Q1 2026 OneSpan Inc Earnings Call
Operator 2: Good day, and thank you for standing by. Welcome to the Q1 2026 OneSpan earnings conference call. I would now like to hand the conference over to your first speaker today, Joe Maxa, VP of Investor Relations. Please go ahead.
Operator: Good day, and thank you for standing by. Welcome to the Q1 2026 OneSpan earnings conference call. I would now like to hand the conference over to your first speaker today, Joe Maxa, VP of Investor Relations. Please go ahead.
Speaker #1: After the speaker's presentation, there will be a question-and-answer session. To ask a question during the session, you will need to press *11 on your telephone.
Speaker #1: You will then hear an automated message advising your hand is raised. To withdraw your question, please press *11 again. Please be advised that today's conference is being recorded.
Speaker #1: I would now like to hand the conference over to your first speaker today, Joe Maxa, VP of Investor Relations. Please go ahead.
Joe Maxa: Thank you, operator. Hello, everyone, and thank you for joining the OneSpan Q1 2026 earnings conference call. This call is being webcast and can be accessed on the Investor Relations section of OneSpan's website at investors.onespan.com. Joining me on the call today is Victor Limongelli, our Chief Executive Officer; and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our Q1 2026. To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions. Please note that statements made during this conference call that relate to future plans, events, or performance, including the outlook for full year 2026 and other long-term financial targets, are forward-looking statements. These statements involve risks and uncertainties and are based on current assumptions.
Joe Maxa: Thank you, operator. Hello, everyone, and thank you for joining the OneSpan Q1 2026 earnings conference call. This call is being webcast and can be accessed on the Investor Relations section of OneSpan's website at investors.onespan.com. Joining me on the call today is Victor Limongelli, our Chief Executive Officer; and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our Q1 2026. To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions. Please note that statements made during this conference call that relate to future plans, events, or performance, including the outlook for full year 2026 and other long-term financial targets, are forward-looking statements. These statements involve risks and uncertainties and are based on current assumptions.
Speaker #2: Thank you, operator. Hello, everyone. And thank you for joining the OneSpan First Quarter 2026 Earnings Conference Call. This call is being webcast and can be accessed on the Investor Relations section of OneSpan's website at investors.onespan.com.
Speaker #2: Joining me on the call today are Victor Limongelli, our Chief Executive Officer, and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our first quarter of 2026.
Speaker #2: To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions.
Speaker #2: Please note that statements made during this conference call that relate to future plans, events, or performance including the outlook for full year 2026 and other long-term financial targets are forward-looking statements.
Speaker #2: These statements involve risks and uncertainties, and are based on current assumptions. Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements.
Joe Maxa: Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements. I direct your attention to today's press release and the company's filings with the US Securities and Exchange Commission for a discussion of such risks and uncertainties. Also note that financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from this related GAAP financial measure. We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website. In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is 30 April 2026. Any forward-looking statements and related assumptions are made as of this date.
Joe Maxa: Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements. I direct your attention to today's press release and the company's filings with the US Securities and Exchange Commission for a discussion of such risks and uncertainties. Also note that financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from this related GAAP financial measure. We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website. In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is 30 April 2026. Any forward-looking statements and related assumptions are made as of this date.
Speaker #2: I direct your attention to today's press release and the company's filings with the U.S. Securities and Exchange Commission for a discussion of such risks and uncertainties.
Speaker #2: Also note that financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from this related GAAP financial measure.
Speaker #2: We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website.
Speaker #2: In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is April 30, 2026.
Speaker #2: Any forward-looking statements and related assumptions are made as of this date. Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason.
Joe Maxa: Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason. I will now turn the call to Victor.
Joe Maxa: Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason. I will now turn the call to Victor.
Speaker #2: I will now turn the call to Victor.
Speaker #3: Thank you, Joe. Hello, everyone. Thank you for joining us today. We had a good first quarter, with strong profitability, and solid revenue growth. Indeed, subscription revenue grew 8% year over year, and our adjusted EBITDA margin was 32%.
Victor Limongelli: Thank you, Joe. Hello, everyone. Thank you for joining us today. We had a good Q1 with strong profitability and solid revenue growth. Indeed, subscription revenue grew 8% year-over-year, and our adjusted EBITDA margin was 32%. I'm also happy to report that notwithstanding the doom and gloom you might hear about software, our Gross Revenue Retention increased again in Q1, reaching 90% for the company as a whole and 94% for our Digital Agreements business. We also generated healthy cash flows, and we returned capital to shareholders via share buybacks, which have totaled approximately 1.5 million shares for more than $18 million over the past 3 quarters, and via an increased quarterly dividend as well.
Victor Limongelli: Thank you, Joe. Hello, everyone. Thank you for joining us today. We had a good Q1 with strong profitability and solid revenue growth. Indeed, subscription revenue grew 8% year-over-year, and our adjusted EBITDA margin was 32%. I'm also happy to report that notwithstanding the doom and gloom you might hear about software, our Gross Revenue Retention increased again in Q1, reaching 90% for the company as a whole and 94% for our Digital Agreements business. We also generated healthy cash flows, and we returned capital to shareholders via share buybacks, which have totaled approximately 1.5 million shares for more than $18 million over the past 3 quarters, and via an increased quarterly dividend as well.
Speaker #3: I'm also happy to report that, notwithstanding the doom-and-gloom you might hear about software, our gross revenue retention increased again in Q1, reaching 90% for the company as a whole and 94% for our Digital Agreements business.
Speaker #3: We also generated healthy cash flows and we returned capital to shareholders via share buybacks which have totaled approximately $1.5 million shares for more than 18 million dollars over the past three quarters.
Speaker #3: And via an increased quarterly dividend as well.
Speaker #2: Before reviewing our results in more detail, I'd like to provide an update on our investments and how we are positioning the company for stronger growth over time.
Victor Limongelli: Before reviewing our results in more detail, I'd like to provide an update on our investments and how we are positioning the company for stronger growth over time. First, in Q1, we completed the acquisition of Build38, which brings a fantastic team to OneSpan with deep expertise in mobile threats and mobile application protection and provides customers with telemetry to help them understand the attacks targeting their mobile applications and the environment in which they operate. Keep in mind that the vast majority of consumer banking is now conducted through mobile banking applications, making this a critical attack surface for banks to protect. We now offer post-compilation application protection, sometimes called post-compilation wrapping, as well as an SDK-based approach through which customers can build an application protection and the telemetry necessary for visibility into the threat environment and overall operating environment.
Victor Limongelli: Before reviewing our results in more detail, I'd like to provide an update on our investments and how we are positioning the company for stronger growth over time. First, in Q1, we completed the acquisition of Build38, which brings a fantastic team to OneSpan with deep expertise in mobile threats and mobile application protection and provides customers with telemetry to help them understand the attacks targeting their mobile applications and the environment in which they operate. Keep in mind that the vast majority of consumer banking is now conducted through mobile banking applications, making this a critical attack surface for banks to protect. We now offer post-compilation application protection, sometimes called post-compilation wrapping, as well as an SDK-based approach through which customers can build an application protection and the telemetry necessary for visibility into the threat environment and overall operating environment.
Speaker #2: First, in Q1, we completed the acquisition of Build38, which brings a fantastic team to OneSpan, with deep expertise in mobile threats and mobile application protection and provides customers with telemetry to help them understand the attacks, targeting their mobile applications and the environment in which they operate.
Speaker #2: Keep in mind that the vast majority of consumer banking is now conducted through mobile banking applications, making this a critical attack surface for banks to protect.
Speaker #2: We now offer post-compilation application protection, sometimes called post-compilation wrapping, as well as an SDK-based approach through which customers can build in-application protection and the telemetry necessary for visibility into the threat environment and overall operating environment.
Speaker #2: With the addition of Build38's capabilities, I am happy to report that we now offer a comprehensive set of leading mobile application security technologies across the app shielding landscape.
Victor Limongelli: With the addition of Build38's capabilities, I am happy to report that we now offer a comprehensive set of leading mobile application security technologies across the app shielding landscape. Second, I want to update you on the acquisition we completed last year of Nok Nok Labs, the pioneer of the FIDO Alliance and of passwordless authentication. Together we have grown that business materially, with ARR having increased about 20% in less than 10 months since closing. It has broadened our product set as well. We now have the broadest B2B2C authentication offering, both hardware and software, cloud and on-prem, and OTP and FIDO. Third, we continue to invest in internal research and development.
Victor Limongelli: With the addition of Build38's capabilities, I am happy to report that we now offer a comprehensive set of leading mobile application security technologies across the app shielding landscape. Second, I want to update you on the acquisition we completed last year of Nok Nok Labs, the pioneer of the FIDO Alliance and of passwordless authentication. Together we have grown that business materially, with ARR having increased about 20% in less than 10 months since closing. It has broadened our product set as well. We now have the broadest B2B2C authentication offering, both hardware and software, cloud and on-prem, and OTP and FIDO. Third, we continue to invest in internal research and development.
Speaker #2: Second, I want to update you on the acquisition we completed last year of Knock Knock Labs, the pioneer of the FIDO Alliance and of passwordless authentication.
Speaker #2: A fabulous team from Knock Knock joined our company and together we have grown that business materially, with ARR having increased about 20% in less than 10 months since closing.
Speaker #2: And it has broadened our product set as well. We now have the broadest B2B2C authentication offering, both hardware and software, cloud and on-prem, and OTP and FIDO.
Speaker #2: Third, we continue to invest in internal research and development in our digital agreements business. We continue to make strides towards our goal of delivering secure, seamless agreement workflows purpose-built for the financial services industry combining white-label capabilities with embedded security compliance and identity assurance across the eSignature journey.
Victor Limongelli: In our Digital Agreements business, we continue to make strides towards our goal of delivering secure, seamless agreement workflows purpose-built for the financial services industry, combining white label capabilities with embedded security, compliance, and identity assurance across the e-signature journey. We're also planning to integrate AI-driven capabilities to provide deeper insights, streamline decision-making, and further simplify integration into our customers' existing environments. Last but not least, I want to reiterate that neither our Digital Agreements business nor our cybersecurity business has seat-based licensing as the primary revenue model. In cybersecurity, we sell to our customers based on the number of their end users and not based on the number of their employees or seats. Our licenses are tied to the number of consumers using strong authentication or app shielding solutions.
Victor Limongelli: In our Digital Agreements business, we continue to make strides towards our goal of delivering secure, seamless agreement workflows purpose-built for the financial services industry, combining white label capabilities with embedded security, compliance, and identity assurance across the e-signature journey. We're also planning to integrate AI-driven capabilities to provide deeper insights, streamline decision-making, and further simplify integration into our customers' existing environments. Last but not least, I want to reiterate that neither our Digital Agreements business nor our cybersecurity business has seat-based licensing as the primary revenue model. In cybersecurity, we sell to our customers based on the number of their end users and not based on the number of their employees or seats. Our licenses are tied to the number of consumers using strong authentication or app shielding solutions.
Speaker #2: We're also planning to integrate AI-driven capabilities to provide deeper insights and streamline decision-making and further simplify integration into our customers' existing environments. Last but not least, I want to reiterate that neither our digital agreements business nor our cybersecurity business has seat-based licensing as the primary revenue model.
Speaker #2: In cybersecurity, we sell to our customers based on the number of their end users, and not based on the number of their employees or seats.
Speaker #2: Our licenses are tied to the number of consumers using strong authentication or app shielding solutions. Similarly, in digital agreements, the vast majority of our business, about 97%, is priced based on the number of expected eSignature transactions or documents rather than customer-employee accounts or user accounts.
Victor Limongelli: Similarly, in Digital Agreements, the vast majority of our business, about 97%, is priced based on the number of expected e-signature transactions or documents rather than customer employee counts or user counts. Turning to our results, as mentioned, we started the year with a strong Q1. We generated $21 million of adjusted EBITDA in the quarter, or 32% of revenue. We ended the Q1 with ARR of $192 million, up 14% year-over-year, inclusive of the uplift from the two acquisitions in the past year. This strong ARR growth continues a positive trend as ARR is now up 24% since 31 March 2024. Total revenue grew 4% to $66 million, driven by 11% growth in Digital Agreements, which had another strong Q1, and 2% growth in Cybersecurity.
Victor Limongelli: Similarly, in Digital Agreements, the vast majority of our business, about 97%, is priced based on the number of expected e-signature transactions or documents rather than customer employee counts or user counts. Turning to our results, as mentioned, we started the year with a strong Q1. We generated $21 million of adjusted EBITDA in the quarter, or 32% of revenue. We ended the Q1 with ARR of $192 million, up 14% year-over-year, inclusive of the uplift from the two acquisitions in the past year. This strong ARR growth continues a positive trend as ARR is now up 24% since 31 March 2024. Total revenue grew 4% to $66 million, driven by 11% growth in Digital Agreements, which had another strong Q1, and 2% growth in Cybersecurity.
Speaker #2: Turning to our results, as mentioned, we started the year with a strong first quarter. We generated 21 million dollars of adjusted EBITDA in the quarter, or 32% of revenue.
Speaker #2: We ended the first quarter with annual recurring revenue of $192 million, up 14% year over year, inclusive of the uplift from the two acquisitions in the past year.
Speaker #2: This strong ARR growth continues a positive trend as ARR is now up 24% since March 31st, 2024. Total revenue grew 4% to $66 million, driven by 11% growth in digital agreements, which had another strong quarter, and 2% growth in cybersecurity, subscription revenue in digital agreements grew 11%, driven by demand for eSignatures, while subscription revenue in cybersecurity grew about 6.5%, reflecting growth in cloud authentication, passwordless authentication, and app shielding.
Victor Limongelli: Subscription revenue in Digital Agreements grew 11%, driven by demand for e-signatures, while subscription revenue in Cybersecurity grew about 6.5%, reflecting growth in cloud authentication, passwordless authentication, and app shielding. Both business units were solidly profitable at the division level. Overall, the company generated $28 million in cash from operations during the quarter. Our board remains committed to a balanced capital allocation strategy that considers shareholder returns, organic investment, and targeted M&A. In the first quarter, we invested nearly $35 million to acquire Build38 and returned more than $10 million to shareholders through dividends and share repurchases following nearly $32 million returned in 2025. The board has approved a quarterly dividend of $0.13 per share to be paid in the current quarter and will continue to evaluate additional share repurchase opportunities.
Victor Limongelli: Subscription revenue in Digital Agreements grew 11%, driven by demand for e-signatures, while subscription revenue in Cybersecurity grew about 6.5%, reflecting growth in cloud authentication, passwordless authentication, and app shielding. Both business units were solidly profitable at the division level. Overall, the company generated $28 million in cash from operations during the quarter. Our board remains committed to a balanced capital allocation strategy that considers shareholder returns, organic investment, and targeted M&A. In the first quarter, we invested nearly $35 million to acquire Build38 and returned more than $10 million to shareholders through dividends and share repurchases following nearly $32 million returned in 2025. The board has approved a quarterly dividend of $0.13 per share to be paid in the current quarter and will continue to evaluate additional share repurchase opportunities.
Speaker #2: Both business units were solidly profitable at the division level. Overall, the company generated 28 million dollars in cash from operations during the quarter. Our board remains committed to a balanced capital allocation strategy that considers shareholder returns, organic investment, and targeted M&A.
Speaker #2: In the first quarter, we invested nearly $35 million to acquire Build38 and returned more than $10 million to shareholders through dividends and share repurchases.
Speaker #2: Following nearly $32 million returned in 2025. The board has approved a quarterly dividend of 13 cents per share to be paid in the current quarter and will continue to evaluate additional share repurchase opportunities.
Speaker #2: In summary, we serve a diverse, global customer base, and we deliver comprehensive offerings in strong B2B2C authentication, app shielding, and eSignatures. We are investing internally and through targeted M&A to strengthen our portfolio and go-to-market execution, and we continue to make solid progress in building a stronger foundation for growth.
Victor Limongelli: In summary, we serve a diverse global customer base, and we deliver comprehensive offerings in strong B to B to C authentication, app shielding, and e-signatures. We are investing internally and through targeted M&A to strengthen our portfolio and go-to-market execution, and we continue to make solid progress in building a stronger foundation for growth. We remain committed to maintaining strong profitability, cash generation, and returning capital to shareholders. With that, I'll turn the call over to Jorge.
Victor Limongelli: In summary, we serve a diverse global customer base, and we deliver comprehensive offerings in strong B to B to C authentication, app shielding, and e-signatures. We are investing internally and through targeted M&A to strengthen our portfolio and go-to-market execution, and we continue to make solid progress in building a stronger foundation for growth. We remain committed to maintaining strong profitability, cash generation, and returning capital to shareholders. With that, I'll turn the call over to Jorge.
Speaker #2: We remain committed to maintaining strong profitability and cash generation and returning capital to shareholders. With that, I'll turn the call over to Jorge.
Speaker #3: Thanks, Victor, and good afternoon, everyone. I'm pleased to report another strong quarter and continued progress in building a solid foundation for future growth. I'm particularly excited about our acquisition of Build38, which strengthens our mobile application security offering and enhances our ability to protect customers and their customers from increasingly sophisticated AI-driven threats.
Jorge Martell: Thanks, Victor. Good afternoon, everyone. I'm pleased to report another strong quarter and continued progress in building a solid foundation for future growth. I'm particularly excited about our acquisition of Build38, which strengthens our mobile application security offering and enhances our ability to protect customers and their customers from increasingly sophisticated AI-driven threats. We acquired Build38 on 27 February, and as such, our Q1 results include just over 1 month of Build38's financial contribution. Before turning to our Q1 results, I'd like to briefly highlight a change we made this quarter to how we present revenue by operating segment. To better align with how we manage the business and our strategic focus on growing recurring revenues, we now include term maintenance revenue within subscription revenue.
Jorge Martell: Thanks, Victor. Good afternoon, everyone. I'm pleased to report another strong quarter and continued progress in building a solid foundation for future growth. I'm particularly excited about our acquisition of Build38, which strengthens our mobile application security offering and enhances our ability to protect customers and their customers from increasingly sophisticated AI-driven threats. We acquired Build38 on 27 February, and as such, our Q1 results include just over 1 month of Build38's financial contribution. Before turning to our Q1 results, I'd like to briefly highlight a change we made this quarter to how we present revenue by operating segment. To better align with how we manage the business and our strategic focus on growing recurring revenues, we now include term maintenance revenue within subscription revenue.
Speaker #3: The acquired Build38 on February 27th and, as such, our first quarter results include just over one month of Build38's financial contribution. Before turning to our Q1 results, I'd like to briefly highlight a change we made this quarter to how we present revenue by operating segment.
Speaker #3: To better align with how we manage the business and our strategic focus on growing recurring revenues, we now include term maintenance revenue within subscription revenue.
Speaker #3: As a result, subscription revenue now consists primarily of term licenses for on-prem software and the related maintenance and support revenue and SaaS revenue. In addition, maintenance revenue associated with perpetual licenses and professional services is now presented together, better reflecting the continued evolution of our business away from perpetual license arrangements.
Jorge Martell: As a result, subscription revenue now consists primarily of term licenses for on-prem software, the related maintenance and support revenue, and SaaS revenue. In addition, maintenance revenue associated with perpetual licenses and professional services is now presented together, better reflecting the continued evolution of our business away from perpetual license arrangements. These changes are presentation only and have no impact on total revenue, operating income, or cash flows, and prior period results have been updated for comparability. Additional details are included in the revenue tables in today's press release, our Form 10-Q, and the investor presentation on our website. With that context, let me turn to our Q1 results. Annual recurring revenue, or ARR, increased 14.1% year-over-year to $192.1 million, inclusive of the two acquisitions.
Jorge Martell: As a result, subscription revenue now consists primarily of term licenses for on-prem software, the related maintenance and support revenue, and SaaS revenue. In addition, maintenance revenue associated with perpetual licenses and professional services is now presented together, better reflecting the continued evolution of our business away from perpetual license arrangements. These changes are presentation only and have no impact on total revenue, operating income, or cash flows, and prior period results have been updated for comparability. Additional details are included in the revenue tables in today's press release, our Form 10-Q, and the investor presentation on our website. With that context, let me turn to our Q1 results. Annual recurring revenue, or ARR, increased 14.1% year-over-year to $192.1 million, inclusive of the two acquisitions.
Speaker #3: These changes are presentation only and have no impact on total revenue, operating income, or cash flows, and prior period results have been updated for comparability.
Speaker #3: Additional details are included in the revenue tables in today's press release, our Form 10-Q, and the investor presentation on our website. With that context, let me turn to our first quarter results.
Speaker #3: Annual recurring revenue, or ARR, increased 14.1% year over year to $192.1 million, inclusive of the two acquisitions. Our net retention rate was 105%, benefiting from customer expansion contracts.
Jorge Martell: Our Net Retention Rate was 105%, benefiting from customer expansion contracts. ARR also benefited from new customer additions and M&A. Q1 revenue was $65.9 million, an increase of 4.1% compared to last year's Q1, driven by 5.8% growth in software and services revenues, partially offset by a 4.3% decline in hardware revenue. Continuing a long-term declining trend, in Q1, hardware comprised only 16% of our overall revenue. Subscription revenue grew 8.2% to $52.7 million and accounted for 80% of total revenue. Gross margin was approximately 74%, consistent with the prior year period. I'll provide additional detail on these metrics as I review each business division in a couple minutes.
Jorge Martell: Our Net Retention Rate was 105%, benefiting from customer expansion contracts. ARR also benefited from new customer additions and M&A. Q1 revenue was $65.9 million, an increase of 4.1% compared to last year's Q1, driven by 5.8% growth in software and services revenues, partially offset by a 4.3% decline in hardware revenue. Continuing a long-term declining trend, in Q1, hardware comprised only 16% of our overall revenue. Subscription revenue grew 8.2% to $52.7 million and accounted for 80% of total revenue. Gross margin was approximately 74%, consistent with the prior year period. I'll provide additional detail on these metrics as I review each business division in a couple minutes.
Speaker #3: ARR also benefited from new customer additions and M&A. First quarter revenue was $65.9 million, an increase of 4.1% compared to last year's Q1, driven by 5.8% growth in software and services revenues.
Speaker #3: Partially offset by a 4.3% decline in hardware revenue. Continuing a long-term declining trend in Q1, hardware comprised only 16% of our overall revenue. Subscription revenue grew 8.2% to $52.7 million, and accounted for 80% of total revenue.
Speaker #3: Gross margin was approximately 74%, consistent with the prior year period. I'll provide additional detail on these metrics as I review each business division in a couple of minutes.
Jorge Martell: Q1 GAAP operating income was $14.8 million compared to $17.2 million in Q1 of last year. The year-over-year decline in operating income primarily reflects increased operating costs related to the acquisition of Nok Nok and Build38, including headcount and non-recurring acquisition-related consulting costs, as well as certain costs related to organic investments, partially offset by lower share-based compensation expenses. GAAP net income per share was $0.30 compared to $0.37 a year ago. non-GAAP net income per share was $0.39 compared to $0.45 in prior year period. Q1 adjusted EBITDA and adjusted EBITDA margin was $21 million and 31.9% compared to $23 million and 36.4% in Q1 of last year. Turning to our cybersecurity division.
Jorge Martell: Q1 GAAP operating income was $14.8 million compared to $17.2 million in Q1 of last year. The year-over-year decline in operating income primarily reflects increased operating costs related to the acquisition of Nok Nok and Build38, including headcount and non-recurring acquisition-related consulting costs, as well as certain costs related to organic investments, partially offset by lower share-based compensation expenses. GAAP net income per share was $0.30 compared to $0.37 a year ago. non-GAAP net income per share was $0.39 compared to $0.45 in prior year period. Q1 adjusted EBITDA and adjusted EBITDA margin was $21 million and 31.9% compared to $23 million and 36.4% in Q1 of last year. Turning to our cybersecurity division.
Speaker #3: First quarter gap operating income was 14.8 million dollars, compared to 17.2 million in Q1 of last year. The year over year decline in operating income primarily reflects increased operating costs related to the acquisition of Knock Knock and Build38, including headcount and non-recurring acquisition-related consulting costs.
Speaker #3: As well as certain costs related to organic investments, partially offset by lower share-based compensation expenses. Gap net income per share was 30 cents, compared to 37 cents a year ago.
Speaker #3: Non-gap net income per share was 39 cents, compared to 45 cents in prior year period. First quarter adjusted EBITDA and adjusted EBITDA margin was 21 million dollars and 31.9%, compared to 23 million and 36.4% in the first quarter of last year.
Speaker #3: Turning to our cybersecurity division. Cybersecurity ARR grew 16.5% year over year to 124.6 million. Again, inclusive of the two acquisitions in the past year.
Jorge Martell: Cybersecurity ARR grew 16.5% year over year to $124.6 million, again, inclusive of the 2 acquisitions in the past year. Q1 revenue increased 1.7% to $48.5 million. Subscription revenue grew 6.6% to $35.3 million, driven by customer expansions, new logos, and M&A, partially offset by lower multi-year term license revenue. Hardware revenue declined 4.3%, which was less than expected due to the earlier than anticipated delivery of certain customer shipments. As expected, perpetual maintenance and services revenue declined as we continue to transition legacy perpetual contracts to term-based arrangements. Gross margin for the Cybersecurity division was 74% compared to 76% in the prior year quarter, primarily reflecting incremental third-party license costs as well as subscription and professional services costs.
Jorge Martell: Cybersecurity ARR grew 16.5% year over year to $124.6 million, again, inclusive of the 2 acquisitions in the past year. Q1 revenue increased 1.7% to $48.5 million. Subscription revenue grew 6.6% to $35.3 million, driven by customer expansions, new logos, and M&A, partially offset by lower multi-year term license revenue. Hardware revenue declined 4.3%, which was less than expected due to the earlier than anticipated delivery of certain customer shipments. As expected, perpetual maintenance and services revenue declined as we continue to transition legacy perpetual contracts to term-based arrangements. Gross margin for the Cybersecurity division was 74% compared to 76% in the prior year quarter, primarily reflecting incremental third-party license costs as well as subscription and professional services costs.
Speaker #3: First quarter revenue increased 1.7% to 48.5 million. Subscription revenue grew 6.6% to 35.3 million. Driven by customer expansions, new logos, and M&A. Partially offset by lower multi-year term license revenue.
Speaker #3: Hardware revenue declined 4.3%, which was less than expected due to the earlier than anticipated delivery of certain customer shipments. As expected, perpetual maintenance and services revenue declined as we continue to transition legacy perpetual contracts to term-based arrangements.
Speaker #3: Gross margin for the cybersecurity division was 74%, compared to 76% in the prior year quarter. Primarily reflecting incremental third-party license costs as well as subscription and professional services costs.
Jorge Martell: Operating income was $20.8 million or 43% of revenue compared to $24.2 million or 51% of revenue in last year's Q1, driven by increased operating expenses from the acquisitions, the incremental cost of revenues just discussed, higher non-recurring acquisition-related consulting costs, and increased investments. Now turning to Digital Agreements. ARR grew 9.9% year over year to $67.5 million. Q1 revenue grew 11.2% to $17.4 million, driven by expansion of renewal contracts, new customer additions, and overage fees. Gross margin improved to 72.5%, up from 70.3% in the prior year period, reflecting higher revenues and greater efficiency in our cloud infrastructure costs.
Jorge Martell: Operating income was $20.8 million or 43% of revenue compared to $24.2 million or 51% of revenue in last year's Q1, driven by increased operating expenses from the acquisitions, the incremental cost of revenues just discussed, higher non-recurring acquisition-related consulting costs, and increased investments. Now turning to Digital Agreements. ARR grew 9.9% year over year to $67.5 million. Q1 revenue grew 11.2% to $17.4 million, driven by expansion of renewal contracts, new customer additions, and overage fees. Gross margin improved to 72.5%, up from 70.3% in the prior year period, reflecting higher revenues and greater efficiency in our cloud infrastructure costs.
Speaker #3: Operating income was 20.8 million, or 43% of revenue, compared to 24.2 million or 51% of revenue in last year's Q1, driven by increased operating expenses from the acquisitions.
Speaker #3: The incremental cost of revenues just discussed, higher non-recurring acquisition-related consulting costs, and increased investments. Now turning to digital agreements. ARR grew 9.9% year over year to 67.5 million.
Speaker #3: First quarter revenue grew 11.2% to 17.4 million. Driven by expansion of renewal contracts, new customer additions, and overage fees. Gross margin improved to 72.5%, up from 70.3% in the prior year period, reflecting higher revenues and greater efficiency in our cloud infrastructure costs.
Jorge Martell: Operating income was $5.3 million, or 30.4% of revenue, compared to $3.4 million, or 21.5% in the same period last year, driven by revenue growth, higher gross margins, and a modest decline in operating expenses. Turning to our balance sheet, we ended Q1 with $49.8 million in cash and cash equivalents compared to $70.5 million at the end of 2025. We generated $28.2 million in operating cash flows during the quarter. Uses of cash included $5 million for our quarterly dividend, $5.4 million to repurchase approximately 510,000 shares of common stock, $34.6 million related to the Build38 acquisition, and $2.6 million in capital software development costs, among other things. We ended the quarter with no long-term debt.
Jorge Martell: Operating income was $5.3 million, or 30.4% of revenue, compared to $3.4 million, or 21.5% in the same period last year, driven by revenue growth, higher gross margins, and a modest decline in operating expenses. Turning to our balance sheet, we ended Q1 with $49.8 million in cash and cash equivalents compared to $70.5 million at the end of 2025. We generated $28.2 million in operating cash flows during the quarter. Uses of cash included $5 million for our quarterly dividend, $5.4 million to repurchase approximately 510,000 shares of common stock, $34.6 million related to the Build38 acquisition, and $2.6 million in capital software development costs, among other things. We ended the quarter with no long-term debt.
Speaker #3: Operating income was 5.3 million, or 30.4% of revenue, compared to 3.4 million or 21.5% in the same period last year driven by revenue growth, higher gross margins, and a modest decline in operating expenses.
Speaker #3: Turning to our balance sheet, we ended the first quarter with 49.8 million in cash and cash equivalents, compared to 70.5 million at the end of 2025.
Speaker #3: We generated $28.2 million in operating cash flows during the quarter. Uses of cash included $5 million for our quarterly dividend, $5.4 million to repurchase approximately 510,000 shares of common stock, $34.6 million related to the Build38 acquisition, and $2.6 million in capital software development costs, among other things.
Speaker #3: We ended the quarter with no long-term debt. Geographically, revenue in the first quarter of 2026 was 43% for EMEA, 38% from the Americas, 19% from Asia Pacific, compared to 49%, 33%, and 18% from the same regions in the first quarter of 2025, respectively.
Jorge Martell: Geographically, revenue in Q1 2026 was 43% for EMEA, 38% from the Americas, 19% from Asia Pacific, compared to 49%, 33%, and 18% from the same regions in Q1 2025, respectively. Year-over-year changes reflect growth in Digital Agreements and cybersecurity software revenue in the Americas, lower cybersecurity hardware and software revenue in EMEA, and increased hardware revenue in Asia Pacific. Now turning to some modeling notes and our outlook. We are pleased with our Q1 results and the progress we've made in positioning the company for long-term growth. We are affirming our full year 2026 guidance for revenue and adjusted EBITDA, and we are raising our guidance for ARR. We expect continued growth in software and services revenue, driven by solid performance in Digital Agreements and moderate growth in cybersecurity.
Jorge Martell: Geographically, revenue in Q1 2026 was 43% for EMEA, 38% from the Americas, 19% from Asia Pacific, compared to 49%, 33%, and 18% from the same regions in Q1 2025, respectively. Year-over-year changes reflect growth in Digital Agreements and cybersecurity software revenue in the Americas, lower cybersecurity hardware and software revenue in EMEA, and increased hardware revenue in Asia Pacific. Now turning to some modeling notes and our outlook. We are pleased with our Q1 results and the progress we've made in positioning the company for long-term growth. We are affirming our full year 2026 guidance for revenue and adjusted EBITDA, and we are raising our guidance for ARR. We expect continued growth in software and services revenue, driven by solid performance in Digital Agreements and moderate growth in cybersecurity.
Speaker #3: Year over year changes reflect growth in digital agreements and cybersecurity software revenue in the Americas, lower cybersecurity hardware and software revenue in EMEA, and increased hardware revenue in Asia Pacific.
Speaker #3: Now, turning to some modeling notes and our outlook. We are pleased with our first-quarter results and the progress we've made in positioning the company for long-term growth.
Speaker #3: We are affirming our full year 2026 guidance for revenue and adjusted EBITDA, and we are raising our guidance for ARR. We expect continued growth in software and services revenue, driven by solid performance in digital agreements, and moderate growth in cybersecurity.
Speaker #3: In cybersecurity, we anticipate a second quarter ARR headwind of approximately 3 million dollars from two contracts not expected to renew. In both cases, the customer is not a bank or a financial institution, and the majority of that total is from a customer moving to passwordless authentication with the decision taken a year ago, before we had acquired Knock Knock Labs.
Jorge Martell: In cybersecurity, we anticipate a Q2 ARR headwind of approximately $3 million from 2 contracts not expected to renew. In both cases, the customer is not a bank or a financial institution, and the majority of that total is from a customer moving to passwordless authentication with a decision taken a year ago before we had acquired Nok Nok Labs Inc. Indeed, this reinforces our belief that adding Nok Nok to our product portfolio was the right strategic move, as we expect passwordless authentication to only grow going forward. As such, we expect ARR to grow in the H2 of the year, with most of that growth occurring in the Q4. Finally, we also expect the secular shift away from consumer banking hardware tokens to continue.
Jorge Martell: In cybersecurity, we anticipate a Q2 ARR headwind of approximately $3 million from 2 contracts not expected to renew. In both cases, the customer is not a bank or a financial institution, and the majority of that total is from a customer moving to passwordless authentication with a decision taken a year ago before we had acquired Nok Nok Labs Inc. Indeed, this reinforces our belief that adding Nok Nok to our product portfolio was the right strategic move, as we expect passwordless authentication to only grow going forward. As such, we expect ARR to grow in the H2 of the year, with most of that growth occurring in the Q4. Finally, we also expect the secular shift away from consumer banking hardware tokens to continue.
Speaker #3: Indeed, this reinforces our belief that adding Knock Knock to our product portfolio was the right strategic move, as we expect passwordless authentication to only grow going forward.
Speaker #3: As such, we expect ARR to grow in the second half of the year. We most of that growth occurring in the fourth quarter. Finally, we also expect the secular shift away from consumer banking hardware tokens to continue.
Speaker #3: For the full year 2026, we expect total revenue to be in the range of 244 to 249 million dollars. We expect software and services revenue to be in the range of 201 to 204 million dollars.
Jorge Martell: For the full year 2026, we expect total revenue to be in the range of $244 to $249 million. We expect software and services revenue to be in the range of $201 to $204 million. We expect hardware revenue to be in the range of $43 to $45 million. We expect ARR to be in the range of $194 to $198 million as compared to our previous guidance range of $192 to $196 million. We expect adjusted EBITDA in the range of $64 to $68 million. That concludes my remarks. I will now turn the call back to Victor.
Jorge Martell: For the full year 2026, we expect total revenue to be in the range of $244 to $249 million. We expect software and services revenue to be in the range of $201 to $204 million. We expect hardware revenue to be in the range of $43 to $45 million. We expect ARR to be in the range of $194 to $198 million as compared to our previous guidance range of $192 to $196 million. We expect adjusted EBITDA in the range of $64 to $68 million. That concludes my remarks. I will now turn the call back to Victor.
Speaker #3: We expect hardware revenue to be in the range of $43 to $45 million. We expect ARR to be in the range of $194 to $198 million, as compared to our previous guidance range of $192 to $196 million.
Speaker #3: And we expect adjusted EBITDA in the range of $64 to $68 million. That concludes my remarks. I will now turn the call back to Victor.
Speaker #1: Thanks, Jorge. To recap, we delivered a strong first quarter and, over the past year, we have better positioned the company to deliver value to customers and create value for shareholders.
Victor Limongelli: Thanks, Jorge. To recap, we delivered a strong Q1, and over the past year, we have better positioned the company to deliver value to customers and create value for shareholders. While we know there is more work ahead, that one good quarter does not make an excellent year, we are encouraged by the progress we have made. Jorge and I will now be happy to take your questions.
Victor Limongelli: Thanks, Jorge. To recap, we delivered a strong Q1, and over the past year, we have better positioned the company to deliver value to customers and create value for shareholders. While we know there is more work ahead, that one good quarter does not make an excellent year, we are encouraged by the progress we have made. Jorge and I will now be happy to take your questions.
Speaker #1: While we know there is more work ahead, that one good quarter does not make an excellent year, we are encouraged by the progress we have made.
Speaker #1: Jorge and I will now be happy to take your questions.
Speaker #2: Thank you. At this time, we will conduct the question and answer session. We kindly request that each participant ask one question and one follow-up question.
Operator 2: Thank you. At this time, we will conduct the question and answer session. We kindly request that each participant ask one question and one follow-up question. You may queue if you have more questions. As a reminder, please mute your line when not speaking. To ask a question, you will need to press star one one on your telephone and wait for your name to be announced. To withdraw your questions, please press star one one again. Please stand by while we compile the Q&A roster. Our first question comes from the line of Eric Saghi of B. Riley Securities. Your line is now open.
Operator: Thank you. At this time, we will conduct the question and answer session. We kindly request that each participant ask one question and one follow-up question. You may queue if you have more questions. As a reminder, please mute your line when not speaking. To ask a question, you will need to press star one one on your telephone and wait for your name to be announced. To withdraw your questions, please press star one one again. Please stand by while we compile the Q&A roster. Our first question comes from the line of Eric Saghi of B. Riley Securities. Your line is now open.
Speaker #2: You may requeue if you have more questions. As a reminder, please mute your line when not speaking. To ask a question, you will need to press star 11 on your telephone and wait for your name to be announced.
Speaker #2: To withdraw your questions, please press star 11 again. Please stand by while we compile the Q&A roster. Our first question comes from the line of Eric Sepiger of B.
Speaker #2: Reilly Securities. Your line is now open.
Speaker #3: Yeah, thanks for taking the questions. First off, when will we start to realize some of the returns that you're making on the operations over the course of 2026?
Eric Saghi: Yeah, thanks for taking the questions. First off, when will we start to realize some of the returns that you're making in the operations over the course of 2026? When can we anticipate some acceleration in top line? Do you have a timeframe when you can get back to a Rule of 40, delivering on the Rule of 40?
Erik Suppiger: Yeah, thanks for taking the questions. First off, when will we start to realize some of the returns that you're making in the operations over the course of 2026? When can we anticipate some acceleration in top line? Do you have a timeframe when you can get back to a Rule of 40, delivering on the Rule of 40?
Speaker #3: When can we anticipate some acceleration in top line? And do you have a timeframe when you can get back to a rule of 40 delivering on the rule of 40?
Speaker #1: Yeah, thanks, Eric. I think before getting to the exact timeline for the rule of 40, it's important to highlight the progress we've made. If you look at where we were on the rule of 40 metrics in 2023, I believe the number was 12 on a combined basis, not for one of the metrics.
Victor Limongelli: Thanks, Eric. I think before getting to the exact timeline for the Rule of 40, it's important to highlight the progress we've made. If you look at where we were on the Rule of 40 metrics in 2023, I believe the number was 12 on a combined basis, not for one of the metrics. The most recent quarter, we were at 36, and 32 last year. So we've definitely made progress. I don't wanna pin an exact date on when we'll be at exactly 40, but we're making progress. You see it in our ARR growth, you see it in our subscription growth. Of course, for quite a long time, we've had a consumer banking token decline, and you saw hardware decline again year over year. It's now only 16% of our revenue. We feel like we've made some good progress.
Victor Limongelli: Thanks, Eric. I think before getting to the exact timeline for the Rule of 40, it's important to highlight the progress we've made. If you look at where we were on the Rule of 40 metrics in 2023, I believe the number was 12 on a combined basis, not for one of the metrics. The most recent quarter, we were at 36, and 32 last year. So we've definitely made progress. I don't wanna pin an exact date on when we'll be at exactly 40, but we're making progress. You see it in our ARR growth, you see it in our subscription growth. Of course, for quite a long time, we've had a consumer banking token decline, and you saw hardware decline again year over year. It's now only 16% of our revenue. We feel like we've made some good progress.
Speaker #1: And for the most recent quarter, we're at 36. And 32 last year. So we've definitely made progress. I don't want to pin an exact date on when we'll be at exactly 40, but we're making progress.
Speaker #1: You see it in our ARR growth. You see it in our subscription growth. Of course, for quite a long time, we've had a consumer banking token decline and you saw hardware decline again year over year.
Speaker #1: It's now only 16% of our revenue. We feel like we've made some good progress. We've added some real key functionality to our product set.
Victor Limongelli: We've added some real key functionality to our product set, and we're investing in go-to-market as well to continue to try to drive that subscription growth and try to drive the ARR, forward.
Victor Limongelli: We've added some real key functionality to our product set, and we're investing in go-to-market as well to continue to try to drive that subscription growth and try to drive the ARR, forward.
Speaker #1: And we're investing in go-to-market as well to continue to try to drive that subscription growth and try to drive the ARR forward.
Speaker #3: Okay, thank you.
Eric Saghi: Okay. Thank you.
Erik Suppiger: Okay. Thank you.
Speaker #2: Thank you. Our next question comes from the line of Rudy Kessinger of DA Davidson. Your line is now open.
Operator 2: Thank you. Our next question comes from the line of Rudy Kessinger of D.A. Davidson. Your line is now open.
Operator: Thank you. Our next question comes from the line of Rudy Kessinger of D.A. Davidson. Your line is now open.
Speaker #1: Hey, great. Thanks for taking my questions. First one for me on ARR—just so we can kind of try to get to an organic ARR growth rate.
Rudy Kessinger: Hey, great. Thanks for taking my questions. First one for me on ARR, just so we can kinda try to get to an organic ARR growth rate. What was the Nok Nok ARR and Build38 ARR as of the end of Q1?
Rudy Kessinger: Hey, great. Thanks for taking my questions. First one for me on ARR, just so we can kinda try to get to an organic ARR growth rate. What was the Nok Nok ARR and Build38 ARR as of the end of Q1?
Speaker #1: What was the Knock Knock ARR and Phil38 ARR as of the end of Q1?
Speaker #3: Hey, Rudy. Thanks for the question. So as of the end of Q1, Knock Knock's ARR was 9.7 million, which is an increase from the 8.1 that we acquired in nine months ago, which we feel pretty good about.
Jorge Martell: Hey, Rudy. Thanks for the question. As of the end of Q1, Nok Nok's ARR was $9.7 million, which is an increase from the $8.1 million that we acquired already 9 months ago, which we feel pretty good about. Victor alluded to that 20% growth over the last 9 and change months, 9-ish months. The Build38 ARR that we acquired was $2.8 million. Combined, it's about $10.9 million, call it $11 million. When you look at, you know, ARR growth organic, you know, it's about 7%, 7%. 7%, 8% for you.
Jorge Martell: Hey, Rudy. Thanks for the question. As of the end of Q1, Nok Nok's ARR was $9.7 million, which is an increase from the $8.1 million that we acquired already 9 months ago, which we feel pretty good about. Victor alluded to that 20% growth over the last 9 and change months, 9-ish months. The Build38 ARR that we acquired was $2.8 million. Combined, it's about $10.9 million, call it $11 million. When you look at, you know, ARR growth organic, you know, it's about 7%, 7%. 7%, 8% for you.
Speaker #3: And Victor alluded to that 20% growth over the last nine and change months, nine-ish months. The Bill38 ARR that we acquired was 2.8 million, Rudy.
Speaker #3: So combined, it's about 10.9—call it 11. And so, when you look at ARR growth organic, it's about 7%, 7, 8%, Rudy.
Speaker #1: Got it. That's super helpful in the growth on Knock Knock. It's good to see, obviously, you laughed that next quarter. As far as organic goes.
Rudy Kessinger: Got it. That's super helpful. The growth on Nok Nok is good to see. Obviously, you lap that next quarter, as far as organic goes. Second question for me, obviously just given your guys' significant EMEA, you know, mix, I'm curious what impacts, if any, maybe it's on the quarter or you're seeing in current, you know, deal conversations, just given the conflict in the Middle East right now.
Rudy Kessinger: Got it. That's super helpful. The growth on Nok Nok is good to see. Obviously, you lap that next quarter, as far as organic goes. Second question for me, obviously just given your guys' significant EMEA, you know, mix, I'm curious what impacts, if any, maybe it's on the quarter or you're seeing in current, you know, deal conversations, just given the conflict in the Middle East right now.
Speaker #1: And then second question for me. Obviously, just given your guys' significant EMEA mix, I'm curious what impacts if any maybe you saw in the quarter or you're seeing in current deal conversations, just given the conflict in the Middle East right now.
Speaker #3: Yeah, thanks, Rudy. The Middle East itself, while the Gulf region itself is a small part of our business, only about 4% of revenue, and we're obviously keeping an eye on it.
Victor Limongelli: Yeah. Thanks, Rudy. The Middle East itself, well, the Gulf region itself is a small part of our business, only about 4% of revenue. You know, we're obviously keeping an eye on it like many, many people are. For Europe, I think you'll see in the geographic mix or report I talked about the geographic mix, EMEA is a little bit of a smaller portion compared to growth in the Americas. Part of that strategic, we do think, we're under-indexed to North America when it comes to security in particular. We feel like, we're gonna grow faster in North America than we had in the past. Also the DA business has been doing well, and that's largely a North American business. Overall, we're optimistic, I would say, about EMEA and cautiously watching the Middle East situation.
Victor Limongelli: Yeah. Thanks, Rudy. The Middle East itself, well, the Gulf region itself is a small part of our business, only about 4% of revenue. You know, we're obviously keeping an eye on it like many, many people are. For Europe, I think you'll see in the geographic mix or report I talked about the geographic mix, EMEA is a little bit of a smaller portion compared to growth in the Americas. Part of that strategic, we do think, we're under-indexed to North America when it comes to security in particular. We feel like, we're gonna grow faster in North America than we had in the past. Also the DA business has been doing well, and that's largely a North American business. Overall, we're optimistic, I would say, about EMEA and cautiously watching the Middle East situation.
Speaker #3: Like many people are, for Europe, I think you'll see in the geographic mix or Jorge talked about the geographic mix, EMEA is a little bit of a smaller portion compared to growth in the Americas.
Speaker #3: Part of that strategic, we do think we're under-indexed to North America when it comes to security in particular. So we feel like we're going to grow faster in North America than we had in the past.
Speaker #3: And also the DA business has been doing well. And that's largely in North American business. Overall, we're optimistic, I would say, about EMEA and cautiously watching the Middle East situation.
Speaker #1: That's helpful. Thank you, guys.
Rudy Kessinger: That's helpful. Thank you, guys.
Rudy Kessinger: That's helpful. Thank you, guys.
Speaker #2: Thank you. Our next question comes from the line of Gray Powell of BTIG. Your line is now open.
Operator 2: Thank you. Our next question comes from the line of Gray Powell of BTIG. Your line is now open.
Operator: Thank you. Our next question comes from the line of Gray Powell of BTIG. Your line is now open.
Speaker #4: Oh, great. Thanks for taking the questions. I just had a couple here. So it's good to hear the commentary on Knock Knock. Where are you seeing the strongest pull with Knock Knock within your installed base?
Gray Powell: Oh, great. Thanks for taking the questions. I just had a couple here. It is good to hear the commentary on Nok Nok. Where are you seeing the strongest pull with Nok Nok within your installed base? Then just like when a customer decides to take the product set, just how should we think of the upsell opportunity?
Gray Powell: Oh, great. Thanks for taking the questions. I just had a couple here. It is good to hear the commentary on Nok Nok. Where are you seeing the strongest pull with Nok Nok within your installed base? Then just like when a customer decides to take the product set, just how should we think of the upsell opportunity?
Speaker #4: And then just when a customer decides to take the product set, just how should we think of the upsell opportunity?
Speaker #1: Knock Knock, I think, is an upsell opportunity because people are going to move to passwordless over the coming years. So having that capability is a core part of our offering.
Victor Limongelli: Nok Nok, I think is an upsell opportunity because people are going to move to passwordless over the coming years, so having that capability is a core part of our offering. Some of that is customer retention. We talked about GRR in Q1. It was at a very strong level, 94% for DA, but 88% for cybersecurity, so higher than it had been in quite a while. There's also opportunity to get new customers with Nok Nok's offering. As passwordless becomes more and more prevalent, having a super strong offering, having the board seat on the FIDO Alliance, having the history with FIDO that Nok Nok had, brings a lot to the table. Geographically, we have seen it so far be stronger in North America with strength in Japan as well.
Victor Limongelli: Nok Nok, I think is an upsell opportunity because people are going to move to passwordless over the coming years, so having that capability is a core part of our offering. Some of that is customer retention. We talked about GRR in Q1. It was at a very strong level, 94% for DA, but 88% for cybersecurity, so higher than it had been in quite a while. There's also opportunity to get new customers with Nok Nok's offering. As passwordless becomes more and more prevalent, having a super strong offering, having the board seat on the FIDO Alliance, having the history with FIDO that Nok Nok had, brings a lot to the table. Geographically, we have seen it so far be stronger in North America with strength in Japan as well.
Speaker #1: So some of that is customer retention. We talked about GRR. In the first quarter, it was at a very strong level, 94% for DA, but 88% for security, cybersecurity.
Speaker #1: So higher than it had been in quite a while. And there's also opportunity to get new customers with Knock Knock's offering as passwordless becomes more and more prevalent.
Speaker #1: Having a super strong offering, having the board seat on the FIDO Alliance, having the history with FIDO, that Knock Knock had brings a lot to the table.
Speaker #1: Geographically, we have seen it so far be stronger in North America, with strength in Japan as well. But we expect it to grow in Europe, and ultimately to grow in Latin America and all over the world. In five years, people everywhere will use passkeys, and passwords will seem outdated.
Victor Limongelli: We expect it to grow in Europe, ultimately to grow in Latin America and all over the world. In 5 years, everyone will use passkeys, and passwords will seem outdated.
Victor Limongelli: We expect it to grow in Europe, ultimately to grow in Latin America and all over the world. In 5 years, everyone will use passkeys, and passwords will seem outdated.
Speaker #4: Okay. That's really helpful. And then I just want to make sure I'm thinking about Bill38 correctly. So I mean, it makes perfect sense in how it can make your existing products better.
Gray Powell: Okay. That's really helpful. I just wanna make sure I'm thinking about Build38 correctly. I mean, it makes perfect sense on how it can make your existing products better. This might be a dumb question, but what was the acquisition's main purpose? Is it simply to make you more competitive on the authentication side and to make your existing stuff more compelling? Is it gonna ultimately result in another SKU that you can sell to customers and therefore, like, I just, you know, something else that can generate revenue?
Gray Powell: Okay. That's really helpful. I just wanna make sure I'm thinking about Build38 correctly. I mean, it makes perfect sense on how it can make your existing products better. This might be a dumb question, but what was the acquisition's main purpose? Is it simply to make you more competitive on the authentication side and to make your existing stuff more compelling? Is it gonna ultimately result in another SKU that you can sell to customers and therefore, like, I just, you know, something else that can generate revenue?
Speaker #4: And this might be a dumb question, but what was the acquisition's main purpose? Is it simply to make you more competitive on the authentication side and to make your existing stuff more compelling?
Speaker #4: Or is it going to ultimately result in another SKU that you can sell to customers, and therefore just something else that can generate revenue?
Victor Limongelli: It broadens the offering. If you think about what our app shielding offering was, first of all, it was through a partner. We had a long partnership in that realm that was successful. That offering was what is called a wrapping. You build the application, and then after it's compiled, there's a wrapper or protection put around the app. It's useful. It blocks attacks, but it doesn't give you as much information about what type of attacks are coming in, what the operating environment is. The Build38 approach is different. It has an SDK-based implementation where the protection is built into the app and it enables telemetry back from the applications. Remember, they don't control the devices. These are all consumer devices that are using mobile banking apps.
Victor Limongelli: It broadens the offering. If you think about what our app shielding offering was, first of all, it was through a partner. We had a long partnership in that realm that was successful. That offering was what is called a wrapping. You build the application, and then after it's compiled, there's a wrapper or protection put around the app. It's useful. It blocks attacks, but it doesn't give you as much information about what type of attacks are coming in, what the operating environment is. The Build38 approach is different. It has an SDK-based implementation where the protection is built into the app and it enables telemetry back from the applications. Remember, they don't control the devices. These are all consumer devices that are using mobile banking apps.
Speaker #1: It broadens the offering. So if you think about what our app shielding offering was, first of all, it was through a partner. We had a long partnership in that realm.
Speaker #1: That was successful. But that offering was what is called a wrapping. So you build the application, and then after it's compiled, there's a wrapper or protection put around the app.
Speaker #1: And it's useful. It blocks attacks, but it doesn't give you as much information about what type of attacks are coming in, what the operating environment is, and the Bill38 approach is different.
Speaker #1: It has an SDK-based implementation where the protection is built into the app, and it telemetry back from the applications. Remember, they don't control the devices.
Speaker #1: These are all consumer devices that are using mobile banking apps. It gives them lots of information about the devices themselves. And about what attacks are happening.
Victor Limongelli: It gives them lots of information about the devices themselves and about what attacks are happening. That has all kinds of implications to broaden the cybersecurity solution that we're offering customers.
Victor Limongelli: It gives them lots of information about the devices themselves and about what attacks are happening. That has all kinds of implications to broaden the cybersecurity solution that we're offering customers.
Speaker #1: So that has all kinds of implications to broaden the cybersecurity solution that we're offering customers.
Speaker #4: Understood. Thank you very much.
Gray Powell: Understood. Thank you very much.
Gray Powell: Understood. Thank you very much.
Speaker #2: Thank you. Our next question comes from the line of Anya Soderstrom of Sodoty. Your line is now open.
Operator 2: Thank you. Our next question comes from the line of Anja Soderstrom of Sidoti. Your line is now open.
Operator: Thank you. Our next question comes from the line of Anja Soderstrom of Sidoti. Your line is now open.
Speaker #5: Hi. Thank you for taking my question. Just curious, the conflicts that are not renewing in the second quarter, how big of a shortfall is that?
Anja Soderstrom: Hi, thank you for taking my question. Just curious, the contracts that are not renewing, in Q2, how big of a shortfall is that? Can you just sort of double-click on what gives you confidence in raising the ARR guidance?
Anja Soderstrom: Hi, thank you for taking my question. Just curious, the contracts that are not renewing, in Q2, how big of a shortfall is that? Can you just sort of double-click on what gives you confidence in raising the ARR guidance?
Speaker #5: And can you just sort of double-click on what gives you confidence in raising the ARR guidance?
Speaker #1: Sure. We've seen good progress with ARR. Those two accounts, I mean, one of them is about $2 million. Right? That decision was taken a year ago for them to move to passwordless.
Victor Limongelli: Sure. We've seen good progress with ARR. Those two accounts, I mean, one of them's about $2 million, right? That decision was taken a year ago for them to move to passwordless. This is a great. It just underscores why the Nok Nok acquisition was important for us. We did not have an offering at the time, so we didn't have the opportunity to even compete effectively as they moved to passwordless. We do now. Unfortunately, that decision had already been taken. In the short run, we're gonna have a little bit of a hit, as mentioned, to ARR, but we do feel good about the growth that we've seen so far, the pipeline. You know, we do have seasonality in our business.
Victor Limongelli: Sure. We've seen good progress with ARR. Those two accounts, I mean, one of them's about $2 million, right? That decision was taken a year ago for them to move to passwordless. This is a great. It just underscores why the Nok Nok acquisition was important for us. We did not have an offering at the time, so we didn't have the opportunity to even compete effectively as they moved to passwordless. We do now. Unfortunately, that decision had already been taken. In the short run, we're gonna have a little bit of a hit, as mentioned, to ARR, but we do feel good about the growth that we've seen so far, the pipeline. You know, we do have seasonality in our business.
Speaker #1: This is a great it just underscores why the Knock Knock acquisition was important for us. We did not have an offering at the time.
Speaker #1: So we didn't have the opportunity to even compete effectively as they moved to passwordless. We do now. Unfortunately, that decision had already been taken.
Speaker #1: So, in the short run, we're going to have a little bit of a hit, as mentioned, to ARR, but we do feel good about the growth that we've seen so far.
Speaker #1: The pipeline and we do have seasonality in our business. We close a lot more business in Q4 than we do in the summer typically in most years.
Victor Limongelli: We close a lot more business in Q4 than we do in the summer, typically in most years. We think most of that ARR, kind of reinvigoration will happen in the latter part of the year, say September through December.
Victor Limongelli: We close a lot more business in Q4 than we do in the summer, typically in most years. We think most of that ARR, kind of reinvigoration will happen in the latter part of the year, say September through December.
Speaker #1: So we think most of that ARR kind of reinvigoration will happen in the latter part of the year, say September through December.
Speaker #5: Okay. Thank you. And now when you have Knock Knock, do you feel you're getting better attention since you are having that offering, or?
Anja Soderstrom: Okay. Thank you. Now when you have Nok Nok, do you feel you're getting better attention since you are having that offering?
Anja Soderstrom: Okay. Thank you. Now when you have Nok Nok, do you feel you're getting better attention since you are having that offering?
Speaker #1: Well, it's hard to put a precise quantification on it, but if you look at the growth in our GRR, I think we are positioned better with our customers instead of having technology that maybe a few years ago someone would have viewed as dated.
Victor Limongelli: Well, it's hard to put a precise quantification on it, but if you look at the growth in our GRR, I think we are positioned better with our customers. Instead of having technology that, you know, maybe a few years ago someone would have viewed as dated, we have up-to-date market-leading technology in critical areas. That helps customers feel that they should stick with you, that you're gonna be a long-term solution, and we've seen our GRR go up. I don't think it's only as a result of that because our renewals team has done a great job. We've done better engagement with customers as well, I think it certainly helps.
Victor Limongelli: Well, it's hard to put a precise quantification on it, but if you look at the growth in our GRR, I think we are positioned better with our customers. Instead of having technology that, you know, maybe a few years ago someone would have viewed as dated, we have up-to-date market-leading technology in critical areas. That helps customers feel that they should stick with you, that you're gonna be a long-term solution, and we've seen our GRR go up. I don't think it's only as a result of that because our renewals team has done a great job. We've done better engagement with customers as well, I think it certainly helps.
Speaker #1: We have up-to-date market-leading technology in critical areas. So that helps customers feel that they should stick with you, that you're going to be a long-term solution.
Speaker #1: And we've seen our GRR go up. I don't think it's only as a result of that because our renewals team has done a great job.
Speaker #1: We've done better engagement with customers as well, but I think it's certainly helped.
Anja Soderstrom: Okay. Thank you. That was all for me.
Anja Soderstrom: Okay. Thank you. That was all for me.
Speaker #5: Okay. Thank you. That was all for me.
Speaker #1: Thank you.
Victor Limongelli: Thank you.
Victor Limongelli: Thank you.
Speaker #2: Thank you. Our next question comes from the line of Eric Suffager of B. Riley Securities. Your line is now open.
Operator 2: Thank you. Our next question comes from the line of Eric Saghi of B. Riley Securities. Your line is now open.
Operator: Thank you. Our next question comes from the line of Eric Saghi of B. Riley Securities. Your line is now open.
Speaker #6: Yeah, thanks again. A follow-up here: of your FIDO2 customers, how many of them are buying both the Knock Knock back-end software as well as the tokens?
Eric Saghi: Yeah. Thanks again. A follow-up here. Of your FIDO2 customers, how many of them are buying both the Nok Nok back-end software as well as the tokens?
Erik Suppiger: Yeah. Thanks again. A follow-up here. Of your FIDO2 customers, how many of them are buying both the Nok Nok back-end software as well as the tokens?
Victor Limongelli: To date, not too many. It's the Nok Nok of course did not have a token business, so most of them are pure software customers. That's another area that I think as we look ahead, we have an opportunity to do better in. It's something that we're hoping can blunt the decline in the consumer banking tokens as we move forward. Having that broad offering does give flexibility to customers. If they have a portion of their workforce that they wanna have hardware authentication for, we can offer that without them needing to go to somebody else to a hardware-only vendor, as an example. To date, we haven't had a ton of cross-sell on that. It is an opportunity rather than a material contributor at the moment.
Victor Limongelli: To date, not too many. It's the Nok Nok of course did not have a token business, so most of them are pure software customers. That's another area that I think as we look ahead, we have an opportunity to do better in. It's something that we're hoping can blunt the decline in the consumer banking tokens as we move forward. Having that broad offering does give flexibility to customers. If they have a portion of their workforce that they wanna have hardware authentication for, we can offer that without them needing to go to somebody else to a hardware-only vendor, as an example. To date, we haven't had a ton of cross-sell on that. It is an opportunity rather than a material contributor at the moment.
Speaker #1: To date, not too many. The Knock Knock, of course, did not have a token business. So most of them are pure software customers. And that's another area that I think as we look ahead, we have an opportunity to do better in.
Speaker #1: It's something that we're hoping can blunt the decline in the consumer banking tokens. As we move forward, having that broad offering does give flexibility to customers.
Speaker #1: If they have a portion of their workforce that they want to have hardware authentication for, we can offer that without them needing to go to somebody else—to a hardware-only vendor, as an example.
Speaker #1: But to date, we haven't had a ton of cross-sell on that. It is an opportunity. Rather than a material contributor at the moment.
Eric Saghi: Is it a synergistic sale where you're able to provide any kind of advantage by using an end-to-end solution, or is it just simply standards-based and therefore there's no end-to-end benefit?
Speaker #6: Is it a synergistic sale where you're able to provide any kind of advantage by using an end-to-end solution? Or is it just simply standards-based and therefore there's no end-to-end benefit?
Erik Suppiger: Is it a synergistic sale where you're able to provide any kind of advantage by using an end-to-end solution, or is it just simply standards-based and therefore there's no end-to-end benefit?
Speaker #1: Well, the Knock Knock offering has advantages. Of course, it is an open protocol, the FIDO protocol, but the Knock Knock solution has additional technology built in to enable device binding of keys, which financial institutions like a lot.
Victor Limongelli: Well, the Nok Nok offering has advantages. Of course, it is an open protocol, the FIDO protocol, but the Nok Nok solution has additional technology built in to enable device binding of keys, which financial institutions like a lot. Not to get into too much into the weeds, sync keys synced to Google or other cloud providers can sometimes make banks nervous. The Nok Nok offering has the ability to have device-bound keys so that they're not synced on the software side. On the hardware side, again, it's an open protocol, so they could buy hardware from someone else. It is advantageous in having the same vendor. We do very nice branding on the devices, which we have history having done that with banks for many, many years.
Victor Limongelli: Well, the Nok Nok offering has advantages. Of course, it is an open protocol, the FIDO protocol, but the Nok Nok solution has additional technology built in to enable device binding of keys, which financial institutions like a lot. Not to get into too much into the weeds, sync keys synced to Google or other cloud providers can sometimes make banks nervous. The Nok Nok offering has the ability to have device-bound keys so that they're not synced on the software side. On the hardware side, again, it's an open protocol, so they could buy hardware from someone else. It is advantageous in having the same vendor. We do very nice branding on the devices, which we have history having done that with banks for many, many years.
Speaker #1: Not to get into too much into the weeds, but synced keys synced to Google or other cloud providers can sometimes make banks nervous. And the Knock Knock offering has the ability to have device-bound keys so that they're not synced.
Speaker #1: On the software side. On the hardware side, it is, again, it's an open protocol. So they could buy hardware from someone else. It is advantageous in having the same vendor.
Speaker #1: We do very nice branding of the devices, which we have history having done that with banks for many, many years. So to the extent that they like that, it's an appealing offering.
Victor Limongelli: To the extent that they like that, it's an appealing offering. Again, open protocol, so it's not, there's not a vendor lock-in situation when it comes to hardware.
Victor Limongelli: To the extent that they like that, it's an appealing offering. Again, open protocol, so it's not, there's not a vendor lock-in situation when it comes to hardware.
Speaker #1: But again, open protocol, so it's not there's not a vendor lock-in situation when it comes to hardware.
Speaker #6: Very good. Thank you.
Eric Saghi: Very good. Thank you.
Erik Suppiger: Very good. Thank you.
Speaker #2: Thank you. Our next question comes from the line of Catherine Trevenik of Rosenblatt. Your line is now open.
Operator 2: Thank you. Our next question comes from the line of Catharine Trebnick of Rosenblatt Securities. Your line is now open.
Operator: Thank you. Our next question comes from the line of Catharine Trebnick of Rosenblatt Securities. Your line is now open.
Speaker #7: Yeah. Thanks for taking my question. Now with subscription revenue roughly 80% of total, and you have a good track record, or it seems like digital agreements and the cybersecurity subscriptions growing.
Catharine Trebnick: Yeah, thanks for taking my question. Now, with subscription, revenue roughly 80% of total, and you have a good track record or it seems like, Digital Agreements and the cybersecurity subscriptions growing, can you kinda lay out a plan for, you know, will it always be 80%, 85%? I mean, what's gonna happen with the hardware, you think, in, you know, over the next 12 months? 'Cause I know it's been lumpy and there's obviously some changes and just kinda lay out a roadmap. Thank you.
Catharine Trebnick: Yeah, thanks for taking my question. Now, with subscription, revenue roughly 80% of total, and you have a good track record or it seems like, Digital Agreements and the cybersecurity subscriptions growing, can you kinda lay out a plan for, you know, will it always be 80%, 85%? I mean, what's gonna happen with the hardware, you think, in, you know, over the next 12 months? 'Cause I know it's been lumpy and there's obviously some changes and just kinda lay out a roadmap. Thank you.
Speaker #7: Can you kind of lay out a plan for will it always be 80, 85 percent? I mean, what's going to happen with the hardware you think over the next 12 months?
Speaker #7: Because I know it's been lumpy and there's obviously some changes and just kind of lay out a roadmap. Thank you.
Speaker #1: So let me just talk about the underlying business trends. The consumer banking tokens we expect to continue to decline. We don't think they'll go to zero.
Victor Limongelli: Let me just talk about the underlying business trends. The consumer banking tokens we expect to continue to decline. We don't think they'll go to 0. We think there'll be some portion of consumers in Europe and Asia that are using tokens to authenticate because they're doing web banking and they're not doing their banking through a mobile banking app. You ask banks, a lot of them will say 80% of their traffic's now through their mobile app versus laptops or desktops. The hardware piece, the part that could offset that ongoing decline that's been going on for over a decade is the FIDO2 security keys. If we can get that piece to grow, we could offset that growth and keep the hardware business at a stable rate.
Victor Limongelli: Let me just talk about the underlying business trends. The consumer banking tokens we expect to continue to decline. We don't think they'll go to 0. We think there'll be some portion of consumers in Europe and Asia that are using tokens to authenticate because they're doing web banking and they're not doing their banking through a mobile banking app. You ask banks, a lot of them will say 80% of their traffic's now through their mobile app versus laptops or desktops. The hardware piece, the part that could offset that ongoing decline that's been going on for over a decade is the FIDO2 security keys. If we can get that piece to grow, we could offset that growth and keep the hardware business at a stable rate.
Speaker #1: We think there'll be some portion of consumers in Europe and Asia that are using tokens to authenticate because they're doing web banking and they're not doing their banking through a mobile banking app.
Speaker #1: You ask banks, a lot of them will say 80% of their traffic's now through their mobile app versus laptops or desktops. The hardware piece, the part that could offset that ongoing decline that's been going on for over a decade is the FIDO2 security piece.
Speaker #1: If we can get that piece to grow, we could offset that growth and keep the hardware business at a stable rate. Of course, most of our focus, most of our attention is on growing the subscription, growing the ARR, and driving value that way.
Victor Limongelli: Of course, most of our focus, most of our attention is on growing the subscription, growing the ARR, and driving value that way. Jorge, I don't know if you wanna add anything on modeling that would be helpful.
Victor Limongelli: Of course, most of our focus, most of our attention is on growing the subscription, growing the ARR, and driving value that way. Jorge, I don't know if you wanna add anything on modeling that would be helpful.
Speaker #1: Jorge, I don't know if you want to add anything on modeling that would be helpful.
Speaker #6: Yeah, so I think for purposes of 2026, Catherine, we didn’t change our guide for hardware. Where it goes in 2027, 2028—nobody has a crystal ball.
Jorge Martell: Yeah, you know, I think for purposes of 2026, Catharine, you know, we didn't change our guide for hardware. You know, where it goes in 2027, 2028, you know, nobody has a crystal ball, I think, Vic, have some input on that. You know, it's obviously still in secular decline, but to Vic's point, we don't think it's gonna go to zero, right? There's gonna be, even corporate banking is still done, you know, through a hardware token. It's the safest way to do for wires, transaction assignments, things of that nature. There will be, you know, specifically, you know, a pool in the, a target sort of customer base that will continue to use that device, right? Hardware tokens.
Jorge Martell: Yeah, you know, I think for purposes of 2026, Catharine, you know, we didn't change our guide for hardware. You know, where it goes in 2027, 2028, you know, nobody has a crystal ball, I think, Vic, have some input on that. You know, it's obviously still in secular decline, but to Vic's point, we don't think it's gonna go to zero, right? There's gonna be, even corporate banking is still done, you know, through a hardware token. It's the safest way to do for wires, transaction assignments, things of that nature. There will be, you know, specifically, you know, a pool in the, a target sort of customer base that will continue to use that device, right? Hardware tokens.
Speaker #6: I think have some input on that. It's obviously still in secular decline, but to Vic's point, we don't think it's going to go to zero, right?
Speaker #6: There's going to be even corporate banking is still done through a hardware token. It's the safest way to do wireless transactions, signing, things of that nature.
Speaker #6: And so there will be specifically a pool in the target sort of customer base that will continue to use that device, right? Hardware tokens.
Jorge Martell: you know, kind of cannot add more to what you said, Vic, other than, you know, hopefully stabilizes and finds a new baseline, soon.
Speaker #6: So cannot add more to what you said, Vic, other than hopefully stabilize this and find some new baseline soon.
Jorge Martell: you know, kind of cannot add more to what you said, Vic, other than, you know, hopefully stabilizes and finds a new baseline, soon.
Speaker #7: All right. Thank you very much. Sorry to keep asking that question, but it keeps coming up. Bye-bye.
Catharine Trebnick: All right. Thank you very much. Sorry to keep asking that question, but keeps coming up.
Catharine Trebnick: All right. Thank you very much. Sorry to keep asking that question, but keeps coming up.
Victor Limongelli: Thanks, Catharine.
Victor Limongelli: Thanks, Catharine.
Catharine Trebnick: Bye-bye.
Catharine Trebnick: Bye-bye.
Speaker #6: Thank you.
Victor Limongelli: Thank you.
Victor Limongelli: Thank you.
Speaker #1: Thanks.
Jorge Martell: Thanks.
Jorge Martell: Thanks.
Speaker #2: Thank you. This concludes the question and answer session. I would now like to turn it back to Joe Maxa for closing remarks.
Operator 2: Thank you. This concludes the question and answer session. I would now like to turn it back to Joe Maxa for closing remarks.
Operator: Thank you. This concludes the question and answer session. I would now like to turn it back to Joe Maxa for closing remarks.
Speaker #6: Thanks for joining today, everyone. We look forward to talking with you again next quarter. Have a great evening.
Joe Maxa: Thanks for joining today, everyone. We look forward to talking with you again next quarter. Have a great evening.
Joe Maxa: Thanks for joining today, everyone. We look forward to talking with you again next quarter. Have a great evening.
Operator 2: Thank you for your participation in today's conference. This does conclude the program. You may now disconnect.
Operator: Thank you for your participation in today's conference. This does conclude the program. You may now disconnect.