Q1 2024 CrowdStrike Holdings Inc Earnings Call
Good day and thank you for standing by. Welcome to the CrowdStrike Fiscal First Quarter 2024 Results Conference Call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question and answer session. To ask a question during the session, you'll need to press star 1-1 on your telephone. Hello everyone.
You will then hear an automated message advising your hand is raised. To withdraw your question, please press star 1-1 again. Please be advised that today's conference is being recorded. I would now like to hand the conference over to your speaker today, Maria Riley, Vice President of Investor Relations.
Good afternoon and thank you for your participation today. With me on the call are George Kirk, President and Chief Executive Officer and Co-Founder of Crowdstripe and Bert Pollard-Baer, Chief Financial Officer.
Before we get started, I would like to note that certain statements made during this conference call that are not historical facts, including those regarding our future plans, objectives, growth, and expected performance, including our outlook for the second quarter and fiscal year 2024.
and any assumptions for fiscal periods beyond that are forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995.
These forward-looking statements represent our outlook only as of the date of this call.
While we believe any forward-looking statements we make are reasonable, actual results could differ materially because the statements are based on current expectations and are subject to risk and uncertainties.
We do not undertake and expressly disclaim any obligation to update or alter our forward-looking statements, whether as a result of new information, future events, or otherwise.
Further information on these and other factors that could affect the company's financial results is included in the filings we make with the SEC from time to time.
including the section titled Risk Factors in the company's quarterly and annual report.
Additionally, unless otherwise stated, excluding revenue, all financial measures disclosed on this call will be non-GAAP .
A discussion of why we use non-GAAP financial measures in the reconciliation schedule showing GAAP versus non-GAAP results is currently available in our earnings press release, which may be found on our Investor Relations website at ir.crowdstrike.com.
or on our form 8K filed with the SEC today.
I would like to note that we are conducting today's call from one of our European offices and ask for your patience in the event of technical difficulties.
With that, I will now turn the call over to George.
Thank you, Maria, and thank you all for joining us. Our continued execution, despite a challenging macro environment, translated to strong growth and exceptional margins, which drove record non-GAAP profitability, record-free cash flow, and GAAP profitability for the first time in company history.
We exceeded our guidance across both top and bottom line metrics.
increased gross margin, cost discipline, and moderated headcount growth contributed to our strong bottom line results. Reaching gap profitability so early in our life as a public company provides insight into the strength of the model we have built and what we can achieve over time.
BERT will cover the financial results in more detail.
I will focus my comments on why we believe CrowdStrike has a clear and sustainable advantage as three mega trends continue to unfold, AI, consolidation, and cloud.
and why we believe Cross-site has a clear and sustainable advantage as three mega trends continue to unfold, AI, consolidation, and cloud. Let's start with AI.
Since inception, CrowdStrike has been and will continue to be at the forefront of leveraging AI to drive better customer outcomes and efficiencies within our own business.
In addition to industry leading detections and rapid remediation for customers, utilizing AI has benefited our business by lowering costs and yielding higher margins.
One example of AI benefiting our financial model is Falcon Complete.
For years, our use of AI has enabled us to rapidly scale that business to a leadership position with an exceptional product margin that exceeds our overall company gross margin.
The margin profile and scale we have achieved for our managed offering would not have been possible without our innovations in AI.
While others are just now jumping on the AI bandwagon, we have transformed cybersecurity with an AI-powered cloud business from inception.
Generative AI is transforming the world and security is no exception.
Large Language Models, or LLMs, are only as good as the data on which they are trained, and human annotated content makes for the best training data.
driving better customer outcomes relies on having a data advantage and the context derived from that data.
While we expect that LLMs will become commoditized over time, the data on which they are trained will not. CrowdStrike is uniquely positioned to benefit from this new technology.
Our dataset spans petabytes and captures trillions of new events daily from our global fleet of sensors.
Combine that with our over 10 years of attack data and threat graph that has been paired with high-quality human analysis from Overwatch, complete intelligence and incident response services, and you get unrivaled telemetry.
Simply put, we believe Crafts-Wrike has a sustainable data advantage, the most powerful and unique set of correlated human and machine generated data across all of cyber.
Our data advantage creates a unique competitive moat, yielding better models, better automation, and better outcomes.
as a democratizing force within cybersecurity from both an adversarial and protection standpoint.
From an adversarial perspective, we expect that the adoption of LLMs will lower the barrier of entry for malicious actors to create sophisticated cyberattacks.
Generative AI is expected to make it even easier for less advanced attackers to craft nation-state caliber campaigns.
We believe this will catalyze even greater demand for modern cybersecurity technologies like Falcon.
From a protection standpoint, we see generative AI as a democratizing force by dramatically lowering the learning curve for practitioners, transforming even a novice analyst into a power user.
With all of this in mind, we introduce Charlotte AI, an exciting new generative AI security analyst.
utilizing CrowdStrike's high fidelity data advantage.
We believe Charlotte AI will empower a newly-minted Tier 1 analyst to yield the results of an advanced Tier 3 analyst. The net benefit to the customer.
newly-mixed tier 1 analyst to yield the results of an advanced tier 3 analyst. The net benefit to the customer. Faster results.
better security outcomes, and lower overall costs.
Scarlet AI represents CrowdStrike's latest innovation in helping security teams worldwide content with the cybersecurity skills gap.
respond to threats faster, and reduce operational costs.
Charlotte AI will uniquely benefit from a continuous human feedback loop with our Overwatch, Falcon Complete, and Intel teams.
This continuous feedback loop on human validated content is critical. And because of this, no other vendor in cyber will be able to match CrowdStrike's approach to generative AI.
Demonstrating our commitment to lead and protect the industry through this next wave of innovation, we teamed up with AWS to develop powerful new generative AI applications.
that help customers accelerate their cloud, security, and AI journey.
Through this initiative, CrowdStrike and AWS will bring together their solutions and teams to keep customers safe across a range of AI services while meeting stringent security requirements.
CrowdStrike already has a leadership position in helping protect AI innovators.
A perfect example of this is a recent expansion with a B2B generative AI research and development company.
This customer leverages significant public cloud resources.
This customer leverages significant public cloud resources to support their solutions.
Also aware of the dangers others have faced from adversaries compromising cloud environments, this customer expanded to Falcon Cloud Security Complete.
to support their small team with fully managed coverage, provide both Cloud runtime protection and posture monitoring across their multi-Cloud environment, and scale seamlessly with their growth, all without having to deploy multiple products or hire more people. Another megatrend continuing to unfold in cybersecurity is consolidation.
The macro backdrop has only accelerated the need for customers to reduce vendor sprawl, reduce agents, reduce costs, and protect their businesses with the best of SaaS platforms.
On average, enterprise customers can realize over 200% ROI with Falcon. With ROI results like this, it's no surprise companies turn to CrowdStrike to protect, power and drive efficiencies for their businesses.
In Q1, net new ARR from our million-dollar-plus customers grew year over year, even as these larger, more complex deals can have longer sales cycles.
We delivered $174.2 million in net new ARR for the quarter, which exceeded our stated assumptions.
$174.2 million in net new ARR for the quarter, which exceeded our stated assumptions. Our momentum with large customers.
record Q2 pipeline and success tracking deals to close gives us confidence in the back half of the year.
In Q1, we closed over 50% more deals involving 8 or more modules compared to a year ago.
We believe this speaks to increasing customer demand for consolidation using the Falcon platform.
When we look at our pipeline for the remainder of the year, we expect this trend to continue, giving us confidence in our ability to deliver net new ARR growth in the back half of the year. Over the past few months, I have personally met with many of our customers, prospects and partners. These conversations all centered on the same topic.
customers want to consolidate the security stack with Falcon and drive greater cost efficiencies while unlocking new capabilities. Let me share a few recent customer wins highlighting ways companies use CraftsRight to consolidate while improving their cybersecurity outcomes.
First, our wins with two new Fortune 100 customers.
These organizations are consolidating on Falcon, a single modern XDR platform, unifying their approach to security across their different business units.
Each of these new CrowdStrike customers purchased multiple modules, with one adopting nine modules, displacing legacy and next-gen vendors in their environment and standardizing on CrowdStrike. One of my favorite customer wins this quarter.
was with a regional healthcare customer brought to us by our partner Dell.
This organization was frustrated by the volume of false positives generated by their legacy security product, which hampered their security team's efficiency and obscured critical incidents.
Recognizing the increased value they could gain by modernizing their security stack and consolidating on CrowdStrike, this customer adopted eight Falcon modules including Falcon Complete, Identity Threat Protection, and Log Scale in a seven-figure total value deal.
In addition, our managed services teams have catapulted CrowdStrike to a leader position in the Forrester way for managed detection and response, and the number one market share position for the second consecutive year in Gartner's NBR for managed security service report.
CrowdStrikes MDR leadership extends beyond our managed services and into our MDR partner ecosystem. Of the top 25 MDR vendors by market share defined by Gartner, 88% have built their MDR services on top of the Falcon platform, showcasing Falcon as their modern XDR platform of choice.
We are proud that the Falcon platform powers so many different partners, enabling them to build their businesses on top of CrowdStrike.
Our industry leading partner ecosystem continues to expand rapidly, contributing meaningfully to our growth.
CrowdStrike recently entered into a strategic partnership with Pax8, the leading MSP cloud marketplace with over 30,000 MSP partners across North America, Amia and APJ that serve the SMB market. This partnership provides CrowdStrike a born-in-the-cloud route.
to market for MSP consumption and a prime opportunity to displace the legacy AV and next-gen product vendors that TaxAid partners use today.
MSPs are increasingly turning to the PAC-SATE Marketplace for ease of product purchase, rapid software deployment, and fully integrated billing to run their businesses, including cybersecurity.
PaxAce MSP partner base will now be enabled to protect their end customers with the same cutting edge XDR technology selected by the world's leading and largest enterprises.
Our momentum in the public sector continues to expand. Public sector wins in the quarter included a falcon complete win at a top 20 US government contractor and a win with a major US federal agency.
Today, we announced Craft Strike was granted an Impact Level 5 or IL-5 provisional authorization from the Department of Defense.
IL-5 certification positions as well to extend our reach into the massive defense IT and cybersecurity market.
The competitive environment has not changed since our deep dive in April , where we disclosed that 8 out of 10 times when an enterprise customer tests, they choose CrowdStrike over Microsoft, and our win rates across all competitors remain strong in the quarter. Organizations today more than ever before need security partners with the right tools.
employees told us the upgrade cost of moving from Microsoft E3 to E5 would be at least 2.3 million more than their CrowdStrike subscription. And that's just for the upgrade.
With Microsoft's excessive annual cost increases, this would grow to $4.7 million by year 5, excluding the additional costs required for support or SIM solution or increased staff to manage the extra complexity.
When customers map it all out, they quickly realize that using Microsoft E5 for security is more expensive, requires more headcount, and increases their cyber risk.
The cloud is the third megatrend representing a long and sustainable tailwind for our business. The cloud is rapidly emerging as the new adversary battleground.
We have observed a 95% year-over-year increase in cloud service exploitation and a 288% increase in threat actors that know how to operate in cloud environments.
securing cloud assets is paramount today and will continue to grow in importance. As a leader in protecting some of the largest and most critical cloud companies,
We have seen strong net new ARR growth from modules deployed in public clouds.
Our Falcon Cloud Security offering unifies our agent and agentless cloud-native security capabilities into a single offering that's easy to deploy from build to runtime across all major cloud environments and is driving incredible customer momentum as customers consolidate their cloud security, replacing multiple CloudPoint products with Falcon.
By tying this all together, the rapidly evolving and expanding threat environment demonstrates why it is so critical to have your endpoint, cloud, identity, and data protection on one unified modern XDR platform Falcon.
We've covered a lot today, and you can see that our relentless innovation continues to widen the gap between crowd striking and competition.
We've covered a lot today, and you can see that our relentless innovation continues to widen the gap between crowd striking and competition. In closing, I will reiterate a few key points.
First, CrowdStrike has a clear data advantage built over the past 12 years by combining our unmatched AI and human threat intelligence expertise.
For customers, CrowdStrike Advantage means better, faster, and more cost-effective cybersecurity.
For our business, CrowdStrike AI excellence shines through our differentiated business model efficiencies.
Second, we ushered cybersecurity into a new era with the introduction of Charlotte AI.
Third, companies must consolidate their security stack to reduce complexity, reduce agents, and reduce costs without sacrificing coverage or security.
They need to protect their cloud environments from build to runtime with a single unified platform.
To achieve this, customers choose Crowdstrength. And fourth, we believe that in addition to building a winning platform, we built a robust business model capable of generating rapid growth at scale, earnings, and durable free cash flow.
With that, I will turn the call over to Burke to discuss our financial results. Thank you, George, and good afternoon, everyone. As a quick reminder, unless otherwise noted, all numbers except revenue mentioned during my remarks today are non-GAAP . We delivered a strong first quarter, even with the continued challenging macro environment with revenue, and a strong financial loss.
subscription gross margin, operating income, net income, and free cash flow, all exceeding our guidance and reaching new records. We believe our financial performance speaks to the strength of our business model and the operational excellence ingrained in the fabric of CrowdStrike's culture, which includes diligence and discipline when balancing growth and profitability.
The demand environment remains resilient.
Although we continue to see increased deal scrutiny and longer than typical sales cycles, especially for larger consolidation deals, with our relentless focus on sales execution, we achieved Q1 net new ARR of $174.2 million, which was above stated assumptions.
We ended the quarter with ending ARR reaching $2.73 billion, up 42% over last year.
The quarter was well balanced with the mix between new logos and expansion cross-sells. Net new air are similar to Q4.
We continue to be very pleased with the success of our Land and Expand strategy with our dollar-based net retention rate once again above the 120% benchmark in Q1.
Subscription customers with five or more, six or more, and seven or more modules now represent 62%, 40%, and 23% of subscription customers respectively.
Moving to the P&L, total revenue grew 42% over Q1 of last year to reach $692.6 million.
Subscription revenue grew 42% over Q1 of last year to reach $651.2 million. Professional services revenue was $41.4 million, setting a new record for the 11th consecutive quarter and representing 48% year-over-year growth.
During the quarter, we also saw strength in Europe , the Middle East, and Japan. International revenue grew 53% year-over-year.
Our first quarter non-GAAP gross margin performance was outstanding with both total and subscription non-GAAP gross margins ascending to new heights.
Total non-GAAP gross margin was 78% and subscription gross margin crossed the 80% milestone for the first time.
Our investments in data center and workload optimization drove our gross margin improvement in the quarter.
As we have said in the past, we expect subscription gross margin to fluctuate by up to one point on a quarter-to-quarter basis as we balance optimization investments with capacity growth and new platform functionality.
We expect these investments to drive further margin enhancement in the future as we continue to execute on our long-term plan to drive subscription gross margin sustainably above 80 percent.
Total non-GAP operating expenses in the first quarter were approximately $424.6 million or 61% of revenue versus $291.0 million last year or 60% of revenue. The sequential increase in sales and marketing reflects the timing of in-person events.
gap operating income grew 40% year-over-year to reach a record $115.9 million and we report an operating margin of 17%.
non-GAAP net income attributable to CrowdStrike in Q1 grew to a record $136.4 million, or $0.57 on a diluted per share basis. Our weighted average common shares used to calculate first quarter non-GAAP EPS attributable to CrowdStrike was on a diluted basis.
and totaled approximately 241 million shares. We also reached gap profitability for the first time in company history.
While we are very proud of this milestone, we have yet to reach sustained gap profitability.
Q1 benefited significantly from fewer net new hires in Q1, which we expect to pick up throughout the remainder of the year, albeit at a much more moderated pace in comparison to FY23.
We believe reaching this milestone demonstrates that our financial model will deliver gap profitability in due time.
We believe reaching this milestone demonstrates that our financial model will deliver gap profitability in due time. We ended the first quarter with a strong balance sheet.
Cash, cash equivalents, and short-term investments increased to approximately $2.93 billion. Cash flow from operations grew 40% year-over-year to a record $300.9 million. Free cash flow grew 44% year-over-year to a record $227.4 million, or approximately 33% of revenue.
Before I move to our guidance, I'd like to provide a few modeling notes.
We are raising our revenue guidance for the fiscal year and maintaining our net new ARR assumptions for the first half and fiscal year, which call for a 10% year-over-year headwind to net new ARR in the first half and in line to modestly up net new ARR for the full year.
Our strong Q2 pipeline and momentum with large consolidation yields.
give us confidence in the remainder of the year, including the back half where we expect to return to year-over-year growth in net new ARR.
Also, as a reminder, given the timing of expenses, please do not forget to use the link in the
Billing, seasonality, and the mid-year ESPP purchase. The second quarter is generally our lowest cash flow generation quarter of the year.
This year, we expect to see more pronounced seasonality and maintain our target of achieving 30% free cash flow margin for the fiscal year.
As we discussed during our investor briefing in April , this is inclusive of estimated full-year impacts from billings duration and cash taxes.
balanced by the positive tailwinds of increased operating leverage, higher interest income, and lower cap-techs.
And lastly, our assumptions on interest income, cash outlay for income taxes, and capital expenditures are unchanged. For the second quarter of FY24, we expect total revenue to be in the range of $717.2 to $727.4 million.
reflecting a year-over-year growth rate of 34 to 36 percent. We expect non-GAAP income from operations to be in the range of $116.4 to $123.8 million, and non-GAAP net income attributable to CrowdStrike to be in the range of $129.5 to $137.0 million.
We expect diluted non-GAAP net income per share attributable to CrowdStrike to be in the range of $0.54 to $0.57, utilizing a weighted average share count of 242 million shares on a diluted basis.
We are raising our revenue and profitability guidance for the full fiscal year 2024.
We currently expect total revenue to be in the range of $3,000.5 to $3,036.7 million, reflecting a growth rate of 34 to 35% over the prior fiscal year.
non-GAAP income from operations is expected to be between $498.9 and $526.2 million. We expect fiscal 2024 non-GAAP net income attributable to Krausrach to be between $562.8 and $590.1 million. Utilizing 243 million weighted average shares on a diluted...
and wait for your name to be announced. To withdraw your question, please press star 1-1 again. Participants will be limited to one question.
Our first question comes from Saket Kalia with Barclays. You may proceed. Correct answer did not actually line up.
Okay, great. Hey, guys, thanks for taking my question here and congrats on the DoD authorization.
Hey, George, thanks for taking my question here. George, maybe for you, and I'll just stick to one here. Can we just talk a little bit about what you're seeing in legacy endpoint share games?
I mean, clearly CrowdStrike has a broader platform beyond just Endpoint, but I'm curious, just given the macro and everything happening, curious how you feel about that opportunity for continued share gain in Endpoint specifically?
Well, I feel good about that opportunity and if you look at our current market leadership and this market leading leadership at 17.8% from modern endpoint security, it's still a very fragmented market and we continue to take share from the legacy players that are in the market.
Again, when you look at different geographies, obviously we've got heavier penetration in North America, but there's many geographies in the rest of the world that still have to be penetrated deeper, particularly in converting those legacy players. So I feel really good about it. It's a fragmented market if you just look at the numbers and the ongoing conversion of legacy. you
technologies into next-gen players like CrowdStrike will continue for the foreseeable future. Thank you.
Our next question comes from Sterling Autie with SVB Mulford-Nathanson. You may proceed.
Yeah, thanks. Hi, guys. I wonder if you could give us a sense of what kind of impact you saw in the business from the disruption from the banking crisis in March, both on kind of ARR, linearity, and maybe even billings in the quarter. Thanks, Sterling.
How are you? So, number one, let's talk about the impact. Number one, let's talk about the impact of, you know, the banking crisis. So, for us, there was not a material impact on ARR from the banks. I think the impact of churn from the banking industry was really de minimis.
and we continue to close deals with regional banks in the corridor. Banks in particular need robust cyber defenses. Overall, gross retention remains high and best in class.
So we felt pretty good in terms of that particular piece of the segment. In terms of overall billings, billings is of course for us quite cyclical. And it is driven primarily through seasonality. Thank you for...
has our largest deals and the renewals that came up have an impact and then the impact falls into Q1, which we would see an overall decrease. So that's how we think about it. And as you know, the business is focused on ARR as opposed to billings, which can have whipsaw effects. And the focus on ARR just gives you an idea about the overall health of the business.
Thank you.
Our next question comes from Joel Fishbein with Truist Securities. You may proceed.
Thanks for taking the question. Hey, George, one for you. Thanks for the update on AI. I'm just curious as it increases the attack surface, just curious if you've seen any threats recently that it may have been exploited new threats as a result of the proliferation of some of these new models that are out there and I have a quick follow up.
Well, we continue to see and we have seen for some period of time adversarial AI, so the use of AI specifically by the adversary to try to defeat the security system. So that's been going on for some time. I think what we're seeing now with generative AI and LLMs is the fact that it becomes very easy for...
even a novice adversary to be able to have the same capabilities as a nation state to create new exploits, new vulnerabilities, to be able to deliver phished emails, etc. So that will be an ongoing effort and again we're really excited about Charlotte AI which we announced this week.
I think it's an absolute game changer for us and the company and what we're able to do and to really compress the workloads for analysts and provide a lot of the intelligence that we have and our analysts have right through the Falcon platform. So we'll continue to monitor that, but that's been an ongoing activity that we've seen for some time. Great. And just as a follow up on this cross-drake Falcon Complete XDR, can you just talk about that.
what we do and we can now provide that level of automation in a complete offering. Because XDR is still as an industry still an immature technology, I think wrapping it with a complete service really allows customers to have peace of mind. They can allow us to take in that third-party data, leverage the models that we've already built to get better out.
Good evening, thank you for taking my question. George, an AI question for you as well. So I'm curious, how are you thinking about monetizing some of the new AI services that you've released? I mean, is it something that's gonna drive more sort of top of the funnel conversion? You know, do you think it's gonna drive more demand for log scale? Is there like...
explicit SKU that you're offering. Just curious how you're thinking about that. I know it's pretty early days. Well, it's something that's really foundationally built into the platform and we believe it's going to drive a lot of additional adoption of modules and platform usage.
throughout the customer base. So we'll start there. As it evolves over time, we'll look to see if we'll monetize it with specific skews. But I think first and foremost, let's get it to the customer base. Let's iterate it. Let's leverage the data advantage that we have because as I've talked about in the earnings call, we've got 10 years of being able to train.
these algorithms and I think as most know it really is the human interaction that allows us LMMs to shine and we've got I think a real advantage because we've got 10 years of attack pairing if you will with data and how the attacks work that can be used for training so we're going to get it out in the customer base continue to iterate it and then I believe it will drive more adoption of the platform modules and then we'll see how we'll monetize it after.
lot of things I think to be to be excited about. What do you think are the biggest drivers of that growth? And maybe I missed it, but are you still targeting low 30% error growth for fiscal 24?
Yeah, hey, great question. So first let's talk a little bit about the second half, obviously, the easier problems in the back half, right? So that's number one. And then what really gives us confidence going into the second half is three things. One is pipeline. We see momentum and deal activity rapidly building for the second half. It really started in the middle of Q1.
XDR, now with Charlotte and you know George has already talked about that. And then third, partnerships. You know whether it's Dell or Pax 8 or others that are coming online we think that you know that can be you know something that will lose a needle for us in the second half. So key here is cybersecurity remains mission critical.
And I think customers want to consolidate and drive down TCO more than ever, and Falcon is designed to do exactly like that. So I think that when you look at the overall module adoption and we talk about, we closed over 50% more deals involving eight or more modules this quarter compared to a year ago, that speaks to the fact that we're not going to be able to do that. So I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing.
Andrew Nowinski with Wells Fargo, you may proceed.
Great, thank you. Thanks for taking the question. So I was wondering if you could just expand on your partnerships with Dell that you talked about last quarter. Just wondering how much it contributed into the quarter, whether you have enough visibility from that partnership yet to factor that into your new revenue guidance for the year and around the world.
and if that's actually driving any traction in that SMB sector. Thanks.
Yeah, that's a good question. So one, we're tracking plan. We're still early days, obviously, with Dell. We called out one seven-figure deal with a regional healthcare company that was brought to through our partnership with Dell in the quarter. Obviously, with any new alliance, it does take time to gain traction.
Thank you.
Thank you.
Our next question comes from Talion with Bank of America. You may proceed. Hi guys.
Can you give us an update on going down market and your attraction with Falcon Go, the SMB focus area? What kind of competition do you see there given that Microsoft is stronger in the down market?
And second question, we have seen many companies in the space having sales to existing customers much stronger than sales to new customers. There is slowdown in sales to new customers. Can you give us kind of the data on where do you see the growth coming from in existing versus new customers? Thanks. Definitely. Thanks
Sure, I'll start out and then Burke can add anything if he needs to. So Falcon Go has been a success for us. We continue to target the S&P market. I think I called out in one of the prior earnings calls how we organized ourselves internally. We've got a specific focus and a leader on that. We seen a lot of success there. For more information, visit www.sasktel.com
We'll also, I need to call out the pairing to our success in the MSP market and a partnership like PACS8, which really allows us to get those lower cost offerings out to customers through managed service providers. So it's a big market for us, S&B, it's a very highly fragmented market.
We've got to ramp our channels up. We're working with Dell and others and managed service providers. But I feel really good about that opportunity, and that will continue to grow over time. I'll take the second part of the question, Tal. So we really haven't seen a material difference in terms of the mix between a sanitary install base and new logos versus last quarter.
We do think that we will see over time, as our install base gets larger, that we'll have more opportunities to sell to our install base. Having said that, we still think we have a lot of headroom in terms of net loo logos. We have a long way to go, and we talked about that on earlier calls. Overall, we're really pleased with our opportunity on both net new logos from a cross-out L L
Thank you.
Our next question comes from Charlie Yell with TD cow and you may proceed.
with TD Cowen, you may proceed.
Thank you. Hi, good afternoon guys. George last quarter, I believe, or maybe during the update, he talked a lot about some of the Microsoft displacement. I know you've actually just kind of mentioned that. Um, in in that context, um, maybe shifting to, uh.
You know, from a model perspective, any specific trends you can talk to us about this quarter versus prior quarters with respect to the leading modules, the identity, some of the emerging ones versus everything that you're seeing from Microsoft in that respect.
Thank you.
Sure, I think I'll start with consolidation and I'll reference back to what I spoke about in the prepared remarks. Every customer that we spoke to, and I spoke to many, many customers at RSA, and even throughout the quarter it was really about consolidation. I think we've done a good job of showing a very cost compelling model for them, where they're actually paying less than say an E5 for the security pieces, particularly for
growing in the pipeline as customers want to do more with proud striking.
Thank you. Our next question comes from John Defutie with Guggenheim Securities. Please remain standing until the question may proceed.
Thank you. My question is for George. So this is the first quarter ever that new ARR declined for you guys, whereas most others declined started quarters ago, like several quarters ago. Tal asked about competition in the SMB market, but what about demand? We started to hear some weakness in the SMB, in the mid-market. We realized that's largely greenfield for you.
So it might be harder for you to tell but are you seeing any changes in that market demand this quarter versus previously? No, we actually saw a strong strong demand and results in SMB. I think we've got a great model, we've got the right technology for it and we're solving outcomes right when you look at
not only the technology itself, obviously you can buy Falcon Go as a customer, but you can also buy Falcon Complete. We have many SMB customers, many, many that are Falcon Complete customers. Why? Because it's a very compelling proposition from a price perspective. They couldn't even fill one head for the cost of what we're charging them, and they're getting the best in the world in terms of security.
We have not seen a slowdown in SMB. We've got, I think, really good traction there. And at the end of the day, as you pointed out, it's still a fragmented market, and it's a smaller part of our overall revenue. So we see great future opportunity with it and didn't see any impact last quarter.
a slowdown in SMB. We've got, I think, really good traction there. And at the end of the day, as you pointed out, it's still a fragmented market and it's a smaller part of our overall revenue. So we see great future opportunity with it and didn't see any impact last quarter. Thank you.
Our next question comes from Brian Essex with JP Morgan. You may proceed. Hi, good afternoon. Thank you for taking the question. I guess maybe for Burt, you know, nice milestone of hitting gap profitability. I guess I would love a little bit more color around your commitment to maintaining gap profitability. What should we expect?
balance, growth and profitability going forward. Thank you.
Thanks Brian , great question. So one, overall, we've had a very methodical approach in how we look at the various aspects of the model. So first we focused on gross margin and you can see the progress that we've made there.
Second piece was focusing on non-GAAP profitability and free cash flow. Free cash flow, as you know, which is 30%. And that is something that's ongoing. Third evolution is GAAP profit, which we will continue to focus on and drive towards achieving sustainability. Of course, SBCE is the biggest piece of that.
We continue to manage FPC and we're going to be mindful with the balance, with retaining the best and the brightest talent. That's paramount for us. We also look to dilution. Our dilution we feel is in a good place. Less than 2% this year strive to keep another 3% in the year that are coming.
So overall we are very pleased with hitting the gap probability and believe it demonstrates the power of the model and that we are disciplined in our growth and we're disciplined in how we see the market today. Everything we do is by design. It's not a fluke. We think about it in terms of where we can extend and how we can extend. And for us with FBC we really focus on making sure we get the best.
Our next question comes from Jonathan Ho with William Blair. You may proceed.
Hi there, good afternoon. I just wanted to maybe ask a little bit about sort of the success that you've seen with these additional add-on modules. Can you help us understand maybe where that success is coming from, whether it's some of your newer products in areas like cloud or EASM.
or is this in multi-product sales from your more existing endpoint capabilities? Thank you. Sure. Well, we've seen strength in many different areas. We had some incredible wins with log scale. I'm really seeing the momentum on that. There's a real need in the industry for it.
faster, better, cheaper logging, and customers are looking for solutions. So that was great to see. I think when you look at identity, this is one of those areas where, just like EDR in the early days, it wasn't necessarily budgeted. And what we're starting to see now is that companies are actually budgeting in current and future budgets.
customers can use it. They love the fact that they're getting results from both agent and agentless technologies and that is a true differentiator in the environment, the competitive environment. So overall when you look at a lot of these areas that have called out in the past, you know it's full speed ahead on them and we continue to add more capabilities and I'm really excited about the product lineup that we have for this fiscal year.
So I know you've been incorporating AI into ThreatGraph and the broader platform for years, but on Charlotte, you alluded to commoditizing LLMs, but might you leverage open source and develop your own LLMs based on your data set to provide additional value there? Just curious to hear a little more on how you may augment existing LLMs and potentially drive a greater wedge.
so to speak, based on your inherent data advantage there. Thanks. Hey, Greg. I'll take the first part of that question. So as you know, we've called out that we expect to see in the long term the shift from multi-year deals to one-year deals. I think that's...
traditional and software, but we did not see a material shift in the trend this quarter in comparison to the last quarter. So just to be very, very clear on that point. Deal durations are getting shorter, but are expected, and it remains within the parameters of how we've modeled out our overall business.
Yeah, and Greg, on the question regarding LLMs, obviously there is some great technology that's already out there and I think our view is to leverage LLMs. It's a very similar concept to being able to leverage different cloud providers. Leverage the LLMs that suit you for a particular purpose. Doesn't mean we couldn't build our own, but I think what's important, and I call this out in the prepared remarks.
is the fact that the training is one of the areas that really makes an LLM shine. And I think many people have seen that just with their understanding of chat GPT. These things have to be trained or you get hallucinations in terms of the results, spurious results if you will. So from our standpoint, we believe the pairing of the threat graph with annotated threat data is a very important part of the
We'll leverage what's out there. We may build some of our own, but I think, more importantly, we've got the right data set to get the training the way we need it. Thank you. Our next question comes from Alex Henderson with Needham. You may proceed.
All right, thank you so much. I was hoping you could talk a little bit about what your assumptions are in terms of your pipeline, in terms of deal sizes, duration, closure rates, and price relative to the conditions. Are you taking in a little bit more conservatism?
into your assumptions on some of those parameters? Are you expecting the deal sizes to continue to go up, but then push out in the time to close deals? And what are you assuming around closure rates in this environment?
And if you could feather in a little bit on the federal, I would love it. Thanks. Thanks, Alex. A few things to unpack there. So, let's start with, you know, in terms of larger deals. Again, we closed over 50% more deals involving 80 more modules this quarter compared to a year ago.
I think this really speaks to the fact that customers really want to do the consolidation play. They want to continue to leverage Falcon Platform as a means to get the right outcomes at the right price. In terms of the overall environment, so first big picture in the macro, we don't see the macro improving now and for the rest of the year.
So with that as a backdrop, when we think about deal durations, yeah, sure, we think deal durations are going to be shorter. I think people are going to, in terms of their size, are going to be longer to be able to consummate. And that goes to the additional scrutiny that we're continuing to see from companies looking to do bigger deals takes more time.
And so when we think about that all in perspective, we know that there's going to be deals that are going to be more difficult to close within a particular quarter. And so we've modeled that in. I think that overall with respect to, some of the other metrics that you had mentioned, I think that for one, I think that for our net new ARR, we are going to maintain the assumptions that we stated previously. I think that's the right thing to.
last a long time and they're big and meaty. So we continue to drive forward on that and I think this IO5 certification opens up more doors for us.
Thank you. Our next question comes from a Ty Kidron with Oppenheimer. You may proceed.
Thanks, George. Thanks for the great review on AI. I guess the question is for Bert. With the benefits of AI as George described them, how soon can you raise your long term margin target?
Look, for us, we're really pleased with where we're going with our margins. Start to gross margins, you saw the progress that we've made there. We've talked about the continued developments for optimization, certainly in our data centers as well as our cloud workloads. And then the progress...
And the good news there is we've got, as George had mentioned, over 10 years of all that AI and the training on the AI, and that's a massive hit start over any one of our other competitors.
Thank you. Our next question comes from Patrick Colville with Scotiabank. You may proceed. Hey, thank you so much for squeezing me in. In the prepared remarks, you mentioned that in the call you saw increased deal scrutiny and longer sales cycles. Can I just double click on that comment? I mean, was that?
increased steel scrutiny and longer sales cycles. Was that like late in the quarter, you know, in the kind of, in March, April , or was that towards the beginning? And I guess any more color or clarity given on those comments would be fascinating. Thank you. Sure. So the comment was meant to be
competitors, and in a sense, they're actually thinking about better outcomes overall in the security space and beyond, and how to get it at a cheaper price. And that's again, things that we've talked about from day one, and we're seeing that happen today. So it's throughout the quarter that we're seeing both additional deal scrutiny, because of what I just mentioned, but also they do take longer, and that's throughout the entire quarter.
Thank you. Our next question comes from Jonathan Rookhaver with Cantor Fitzgerald. You may proceed. Yeah, hi, guys. So, I'm curious. When you look at data retention requirements, particularly XDR for ActiveThread Honey, but I guess increasingly going forward…
Is there any way for you to quantify what that looks like, the advantage you have? Well, specifically around lock scale, you see a massive increase in terms of our compression algorithms and our ability to store data. I think one of the areas where you look at lock scale and just the simple view of it is better, faster, cheaper.
architecture around lock scale really does give us an advantage there, and that's being borne out by customers in their own testing.
modern architecture around lock scale really does give us an advantage there. And that's being borne out by customers in their own testing. Thank you.
And our last question comes from Catherine Trebnick with Rosenblatt. You may proceed. Hi. Thank you for the question. Last, at the last analyst day, or the one before you talked about your coalition partnership, and can you talk to cyber insurance as a, is that still a tailwind, biggest tailwind as it was last year, or is that dissipated? Thank you. I appreciate it. Thank you. Thanks.
Yeah, I think cyber insurance for a lot of customers is very difficult to get, and it's actually gone up in cost. So we have many customers that as part of the CrowdStrike acquisition are baking in their ability to A, get cyber insurance, and B, in many cases, being able to reduce the overall cost because many of the cyber insurance providers recognize that.
with CrowdStrike in place, the overall risk is dramatically going to be reduced. So that's what we've seen. I don't know that there's any anomalies one way or another, but it's a continued problem in the industry to actually get cyber insurance, it is part of our overall value proposition to a customer.
to be able to A, help them get it, and B, reduce their overall cyber insurance costs. Thank you, and this concludes the Q&A session. I'd now like to turn the call back over to George Kurtz for any closing remarks. Well, I just wanted to thank everyone for their time and attention, and we appreciate the questions, and we look forward to seeing you next.