Q1 2026 Varonis Systems Inc Earnings Call

April 28, 2026

Operator 2: Greetings, welcome to the Varonis Systems Inc. Q1 2026 Earnings Conference Call. At this time, all participants are in a listen-only mode. A question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star 0 on your telephone keypad. Please note this conference is being recorded. I will now turn the conference over to your host, Tim Perz. Please go ahead.

Speaker #2: A question-and-answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press *0 on your telephone keypad. Please note this conference is being recorded.

Speaker #2: I will now turn the conference over to your host, Tim Perz. Please go ahead. Thank you, operator. Good afternoon. Thank you for joining us today to review Varonis's first quarter 2026 financial results.

Tim Perz: Thank you, operator. Good afternoon. Thank you for joining us today to review Varonis' Q1 2026 financial results. With me on the call today are Yaki Faitelson, Chief Executive Officer, and Guy Melamed, Chief Financial Officer and Chief Operating Officer of Varonis. After preliminary remarks, we will open the call to a question and answer session. During this call, we may make statements related to our business that would be considered forward-looking statements under federal securities laws, including projections of future operating results for our Q2 and full year ending 31 December 2026. Due to a number of factors, actual results may differ materially from those set forth in such statements.

Speaker #2: With me on the call today are Yakov Faitelson, chief executive officer, and Guy Melamed, chief financial officer and chief operating officer of Varonis. After preliminary remarks, we will open the call to a question-and-answer session.

Speaker #2: During this call, we may make statements related to our business that would be considered forward-looking statements under federal securities laws, including projections of future operating results for our second quarter and full year ending December 31, 2026.

Speaker #2: Due to a number of factors, actual results may differ materially from those set forth in such statements. These factors are set forth in the earnings press release that we issued today under the section captioned "Forward-looking Statements" and these and other important risk factors are described more fully in our reports filed with the Securities and Exchange Commission.

Tim Perz: These factors are set forth in the earnings press release that we issued today under the section captioned Forward-Looking Statements, and these and other important risk factors are described more fully in our reports filed with the Securities and Exchange Commission. We encourage all investors to read our SEC filings. These statements reflect our views only as of today and should not be relied upon as representing our views as of any subsequent date. Varonis expressly disclaims any application or undertaking to release publicly any updates or revisions to any forward-looking statements made herein. Additionally, non-GAAP financial measures will be discussed on this conference call. A reconciliation for the most directly comparable GAAP financial measures is also available in our Q1 2026 earnings press release and our investor presentation, which can be found at varonis.com in the investor relations section.

Speaker #2: We encourage all investors to read our SEC filings. These statements reflect our views only as of today and should not be relied upon as representing our views as of any subsequent date.

Speaker #2: Varonis expressly disclaims any application or undertaking to release publicly any updates or revisions to any forward-looking statements made herein. Additionally, non-GAAP financial measures will be discussed on this conference call for reconciliation for the most directly comparable GAAP financial measures is also available in our first quarter 2026 earnings press release and our investor presentation, which can be found at varonis.com/in the investor relations section.

Speaker #2: Lastly, please note that a webcast of today's call is available on our website in the investor relations section. With that, I'd like to turn the call over to our chief executive officer, Yakov Faitelson.

Tim Perz: Lastly, please note that a webcast of today's call is available on our website in the investor relations section. With that, I'd like to turn the call over to our Chief Executive Officer, Yaki Faitelson. Yaki.

Speaker #2: Yakov?

Speaker #3: Thanks, Tim, and good afternoon, everyone. We appreciate you joining us to discuss our first quarter 2026 results. Our Q1 results reflect our strong performance as we execute on the growing need to secure data and safely enable the usage of AI.

Yaki Faitelson: Thanks, team, good afternoon, everyone. We appreciate you joining us to discuss our Q1 2026 results. Our Q1 results reflect our strong performance as we execute on the growing need to secure data and safely enable the usage of AI. In Q1, SaaS ARR, excluding conversions, increased 29% year-over-year to $522.6 million. In total, SaaS ARR, including conversions, was $683.2 million. Guy will review our results and our guidance in more detail shortly. We continue to see strong demand from both accelerating new logos and existing customers because companies understand that they must secure their data and their AI stack. Varonis helps them do that with minimal effort because of the automation built into our platform. In Q1, we saw continued adoption of MDDR and AI-related products, as well as traction in securing cloud environments.

Speaker #3: In Q1, SaaS ARR, excluding convergence, increased 29% year over year to 522.6 million dollars in total SaaS ARR, including convergence, was 683.2 million dollars.

Speaker #3: Guy will review our results and our guidance in more detail shortly. We continue to see strong demand from both accelerating new logos and existing customers.

Speaker #3: Because companies understand that they must secure their data and their AI stack. Varonis helps them do that with minimal effort because of the automation built into our platform.

Speaker #3: In Q1, we saw continued adoption of MDDR and AI-related products, as well as traction in securing cloud environments. Early feedback on our newer products driven by acquisitions over the last year including database activity monitoring, interceptor and Atlas, reinforces our belief that these offerings are a strong fit to our platform and can help drive ARR growth over time.

Yaki Faitelson: Early feedback on our newer products driven by acquisitions over the last year, including database activity monitoring, Interceptor, and Atlas, reinforces our belief that these offerings are a strong fit to our platform and can help drive ARR growth over time. I would like to take a step back from our near-term results and discuss why we believe we are best positioned to help companies safely adopt AI and prevent data breaches. Varonis is founded on the belief that managing and protecting data would be impossible without automation. That belief is even more important today as customer work to adopt AI securely. The security model of the last 30 years was not built with AI in mind. Many organizations want to capitalize on the productivity gains from AI, but have only connected a small portion of their data to AI because of security concerns.

Speaker #3: Now, I would like to take a step back from our near-term results and discuss why we believe we are best positioned to help companies safely adopt AI and prevent data breaches.

Speaker #3: Varonis founded on the belief that managing and protecting data would be impossible without automation. That belief is even more important today as customer work to adopt AI securely the security model of the last 30 years was not built with AI in mind.

Speaker #3: Many organizations want to capitalize on the productivity gains from AI, but are only connecting a small portion of their data to AI because of security concerns.

Speaker #3: Companies want to connect more of their data to take advantage of the productivity gains but need the right guardrails in place to confidently move faster.

Yaki Faitelson: Companies want to connect more of their data to take advantage of the productivity gains, but need the right guardrails in place to confidently move faster. When we look at what's standing in the way of broader AI adoption, we see three barriers: securing the data itself, securing the AI systems and agents that touch that data, and fighting AI-powered adversaries. The first barrier is securing the data and making sure only the right data is accessed by the right agents and systems. AI pushes existing access controls to their limits because many systems and agents inherit user access that is far too broad. One classic example of this is an employee asking an AI chatbot a basic question and getting confidential information that they should not have access to, such as salary data, financial records, or intellectual property in a response.

Speaker #3: When we look at what's standing in the way of broader AI adoption, we see three barriers: securing the data itself, securing the AI systems and agents that touch that data, and fighting AI-powered adversaries.

Speaker #3: The first barrier is securing the data and making sure only the right data is accessed by the right agents and systems. AI pushes existing access controls, to their limits, because many systems and agents inherit user access that is far too broad.

Speaker #3: One classic example of this is an employee asking an AI chatbot a basic question and getting confidential information that they should not have access to such a salary data financial record or intellectual property in a response.

Speaker #3: This is content a human mistakenly had access to, but was less likely to find without AI. Previously, a human employee had to log in, navigate, download, and take action; there was friction because it took time and effort, which reduces risk.

Yaki Faitelson: This is content a human mistakenly had access to but was less likely to find without AI. Previously, a human employee had to log in, navigate, download, and take action. There was friction because it took time and effort that reduces risk. In the agentic world, an agent can access a huge amount of your data estate in seconds. Agents can move fast, behave unpredictably, and maximize privileges by design. If an agent doesn't have permissions, it will try to get them. Connecting agents and models to data is what blocking organizations from safely adopting AI faster. They need remediation at scale and to understand abnormal behavior. Visibility alone is not enough. The second barrier is securing the AI systems themselves. In Q1, Varonis found a vulnerability called Reprompt, which allowed attackers to bypass safety controls in Microsoft Copilot Personal.

Speaker #3: In the agentic world, an agent can access a huge amount of your data estate in seconds. Agents can move fast, behave unpredictably, and maximize privileges by design.

Speaker #3: And if an agent doesn't have permissions, it will try to get them. Connecting agents and models to data is what's blocking organizations from safely adopting AI faster.

Speaker #3: They need a remediation at scale and to understand abnormal behavior visibility alone is not enough. The second barrier is securing the AI systems themselves.

Speaker #3: In Q1, Varonis found a vulnerability called Reprompt, which allowed attackers to bypass safety controls in Microsoft Copilot Personnel. The vulnerability, if exploited, would give the attacker access to everything the Copilot Personnel session itself could access, including prompts, conversation history, and all of the data consumer assist could access.

Yaki Faitelson: The vulnerability, if exploited, would give the attacker access to everything the Copilot Personal session itself could access, including prompts, conversation history, and all of the data consumer assist could access. The third barrier is fighting the AI-powered adversary. We have already seen examples of this, including last year when attackers used Claude code to breach a major organization with minimal human involvement, or earlier this year when alone unskilled attackers used AI to scale an attack across 600 plus firewalls in 55 countries, an attack that would have previously required a team of experts to execute. AI-powered phishing doesn't just target humans, it targets agents too. Agents can read email, Slack, and team messages. One human clicking maliciously is one compromised identity. An army of agents can multiply the attack surface. The three barriers together overexpose data, unsecure the AI systems.

Speaker #3: The third barrier is fighting the AI-powered adversary. We have already seen examples of this including last year when attackers used Claude Code to breach a major organization with minimal human involvement or earlier this year when a loan unskilled attackers used AI to scale an attack across 600-plus firewalls in 55 countries and attack that would have previously required a team of experts to execute.

Speaker #3: AI-powered phishing doesn't just target humans; it targets agents too. Agents can read email, Slack, and team messages, one human clicking on maliciously is one compromised identity.

Speaker #3: An army of agents can multiply the attack surface. The three barriers together overexpose data, unsecure the AI systems, AI-powered adversaries, create a dangerous environment, and companies must build foundational controls that operate at the speed and scale of AI, starting from the inside out.

Yaki Faitelson: AI-powered adversaries create a dangerous environment. Companies must build foundational controls that operates at the speed and scale of AI, starting from the inside out. Varonis does just that by securing the data itself using the automated find, fix, and alert approach. The first piece is find. Know what you have across the entire data store, structured, unstructured, semi-structured, and application data. Classified for sensitivity, context, and staleness so you know what should and should not be connected to AI. The second is fix. Right-size permissions, label data, and masking. Manual process can't work anymore. The remediation must be automated and AI-driven. Finally, alert. Monitoring who and what is accessing your data and detect abnormal behavior quickly to stop breach before it happens. This is the basis for AI detection and response. AI security and data security are intertwined with one another.

Speaker #3: Varonis does just that by securing the data itself, using the automated find, fix, and alert approach. The first piece is find: know what you have across the entire data store—structured, unstructured, semi-structured, and application data.

Speaker #3: Classified for sensitivity, context, and staleness so you know what should and should not be connected to AI. The second is fix. Right-sized permissions, labeled data, and mask it.

Speaker #3: Manual processes can't work anymore. The remediation must be automated and AI-driven. And finally, alert monitoring—who and what is accessing your data—and detect abnormal behavior quickly to stop a breach before it happens.

Speaker #3: This is the basis for AI detection and response. AI security and data security are intertwined with one another. You need an inventory of every model, agent, and pipeline running in your environment, and you need access posture to know what data they can touch, what permissions they have, and where they are vulnerable.

Yaki Faitelson: You need an inventory of every model, agent, and pipeline running in your environment, and you need access posture to know what data they can touch, what permissions they have, and where they are vulnerable. You need runtime guardrails to block malicious inputs before they reach the model, preventing sensitive data from leaking in outputs and restricting tool use. Finally, you must fight AI-powered adversary. The volume and speed these attacks demand automation. These layers only work if they are connected. AI inventory and runtime protection is significantly more meaningful when you know what sensitive data they access and what data they are trained on. Guardrails that leverage the same accurate classification and labeling applied to enterprise data store reduce friction and increase control. We knew it would be impossible for humans to control data risk without tremendous automation. Only AI can defend AI risk.

Speaker #3: You need runtime guardrails to block malicious inputs before they reach the model, preventing sensitive data from leaking in outputs and restricting tool use. Finally, you must fight the AI-powered adversary: the volume and speed these attacks demand automation.

Speaker #3: These layers only work if they are connected. AI inventory and runtime protection is significantly more meaningful when you know what sensitive data they access and what data they are trained on.

Speaker #3: Guardrails that leverage the same accurate classification and labeling applied to the enterprise data store reduce friction and increase control. We knew it would be impossible for humans to control data risk without tremendous automation; only AI can defend AI risk.

Speaker #3: When it trusts or breaks, you feel safe driving faster. When you have the right guardrails, data and AI become a force multiplier not a breach waiting to happen.

Yaki Faitelson: When you trust your brakes, you feel safe driving faster. When you have the right guardrails, data and AI become a force multiplier, not a breach waiting to happen. With that, I would like to briefly discuss a couple of key customer wins from Q1. This quarter, a global technology company with over 50,000 employees became a Varonis customer. They needed to quickly and safely roll out AI tools and also wanted to better protect customers and company proprietary intellectual property data, meet compliance requirements, and perform forensics analysis in an event of a breach. During the risk assessment, our MDDR team detected multiple active threats. We also identified risks in Salesforce and Microsoft 365 and provided an operational plan to fix these risks with intelligent automation.

Speaker #3: With that, I would like to briefly discuss a couple of key customer wins from Q1. This quarter, a global technology company with over 50,000 employees became a Varonis customer.

Speaker #3: They needed to quickly and safely roll out AI tools, and also wanted to better protect customers and company proprietary intellectual property data, meet compliance requirements, and perform forensics analysis in the event of a breach.

Speaker #3: During the risk assessment, our MDDR team detected multiple active threats; we also identified risks in Salesforce and Microsoft 365 and provided an operational plan to fix these risks with intelligent automation.

Speaker #3: Our ability to provide these outcomes and safely enable the usage of AI were the key reasons why we were selected over several DSPM point solutions.

Yaki Faitelson: Our ability to provide these outcomes and safely enable the usage of AI was the key reason why we were selected over several DSPM point solutions. They ultimately purchased Varonis for AWS, Salesforce, Google Cloud platforms, and Google Drive, as well as Varonis SaaS for hybrid with MDR and Varonis for Copilot. We also continue to see existing customers expand into new use cases as they consolidate point tools and utilize the breadth of our platform. In Q1, ServiceNow, a global leader of workflow automation, expanded its Varonis investments to cover internal AI systems and email security, including protection against advanced phishing and social engineering attacks used by AI-powered adversaries.

Speaker #3: They ultimately purchased Varonis for AWS, Salesforce, Google Cloud Platform, and Google Drive, as well as Varonis SaaS for hybrid with MDDR, and Varonis for Copilot.

Speaker #3: We also continue to see existing customers expand into new use cases as they consolidate point tools and utilize the breadth of our platform. In Q1, ServiceNow, a global leader of workflow automation, expanded its Varonis investment to cover internal AI systems and email security.

Speaker #3: Including protection against advanced phishing and social engineering attacks used by AI-powered adversaries. In summary, AI is forcing companies to prioritize data and AI security.

Yaki Faitelson: In summary, AI is forcing companies to prioritize data and AI security, and Varonis is uniquely positioned to help with our unified platform that allows customers to put the right guardrails in place in order to accelerate their AI deployments plans. With that, let me turn the call over to Guy. Guy?

Speaker #3: And Varonis is uniquely positioned to help with our unified platform that allows customers to put the right guardrails in place in order to accelerate the AI deployments plans.

Speaker #3: With that, let me turn the call over to Guy. Guy.

Speaker #2: Thanks, Yaki. Good afternoon, everyone. Thank you for joining us today. Our first quarter performance represents a strong start to 2026, and we are excited by the momentum we are seeing in the business.

David Brown: Thanks, Yaki. Good afternoon, everyone. Thank you for joining us today. Our Q1 performance represents a strong start to 2026, and we are excited by the momentum we are seeing in the business. Demand was healthy across both new logos and existing customers, and we are excited to raise our full year guidance after our strong start to the year. As a reminder, we are focusing on SaaS ARR growth excluding conversions, which reflects our ability to add new SaaS customers and also expand with existing ones, as this is the primary growth driver of our business in the years ahead. In Q1, SaaS ARR excluding conversions increased 29% year over year to $522.6 million, and total SaaS ARR was $683.2 million.

Yaki Faitelson: Thanks, Yaki. Good afternoon, everyone. Thank you for joining us today. Our Q1 performance represents a strong start to 2026, and we are excited by the momentum we are seeing in the business. Demand was healthy across both new logos and existing customers, and we are excited to raise our full year guidance after our strong start to the year. As a reminder, we are focusing on SaaS ARR growth excluding conversions, which reflects our ability to add new SaaS customers and also expand with existing ones, as this is the primary growth driver of our business in the years ahead. In Q1, SaaS ARR excluding conversions increased 29% year over year to $522.6 million, and total SaaS ARR was $683.2 million.

Speaker #2: Demand was healthy across both new logos and existing customers, and we are excited to raise our full-year guidance after our strong start to the year.

Speaker #2: As a reminder, we are focusing on SaaS ARR growth, excluding conversions, which reflects our ability to add new SaaS customers and also expand with existing ones.

Speaker #2: As this is the primary growth driver of our business in the years ahead. In the first quarter, SaaS ARR, excluding conversions, increased 29% year over year to $522.6 million, and total SaaS ARR was $683.2 million.

Speaker #2: In Q1, we had $11.3 million of conversion ARR, and we finished the quarter with approximately $83.7 million of non-SaaS ARR remaining. This quarter, we generated $49 million of free cash flow, down from $65.3 million in the same period last year, which reflects the previously communicated headwind from the end-of-life announcement of our on-prem platform and also includes approximately $12.6 million of acquisition-related costs related to the accounting treatment of our acquisitions.

David Brown: In Q1, we had $11.3 million of conversion ARR, and we finished the quarter with approximately $83.7 million of non-SaaS ARR remaining. This quarter, we generated $49 million of free cash flow, down from $65.3 million in the same period last year, which reflects the previously communicated headwind from the end of life announcement of our on-prem platform and also includes approximately $12.6 million of acquisition-related costs related to the accounting treatment of our acquisitions. Adjusting for the acquisition-related costs, free cash flow would have been approximately $61.6 million in Q1. We remain on track to achieve our full year free cash flow guidance. Now I'd like to recap our Q1 results in more detail. In Q1, total revenues were $173.1 million, up 27% year over year.

Yaki Faitelson: In Q1, we had $11.3 million of conversion ARR, and we finished the quarter with approximately $83.7 million of non-SaaS ARR remaining. This quarter, we generated $49 million of free cash flow, down from $65.3 million in the same period last year, which reflects the previously communicated headwind from the end of life announcement of our on-prem platform and also includes approximately $12.6 million of acquisition-related costs related to the accounting treatment of our acquisitions. Adjusting for the acquisition-related costs, free cash flow would have been approximately $61.6 million in Q1. We remain on track to achieve our full year free cash flow guidance. Now I'd like to recap our Q1 results in more detail. In Q1, total revenues were $173.1 million, up 27% year over year.

Speaker #2: Adjusting for the acquisition-related costs, free cash flow would have been approximately $61.6 million in Q1. We remain on track to achieve our full-year free cash flow guidance.

Speaker #2: Now, I'd like to recap our Q1 results in more detail. In the first quarter, total revenues were $173.1 million, up 27% year over year.

Speaker #2: SaaS revenues were $161.1 million. Term license subscription revenues were $6.9 million, and maintenance and services revenues were $5.2 million. Our SaaS renewal rate was over 90%.

David Brown: SaaS revenues were $161.1 million. Term license subscription revenues were $6.9 million, and maintenance and services revenues were $5.2 million. Our SaaS renewal rate was over 90%. Moving down to the income statement, I'll be discussing non-GAAP results going forward. Gross profit for Q1 was $134.9 million, representing a gross margin of 77.9% compared to 80.2% in Q1 2025. Our gross margin continues to be healthy and in line with our long-term target set at our Investor Day. Operating expenses in Q1 totaled $136.3 million. As a result, Q1 operating loss was $1.4 million or an operating margin of -0.8%.

Yaki Faitelson: SaaS revenues were $161.1 million. Term license subscription revenues were $6.9 million, and maintenance and services revenues were $5.2 million. Our SaaS renewal rate was over 90%. Moving down to the income statement, I'll be discussing non-GAAP results going forward. Gross profit for Q1 was $134.9 million, representing a gross margin of 77.9% compared to 80.2% in Q1 2025. Our gross margin continues to be healthy and in line with our long-term target set at our Investor Day. Operating expenses in Q1 totaled $136.3 million. As a result, Q1 operating loss was $1.4 million or an operating margin of -0.8%.

Speaker #2: Moving down to the income statement, I'll be discussing non-GAAP results going forward. Gross profit for the first quarter was $134.9 million, representing a gross margin of 77.9%, compared to 80.2% in the first quarter of 2025.

Speaker #2: Our gross margin continues to be healthy and in line with our long-term target set at our investor day. Operating expenses in the first quarter totaled $136.3 million.

Speaker #2: As a result, first quarter operating loss was $1.4 million, or an operating margin of negative 0.8%. This compares to an operating loss of $6.5 million, or an operating margin of negative 4.7% in the same period last year.

David Brown: This compares to an operating loss of $6.5 million or an operating margin of -4.7% in the same period last year. Q1 ARR contribution margin was 14.1%, down from 16.7% last year. This is in line with our expectations and as a reminder, is impacted in 2026 due to the end of life for our self-hosted platform. During the quarter, we had financial income of approximately $5.7 million, driven primarily by interest income on our cash, deposits, and investments in marketable securities. Net income for Q1 2026 was $7.5 million, or net income of $0.06 per diluted share, compared to net income of $0.7 million or $0.00 per diluted share for Q1 2025.

Yaki Faitelson: This compares to an operating loss of $6.5 million or an operating margin of -4.7% in the same period last year. Q1 ARR contribution margin was 14.1%, down from 16.7% last year. This is in line with our expectations and as a reminder, is impacted in 2026 due to the end of life for our self-hosted platform. During the quarter, we had financial income of approximately $5.7 million, driven primarily by interest income on our cash, deposits, and investments in marketable securities. Net income for Q1 2026 was $7.5 million, or net income of $0.06 per diluted share, compared to net income of $0.7 million or $0.00 per diluted share for Q1 2025.

Speaker #2: First quarter ARR contribution margin was 14.1%, down from 16.7% last year. This is in line with our expectations and, as a reminder, is impacted in 2026 due to the end-of-life for our self-hosted platform.

Speaker #2: During the quarter, we had financial income of approximately $5.7 million, driven primarily by interest income on our cash deposits and investments in marketable securities.

Speaker #2: Net income for the first quarter of 2026 was $7.5 million, or net income of $0.06 per diluted share compared to net income of $0.7 million or 0 cents per diluted share for the first quarter of 2025.

Speaker #2: This is based on $132.8 million and $136.7 million diluted shares outstanding for Q1 2026 and Q1 2025, respectively. As of March 31, 2026, we had $900 million in cash, cash equivalent, short-term deposits, and marketable securities.

David Brown: This is based on 132.8 million and 136.7 million diluted shares outstanding for Q1 2026 and Q1 2025, respectively. As of 31 March 2026, we had $900 million in cash equivalent, short-term deposits, and marketable securities. For the 3 months ended 31 March 2026, we generated $55 million of cash from operations compared to $68 million generated in the same period last year, and CapEx was $5 million compared to $2.3 million in the same period last year. During Q1, we repurchased 5,355,445 shares at an average purchase price of $24.67, for a net total of $132.1 million.

Yaki Faitelson: This is based on 132.8 million and 136.7 million diluted shares outstanding for Q1 2026 and Q1 2025, respectively. As of 31 March 2026, we had $900 million in cash equivalent, short-term deposits, and marketable securities. For the 3 months ended 31 March 2026, we generated $55 million of cash from operations compared to $68 million generated in the same period last year, and CapEx was $5 million compared to $2.3 million in the same period last year. During Q1, we repurchased 5,355,445 shares at an average purchase price of $24.67, for a net total of $132.1 million.

Speaker #2: For the three months ended March 31, 2026, we generated $55 million of cash from operations, compared to $68 million generated in the same period last year, and CAPEX was $5 million compared to $2.3 million in the same period last year.

Speaker #2: During the first quarter, we repurchased $5,355,445 shares at an average purchase price of $24.67, for a net total of $132.1 million. As a reminder, we will provide quarterly SaaS ARR, excluding conversion guidance for this year only.

David Brown: As a reminder, we will provide quarterly SaaS ARR excluding conversion guidance for this year only. We are doing this because of the difficulty in modeling the year-over-year growth rates due to the impact of conversions in 2025 and 2026. We are also providing a bridge to quarterly total SaaS ARR in our investor deck, which again assumes zero conversions from a guidance perspective for the upcoming quarter. For the full year 2026, we will provide annual guidance for both SaaS ARR excluding conversions and total SaaS ARR. For more information, please see our earnings deck in our investor relations website, which includes a more detailed breakdown of our financial guidance. For Q2 2026, we expect SaaS ARR growth of 24% to 25%, excluding conversions.

Yaki Faitelson: As a reminder, we will provide quarterly SaaS ARR excluding conversion guidance for this year only. We are doing this because of the difficulty in modeling the year-over-year growth rates due to the impact of conversions in 2025 and 2026. We are also providing a bridge to quarterly total SaaS ARR in our investor deck, which again assumes zero conversions from a guidance perspective for the upcoming quarter. For the full year 2026, we will provide annual guidance for both SaaS ARR excluding conversions and total SaaS ARR. For more information, please see our earnings deck in our investor relations website, which includes a more detailed breakdown of our financial guidance. For Q2 2026, we expect SaaS ARR growth of 24% to 25%, excluding conversions.

Speaker #2: We are doing this because of the difficulty in modeling the year-over-year growth rates due to the impact of conversions in 2025 and 2026. We are also providing a bridge to quarterly total SaaS ARR in our investor deck, which again assumes zero conversions from a guidance perspective for the upcoming quarter.

Speaker #2: For the full year 2026, we will provide annual guidance for both SaaS ARR, excluding conversions, and total SaaS ARR. For more information, please see our earnings deck in our investor relations website, which includes a more detailed breakdown of our financial guidance.

Speaker #2: For the second quarter of 2026, we expect SaaS ARR growth of 24% to 25%, excluding conversions, total revenues of $175 million, to $178 million, representing growth of 15% to 17%, non-GAAP operating loss of negative $1 million, to break even, and non-GAAP net income per diluted share in the range of 0 cents to 1 cent.

David Brown: Total revenues of $175 to 178 million, representing growth of 15% to 17%. Non-GAAP operating loss of -$1 million to break even, and non-GAAP net income per diluted share in the range of $0.00 to $0.01. This assumes 131.1 million diluted shares outstanding. For the full year 2026, we now expect total SaaS ARR of $814 to 845 million, representing growth of 27% to 32%. This represents SaaS ARR growth of 20% to 21%, excluding conversions. Free cash flow of $100 to 105 million. Total revenues of $731 to 737 million, representing growth of 17% to 18%.

Yaki Faitelson: Total revenues of $175 to 178 million, representing growth of 15% to 17%. Non-GAAP operating loss of -$1 million to break even, and non-GAAP net income per diluted share in the range of $0.00 to $0.01. This assumes 131.1 million diluted shares outstanding. For the full year 2026, we now expect total SaaS ARR of $814 to 845 million, representing growth of 27% to 32%. This represents SaaS ARR growth of 20% to 21%, excluding conversions. Free cash flow of $100 to 105 million. Total revenues of $731 to 737 million, representing growth of 17% to 18%.

Speaker #2: This assumes $131.1 million diluted shares outstanding. For the full year 2026, we now expect total SaaS ARR of $814 million, to $845 million, representing growth of 27% to 32%.

Speaker #2: This represents SaaS ARR growth of 20% to 21%, excluding conversions. Free cash flow of $100 million, to $105 million, total revenues of $731 million, to $737 million, representing growth of 17% to 18%, non-GAAP operating income of $7 million, to $9 million, non-GAAP net income per diluted share in the range of 11 cents to 12 cents, this assumes $132.1 million diluted shares outstanding.

David Brown: Non-GAAP operating income of $7 million to $9 million. Non-GAAP net income per diluted share in the range of $0.11 to $0.12. This assumes 132.1 million diluted shares outstanding. In summary, we are excited by the strong start to the year and continue to see healthy momentum from both accelerating new customer wins and expansion within our installed base. Our Q1 results, coupled with the underlying drivers of our business, give us the confidence to raise our full year guidance for total SaaS ARR growth to 27% to 32%. In addition, we increased our guidance for SaaS ARR growth, excluding conversions to 20% to 21%, and we believe we can sustain this level of growth as a fully SaaS company. With that, we would be happy to take questions. Operator?

Yaki Faitelson: Non-GAAP operating income of $7 million to $9 million. Non-GAAP net income per diluted share in the range of $0.11 to $0.12. This assumes 132.1 million diluted shares outstanding. In summary, we are excited by the strong start to the year and continue to see healthy momentum from both accelerating new customer wins and expansion within our installed base. Our Q1 results, coupled with the underlying drivers of our business, give us the confidence to raise our full year guidance for total SaaS ARR growth to 27% to 32%. In addition, we increased our guidance for SaaS ARR growth, excluding conversions to 20% to 21%, and we believe we can sustain this level of growth as a fully SaaS company. With that, we would be happy to take questions. Operator?

Speaker #2: In summary, we are excited by the strong start to the year and continue to see healthy momentum from both accelerating new customer wins and expansion within our installed base.

Speaker #2: Our Q1 results, coupled with the underlying drivers of our business, give us the confidence to raise our full-year guidance for total SaaS ARR growth to 27% to 32%.

Speaker #2: In addition, we increased our guidance for SaaS ARR growth, excluding conversions, to 20% to 21%, and we believe we can sustain this level of growth as a fully SaaS company.

Speaker #2: With that, we would be happy to take questions.

Speaker #1: Thank you. We will now be conducting a question-and-answer session. If you would like to ask a question, please press star one on your telephone keypad.

Operator 2: Thank you. We will now be conducting a question and answer session. Our first question comes from Saket Kalia with Barclays.

Operator: Thank you. We will now be conducting a question and answer session. Our first question comes from Saket Kalia with Barclays.

Speaker #1: A confirmation tone will indicate your line is in the question queue. Please limit yourself to one question. You may press star two if you would like to remove your question from the queue.

Speaker #1: For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. And our first question comes from Saget Kalia with Barclays.

Speaker #3: Okay, great. Hey, Yaki. Hey, Guy. Thanks for taking my question here. A nice start to the year.

Saket Kalia: Okay, great. Hey, Yaki. Hey, Guy. Thanks for taking my question here and nice start to the year.

Speaker #4: Thank you very much.

Guy Melamed: Thank you very much.

Saket Kalia: absolutely. Maybe a question for both of you. You know, I think one of the thoughts this year has been that Varonis sales teams could spend more time now on new business rather than on both new business and conversions as they did last year. Guy, maybe for you, can you expand on how that's looking the Q1 into that new model? Yaki, for you, where are you having that success in driving new business? Thanks.

Speaker #3: Absolutely. Maybe a question for both of you. I think one of the thoughts this year has been that Veronis sales teams could spend more time now on new business rather than on both new business and conversions, as they did last year.

Speaker #3: Guy, maybe for you, can you expand on how that's looking the first quarter into that new model? And Yaki, for you, where are you having that success in driving new business?

Speaker #3: Thanks.

Speaker #4: Thank you. You're right. We talked a lot about the fact that the conversions from on-prem subscription to SaaS were cannibalizing the time of the reps and that in 2026, the way we've structured the commission plan and the way we've focused our reps is to go back and focus on upselling SaaS customers with additional products.

Guy Melamed: Saket Kalia, you're right. We talked a lot about the fact that the conversions from on-prem subscription to SaaS were cannibalizing the time of the reps, and that in 2026, the way we've structured the commission plan and the way we've focused our reps is to go back and focus on upselling SaaS customers with additional products and going into new TAMs and selling new products and selling our SaaS offering to new customers. We saw an acceleration in the new customer contribution, which we're extremely happy with, and it very much fits with what we were trying to achieve and the strength of the platform. Our sales force is able to go and, with the simplicity of the SaaS offering, sell to customers that we wouldn't be able to sell before.

Speaker #4: And going into new TAMs and selling new products, and selling our SaaS offering to new customers. And we saw an acceleration in the new customer contribution, which we're extremely happy with.

Speaker #4: And it very much fits with what we were trying to achieve, and the strength of the platform. So our sales force is able to go and, with the simplicity of the SaaS offering, sell to customers that we wouldn't have been able to sell to before.

Speaker #4: And that's worked really well in Q1, and we expect that to continue in the year ahead.

Guy Melamed: That worked really well in Q1, and we expect that to continue in the year ahead.

Speaker #5: In terms of what's in the market, the reality that for organizations to realize the value from AI for models and agents, they need to connect their organizational information into it.

Yaki Faitelson: In terms of what's in the market, the reality that for organizations to realize the value from AI, from models and agents, they need to connect their organization and information into it. The AI are as good as the data. This is the biggest problem that we see for organization. We call it the three percent paradox. It's very hard for them to securely connect the data. You know? You know, the MDDR becoming this AI detection and response, automated remediation of excessive permissions is the Holy Grail. If not, you know, just these agents will create and read massive amount of information that they should never touch. You also see just a lot of attacks that are AI-based, and this is hitting on all cylinders with the value proposition of the platform.

Speaker #5: They are as good as the data. And this is the biggest problem that we see for organizations. We call it the 3% paradox. It's very hard for them to securely connect the data.

Speaker #5: So the MDDR becoming this AI detection and response automated remediation of excessive permissions is the holy grail. If not, it just is agents will create and read massive amounts of information that they should never touch.

Speaker #5: And you also see just a lot of attacks that are AI-based. And this is hitting on all cylinders with the value proposition of the platform.

Yaki Faitelson: You know, you need just a foundational security that is automated, but it needs to be security. It can be just partial discovery. It's scale and, you know, AI just eats every data type: structured, unstructured application in the cloud and on-prem. This works very well for us as and we see that it's driving the business.

Speaker #5: You need just foundational security that is automated, but it needs to be security. It can't be just partial discovery. It's scale. And AI just eats every data type: structure, unstructured, application, in the cloud, and on-prem.

Speaker #5: This works. Very well for us. And we see that it's driving the business.

Speaker #1: And our next question comes from Rob Owens with Piper Sandler.

Operator 2: Our next question comes from Rob Owens with Piper Sandler.

Operator: Our next question comes from Rob Owens with Piper Sandler.

Speaker #4: Great. Thank you very much. I want to build on Socket's question a little bit and just drill down into the selling efforts. And I know in the prepared remarks you talked about accelerating new logos and expansion.

Rob Owens: Great. Thank you very much. Wanted to build on Saket's question a little bit and just drill down into the selling efforts. I know in the prepared remarks you talked about accelerating new logos and expansion. Anything you can do to quantify that for us or give us a sense of how and where that's trending? Thanks.

Speaker #4: Anything you can do to quantify that for us or give us a sense of how and where that's trending? Thanks.

Yaki Faitelson: Just in terms of the conversion, we see that just the organizations need to convert all the data stores, definitely AI creates more urgency around it because what happened essentially, and it's happened very fast, that just the tech stack, if you will, that organizations have is changing completely. Before, you know, we had a user that is accessing data through a user interface, you know, to a file system or just through a user interface to an application, it changes completely. Starting to have an agent that is accessing in robotic speed, and many times by using tools, data from any kind. They start customers and prospects understand that they need to understand what they have and to protect this data immediately because before in the model you had a lot of friction.

Speaker #5: Just in terms of the conversion, we see that organizations need to convert all the data stores, and definitely AI creates more urgency around it because what happened, essentially—and it's happened very fast—is that the tech stack, if you will, that organizations have is changing completely.

Speaker #5: Before, we had a user that is accessing data. So a user interface, to a file system or just through a user interface to an application, and it changes completely.

Speaker #5: Starting to have an agent that is accessing in robotic speed. And many times by using tools, from any kind. And they start customers and prospects understand that they need to understand what they have and to protect this data immediately because before, in the model, you had a lot of friction.

Speaker #5: A user needs to be malicious or to do just a gross mistake in order to get to information they shouldn't get. The agents will get to it immediately.

Yaki Faitelson: You know, user needs to be malicious or to do just a gross mistake in order to get the information they shouldn't get. The agents will get to it immediately. What happens fairly fast is that the most important security controls are moving to two places: to the agents and to the data. This works very well for Varonis.

Speaker #5: So what happens fairly fast is that the most important security controls are moving to two places: to the agents and to the data, and this works very well for Varonis.

Speaker #4: And Rob, just to quantify in terms of the new customer contribution, we saw, as we mentioned in the prepared remarks, an acceleration in the actual total number of new customers.

Guy Melamed: Rob, just to quantify in terms of the new customer contribution, we saw, as we mentioned in the prepared remarks, an acceleration in the actual total number of new customers. It was pretty significant from our end. What we also think and believe is when we look at the contribution from some of the new products, even though Atlas only closed in February, we saw some nice contribution there. Nothing too material, but definitely something that gives us the confidence that we can continue to sell that at an accelerated pace throughout the year. That's not baked in the guidance.

Speaker #4: It was pretty significant from our end. And what we also think and believe is, when we look at the contribution from some of the new products, even though Atlas only closed in February, we saw some nice contribution there.

Speaker #4: Nothing too material, but definitely something that gives us the confidence that we can continue to sell that at an accelerated pace throughout the year, and that's not baked into the guidance.

Speaker #4: So when we look at the Q1 behavior, it was definitely kind of driven by the new customer side. With a lot of opportunity throughout the year from an upsell opportunity with some of the products that we have that isn't baked in the numbers that we put out there.

Guy Melamed: When we look at the Q1 behavior, it was definitely kind of driven by the new customer side, with a lot of opportunity throughout the year from an upsell opportunity with some of the products that we have that isn't baked in the numbers that we put out there.

Speaker #1: Moving next to Mepa Marshall with Morgan Stanley.

Operator 2: Moving next to Meta Marshall with Morgan Stanley.

Operator: Moving next to Meta Marshall with Morgan Stanley.

Speaker #6: Hi, this is Abhishek Murli on for Mita Marshall. Thanks for taking the question, and congrats on the quarter. I was wondering if we could get an update on the Microsoft Copilot partnership and whether there are any channels that are driving new customers there.

Abhishek Murli: This is Abhishek Murli on for Meta Marshall. Thanks for taking the question and congrats on the quarter. I was wondering if we could get an update on the Microsoft Copilot partnership and whether there are any channels that are driving new customers there.

Speaker #5: So Microsoft Copilot is one of them, but what we see is that organization needs just control plan for every AI. From just a lot of just models and Copilot and just a little bit of just so much technology and so much innovation that is just happening in a neck-break speed and we are protecting everything.

Yaki Faitelson: Microsoft Copilot is one of them, but what we see is that organization needs just control plan for every AI, you know, from, you know, just, you know, a lot of models and copilots, and you know, there's so much technology and so much innovation that is happening in a neck break speed, and we are protecting everything. With the acquisition of Atlas, we are the ultimate control plane for agents, models, and pipeline, and we protect, you know, every data type. What happened is that I think that what is important to understand is that the overall velocity, you have these agents that accessing data, you need to be ahead of them in your remediation. You need to understand any abnormal behavior.

Speaker #5: With the acquisition of Atlas, we are the ultimate control plan for agents, models, and pipeline. And we protect every data type. And what happened is that I think that what is important to understand is that the overall velocity.

Speaker #5: You have these agents that are accessing data. You need to be ahead of them in your remediation. You need to understand any abnormal behavior.

Speaker #5: If a weather forecasting agent is accessing HR records in 2:00 AM in the morning, you better know about it and you will be amazed how often things like that are happening.

Yaki Faitelson: If a weather forecasting agent is accessing HR records in 2:00 AM in the morning, you better know about it, and you will be amazed how often things like that are happening. Copilot is one of them, but we definitely see that in order for these AI agents and models to be useful, they need to be connected to data. The only way that you can do it is in a secure way. It just, slowly but surely, we are becoming the foundation for organization to adopt AI in a secure way.

Speaker #5: So, Copilot is one of them, but we definitely see that in order for these AI agents and models to be useful, they need to be connected to data.

Speaker #5: And the only way that you can do it is in a secure way. And it just slowly but surely, we are becoming the foundation for organization to adopt AI in a secure way.

Speaker #1: And next, we have Joshua Tilton with Wolf Research.

Operator 2: Next, we have Joshua Tilton with Wolfe Research.

Operator: Next, we have Joshua Tilton with Wolfe Research.

Speaker #7: Hey, guys. Thanks for taking my question and congrats. On a pretty solid quarter. I have one. It's more of a clarification. I think maybe you addressed it in the beginning.

Joshua Tilton: Hey, guys. Thanks for taking my question and congrats on a pretty solid quarter. I have one, it's more of a clarification. I think maybe you addressed it in the beginning. I'm not sure if I heard you correctly, but I was kind of under the impression that the free cash flow guidance for the year is the way it was because there was an assumption around churn because you guys are basically guiding to, you know, no conversion or some assumption that some of these remaining on-premise customers would convert. You have a quarter where you did convert some customers, but the free cash flow guidance for the year kind of stayed the same.

Speaker #7: I'm not sure if I heard you correctly, but I was kind of under the impression that the free cash flow guidance for the year is the way it was because there was an assumption around churn because you guys are basically guiding to no conversion or some assumption that some of these remaining on-premise customers would convert.

Speaker #7: And then you have a quarter where you did convert some customers, but the free cash flow guidance for the year kind of stayed the same.

Speaker #7: So, I'm just wondering why the free cash flow guide isn't moving up as you actually execute on converting customers that, I'm assuming, were assumed to churn originally in the guidance.

Joshua Tilton: I'm just wondering why the free cash flow guide isn't moving up, as you actually execute on converting customers that I'm assuming were assumed to churn originally, in the guidance?

Speaker #4: Let me clarify that. When we gave guidance on the full-year numbers, we assumed the bear case scenario and the bull case scenario on the conversions, which was 50 to 75 million.

Guy Melamed: Let me clarify that. When we gave guidance on the full year numbers, we assumed the bear case scenario and a bull case scenario on the conversions, which was $50 to 75 million. We are on track to achieve those numbers. That's part of our free cash flow guide. It's not that the free cash flow guide assumed zero conversions. It assumed that midpoint range, that base case scenario, of that $50 to 75. We're actually, when we look at the Q1 conversion numbers, they were actually on track and we felt very good with the numbers that we were able to convert in Q1. The actual reduction that we announced last quarter on the free cash flow side was on the delta, the expectation of churn with the announcement of the end of life.

Speaker #4: We are on track to achieve those numbers, and that's part of our free cash flow guide. It's not that the free cash flow guide assumed zero conversions.

Speaker #4: It assumed that midpoint range that base case scenario of that 50 to 75. And we're actually, when we look at the Q1 conversion numbers, they were actually on track and we felt very good with the numbers that we were able to convert in Q1.

Speaker #4: So the actual reduction that we announced last quarter on the free cash flow side was on the delta, the expectation of churn with the announcement of the end of life.

Speaker #4: And that was the headwind that we were talking about, but it was still baking in that 50 to 75 and we feel very good with that guidance for the year on the free cash flow side.

Guy Melamed: That was the headwind that we were talking about, but it was still baking in that 50 to 75, and we feel very good with that guidance for the year on the free cash flow side, and still assuming to be within that base case scenario of conversions for the year.

Speaker #4: And still assuming to be within that base case scenario of conversions for the year.

Speaker #1: We'll take our next question from Roger Boyd with UBS.

Operator 2: We'll take our next question from Roger Boyd with UBS.

Operator: We'll take our next question from Roger Boyd with UBS.

Speaker #6: Great, thanks for the questions and congrats on the quarter. For Yakov or for Guy, you mentioned enterprises prioritize AI security. I think this has been kind of the bull case around Varonis for a while now.

Roger Boyd: Great. Thanks for the questions and congrats on the quarter. For Yaki or for Guy, you mentioned enterprises prioritizing AI security. I think this has been kind of the bull case around Varonis for a while now. I'd love to get your sense of, like, did something change this quarter, and how did that actually manifest as you look at kind of the on a monthly basis throughout the quarter? Would you characterize demand from enterprises as ramping throughout the quarter? Guy, just any sense of what you're seeing through April and how that kind of factors into the guide for I think it was kind of flat net new SaaS ARR excluding conversions. Thanks.

Speaker #6: I'd love to get your sense of did something change this quarter and how did that actually manifest as you look at kind of on a monthly basis throughout the quarter?

Speaker #6: Would you characterize demand from enterprises as ramping throughout the quarter? And Guy, just any sense of what you're seeing through April and how that kind of factors into the guide for I think it was kind of flat net new SaaS ARRX conversions.

Speaker #6: Thanks.

Speaker #5: I think that what you mainly see just from a broader marketing perspective, obviously everybody out there investing a lot in AI tooling and understanding how they can just derive real value from it.

Yaki Faitelson: I think that what you mainly see just from a broader marketing person, obviously everybody are just, you know, investing a lot in AI tooling and understanding how they can just derive, you know, real value from it. There are obviously some use cases that are unbelievably strong, but the realization that we see is that they understand that they need to connect data securely and to make sure that, you know, these agents can work like employees. They need to make sure that they can connect it to all the universe of knowledge that the organization has. This is something that is just very hard to do because what happened that before, you know, if you have excessive access control or data was exposed, the user need to be malicious in order to get to it.

Speaker #5: And there are obviously some use cases that are unbelievably strong, but the realization that we see is that they get—they understand that they need to connect data securely and to make sure that these agents can work like employees.

Speaker #5: They need to make sure that they can connect it to all the universe of knowledge that the organization has. And this is something that is just very hard to do because what happened that before, if you have excessive access control or data was exposed, the user need to be malicious in order to get to it.

Speaker #5: The agents are going to immediately by design and making many times all efforts to remove very important security controls. So more than anything else, what you see is that just slowly but surely just an understanding that you need to secure the eye systems and the data that powers it.

Yaki Faitelson: The agents will get to it immediately by design and making many times all efforts to remove, you know, very important security controls. More than anything else, what you see is that just slowly but surely, just an understanding that you need to secure the AI systems and the data that powers it. This is something that works very well for us. We see more strategic conversation. We definitely see that organizations understand that they need, you know, to look at everything, even when you look at databases. You know, historically, databases was DBAs accessing databases, and you have what we call connection pool. Now with agents, they can access it like a collaboration store.

Speaker #5: And this is something that works very well for us. We see more strategic conversation. We definitely see that organizations understand that they need to look at everything.

Speaker #5: Even when you look at databases, historically, databases was DBAs accessing databases and you have what we call connection pool. But now with agents, they can access it like a collaboration store.

Speaker #5: Just a lot of the way that these agents and models consume information, it's something that put their security and AI security as a top priority.

Yaki Faitelson: Just a lot of the way that these agents and models consume information, it's something that put data security and AI security as a top priority.

Speaker #4: And I'd like to address the second part of your Q2 guide, it really is kind of just following the same responsible guidance philosophy. And we're really excited with the start for the year.

Guy Melamed: I'd like to address the second part of your question. When we look at the Q2 guide, it really is kind of just following the same responsible guidance philosophy. We're really excited with the start to the year and the performance that we had in Q1, and we feel very good about Q2 and the pipeline that we have for the rest of the year. It really is just keeping the same philosophy guidance.

Speaker #4: And the performance that we had in Q1. And we feel very good about Q2 and the pipeline that we have for the rest of the year.

Speaker #4: So it really is just keeping the same philosophy guidance.

Speaker #1: Moving on to Matt Hutberg with RBC Capital Markets.

Operator 2: Moving on to Matt Hedberg with RBC Capital Markets.

Operator: Moving on to Matt Hedberg with RBC Capital Markets.

Speaker #6: Great. Thanks for taking my question, guys. Congrats on the results. Obviously, a lot of moving parts here. I guess there's a lot of uncertainty in the market, whether it's the Iran war, maybe demand trends in the Middle East, or even some of the headcount reductions that we've seen out there from customers in different verticals.

Matt Hedberg: Great. Thanks for taking my question, guys. Congrats on the results. Obviously, a lot of moving parts here. I guess, you know, you know, there's a lot of uncertainty in the market, you know, whether it's the Iran war and maybe demand trends in the Middle East, or even some of the headcount reductions that we've seen out there from customers in different verticals. I'm just kind of curious if that's starting to creep into any customer conversation and, you know, Guy, is SaaS NRR trending up? It sounds like renewals are strong, but I'm kind of curious on the SaaS NRR side. Thanks, guys.

Speaker #6: I'm just kind of curious if that's starting to creep into any customer conversation and Guy have is SaaS NRR trending up? It sounds like renewals are strong, but I'm kind of curious on the SaaS NRR side.

Speaker #6: Thanks, guys.

Yaki Faitelson: Just in terms of just a conversation with organization, it's most primarily about, you know, just data and AI security. If you look at our pricing scheme and models, so much of it is, you know, just based on volume of data and data store. For us, it's, you know, just the identities that are accessing data. Just reduction in headcount is not something that we are feeling and affecting our pricing in any way. This is our team, you know, just tremendous and want to thank them that during this conflict, we're able to maintain the right productivity levels and we were, you know, just in front of customers, helping them secure the data.

Speaker #5: Just in terms of just conversation with organization, it was primarily about just data and AI security, if you look at our pricing scheme and models, so much of it is just based on the volume of data and data store.

Speaker #5: And for us, it's just the identities that are accessing data. So just reduction in headcount is not something that we are feeling and affecting our pricing.

Speaker #5: And in any way, but this our team, just tremendous and want to thank them that during this conflict, we were able to maintain the right productivity levels and we were just in front of customers helping them secure the data.

Speaker #4: And from an NRR perspective, obviously, we provide the NRR on an annual basis, but in talking about the trends, we feel very good about our ability to go back to customers, SaaS customers, and sell them additional licenses.

Guy Melamed: From an NRR perspective, obviously we provide the NRR on an annual basis. In talking about the trends, we feel very good about our ability to go back to customers, SaaS customers and sell them additional licenses. We talked a lot about being able to finish the transition quickly and have our sales force focus on selling additional products. It's definitely something that we saw in Q1, and we believe that we can actually continue and do even better throughout the year with the platform offering that we have. When we look at the trends and when we look at the conversations and when we look at the pipeline and track the meetings, it's definitely trending in a positive way.

Speaker #4: And we talked a lot about the being able to finish the transition quickly and have our Salesforce focus on selling additional products. And it's definitely something that we saw in Q1.

Speaker #4: And we believe that we can actually continue and do even better throughout the year with the platform offering that we have. So when we look at the trends, and when we look at the conversations, and when we look at the pipeline and track the meetings, it's definitely trending in a positive way.

Speaker #4: And we feel very good with our platform ability to go back and have the Salesforce focus on what they know how to do best, which is sell to new customers and upsell to our existing SaaS customers.

Guy Melamed: We feel very good with our platform ability to go back and have the sales force focus on what they know how to do best, which is sell to new customers and upsell to our existing SaaS customers.

Speaker #1: We'll go next to Brian Essex with JP Morgan.

Operator 2: We'll go next to Brian Essex with JP Morgan.

Operator: We'll go next to Brian Essex with J.P. Morgan.

Speaker #7: Hi, good afternoon. Thank you for taking the question. And great to see a Q1 beating raise in such an uncertain macro. I guess I wanted to poke on the non-SaaS ARR remaining.

Brian Essex: Hi, good afternoon. Thank you for taking the question and great to see a Q1 beat and raise in such an uncertain macro. I guess I wanted to poke on the non-SaaS ARR remaining, and it was great to see that you had $11.3 million in conversion business in the quarter and you guided to 0. I wanted to understand what the composition of that outperformance was. Of the remaining $83.7 million of non-SaaS ARR, can you help us understand what the composition of that cohort is? Have the weaker or single-threaded customers churned off? Have we seen like a front-loaded churn rate and maybe it's higher quality? Maybe just to give us a sense of your level of confidence in, you know, that portion of business that may convert over.

Speaker #7: And it was great to see that you had 11.3 million of conversion business in the quarter. And you guided to zero. I wanted to understand what the composition of that outperformance was.

Speaker #7: And then of the remaining 83.7 million of non-SaaS ARR, can you help us understand what the composition of that cohort is? Have the weaker or single-threaded customers churned off?

Speaker #7: Have we seen a front-loaded churn rate and maybe it's higher quality? Or maybe just to give us a sense of your level of confidence in that portion of business that may convert over.

Speaker #7: Thank you.

Brian Essex: Thank you.

Speaker #4: So Brian, there's a lot of unpack. I'll try and tackle them one by one. I'll start with the conversion guidance. We said at the beginning of the year that we're giving a base case scenario, a bull and a bear case, a range basically, that 50 to 75 million.

Guy Melamed: Brian, there's a lot to unpack. I'll try and tackle them one by one. I'll start with the conversion guidance. We said at the beginning of the year that we're giving a base case scenario, a bull and a bear case range, basically, that's $50 to $75 million. We stand with that number and feel good about our ability to get to the conversions. We saw very healthy conversions in Q1. The reason we didn't guide for any numbers on a quarterly basis, it's not that we don't expect conversions to happen, we just didn't guide for them. There are two reasons for that.

Speaker #4: We stand with that number and feel good about our ability to get to the conversions we saw very healthy conversions in Q1. And the reason we didn't guide for any numbers on a quarterly basis, it's not that we don't expect conversions to happen.

Speaker #4: We just didn't guide for them. And there are two reasons for that. Reason number one is we want to focus investors on what matters the most, which is SaaS ARR excluding conversion, which is a KPI that puts the emphasis on how this business would go post-transition.

Guy Melamed: Reason number one is we wanna focus, investors on what matters the most, which is SaaS ARR excluding conversions, which is a KPI that puts the emphasis on how this business would go post-transition. We don't wanna put too many numbers out there that would confuse everyone. We know that there's a lot of moving parts during this transition. Keep in mind, at the end of this year, SaaS ARR would be ARR. We will, with the announcement of end of life, we're condensing everything and this will be very, very simple. There's only 3 quarters to kind of go through with the moving parts. That was reason number one of not putting a number on the guidance from a conversion perspective.

Speaker #4: And we don't want to put too many numbers out there that would confuse everyone. We know that there's a lot of moving parts during this transition.

Speaker #4: And keep in mind that at the end of this year, SaaS ARR would be ARR. We will, with the announcement of end of life, we're condensing everything and this will be very, very simple and there's only three quarters to kind of go through with a moving part.

Speaker #4: So that was reason number one of not putting a number on the guidance from a conversion perspective. And the second reason is that there are a lot of customers that kind of fluctuate on their conversion period.

Guy Melamed: The second reason is that there are a lot of customers that kind of fluctuate on their conversion period. Some of the customers in Q1, where the renewal was up for renewal on the on-prem subscription side, will convert later on in the year. So we're definitely seeing those numbers kind of move, and we didn't wanna put a number out there that would confuse investors and analysts. That's why we're just giving that full year range of 50 to 75, and we feel very good with that number.

Speaker #4: And some of the customers in Q1, where the renewal was up for renewal on the on-prem subscription side, will convert later on in the year.

Speaker #4: So we're definitely seeing those numbers kind of move. And we didn't want to put a number out there that would confuse investors and analysts and that's why we're just giving that full year range of 50 to 75 and we feel very good with that number.

Speaker #4: In terms of the single in terms of the single-threaded breakdown, we saw that continue in the same trends that we have seen in the past.

Guy Melamed: In terms of the single-threaded breakdown, we saw that continue in the same trends that we have seen in the past. If you remember, the focus of those on-prem subscription customers that will not convert was mostly on the federal, and state and government customers. That was the cohort that we felt would be impacted the most by not moving to SaaS, and we still think that is the case. When we look at the numbers of that single-threaded that converted, they continued to convert at the same rate that we have seen in the past. We felt very good about that as well. I hope I answered all of your components of the question.

Speaker #4: And if you remember, the focus of those on-prem subscription customers that will not convert was mostly on the federal and state and government customers.

Speaker #4: That was the cohort that we felt would be impacted the most by not moving to SaaS. And we still think that is the case.

Speaker #4: But when we look at the numbers of that single-threaded that converted, they continued to convert at the same rate that we have seen in the past.

Speaker #4: So we felt very good about that as well. I hope I answered all of your components of the question. But really just the highlight of my answer is that we felt good with the conversions in Q1 and we feel good with what's yet to be converted for the rest of the year.

Guy Melamed: Really just the highlight of my answer is that we felt good with the conversions in Q1, and we feel good with what's yet to be converted for the rest of the year.

Speaker #1: And Richard Poland with Wells Fargo has our next question.

Operator 2: Richard Poland with Wells Fargo has our next question.

Operator: Richard Poland with Wells Fargo has our next question.

Speaker #5: Hey guys, thanks for taking my question. On the cash flow, I just wanted to clarify one point. I think you called out 12 to 13 million of acquisition-related costs that seem to affect the cash flow side of things.

Richard Poland: Hey, guys. Thanks for taking my question. On the cash flow, I just wanted to clarify one point. I think you called out $12 to 13 million of acquisition-related costs that seem to affect the cash flow side of things, but obviously not the non-GAAP operating income. I just wanted to see if there's anything for the remainder of the year with respect to some of those acquisition-related costs, and is it a scenario where we should try to back that out for a cleaner, I guess, year-over-year compare?

Speaker #5: But obviously not the non-GAAP operating income. I just wanted to see if there's anything for the remainder of the year with respect to some of those acquisition-related costs.

Speaker #5: And is it a scenario where we should try to back that out for a cleaner, I guess, year-over-year compare?

Speaker #4: So the biggest impact obviously was in the Q1 numbers. And that's why we broke it out. Obviously, we're still we remain on track to achieving the full year free cash flow guidance.

Guy Melamed: The biggest impact obviously was in the Q1 numbers, and that's why we broke it out. Obviously, we remain on track to achieving the full year free cash flow guidance, and we wanna emphasize that and highlight that. For visibility perspective, we wanted to highlight that $12.5 million headwind coming from the accounting treatment of the acquisitions, and that's mostly the AllTrue.ai that took place in February. We wanted to put that out there so investors can understand the apple to apple comparison, and that's why we highlighted that.

Speaker #4: And we want to emphasize that and highlight that. But for visibility perspective, we wanted to highlight that 12.5 million headwind coming from the accounting treatment of the acquisitions.

Speaker #4: And that's mostly the all true that took place in February. We wanted to put that out there so investors can understand the apples to apples comparison.

Speaker #4: And that's why we highlighted that.

Speaker #1: We'll go next to Mike Sikos with Needham & Company.

Operator 2: We'll go next to Mike Cikos with Needham & Company.

Operator: We'll go next to Mike Cikos with Needham & Company.

Speaker #6: Great. Thanks for taking the questions, guys. And congrats on the quarter here. I just wanted to come back to the commentary whether it's the press release or the prepared remarks here.

Mike Cikos: Great. Thanks for taking the questions, guys, and congrats on the quarter here. I just wanted to come back to the commentary, whether it's the press release or the prepared remarks here. It seems like the company is being more assertive as far as what the sustainable growth is for this company, ex conversions, citing that 20% to 21% growth. If I'm just looking at the trend rate here, last quarter was 32%, this quarter 29%. We're guiding to 24% to 25% this coming quarter. Can you just give us a better indication of what gives you the confidence to be putting that bogey out there today, just to help draw the lines for some of the longer-term investors who are looking at this asset post-conversion? Thank you.

Speaker #6: But it seems like the company is being more assertive as far as what the sustainable growth is for this company ex-conversions, citing that 20 to 21 percent growth.

Speaker #6: If I'm just looking at the trend rate here, last quarter was 32%. Quarter 29, we're guiding the 24 to 25 this coming quarter. Can you just give us a better indication of what gives you the confidence to be putting that bogey out there today, just to help draw the lines for some of the longer-term investors who are looking at this asset post-conversion?

Speaker #6: Thank you.

Guy Melamed: First of all, you're right. When you look at kind of the full year guidance, we went from 18 to 20, to kind of having the low end starting with a 2 handle, and we feel very good about that. And we feel we believe we can continue that growth rate. We talked for a long time about our ability to continue to grow 20%+ with the platform that we have and with our ability to sell to new customers and go to the base and sell to upsell to existing SaaS customers.

Speaker #4: So first of all, you're right. When you look at kind of the full year guidance, we went from 18 to 20 to kind of having the low end starting with a two handle.

Speaker #4: And we feel very good about that. And we feel—we believe—we can continue that growth rate. We talked for a long, long time about our ability to continue to grow.

Speaker #4: 20 plus percent with the platform that we have and with our ability to sell to new customers and go to the base and sell to upsell to existing SaaS customers.

Speaker #4: And I think that when you look at the trends that we've had in Q1, they give us the confidence when you look at the environment out there, being able to accelerate with new customers is definitely something that we feel very good about and gives us the confidence.

Guy Melamed: I think that when you look at the trends that we've had in Q1, they give us the confidence when you look at the environment out there, being able to accelerate with new customers is definitely something that we feel very good about and gives us the confidence. When we see how our existing SaaS customers are receptive to additional licenses and the platform offering that we have, we definitely believe that there's a lot for us from a customer value perspective, customer lifetime value perspective, to go back. We've seen how many of the customers consume more and more. That's part of the reason that we feel very good about that and noted it in our Q1.

Speaker #4: And when we see how our existing SaaS customers are receptive to additional licenses, and the platform offering that we have, we definitely believe that there's a lot for us from a customer value perspective customer lifetime value perspective to go back.

Speaker #4: And we've seen how many of the customers consume more and more. And that's part of the reason that we feel very good about that and noted it in our Q1.

Speaker #1: And moving next to Joseph Gallo with Jefferies.

Operator 2: Moving next to Joseph Gallo with Jefferies.

Operator: Moving next to Joseph Gallo with Jefferies.

Speaker #7: Hey guys, thanks for the question. Can you just talk a little bit more about Atlas? Initial traction, feedback, and who you're competing with? Is it against PurePlays or are people trying to do this themselves, use a platform?

Joseph Gallo: Hey, guys. Thanks for the question. Hey, can you just talk a little bit more about Atlas, you know, initial traction, feedback, and who you're competing with? Is it against pure plays, or are people trying to do this themselves, use a platform? Then, if at all, did the AllTrue.ai acquisition contribute to ARR this quarter? Thanks.

Speaker #7: And then, if at all, did the AllTrue.ai acquisition contribute to ARR this quarter? Thanks.

Speaker #5: Okay, we see just a lot of a lot of momentum around the around Atlas in terms of just the overall interest. In terms of the AI life cycle, we strongly believe that it's the most comprehensive product out there.

Yaki Faitelson: Yeah. We see just a lot of momentum around Atlas in terms of just the overall interest. In terms of the AI life cycle, we strongly believe that it's the most comprehensive product out there, but it also has a massive force multiplier with the Varonis platform. The key is how you connect everything to data. Atlas is your best way to manage agent models and pipelines, and then connect it to Varonis. This is what will give you the ability to use AI in a secure way. There is just a lot of noise in the market. At this point, no one has just the, on the actual pipelines, tools, and models, no one has something that is so comprehensive. The sales motion is together with everything that we have.

Speaker #5: But you also have a massive force multiplier with the Varonis platform. So the key is how you connect everything to data. Atlas is your best way to manage agent models and pipelines.

Speaker #5: And then connect it to Varonis. This is what will give you the ability to use AI in a secure way. So there is just a lot of noise in the market.

Speaker #5: But at this point, no one has just the on the actual pipelines tools and models, no one has something that is so comprehensive. And the sales motion is together with everything that we have.

Speaker #4: I want to clarify that when we acquired all true, there was no ARR that was added as part of the acquisition. So it really if you remember the transaction closed in February.

Guy Melamed: I wanna clarify that when we acquired AllTrue.ai, there was no ARR that was added as part of the acquisition. Really, if you remember, the transaction closed in February, and it's not that we expected that it would have a significant impact, and it didn't have a significant impact in Q1, but there were definitely early signs that were encouraging in terms of conversations and in terms of some of the evals that were put in and even some several POs that we were able to get. Again, nothing significant that impacted the quarter from an ARR perspective.

Speaker #4: And it's not that we expected that it would have a significant impact. And it didn't have a significant impact in Q1. But there were definitely early signs that were encouraging.

Speaker #4: In terms of conversations, and in terms of some of the evals that were put in, and even several POs that we were able to get.

Speaker #4: But again, nothing significant that impacted the quarter from an ARR perspective. However, and as Yaki mentioned, the conversations and the pipeline that we're seeing is definitely giving us the encouragement and the expectation that we would see Altore contribute more throughout the remainder of the year.

Guy Melamed: However, as Yaki mentioned, the conversations and the pipeline that we're seeing is definitely giving us the encouragement and the expectation that we would see AllTrue.ai contribute more throughout the remainder of the year. As I mentioned before, that is not part of our guidance. We didn't bake in any optimistic assumptions with AllTrue.ai selling throughout the year. It's the upside ability and the conversations that give us the confidence to actually see that happen in Q2, Q3, and Q4.

Speaker #4: And as I mentioned before, that is not part of our guidance. We didn't bake in any optimistic assumptions with all true selling throughout the year.

Speaker #4: But it's the upside ability and the conversations that give us the confidence to actually see that happen in Q2, Q3, and Q4.

Speaker #5: The initial conversations and more so the results from the POCs are very encouraging.

Yaki Faitelson: The initial conversations and more so the results from the POCs are very encouraging.

Speaker #1: And our next question comes from Shal Ayal with TD Cowen.

Operator 2: Our next question comes from Shaul Eyal with TD Cowen.

Operator: Our next question comes from Shaul Eyal with TD Cowen.

Speaker #7: Thank you. Good afternoon. Congrats on the solid performance and guidance. Yaki, supply chain attacks remain a major threat, especially when sensitive data moves beyond the original provider.

Shaul Eyal: Thank you. Good afternoon. Congrats on the solid performance and guidance. Yaki, supply chain attacks remain a major threat, especially when sensitive data moves beyond the original provider. As you look at your platform today, do you believe your supply chain security capabilities are sufficient, or is this an area where you plan to invest and expand? And maybe a second one, who are you displacing, you know, given some of those, you know, big logos that you just announced one of them earlier on the call? Thank you.

Speaker #7: As you look at your platform today, do you believe your supply chain security capabilities are sufficient or is this an area where you plan to invest and expand?

Speaker #7: And maybe a second one, who are you displacing given some of those big logos that you've just announced one of them earlier on the call?

Speaker #7: Thank you.

Yaki Faitelson: Yes. Thanks, Shaul. In terms of supply chain attacks, this is how bad actors are getting in. With AI, it's much, much easier for them to get in, and Interceptor is doing an unbelievable job. You know, we believe that what we have in terms of the phishing sandbox and all the assets that we have with, you know, the browser extension and the mobile devices, we are just in the best position in the market. As attacks becoming more sophisticated, we keep investing in it. I think that this is, you know, in terms of just overall phishing, spear phishing, and, you know, a vishing attacks of this nature, this is how adversaries will get in, and we are extremely well-positioned, and it also work unbelievably well with our MDDR.

Speaker #5: Yes, thank you. So, in terms of supply chain attacks, this is how bad actors are getting in. And with AI, it's much, much easier for them to get in.

Speaker #5: And interceptor is doing an unbelievable job. But we believe that what we have in terms of the phishing sandbox and all the assets that we have with the browser extension and the mobile devices, we are just in the best position in the market.

Speaker #5: But as attacks become more sophisticated, we keep investing in it. And I think that this is, in terms of just overall phishing, spear-phishing, and vishing attacks of this nature, this is how adversaries will get in.

Speaker #5: And we are extremely well positioned. And it's also unbelievably well. With our MDDR. And in terms of just replacements, it can be just database activity monitoring, other point solutions, that related to DSPM.

Yaki Faitelson: In terms of just replacements, you know, it's, it can be, you know, just database activity monitoring, other point solutions that related to DSPM. What we started to see this quarter is that AI security and overall AI budgets starting to move slowly towards our platform.

Speaker #5: But what we started to see this quarter is that AI security and overall AI budgets are starting to move slowly towards our platform.

Speaker #1: Our next question comes from Rudy Kessinger with DA Davidson.

Operator 2: Our next question comes from Rudy Kessinger with D.A. Davidson.

Operator: Our next question comes from Rudy Kessinger with D.A. Davidson.

Speaker #8: Yes, thanks for taking my question. I'm curious I want to dive in on the makeup of the SaaS net ARX conversions. Up 31% year over year.

Rudy Kessinger: Yes, thanks for taking my question. You know, I'm curious, I want to dive in on the makeup of the SaaS ARR excluding conversions, you know, up 31% year over year. Was that primarily driven by higher new logo contribution or similar, you know, expansion rates on a larger renewal pool? Also, you know, how did the composition of that NetNew ARR look relative to recent quarters in terms of the workloads that you're protecting, specifically maybe in Microsoft or the Azure ecosystem versus everything else?

Speaker #8: Was that primarily driven by hiring new logo contribution or similar expansion rates on a larger renewal pool? And then also how did the composition of that net AR look relative to recent quarters in terms of the workloads that you're protecting specifically maybe in Microsoft for the Azure ecosystem versus everything else?

Speaker #4: So I'll start, and then Yaki can provide some color. When we look at the contribution in Q1, it was definitely driven by new customer acquisitions, and that's why we highlighted the acceleration on the new logo side.

Guy Melamed: I'll start, and then Yaki can provide some color. When we look at the contribution in Q1, it was definitely driven by new customer acquisitions, and that's why we highlighted the acceleration on the new logo side. But as I mentioned before, we saw very encouraging signs in terms of our platform ability and our additional upsell opportunity is throughout the year, and our ability to go back to SaaS customers and sell to them additional licenses, both the SaaS offering that we have, and some of the additional tuck-in acquisitions that we have made.

Speaker #4: But as I mentioned before, we saw a very encouraging sign in terms of our platform ability and our additional upsell opportunity throughout the year.

Speaker #4: And our ability to go back to SaaS customers and sell to them additional licenses, both the SaaS offering that we have and some of the additional token acquisitions that we have made.

Speaker #4: So I think when we look at the holistic view of that, the new customer was the encouraging part. And the upsell was definitely there.

Guy Melamed: I think when we look at the holistic view of that, the new customer was the encouraging part and the upsell was definitely there, and we think that it can actually do better throughout the year.

Speaker #4: And we think that it can actually do better throughout the year.

Speaker #5: In terms of just the Microsoft ecosystem is a very small part of the data. We are doing very well with just all the SaaS applications, AWS, GCP.

Yaki Faitelson: In terms of just the Microsoft ecosystem is a very small part of the data. You know, we are doing very well with just all the SaaS applications, AWS, GCP, Azure, data on-prem, you know, databases everywhere. It's just AI consume data wherever it lives, and we protect it. Overall, Microsoft is starting to be a small portion of the entire information estate that organizations have.

Speaker #5: Azure. Data on-prem. Databases. Everywhere. So it's just AI consumed data wherever it lives. And we protect it. But overall, Microsoft is starting to be a small portion of the entire information state that organizations have.

Operator 2: Moving next to Jason Ader with William Blair.

Speaker #1: And moving next to Jason Adder with William Blair.

Operator: Moving next to Jason Ader with William Blair.

Speaker #5: Yeah, thank you. You guys talk a little bit more about the kind of a broader competitive landscape. I know that some of the cyber guys have some overlap with what you're doing.

Jason Ader: Yeah. Thank you. Can you guys talk a little bit more about the kind of the broader competitive landscape? You know, I know some of the cyber guys, you know, have some overlap with what you're doing, and you have some of these startups. Maybe just talk through, if you're seeing different players than you normally have seen. Are you seeing more people at the table, during bake offs? I mean, you had a strong new customer acquisition quarter, you know, were those competitive deals versus what you've seen in the past? Just some more kind of specifics on the competitive landscape would be great.

Speaker #5: And you have some of these startups—maybe just talk through if you’re seeing different players than you normally have seen. Are you seeing more people at the table during bake-offs?

Speaker #5: I mean, you had a strong new customer acquisition quarter. Were those competitive deals versus what you've seen in the past? Just some more kind of specifics on the competitive landscape would be great.

Speaker #5: Yeah. So obviously now we just the platform is so much broader now. But if you look at what they call this DSPM market, this is not data security.

Yaki Faitelson: Yeah. Obviously now, you know, we just, the platform is so much broader now. If you look at what they call this DSP market, this is not data security. We have a comprehensive data security platform that provides automated outcomes. What there is in the market is data discovery tools that doing something that many times what's called sampling, this partial classifications. We see them from time to time, but when customers are POC-ing versus just data security, and AI is pushing data security because you need to do automated remediation, understand abnormal behavior to data, understand the identity component, there is we just, usually, you know, crush them immediately. On the Interceptor, this is sometimes we can see, you know, just, you know, companies like Abnormal or Proofpoint.

Speaker #5: We have a comprehensive data security platform that provides automated outcomes. So, what there is in the market is data discovery tools that are doing something that many times is what's called sampling—these partial classifications. We see them from time to time.

Speaker #5: But when customers are POCing versus just data security and AI is pushing data security because you need to do automated remediation and there's an abnormal behavior to data and standard identity component.

Speaker #5: We just usually crash them immediately on the interceptor. This is sometimes we can see just companies like Abnormal or Proofpoint. But primarily, we sell it with the platform in the database activity monitoring.

Yaki Faitelson: Primarily, you know, we sell it with the platform. In the database activity monitoring, we're replacing the incumbent like, you know, Imperva and Imperva and Guardium. This is really the dynamics that we see. What happens is that the platform is starting to address more and more use cases. What we're starting to see that is interesting, we can take budgets from point solutions, but we're also starting to get budgets from just AI. You know what? Digital transformation and security is such a key fundamental component out of it. These organizations that pushing AI hard understand that first and foremost, they need to secure the data and have the observability to what's going on in the life cycle of the AI tools, and this is another source of budget for us.

Speaker #5: We're replacing the incumbents like Imperva and Guardian. So this is really the dynamics that we see. But what happens is that the platform is starting to address more and more use cases.

Speaker #5: And what we're starting to see that is interesting: we can take budgets from point solutions, but we are also starting to get budgets from just AI.

Speaker #5: What digital transformation and security is such a key fundamental component out of it. And this organizations that are pushing AI hard and those standard first and foremost, they need to secure the data and have the observability to what's going on in the life cycle of the AI tools.

Speaker #5: And this is another source of budget for us.

Speaker #1: Moving next to Jonathan Reichhaver with Canter Fitzgerald.

Operator 2: Moving next to Jonathan Ruykhaver with Cantor Fitzgerald.

Operator: Moving next to Jonathan Ruykhaver with Cantor Fitzgerald.

Speaker #4: Yeah, good afternoon. I'm curious Yaki to hear your thoughts from where you see the boundary between Veronis and identity vendors. I'm particularly given the convergence we're seeing between identity and data security strategies.

Jonathan Ruykhaver: Yeah, good afternoon. I'm curious, Yaki, to hear your thoughts on where you see the boundary between Varonis and identity vendors, particularly given the convergence we're seeing between identity and data security strategies. There does seem to be a question related to who ultimately owns that control and governance layer around AI agents. Any color on how that strategy might be resonating, any customer feedback or color on adoption of your identity solutions would be helpful. Thanks.

Speaker #4: There does seem to be a question related to who ultimately owns that control and governance layer around AI agents. So any color on how that strategy might be resonating?

Speaker #4: Any customer feedback or color on adoption of identity of your identity solutions would be helpful. Thanks.

Speaker #5: Thanks. Thanks for the question. I think what happened early on is that organizations thought that they could use identity solutions to solve the problem.

Yaki Faitelson: Thanks. Thanks for the question. I think what happened early on is that organizations thought that they can use identity solutions to solve the problem, but, you know, failed. The identity is critical. You need to provision an identity, understand how they are going to use it. The identity itself, if you can't see what data it's touching and if there is any abnormal behavior and exactly what are the AI tools they are using, you are very limited in the value that you will get. You can provision identity in the right way, and then the agent will use the wrong tools and will access the wrong data, and it will end in a catastrophe. I think what we benefited from in Q1 was actually the understanding that the identity provisioning is very important but limited.

Speaker #5: But failed. The identity is critical. You need to provision an identity. Understand how they are going to use it. But the identity itself, if you can't see what data it's touching, and if there is any abnormal behavior and exactly what are the AI tools they are using, you have you are very limited in the value.

Speaker #5: That you will get, and you can provision identity in the right way. And then the agent will use the wrong tools and will access the wrong data.

Speaker #5: And it will end in a catastrophe. So I think what we benefited from in Q1 was actually the understanding that the identity provisioning is very important, but limited.

Speaker #5: And what you need to do is really to manage this whole thing from the inside out, from one side is the data and one side is the pipeline and tools.

Yaki Faitelson: What you need to do is really to manage this whole thing from the inside out. From one side is the data, one side is the pipeline and tools. Obviously, we coexist. Organization needs both of them. To get the value, you need to connect it to data, and the only way to do it to get the benefit without the downside is to do it in a secure way. You need very good brakes in order to drive fast in this AI era.

Speaker #5: And obviously, we coexist organization needs both of them. But to get the value, you need to connect it to data. And the only way to do it to get the benefit without the downside is to do it in a secure way.

Speaker #5: You need very good breaks in order to drive fast in this AI era.

Speaker #1: And next, we have Eric Suppiger with BeRiley. Eric, your line is open. Okay. Hearing no response, we'll go next to Todd Weller with Stevens.

Operator 2: Next we have Erik Suppiger with B. Riley. Erik, your line is open. Okay, hearing no response, we'll go next to Todd Weller with Stephens.

Operator: Next we have Erik Suppiger with B. Riley. Erik, your line is open. Okay, hearing no response, we'll go next to Todd Weller with Stephens.

Speaker #6: Thanks for the question. Just a question on the expansion opportunity. Could you talk about the relative opportunity between data workload expansion versus cross-selling the new products you have?

Todd Weller: Thanks for the question. Just a question on the expansion opportunity. Could you talk about the relative opportunity between data workload expansion versus cross-selling the new products you have? Then from a workload type perspective, what do you see driving kind of the strongest growth? Thanks.

Speaker #6: And then, from a workload-type perspective, what do you see driving kind of the strongest growth? Thanks.

Speaker #5: So I would start from the end. The workload is everything. So if you really think about what applications are accessing and what users are accessing to do their job, this is what the agent needs to access in order to be useful.

Yaki Faitelson: I will start from the end. The workload is everything. If you really think about what applications are accessing and what users are accessing to do their job, this is what the agent needs to access in order to be useful. Most data in organizations, and a lot of the time, in order to really to build this data set and derive good conclusion, they also take a lot of historical data. The overall data estate becoming very super critical, even data that is stale. It's really everything. What the AI does essentially, it really drives to protect all data. With that is whatever data you want to connect to your AI systems, this is how we can expand.

Speaker #5: So most data in organizations and a lot of the time in order to really to build this data set and derive good conclusion, they also take a lot of historical data.

Speaker #5: So the overall data state becoming very super critical. Even data that is stale. So it's really everything. What the AI does essentially, it's really drives to protect or it's really drives to protect all data.

Speaker #5: And with that is whatever data you want to connect to your AI systems, this is how we can expand and I also think that some use cases that were a bit more compliance-driven, like database activity monitoring, becoming just a top priority for security risks because the consumption changed with the AI usage.

Yaki Faitelson: I also think that some use cases that were a bit more compliance-driven, like database activity monitoring becoming just a top priority for security risks because the consumption changed with the AI usage. This is really what we see. You know, the data is everywhere, and these technologies are accessing all the data in just a neck break speed, and you need to be ahead of it with Varonis value proposition.

Speaker #5: So this is really what we see. The data is everywhere. And this technologies are accessing all the data. In just a neck-break speed, and you need to be ahead of it with robotic value proposition.

Speaker #1: And we'll go back to Eric Suppiger with B. Riley.

Operator 2: We'll go back to Erik Suppiger with B. Riley.

Operator: We'll go back to Erik Suppiger with B. Riley.

Speaker #7: Yeah. Thanks, apologize for that. And congratulations on a nice quarter. Say, in your conversations with customers, how much of your new ARR is driven by the traditional thread of outsiders exfiltrating data versus how much of your discussion is focused on AI and securing agents?

Erik Suppiger: Yeah, thanks. Apologize for that and congratulations on a nice quarter. Say, in your conversations with customers, how much of your new ARR is driven by the traditional threat of outsiders exfiltrating data versus how much of your discussion is so focused on AI and securing agents? On the former, has the news that came out of Anthropic about enhanced capabilities for identifying vulnerabilities, has that made a difference in terms of some of the discussions with customers? Are they more looking at securing data in a more urgent manner in terms of some of these vulnerabilities coming out?

Speaker #7: And then on the former, has the news that came out of Anthropic about enhanced capabilities for vulnerability identifying vulnerabilities, has that made a difference in terms of some of the discussions with customers?

Speaker #7: Are they more looking at securing data in a more urgent manner in terms of some of these vulnerabilities coming out?

Speaker #5: I think that what I think—the security concerns regarding information that we had with humans—it's becoming the same concerns, but just, if you will, think what happens in the agentic world, the probability that something will happen just increases by orders of magnitude.

Yaki Faitelson: Yeah, I think what the security concerns regarding information that we had with humans is becoming the same concerns, but just if you think what happened in the agentic world, that the probability that something will happen just increases orders of magnitude. It's very easy. They start to deploy agents, and usually something happens that really trigger the need for organizations to understand it. In general, with everything that is happening with these models, that finding vulnerabilities, organizations understand that many times, because you can find a vulnerability, it can be easier for bad actors to come in. You know, when they are coming in, essentially what they want is data. If you had a breach and no one touched any data, nothing happens.

Speaker #5: And it's very easy. They start to deploy agents, and usually something happened that really triggered the need for organizations to understand it. In general, with everything that is happening with these models, like finding vulnerabilities, organizations understand that many times, because you can find a vulnerability, it can be easier for bad actors to come in. And then when they are coming in, essentially what they want is data.

Speaker #5: If you had a breach and no one touched any data, nothing happened. If data was taken, you have what we call the lasting damage.

Yaki Faitelson: If data was taken, you have what we call the lasting damage. Everything works together, but it just amplifies the need to secure your data. Also, there is an understanding that needs to be completely automatic.

Speaker #5: So it's just—it's everything works. Everything works together, but it just amplifies the need to secure your data. And also, there is an understanding that this needs to be completely automatic.

Speaker #1: Moving next to Sranik Kothari with Robert W. Baird.

Operator 2: Moving next to Shrenik Kothari with Robert W. Baird.

Operator: Moving next to Shrenik Kothari with Robert W. Baird.

Speaker #8: Hey, thanks for taking my question, and congrats on a solid quarter. So, you sounded especially encouraged by the acceleration in the new customer contribution in the quarter, driven by new logos.

Shrenik Kothari: Yeah, thanks for taking my question and congrats on the solid quarter. You sounded especially encouraged by the acceleration in the new customer contribution and the quarter driven by new logo, with a lot of upsell expansion opportunities still in front of you. Just as the field is spending more time on true new and upsell rather than conversion, like, how should we think about the current mix between the new and expansion and over time, like, in supporting your durable 20% plus organic growth algo that you talked about, what does the steady state balance of those new versus expansion look like? Thanks a lot.

Speaker #8: With a lot of upsell expansion opportunities still in front of you. So just as the field is spending more time on true new and upsell, rather than conversion, how should we think about the current mix between the new and expansion and over time?

Speaker #8: In supporting your durable 20% plus organic growth algorithm that you talked about, what does the steady-state balance of those new versus expansion look like?

Speaker #8: Thanks a lot.

Guy Melamed: The ability to go to new customers with our SaaS offering is very clear to us. We have seen it throughout the transition. Obviously, where reps had to focus on the conversion, we talked a lot about the cannibalization of time. As we kinda move past the transition, they can go back and focus on the new customer sell. We've definitely seen that with the offering we have, we can reach to new customers that we didn't have the opportunity to do it before. If you look longer term, the expectation is that the platform that we have, the majority of this ACV should come from the existing base. We definitely see that opportunity as a significant one with the offering that we have.

Speaker #5: The ability to go to new customers with our SaaS offering is very clear to us, and we have seen it throughout the transition. But obviously, where reps had to focus on the conversion, we talked a lot about the cannibalization of time.

Speaker #5: And as we kind of move past the transition, they can go back and focus on the new customer sell. And we've definitely seen that with the offering we have, we can reach new customers that we didn't have the opportunity to do before.

Speaker #5: If you look longer term, the expectation is that the platform that we have the majority of the ACV should come from the existing base.

Speaker #5: We definitely see that opportunity as a significant one with the offering that we have. And when you have such a large base, when you think about the run rate that we have where expected to finish the year just under 850 million, that's a big base of customers thousands of customers that you can go back and sell them additional products.

Guy Melamed: When you have such a large base, and when you think about the run rate that we have, we're expected to finish the year just under $850 million. That's a big base of customers, thousands of customers that you can go back and sell them additional products, and protect them in a way that will give them the comfort to use AI and be able to address the needs. If you look longer term, we definitely believe that the contribution from existing SaaS customers should drive our growth. Again, with a focus on new customers, and when you look at the comm plan, we made sure that reps would focus on both new customers and existing SaaS customers.

Speaker #5: And protect them in a way that will give them the comfort to use AI and be able to address the needs. So if you look longer term, we definitely believe that the contribution from existing SaaS customers should drive our growth.

Speaker #5: But again, with a focus on new customers, and when you look at the comp plan, we made sure that reps would focus on both new customers and existing SaaS customers, and that's how they can make the most amount of money.

Guy Melamed: That's how they can make the most amount of money, because we believe that that should drive our trajectory and growth in the years ahead.

Speaker #5: Because we believe that that should drive our trajectory and growth in the years ahead.

Speaker #1: And moving next to Junaid Siddiqi with Truest Securities.

Operator 2: Moving next to Junaid Siddiqui with Truist Securities.

Operator: Moving next to Junaid Siddiqui with Truist Securities.

Speaker #9: Great. Thank you for taking my question. I just wanted to ask, what are you seeing from customers that are adopting a Tina AI specifically?

Junaid Siddiqui: Great. Thank you for taking my question. Just wanted to ask, what are you seeing from customers that are adopting Athena AI specifically? You know, what are you seeing, how quickly are they?

Speaker #9: What are you seeing? How quickly are they adopt? How quickly is adoption ramping up post-deployment? And what's distinguishing customers who embed a Tina into their daily workflows versus those where usage stalls after initial enablement?

Guy Melamed: How quickly is adoption ramping up post-deployment? You know, what's distinguishing customers who embed Athena into their daily workflows versus those where usage stalls after initial enablement? You know, are you seeing any change in deal sizes or close rates or post-sale expansion versus customers that are not using it?

Junaid Siddiqui: How quickly is adoption ramping up post-deployment? You know, what's distinguishing customers who embed Athena into their daily workflows versus those where usage stalls after initial enablement? You know, are you seeing any change in deal sizes or close rates or post-sale expansion versus customers that are not using it?

Speaker #9: And are you seeing any change in deal sizes or close rates or post-sale expansion versus customers that are not using it?

Speaker #5: Yes, it's part of the product, and this is the key—that you are able to use it in just natural language without any enablement.

Yaki Faitelson: Yes, it's, you know, it's part of the product and the, you know, this is the key that you are able to use it in just natural language without any e-enablement, and it works very well for our customers. Big part of the platform and the automated outcome is what we call no touch value. That a lot of the value just, you know, from the remediation and threat detection, automated classification, everything is happen automatically. When you need to do something, you can do it by just, you know, just talking to the platform, and it works very well. Just part of day-to-day usage of the platform.

Speaker #5: And it works very well for customers. And a big part of the platform and the automated outcome is what we call not touch value.

Speaker #5: A lot of the value is just from the remediation and threat detection, and automated classification—everything is happening automatically. And when you need to do something, you can do it by just talking to the platform, and it works very well.

Speaker #5: But just part of day-to-day usage of the platform.

Speaker #1: We'll go next to Fatima Bulani with Citi.

Operator 2: We'll go next to Fatima Boolani with Citi.

Operator: We'll go next to Fatima Boolani with Citi.

Speaker #10: Oh, good afternoon. Thank you for taking my questions. Guy, I wanted to ask you about ARR contribution margin and how we should think about the linearity of that over the course of the year, understanding the ebbs and flows of how conversions are trending.

Fatima Boolani: Good afternoon. Thank you for taking my questions. Guy, I wanted to ask you about ARR contribution margin and how we should think about the linearity of that over the course of the year, understanding the ebbs and flows of how conversions are trending. Maybe if you can help us map it back to the bull and bear case as you framed it for conversions and, you know, the relationship to ARR contributions against what are appearing to be very responsible organic OpEx investments. Thank you.

Speaker #10: But maybe if you can help us map it back to the bull and bear case as you framed it for conversions, and the relationship to ARR contributions.

Speaker #10: Against what are appearing to be very responsible organic OPEX investments? Thank you.

Speaker #9: Absolutely. We talked about the conversion kind of breakdown behavior throughout 2026. And the expectation is that a big part of the churn on the on-prem side will be related to Q3.

Guy Melamed: Absolutely. We talked about the conversion kind of breakdown, behavior throughout 2026. The expectation is that a big part of the churn on the on-prem side will be related to Q3, because if you remember, that's the quarter with the largest federal and state government. The expectation was that a lot of the conversions would actually happen in Q4 towards the end of the year. Obviously we will try to convert many of them before, and we're focused on that. If you look at kind of the behavior throughout the year, I think it will be somewhat back-end loaded from a yearly perspective.

Speaker #9: Because if you remember, that's the quarter with the largest federal, state, and government. So the expectation was that a lot of the conversions would actually happen in Q4, towards the end of the year.

Speaker #9: Obviously, we will try to convert many of them before and we're focused on that. But if you look at kind of the behavior throughout the year, I think it will be somewhat backend loaded from a yearly perspective.

Speaker #9: And as such, the ARR contribution margin will kind of even out throughout the year with the contribution that you see on the conversion itself.

Guy Melamed: As such, the ARR contribution margin will kind of even out throughout the year with the contribution that you see on the conversion itself. That's kind of the framework to think about. That's the way to think about generally kind of the profile there. Also, if you look at the actual regular seasonality of SaaS sales, we do have a significant portion of our sales that take place in Q4. When you look at that as well, you can see that from a cost perspective, they are somewhat, I'd say, for the most part, relatively flat or.

Speaker #9: So that's kind of the framework to think about. That's the way to think about generally kind of the profile there. And also, if you look at the actual regular seasonality of SaaS sales, we do have a significant portion of our sales that take place in Q4.

Speaker #9: So when you look at that as well, you can see that from a cost perspective, they are somewhat I'd say for the most part relatively flat and therefore when you look at the profile margin, in previous years, you would see that the biggest contribution does take place in Q4.

Guy Melamed: Therefore, when you look at the profile margin, in previous years, you would see that the biggest contribution does take place in Q4, and I expect that to be the case in 2026 as well.

Speaker #9: And I expect that to be the case in 2026 as well.

Speaker #1: And this now concludes our question and answer session. I would like to turn the floor back over to Tim Perz for closing comments.

Operator 2: This now concludes our question-and-answer session. I would like to turn the floor back over to Tim Perz for closing comments.

Operator: This now concludes our question-and-answer session. I would like to turn the floor back over to Tim Perz for closing comments.

Speaker #9: Thanks again for the interest in Veronis. Please reach out if you'd like a callback. We look forward to seeing everybody at the investor conferences this quarter.

Tim Perz: Thanks again for the interest in Varonis. Please reach out if you'd like a call back. We look forward to seeing everybody at the investor conferences this quarter.

Operator 2: Goodbye. Ladies and gentlemen, thank you for your participation. This does conclude today's teleconference. You may disconnect your lines and have a wonderful day.

Operator: Goodbye. Ladies and gentlemen, thank you for your participation. This does conclude today's teleconference. You may disconnect your lines and have a wonderful day.

Q1 2026 Varonis Systems Inc Earnings Call

Request DemoDemo

Varonis Systems

Earnings