Q1 2024 Palo Alto Networks Inc Earnings Call
Walter Pritchard Senior Vice President of Investor Relations and corporate development. Please note that this call is being recorded today Wednesday November 15th 2023 at $1 30 PM Pacific time.
With me on today's call to discuss first quarter results, our cash Aurora, our chairman and Chief Executive Officer, and Deepak Lecher, Our Chief Financial Officer. Following our prepared remarks, Lee Klarich, our chief product officer will join us for the question and answer portion.
You can find the press release and other information to supplement today's discussion on our website at investors <unk> Palo Alto networks Dot com.
While there please click on the link for events and presentations defined the Q1 2024 earnings presentation and supplemental information.
During the course of today's call, we will make forward looking statements and projections regarding the company's business operations and financial performance. These.
These statements made today are subject to a number of risks and uncertainties that could cause our actual results to differ from these forward looking statements.
Please review our press release and recent SEC filings for a description of these risks and uncertainties, we assume no obligation to update any forward looking statements made in the presentation today.
We will also refer to non-GAAP financial measures. These measures should not be considered a substitute for financial measures prepared in accordance with GAAP. The most directly comparable GAAP financial metrics and reconciliations are in the press release and the appendix of the Investor presentation.
And unless specifically noted otherwise all results in comparisons are on a fiscal year over year basis.
We also note that management is participating in the UBS conference in November 2009.
I will now turn the call over to the cash.
Thank you Walter and good afternoon, everyone and thank you for joining us today for our earnings call.
Q1 was the first quarter of our three year plan, we presented in August.
If I were to summarize the quarter I would say the following.
Continue to execute amazingly well.
Is a volatile environment on the geopolitical front, we've been contending with what's happening in Israel in Ukraine.
On the hardware of our product front as Youll see.
There has been a normalization in the industry, it's something we've been indicating for awhile.
Backlog, because we can ship supply chain issues are behind us and broad growth is normalizing in the industry. We continue to six <unk>.
Normal strength as we've indicated in prior quarters in that category.
On the macroeconomic front business practices continue to adapt and adjust to a new normal with higher interest rates for longer.
Internally on the product side, you've had one of the strongest start to our fiscal year. In addition to various recognitions, we've delivered strong innovation across all three platforms.
Launched in AI enabled cloud manager and network security to continue our consolidation and collateralized Asian efforts toward Zero Trust and sassy, we announced our intent to deliver enterprise browsers, the tableau acquisition, which will solve one of the critical issues that are what access which is not addressed today by any sassy vendor then.
We released the industry's first integrated UI for quota cloud Prisma cloud and announced the acquisition of <unk> security double down on data security for regenerative AI and Prisma cloud last but not the least and cortex, we launched <unk> dot O with bring your own AI.
The go to market side Q1 is seasonally a slower start as we kick off the new year with the team delivered superior revenue and profitability.
Our highest cash collection quarter in our history.
We continue to see steady execution.
Excuse me in our firewall cloud and endpoint businesses for SaaS, we continue to position ourselves in larger and more strategic deals and <unk>.
It's early days continues to garner tremendous interest, giving us more comfort around our long term incentive.
So in summary, a strong start in Q1 towards our three year journey early days, but confidence inspiring let's.
Let's dig in the details.
Our Q1 revenue grew 20% of our billings grew 16%, while our peer growth of 26% exceeded both of these and was driven by our next generation security capabilities I would like you to pay particular attention to RPM versus buildings Deepak will talk about the difference at length and explain why the street might be confused with our future Billings guide.
Adams.
Our Q1, non-GAAP operating margins expanded by 760 basis points, driving 1.38, and non-GAAP earnings per share.
Record, one 5 billion adjusted free cash flow in Q1.
If you look at what's going on from an overall cyber security perspective.
We have never seen as much adversarial and consistent activity at scale as we have seen in the first quarter.
Unfortunately, you don't expect this to abate anytime soon.
As a consequence of this increased activity and in recognition of our customers' commitment to us. This week, we announced a unit 42 rapid incident response retainer at no cost to all of our strategic customers.
Aimed at providing additional support during this escalating threat landscape.
Ransomware attacks are increasing in frequency and severity the ransom amounts being paid are also increasing.
That acquisition damage in a much shorter amount of time as an example in a recent engagement of our year to 42 team you saw an instance, where bad actors extracted two four terabytes of data and just 14 hour.
There is also some evidence that the adversaries are beginning to generate AI as a tool to make attacks more sophisticated now.
Not just that based on what we're seeing in unit at 42, most attacks are not happening on the back of vulnerabilities and widely used software and apr's such as a widely exploit it move it file transfer software.
Unfortunately, these bad actors remain elusive with no apparent significant increase in convictions and high profile attacks was therefore not surprisingly this malicious activity continues.
At the same time U S publicly listed companies and the board are confronted with new SEC disclosure requirements around prompt public reporting on material cyber security incidents.
Asked oversight responsibility that comes with them.
This result is a continued focus across organizations on understanding security posture cyber security risks and how to mitigate this risk effectively.
This increasingly involves not only the seasonal but the entire <unk> organization legal finance and the CEO and the full board of directors.
The space of malicious activity at the board level focus on cyber security risks is fueling a strong demand environment customers have often have multiple strategic priorities in cyber security and our broad portfolio enables us to align with these priorities.
In Q1, the cost of money remains a constant discussion and customers significant focus on this topic is becoming the new normal.
The way it manifests itself in our businesses that theres always a payment and duration discussion in final lease negotiations.
Our strong balance sheet, we can use a mix of strategies to navigate the environment. This includes annual billing plans financing through a manifest and partner financing.
<unk> does not this does not impact our business demand or the impact to annual revenue annual metrics. It does create variability on total billings more than before depending on financing used or the duration of contracts.
I'm not concerned about the demand for cyber security this quarter and upcoming quarters, none of my concern about our ability to execute.
Earnings variability is a pure consequence, all the payment conversation that we're having with our customers and this was validated by the fact that we continue to see strong RP O and low churn, suggesting this is a cosmetic impact to our business.
We continue to see strong interest across our next generation security portfolio, and we're making progress on our platform migration journey.
I will highlight a few deals to talk about the diversity of opportunity across platform buys as well as the geographical distribution of our deals for example, federal government agencies signed a $25 million expansion transaction, including adding cortex, xdr, and prisma access and highly competitive situations and expanding the network security footprint this customer.
Is now spent over $100 million over its lifetime across oxy flat.
A large global SaaS provider signed an $18 million Prisma cloud transaction to consume modules across the portfolio. The customer is already a customer for our network security and cortex platforms, a large educational organization expanded its relationship with us in the first quarter of $15 million transaction, adding Exxon prisma cloud and in <unk>.
Expansion of its network security footprint.
And lastly, a nation state signed a $28 million deal that is a first of its kind standardizing on both Saturday and X I am. This is a long sales cycle and represents our systematic approach to Pratt formalization.
The story in these deals as in playing out across our large customers as of Q1, 56% of the global two thousands has transacted with us across startup prisma and cortex.
This continued focus on customer Ciber transformation has fueled a 53% growth in Ngls are are we report this quarter as we broke through the $3 billion milestone another exciting news as of Q1 recurring revenue across Palo Alto is 82% of our total revenue from 77% a year ago.
Let's turn onto updates I want to see platforms that are the engine driving our success first and network security.
We continue to drive innovation across our portfolio and see momentum as customers drive towards Zero Trust architecture.
This month, we unveiled panelists $11, one our cost months Estrada cloud manager.
Unifying the management of all of our three form factors and all security services in a single pane of glass and also leveraging AI to analyze security policies produced this configuration that predict and prevent disruptions.
Customers, who have invested in our platform by deploying all three form factors continue to grow rapidly up 34%.
Top 100 network security customers, 60% of purchased all three form factors up from 53% a year ago on average these platform customers spend more than 15 times over the rest of our network security customer spend.
The story is similar and sassy, having just seen our innovations gained multiple industry recognition. This assay in the second half of our fiscal year, we've continued to invest and build on our leadership position.
We see we're seeing strong momentum and sassy.
Our growth of approximately 60% in Q1, we.
We also saw a 35% of our $5 million or greater network security transaction includes sassy up from less than 10% a year ago.
Today. It was the first day of our event called sassy convert where we unveiled several enhancements.
We have been able SaaS either access applications with performance faster than the Internet.
We added visibility and control or interconnect SaaS applications and enable safe access to Jennie O tools to ensure data isn't inadvertently leaked lastly, we added remote browser isolation technology for an extra layer of security.
M&A has always been an important part of our strategy last week, we announced our intent to acquire talent cyber security.
See an opportunity to expand the addressable market for sassy and solve an important customer problem.
As many as 36% of workers classify themselves as independent workers, who often use unmanaged devices for work. In addition employees increasingly use personal devices for accessing business applications.
So naval Axis on these devices security teams have an impossible tradeoff, they're forced to either ignore security entirely in favor of flexibility and user experience.
Or to adopt cumbersome technologies like VDI.
Talent is a pioneer in the emerging enterprise browser category and when combined with Christmas Sassy after closing.
Enable users to securely access business applications from any device, including mobile devices and non corporate devices with a seamless user experience.
We intend to include this capacity capability because my access after closing and customers will be able to extend the same best in class security done managed devices movie.
Moving onto Prisma cloud.
We continue to see a strong endorsement of our integrated platform strategy.
Traction is evident in the strong growth of our multi module customers we have.
<unk> seen particular success here with modules released in the last two and a half years.
There has been a consistent pattern of seeing 100, plus customers for new modules. The first full quarter of launch and rapid growth after that as the benefits of these new modules are broadly understood.
This enthusiastic adoption has driven our strong conviction and adding key new modules, including some through acquisitions.
Our IC scanning capability, which came through the bridge crew acquisitions and see ICD security, which came through cider are two such examples.
This new module traction is helping to accelerate prisma cloud new business <unk> in the last quarters.
In Q1, we also unveiled a major new Prisma cloud release, Darwin Darvin further differentiate our unique position across code cloud infrastructure and cloud runtime Darvin enables a view across all elements of cloud applications, including cloud services infrastructure assets compute workloads API endpoints data and code Garvin can all.
So our customers understand risks with deep contacts overly active attack attempts in near real time.
Our full coverage from QUADRA cloud enables fixes to be applied immediately versus the ones months, most vulnerability stake to be passed.
Okay.
About two weeks ago, we announced our intention to acquire <unk> security, which will bring an award winning data security posture management capability Prisma cloud.
With almost 70% of organizations, having data stored in the public cloud.
All of new cloud data services and the adoption of generative AI, we see an increased need to identify sensitive data effectively manage user access and implement robust security measures to prevent unauthorized internal and external access to data stored in the cloud.
After the close of our proposed acquisition <unk> capabilities will be integrated into Prisma cloud platform right near real time data protection from code to cloud.
Moving onto cortex.
We continue to invest across our product portfolio and expand our customer count as we see continued adoption of xdr XOR expense X I am.
Q1, we have several industry recognition of our innovation cortex.
Cortex Xdr was the only product in the industry to achieve 100% protection of detection and the round five Mitra evaluation. Additionally, XOR expanse and <unk> are all named leaders by third parties this quarter.
Through our cortex active customer count by 25% to over 5200 customers attraction overall and cortex as essential as it allows us to sell our transformational offering excellent.
<unk> has had a very fast start since we released the product just over a year ago.
After a strong FY2023.
Science first year release, which included over 200 million in bookings, we followed up with a strong Q1.
You saw our first expansion purchase of X I'm, an eight figure deal in Q1, our largest <unk> customer to date was deployed with over 300000 endpoints.
We're seeing exciting transform customer security operations and significantly improve their security outcomes. This includes Sydney significant reductions in the meantime to detect and resolve security incidents on.
On the back of potential customers hearing about early signs of success our pipeline for <unk> is over $1 billion.
Of which $500 million created just in this last quarter.
As I began my remarks Q1 was the first quarter of us delivering on the three year plan. We presented in August we're driving profitable growth investing in innovation next generation security and the industry's largest dedicated security go to market organization at the same time, leveraging the scale of Palo Alto networks.
Man for cybersecurity is strong given the backdrop of attacks and the ever increasing focus on scrutiny around cyber risk.
<unk> continues to be Paramount given the macro conditions and we will continue to be a definitely responded to changes in the environment.
Manage for long term growth operating margin and free cash flow and ensure we continue to transform the business and build revenue predictably you will soon see this through our view and most importantly, our current RVO.
Our long term forecast thesis remains intact, whilst we expect short term variability in billings. We don't expect this to have a meaningful impact on our ability to deliver our three year targets with that I will turn it over to Deepak.
Thank you and our cash and good afternoon, everyone I'll cover the specifics of our Q1 results additional details on the drivers behind the results and our Q2 and fiscal year 2020 call guidance.
The Q1 revenue was $1 eight $8 billion and grew 20%.
Revenue grew three 3% total service revenue grew 25% with subscription revenue of 988 million growing 29% and support revenue of $549 million growing 17%.
We saw consistent revenue contribution across all theaters Americas grew 20% EMEA was up 19% and Japan grew 23%.
The strength of our next generation capabilities continues to drive our results and GSA huh.
Exceeding $3 billion for the first time.
And growing 53% leased.
We saw strong contributions across the portfolio in Q1.
We delivered total billings of two points, there were $2 billion up 16%.
Total deferred revenue in Q1 was $9 4 billion an increase of 32%.
Remaining performance obligation or <unk> was $10 4 billion, increasing 26% with current IPO just under half of our IPO.
As Nick has mentioned we sold the rising cost of money have an important inc.
Incremental impact on customer behavior in Q1.
We are responding to this in the ways, we have discussed previously, including using annual billing plans financing to panel fabs and partner financing.
In Q1, this had a negative impact on our billings, although as you can see we saw strength in NGF era and revenue.
Our non-GAAP earnings per share were significantly ahead of our guidance growing 66%.
This was driven primarily by the significant increase in our non-GAAP operating margins, which expanded 760 basis points year over year.
We continue to benefit from the scale inherent in our business, especially as some of our next generation security offerings scale.
We again delivered strong cash flow in Q1 with trailing 12 month adjusted free cash flow of $3 billion, achieving trailing 12 month free cash flow margins of 41%.
Moving beyond the top line.
Gross margin for Q1 of 78% increased 370 basis points year over year.
We again saw year over year improvements in product margins with the normalization of the supply chain environment.
Service gross margin improved to 78% as our newer offerings continue to gain scale.
Our operating margin expanded by 760 basis points in Q1, as we saw higher gross margins and efficiencies across our three operating expense lines.
We are pleased with our operating efficiency progress against our medium term target. We continue to make significant investments to support our top line growth expectations, including investments in product and engineering building sales capability and supporting our ecosystems and our go to market organization.
Turning to the balance sheet and cash flow statement.
We ended Q1 with cash equivalents and investments of $6 9 billion.
Q1 cash flow from operations was $1 $56 billion with total adjusted free cash flow of $1 489 billion.
This quarter.
As is typical for Q1 this cash flow performance was primarily driven by strong collections in the prior quarter based on the strength of our control bookings.
So our collections in the quarter, but based on the strength of our Q4 bookings.
Over the last several weeks, we announced that we have entered into definitive agreements to acquire two companies.
On October 31st we announced our intent to acquire <unk> security solutions for approximately $232 million in cash excluding the value of replacement equity awards on.
On November six we announced our intent to acquire talent cyber security for approximately $435 million, excluding the value of replacement equity awards and inclusive of cash on <unk> balance sheet at closing.
We expect both transactions will close in our second quarter fiscal year 2004.
During Q1, we repurchased approximately 300000 shares on the open market at an average price of approximately $227 a share.
For total consideration of $67 million as.
As a reminder, our share repurchase program is opportunistic and we're committed to returning cash to shareholders over the medium term.
Stock based compensation expense declined by 250 basis points as a percent of revenue year over year at.
As expected stock based compensation ticked up slightly as a percent of revenue quarter over quarter with the issuance of a portion of our fiscal year 'twenty four grounds on.
On a year over year basis, we continue to manage our SBC down as a percent of revenue in line with our long term clients.
Before turning to guidance I want to frame some of the impacts that we're seeing on our billings as the cash noted we see strong demand in the market and continue to see customers make technical selection of offerings across our portfolio.
From here, we see more customers asking for deferred payments.
Either with annual billings financing coupon of FES or pursuing external financing.
Some customers are looking for additional discounts the upfront payments as they grapple with the cost of money.
Our strong financial position, which includes $7 billion in cash cash equivalents and investments combined with our many options in dealing with this.
Dynamic gives us significant flexibility.
This can impact our billings trends quarter to quarter, and we are reducing our billings guidance to account for this through the fiscal year 2024.
<unk> and <unk> have more of a direct impact on future revenue this quarter with duration towards the low end of the range. We've seen over the last several quarters, we saw strong trends in <unk>.
As we've seen low customer churn, we're confident that independent of specific billing and contract language. We can continue to grow <unk> at levels that support our forward revenue growth ambitions.
Now moving onto our guidance for Q2 in the year.
For the second quarter of 2024, we expect billings to be in the range of $2 33, 5% to $2 38 5 billion.
Increase of 15% to 18%.
We expect revenue to be in the range of $1 95 to $1 985 billion, an increase of 18% to 20%.
We expect non-GAAP EPS to be in the range of <unk>.
129 to $1 $31.
A share an increase of 23% to 25%.
For the fiscal year 2024.
We expect billings to be in the range of $10 seven to $10 8 billion, an increase of 16% to 17%.
We expect <unk> to be in the range of $3 $95 billion to $4 billion, an increase of 34% to 35%. We expect revenue to be in the range of $8, one five to $8 $2 billion, an increase of 18% 19%.
We expect our fiscal year 'twenty for operating margins to be in the range of 26.
Six 5% up 190 to 240 basis points versus fiscal year 'twenty three.
We expect our non-GAAP EPS to be in the range of $5 40 to $5 53, an increase of 22 to 25.
5%.
And we expect adjusted free cash flow margin to be 37% to 38%.
Additionally, please consider the following modelling points.
We expect our non-GAAP tax rate to remain at 22% for the second quarter and fiscal year 2024 subject to the outcome outcome of future tax legislation. We also expect cash taxes in the range of $230 million to $280 million.
For the second quarter, we expect net interest and other income was <unk> $55 million to $60 million, we expect second quarter diluted shares outstanding of 339% in the.
42 million shares.
Fiscal year 2020 core diluted shares outstanding of 338 to 343 million shares.
And we expect fiscal year 2020 for capital expenditures of $175 million to $185 million of $40 million to $45 million in Q2.
With that I'll pass it back to Walter for the Q&A portion of the call.
Thank you Deepak to provide as broad of participation as possible. Please limit yourself to one question. Our first question will be from socket calia with Barclays followed up by Hamzah firewall up from Morgan Stanley go ahead socket.
Okay, Great Hey, guys. Thanks for taking my questions here.
Deepak maybe the question is for you.
Appreciate the revised billings guide in this macro backdrop and to your point the higher cost of money.
I'm curious, how you've maybe thought about.
Factors like pipeline like close rates and very importantly, billings duration for the rest of the year as we just try to get comfortable with how much. The billings guide has maybe been derisked.
Yeah.
Okay. Thanks for the question I wanted to take this one because it's more of a demand function.
Thank you.
Sure.
Repetition doesn't support the prayers I will repeat.
The billings difference is not a change in demand for us or not a function of our pipeline.
The billings changed as a consequence of negotiations with customers and the customer says he wanted me to pay you for three years upfront.
You got to give me a bigger discount you want to pay me want me to do a three year deal.
You got to go finance it benefits I could do that but I can tell you just pay me on an annual basis I'm. Okay.
Ah collect my money every year.
If I go in that direction my billings changes.
It does not change anything in my pipeline and my close rates or in my demand function.
At some point.
So, we're just keeping giving ourselves flexibility because this quarter, we saw a lot more negotiations around those topics I just don't want to be held hostage to those kick out of negotiations or we have to go finance deals to get the C. D and there is billings as the PCV metrics.
It is important.
I am concerned about churn.
We have very low churn across my product category.
So I'm very happy to collect my money on an annualized basis, that's what's needed to make sure that I don't get pressure on financing I don't get pressure on having to give a larger discounts I retain flexibility I do do a lot of PCB deals I do a lot of financing. This allows me the flexibility. So I don't want to make sure. There is no change the demand function in the market. There is no change.
Our revenue forecast.
Got it very helpful. Thank you.
Thanks Socket next up is going to be Hamzah firewall up from Morgan Stanley followed by Brian Essex from Jpmorgan I'm, sorry go ahead.
Hey, good evening. Thank you for taking my question I, just want to start by offering my thoughts and condolences to all your employees in Israel.
Yes.
Yes, it's kind of similar vein.
Good question.
16% billing growth is certainly not bad in the context of many of your peers growing single digits if at all.
I'm just curious because your guidance is still assuming that growth will sustain for the full year. So what's giving you that confidence given the cost of money given the hardware digestion that you can sustain that high teens billings growth given what youre seeing in the market.
So as you know.
So I could have mentioned what pipeline, we have visibility through our pipeline. So we know there's business out there we have not seen customers walk away from deals in Q1, it's not like people don't want to do business.
We've been very consistent on hardware in our hardware expectations for the last 12 months, we are regaining our consistent expectations on hardware, we don't expect any lumpy movements up or down. We expect there is going to grow steadily in the zero to 5% range as we've always been talking about so I think from that perspective, I think to use sockets word we feel <unk>.
Isn't really derisked on what's out there in the future Q1 of the first quarter allows us we have lots of pipeline, we have visibility to I think I want to reiterate again, we are retaining flexibility can I go finance it and of course I can kind of go finance it through your deal who benefits of $7 million of cash I can which ike, but youll have in cosmetic impact or giving you better buildings.
But what I don't want to do is finance bad deals.
This allows me the flexibility of not having to finance them nothing changes I still give them a revenue for the year I'm still getting my CRP O I still got my annual Billings I, just don't get ear to near three building that changes my total billings forecast.
Cosmetics mathematics, but.
It's interesting to see how the street interpreted.
Okay.
Thank you.
Thank you Hamzah next up we have Brian Essex from J P. Morgan followed by Gabriela Borges from Goldman Sachs. Brian Go ahead. Please.
You're muted Brian.
Thanks, a lot.
Yes, Thank you for taking the question.
Maybe wondering if I could dig in on M&A, a little bit of a.
Pretty meaningful volume.
Of M&A from a dollar spent perspective this quarter after not having done some for a while how.
How would you describe the overall environment and how would you I guess message to investors the level of M&A that you might do over the next couple of years. So is this more of a one off IP and Aqua hire that you saw a great opportunity to pick up or might there be something meaningful in terms of.
Longer term trend or even.
Dollars put through your sales pipeline as you.
Scale, the Soviet platform, our scale both of them over your platform.
So Brian Thanks for the question look.
We have not changed our point of view, we have always maintained that we're going to sustain M&A at a level close to $1 billion a year.
So we haven't done one for a while.
<unk>.
And if you see if you split the two we did a cloud security one we've been pretty consistent in that rough range in the $150 million to $250 million range in terms of adding cloud capability as we see the market evolve. So I think that's kind of consistent where we are we saw unique opportunity as I mentioned, 36% of workers are.
Workers, they don't get a sassy remote access.
Solution, we saw more and more discussion in the market, where RBI will not.
<unk> every use case and managed devices, where not all your mobile homes don't have management for security last few hacks that happened to mobile devices. So from that perspective customers are asking what is my solution and now what we didn't want to do is to deploy yet another independent solution just disconnected from our overall size of capability.
And like we do have always pay attention to the market. He forgot to al had the best Tech in this space and they were just about to go ways to go to a go to market.
Florida power exposure.
That will be the other companies.
And from that perspective, we saw an opportunity and we think it's a great that actually makes us. The most comprehensive SaaS solution, we are going to integrate them deeply into our associates and customers will be able to use enterprise browsers RBI are our prisma access clients. So.
I don't want to call. It a one off a one off sounds that will ever happen again, but I think he is just happens to be the time, where we did too at the same time or they're in two different platforms different teams integrating them, let's not overhead to the organization.
But we're going to keep our cautious approach towards.
And what we can digest.
Shouldn't expect anything that is oh.
The regular pattern, we've just we've sort of shown in the last 12 months.
Got it helpful. Thank you great. Thank you. Brian next question is going to be from Gabriela Borges with Goldman Sachs with Roger Boyd at UBS on deck go ahead Gabriele.
Good afternoon, and thank you.
I'll ask about the two dynamics that you're talking about.
The firewall cycle on the one hand, and the cost of money impacting billings Josh.
How do you think about the potential that these two dynamics actually connected meaning cognex is also having an impact on billings duration and how do you think about the risk that cost money dynamic Scott Morris.
Before they get better, thereby impacting our full year guidance.
Gotcha. Thank you.
So thank you Gabriel like the firewall business is actually is a.
There's the one chart business yourself piece of hardware and you get paid for it it's not a ratable business I throw out ability comes from our subscriptions and services.
It's usually there we have to look at it from an NGL perspective, our duration. This quarter was on the lower end of duration reduced went down because we took more annual billing deals or we took shorter duration contracts with our customers.
So from that perspective.
I think we feel comfortable given the visibility to our pipeline for the rest of the year that flexibility for ourselves on building.
I think we're going to keep having this debate where you keep calling it guiding down on billings I won't keep calling it flexibility.
He is guiding down on billings and keep telling you it doesn't change my numbers so.
Agree that we're going to be saying that because I don't nothing has changed in the prospects of volatile from three months ago.
Alright, Thanks for your question.
Maybe just to build on that.
Walter I'd say like just recognize that we're also maintaining our task guidance, which would be the other area.
I get concerned when all comes on on that front.
Okay.
Great. Thanks, Gabriella <unk> next question is from Roger Boyd at UBS, followed by Brad Zelnick at Deutsche Bank Go ahead, Roger Great. Thanks for taking the question.
Just looking at the <unk> pipeline that that $1 billion is a pretty impressive mark.
Any color you can provide on the size of the length of those deals as we think about it from an IRR perspective, and I know you've talked about the three X are our up sell or expansion potential.
But just any any color on the size of those deals and how we should think about that kind of flowing into opportunities over the course of fiscal 'twenty four.
Yes.
I'm trying to make sure at least leave I guess to ask some questions.
I don't want to show up next time.
Yeah.
[laughter] IRA.
Yes.
Obviously over the last few quarters can talk about X I am in the the interest we're seeing from customers.
Is very.
Strong and.
It's been the <unk>.
This sort of growth of a new product that we've ever seen.
I think it speaks to a couple of things one is just the.
The need in the market from customers to go through the stock transformation the.
<unk> talked about the speed of attacks.
Creasing.
Relative to disclosure requirements and things like that and obviously the number of attacks simply going up as well that's driving the the technology needed to have a different solution better solution, one driven by AI and automation and Thats exactly how that sandwich was built.
And that is what's fueling the interest the second part of this is.
With <unk>, we're able to replace several of the customers legacy point solutions in the stock. So we are consolidating multiple independent piece parts with a single Xa and deployment.
And third with each deployment of Exane. This is this is a significant <unk>.
Investments the customers, making us.
Right.
Investments in our.
Three year investments patiently monitor.
Because they're standardizing their stock.
Yeah.
They want that long term run rate with us.
It is not a short term decision, they're making so all of those factors are what are fueling the strong pipeline that we shared in the the early customer success, we're having with Exane.
Great. Thank you for the question next question from Brad Zelnick at Deutsche Bank, followed by <unk> at Citi Go ahead Brett.
Great. Thanks, very much for taking the question I wanted to ask you about your new hardware lineup and the release of Pan OS 11, one I noticed some of the newer features like quantum security and advanced.
Fieldfare patient zero prevention I, just wanted to get your take on the extent to which the new platform can catalyze demand as customers try to look to take advantage of the innovation and maybe if you could help us compare contrast versus prior product cycles.
Yes. Thank you.
I always get excited about the next Gen firewall releases of course very good.
And a big trend.
[laughter].
B.
But what we announced was a new high end <unk>.
Jesse so one that scales beyond a terabyte per second and so there's a.
Obviously, this is where the largest highest performance networks out their service provider and in some cases large enterprise environments.
Ruggedized platforms.
One is it can go to plus 50 degrees Celsius minus 40 degrees Celsius, because theres there are harsh environments out there that also need to be protected right.
This is expanding the use cases.
So we can support with our hardware next Gen firewalls.
The other pieces you mentioned are also equally exciting from a software perspective.
Quantum is still likely a ways off but there's a lot of companies that are starting to prepare for that thinking about.
What happens in post quantum cryptography in the advent of potential entre computers, and what that will mean and so.
This is the start of a set of quantum security capabilities that we're launching for our customers you mentioned Vas wildfire, we added a proxy capabilities, we added ATM capabilities, there's a lot of innovation in this industry.
Generally in that with the strides.
As customers look to be on our latest gen four or newer hardware architectures.
Overtime means hardware refreshes and upgrades and so all of that is good and helps it helps our customers Gibson most secure state.
Yeah.
Well thank you great.
Great. Thank you for that next question is for T Mobile Ani at Citibank, followed by Joel Fishbein from tourists go ahead Fatima.
Afternoon. Thank you for taking my questions and either for any cash or Deepak.
Some of your pipeline commentary is what I wanted to unpack as you think about the composition of <unk> for the remainder of the year and bearing in mind. Some of your product pillars are I'm.
I am not going to say maturity, but certainly there it's more penetrated than others. So I wanted to get a sense of how you're thinking about a contribution by Polaris.
Our expectations for the year and to the extent anything Dara has changed and I recognize that you love all your product pillars equally but any distinct.
I was going to stop.
This is very kind of things to remember prior answers.
Tried to give a I tried to give a preview of that in our prepared remarks, where I said, we continue to see steady educate execution and hardware endpoint and cloud. So theyre following expected trajectory, we see the pipeline as I said, the excitement and upside is coming out of SaaS. Okay.
And we see that there are large SaaS E network transformation deals out there.
These things have anywhere from six months to 12 months closing cycles. So we would have to know what's in the pipe for the rest of the year absence or some sense of comfort. We also said we grew that business, 60% in the first quarter on your own.
They cannot especially enough about <unk> as you know so far so.
<unk> pipeline are hoping will close in that six to nine month interest in the Exxon pipeline. So as the fastest in the pipeline for deals.
Those faster because the SaaS is often very competitive there poc's involve future comparisons that hit us in one or two other companies in the case of Exxon have really competing with the incumbent.
Helpful. Thank you.
Great. Thank you for team. Our next question is from Joel Fishbein of tourists followed by Joe Gallo at Jefferies. Joel to go ahead with your question.
Thanks for taking thanks for taking the question. This is for the cash.
And Lee the cashew you called out there.
The recent ransomware attacks and also the SBC <unk>.
Requirements I'm curious number one is there is that helping to drive business and what products essentially would that be driving Palo alto and why you're sort of in a unique position to sort of address some of these these issues, yes. So it's interesting Joe.
Let me connect that to something we announced yesterday. So first of all as I said the activity is at an all time high.
Every day you read about ransomware attacks now the FCC regulations actually not kicked in yet I think they kick in December but youre seeing some companies go out there and start to sort of self report and anticipation because they're all petrified.
So I think youre going to see more and more disclosure and we'll be trying to parse did more activity or more disclosure. So it's a good question I think it's more activity that we've seen more and more activity our team does research.
We've had the maximum number of inbounds to our incident response team in the last months than we've had before so clearly anecdotally also it's sort of come true that this is what's happening up typically the anatomy of an attack for us from our vantage point is that when we get engaged in incident response typically we go in and redeploy it protection.
Sort of suite, where we go in and for Xdr everywhere and we'll go from a bunch of analytics to make sure we understand what happened and where the.
T.
But actions may still be resident in a customer's infrastructure now typically we do that and believed they don't want us to leave with our stuff. They want us to be one step back in case, you guys come back so from that perspective.
Incident becomes a lead unfortunately.
Because of the fact that it becomes a lead for us and that creates a whole bunch of product conversations around whether we're going to deploy endpoints, whether we need to upgrade their firewalls or the need to go down a cyber security transformation I'll tell you and nine times out of 10 every one of those customers ends up in the cyber security transformation because they discover that they have a lot of stuff that this should have upgraded or.
Or changed in that process. So that's kind of what happens with those.
Those are products, which typically end up as those customers.
Maybe I'll just add one point.
Nick has just described.
<unk> extortion ransomware attacks being on the rise 37% increase.
Key to that is a lot of companies sort of become used to call. It normal encryption only ransomware attacks. So they had invested in backups, so that when that happens they just backup from a clean backup and earn back and operational.
Multi extortion attack actually steal data and then extort.
The target and so this cant simply be downloaded as backups and this is driving a need for.
Better and greater investment in prevention of the attacks and not just the recovery Cheyenne connector.
Connects the sophistication to the to the investigators are strong.
Thank you.
Alright, Great next question from Joe Gallo at Jefferies, followed by Gray Powell of BCG, Joe go ahead.
Hey, guys. Thanks for the question you've made several acquisitions further bolstering cloud congrats on that 12 module. The cash when do you think the platform message truly cements itself in that market as it currently feels like the wild West and then has the pricing environment stabilized there at all.
Great questions, yes, the pricing has stabilized.
We saw tremendous pricing pressure in the last fiscal year with the emergence of few competitors, who are willing to do whatever it takes to try and dislodge our platforms our solutions.
So I think it's fair to say that pricing is beginning to stabilize I think it was interesting is we're seeing customers.
And the second time around.
And start looking at the platform I think the first wave so far and there is still part of the customers showed that with Australia is still very module driven I wanted to see SPM solution I want to see in App solution and I want to look at it. So you'll find that there are different people in the customers organization or responsible for different pieces of the cloud security.
And then they are trying to look for best of breed as kind of like replicating what happened in enterprise security, but as soon as this chart, putting big deployments our scale of any kind they have to start having a platform.
I, just told you and an $18 million deal for platform for a lot of SaaS company. We don't have every large SAS companies, which upon our platform absolutely every large SaaS company media platform because they have a different tools that they're not able to stitch together. So I think it's going to be survey.
Recursive journey, where we'll show that will land and some customers some customers on other people will land, but their modules, but eventually each of those customers astrophysical collateral coalition. So we're sort of focused on our platform story and we're focused on making sure we make our platform more and more robust I was at a CIO and before just this morning, there's 30 of them there.
The first question was what is interesting you guys bought big data security posture management, how does that integration to the following five things we have running Android will follow.
Can you talk to each other.
Thanks, Alright. Thanks for the question Joe next question from Gray Powell with BTG, followed by dental and at Cleveland Research. Greg Go ahead.
Okay, great. Thank you very much.
Yes, so maybe a broader question.
It's pretty clear that the firewall space are that there's headwinds across.
The firewall appliance space this year impacting everyone.
But youre still guiding Q2 billings to about 17% growth your closest competitors guiding to minus five historically, you've been fairly correlated with them.
I know you can't speak to their business, but can you talk about what's different on your side why you are more insulated as it is it more of the MBS portfolio is it data center exposure is it share gains is there just anything you can kind of help us think through those dynamics.
Yes, all of the above.
Sure.
I'm trying to I mean, I kind of have clauses, which competitor is talking about both okay.
Look we are in multiple businesses and our firewall business as we said on the hardware business, we see that 2% to 5% is being where the market is and some of that we achieved.
Refresh some of that we achieved through our own customers expanding so that would be achieved through replacement of other people's firewalls.
In the last I'd say 18 months, we've been very good.
Diligent about making sure we normalize for the effects of backlog of supply chain and that guidance into that thinking and you see that in our numbers. So I don't think thats going to change much for us I can't comment on other people's billing variability.
We just saw the impact of billing variability for sure our numbers this quarter. So I'm sure. They have their reasons have been variability.
In terms of SaaS as I've said.
We compete with a different set of people not with the other people we saw 60% growth this quarter and we have visibility to the pipeline for the rest of the year, which gives us comfort that there is there is business to be had there. We told you about <unk>, which is again a category, which is more on the Sop management space is a different set of competitors.
Xdr.
One set of competitors and then cloud security, where a company was more startup. So I think the portfolio allows us to look at different growth rates in different pipelines across the spectrum as I said the demand function is not going down for cyber security across the board and we think thats changing as people, saying I'll do a two year one year deal a three year deal or a five year deal of the year.
Later, you finance it or alter year over year, that's the only that's the only confusion youre seeing and I think if you do all of that in the market you're figuring out the underlying growth rates are strong or some people in certain categories.
Great. Thanks for the question.
Thank you a follow up for our next question comes from Ben Bollin, Cleveland Research, followed by a <unk> Kidron from Oppenheimer go ahead Ben.
Good afternoon, everyone. Thanks for taking the question.
I wanted to piggyback.
Great question, a little bit when you look at the underlying product revenue.
How much of that is physical appliance versus the software form factor and then.
A follow on would be interested in your thoughts on.
How the trajectory of branch firewall looks over time as customers adopt more BMS and SaaS seat to get that scale. That's it. Thank you yeah. So let me let me take the first part of the question I mean, our product revenue and cash flows that zero to five is actually across hardware virtual firewalls and novel software that's.
Counted in product revenue, we talked about.
Last time, then I think it's very customer specific in terms of what their actual needs. So again, rather than trying to pass through each of them I think it's looking at the aggregate, we'll feel pretty comfortable in that zero to 5% rate pressures.
So software is about 30, 35%.
This quarter alright.
And you can see that in our gross margins our gross margins continue to improve for product because software lots of CA.
Higher gross margin product for us.
And then I think your second question was around what is what is the impact of this on the branch deployments.
Theres really primarily two models for the branch one is.
SD Wan only branch that tends to be for smaller branches, where all of the security or just about all security moves into chassis and Scott delivered in the second model is a next gen firewall typically with SD Wan Bilton rash, which is still often connected back to chassis for global network connectivity et cetera.
So.
The shift to software and SaaS he doesn't.
Replace the need for the branch to have.
At local intelligence seem to be an extension of the customer's network and also an extension of the network security posture Zero Trust posture everywhere.
Thank you.
Next up <unk> <unk> from Oppenheimer, followed by Patrick Colville from Scotiabank go ahead of time.
Walter if I kind of just.
Not sure I got the answer for Ben's question quite right on hardware can you tell us exactly hardware and what percent of revenue that is and Cisco in conjunction to you right. Now reported also results and they've talked about they've significantly took down there next quarter guidance in the view that for the last two or three quarters.
A lot of hardware was sold but not installed and so there'll be some digestion period in there. My question to you will use sell firewalls, how much visibility do you have into how much of that is actually goes and sits on the shelf versus actually gets deployed in the field.
And so is there a risk with zero blind spot here, where you might not know exactly how your customers are handling hardware firewall hardware and.
To Dr <unk>.
Somehow we go business as well.
So I don't I did not listen to the Cisco call because we are here.
And even if I had to time I wouldn't be so good.
So I don't understand so very large hardware business remember utter is a small part of our business a b we only.
We only report in revenue, what we sell and shipped to the customer. So there is nothing if it's sitting on the shelf at a customer then.
It's still sold from our perspective, yes, but budget, but you don't have things been looking into it but do you have visibility.
I shall again installed enough yes.
Yes every spot overall that is deploy it has to be registered with us. So we have reasonably good visibility into firewalls that are sold and deployed at any point I would say, it's fair to say, yes. There are specific issues, where customers may have bought extra firewalls within limits of deploying but theres no I would say there is no.
Uncharacteristic or different activity, we've seen in the last three months that has been away from the normal. So if you don't have suddenly the last one a lot of customers don't want to borrowers I think I'm going to.
To try and guess, but there was this hold backlog situation of supply chain program, where people may have bought ahead, because we are expecting supply chain prices to continue and now they've got a bunch of stuff that an order sitting around that they can deploy in October where we don't have that situation. We never went down that path. We didn't hear a lot of backlog we ship, we never went bust.
Paul speaks of shipping.
So I know that in the industry. Some people are up to one year in terms of shipping backlog, we a couple of weeks or back to $4. Six weeks. So it really is not an impact for us from that perspective.
So I think that should give you some better sense of.
What the spread is we have reasonably decent.
Decent visibility into our pipeline.
Our predominant margin, yes, but nothing as substantive as you might have seen from other people.
Thank you.
Thanks, and we will take our last question from Patrick Colville at Scotiabank Patrick go ahead.
Alright, Thank you Walter for squeezing me in and sore throat, so Simon but like Jason Statham, So forgive me for being the clients.
To me the standout metric was that the non-GAAP operating margin, which was 28%.
Typically <unk> is like the low watermark for margin, but based on your guidance, it's actually predicted.
The high watermark.
So.
Yes.
I presume talon in degen going to be dilutive, but deepak are there any other puts and takes.
We should consider around operating margin.
I think I think you obviously talked about with <unk>, which is which is part of the rationale for the annual thing we did have some expense expenses.
Expected to incur in Q1.
That will now come later in the year somewhere around the marketing areas as well, but I would say is just normal course of operating business.
Fundamentally I think I think taken Pal and explains the majority of the rash I will just say on a year on year comparison, we did have.
Hiring.
Had a different.
What level of hiring activity.
This year, it's a lot more.
Normalized in terms of how we're ramping so there's just a little bit of a factor calculation and there, but nothing really out of Danone.
Alright. Thank you Patrick for your question and thanks, everybody for participating and with that I'll pass it over to <unk> for his closing comments.
Well. Thank you very much again, everyone for taking the time to attend the earnings call. It.
I would be remiss, if I did not use the opportunity to thank all of our employees across the world.
One's in Israel specialty.
What's happening in that part of the World I also wanted to thank all of our partners and customers for trusting us all of the networks.
Okay.
Sure.