Akamai Technologies, Inc.

Good day, ladies and gentlemen, and welcome to Akamai Technologies Inc. Third Quarter 2021 Earnings Conference Call. At this time, all participants are in a listen-only mode. Later, we will conduct a question and answer session, and instructions will follow at that time. If anyone should require assistance during the conference, please press star zero on your telephone. As a reminder, this conference call is being recorded. I would now like to turn the conference over to Tom Barth, Head of Investor Relations, Thank you. Please go ahead.

Thank you, operator. Good afternoon, everyone, and thank you for joining Akamai's third quarter 2021 earnings conference call. Speaking today will be Tom Layton, Akamai's chief executive officer, and Ed McGowan, Akamai's chief financial officer. Before we get started, please note that today's comments include forward-looking statements, including statements regarding revenue and earnings guidance. These forward-looking statements are subject to risk and uncertainties and involve a number of factors that could cause actual results to differ materially from those expressed or implied by such statements. These factors include uncertainty stemming from the COVID-19 pandemic, the integration of any acquisitions, and any impact from unexpected geopolitical developments. Additional information concerning these factors is contained in Akmai's filings with the SEC. including our annual report on Form 10-K and quarterly reports on Form 10-Q. The forward-looking statements included in this call represent the company's view on November 2, 2021. Akamai disclaims any obligation to update these statements to reflect future events or circumstances. As a reminder, we will be referring to some non-GAAP financial metrics during today's call. A detailed reconciliation of GAAP and non-GAAP metrics can be found under the financial portion of the investor relations section of Akamai.com. And with that, let me turn the call over to Tom.

Thanks, Tom, and thank you all for joining us today. I'm pleased to report that Akamai delivered excellent financial results in the third quarter, coming in at or above the high end of our guidance ranges for revenue, operating margin, and earnings per share. Q3 revenue was $860 million, up 9% year-over-year and up 8% in constant currency. Non-GAAP operating margin in Q3 was 32%, which reflects our continued focus on operational efficiency, even as we've continued to invest for future growth. Q3 non-GAAP EPS was $1.45 per diluted share, up 11% year-over-year. Akamai's strong performance in Q3 was largely driven by our security business, which is now one of the leading cloud security businesses in the world, with an annualized revenue run rate of more than $1.3 billion, up 26% year over year, and up 25% in constant currency. Over the last several years, we've grown our security portfolio from point solutions into a comprehensive platform that provides defense in depth to address our customers biggest threats. The unique breadth of our defenses is important to our customers who want more security capabilities from fewer vendors. Our security solutions are highly differentiated and recognized as best in class by our customers who see us as a leading provider of services that protect our most critical assets, including enterprise websites, applications, data, and access. We routinely earn top rankings in multiple categories for major industry analysts. For example, Akamai disrupted the web app security market when we launched Kona Site Defender in 2012. Since then, we've continued to extend our leadership position in the web app firewall sector, with Gartner recently naming Akamai as a market leader for the fifth year in a row. Akamai has been the market leader in DDoS protection since we acquired Prolexic in 2014. Forrester recently said, large enterprise clients that want an experienced, trusted vendor to make their DDoS problem go away should look to Akamai. As new threat vectors have emerged, we've extended our platform to defend against them. For example, we created the first comprehensive bot management solution to protect our customers from sophisticated bot operators who try to steal content, disrupt operations, or penetrate user accounts. According to Forrester, Akamai is best for companies wanting to thwart bots at the edge. Bloomberg Businessweek even quoted a hacker calling Akamai's bot defense the hardest to crack. More recently, we released Akamai Page Integrity Manager to identify malicious code and third-party scripts and websites that's designed to steal end-user data. Page Integrity Manager helps to address a major threat that's been costing businesses hundreds of millions of dollars in fines as well as serious reputation damage. We plan to extend our web app protections further in the coming months with the release of Account Protector and Audience Hijacking Prevention. Account Protector is designed to reduce fraud by making sure that the entity logging into an account is the true owner of that account. Audience Hijacking Prevention can help businesses protect sales by forwarding malware that diverts a customer just before the completion of a transaction. Since founding Akamai over 20 years ago, our vision has always been to help our customers solve their toughest internet challenges. And today, that includes stopping ransomware. Ransomware is a huge problem for enterprises around the world, with a new attack striking every 11 seconds. The damage resulting from ransomware is expected to amount to over $20 billion this year alone. GuardaCore is critical to stopping the spread of ransomware, and that's a key reason why we acquired the company. Akamai is already selling solutions such as enterprise application access that help prevent attackers from gaining access to enterprise infrastructure and applications. But to be secure in today's world, you also need a second layer of defense to block the spread of malware that has gained a foothold in the enterprise. And that's where GuardaCore comes in. GuardaCore helps detect when a breach has occurred by identifying anomalous data flows within enterprise networks. GuardaCore also helps prevent the malware from spreading through a capability known as microsegmentation. GuardaCore's microsegmentation solution limits access within the enterprise to only those applications that are authorized to communicate with one another. Denying communication as the default greatly limits the spread of malware and protects the flow of enterprise data across the network. And that's the key to stopping ransomware. We believe GuardaCore's best-in-class micro-segmentation solution is the perfect addition to our Zero Trust portfolio, enabling Akamai to offer customers a comprehensive solution to stop the damage being caused by ransomware and malware. During the call we held on September 29th, we spoke about the parallels between our acquisition of GuardiCorps with our acquisition of Perlexic in 2014. Just as the acquisition of Perlexic propelled us to a leadership position in helping to stop DDoS attacks, we believe that the acquisition of GuardiCorps will establish Akamai as a leader in helping to stop the damage caused by ransomware, as well as other forms of malware. Customers see Akamai as a strategic partner in security, not only because of the strength and breadth of our solutions, but also because of the depth of our security expertise and threat intelligence and the scale of our platform, the same platform that underpins our world-leading CDN. Akamai CDN handles over 5 trillion requests every day. In addition, we resolve more than 3 trillion DNS queries each day. This gives us unmatched real-time insight into the world's internet traffic, which we analyze to provide best-in-class threat intelligence, protection, and support. We also have one of the industry's largest and most experienced teams of security professionals, with thousands of engineers and consultants working on security for our customers. Our security solutions are tightly integrated into the world's largest and most distributed edge platform, And that provides unmatched global scale to defend customers against not only the largest DDoS attacks, but also against the vast bot armies that are waging attacks from the edge. The integration of our security solutions with our CDN solutions also provides benefits to our customers in terms of improved performance and ease of use. With Akamai, security and performance go hand in hand. You can buy them together as a single protect and perform package. which makes purchasing and integration easy for the customer. And when you buy security from Akamai, your performance is automatically improved. That's because we apply the security layer as we are delivering the content from the world's true edge platform. This means that the processing needed for security stays close to the end user, which makes for much better performance. Akamai's unique combination of security and delivery provides a powerful offering in the market. which is one reason why we're the market leaders in both security and CDN. Our CDN business also generates substantial cash that we can use to invest in future growth, as we've recently done with the GuardaCore acquisition. For example, our CDN business generated revenue of $526 million in Q3 and contributed substantially to our overall free cash flow of $273 million. enough to cover almost half of what we spent to acquire GuardiCorp. We believe that having the world's largest and most distributed edge network also provides a great foundation for the growth of our edge applications business. As 5G rolls out, as IoT applications proliferate, and as more data is created and processed at the edge, Akamai's edge compute platform is very well suited to support the high throughput and low latency applications that are not well served by traditional cloud providers today. From delivery and performance to compute and security, the world's leading brands want our help. That's because the internet is getting more complicated with more traffic, higher user expectations, and more cyber threats every day. And the world's leading enterprises know that Akamai can help keep their digital experiences close to their end users and the threats farther away. They know that what we do makes life better for billions of people, billions of times a day, and that nobody powers and protects life online like Akamai. I'll now turn the call over to Ed to provide further details on our Q3 results and our outlook for the rest of the year. Ed?

Thank you, Tom. As Tom just outlined, Akamai delivered another excellent quarter. Q3 revenue was $860 million, up 9% year-over-year or 8% in constant currency. Revenue was again driven by very strong results in our security business. Revenue from our security technology group was $335 million, up 26% year-over-year or 25% in constant currency. Security now accounts for 39% of our total revenue. Revenue from our edge technology group was $526 million, flat year over year and down 1% in constant currency. Foreign exchange fluctuations had a negative impact on revenue of $5 million on a sequential basis and positive $4 million on a year over year basis. International revenue, was $412 million, up 16% year-over-year or 15% in constant currency. Sales in our international markets represented 48% of total revenue in Q3, up three points from Q3 2020 and up one point from Q2 levels. Finally, revenue from our U.S. market was $449 million, up 3% year-over-year. Moving now to costs. Cash gross margin was 76%, in line with our expectations. Gap gross margin, which includes both depreciation and stock-based compensation, was 63%. Non-gap cash operating expenses were $261 million. Now moving on to profitability. Adjusted EBITDA was $396 million. Our adjusted EBITDA margin was 46%. Non-GAAP operating income was $277 million, and non-GAAP operating margin was 32%. Capital expenditures in Q3, excluding equity compensation and capitalized interest expense, were $129 million. This was below our guidance range, primarily due to continued progress on network CapEx efficiency projects. Gap net income for the third quarter was $179 million, or $1.08 of earnings per diluted share. Non-gap net income was $239 million, or $1.45 of earnings per diluted share, up 11% year-over-year, up 10% in constant currency, and 4 cents above the high end of our guidance range. Taxes included in our non-GAAP earnings were $39 million, based on a Q3 effective tax rate of approximately 14%. Moving now to cash and our use of capital. As of September 30th, our cash, cash equivalents, and marketable securities totaled approximately $2.8 billion. After accounting for the $2.3 billion of combined principal amounts of our two convertible notes, Net cash was approximately $452 million as of September 30th. During the third quarter, we spent approximately $97 million to repurchase shares, buying back approximately 800,000 shares. We ended Q3 with approximately $321 million remaining on our current repurchase authorization, which runs through the end of this year. As noted in today's press release, our board authorized a new buyback program of up to $1.8 billion beginning January 1st, 2022 and running through the end of 2024. As we've previously discussed, our primary intention is to buy back shares to offset dilution from employee equity programs over time. However, our repurchase authorizations also allow us to opportunistically deploy capital if or when we believe there is a valuation disconnect in the market based on business or market conditions. Combining the two authorizations, we currently have more than $2 billion available for share repurchases through the end of 2024. We believe our strong balance sheet and significant free cash flow generation, which totaled $273 million, or 32% of total revenue in Q3, also provides us with significant financial flexibility to pursue a balanced capital deployment strategy. As such, we plan to continue to invest organically in R&D and product development, expand our capabilities through M&A, as you saw with our most recent acquisition of GuardaCore, and return capital to shareholders via share repurchases. Moving on to Q4 guidance. There are two factors to consider as you update your models for the fourth quarter. First, we closed the acquisition of Garda Corps on October 20th. Our guidance assumes Garda Corps will contribute approximately six to $7 million of revenue in Q4. It also assumes that Garda Corps will be approximately 5 cents dilutive to our total non-GAAP earnings per share in Q4. Second, As in prior years, seasonality plays a large role in determining our fourth quarter financial performance. We typically see higher than normal traffic for our large media customers and from seasonal online retail activity for our e-commerce customers, which are both difficult to predict. With that in mind, we are projecting Q4 revenue in the range of $883 to $908 million, or up 4% to 7% as reported, or 5% to 8% in constant currency over Q4 2020. Foreign exchange fluctuations are expected to have a negative $3 million impact on Q4 revenue compared to Q3 levels and a negative $6 million impact year over year. At these revenue levels, we expect cash gross margins of approximately 76%. Q4 non-GAAP operating expenses are projected to be $290 to $297 million. We anticipate Q4 EBITDA margins of approximately 43% to 44%. We expect non-GAAP depreciation expense to be between $120 to $121 million. Factoring in this guidance, we expect non-GAAP operating margin of approximately 30% for Q4. Moving on to CAPEX. We expect to spend approximately $128 to $133 million excluding equity compensation in the fourth quarter. This represents less than 15% of anticipated total revenue. And with the overall revenue and spend configuration I just outlined, we expect Q4 non-GAAP EPS in the range of $1.37 to $1.44. The CPS guidance assumes taxes of $38 to $39 million based on an estimated quarterly non-GAAP tax rate of approximately 14.5%. It also reflects a fully diluted share count of approximately 164 million shares. Looking ahead to the full year, we are raising our guidance. We now expect revenue of $3.439 to $3.464 billion, which is up 8% year-over-year as reported or up 7% in constant currency. We now expect security revenue growth to be in the mid 20% range for the full year 2021. We are estimating non-GAAP operating margin of approximately 31% and non-GAAP earnings per diluted share of $5.63 to $5.69. And this non-GAAP earnings guidance is based on a non-GAAP effective tax rate of approximately 14.5%. a fully diluted share count of approximately 164 million shares. Finally, full-year CapEx is anticipated to be approximately 16% of revenue, consistent with our prior guidance. We are very pleased to deliver another quarter of excellent financial results, and we look forward to closing out a strong 2021. Thank you. Tom and I would be happy to take your questions. Operator?

Thank you. At this time, to ask a question, you will need to press star 1 on your telephone keypad. Again, that is star 1 to ask a question. To withdraw your question, just press the pound key. Your first question comes from the line of James Fish from Piper's Handler. Your line is now open.

Hey, guys. Nice quarter. Thanks for the questions. A couple of your competitors are starting to get a little bit louder on the security side with getting a foot in the door with government and zero trust architectures. So I guess my question is, you know, how was the federal vertical for you this quarter and what will it take for Akamai to become more part of those conversations, especially when you guys already do service some, some government stuff?

Yeah, our government business is very strong, particularly in security. Uh, you know, we defend, uh, most all the major agencies in the government, pretty much every branch of the military. So I would say we have a very strong business there.

All right. And then on GuardiCore, how long until the 100-plus reps are likely selling the entire security portfolio? And really also any update to the go-to-market until security standalone sales, channel partners, as well as what you guys are doing to target developers better with edge applications? Thanks, guys.

Yeah, hey, Jim, it's Ed here. I'll take the first one, and then maybe Tom can follow up on the developers. But in terms of the sales force, we're going to maintain the sales force that we acquired from GardaCorp. This is pretty typical what we do with our acquisitions. They'll be primarily in an overlay function. You know, it's a little bit different of a sale, very similar to some of our enterprise sales, and we just will build out that team a bit. You know, it'll probably take, you know, maybe a year or so as the reps start to introduce GuardaCore into their accounts so they begin to get comfortable with selling GuardaCore. It's been our typical model, so I think we've got a pretty good, quite a great team from GuardaCore, and we just combine that with our existing enterprise sales team. And then as far as channels go, we did pick up a few channel partners as a result of GuardaCore, and we're still actively out recruiting more and more channel partners.

And, uh, in terms of the developer focus question, you know, we've done a lot of work to make our platform be very accessible to developers. Um, a lot of, a lot of effort there and strong progress. And in fact, on a daily basis, uh, we're now spinning up about 5 billion, uh, applications on edge workers, uh, and that's every day. Uh, so strong adoption of our capabilities, uh, in terms of edge computing.

Operator, next question.

Yes. Your next question comes to the line of starting Audi from JP Morgan. Your line is now open.

Yeah, thanks. Hi, guys. So you gave us the security growth on a constant currency, but can you give us a sense of what it was on an organic constant currency basis? And, Tom, you highlighted a number of different areas, the strength and DDoS, et cetera. What was kind of the tip of the spear that drove the growth this quarter in particular? Sure.

Hey, Tony. This is Ed. So the organic security growth in constant currency would be about 22%, so odds would be added about three points of growth. Tom, you want to take the other part?

Yeah, and the strength was really across all of our product categories, all of them growing at close to 20% or more, infrastructure doing well, app and API protection, fraud well into close to 30% growth, and access the best of all. And of course that'll get a lot stronger now with GuardaCore and the ransomware solution. So I just, it's across the board in security.

It's great. Maybe one real quick one, given the contribution you're expecting from GuardaCore in Q4, does that mean that the run rate in terms of what the contribution in 22 might actually be better than what you thought at the time of the acquisition?

Yeah, hey, Sterling, two points on that. So, yes, I think we should see better contribution from GardaCorp. And also, we've been off to a pretty good start here in the first couple of weeks since we've closed the acquisition. They finished very strong. I was very impressed to see several multi-million dollar deals in several different verticals across the different geos. We saw a couple in the U.S., A couple in NMEA, APJ, we saw deals in transportation, which isn't really a huge vertical for Akamai, as well as other verticals we're strong in like insurance and finance. So off to a pretty good start, pretty optimistic so far, and I do think they'll contribute a bit more next year. We'll give you a full guidance on our next call for next year, but so far off to a pretty good start.

Excellent. Thank you.

Your next question comes to the line of Colby Cinesal from Cohen & Company. Your line is now open.

Hi, this is Michael. I'm for Colby. Two questions, if I may. First, as you think about the incremental security offerings that could make sense to add via M&A moving forward, what comes to mind? And then second, what are you seeing from the customer verticals that have been more heavily impacted by the pandemic as we go into the holiday season? Thank you.

Yeah, we continue to look and invest in new capabilities and security, both organically and through M&A. As we talked about, Page Integrity Manager released in the last year, very exciting technology. You know, going forward, we have Account Protector. There's a lot of customer interest there. And then early next year, Audience Hijacking Protection. I think that's, you know, a lot of customers have asked for that, and that stops malware or plug-ins from stealing or hijacking their audience right before the point of sale or the transaction is executed. Obviously, you know, in the access segment, I think that's a huge area of future growth. Really excited about the GuardaCore acquisition. You know, that combines very nicely with our zero trust solutions. It combines with enterprise application access to give you the full combination of north, south, east, west. I think will be compelling in the market. So we're continuing to invest across the board. And, of course, with the existing solutions, we continually work on those to add features, stay ahead of the new attack vectors. So it's not just like you build a web app firewall. You're constantly adding new capabilities to it to stay ahead of the attackers to keep our customers safe.

And on your second question, yeah, sure. On the second question was around the verticals that were impacted and fused. We called out commerce and travel. I'd say in travel, we're starting to see a bit of improvement there, starting to see traffic pick up a little bit. As a reminder, that's about 4% of our total revenue, so it doesn't have a huge impact in terms of what we're seeing as far as an improvement, but it's good to see that that's starting to pick up a little bit. Commerce, I would say, is pretty mixed. We're seeing good strength in security, still seeing some pressure, especially in the U.S., commerce vertical that's a much bigger vertical that's around 15% of total revenue so we're not quite out of the woods yet with commerce again especially in the US that's the area that we're probably seeing the most weakness and that's still persisting from from the pandemic thank you your next question comes to the line of Keith Weiss from Morgan Stanley your line is now open

Excellent. Thank you guys for taking the question. Two kind of areas that I was hoping to dig into. Can you talk to the disparity in growth between the U.S. and international? I thought it had more to do historically with sort of platform customers in the U.S. underperforming, but now the platform customers are actually doing really well and growing pretty well. So I kind of lost the thread on why the U.S. is still underperforming international regions. And then a second question on sort of the operating margin side of the equation, any kind of guidelines you could give us and how we should think about calendar 22? Are there kind of, a lot of companies are talking to us about rehydration, if you will, maybe more spending on travel and people come back to the office and marketing events ramping back up. On the flip side of the equation, you've been kind of underspending on CapEx versus the original target, and that's coming down as a percentage of revenue. So perhaps there's some gross margin. benefit that you could see in calendar 22 to offset that. So any kind of sense you could give us on how to start thinking about calendar 22 margins?

Sure. So I'll start with the second part on margin. So yeah, you're correct. Next year we'll be expecting that we should start traveling again. So there'll be a little bit more OpEx there. You're right to call out CapEx. I think the team's doing a fantastic job on a lot of CapEx efficiency projects that we've got going with both software and hardware. Being able to drive that down, you would expect that CapEx to be back to those normal levels that we've seen, maybe even a touch lower, so that impacts your depreciation. But it takes a while for that to flow through the model, so you won't get a ton of benefit of that right away, but certainly down the road you will. I had given some prior guidance when we had the Garda Corps call about operating in the 29% to 30% range for next year, and then hopefully getting back, or we will get back to over 30% in 2023. Obviously, we'll update you. I mentioned earlier to Sterling that, you know, GardaCorp's contribution will probably be a bit better than what we said earlier on. I don't have a number to call out yet, so that'll obviously help out the operating margins a touch there. And then you asked about U.S. and international and the disparity between the two. I'd sort of flip it around and say that it's not so much the U.S. being weak, but really just strong international growth. I mean, U.S. is kind of low single digit. I mentioned On the previous question, that's where we're having the most trouble with our U.S. commerce vertical, which is a pretty significant vertical in the U.S. And then we also have a lot of large media customers that are in the U.S., and that's where you tend to see, you know, more of the splitting of traffic and pricing pressure. So those things combined, you know, sort of put a little bit of pressure in terms of the growth rate in the U.S., but really the strength outside the U.S. is something that I think is a – significant advantage for us. We made a lot of investments, both in the network and the sales teams, et cetera. And we've been able to drive pretty significant growth. Very happy with what I'm seeing in terms of participation as far as, you know, strong growth in countries like Korea, Spain, Brazil, Mexico, Hong Kong, Singapore, Taiwan. I mean, across the board, we're seeing a very strong growth. Latin America in particular has been very strong. We made an acquisition there a couple of years ago, starting to get some good scale out of that. So, um, You know, a little bit of a mixed picture in the U.S. with some challenges in commerce, but really I'd look at it as just very strong international presence and growth.

Got it. I mean, should the takeaway be that, like, if we just looked at the security side of the equation, the growth in U.S. and international would be more even on the security side of the equation than it would on the edge tech side?

Yeah, I think that's a good way to look at it, Keith. I mean, if I look at... You know, the web performance, especially in commerce, that's where the primary challenge is right now. But if I look at security, it's, you know, obviously the U.S. was the first to adopt. We're still seeing very, very strong growth. You know, as a matter of fact, now 67% of our customers are buying one security product. 34% are buying two. You know, to sort of put that into perspective, in a year we've gone up six points in terms of security adoption for the customer base. That's adding over 600 customers. So we're seeing, you know, good broad-based strength in security both here in the U.S. and also internationally. But I think you're thinking about it in the right way in terms of, you know, having strong security growth in both regions.

Got it. Excellent. That's super helpful. Thank you, guys.

Your next question comes from the line of James Breen from William Blair. The line is now open.

Thanks for taking the question. Just on the cash flow side, it seemed like a particularly strong quarter, given some of the improvements you've had in the network and just in expense control in general. How should we think about that cash flow going forward? Is this a particularly strong quarter and it could tend to drip down over time, or is it going to be lumpy, or are we at sort of a new run rate in terms of cash generation? Thanks. Thanks.

Yeah, great question, Jim. Q1 tends to be the lower quarter from a cash flow perspective, just because of working capitals when you say your bonus is off. But, you know, I think if you peg your CapEx to that sort of 15% range, you know, you're looking at, you know, pretty significant improvements. So I think if you use that as your guide, kind of working off the operating margins we gave you and Think about Q1 as probably being a low point as you're modeling out your free cash flow. But, yeah, very, very strong free cash flow generation this quarter for sure.

Great. Thanks. And then just one other one. As you look at the revenue growth, excluding the platform customers, you know, the platform customers are down about $3 million sequentially. You know, is there a range now where you feel like in this sort of low 60s range is where that revenue is going to hover for those customers? companies, given the amount of growth you've seen in the last 12 to 18 months from that?

Yeah, I think that's probably not a bad place to peg it, Jim. I mean, the Q4 always tends to be a bit of a stronger quarter, and that vertical is a little bit of seasonality there. You always have renewals, so whenever you have a renewal, you'll see it pull back a couple million dollars, depending on the timing and that sort of stuff. But I think in the 60s, low 60s, is probably a decent place to peg it.

Terrific. Thank you.

Your next question comes to the line of Frank Luzan from Raymond James. Your line is open.

Yeah, great. Just wanted to talk a little bit about the buybacks. You said you'd opportunistically use that to take advantage of the market valuation. What levels seem appropriate here? That's kind of the first question, then I've got to follow up.

So primarily we've used the equity buyback to offset the equity dilution from employee grants. And from time to time we do buy back additional shares, and we've seen that over the years. And we use an approach such that as the stock price declines, we will buy back more. And, you know, I do feel that in this market, you know, Akamai has a very strong presence. both in CDN and security, our security business growing at 25% on a very big number. And I do feel that Akamai is worth a lot more in this market. And so you may see us buy back additional shares, especially depending on how the stock price fluctuates.

All right, great. And then you've done a good job adding together some M&A on the security side. Any other tools you think you need to make yourself more competitive in the market? Do you feel like you've got kind of the right mix here for that product set?

Yeah, we're always looking at new capabilities, as I mentioned. You know, of course, the attackers are always intervening with new forms of attack. But, you know, I am very excited about the GuardaCore acquisition, and I think it really does, you know, fill out and complete our access story, our ability to stop ransomware and malware. As I mentioned, we already have capabilities that, prevent the malware from getting in. You know, enterprise application access in particular governs what employees can touch and access. And even then, it has to come through Akamai's application firewall. So we're making sure that malware doesn't come in. We also have multi-factor authentication, which, you know, makes sure that the employee is who they say they are. And now with GuardaCore, we stop the spread of the malware if it does get in. And there are a lot of ways into the enterprise today. It is really, despite all the defenses you try to put in place, somebody, for example, in the Capital Pipeline case, a password or a credential gets out there. Now, we still have ways of catching that somebody is using a stolen credential, but malware does get in still. And so the real key there is, is stopping the spread, and that's what GuardaCore does. And so now I think it's really nice because you stop the ransomware with GuardaCore, but we've got the whole package, the whole solution now. And I think that's really unique in the marketplace and very exciting.

All right, great. Thank you very much.

Your next question comes to the line of Amit Daryanani from Evercore. Your line is open.

Yep. Thanks a lot, and good evening, everyone. I have two questions as well. You know, the first one I was hoping if you could talk about, you know, as I look at the midpoint of your guide for December, is there a way to think about how are you thinking about seasonality and edge and security? And the part I'm really trying to get to is the security numbers may imply a much more severe deceleration than what people are modeling. So I'd just love to understand how are you assuming those two segments stacking up in the December quarter?

Yeah, sure. So I'll take that. So we'll start with the edge. Obviously edge is a, it's quite a busy quarter in Q4. As I talked about, you have seasonality from e-commerce. I think it's, it's obviously a tougher quarter to call here with, um, you know, some supply chain disruptions and things like that. Does that drive more or less internet traffic? And what does that holiday season look like? Uh, typically a very strong media quarter where you see, uh, new devices and games coming online. I'm sorry, devices, consoles, et cetera, coming online. And then you also have a lot of sporting events in Q4, back to school. You've got lots of game releases. So it can be a pretty robust season for us. You know, obviously challenging to call. I kind of looked at the events calendar. It's pretty full. So, you know, provided we see some good traffic, you can see good upside. We've delivered that in the last couple of years. You know, in terms of security, it's not as seasonal, certainly. There are some bundles we have where there is traffic can impact that a bit. But, you know, I think to take our security guidance, we've been pretty conservative in the way that we've approached security, and we've been over-delivering every quarter. I think, you know, we've had obviously Guarda Corps is off to a good start. So I wouldn't imply that as a seasonal downtick or anything like that in our security growth.

Got it. And then if I could follow up, the CapEx number for September quarter and really for December as well, I mean, CapEx is a percent of sales I think will be 14%, 15% for the back half of the year versus 19%, 20% for the last several quarters prior to that. I'm curious, is CapEx coming down because you feel like there's enough capacity you have out there and you can scale it lower, or is it more that you just can't get your hands on the supply chain and the products you need to drive CapEx?

i'm trying to understand what's taking capex lower and then how do i think about this as it goes to 2022. yeah so i would say it's good execution um and if anything with the supply chain we're not seeing supply chain disruptions um in terms of the fact that we actually if you remember a few calls ago we talked about in the pandemic we took capex up and we were pretty cautious in terms of making sure that we had plenty of extra capacity available for if we see the pandemic continue and see traffic grow, et cetera. So we leaned in. We built up our inventory a bit. We bought a lot of small equipment so that we're not concerned right now anyway with the supply chain. So I'd say that's part of what's driving it is we built out ahead of demand. We're pretty smart in the way we did that. But also I mentioned there's a number of CapEx efficiencies that Adam and his team are working on not only just software, but network design, deployment optimization, looking at different hardware improvements, and just anyway to drive a big focus on lowering our need for CapEx. And also keep in mind we have great relationships with the networks and ISPs. So in terms of doing, you know, optimizations inside of their networks, we're able to do that as well. So I'd say it's really, you know, great execution on the team's part. And, you know, CapEx has come down pretty significantly. You see that – in our free cash flow results.

I'm sorry, does that sustain next year? Like this mid-teens CapEx and the personal sales, is that the right way to model this out?

Yeah, so I mean, right now, you know, unless you see another pandemic or some major event and we see, you know, some crazy unexpected traffic growth, yeah, I think it's a sustainable number certainly going into next year. I don't want to get into giving guidance, but I think that, you know, I've talked about in the past that we'd be getting back to this level and, you know, we're actually operating a little bit better than that.

Perfect. Thank you.

Your next question comes to the line of Rishi Jaluria from RBC. Your line's now open.

Hey, guys. Thanks so much for taking my questions and nice to see security growth, you know, hold up and actually accelerate this quarter. Two questions. First, I wanted to go a little bit deeper on the supply chain issues. I appreciate you've obviously overinvested capacity with the OTT launches and the pandemic last year. So you seem pretty well insulated from the rising costs. But at what point that this continues dragging out, does it begin to become a worry and you might have to overspend in order to keep capacity and not have to turn away business? And maybe related to that, as we think about you know, the environment heading into Q4. How do we expect that to shake out, especially given Q4 is such a, you know, traditionally such a strong commerce season? You know, a lot of companies are telling us they're not going to be able to meet demand, you know, especially when it comes to electronic goods. So is that a worry that you have? And maybe how are you thinking about embedding that in your guidance? Thank you.

Yeah, so I'll take the second part first. You know, that's why we give a pretty wide range. I just mentioned on the last question that It's hard to predict what the commerce season looks like. And obviously, when you're in the business of delivering Internet traffic, one model could suggest that while shelves are not stocked, people are doing more surfing to find things. Another model would suggest that there's not as much shopping and people are giving cash and gift cards. So hard to tell, but we did put out a pretty big range there. Also keep in mind that... A lot of our commerce customers, about half of our commerce customers, have taken what we call our zero overage. So you've kind of flattened out that bursting. So the bursting for commerce is not as big of an impact. Q4 still has an impact. In terms of the device cycle, that's an interesting one. We do expect, and we've seen over the last several years, especially in the last couple of weeks of the year, As new devices come online, there's a lot of firmware updates and things like that. I still expect to see that. But there's other things that are not as dependent on that. For example, gaming releases, new video content that comes out. If you don't have a new machine, you're watching it on your old machine. So I still think that we'll have a pretty big media quarter for sure. But, you know, that's why I've given a pretty wide range to try to take those things into consideration. And then on your supply chain question, you had asked about when does this become a problem? It was funny. I asked the same questions to my team as we go through our CapEx build out. We've done a nice job of building out several quarters worth of inventory here. And, you know, we've diversified our supply chain and the team's done a good job of ensuring that we're not seeing any significant increase in pricing or anything like that. A little bit on the freight side, but it's not, really material. And I think that should start to work itself out. But, you know, if we do see a, you know, another massive growth in traffic, maybe we start to run into some problems, but so far so good. And like I said, the team did a really good job preparing, you know, not expecting this type of a disruption in the supply chain, but expecting that the result from the pandemic would last a lot longer. So we did some scenario planning. So we're in pretty good shape at the moment.

All right. That's really helpful. Thank you so much.

Your next question comes from the line of Alex Henderson from NEDAM. Your line is now open.

Thanks. Looking at the guidance and the commentary, it does sound like your security business is expected to decelerate to below 20% growth in the fourth quarter. Certainly, if I add in some of the inorganic, that would imply even lower growth. Is it reasonable to think that... the security business can sustain a 20% growth rate organically in 22, or is that too aggressive an expectation for a billion three business?

Yeah. So I think one thing to keep in mind, Alex, is you've got the anniversary of Ozavie. So your, your growth rate, you know, laps in Q4 for, for Ozavie. And then we all see that in Garda Corp. You know, we've said when we did our analyst day that we expected to be able to grow 20% CAGR three to five years with acquisitions being part of the strategy. And you can see that, you know, the GardaCorp acquisition with the prior guide is, you know, only a couple of points of growth. You know, we obviously did much better this year than we expected going into the year. Security has, you know, overperformed every single quarter. we still feel pretty comfortable with our 20% growth rate as we talked about as, you know, as a matter of fact, coming out of this year, we're doing a bit better than that. Um, so, you know, I, I, I think if you're taking the super low end of the range, maybe you could come up with that, uh, that formula, but, uh, you know, we're expecting, you know, pretty solid growth here with security in Q4. Yeah.

And we just said, you know, our, our strategy and security is to combine, uh, organic development with, you know, intelligent and timely acquisitions, and we'll continue to do that. And, of course, when you buy a company after a year, its growth becomes organic, and it's no longer counted as, you know, an acquisition growth per se. And I think we've had a really great track record of doing that, you know, in security, going back all the way to the Colexic acquisition in 2014. And as I mentioned, I think Articor's, You know, fundamentally like that in terms of really transforming our enterprise security business, just like Perlexic transformed our DDoS business, which, of course, today is very, very successful with a market leader by far. And our goal is to do that on the enterprise security side for things like stopping ransomware and stopping malware. And as Ed said, as we continue to want to grow our security business over the longer term at 20-plus percent, That will include acquisitions, and I think acquisitions are a good thing. It gives you a jump start, you know, on technology in an important area. You know, Guardacor has been working for a long time to develop, you know, their micro-segmentation approach. I believe it is market meeting in what they do. They're the best folks out there. And now we have the benefit of all of the years of effort that they put into that, at a perfect time because a lot of companies are rightly worried about stopping ransomware and now Akamai is in a position to help them do that. And, of course, it fits with a lot of our organic development. Technology around EAA is an ideal combination. So we'll continue to do both and working hard to continue our security growth at 20-plus percent.

Okay, I get it. Thanks. That's helpful. Can you talk a little bit about – you know, the pricing environment, whether there's been any change in competitive landscape? Have you seen more competition or less competition? How should we think about the environment? I think we're also seeing, you know, enterprises spending more this year. Do you think that that sustains into 22, given the first half of spike in attacks caused a flurry of spending intentions?

I think the competitive environment is very similar to what it's been in the past. It is a very competitive environment, you know, across the board from cloud giants, who are also our largest customers, all the way down to startups. Obviously, CDN is a mature environment competitively. And so I don't see there's any fundamental change there. Security is really a great environment for us. You know, we're the market leader by far in the core areas of defending and protecting websites, applications, and APIs. The leader by far in DDoS prevention. And those are areas that have a lot of attacks taking place. And now sort of the new category for us where we'll encounter new competition because we're we're moving into that space in a big way would be enterprise security. We already have a very strong access solution there, and now we have what we believe is the best solution to stop ransomware with micro-segmentation. And by adding that to Akamai, we now have a new set of competitors there because we're entering their space, and we think there's a lot of potential gain for Akamai there, and it's building to help major enterprises.

Great. Thank you very much.

Your last question comes to the line of Brandon Nispel from KeyBank Capital Markets. Your line is now open.

Awesome. Thank you for taking the question. Could you unpack the growth in the edge technology group, please? What was the growth in the quarter for edge applications, and what does that imply for the growth in the edge delivery business? And then how do you expect these two segments within that larger group to trend exiting the year? Thanks.

Yeah, so we're not going to break out edge apps every quarter. I mean, we talked about it last time, growing at over 30%. And, you know, we think that business can continue to sustain that. I think we'll exit the year on a run rate, you know, over 200 million, which is a pretty good healthy growth rate there. And then, you know, just, you know, again, we're not breaking out the edge delivery business this quarter. We'll do it at the end of the year.

If I could just follow up on that. When you back out some of the one-time items that are affecting comparability in the edge technology business specifically, I think the India app ban, you're still lapping. Is that business growing and what's going to cause that business to return to growth next year? Thanks.

Yeah, so it's obviously just a tougher compare. This is the first quarter that we don't have that compare and you saw that we were roughly flat in terms of total edge tech. I think You know, as we get into next year, it's an easier compare. You know, I think we're comfortable with our longer-term growth, low single digits for the edge business over time. Obviously, you know, with the edge applications business much faster growing as that becomes more material, that could change the growth rate. But I think it's just continued execution and traffic growth going into next year on a, you know, much easier compare. I think you'll start to see a bit of growth rate pick up a little bit there.

Okay, thank you, everyone.

In closing, we'll be presenting at a number of investor conferences and roadshows throughout the rest of the fourth quarter, and details of these can be found in the investor relations section of Akamai.com. We appreciate you joining us, and all of us here at Akamai wish continued good health to you and yours, and have a great evening. Thank you.

This concludes today's conference call. Thank you for participating, and have a wonderful day.

You may all disconnect.