This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.
spk09: Hello and welcome to the CrowdStrike Fiscal Second Quarter 2024 Results Conference Call. At this time, all participants are in a listen-only mode. After the speaker presentation, there will be a question and answer session. To ask a question during the session, you will need to press star 1 1 on your telephone. You will then hear an automated message advising that your hand has been raised. Please be advised that today's conference is being recorded. It is now my pleasure to introduce Vice President of Investor Relations, Maria Riley.
spk12: Good afternoon, and thank you for your participation today. With me on the call are George Kurtz, President and Chief Executive Officer and co-founder of CrowdStrike, and Bert Podbear, Chief Financial Officer. Before we get started, I would like to note that certain statements made during this conference call that are not historical facts including those regarding our future plans, objectives, growth, and expected performance, including our outlook for the third quarter and fiscal year 2024, and any assumptions for fiscal periods beyond that, are forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements represent our outlook only as of the date of this call. While we believe any forward-looking statements we make are reasonable, actual results could differ materially because the statements are based on current expectations and are subject to risk and uncertainty. We do not undertake and expressly disclaim any obligation to update or alter our forward-looking statements, whether as a result of new information, future events, or otherwise. Further information on these and other factors that could affect the company's financial results is included in the filings we make with the SEC from time to time, including the section titled Risk Factors in the company's quarterly and annual report. Additionally, unless otherwise stated, excluding revenue, all financial measures disclosed on this call will be non-GAAP. A discussion of why we use non-GAAP financial measures in a reconciliation schedule showing GAAP versus non-GAAP results is currently available in our earnings press release. which may be found on our investor relations website at ir.crowdstrike.com or on our form 8K filed with the SEC today. With that, I will now turn the call over to George.
spk17: Thank you, Maria, and thank you all for joining us today. I am pleased to report that in the second quarter, we exceeded our guidance across both top and bottom line metrics, delivering strong, durable growth at scale, incredible leverage, and operating within our target model on every metric. Even with a challenging macro backdrop, we delivered an impressive quarter highlighting CrowdStrike's structural competitive moat, making Falcon the definitive cybersecurity platform for the cloud era. Financial highlights for the quarter include ending ARR of $2.9 billion, up 37% year over year, with record contribution from cloud security Identity Protection, and LogScale NextGen SIM, together surpassing $500 million in ARR. Record non-GAAP operating margin of 21.3%. Record non-GAAP net income, which grew 109% year over year. GAAP profitability for the second consecutive quarter. Record Q2 free cash flow of $188.7 million. and an over 80% year-over-year increase in deals involving eight or more Falcon platform modules. Our commitment to operational excellence and the utilization of AI within our platform and across our entire organization is driving enviable leverage in our financial results, even as we aggressively invest in fueling growth. As Bert will discuss, we are raising our revenue outlook for the year and bringing in our timeline to sustainably achieve our non-GAAP target operating model. We now expect to exit Q4 within our target non-GAAP operating margin model and to remain within our target model on an annual basis starting in FY25. In an increasingly digital cloud-defined world, cybersecurity is becoming more important than ever. The FCC's recently enacted cybersecurity disclosure requirements substantiate the growing gravity of cybersecurity threats, elevating the category from an operational concern to an urgent board level and CXO spend priority. At CrowdStrike, we continue to build cybersecurity's platform of choice, offering a simple and powerful promise. We stop breaches. Heading into the second half of the year, We see increased momentum in the business driven by record levels of new logo and upsell pipeline, record deal registrations from our market-leading partner ecosystem, and record levels of customers proudly trusting CrowdStrike to be their long-term security platform consolidator of choice. We are also observing substantial changes in the competitive landscape, uniquely benefiting CrowdStrike With the business momentum we see and competitive market dynamics, we believe our second half performance will yield double digit net new ARR growth. Working in cybersecurity for the past 30 years, I have recognized and created tectonic shifts in this industry, and we are in the midst of one right now. Organizations need better, faster, and more cost effective protection for a digital society. Organizations need seamless, not stitched together automation to break down legacy data silos. Organizations need lower TCO and more efficient ROI driven investment. The competitive battlefield of cybersecurity today reflects these realities separating the wheat from the chaff. Those who have platforms versus those with point products masquerading as platform stories. What was a market littered with dozens of companies is quickly consolidating to several vendors. Smaller, narrower point product companies are being left behind. These companies are quickly going the way of legacy AV, already in the hands or looking for the safe hands of strategic or private equity buyers. Point product, single feature cloud security companies are learning the hard way that platforms built by design win at scale. Today's competitive landscape solidifies CrowdStrike's leadership position and turns what were once competitors into immediate share donors. CrowdStrike is purpose-built for this market. We have the technology innovation, mission-driven team, and sizable scale to lead cybersecurity platform consolidation. Shifting from competitive market dynamics to CrowdStrike, here are the reasons I see us winning in the second half and beyond. The Falcon platform enables real consolidation with best-of-breed outcomes, and we are flighting XDR transformations across cloud security, identity protection, and log-scale next-gen SIM. Each of these three platform solutions are high-growth, sizable businesses. Each are examples of IPO-worthy companies in their own right, and each are seamlessly integrated components of the Falcon platform. Let me first provide commentary on CrowdStrike as cybersecurity's consolidator, and then I'll follow up with updates on our cloud identity and next-gen SIM Falcon platform businesses. The Falcon platform has not only become the standard for delivering AI-powered cybersecurity, it has become the foundational cybersecurity platform for our customers. Our revolutionary cloud-native architecture consists of an AI-powered data platform and lightweight sensor form factor which remains the easiest and fastest to deploy with no reboots. Our form factor was made for the digital anywhere enterprise, not bound by operating system or hardware defined network perimeters. CrowdStrike has the visibility to detect and prevent attacks and the workflow integrations and automation to remediate. We have the prime enterprise real estate on devices and multi-cloud workloads to automate and consolidate cybersecurity. Customer after customer I met with at the Black Hat Security Conference wants to anchor their cybersecurity on the Falcon platform. These customers see us as their core partner in their security journey. With consolidation being a hot topic, let's talk about what security outcomes really mean. Stopping the breach. This is the most important outcome. Companies need vendors who are trusted partners that can understand, prevent, and respond to threat actors to stop breaches. CrowdStrike is uniquely positioned to stop breaches with our technology, threat intelligence, and services. Saving time. Delivering everything in a single modern console coupled with generative AI reduces dwell time and makes cybersecurity faster and easier. Saving money. With most enterprises still buying north of 60 cybersecurity point products, there's too much cybersecurity shelfware. Individual products require learning and maintenance, building integrations, and higher staffing costs. Eliminating the time managing, integrating, updating, and operating superfluous tools represents real savings regarding product, people, process, and cost. And finally, doing more. CrowdStrike Falcon unlocks new capabilities for organizations, such as deploying their first code to cloud security, identity protection, exposure management attack surface reduction next gen sim and more all in one integrated platform the breadth of native falcon capabilities in our prime real estate within the enterprise and smb technology stack is our advantage and creates significant customer expansion paths our open xdr platform the ability to take in first party and third party data is quickly becoming the enterprise data destination. We see data gravity for the management of cybersecurity, but also broader observability use cases as a competitive moat for CrowdStrike. Customers gain greater value with every module they adopt, reducing agents, security gaps, complexity, and cost, enabling them to transform and consolidate their security stack with the Falcon platform. Let me share several recent new customer wins that speak to this. First is a major auto manufacturer that tried but failed to consolidate their security on Microsoft E5. This company's security team quickly realized Microsoft's complexity, multiple consoles, lack of integration, misdetections, and complex deployments hampered their ability to defend themselves and consolidate. This customer is now consolidating on the Falcon platform with Falcon Complete for Endpoint identity, and cloud. Now with a single agent, single user interface, and single platform, they have complete visibility across their endpoints, cloud, and identities, and the ability to stop threats in real time. By moving from expensive Microsoft E5 to CrowdStrike, organizations can save 50% plus per user per year on Microsoft licensing costs, adding up to millions of dollars of savings. Another seven-figure consolidation win was with a leading residential construction manufacturer who took their Falcon Complete subscription to the next level. Beyond the endpoint, this customer purchased Falcon Cloud Security, Identity Protection, LogScale, and Falcon Surface, our external attack surface management offering. Falcon has become the platform of consolidation and trust for this enterprise, reducing spend with three other vendors by more than 60%, and wholly eliminating multiple vendors from their stack. Consolidation is not only fueling bigger new logo lands, but also increased platform adoption, especially in the areas of cloud security, identity protection, and lock scale, which in aggregate contribute well over half a billion dollars in ending ARR. Financial services, technology, retail, and manufacturing industry verticals continue to demonstrate strong demand with large deal sizes. In Q2, we closed over 80% more deals involving eight or more modules than a year ago as customers increasingly looked to CrowdStrike to consolidate their security stack. Let me now discuss our momentum in the platform areas of cloud identity and log scale next gen SIM, where we are setting new records. Let's start with cloud security. where net new ARR growth accelerated meaningfully and reached a new record during the quarter. Ending ARR for Falcon modules deployed in a public cloud grew to $296 million, up 70% year over year, larger than almost every single vendor in cloud security today. Driving this inflection is our focused innovation on Falcon Cloud Security, our CNAP suite offering, which unifies agent and agentless cloud native security capabilities into a single offering, providing immediate time to value across all major cloud environments. Net new ARR growth for Falcon Cloud Security accelerated to 70% quarter over quarter. We have made it easier for customers to consume Falcon Cloud Security with a single SKU, and customers are rapidly standardizing on CrowdStrike as their cloud security platform of choice. Customers are eager to move away from multiple point product vendors to Falcon's unified best of breed platform. We added many new capabilities to our CNAP offering, including infrastructure as code, side scanning, and attack path analysis, creating the most comprehensive CNAP solution on the market. Combined with Falcon Surface, our external attack surface monitoring solution that we acquired last year, we now provide a complete outside-in and inside-out view of a customer's security posture. This past quarter, we executed a go-to-market emphasis on cloud security, hosting a virtual cloud security summit with over 12,500 security and DevOps participants, followed by cloud-focused partner and sales plays. Our integrated cloud suite, easy management, and lower TCO value propositions are resonating at scale. We closed a record number of cloud customer wins in Q2, including multiple seven-figure cloud expansions with Fortune 500 customers, together in excess of $20 million in deal value. An iconic Fortune 50 retailer prioritized a full, not phased, Falcon cloud security purchase of $5 million in deal value, choosing CrowdStrike over a point product cloud security scanner and displacing their firewall vendor. Additionally, a major Fortune 500 manufacturer sought product superiority and a single platform approach, replacing Wiz with Falcon Cloud Security. Other cloud wins include New Lance with financial, technology, media, and healthcare companies, as well as public sector accounts. Finally, I want to highlight a cloud expansion with a Fortune 1000 retail brand facing increasing costs from their incumbent cloud security vendor, and struggling with limited visibility over their cloud assets. This customer launched an initiative to unify their security stack and remove gaps between traditional endpoint cloud runtime security and posture management. CrowdStrike is the only vendor that met these requirements and a unified platform and helped them drive down their overall operational costs. The cloud security market opportunity is massive and growing rapidly. with the potential to reach $18 billion in calendar year 2026. Cloud exploitation by adversaries increased 95% year over year. And the only way to stop threats in real time is with a fully fledged agent and agentless cloud suite like Falcon. Only CrowdStrike delivers a fully integrated CNAP solution that unifies cloud workload protection, cloud security posture management, cloud infrastructure entitlement management, threat intelligence, and threat hunting in one platform across hybrid and multi-cloud environments. Our leadership in cloud security was recognized in Frost and Sullivan's recently published 2023 Frost Radar Cloud Workload Protection Platform Report based on our impressive CWPP business growth, our comprehensive cloud visibility, and our unrivaled cloud detection and response services. Identity protection also stands out with over $200 million in ending ARR, up 194% year over year. Identity-based attacks represented 62% of all interactive intrusions we observed in the last 12 months. CrowdStrike Falcon Identity Protection delivers the best protection against identity attacks, recently winning the CRN Tech Innovator Award as the best solution on the market. The identity protection adoption rate for new customers grew more than 100% year over year, and the total number of deals tied to identity increased 200%. Highlighting this in Q2 is a financial services firm that initially turned to CrowdStrike for incident response following a breach where an attacker used legitimate credentials to bypass the company's existing security products and remained undetected for a week. Following remediation by CrowdStrike incident responders, This customer consolidated on the Falcon platform, adopting Falcon Complete, Falcon Identity Complete, and Falcon Cloud Security Complete, displacing and consolidating four vendors in the process, Microsoft, Sentinel-1, Arctic Wolf, and Sophos. Moving to LogScale. Net new ARR from LogScale NextGen SIM reached a new record as customers increasingly adopt the solution to solve multiple use cases. The number of customers using LockScale grew more than 3x year over year. LockScale ending ARR grew over 200% year over year and is quickly approaching the $100 million ARR milestone, which we expect to achieve in Q3. A Fortune 500 manufacturing company expanded on the Falcon platform with a nearly $4 million deal value LockScale purchase after becoming frustrated with their legacy SIM vendor due to its increasingly prohibitive cost, complex licensing, and poor forced on-prem to cloud migration experience. Given large scales on parallel speed and flexibility and cost-effective licensing model, this customer is now leveraging the Falcon platform to transition away from legacy SIM, supercharging the speed of both their observability and security use cases. Falcon is a platform that brings the benefits of generative AI to life for every SOC, CISO, CXO, and enterprise. We do it with proprietary threat data, and we do it with industry-leading AI expertise. Charlotte AI is the engine powering our portfolio of generative AI capabilities across the platform, utilizing CrowdStrike's high fidelity data advantage. Charlotte AI helps Falcon users of all skill levels to do more in the platform by automating workflows, which fuels module adoption and reduces the mean time to detect and respond. The net benefit to customers from our pioneering use of AI in a single platform is faster results, better security outcomes, and lower overall costs, ushering in a new era of machine speed security. We showcased Charlotte AI earlier this month at Black Hat where we're the only vendor of consequence to showcase a live, not PowerPoint, demo of generative AI in action. Public reception was fantastic and we will release Charlotte AI pricing at Falcon. Moving to partners, 64% of new customers from large enterprises to SMBs were sourced from our partners in the quarter. Our industry leading partner ecosystem is embracing the broader Falcon platform building long-term differentiated businesses with CrowdStrike. CrowdStrike is AWS's largest cybersecurity go-to market partner. And we recently won their ISV Partner of the Year award, validating our cloud security category leadership, commitment to innovation and go-to-market success, particularly in cloud security. Finally, the initial momentum we are building through our partnership with Dell is exciting, delivering eight figures in deal value in just a few months. As we highlighted previously, our resale agreement with Dell hit the market in Q1, delivering in-quarter new deals in every major geography region. In the second quarter, we went live with attached device sales globally and rapidly achieved industry-leading device attach rates. Demand in our markets has remained resilient, and even as we continue to operate in a time of macro uncertainty and increased deal scrutiny, our win rates remain high. The momentum we are building with consolidation deals specifically tied to cloud security, identity protection, next gen SIM, and increased partner engagement is driving our pipeline to record levels. Additionally, Falcon, our annual customer conference, is our biggest selling event of the year. And this year, registration is already up 80% from last year. The Falcon ecosystem will be on full display with over 70 technology go-to-market partner sponsors in attendance. I would like to invite our investors and analysts to join us at Falcon. Similar to last year, in conjunction with the event, we will hold an investor briefing featuring conversations with customers and partners. This year's briefing will also include a financial discussion led by our CFO, Bert Podbear. Please note the customer sessions will not be available on the webcast, so please join us in person. And with that, I will turn the call over to Bert to discuss our financial results.
spk16: Thank you, George, and good afternoon, everyone. As a quick reminder, unless otherwise noted, all numbers except revenue mentioned during my remarks today are non-GAAP. We delivered a strong second quarter amid a continued challenging macro environment. In Q2, we scaled the business to new heights and drove significant operating leverage. New milestones in the quarter included record operating margin, which was within our target operating model for the first time in company history, record non-GAAP net income attributable to CrowdStrike, which more than doubled year over year, and GAAP profitability for the second quarter in a row. The demand environment remained resilient, and we built record levels of new logo and upsell pipeline. We achieved Q2 net new ARR of $196.2 million, which was above stated assumptions as our relentless focus on sales execution enabled us to perform well, even as we continued to see heightened deal scrutiny and elongated sales cycles. We ended the quarter with ending ARR reaching $2.93 billion, up 37% over last year. We continue to be very pleased with the success of our land and expand strategy, with our dollar-based net retention rate effectively at our benchmark in Q2. Subscription customers with five or more, six or more, and seven or more modules increased to 63%, 41%, and 24% of subscription customers, respectively. Moving to the P&L, total revenue grew 37% over Q2 of last year to reach $731.6 million. Subscription revenue grew 36% over Q2 of last year to reach $690.0 million. Professional services revenue was $41.7 million, setting a new record for the 12th consecutive quarter and representing 44% year-over-year growth. During the quarter, we also saw strength in Latin America, the Middle East and Japan. International revenue grew 43% year-over-year. Our second quarter non-GAAP gross margin performance remained strong. Total non-GAAP gross margin was 78% and we achieved subscription gross margin of approximately 80% for the second consecutive quarter. We look forward to discussing the initiatives and investments we are making to drive subscription gross margin higher and beyond our target model in more detail at our Falcon investor briefing in September. Total non-GAAP operating expenses in the second quarter were $412.5 million, or 56% of revenue, versus $321.4 million last year, or 60% of revenue. Q2 sales and marketing and R&D expenses grew 26% and 35% year over year, respectively. We expect sales and marketing and R&D expenses to fluctuate quarter to quarter due to the timing of in-person events, marketing, and technology development programs. As a result of our dedication to operational excellence and profitable growth at scale, in Q2, we achieved multiple new milestones for the profitability of the business. These milestones included record non-GAAP operating income of $155.7 million, growing 78% year over year, achieving our target model range for non-GAAP operating margin for the first time in company history and a record 21% of revenue well ahead of our planned timeline, more than doubling non-GAAP net income attributable to CrowdStrike, which grew to a record $180.0 million, or 74 cents, on a diluted per share basis, and finally, achieving GAAP profitability for the second consecutive quarter. These achievements speak to the power of our financial model and focus on running an efficient business. We are accelerating our timeline to reach the target model. As implied in our guidance, we now expect to exit Q4 within our target non-GAAP operating margin model and to remain within our target model on an annual basis starting in FY25. We ended the second quarter with a strong balance sheet. Cash and cash equivalents increased to $3.17 billion. Cash flow from operations grew 17% year-over-year to a Q2 record of $244.8 million. Free cash flow grew 39% year-over-year to a Q2 record of $188.7 million or 26% of revenue, achieving a rule of 63 on a free cash flow basis. Looking at the first half of fiscal year 2024, free cash flow grew 42% year-over-year to reach $416.1 million and 29% of revenue, putting us well on track to reach our stated goal of 30% recashable margin for the full fiscal year. Moving to our outlook, we are raising our revenue guidance for the fiscal year and maintaining our net new ARR assumptions for the second half and fiscal year, which call for inline to modestly up net new ARR for the full year. For the third quarter of FY24, we expect total revenue to be in the range of $775.4 to $778.0 million, reflecting a year-over-year growth rate of 33% to 34%. We expect non-GAAP income from operations to be in the range of $154.4 to $156.3 million, and non-GAAP net income attributable to CrowdStrike to be in the range of $179.8 to $181.8 million. We expect diluted non-GAAP net income per share attributable to CrowdStrike to be approximately 74 cents, utilizing a weighted average share count of 244 million shares on a diluted basis. We are raising our revenue and profitability guidance for the full fiscal year 2024. We currently expect total revenue to be in the range of $3,030.7 to $3,042.9 million, reflecting a growth rate of 35% to 36% over the prior fiscal year. Non-GAAP income from operations is expected to be between 601.3 and 610.5 million dollars. We expect fiscal 2024 non-GAAP net income attributable to CrowdStrike to be between 680.4 and 689.7 million dollars. Utilizing 243 million weighted average shares on a diluted basis, we expect non-GAAP net income per share attributable to CrowdStrike to be in the range of $2.80 to $2.84.
spk08: George and I will now take your questions. Thank you.
spk09: As a reminder, to ask a question, you will need to press star 11 on your telephone. And due to time constraints, we ask that you please limit yourself to one question. One moment for our first question, please.
spk08: And our first question comes from the line of Socket Kalia with Barclays.
spk20: Okay, great. Hey, George. Hey, Bert. Thanks for taking my question here.
spk16: Great to hear your voice, Socket.
spk20: Hey, guys. Same here, Bert. And great to see the profitability. So much fun stuff to talk about in the quarter. But maybe I'll just hit one topic head on, which is the scrutiny that I think all of us have on the second half net new ARR ramp. And listen, I think we've heard it from you and George for multiple quarters now that the multi-product pipeline just looks strong. But I was wondering if either of you could help us maybe look at that ramp from another lens to maybe help us get a little bit more confidence, whether that's based on things like net revenue retention or implied new logo business, any other lens that you'd have us look at I guess, look through when kind of stress testing that second half net new ARR ramp that you're guiding to.
spk17: Sure. Second, let me take the first part and I will turn it over to Bert. So when we think about the back half of the year and our confidence, I think it starts with the product and the consolidation that we're seeing. Customer after customer looking to consolidate on the platform, and the product portfolio has never been stronger, particularly in the areas that I talked about, cloud, lock scale, identity. We gave you some great numbers around that. Then you look to our partners, our industry-leading partners in our ecosystem. We continue to grow that. We've got tremendous focus on that internally with a new leader. Dell, Pax8, I mean, I can go down the list of our partners, and certainly AWS that I called out, all contributing to our momentum. And then the pipeline, a record pipeline, as we see this. The partners and CrowdStrike are delivering a record pipeline because the products are there. So that's the way I look at it.
spk16: Bert? Yeah, I would just add a couple things. One, I would add we're very happy with our retention rates. We think they're best in class. as well as I think we're seeing strength from multiple aspects of the business, right? From either our enterprise or SMB, we see strength in both. So that's why we get confidence in the second half.
spk09: Thank you. One moment, please, for our next question. And our next question comes from the line of Sterling Audie with Moffitt Nathanson.
spk02: Yeah, thanks. Hi, guys. I also want to drill in on that same topic, but specific, George, to one of the comments it made about the sales pipeline and wondering if you can just peel back the onion and talk about what you saw in this quarter and what is happening with the strength and maturity in the pipeline coverage specifically, you know, to drive that acceleration.
spk17: Sure. I think you have to start with the ramp reps that we have. We did a lot of hiring last year. It takes a while to ramp reps. So we're going into the back half of the year with ramp capacity, which we're obviously excited about. And then a lot of it has to do with me being in the field and talking to customers and just what I'm hearing from them. I was recently on a call with a large Fortune 200 company. I was on with their CIO, their CTO, and their CSO, and they said the reason we have all of these people together is because of the spend, which is eight figures, and two, we were so strategic, we're actually handling their observability and their security use cases. So when I look at that and I look at the product portfolio and where we are, it's just encouraging, combined with the sales ramp and the capacity we have as we go to the back half of the year.
spk09: Thank you. One moment, please, for our next question. And our next question comes from the line of Andrew Nowinski with Wells Fargo.
spk18: Great. Good afternoon and congrats on the quarter. And I'd echo Socket's comments about profitability. That is really an amazing outlook. I wanted to just Ask another question on the back half of your guidance. The way you described everything, George, with products, consolidation, partners growing, record pipeline, ramped reps, I know the back half does look fairly aggressive, but you also have easy caps too. So maybe why not – what gives you caution about raising that guidance a little bit more coming off of a really good quarter and heading into with all those positive trends you have going for your business right now?
spk16: Hey, Andy, it's Bert. So when it comes to guidance, we take a very prudent approach, and we guide to basically what we see, not what we don't see. We definitely don't guide to running tables. And you've also got to still factor in that we're still in a tough macro. We do see deals getting elongated and sales cycles taking longer. So I think those are the things why we guide it to the way we guide it.
spk09: Thank you. One moment, please, for our next question. And our next question comes from the line of Rob Owens with Piper Sandler.
spk07: Great. Thanks for taking my question. This is Ethan on for Rob here. George, I just wanted to touch on that observability point that just came up again and highlighted the success you're seeing with log scale. So can you talk a little bit more about some of those observability use cases that you're seeing success with and maybe where you're seeing a little bit of differentiation? Thank you.
spk17: Sure. So when you look at LogScale, its capabilities are obviously next-gen SIM, but also an observability. And we have many customers that use it just for that use case. And we have an opportunity to go back and sell them security. Things like managing and monitoring their Kubernetes clusters, their cloud environment, their infrastructure. And we have a customer who manages their train schedules on it. So it can manage a large set of data, and it does it extremely efficiently. and what we're seeing right now is customers telling other customers about it. We have huge Fortune 25 referenceable customers in the space, and I think the success begets more success in that area, so that's why we're pretty excited about it. You've seen the growth in that area, and customers are looking for something that's better and faster and gives them an outcome that is more contemporary than what they're using today.
spk09: Thank you. One moment, please, for our next question. Our next question comes from the line of Keith Bachman with BMO Capital Markets.
spk15: Hi. Many thanks for taking the question. I wanted to ask about the 500 million AR run rate that you mentioned for log scale and others. And, A, is that the same composition from the analyst event where you referenced it was 399 million in the January quarter? So it's up. 25% in only two quarters, so pretty healthy growth there. B, you know, any comments on how you anticipate that continuing to scale over the next couple quarters to help realize that back half-year guidance? C, any update on the thoughts on M&A that might contribute to the growth of that emerging portfolio? Thanks very much.
spk16: Yeah, it's a great question. So for us, the way we broke it out on this ERDC call, it's not the emerging category that we had talked about in the past. It's different. And we wanted to give increased visibility into these specific business lines. And we thought that it would be very important for everybody to see how well they're performing and how well, you know, even at scale they're performing. So you've got obviously our cloud momentum. You've got our log scale momentum and our identity momentum. And we wanted to show everybody exactly how we're doing in those areas and that they're taking flight at scale. I'll pass the other questions over to George.
spk17: Well, when we think about the current environment, I think everyone is seeing there is a shift in the competitive environment and companies that are moving around in terms of M&A activity. We think the back half of the year will be a great opportunity. We continue to evaluate many, many different candidates as we normally do. And we think the environment is getting better from an M&A perspective. And we're very diligent in how we buy things in the bar and how we look to integration because we focus on a seamless one platform approach. And we remain true to that. So back half of the year, we'll see how it goes, but certainly excited about that. And we continue to drive innovation internally and we'll look externally for good companies with good culture and good people.
spk09: Thank you. One moment please. And our next question comes from the line of Mike Walkley with Canaccord Genuity.
spk13: Great, thank you. George, it's clear platform leaders are gaining wallet share as enterprises consolidate vendors. I just want to dig in a little bit more. It seems like there's even a big shift more favorable to CrowdStrike from your comments even a quarter ago. You know, with Sentinel-1 and BlackBerry silenced, you know, potentially up for sale, are you already generating strong share gain opportunities in the SMB market? Or can you just let us know how Falcon Go is trending versus your expectations?
spk17: Yeah, we already see that in the marketplace. We've got customers that are very concerned about the uncertainty. They've seen the Silence Blackberry movie before, and they're concerned. And uncertainty is never a good thing for a security buyer. So we've already seen deals come our way. And, again, as a consolidator and as the leader of the space, we think that just accrues more value to us. So we'll see how everything shakes out, but for sure what we're hearing from partners is, and customers about some of the latest movements in our space is concerned, you know, in terms of other competitors. And, again, they're looking for a long-term viable partner, and that's what we're hearing from multiple sources. Thank you.
spk09: One moment for our next question. Our next question comes from the line of Gray Powell with BTIG. Oh, great.
spk04: Great. Thanks for taking the question, and congratulations on the good results. So maybe one on the competitive side. I guess the biggest concern we've heard from investors is just on pricing in the endpoint security space, particularly as EDR adoption moves past the 50% mark. So I guess the question would be how much room is left in the global 2000, and then how sensitive – Do you think the incremental buyer is today compared to what you've seen the last two years? Thank you.
spk17: Well, from buyers, what we've seen is they're buying platform. They're not just buying one particular area. The way our technology works, it's single-agent architecture, common data store, and then modules. And then we've been able to obviously monetize that across different areas. Protection is just one area. But when you look at cloud, you look at agentless, you look at some of the other offerings, lock, scale, and identity. it's really about the platform sale, not an individual area, and getting the right outcome, as I talked about in the earnings script, stopping breaches. I talked to a customer recently. They had 60 different products and controls, and we were the only one that actually detected activity in their environment and prevented potential issues. So that's really been the focus for us. And I think when you look at even the legacy areas, you know, it's almost – what, 50% of the market is still available from a legacy perspective, near 50%. So, yeah, 48%. I think, you know, when you look at that, it's still a big opportunity in legacy displacements as well as the platform areas that we called out are just massive TAM opportunities. And as I mentioned in the script, they could each be an IPO-able business on a standalone basis as big as they are.
spk09: Thank you. One moment for our next question, please. Our next question comes from the line of Brian Essex with JP Morgan.
spk03: Yeah, good afternoon. Thank you for taking the question. Maybe just for Bert, we wanted to understand how you're balancing spending both on a GAAP and non-GAAP perspective. It looks like operating expenses on a non-GAAP basis actually declined sequentially, but stock-based comps spiked up. We'd love to know how the hiring environment is playing into that and how you think about managing that going forward and any impact that might have toward achieving your cash flow targets. Thank you.
spk16: Sure. Thanks for the question. Number one, we are going to continue to invest as aggressively as we can while keeping to our commitment to our profitability metrics. And for us, I think that the key here, you had mentioned on the stock-based compensation, a lot of that is based on timing of grants, and I think that for us, we are gonna continue to use grants to attract and retain. Having said that, we think that we are going to continue to show low dilution, less than 2% this year, and strive to keep it under 3% for next year. For us today, we think it's a good hiring environment, We're taking the time in terms of how we're going to go about hiring and where, and we're being very prudent in terms of where we're deploying headcount. And as we've mentioned in prior calls, we are managing the pace of hiring in accordance of what we think is what we need to continue to hit our targets. So that's how we see it.
spk09: Thank you. One moment, please, for our next question. Our next question comes from the line of Jonathan Ho with William Blair.
spk06: Hi, good afternoon, and congrats on the strong results. Can you maybe give us some additional color in terms of what you're seeing for these attach rates, especially with the eight or more products? And how do we think about maybe net retention going forward as you start to realize that platform vision? Thank you.
spk16: Yeah, Jonathan, great to hear your voice. Yeah, we're really pleased with what we've seen with respect to customers adopting support, five, six, seven, eight modules. So for us, when you talk about DBNR, remember, it's a noisy metric, and it can fluctuate quarter to quarter, and we've talked about that repeatedly. Some quarters have bigger lands, and some have bigger expanse. But I think at the end of the day, for us, what we're seeing is that we've got a lot of headroom in both new local opportunities. George talked about, you know, the available market from our legacy providers, 48%. but we also have an ever-growing customer base. And as we continue to delight our customers, they're going to continue to buy more for us, and it goes along the consolidation theme that we've been talking about here. So it really plays into our favor. The great news is that in addition to strong expansions, net new ARR contribution from new logos remains high, even higher than we were expecting so far for the year.
spk09: Thank you. One moment, please, for our next question. And our next question comes from the line of Greg Moskowitz with Mizuho.
spk11: Okay, thank you for taking the question. George, obviously it's extremely early as it relates to the arc of generative AI, but you did mention in your prepared remarks that you plan to release Charlotte AI pricing at Falcon. Presumably that means there will be some form of discrete monetization for Charlotte. We haven't really seen that, though, from other cybersecurity vendors as yet. When it comes to your data and the application of your AI tech, maybe just help us understand kind of why you think you'll be able to not just deliver incremental value to your customers, but monetize it as well. Thanks.
spk17: Sure. Well, when you look at outcomes, as I mentioned, one of them is doing more with less. And in security, there's upwards of probably 3 million customers. person gap and the ability to actually hire security folks. And as I mentioned when we launched Charlotte AI in public preview is the fact that it really is a virtual analyst, a SOC analyst, which are super expensive and hard to maintain. So for our purposes, when we look at the total value to a customer, if we can create more virtual analysts, just as an example, that takes eight hours of work and compresses it into ten minutes, we think there's real value to that, which is why we'll have pricing around it, which we're going to deliver at Falcon. And even from what we've shown recently in one of the security conferences, it's real. It's out there. People liked it. They want it. And it's differentiated from others that were just showing PowerPoint. So we're really excited about it. Obviously, it's early innings. But if we can show real value in creating these virtual analysts around Charlotte AI, we think customers are going to pay for that.
spk09: Thank you. One moment, please, for our next question. And our next question comes from the line of Gabriella Borges with Goldman Sachs.
spk14: Good afternoon. Thank you. Bert, I'm looking to better understand the impact that macro may be having on the upsell and downsell component of NRR. Are you seeing customers coming up for a newer contract trying to optimize the number of endpoints they have and the number of employees that they have? Is that causing pressure on NRR? And if it is, when do you think that headwind might abate?
spk16: Hey, Gabriella. So first, I think, you know, we talked about why we were giving guidance the way we did. We did talk about, you know, up to 10% headwinds for the first half. We came in better than that. We talked about coming in flat to slightly up for the second half over last year. And I think at the end of the day, we're still on a tough macro. We believe all the things that George talked about, we're very adamant that we feel that we're going to be able to achieve those things. You know, having said that, you've got to remember that still, as I said earlier on this call, deals are taking longer to close. There's more scrutiny on the P&Ls. And so we have to overcome those things to be able to really overcome anything that we would put out there. And for us, I think that we have a great opportunity to do so. And so long as we continue to stay the course, invest where we need to invest, take a prudent approach, I think we're going to be in good shape.
spk14: Thank you.
spk09: Thank you. One moment, please, for our next question.
spk08: And our next question comes from the line of Patrick Colville with the Scotiabank.
spk01: Hey, thank you for taking my question, and this one's for Bert. I mean, you gave us lots of juicy metrics, and I guess I just want to get some clarifications. Can you give us the emerging products number so we can kind of triage what we had previously versus kind of what you're giving us now? And then I guess the second part of my question is in reference to your comments about fiscal 25 operating margin being in line with a target model. Can you just remind us what the target model is that you're referencing? Sure.
spk16: Yeah, so first on the emerging products, we thought it would be better to give you full numbers on our businesses that are meaningful, that are taking flight, so we won't be going back to anything that we used to call emerging products. With respect to our target model for FY25 and hitting those targets, the last one that we were talking about was certainly the operating margin. We said we were going to be between the 20% and 22%. plus, and we actually hit that one. That was the last one of several that we gave out from subscription gross margin to S&M to G&A to R&D. We also gave out free cash, and for the year, we're still talking about that 30% to 32% plus.
spk09: Thank you. One moment, please. Our next question comes from the line of Yi Fu Lee with Cancer Fitzgerald.
spk10: Congrats on those strong set of results. This is Yi in for Jonathan. Just one question that revolves around CNAP. Obviously, the project is building CNAP around endpoint. I was wondering if maybe, George, you could share any benefits of doing this versus other vendors that are building it off, like, let's say, a little trust exchange. That's just from us today.
spk17: Yeah, so when we think about our cloud business, and I went into some detail on this, it's both agent and agentless. So, right, it's not just around the cloud workload protection, but it's also around the cloud security posture management and everything really from code to cloud. And we've added tremendous capabilities, which I've called out in the earnings script as well in terms of our ability to instrument and flight containers and understand if insecure code is being put into the CI CD pipeline, et cetera. So, um, we've always been strong in the agent world. And what we're finding is that customers are looking at agent listen and, uh, moving to our solution because it combines the best of both worlds, agent and agent list together in one single skew. And, uh, we had tremendous success last quarter. We've got a dedicated sales team on cloud. and customers are seeing the benefits of an integrated platform with Falcon. So we'll continue down that path, and again, we continue to build out its capabilities and win new business there.
spk09: Thank you. One moment, please. Our next question comes from the line of Trevor Walsh with JMP Securities.
spk05: Great, thanks for taking my question. George, maybe just to follow up on that last response around CNAP, what's the appetite for customers to, or at least start to look at combining CNAP capabilities with XDR or at least kind of bridging the two together as far as, you know, kind of all the, just another point of telemetry from cloud kind of feeding into that XDR outlook and where do you see it either happening? What's the current state and where do you see it going? Thanks.
spk17: Well, the current state is the reality, which is that's what we're doing today. So we're taking all that rich telemetry from the CNAP offering, agent, agentless, and even the exposure management, that all from an XDR perspective is coming back into the Falcon platform and is available to any of the algorithms to identify and prevent any sort of malicious activity. It's also available from a compliance perspective to help customers manage their compliance and risk. It's available from an asset graph perspective, which gives customers an idea of what's actually in their environment. And then from a cloud detection response perspective, we actually have some of our managed services that are able to help cloud customers, which at this point is sort of an epidemic of issues in cloud environments, the way the adversaries are operating. We're really pioneering that space and putting it all together, and there is a reason why we're one of the largest cloud security by revenue vendors in the market today.
spk09: Thank you. One moment, please. Our next question comes from the line of Peter Levine with Evercore ISI.
spk19: Great, thanks, guys, for taking my questions. George, maybe just to piggyback off of that other AI question, you know, every vendor is telling us their AI is proprietary, you know, the outcomes are proprietary to their data. So maybe, you know, explain to us, like, really where the competitive mode comes from. When we hear, you know, Microsoft talk about or at least push all their products, their customers that are on Copilot, you know, Palo, Zscaler, they're all talking about kind of the same outcomes. But maybe just put a finer point on why you think what your mode is around Charlotte Aon?
spk17: Sure, it really is a good question and I certainly Agree with you. There's a lot of people talking about it, and I think we're actually delivering it. One of the things that I would point you to is the data set itself. And what's important to realize, it isn't just about the most data. You'll hear that from a lot of vendors. You know, one vendor will say they have more data than the other. It's really about sort of the curated data set, because when we think about generative AI, it actually has to be trained. I mean, we think about chat GPT. There's a bunch of humans helping to train it. It just so happens, probably more by luck than understanding generative AI was going to be on the horizon, that when we started the company, we actually have a very well-defined training set that's annotated based upon all the threat hunting that we've done over the last 10 years. So we believe our 10-year head start in terms of having a data set that's actually curated is going to give us a distinct advantage of helping our customers. So that's a big area, and then it's a foundational platform component, which is made available to every other service on the platform, which is different than others. So, again, first innings, we'll see how it all unfolds, but initial customer reaction has been very, very positive.
spk09: Thank you. I'll now hand the call back over to CEO George Kurtz for any closing remarks.
spk17: Great. Well, I want to thank everyone for their time today. We certainly appreciate your interest and look forward to seeing you in person at our upcoming Falcon conference. Thanks so much, and we'll talk soon.
spk09: Ladies and gentlemen, this concludes today's
Disclaimer