This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.
Operator
Good day and thank you for standing by. Welcome to the QALYS fourth quarter and full year 2022 earnings call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question and answer session. To ask a question during the session, you need to press star 1-1 on your telephone. You will then hear an automated message advising your hand is raised. To withdraw your question, please press star 1-1 again. Please be advised that today's conference is being recorded. I would now like to hand the conference over to speaker today, Blair King. Please go ahead.
Blair King
Good afternoon and welcome to QALYS' fourth quarter 2022 earnings call. Joining me today to discuss our results are Sumit Dhikhar, our president and CEO, and Jumi Kim, our CFO. Before we get started, I would like to remind you that our remarks today will include forward-looking statements that generally relate to future events or a future financial or operating performance. Actual results may differ materially from these statements. Factors that could cause results to differ materially are set forth in today's press release and our filings with the SEC, including our latest Form 10-Q and 10-K. Any forward-looking statements that we make on this call are based on assumptions as of today, and we undertake no obligation to update these statements as a result of new information or future events. During this call, we'll present both GAAP and non-GAAP financial measures. The reconciliation of GAAP and non-GAAP measures is included in today's earnings press release. And as a reminder, the press release, prepared remarks, and investor presentation are all available on the investor relations section of our website. So with that, I'd like to turn the call over to Smith.
Sumit Dhikhar
Thank you, Blair, and welcome everyone to our fourth quarter earnings call. We delivered another quarter of strong financial performance, reflecting a year of accelerated revenue growth and industry-leading profitability. In terms of innovation, 2022 was a strong year for Qualys as we expanded our platform and our market opportunity. We introduced ContextXDR to enable high-fidelity detection and response capabilities for our customers. We released VMDR 2.0 with TrueRisk, to enable comprehensive risk coding and ITSM integrations. We brought external attack surface management into our cybersecurity asset management application. We unified multiple context vectors around asset criticality, vulnerability, and system misconfiguration with asset telemetry in a single agent and brought a unique EDR application to market. Further flexing the power of our platform, we introduced our cloud-native Total Cloud with FlexScan, which pairs agent and agent-less zero-touch assessment options with comprehensive cloud posture management and container security. These innovations allow our customers to reduce complexity as they standardize on a trusted platform that delivers an immediate ROI and lower total cost of ownership relative to siloed and traditional detection-only technologies. With CISO increasingly focused on comprehensive risk management, we have upgraded our TrueRisk platform capability to ingest third-party scans into the Qualys cloud platform which we call Enterprise True Risk Management, and is now in preview with our customers. Regardless of which vendor scans an organization's environment, with this enhancement to our True Risk application, Qualys is now providing enterprise customers with a holistic enterprise-wide risk score based on asset criticality and our Cloud Threat Database, which is a unified threat intelligence platform of over 25 threat feeds. What makes this capability so special is our ability to then reduce an organization's enterprise risk score by leveraging Qualys' remediation application with automated workflow through a unified dashboard. Additionally, TotalCloud, which is our cloud-native risk management solution for public cloud, is now GA, and since our acquisition of BlueHexagon in October, we've already added a new cloud detection response module to our TotalCloud solution. As organizations increasingly prioritize Moving workloads to hybrid and multi-cloud environment, we view this new ML AI-based technology for zero-day threat hunting and response as another strong competitor differentiator in a rapidly evolving market. Looking forward, we will continue to seek out opportunistic acquisitions to further enhance our platform, accelerate our time to market, and further expand our market opportunity. Now turning to our sales and marketing execution in Q4, we continue to witness organizations broadly responding to evolving macro by applying additional layers of scrutiny to spend and dealing project start dates. We believe that this increased scrutiny comes increased opportunity as organizations standardize on trusted platforms to consolidate security stacks, leverage automation, and achieve expedient remediation of risk. Qualys is a unique, organically built platform to address this need. Nevertheless, to fully capitalize on this opportunity requires first to go to market execution. Over the last year, we have made some meaningful progress on several fronts in this regard, including successfully growing the sales and marketing teams and investing our sales enablement and operations functions. We still have work to do in our sales execution. This is particularly evident within the context of today's market dynamics and persistent macro headwinds, which resulted in lower than expected bookings growth in Q4. Accordingly, I'd like to share a couple of planned personnel and alignment changes within our sales and marketing organizations, which position us for forward success. Earlier today, we announced the upcoming departure of our Chief Revenue Officer, Alan Peters. We thank Alan for his contributions during his tenure at Qualys as we continue to grow and scale our sales organization. In the interim, I will be overseeing the sales team as we focus on product-led growth inherent in Qualys. We are fortunate to have a talented next-level team of regional sales leaders who are energized by our competitive position in the market, and I'm confident in our ability to effectively drive our business forward as we search for Allen's successor. Additionally, I'm pleased to announce Pinkesh Shah, who joined Qualys in November of last year, was recently promoted to serve as our new chief product officer, overseeing both product as well as marketing. Given Pinkesh's strong background in product-led growth, We believe having both product and marketing under the same leadership will help increase a return on our investments and drive operational efficiencies in our go-to-market motion. It's great to have Pankaj on the team, and we're looking forward to his leadership in helping execute our long-term growth agenda. As we diligently address the challenges brought on by today's market uncertainty, we remain confident in our long-term strategy and trajectory. I've met with over 100 CISOs over the past few months, and their message is clear. They are looking to pivot to platform-based solutions to solve their complex security problems. In face of an evolving macro escalated threat environment and cybersecurity skill gap, organizations need to reduce complexity and cost while presenting measurable risk reduction initiatives to board and C-level executives. This was underscored at our recent Qualys Security Conference in Las Vegas, which brought together over 500 Qualys customers and partners. Several customers in attendance highlighted their ability to measure their organization's security posture by leveraging the Qualys cloud platform while reducing risk and cost. One customer stated that through VMDR, with true risk, they reduced risk and eliminated 60% of critical vulnerabilities in a very short amount of time without having to buy separate threat intelligence feeds. Against this backdrop, we had several positives in Q4. We continued to see the steady adoption of VMDR, which is now deployed by 48% of our worldwide customers. A few key seven-figure VMDR wins in the quarter included two Global 500 financial institutions, which chose Qualys for its ability to replace traditional siloed security tools and enhance security posture on a unified platform, and a Global 50 insurance company that is leveraging VMDR to not only detect but also immediate vulnerabilities in both on-prem and cloud workloads. Beyond these wins, I'll take a moment now to share a couple of additional successes with customers who are consolidating their security stack to optimize, spend, and reduce risk. First, a new logo, Fortune 1000 web hosting company, selected cybersecurity asset management, VMDR, and our risk and remediation application, in a seven-figure competitive win replacing point solutions from three vendors with one platform. The ability for this customer to significantly enhance its security program with automating scripts, comprehensive internal and external risk criticality and quick remediation, CMDB sync and alerting on a natively integrated platform where all key differentiators compared to vulnerability detection-only solutions in the market. In addition, in 2022, highlighting organization's strategic focus on high-quality real-time asset inventory, we expanded our engagement with an existing financial services customer, signing an over $800,000 upsell deal for Qualys cybersecurity asset management solution. This customer is standardizing on our cybersecurity asset management solution due to the rich asset context end-of-life visibility and real-time inventory they are able to get out of the same agents and platform they have already deployed for VMDR. This enabled them to enhance their investment in Qualys platform by consolidating solutions, which is important to customer in current macro environment. As more and more customers are beginning to perceive Qualys as a leading security platform, they have As a leading security platform that they can leverage to solve their complex and difficult security problems, we are growing increasingly confident in our ability to drive growth and gain market share. This is evidenced by the continued growth in our large customer spend, with customers spending $500,000 or more with us growing to 116 Q4, up 27% from a year ago. Turning now to our growth initiatives in SME, SMB market, where we have witnessed slower growth, we have introduced new product packaging, VMDR TrueRisk, VMDR TrueRisk Fix-It with patch management, and VMDR TrueRisk Protect-It with both patch management and multi-vector EDR. These new packages offer simple, easy to deploy, all inclusive cybersecurity solutions to manage, remediate, and protect against continuously emerging cyber threats and reduce risk for the small customers. We believe that the convenient packaging and pricing of this offering will help streamline the sales process for our partners, reducing time to value, and further advance our value proposition in the SME, SMB market. In addition, we are pleased to share that in Q4, we expanded our partnership with Oracle. Oracle Cloud Infrastructure, OCI, began offering a fully managed vulnerability scanning service that enables Qualys customers to leverage their vulnerability management licenses to scan their OCI compute virtual machines. I'm also pleased to note that OCI has selected Qualys' vulnerability management solution to help scan their internal environment for vulnerability. This is a testament to the effectiveness of Qualys in securing cloud infrastructure and advancing our partner ecosystem. Finally, I'm pleased to announce that Qualys recently received FedRAMP Ready status at the high impact level on our newly introduced GovCloud platform. Currently, this is the only FedRAMP high-ready platform offering inventory vulnerability management and patch management in a single unified workflow. With government agencies increasingly moving workloads from on-prem environments to the cloud, this marks the achievement of a key milestone and makes Qualys the only modern alternative to legacy scanners for federal, local, and state government agencies. Given this certification, our consolidated platform and our investment to establish a public sector presence. We believe we are now well positioned to address a new vertical that will help drive growth in the long term. In summary, the cybersecurity market is a mission-critical technology. We believe our natively integrated platform that is quantifying, remediating, and reducing risk brings a highly differentiated value proposition to our customers as they get more security using less resources out of a single Qualys platform. We'll continue our disruptive innovation and further enhance and advance our go-to-market investments to crisply execute our long-term strategic vision with an already proven approach to balancing growth and profitability. With this, I'll turn the call over to Jumi to further discuss our fourth quarter results and outlook for the first quarter and full year 2023.
Blair
Thanks, Samad, and good afternoon. Before I start, I'd like to note that except for revenue, all financial figures are non-GAAP. and growth rates are based on comparisons to the prior year period unless stated otherwise. 2022 was another notable year of product innovation for Qualys as we continued our product leadership while growing revenues by 19%, maintaining our growth margin at 81% despite inflationary pressures, and generating EBITDA margin of 45%. While our profit margin was well above our industry peers, 2022 was a year of investment for Qualys, with both R&D and sales and marketing growing faster than revenues. In R&D, we invested in our security research and product management team to further strengthen the value proposition of our products and assist in executing our go-to-market strategy. In sales and marketing, it was a mix of investments and headcount, as well as trade shows and marketing campaigns. Having executed against our 2022 investment plan with over a 20% increase in sales and marketing headcount, We look forward to optimizing our investments in 2023 as we remain committed to driving long-term profitable growth. Now let's turn to fourth quarter results. Revenues in the fourth quarter grew 19% to $130.8 million, up from 16% in the year-ago period. This includes a de minimis ad from Blue Hexagon Acquisition, which contributed a few hundred thousand dollars to Q4 revenue. Revenues from channel partners grew 22%, outpacing direct, which grew 17%. Our revenue contribution mix has shifted slightly over the last year, with direct making up 58% of total revenue versus 59% a year ago. We expect a similar trend to continue in 2023. By GEO, growth in the U.S. of 19% was in line with our international business, which grew 20%. Looking ahead to 2023, we expect our U.S. and international revenue mix to remain at roughly 60% and 40% respectively. In Q4, we saw continued strength in customer dollar retention, but lower performance in upsell, with our net dollar expansion rate on a constant currency basis at 109%, down from 111 last quarter, but up from 108 last year. Where we saw room for improvement was primarily in smaller customers who spent less than $25,000 with us during the last year. We expect this segment to gain momentum with the launch of the new product packages that Sumet just mentioned. In comparison, customers who spent $25,000 or more with us increased by approximately 20%, both in count and revenue. In terms of new product contribution to booking, We continue to see healthy demand for patch management and cybersecurity asset management, with the two combined making up 9% of LTM bookings and 15% of LTM new bookings in Q4. The increased adoption for these products resulted in 50% growth in Q4 on a combined basis. Adjusted EBITDA for the fourth quarter of 2022 was 55.1 million, representing a 42% margin, compared to a 45% margin a year ago. Operating expenses in Q4 increased by 25% to $58.4 million, primarily driven by the growth in sales and marketing investments, including higher headcount and related costs, as well as spend and trade shows. EPS for the fourth quarter of 2022 was $1.01, and our free cash flow for the fourth quarter of 2022 was $40.9 million. representing a 31% margin compared to a 32% margin a year ago. In Q4, we continued to invest the cash we generated from operations back into Qualys, including $3 million on capital expenditures and $104.5 million to repurchase 848,000 of our outstanding shares. At the end of the quarter, we had $154.5 million remaining in our share repurchase programs. We are pleased to announce that our board has authorized an additional $100 million share repurchase program, bringing the total available amount for share repurchases to $254.5 million. Now, let us turn to our 2023 guidance. Starting with revenues, for the full year 2023, our revenue guidance is $553 million to $557 million, which represents a growth rate of 13 to 14%. For the first quarter of 2023, we expect revenues to be in the range of $130.2 million to $131 million, representing a growth rate of 15% to 16%. This guidance is assuming no material revenue contribution from our newer products, such as Context XDR and Total Cloud, and continued unfavorable market dynamics throughout 2023, similar to what we witnessed in the fourth quarter of 2022. Given the growth opportunities ahead of us, we will continue to invest in operations, people, and systems while recognizing the importance of optimization. As a result, we expect full-year 2023 EBITDA margin to be in the low 40s, roughly in line with the fourth quarter 2022 margin. We expect full-year EPS to be in the range of 4.10 and 4.18, and for the first quarter of 2023, in the range of 0.95 and 0.97. Our planned capital expenditures in 2023 is expected to be in the range of 18 to 25 million, and for the first quarter of 2023, in the range of 4 to 5 million. In 2023, we plan to align our product and marketing investments to focus on specific initiatives to drive more pipeline and support sales and respond to the current macro conditions while at the same time maintaining a disciplined approach to unit economics. Throughout 2022, we accelerated the pace of hiring and brought in great talent across all functions of the company, increasing the total employee base by 18% while growing sales and marketing headcount by 22%. While we plan to continue to invest in 2023, given the environment we're in, we're planning to prioritize increase in investment in sales and marketing as well as related support functions and systems, while largely maintaining our level of investment in engineering. As we shift to sharpen our execution by focusing on sales and marketing enablement and productivity, we believe we will be able to drive wallet share and long-term returns while balancing growth and profitability. In conclusion, in 2022, we delivered strong top-line growth and industry-leading profitability. we continue to lead with product innovation, introducing context XDR and total cloud, and adding true risk to VMDR. With these achievements, we remain confident in our ability to deliver on our growth opportunity long-term, and we will continue to prioritize investments critical to advancing our platform and go-to-market scale with a commitment to further elevate the areas of our business within our control and maximize shareholder value. With that, Sumedh and I would be happy to answer any of your questions.
Operator
As a reminder, to ask a question, please press star 11 on your telephone and wait for your name to be announced. To withdraw your question, please press star 11 again. Please stand by while we compile the Q&A roster.
Q4
One moment for our first question.
Operator
Our first question comes from the line of Dan Bergstrom from RBC Capital Markets. Your line is open.
Dan Bergstrom
Hey, thanks for taking our questions. Could you talk a little bit more about the buildup to guidance for calendar year 23? You know, what are you assuming from a macro perspective relative to what you saw in the fourth quarter? You said similar, but maybe more on, you know, is it the same, getting worse, close rates, just trying to better understand the level of conservatism in everyone's numbers here.
Sumit Dhikhar
Yeah, I think we really think that we saw the macro and from our perspective deteriorate in Q4 and that thing that was reflected in our software then expected bookings both on new and upsell. And I think we see opportunity for us to continue to work with our sales team, improve the execution. And I think those are some of the things that changes that we have put in place that we are looking forward to. As we get into Q1 and, you know, rest of 23, we have sort of not assumed any change in that macro or productivity or anything like that when we looked at the guidance. Yes.
Dan Bergstrom
Great, thanks. And then, you know, looking through the PowerPoint, it looks like the penetration of Fortune 50 G2K customers increased versus previously. And you called out an example in the prepared remarks there. Just curious about what's securing that business. You know, what products did they adopt? And then just to verify, you know, is this the first real change in penetration there in some time?
Sumit Dhikhar
I think the larger customers, what's really interesting is that they have complex security problems that they need to solve. And the combination of the cybersecurity asset management capability, the vulnerability management detection response, and patch management together are really helping them solve that. And what is happening is that everybody's talking about security budgets and the layers being added and the scrutiny. But really, it's a question of the spend that you're putting in security is that giving you meaningful outcomes from a risk reduction perspective. And that's really the question that's being asked. If we're going to spend this money, are we getting a risk reduction? And that's where the true risk that we introduced last year and the enhancement that we have done now has resonated well with the CISOs because now we're able to give them a risk score and they're able to actually tie the spend that they're doing to bringing that risk score down and really able to quantify how that investment is making sense. And I think that conversation is being quite exciting, and that is where we see larger enterprises, like I gave that example of this company that essentially bought just over $800,000 worth of just asset inventory product to add on to the VMDR in Q4, Q3, Q4, so that they could actually enhance their security program and get that outcome and reduce the speed at which they're able to address this threat. So it's not just the projects in security you're executing, but what is the outcome that you are bringing? And I think that's kind of what's resonating in the questions.
Q4
Great, thank you. Thank you. One moment, our next question. And our next question comes from the line of Joshua Tilton from Wolf Research.
Operator
Your line is open.
spk11
Hey guys, thanks for taking my question. Just one from me. The growth outlook range for next year is kind of ahead of the growth that you guys did in your current billings in the back half of 22. So can you just help us understand that ramp or maybe that acceleration in new billings that you guys need in order to, I wouldn't say meet, but maybe come in slightly ahead of the guidance that you laid out for 2023? Thanks.
Blair
Yeah, if you take a look at the current billing growth for 2022, the 15%, I think that what we would need to beat our revenue guidance is probably do something around that range. And if you take a look at the guidance that we gave for 2023, the assumptions that we made are we thought that it would be prudent to take into consideration the current macroeconomic conditions as well as the trend that we're seeing right now. Q4 was a tough quarter for us. As Sumed mentioned, it was lower than expected bookings performance. And what we've assumed in the 2023 guidance is that that condition continues. We will be actively looking to improve our sales execution, as well as look at different opportunities, both large and small, across all our customer base in order to drive bookings growth. But with that said, we feel that the guidance is probably de-risked at this point.
spk11
Thank you. Very helpful.
Q4
One moment for our next question. Our next question is on the line of Joel Fishbein from Truist.
Operator
Your line is open.
spk12
Hi, good afternoon. This is for Joel Fishbein. Just had a question. I think you had mentioned, you know, I saw that your gross margin ticked down around 60 basis points quarter over quarter, and I think you might have mentioned some inflationary pressures. Could you talk about discounting and, you know, did you see any pricing pressure additionally in Q4, especially as some of your existing customers were renewing their contracts?
Sumit Dhikhar
Yeah, I think as we went into Q4, we certainly saw more discounting pressure coming in from competition. And I think we reviewed with case-by-case basis, but, you know, we have a lot of different capabilities that we can offer to bring more value to the customer for the same dollar they spend with us. And so, yes, we do see the discounting pressure and we're essentially going back to them with a better value prop with additional capabilities. And you see some of that in the packages that we have built for 2023 where we're adding patch management and EDR, et cetera, together in simple packages which offer them a little discount but actually make it much easier to reduce the friction of the buying process.
Q4
Great. Thank you. One moment for our next question. Our next question will come from Rob Owens from Piper Sandler.
Operator
Your line is open.
spk09
Great. Thanks for taking my question. As you guys look at your sales and marketing investment from a direct and a channel standpoint, are you leaning either direction as we look at that metric moving forward? Might it skew one way or the other, given it's been relatively static over the last couple of years? Thanks.
Sumit Dhikhar
I would say at a high level that we started the program for partners in May of last year, so I think we are excited to see some of the early traction that we are seeing in terms of the registration and the engagement that we are seeing with a number of partners. But I think it's early days, and so as we progress through this year or so we'll get a better idea of how the demand is coming from partners versus direct. And I think as that evolves, we will have a better picture.
Q4
And so we're not necessarily driving towards one way or the other. Thank you. One moment for our next question. Our next question comes from Brian Essex from J.P.
Operator
Morgan. Your line is open.
Morgan
Hi, good afternoon. Thank you for taking the question. I guess, you know, maybe for some ed, I think Jimmy mentioned that there was no real material contribution in the guidance from CompEx XDR and Total Cloud, but maybe some early indications of what you're seeing there and, you know, maybe outside of those products, other emerging products that might be showing signs for early contribution and how might that drive levers for upside in 2023?
Sumit Dhikhar
A great question. So if you look at where in Q4, if you look at cybersecurity asset management, patch management, I think those continue to have good uptake. And if you see the contribution to the bookings, I think it's like 15% for the combination of those two. And so I think we are seeing more and more interest in those. I think total cloud is something that we're driving a lot of innovation in and the blue hexagon coming in. So as customers are looking for flexibility, moving workloads from on-prem into cloud, multi-cloud and back, I think a combination of Qualys VMDR with token cloud licenses is something where we see initially they will look at being flexible with the licenses that they have and then adopt additional licenses as they grow into the cloud in the future. The feedback has been very positive because of the comprehensiveness of the scanning capability that we bring and sort of just focusing on a snapshot-only scan or an agent-only scan, we're giving them the most flexible options. And so Our large enterprises are excited about it instead of looking at cloud-only security solutions that only give them a visibility near the cloud. Most companies' applications are hybrid. Some of it is in cloud, some of it is in on-prem, and they want to see the overall risk of a combination of everything. And so that feedback has been quite valuable, and we have customers who are looking forward to starting to do evaluations of Total Cloud now that it's gone GA. and give us feedback and see how they can adopt that in addition to the VMDR that they're using on their on-prem systems. And then Context SDR is still early days. We have a few customers that have started using it, are giving us feedback. But the overall theme is the same, that today instead of having multiple tools collecting parts of the data and then them having to build something to bring context, so while there are many tools that are just collecting logs, and providing detections on those logs, the context of the asset, whether it's running a database or whether it has vulnerabilities, all of those things are missing. And so on the Qualys platform, because we have so much real-time context of the asset, when they're able to bring those logs in Qualys, that's where they're seeing interesting use cases that they can satisfy. I think that's kind of how really customers are looking at it, that the Qualys platform solves multiple use cases more than the individual product. It's the use case that they have, how that is getting solved. So It's early days for these, but I think we are pretty excited about the more immediate term uptake that we're seeing in cybersecurity asset management and patch management, and then we look forward to context CTR and total cloud more in the future quarters.
Morgan
Got it. That's helpful. Maybe just a quick follow-up. Just on managed services penetration, I think you've talked about it in the past, but in the spirit of you know, expanding outside of large enterprise and outside of attraction that you're seeing with partners? And any incremental traction there to note?
Sumit Dhikhar
No, I think we continue to bring MSSPs on board, you know, as you work with them, but I think nothing to call out that is dramatically different. I think it will be interesting to see as the macro also evolves from the partner perspective, how they see the value of managing their bottom line to provide service to their customer by not having to go to 20 different tools to provide the service versus standardizing on a Qualys platform that is breaking them everything from providing vulnerability management patching to EDR. And those are the conversations that we are having as partners are also looking into 2023 how they want to optimize what they provide. But like I said, nothing material or very different to share right now.
Morgan
Does this help? Well, thank you so much.
Q4
One moment for our next question. Our next question will come from the line of Rudy Kissinger from DA Davidson.
Operator
Your line is open.
spk02
Hey, guys. Thanks for taking my questions. I guess I'm curious in the guide, it sounds like what you're saying is You know, what's baked into the guide for 23 is an assumption that the conditions in Q4 continue, but not necessarily get worse. I guess I'm just curious, why not go to that next step? I think most of your competitors and others in the broader cybersecurity space have gone that extra step to make an assumption that things deteriorate further and bake that into their 23 guide. So just curious what drove that decision there.
Sumit Dhikhar
Yeah, I think in terms of, look, I think we are taking into account that what we saw in Q4, which for us was fairly different than what we have seen earlier and was not, in terms of productivity, et cetera, was lower than what we had expected. So we're assuming that that's going to continue. And, you know, again, we are continuing to invest in the sales marketing side of the house to get more and to be able to improve with the packages that we have, et cetera, to improve how we are looking at execution. So that's why we are just assuming the continuation of the Q4 macro that we are seeing. But again, it's, you know, there is lumpiness that we understand, but that's kind of how we are looking at it.
Blair
Yeah, and as I mentioned, in Q4, what we saw was, you know, bookings came in lower than what we had anticipated, right? And so we felt that macro impact in Q4 already. And so for us, so the way we look at it is because of the macro impact, it had a trickle-down impact on the sales productivity and then the process. And we're really looking into our sales execution and the momentum. So with that said, we do see signs where, you know, like as an example, we just launched a new product. There are some initiatives that are going on right now that we feel like it's headed in the right direction. But the guidance actually is taking into consideration all these different elements, including the personnel changes. So we feel that it is a cautious guidance from our perspective.
spk02
Okay. And then secondly, on the sales execution, you've mentioned that a couple of times, I guess, you know, where do you really need improvement? Is it more so your tenured reps are not selling really the whole package as you expected? Is it your newer reps are taking longer to ramp? And obviously the macro could be impacting that, but You know, any more tangible items you could call out on sales execution that you're looking to improve?
Sumit Dhikhar
Sure. Yeah, I think we are overall, I think the investments we made in 22, a lot of them have done well. I think we increased sales headcount as well. I think it's a little bit different in each segment, like you saw the Larger customers are doing well in terms of getting additional capabilities from Qualys, et cetera. And then, of course, there are some deals from the larger enterprises where because of the macro, there are additional signatures, additional layers of convincing the value. And I think there is room for us to do better in those. We didn't quite in some of these deals actually stay ahead of ensuring that we were in front of the right people and showing the value. So I think that's a training that we are giving even our tenured reps to make sure that as we get into 2023, we're doing a better job of staying ahead of that. I think on the lower end of the customers, that's more about how do we reduce the friction in the buying process by not having to have them upsell individual modules and provide better packages. And then just a matter of messaging for the SMB segment around value proposition, as we call it, you know, VMD are a true risk, and then fix it if this is going to fix your things and this is going to protect you. So I think it's on those two different segments. I think it's that. And then overall, of course, we have a sales force we have been hiring last year and there is room for us to provide better sales enablement for them. And that's why with Pinkish now coming on board and aligning product marketing, product management, product marketing, and driving more product-led growth, we believe we can use our platform itself as a way to create more opportunities for our sellers to show the value prop much more quickly. And so it's a combination of those things that we are looking at.
Blair
Yeah, and just to add a little bit more color to it, the way we're looking at it is we've always been a product leader. We believe that we have a very differentiated cloud platform that works very well and serves our enterprises customers that are looking to solve very complex and difficult problems. And so that's why we've been successful in the last year in terms of our ability to grow both account and the dollar amount from larger organizations. With that said, where we've seen the lack of growth and the inefficiency, if you will, is on the SME and SMB space, where if you take a look at, as an example, customers who spent less than $25,000 with us, the count really didn't grow that much, and that's been a drag on our business. That's where we're really focused on right now. With the new product and packaging, we knew that there was friction, and this is where we're very happy with the new product launch. And with that, helping to accelerate and gain the momentum in that segment where we've seen more of the macro hit, we believe that that will have an incremental revenue, if you will, that we'll be able to deliver probably in the second half of 2023.
Q4
Thank you. Thank you. One moment for next question. Our next question comes from the line of Hamza Farawala from Morgan Stanley.
Operator
Your line is open.
spk07
Hey, good evening. Thank you for taking my question. Jimmy, you talked a little bit about the personnel changes and how you're thinking about that. Just curious, how are you reflecting for the risk of additional sales disruption on the back of the CRO departure? Is that something that you really contemplated in your 2023 outlook?
Blair
Yes, and this is why we believe our outlook is appropriately de-risked from that perspective, because if you take the assumption that we made, in addition to assuming that the current macro continues, is no material gain from the newer product. I mean, we do see a huge upside to our guidance if our newer products happen to take off in the you know, second half of this year. However, because of the personnel changes, we believe that the sales productivity, even though it was lower in Q4, we're assuming that it continues as is in 2023. Got it.
spk07
And, you know, just so I guess maybe our models are level set because it is, you know, important metric. I'm curious how you're thinking about growth for CCB throughout the year. I think in times where, you know, years where things have been slowing, We've seen CCB kind of south of revenue growth by, you know, a few points. Should we expect CCB to grow like maybe close to 10% this year?
spk01
Not necessarily, because if you think about revenue, it's a lot from the CCB.
Blair
Right, and so when I say the upside, the CCB could grow higher than the revenue, and that's the uncertainty. In terms of our guidance for the revenue, however, it's more informed by what we were able to achieve in 2022 and what we believe we'll be achieving in the first half of 2023. That will have a greater weight on the revenue for 2023. Okay, thank you.
Q4
Thank you.
Operator
I'm not showing any further questions in the queue. With that, this concludes today's conference call. Thank you for participating.
Q4
You may now disconnect. Everyone have a great day.
spk01
Goodbye. you Thank you. Thank you. Thank you. Thank you. you Thank you. you
Q4
Good day and thank you for standing by. Welcome to the Qualys fourth quarter and full year 2022 earnings call.
Operator
I
Disclaimer