeing the momentum in our business.

Speaker 2

We are the only vendor in the market today who has a full identity security platform, one that can apply the right level of controls over any identity regardless of environment. I'll now turn the call over to Josh, We will discuss our outperformance in more detail and how the significant increase in our full year revenue, operating income and ARR Guidance demonstrates the confidence in our execution and the durability of the demand environment. Josh?

Speaker 3

Thanks, Matt. We posted outstanding results in the Q3 and beat our guidance across all metrics. Our bookings outperformance compared to our guidance Framework for the Q3 resulted in top line revenue growth accelerating to 25% coming in at a record 1 $191,200,000 We were particularly pleased with our results because of our subscription bookings mix in the 3rd quarter was 97%. That's higher than our guidance framework of 95% evidence that the booking strength was even more impressive than the top line outperformance. Our business continues to be driven by upsell, cross sell and new logos landing with a bigger piece of our identity security platform.

Speaker 3

ARR demonstrates the momentum in our business and reached $705,000,000 at September 30, growing 38%. The subscription portion increased 68% and reached $504,000,000 The strong $53,000,000 in net new Subscription ARR shows the step up in demand for identity security platform as customers increasingly move to protect all identities with intelligent privilege controls. The maintenance portion of ARR was just over $200,000,000 at September 30. Strong renewal rates persisted in the Q3, and we were able to capture price increases resulting in a relatively flat maintenance ARR compared to the Q2. Like for like, conversion activity still only represents a single digit percent of our year on year ARR growth.

Speaker 3

Moving into the details of the revenue lines for the Q3. Subscription revenue reached 122 $900,000 with growth accelerating to 65% year on year and representing 64% of total revenue in the 3rd quarter. Perpetual license revenue came in at $4,100,000 Our maintenance and professional services revenue was $64,300,000 Of that, dollars 51,500,000 came from recurring maintenance. The consistent maintenance revenue is because of our strong renewal rates And the uplift in prices we are capturing for our mission, critical software, professional services and professional services revenue was $12,800,000 in the Q3. Recurring revenue reached $174,400,000 and is now 91% of total revenue Compared to 84% in the Q3 last year, demonstrating the subscription engine we have built, recurring revenue growth accelerated to 36% year on year.

Speaker 3

Geographically, the business continues to be well diversified. The Americas revenue reached $112,400,000 Growing 20% year on year, APJ grew by 21% to $18,700,000 and EMEA grew by 38% year on year to 60 $1,000,000 in revenue. One thing to note is that every one of our major territories had a subscription mix of over 94%. All line items of the P and L will be discussed on a non GAAP basis. Please see the full GAAP to non GAAP reconciliation in the tables of our press release.

Speaker 3

Our Q3 gross profit was $158,200,000 or 83% gross margin, consistent with the Q3 last year. Our operating income of $16,900,000 far exceeded the top end of our guidance. We are pleased that our commitment to The profitability and leverage is now paying off. Sequentially, our operating expenses declined from the Q2 of 2023, Primarily because of our impact customer conference. As a reminder, in 2022, we hosted our impact customer event in the 3rd quarter And it fell in the Q2 of this year.

Speaker 3

That's affecting the year on year comparison in addition to the sequential. Net income came in at $19,600,000 or $0.42 per diluted share, also significantly outperforming our guidance. For the 1st 9 months of 2023, free cash flow was $5,100,000 or 1% free cash flow margin. We ended September with approximately 3,000 employees worldwide, including 13.20 in sales and marketing. Turning to our guidance.

Speaker 3

For the Q4 and the full year 2023, our guidance reflects our strong execution and durable demand while still balanced against the continued uncertainty in the broader environment. For the Q4 of 2023, we expect total revenue of $206,500,000 to $211,500,000 which represents 24% year on year growth at the midpoint. We expect the subscription mix to be about 95%, and we expect non GAAP operating income in the range of $19,000,000 to $23,000,000 for the 4th quarter, And we expect our non GAAP EPS to range from $0.41 to $0.50 per diluted share. Our guidance also assumes 47,100,000 weighted average diluted shares and about $11,600,000 in taxes. For the full year of 2023, we are raising our guidance for total revenue to be in the range of 735 to $740,000,000 that's representing 25% growth year on year at the midpoint of the range and an acceleration from the 18% in 2022.

Speaker 3

We are significantly raising our profitability outlook and now expect our full year operating income to be in the range of $17,700,000 to $21,700,000 We expect our EPS range to be $0.72 to $0.82 to $0.80 per diluted share, and we expect about $46,500,000 weighted average diluted shares and about $32,000,000 in taxes for the full year of 2023. Now that we are in the Q4, we wanted to frame up the cash flow guardrails, which translate to a range of $33,000,000 to $38,000,000 for the full year 2023. We are also significantly raising our guidance for the annual recurring revenue by about $15,000,000 to now be between $758,000,000 $768,000,000 at this December 31, 2023, or about 34% year on year growth at the midpoint of the range. Overall, we were thrilled with another quarter of strong execution and see a step up in momentum and demand for our solutions and platform. Recurring revenue is now the lion's share of our business and its acceleration this quarter Demonstrates that demand for our platform is building.

Speaker 3

At the same time, we are driving leverage in our model, resulting in our significantly improved profitability and cash flow. Now I want to take a moment and echo Matt's sentiment in that we are fully supporting everyone affected by the horrific attacks on Israel. We are grateful for those bravely serving Israel, and our thoughts and prayers are with them. Before moving on to the Q and A, I also wanted to address some of the questions we have been getting about our operations in Israel And the employees who are being called to military duty. Organizationally, about 1,000 employees or 30% of our total team is based in Israel, With the biggest group being in R and D and product management and then HR, finance, IT and legal teams.

Speaker 3

At this time, just under 3% of our global employees have been called up into the reserves. As a global company, business continuity has always been foundational to our strategy, and we are moving the business forward even in these unprecedented times. We remain confident in our ability to hit our short and long term goals. Our team has been incredible, And I'm proud of what they are accomplishing together as we navigate this challenging time. We all stand united in support of our Israeli employees around the world, and we will emerge stronger as an organization and a community.

Speaker 3

I will now turn the call over to the operator for Q and A. Operator?

Operator

Thank you. Your first question comes from the line of Saket Kalia of Barclays. Your line is open.

Speaker 4

Okay, great. Hey, Matt. Hey, Josh. Thanks for taking my questions here. Great to see the momentum and also wanted to echo those thoughts there, Josh, to from all your employees in Israel as

Speaker 2

well. Thank you, Saket. Thank you. Thank you.

Speaker 4

For sure. Matt, maybe just to start with you, a lot of great stuff to talk about, but maybe we can touch on maybe some of the recent events in the identity space broadly. Specifically, I'd love to touch on whether you think the MGM Caesars breach is driving maybe additional interest in PAM broadly. And whether you think some of the vulnerabilities for other identity players are maybe driving interest in CyberArk's broader identity platform. Does that make

Speaker 2

sense? It does. And I think it's a key element actually of Our continued performance and our continued results, like when we think about kind of the threat landscape today and we'll talk generally to begin with, We said it in the prepared remarks, all roads lead towards identity. When you start to digest or dissect some of these breaches themselves, You start to see that they all start kind of with a profiling and understanding a phishing attack that Goes after weakness in an employee, maybe it's MFA fatigue, maybe it's tricking a help desk. And ultimately, organizations see quite quickly that MFA, multi factor authentication, is not enough.

Speaker 2

When you track the pathways that then are occurring in these Breaches, ultimately you see the lateral movement to a privileged account and then the privileged account being exploited, which allows The data infiltration and the ability to be able to recap it within an organization. This is actually not New news. When you track any major breach of the last decade, it comes back to the need to be able to protect Every identity within an organization, human or non human and apply the right level of privilege controls and organizations that just stop at basic security controls Are not really secure in this day and age. And so I think when you look at our results, you see CISOs who have understood this not because of A recent breach, but understood it for years, getting more support from their C suite, from their boards as they understand the dire consequences of not implementing a broader identity security strategy. Now we see it obviously in customer breaches, we see it In breaches that have occurred throughout the industry, the identity industry, they all actually have the similar foundation, which is we need to make sure that the privilege controls are placed against all identities.

Speaker 2

And I think our customers understand that we're the only company out there that's able to bring a security first identity security story that they can trust and trust to be able to consolidate their Offering onto the CyberArk platform.

Speaker 4

Got it. Got it. That makes a lot of sense. Josh, maybe my follow-up for you. It's great to see the maintenance ARR hold in with I think you called out strong retention and price increases as well.

Speaker 4

The question is, how do you think about maintenance ARR going forward just tactically, but also strategically, when do you think these customers maybe start to

Speaker 3

Yes. Thanks, Saket. So when we think about Q4, I mean, we think about A decline in the maintenance ARR probably in the mid single digits going and that would kind of give us about just over a $10,000,000 type of a decline in the last for the 12 month period. And I think as we see it kind of playing out into 2024, I think that we'll probably see as Right now, we're above the in already Q3, we're 98%. We're looking at kind of just in the 95% plus range For the full year this year in terms of SaaS and subscription.

Speaker 3

So already next year, it will be above that. So really, the perpetual business It's really evaporating for next year. So we should expect to see, I would call, a larger decline compared Compared to the low double digits this year, but not a fall off, just kind of continuing to increase the number. And I think the strategy is we're really focused on doing what's right for the customer and what's right and best for the customer. And so Clearly, as customers are part of the cloud journey for moving their PAM and their identity security to the cloud, We are absolutely part of that program.

Speaker 3

And then we also are as the customer wants to Upgrade and or update their current hosted environment, we're there, but we're not necessarily forcing a change to move it. But we do anticipate it growing because the perpetual business is evaporating. And over time, more and more customers will be moving to the SaaS environment and we'll be there for that.

Operator

Thank you. Your next question comes from the line of Rob Owens of Piper Sandler. Your line is open.

Speaker 5

Thank you, guys. And we'd like to Echo our thoughts relative to your employees and the people of Israel, tough situation. Wanted to drill down Josh a little bit and just one question from me into the free cash flow guide. I realized that there was Puts and takes with previous guide around duration of maintenance contracts, but it looks like some of that previous guidance of that net income margin Fred, relative to free cash flow aren't necessarily going to hold. So can you unpack that for us and help us get to an understanding of Free cash flow for this year and where it's coming in?

Speaker 5

And then any thoughts relative to how that might accelerate next year in terms of that spread?

Speaker 3

Yes. Thanks, Rob. So actually, I think when we looked at the 3rd quarter free cash flow, it was in line with our expectations. And we basically and Matt alluded to it in his prepared remarks, when we think about cash flow, it's kind of the last Piece of the transition coming out going from perpetual to SaaS and subscription. We really hit first on The revenue acceleration in the transition, and then it moved, as you started to see during this year, into the operating income, and we'll see more of that expansion going into next year.

Speaker 3

And when we think about cash flow, it's the 3rd piece of the puzzle. And it's really because When we're thinking about that transition, we're dropping down from a perpetual cell, which also comes with A maintenance 1 or multiple year contract that's all paid upfront now going to either a SaaS or subscription contract, which is being typically paid in a 1 year contract upfront. So we are starting to we started to See the beginning pieces of it this year, but we see the real inflection as we go through the full renewals And we are able to enjoy the SaaS subscription play instead of without the perpetual, We'll start to see the compare really go strong in next year and 2024 and 2025 and confident about the numbers that we've set out in our long term targets.

Speaker 2

And then just to add, just to emphasize, I think we set out guardrails that came And basically our guidance, which is cash flow in line with our net income margin Is where we see it kind of playing out. So on the lower end of the guardrails, but within those guardrails for the rest of this year. And then just want to reiterate what Josh said, which is we see an inflection point going into next year, and we're extremely confident in the cash flow targets that we put out there

Operator

Your next question comes from the line of Roger Boyd of UBS. Your line is open.

Speaker 5

Great. Congrats on the quarter and again echo thoughts Your employees and everybody in Israel. I wonder if you could talk about new logos. I think, apologies if I missed, I don't think I heard a new logo But I think for the past few quarters, you've talked about the fact that it's a tougher environment for that, but that the customer you are landing are landing bigger with the platform. It clearly sounds like that was the case in 3Q, but love any thoughts on how you're thinking about new logo contribution as maybe around the corner into next year?

Speaker 2

Yes, sure. So I think we did mention it, but I'll mention it again, which is we did about 230 new logos in the quarter That is basically flat year over year. And as we've talked about, I think we're pretty actually excited by that number. We're continuing to be able to land new customers. It's remember, we're primarily serving either the enterprise or the upper end of the mid market.

Speaker 2

And we've been able to successfully continue to land customers with PAM. Increasingly with more than one product, 2 or more, we've landed customers this quarter with EPM And with access, and we see that business for us as really a great feeder system for our future growth, giving our land and expand motion. I will also emphasize and I think you hinted at it in the call, we continue to see that the deal size of our new logos It's increasing dramatically and we actually are, up well above our growth rate in terms of the overall size of the contribution of those new logos from a booking perspective. So We think this is a healthy new logo quarter in this environment. Certainly, it does have a little bit of a slower close rate because of the macros.

Speaker 2

But we're excited by the performance in the queue.

Operator

Your next question comes from the line of Hamzah Fodderwala of Morgan Stanley. Your line is open.

Speaker 6

Hey, everyone. Good morning. And I also want to extend my All your families, friends in Israel. Josh, I hope to see you there next year.

Speaker 3

Look forward to it.

Speaker 6

Yes. Matt, maybe a question for you on a more high level. CISOs are dealing With a lot going into next year, you've got rising threat environment, you've got these new SEC rules, Now they can be held personally liable for breaches. I'm curious, as customers think about their budgets for next year, What are you hearing from them? What is the priority level?

Speaker 6

And what are the main concerns from CISOs right now, whether it be related to identity security or just more broadly?

Speaker 2

Yes. Hamzah, I think you capture it well. The job of a CISO is not an easy job. I spend a lot of my time with them And they're stressed, impressed beyond belief as they try to figure out how to counter All of the factors that you described, both from the threat environment and from the regulations. I think when we talk And we're having, again, really genuine transparent conversations.

Speaker 2

They're trying to understand as always, What are the priorities that are going to have the most amount of impact on risk? And they could do 800 things. They could do everything that you could imagine, but they have to boil it down to the programs and projects that are going to make sure that they can answer to their Board why they're more risk reduced this year than the year before and so on. And when they look at that, they really do inherently understand this concept that all roads lead to identity. And so everything they're thinking about is about locking down their overall posture around identity, identity security.

Speaker 2

Now You can do EDR on the endpoint to make sure that you're able to detect and respond to things that are coming in from the outside. And that's still a priority for our CSOs and for our customers. But when they're thinking about what can have the biggest Impact, what can reduce risk the most, it's really their identity projects, which is why we see ourselves be prioritized And why as CECL's look towards their next year's budgets and we have those budget conversations obviously already started, They're prioritizing our spend into their overall budget plan and we're talking with them about their roadmap, not just for the quarter we're in, but For the year or 2 years ahead and it is a journey to lock down identities and cover all identities human and non human to cover both on prem and in the cloud. And so we see a roadmap that materializes over an 18, 24 month period that allows us to continually work with these customers to help protect them and secure them. And so it is actually a great bidirectional conversation that we're having, and we feel like we're at the top of the list.

Operator

Your next question comes from the line of Ittai Kidron of Oppenheimer. Your line is open.

Speaker 7

Thanks and echo everyone's comments. Our thoughts are with you. Matt, Josh had a couple of questions. Matt to you. On the go to market side, Where is your priority right now?

Speaker 7

Expansion with existing customers given the massive growth Folio and what do you have to offer or going after new customers? Clearly, Everyone would have had would want to have another 100 salespeople running around. But given what you have, how are you reorienting In your sales force right now, what is the priority? And for you, Josh, on the financial side, I want to go back to Saket's comments. Clearly, you've done a very good job in keeping up maintenance and the price increases are clearly helping.

Speaker 7

But we're now getting into right the 3 year mark of the real big shift in subscription. And so I'm kind of wondering if there There's a cohort of large customers that were on 3 or perhaps even 5 year contracts with you that are now coming for renewal. Is there a risk that they not a risk, but is there a possibility that they shift to the cloud in a way that creates Significant step downs in maintenance as they shift from one tool to another. Help me understand That transition, why should we keep thinking that maintenance will just keep on slowly gliding down rather than have big step downs? Sorry for the long question.

Speaker 2

No, no. It's good questions. And again, thanks for the support. On the go to market side, I think the answer is both. And let me now Dig into that a little bit.

Speaker 2

So we believe that the sales team is incredibly well equipped to do the upsell and cross sell motion. We have deep Relationships with our customers, we have the conversations that I was describing in the prior answer. And so our sales team is really empowered to focus most of their Feed on the street motion to the cross sell and up sell motion. At the same time, we've invested heavily in our marketing organization In both the demand gen programs, the brand campaigns, the ability to be able to ramp up more SDRs, sales You go generate the new logos and actually set up the meetings, get them qualified before we hand them over to the sales force. Then we get a sales Team involved and obviously they can help participate in moving it through the pipe.

Speaker 2

So we've kind of set up this really strong engine where everybody knows their role. Marketing is primarily focused on making sure we drive new logos, building the pipeline for the future, making sure 2024 and 2025 are to be incredibly successful. And the sales team is out there leveraging their relationships to drive upsell and cross sell. And then there's a third dynamic here on the go to market perspective, which is our partner organization, which mirrors us in that respect. And so by driving up our relationships with the advisory firms, With the MSP providers, with our traditional reselling partners, they're out there in the market helping to Push not only PAM, which is what we would have said 2 years ago, but the entire Identity security story.

Speaker 2

And by that, we get exponential feet on the street who can drive our go to market motion. And so all of that together is really how we're focused. We continue to layer in capacity to make sure we have enough direct sales capacity. We continue to layer in investment in certification and ramping up partners, and we spend money in marketing. And together, that's what's driving our go to market engine itself.

Speaker 3

And Ittai, as it relates again to the maintenance, so absolutely, we believe 2024 will be a larger number than what we've in reduction in 2023. But we think it's not going to be like Like a huge step down, and we're seeing that because conversion still today are only, as we talked about earlier In the prepared remarks, there's still only a single digit percentage of our ARR growth. We also have obviously good view on our pipeline for where conversions are going and certainly in the next for the next 2 to 3 quarters. And we feel that, yes, we are going to have more conversions and we have less perpetual. So that's why It's going to increase over 2023.

Speaker 3

But the good news about CyberArk, and you've been following us for a long time, is that We actually are not a large deal dependent type company. We do a lot of we have a lot of large transactions, but we're very diversified Across the world, across verticals, across deal sizes. And so we don't see necessarily The floor dropping off on maintenance. And by the way, to the extent that it's as a result of moving to SaaS, that's Actually, still good for the business. So, SaaS dollars and SaaS Deployments would be excellent for the business even as it moves more and more in that direction.

Speaker 3

So I think overall, We'll come back in February with maybe a tighter view on where we see 2024. But at this point, we're kind of seeing it along the lines We've seen in 2023 with a slight with a continued increase

Speaker 2

On an annual basis for 2024. And just one add for me on top of what Josh said, which was strong and accurate was Is this idea of what are we actually going to do with this base of maintenance paying customers? And Josh mentioned it, which is When we convert them, great, we get this really nice uplift, 3x uplift and they're expanding their footprint and they're buying more stuff. So I don't really want to force them through a forced migration if they're not ready because I don't want to really miss out on that uplift. But a second really important point Is it those customers who are still sitting on perpetual assets for their PAM solution are buying Our newer solutions in a SaaS motion.

Speaker 2

So it's not stopping those customers from expanding their footprint with CyberArk with SaaS solutions. It probably if that wasn't the case, we push them a little bit harder. But since the cross sell and up sell can still happen into that base with our greatest SaaS products, I'm happy to leave them there until they're ready to move.

Operator

Your next question comes from the line of Brian Essex of JPMorgan, your line is open.

Speaker 8

Hi, good morning and thanks for taking the question. And I'd also like to echo my support for your friends and colleagues in Israel. It's great to see the strong net new ARR growth as well as a large deal momentum, but maybe to follow-up on the question that was just asked. Could you touch a bit on the mix of term and SaaS in subscription ARR? And then strategically, as we track your progress towards your calendar 'twenty seven goals.

Speaker 8

Are you seeing traction and opportunity down market as SaaS continues to gain traction on your platform? Or is SaaS going to be Continue to be more of a, I guess, larger enterprise opportunity with the ability to drive easier and more cost effective adoption.

Speaker 2

Yes. Thanks, Brian, and thanks for the support. I think when we think about the SaaS term based license Our subscription mix, it continues to be about 2 thirds, 1 third. That's kind of held up throughout the transition. So I don't think we see a major shift in that at the moment.

Speaker 2

Obviously, as more and more of the pure new product sell, the SaaS number will tick up, but it's 2 thirds, 1 third is good for For modeling purposes, in terms of our ability to go down market, it's very clear when we go down market That is a SaaS sell. In fact, the SaaS mix there would be well over 80% on SaaS offering actually probably a little higher than that when we're selling down market. So we lead with SaaS. Customers only want SaaS when we're going down into what we call our Corporate market, which is customers that are about $500,000,000 to $1,500,000,000 in annual revenue, that's our down market. And for that market, they're adopting SaaS solutions.

Speaker 2

And we love it because it's a quick adoption And then a quick ability to be able to expand them over time.

Operator

Your next question comes from the line of John DiFucci of Guggenheim. Your line is open.

Speaker 9

I'm sorry. Thank you. This is John DiFucci for Ray McDonough. Matt and Josh, I don't normally try to repeat what everyone else is saying, but it's important to just express Our thoughts and prayers with your employees and the people of Israel. Guys, you continue to put up impressive top Momentum in an environment when frankly most aren't even in the security segment.

Speaker 9

And we really appreciate the bottom line discipline. But I have a question sort of following up Itay's question on go to market and it's something you might not have much control over. Are there any general trends worth noting for the second half of this year? For instance, we're generally hearing about Security budgets coming into the end of 2023. It's for a good reason because people have spent a lot on security throughout 2023.

Speaker 9

I guess, are you hearing this at all? And if so, are you seeing any deals that might be getting pushed out into 2024 At the end of the year or is budget getting pulled into 'twenty three from 'twenty four to satisfy current security needs? Thanks.

Speaker 2

Thanks. And again, thanks for the support. We really do appreciate it. So listen, I think when we look at our Go to market environment, we continue to see actually strengthening. And we've talked about a strong environment for us to be able Execute our ability to execute throughout the whole year.

Speaker 2

And you heard me mention that in Q3, we saw it become even better for us. I think we talk about in two lights. One is better for us in terms of the customers are more willing to spend their budgets and better for us in terms of the team is executing Even more efficiently, more effectively within with our customers. I would actually say we see a little bit of the opposite of what you're describing. We see Budgets kind of firming up.

Speaker 2

We have good line of sight to those budgets, which goes into how we look at the year And frankly, how we think about next year. We also see deal sizes increasing, not going down. We saw close rates going up, not even staying flat, but going up. So our overall productivity goes up. We saw again another quarter of amazing pipeline build.

Speaker 2

A lot of that pipeline will come to realization in 2024, might not be in Q4 here. But so I think when we look at the environment, we talk to stressed out CISO, stressed is the right word, But we see the fact that what we're working with them around is not a budget optional decision. It's where you want to spend money, if you have any money at all. And I think that is what's driving our success and it drives our outlook going forward. And it drives our confidence in the overall market that we're playing in, in this Identity security market itself.

Operator

Your next question comes from the line of Fatima Boolani of Citi. Your line is open.

Speaker 1

Hey, good morning. Thank you for taking my questions and sending my well wishes to you and the entire CyberArk family. Either for Matt or Josh, feel free to jump all this one. I wanted to get a sense of sales cycle trends within the New logo and expansion activity that you're very strongly executing on. And really the spirit of the question is You've got a much more expanded portfolio.

Speaker 1

So how are you Managing the extension of sales cycles that typically come with the sale of a broader portfolio.

Speaker 2

Yes. Thank you and thanks for the support. I think we always have had enterprise grade, As how I describe it, sales cycles, we've always had to sell over multiple quarters, even when we were just selling PAM, Because it was a big program and it was a significant sale. And so I think we're pretty used to longer sales cycles as we moved to Form selling motion, broader portfolio, we haven't seen any real elongation in our overall sales cycle. On the flip side, we haven't seen it kind of really dramatically come down In its timelines either, even though we've moved to a SaaS sale, which Traditionally might bring some of those sales cycles in.

Speaker 2

So I think we're operating consistently with what we've always done, which is expansion sales cycles are shorter, New logo sales cycles take a little bit more time. In the early part of the year, especially in the Q1, as we talked about, sales cycles for new logos We're a little bit longer. We've continued to see our ability to firm that up over time here. And so I think when we look at the Q3 performance as a whole, It's consistent with a firming up environment. And again, I know I say this a lot, but they're near and dear to my heart.

Speaker 2

Our go to market team continues to execute at just phenomenal rates, to be able to make sure that they bring the deals in When they say they're going to bring the deals in.

Operator

Your next question comes from the line of Junaid Siddiqui of Truist Securities, your line is open.

Speaker 10

Great. Thank you for taking my question. Matt, you highlighted Secure cloud access that you just launched recently. I was just curious about some of the other new products that you launched at Impact like Secure Browser. What's been a positive surprise to you in terms of how quickly they're being adopted by customers and contributing to growth?

Speaker 2

Sure. So on Secure Browser, we have not released that for general availability yet. That will come out towards the end of this year here. We continue to have Really, really strong conversations with customers about it both as a more secure way of browsing and also as a front end user interface for the Identity security platform that we offer out into the market. And by the way, we see and you see it in some of the recent breaches That the notion of session hijacking is one of the most risky new attack methods that's accelerating in the market and our secure browser, which allows for cookie less browsing really protects against session hijacking.

Speaker 2

But I would say On the browser front, way too early to comment in terms of it's not even out in the main market yet. As we talk about secure cloud access, I get kind of unbridled enthusiasm here. And why is that? Because it's bringing the best of PAM, the best of the idea of privilege controls, session management, session isolation, session recording. It's bringing that to a brand new population.

Speaker 2

And what we need to understand about the cloud security market overall that everybody's talking about Most of what's being done in the cloud security market is around posture management, it's around discovery, it's around visibility. It's because over time as these developers have gotten so many extra privileges, people want to understand what's going on. It's the Wild West. And that's a good first step and there's a lot of really, really strong companies that are focusing in that area. We're unique in the cloud space in that We're not all that concerned about visibility and about discovery.

Speaker 2

Other people can do that. What we want to be able to do is lock down control in the cloud. We want to take all of these thousands of developers who have unfettered access to the AWS or Microsoft Cloud services, the platform itself. And we want to make sure that those users can still innovate. They can still build.

Speaker 2

They can still troubleshoot, But they have privilege controls applied when they're doing it. And we do it uniquely with this idea of 0 standing privilege, so that the Actual account of the developer, their account, a federated account has no privileges, for example, in the AWS console. So when it's sitting there on the side, it's secure. When they go to log into the console, that's when the privileges are applied just in time. They're able to execute their work and then it's removed immediately as soon as they log out and it's controlled with workflows with time bound access.

Speaker 2

Now I went a little deeper there on that because I love the question, but I also went a little deeper there for people to understand Too many that arises for us as everybody thinks about cloud security for us to bring what we do best, which is privileged controls, locking down access 2, this entire population that needs to be secured. And so that's really an exciting motion for us. We had some great wins In the quarter, still very tiny business. It's only 1 or 2 quarters in, but you can hear the optimism For me around this piece of our business as I'm describing our unique approach.

Operator

Your next question comes from the line of Adam Borg of Stifel. Your line is open.

Speaker 11

Awesome. Thanks for taking the question. And again, I'll ask for My thoughts about the entire Israeli team and the community of Israel more broadly. Real quickly on The government opportunity, so it was 8% mix of ARR in the quarter. Maybe just talk a little bit more about how federal paid out in the quarter and how you think about government more broadly over the next 12 months.

Speaker 11

Thanks.

Speaker 2

Thanks, Adam, and thanks for the support, Adam. Listen, I think when we And we've been talking about this for a little while here, right? We're very happy with our position within federal government here in the U. S, the global government where we see A lot of momentum even in the state and local government that falls up into our SLED business. What we see across the board is whereas in the past, A lot of the budget purchases were at the point of kind of year end budget flush.

Speaker 2

We've seen because of the criticality of identity security that the actual purchases are much more spread out throughout the year and they're coming in conjunction with need and actual deployment plans to get them into place. That actually is a much more exciting place for us to be in. It allows us to be able to have a thriving and healthy global government business all year round. And it allows us to be able to invest in the ability to bring new solutions to That customer population, including our investment in getting our EPM and identity and PrivCloud into the FedRAMP process Over time here, it's our ability to be able to actually expand beyond our strong PAM footprint in a lot of these agencies and accounts. And so when we look at government, in fact, we highlighted a government account in the script that actually is outside of the U.

Speaker 2

S. But when we look at government, we see the threat landscape actually expanding on them exponentially even more than Some of the private sector and their recognition of the need for proper identity security solutions continues on. So we think there's a long runway of growth within the government sector. And we're really happy with our results from that perspective.

Operator

Your next question comes from the line of Brian Colley of Stephens. Your line is open.

Speaker 12

Hey guys, thanks for taking my question here and Certainly, I'd like to echo my support as well for the team in Israel and the people in Israel more broadly. I'm curious if you saw any divergence in demand trends this quarter between the enterprise and mid market segments of your business. We've heard some other cybersecurity companies say they started seeing some softness in the Q3 in the mid market. So I'm wondering if that's something you saw materialize in any way.

Speaker 2

So we didn't see Any change in that environment? I think we've talked about the idea that the mid market is more affected by macros than the enterprise space. But we haven't seen any real change or diversion any change in that from that perspective. I think one of the things that we have to keep reminding everybody around and it's different than some of our other cybersecurity peers Is that we're really not playing in the low end of the mid market. And I know I said it a couple of minutes ago, but I'll say it again.

Speaker 2

Our mid market, which we call corporate Customers are $500,000,000 to $1,500,000,000 CyberArk would be a mid market account for CyberArk. And so I think those organizations, especially the ones on the upper end there kind of mirror in their behaviors What we're seeing in the enterprise space, and that continues on in the Q3.

Operator

Your next question comes from the line of Alex Henderson of Needham. Your line is open.

Speaker 13

Great. I Rarely hear somebody talk about an amazing pipeline build. And I was hoping you Talk a little bit about the composite of that. How much of that is driven off of just simply the broader adoption of the platform, Existing customers and the like, and how much of that is driven off of the recent new product and technologies that were announced and the reaction from your trade show mid summer. And the reason I asked the question is, obviously, with the 6 months plus cell cycle.

Speaker 13

I assume that that mid summer build might be helping visibility. Thanks.

Speaker 2

Sure, sure. So listen, I think when we think about our pipeline, it's a little bit of check, check, check all of the above. We see our pipeline

Speaker 5

being affected by the ability to be able to

Speaker 2

sell a much broader I'm being affected by the ability to be able to sell a much broader portfolio. And in fact, while the PAM pipeline continues to grow In a really nice way and you saw that in our results this quarter. We see the solutions outside of PAM You're growing at a faster rate. We see our access business continue to grow. Our secrets business continue to grow.

Speaker 2

As I mentioned, we see Some nice pipeline build around our secure cloud access. EPM continues to be a bright spot for us. So we definitely see the kind of mix of the portfolio coming to play to help build the year over year growth rate in pipeline. And whenever I'm talking about pipeline, I'm always talking about year over year growth, not just an absolute number. Now in addition to all of that, we also see the way the pipeline getting built to be in a much more healthy manner.

Speaker 2

Meaning, If you rewind, rewound a couple of years ago, all pipeline came from sales. And now we start to see actually that our Routes of pipeline build, what's marketing generated pipe, what's channel generated pipe. We see those starting to kick into high gear And that broadens our ability to have a better go to market engine. And so when you combine a broader portfolio that seems to resonate with customers With broader routes to market that actually can build pipeline, that's how you end up in the situation that we've been in for several quarters where we've talked about Our pipeline kind of building at a really strong rate. The events that we put on are wonderful and We didn't just do the, by the way, the event in last spring.

Speaker 2

We've been doing a world tour at 15, 17, whatever it is, countries around the world. I can't keep track because we've been traveling so much. And each one helps us to tell the story and help customers understand why identity security is so important and why CyberArkus who they should choose. And that all goes together to put us in A healthy position as a company where we had a really great quarter that we could talk to, we were able to guide forward with the guidance we put out there. And we look towards next year with optimism.

Speaker 2

And for sure, we look towards our 20252027 targets, with a good with a strong degree of confidence in our ability to be able to go ahead.

Operator

We've run out of time for questions. So I'll now turn the call over CEO, Matt Cohen for closing remarks.

Speaker 2

Thanks everybody. And thanks again for everybody's support To us personally, it means the world. I want to finish by where I started by saying our number one priority is Our employees, their health, their well-being, they've done such a tremendous job of working under these challenging conditions. And I'm really proud, Proud to be part of this company and work with such amazing people. We continue together to make sure we focus all together on our customers And securing them against the cyber threats that are out there.

Speaker 2

Thanks and talk soon.

Operator

This concludes today's conference call. You may now disconnect.

Powered by Quartr
Earnings Conference Call
CyberArk Software Q3 2023
00:00 / 00:00