Tenable Holdings, Inc.

Greetings. Welcome to the Tenable Q4 2022 earnings conference call. At this time, all participants are in a listen-only mode. A question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. Please note this conference is being recorded. I'll now turn the conference over to your host, Aaron Carney, Vice President of Investment Relations. You may begin.

Thank you, Operator, and thank you all for joining us on today's conference call to discuss Tenable's fourth quarter and full year 2022 financial results. With me on the call today are Amit Yaran, our Chief Executive Officer, and Steve Bentz, our Chief Financial Officer. Prior to this call, we issued a press release announcing our financial results for the quarter and full year. You can find the press release on our IR website at tenable.com. Before we begin, let me remind you that we will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for the first quarter and full year 2023, growth and drivers in our business, changes in the threat landscape in the security industry and our competitive position in the market, growth in our customer demand for and adoption of our solutions, planned innovation and new products and services, and our expectations regarding long-term profitability and free cash flow. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our management's beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. We disclaim any obligation to update any forward-looking statements or outlooks. For further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent annual report on Form 10-K, and subsequent reports that we file with the SEC, which are available on the SEC website at sec.gov. In addition, during today's call, we will discuss non-GAAP financial measures. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalents. Our earnings relief that we issued today includes gap to non-gap reconciliations for these measures and is also available on the investor relations section of our website. I'll now turn the call over to Amit.

Thank you, Erin.

Today I'll discuss our financial performance, the strong traction we're seeing with Tenable One, and our growth beyond vulnerability management in exposure management. With that, let me first touch on our financial performance. In the fourth quarter, we delivered strong revenue growth at 24% year over year. In addition, non-GAAP income from operations was $19.9 million, and unlevered free cash flow was $32.1 million, both above expectations. For the full year, our results were well above our initial expectations, with full-year CCB growth of 26% and $67.7 million in income from operations. Additionally, we had another strong quarter with large deals as we added 140 net new six-figure customers, which is a record for us and is up 40% year over year. Even more importantly, the number of six-figure deals accelerated throughout the year, further validating our corporate strategy and demonstration of momentum we're building. As the market leader in vulnerability management, we're seeing great demand in the market, including new customer acquisition, renewals, and expansions. Our years of leadership in VM has put Tenable in a great position to target bigger, more strategic deals as customers continue to move beyond traditional VM to understand and reduce their cyber risk. We believe this is driving the acceleration of six-figure deals. We had strong performance in OT, including a number of six-figure deals. This is an early stage market with tremendous opportunity where we are now proving our ability to close larger transactions. We also saw particular strength in Tenable One, which I will discuss in more detail shortly. At Tenable, we continue to differentiate ourselves as a technology leader by continuing to prioritize investments in product innovation and go-to-market, including our partner ecosystems. Over the last several quarters, we have moved quickly to align our efforts where we see the greatest opportunities in the market. And as our Q4 results indicate, we are clearly seeing success. Our decision to focus our product and go-to-market efforts around a unified platform is resonating in the market. We are incredibly excited by the traction we're seeing since launching Tenable One. Tenable One continues to see rapid adoption, and represented mid-teens percentage of total new business in a quarter. Demand was broad-based as we saw healthy numbers of lands from new customers as well as upsell from existing customers across SC, IO, and Nexus. And despite a tougher macro, we continue to see a material uplift with Tenable One relative to standalone VM. We're also excited to note that customers are allocating Tenable One licenses across more of their attack surface, including their cloud infrastructure, truly leveraging the power of the platform. Collectively, including Tenable One, our exposure solutions now represent approximately 50% of our renewals and new business, up from 40% a year ago. We're able to leverage our leadership in VM for a natural upsell to Tenable One, making us more strategic and driving larger transactions. Spendable One brings a single unified view across VM, cloud security, active directory and identity, and external attack surface management to deliver compelling analytics. Threat actors don't limit their attacks to one silo of technology. They're looking for the right combination of vulnerabilities, misconfigurations, and account over-provisioning that will meet their objectives. Security teams have been operating on point products and specialized solutions, which created isolation within their operations. Tenable One enables collaboration across the entire security stack. It achieves this through enhanced analytics, asset inventory, and building attack path analysis to determine which combinations of vulnerabilities, access and permissions, and misconfigurations could result in paths from external points to sensitive internal targets. Leveraging these capabilities, we believe we offer the first platform to truly operationalize preventative security. Operationalizing preventative security has been an objective in the market for a long time. It's really hard to do and requires a deep understanding of vulnerabilities, context, and prioritization. It's our long history of understanding exposures at a very deep level that uniquely positions us to deliver on this objective. We believe this gives us an edge with our technology and also in helping our customer security teams operate more efficiently. Connecting related points across security issues enables our customers to have broader visibility into risk across siloed security functions. Additionally, in these market conditions, security teams need to do more with less. As Tenable One enables vendor consolidation, we are consistently attracting a more senior economic buyer, which is crucial as investments require more scrutiny. A great example of this is a win with a very large global technology and media company. They were going through a large digital transformation, and they were looking at different vendors to secure their cloud, their external attack surface, and their VM assets. Tenable One enabled them not only to consolidate vendors, but in doing so also unify visibility across asset types. Years ago, we pioneered the concept of exposure management and set out a roadmap aligned with that vision. Tenable One leverages our leadership in VM and realizes the next great step in that vision for managing cyber exposure. Customers and industry analysts alike validate our VM leadership and the importance of cyber exposure. Gartner continues to talk about exposure management as a discipline, in particular, the importance of advancing a cyber exposure management program as critical to developing actionable security posture improvement plans. We believe their commentary aligns very well with the attributes of Tenable One. Additionally, IDC recently published their 2021 VM Market Share Report, highlighting Tenable as the 2021 market share leader for the fourth year in a row. IDC added commentary around the importance of a holistic view and risk prioritization as the number of vulnerabilities is accelerating every year. As the leader in VM and now a platform-first company, we believe we've earned the trust of our customers to be the vendor of choice as they look to cover more of their attack surface. Since the release of Tenable One, we're seeing an immediate interest and adoption of Tenable One for cloud-native use cases. Customers are looking to improve visibility into cloud assets, understand exposures, and manage risk around this portion of their attack services. This provides a means to consistently enforce cloud security posture and compliance across multi-cloud and hybrid environments that is delivered in a single unified platform and is more cost-effective and scalable than continued use of point provider tools. In fact, a great example of this was a Q4 upsell for Tenable One within a large aviation company. They saved budget by converting from another cloud security product and instead expanded from Tenable I.O. to Tenable One. As we look to 2023, we will continue to focus on innovation and innovation we'll continue to increase our investment in quota capacity, enterprise customer support, customer experience, and our partner ecosystem. While making these investments, we're also delivering a strong annual cash flow guide for this year and reiterating our $240 to $250 million in unlevered free cash flow target in 2024. Our ability to deliver profitable growth with investments in innovation and distribution leaves me with great confidence that we will be able to execute on the opportunity in front of us. In short, we're incredibly proud of our ability to execute in this market and look forward to yet another successful year. I'll now turn the call over to Steve for the commentary on our financial results.

Thanks, Amit. We are pleased with our results for the fourth quarter, highlighted by better than expected growth and profitability due to strong customer demand. I will provide more commentary momentarily, but first please note that all financial results we discussed today are non-GAAP financial measures, with the exception of revenue. As Aaron mentioned at the start of this call, GAAP to non-GAAP reconciliations may be found in our earnings release issued earlier today, which is posted on our website. Now on to the results for the quarter. Calculated current billings to find us the change in current deferred revenue plus revenue recognized in the quarter grew 23% year over year to $238.9 million and benefited from strength and vulnerability management and continued momentum with Tenable One, our exposure management platform. Underpinning our better than expected top line results is strong customer demand. Specifically, we added 571 new enterprise platform customers and 140 net new six-figure customers in Q4. While both metrics are exceptional, large deals in particular grew 40% year over year. The takeaway here is the investments we've made over the years to build a vast ecosystem of partners and extend our global reach allow us to effectively serve customers of all sizes in most major markets. for traditional VM or increasingly for unified risk and exposure management. Our Tenable One platform also creates a compelling upsell path for our customers and is benefiting our dollar-based net expansion rate, which remains strong and was 117% in the quarter. While this expansion rate may fluctuate on a quarterly basis, we generally expect it to be within a 110 to 120% range. Revenue was $184.6 million, which represents 24% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $3.6 million. Visibility remained strong, as our percentage of recurring revenue was 95%, which is consistent with prior periods. I'll now turn to expenses, where we are demonstrating notable operating leverage while also continuing to prioritize investments in growth and innovation. I'll start with gross margin, which was 78.5%, a decrease from 81% last quarter. Gross margin for the full year was 80%. As anticipated, cost of revenue increased sequentially, primarily due to higher demand for our cloud-based products, including Tenable One, which was launched in the fourth quarter and includes attack path analysis and external attack surface management. Looking ahead, we expect gross margins for the full year 2023 to be in the high 70% range, with modestly improving margins throughout the year as adoption of Tenable I increases and we absorb the initial costs related to our newer exposure management offerings. Sales and marketing expense was $78.3 million, which was up from $74.5 million last quarter. Sales and marketing expense as a percentage of revenue was 42%, compared to 43% last quarter, reflecting greater efficiency in our go-to-market efforts. Sales and marketing expense reflects higher personnel costs, including payroll taxes, as well as higher sales commissions and variable compensation attributed to our strong sales performance and higher renewal base in the quarter. For the full year, sales and marketing expense as a percentage of revenue was 44%. R&D expense was $28.7 million, which was up from $27.4 million last quarter. R&D expense as a percentage of revenue was 16% this quarter and last quarter. R&D expense increased sequentially, primarily due to lower capitalized software development costs in Q4, subsequent to the launch of Tenable One. For the full year, R&D expense as a percentage of revenue was 16%. G&A expense was 17.9 million, which was up from 16.7 million last quarter. As a percentage of revenue, G&A expense was 10% this quarter and last quarter, as well as for the full year. We will continue to make investments in G&A to support the growth and scale of our business. Income from operations was 19.9 million, 4.4 million above the midpoint of our guided range, due to the better than expected timeline results and greater operational efficiency in our business. Operating margin for the quarter was 11%, which was 220 basis points better than the midpoint of our guidance. Operating margin for the year was 10%. The takeaway here is even in a dynamic environment, we've been able to efficiently invest for growth and expand our operating margins by leveraging our VM market leadership, sizable customer base, and broad exposure management platform. In terms of headcount, we ended the year with 1,900 employees, which reflects a 2% reduction in force in the fourth quarter, resulting in $1.8 million of severance. By aligning our cost structure more closely with our investment priorities, we believe we're well-positioned, as we enter 2023, to capitalize on the opportunities in front of us. All of this resulted in EPS in the fourth quarter of 12 cents, which was approximately 5 cents better than the midpoint of our guided range. Now, let's turn to the balance sheet. We finished the quarter with $567.4 million in cash and short-term investments. Accounts receivable was $187.3 million, and total deferred revenue was $664.6 million, including $502.1 million of current deferred revenue which gives us a lot of visibility into revenue over the next 12 months. We generated 32.1 million of unlevered free cash flow during the quarter and 128.1 million for the full year, which is up from 95.2 million last year. With 95% recurring revenue, high gross margins, and high renewal rates, we feel confident that we can continue to generate attractive levels of cash flow while continuing to invest in the business. I will discuss cash flow in greater detail momentarily. With the results of the quarter behind us, I'd like to discuss our outlook for the first quarter and full year 2023. For the first quarter, we currently expect revenue to be in the range of $186 to $188 million. Non-GAAP income from operations to be in the range of $9 to $10 million. Non-GAAP net income to be in the range of 3 to 4 million, assuming interest expense of 7.5 million and a provision for income taxes of 2.1 million. And non-GAAP diluted earnings per share to be in the range of 2 to 3 cents, assuming 120 million fully diluted weighted average shares outstanding. And for the full year, we currently expect Calculated current billings to be in the range of 915 to 925 million. Revenue to be in the range of 800 to 810 million. Non-GAAP income from operations to be in the range of 86 to 91 million. Non-GAAP net income to be in the range of 63 to 68 million. Assuming interest expense of 31.3 million and a provisioned for income taxes of 9.3 million. Non-GAAP diluted earnings per share to be in the range of 52 to 56 cents, assuming 122 million fully diluted weighted average shares outstanding. And unlevered free cash flow to be in the range of 175 to 180 million. There are a few comments I want to make today that will provide important context to our guidance. We're delighted with our results for the quarter, which gives us a lot of confidence headed into 2023. We beat on the top and bottom line, added hundreds of new customers, and closed a record number of large deals in one of the most highly dynamic markets we've seen in many years. Our unified exposure platform, Tenable One, provides the security analytics and insights to help customers effectively assess risk across the enterprise by building better interlock, across siloed security functions at a time when security teams are being asked to do more with less resources. And while pipeline continues to build, we are mindful of the current spending environment. Accordingly, our initial CCB guidance for the year reflects 18 to 19% growth, which we believe is appropriately cautious given the macro uncertainty. In terms of quarterly flow, we expect modestly lower year-over-year growth in the first half of the year due to our strong quarterly compares last year with modestly higher growth in the second half. In terms of profitability, we expect income from operations for the full year to grow approximately 30% reflecting an 11% margin.

We also expect to follow the same seasonal spending patterns as prior years with incremental investment more in higher operating margins in the second half of the year.

We're also excited to be hosting a live in-person sales kickoff in Q1 for the first time since the pandemic, which is a discrete expense that is reflected in our Q1 guide. With regard to cash flow, our unlevered free cash flow guidance for the full year represents 40% growth, resulting in a 22% margin, which is up from 19% last year. We expect unlevered free cash flow margin to generally ramp throughout the year, with Q3 as our typical seasonal high point. We're very pleased to provide an annual guide for unlevered free cash flow today, but please note that we do not plan to update our guide quarterly, as the timing of collections and payments can vary from quarter to quarter. Our next update is expected to be mid-year on our Q2 call. One final parting comment on cash flow. The strength of our business model enables us to generate this type of improvement while continuing to make strategic investments in innovation and go-to-market. We deliver better than expected and leverage pre-cash flow in Q4. We're providing a strong initial guide, that is, to the year, and we are well on our way to achieving the $240 million to $250 million target for 2024. In summary, we have a lot of confidence in our ability to effectively grow and scale our business and drive higher levels of cash flow. At this point, I'd like to turn the call back over to Amit for some closing comments.

Thanks, Steve. We're very confident in our differentiated technology, our future, and our ability to deliver exceptional results, even in a tough market. We hope to see many of you at the Morgan Stanley Conference in the upcoming weeks. We'd now like to open the call up for questions.

Thank you. And at this time, we will be conducting a question and answer session. If you'd like to ask a question, please press star 1 on your telephone keypad. A confirmation tone will indicate your line is in the question queue. You may press star 2 if you would like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. And one moment, please, while we poll for questions. Our first question comes from the line of Hamza Firewallet with Morgan Stanley. Please proceed with your question.

Hey, guys. It's Matt Saltzman for Hamza. Thanks for taking the question. Just wanted to hit on pipeline for the year ahead. Obviously, we've had a difficult macro situation. There's been some unevenness over the last year in terms of deals closing on time, deals getting pushed. I'm just curious what you guys are seeing kind of for the year ahead. And then also just any incremental commentary that you guys can provide around the federal options.

Thanks. Thanks. We're generally pleased with pipeline. We feel like we've gotten a pretty good rhythm, good understanding of customer buying behaviors. over the last several quarters and able to invest where we see continued opportunity. So prioritization of VM, especially in the enterprise market, and candidly, our ability to move enterprise customers through the tenable one motions as well. So I feel good about PIPE. In terms of federal space, I'd say it's Very consistent with previous years in terms of seasonality, so weighted in what's typically the third quarter, but we feel good about the momentum that we're building and the pipeline that we're building throughout the year, especially in the state and local markets as well.

Is that off, Hamza?

That's it. Thank you.

Our next question comes from the line of Joel Fishbein with Truist. Please proceed with your question.

Thanks for taking my question and great quarter. I mean, I just want to drill down a little bit on 10.01, massive new product cycle. Love to understand, you know, how customers are, you know, Thinking about the attack surface management and also talk about the price uplift. You've mentioned previously 30% plus. Love to just understand a little bit more detail about how that's the go-to-market structure. I know you're doing the sales kickoff this year, so 23 could be a really good year for that. But any color you can provide would be really helpful. Thank you.

Yeah, I think directionally still looking at that 70%. So we haven't updated that figure, but directionally consistent with with what we've seen previously with Tenable One. And I'd say both the sales team and the customer base seem to be gravitating to it. It's a double-digit percentage of new sales and increasing high single-digit percentage of existing customers now on Tenable One. I think the message resonates. It makes sense. They can look at a more complete understanding of cyber exposure, a more complete perspective of risk. a much more compelling set of analytics, including attack path analytics and asset inventory types of things, which they haven't historically gotten with the vulnerability management program. The other piece is it allows us to do spend and vendor consolidation. So by increasing their Tenable One spend to cover not only traditional VM, but also looking at cloud-based assets, or also looking at their identity, we can offer them some volume-based pricing, which ends up being much more attractive than going to one vendor for VM, going to another vendor for external attack surface management, going to another vendor for cloud security. So we're seeing great leverage in go-to-market function, and it really has been resonating with customers. We expect that trend to continue, if not accelerate.

And Joel, this is Steve. As a matter of clarity, the uplift we're getting on Tenable One, we've said in the past is 70% and this quarter was no different. So we're getting a substantial uplift. We're transacting larger deals. And it's one of the reasons why we're having great success adding lots of large customers.

Great. And just one quick follow-up, Steve, just a remit. OT is obviously a very big opportunity. I think, you know, I know we're early days, and it feels to me to be greenfield. Can you just go through the competitive dynamics in some of these OT deals? And, you know, what inning are we in with regard to, you know, this OT opportunity?

Yeah, I'd say we're probably still, you know, we're probably in the second inning at this point. You know, if we rewind the clock a couple of years as questions would come up about OT, what we'd say is we've entered, you know, some small procurements. We've entered pilot or phase one deployments where they're looking at a couple of factories, a couple of facilities. trying to operationalize the data and the workflows that come along with the OT product. And over the last couple of quarters, what we've said is we're seeing some follow-on deals, global types of deployments, six- and seven-figure types of transactions. So we're seeing that momentum build. I think we're still early in the market, and it's a market that – you know, that doesn't move as fast as the IT market, but it's very deliberate. And I think the spending is very real. In terms of competitive dynamics and competitive landscape, I'd say we're predominantly competing against, you know, just a small number, two or three private, you know, pure play focused vendors in the OT space. We feel like our technology is compelling and really leads the market when it comes to looking at the converged IT, OT environment. So if you look at a factory floor today, or if you look at pipeline operations or other OT environments, they are not exclusively OT. They have a those factory floors as well. And so we're, I think, unique in our ability to deliver incredible insight for overall risk of facility, which would include both OT and IT. And we think it's a significant competitive advantage for us.

Thank you so much.

Our next question comes from the line of Brian Ethics with JP Morgan. Please proceed with your question.

Hi, good afternoon, and thank you for taking the question. Maybe, Amit, just to kind of follow up on your spending environment, any incremental color you can or additional color you can provide in terms of maybe how you've seen customers react to macro headwinds in the past and what's different now? Do they tend to maybe approach asset coverage a different way? And, you know, does that maybe impact your ability to expand on the asset coverage side and Maybe how is it as you're seeing adoption of Tenable One and EP, does that insulate you somewhat from that kind of environment? Maybe if you kind of touch on that a bit.

Brian, great question. You know, we had a very successful quarter from an expansion business perspective, from a net dollar expansion business perspective. So we are seeing customers expand significantly. both the number of assets we're covering for them as well as through Tenable One in particular, seeing the different types of assets where they're allocating licenses to more cloud security identity or other areas where we had smaller presence in previous periods. I think the sales team has gotten... into a pretty good rhythm in terms of identifying how to identify opportunities, how to hunt for the budget, and identify the new workflows in customer environments that are required in order to transact business. Again, if you rewind the clock three quarters or so, we said, hey, we're seeing elongation of sales cycles. We're implementing more rigorous inspection, med-pick processes across our sales forecasting, and I think those are paying off. I think the sales team feels more confident in transacting business in this environment. It's a tougher macro, and it's just the reality we're operating in. But I think we feel pretty good about both Pipe and our ability to close transactions.

Got it. That's real helpful. We'll keep it to that one. Thank you.

Our next question comes from the line of Rob Owens with Piper Sandler. Please proceed with your question.

Great. Thanks for taking my question. Could you speak to just how the quarter progressed, I guess, from a linearity standpoint? And to that end, Steve, maybe anecdotes around the different puts and takes regarding conservatism on the 23 numbers. Just, you know, what you discounted, what you took into effect there. Thanks.

Hi, Rob. Good questions there. First, I would say we had a strong finish to the quarter. We closed a lot of deals in December and especially the last couple of weeks. That said, our quarters continue to be very back-end loaded, more so than what we typically see. I believe this is a consequence of the macro as customers continue to scrutinize budgets and evaluate spending priorities. We think cyber exposure fails us. pretty well in this market but increasingly customers are waiting to see how their quarters play out before committing to to a purchase so uh so so i think the takeaway here is that linearity is certainly a little more back-end loaded now um than what we've seen in in prior quarters you know and in terms of Our guide, our CCB guide, as we head into 2023, first, we have a much tougher compare, particularly in Q1, where we grew CCB 31% last year. We're assuming the macro will continue to be challenging and potentially even deteriorate. further and that's reflected in our guide look overall i think we're pleased with the progress on the quarter adding lots of new customers adding lots of large customers pipeline levels are healthy but I think we're trying to take a cautious approach here. As we said, guidance initially out of the gate, and obviously there's a lot of selling left in the year, and we're encouraged with our progress to date, and we'll have to see how the rest of the year plays out. But we feel very good about our business and have a lot of confidence in our ability to be successful in this dynamic environment.

Great. Just the one for me. Thanks.

Our next question comes from the line of Andrew Nowinski with Wells Fargo. Please proceed with your question.

Hi, this is Justin Donati on for Andrew. Thank you for taking our questions. So congrats on a good quarter. When you were talking about the pipeline, you specifically spoke about strength with your enterprise customers. Just wondering if you're seeing any difference in terms of buying behavior between your mid-market customers versus your enterprise customers? Thank you.

No, I think we saw strength pretty much across the board, including in the mid-market customers as well. If anything, on the enterprise side, maybe just slightly smaller in the net new lands, but continued health in the number of new lands and the expands and certainly strength in the mid-market as well.

Great. And then just as a quick follow-up, you talked about your continued investments in your go-to-market. Just wondering what your plans are for sales hires in the coming year and if you're expecting that to be more front-end loaded or if you're taking a slightly more conservative approach this year.

Well, first and foremost, we are planning to hire in 2023. I think it's fair to say adding more quota capacity. Our expectations that we're going to add more quota capacity in 23 that we did in 22. We have a lot of confidence in our business and investments are certainly a big part of that and obviously continue to double down on innovation and invest in product as well. We've been very active from a product perspective and bringing new products to market We did talk a little bit about on the call the factors that kind of influenced the timing of those investments. You know, first is hiring. You know, we tend to front load our hiring early in the year. So, you know, more of the hires will come online the first half of the year and specifically with Q1. We also have a number of industry and other events in the first half of the year, such as our annual sales kickoff. which will be live in-person event this year, RSA and many others. So clearly making a lot of investments. We're very pleased to be offering the guide in terms of operating margin and cash flow that we're providing today. And we have a lot of confidence in our ability to continue to drive further margin leverage.

I appreciate the color.

Our next question comes from the line of Mike Asikos with Needham & Company. Please proceed with your question.

Hi, guys. Thanks for taking the questions here. I did want to touch on the customer behavior. I know you answered some earlier questions with respect to enterprise versus mid-market and obviously the strong expansion we've spoken to. But for sales cycles, and that's really what I'm driving at here with the customer behavior, have they been relatively stable versus what we spoke about in Q3, or have we seen any elongation anyway on that front? And maybe it would be helpful, too, if you could kind of pepper in any color when thinking about geographic theater. Hey, Mike, great to hear from you.

We have not seen any elongation or any significant change in sales cycle since what we spoke about in Q3 of last year. And I think that allows our sales team to just have continued confidence in their adjusted sales processes and forecasting methodologies. In terms of geos, I think last year we called out some peculiar behaviors in geos. At this point, I think we're seeing fairly consistent performance across all major theaters and geos.

That's great.

And one more, if I could. But I did just want to ask about, just given the fact that we're almost halfway through it already, Can you provide any additional color for how customers have put together their cybersecurity budgets as we think about calendar 23? Obviously, we're all talking about the increased scrutiny here, but curious since cyber is perceived as being this more insulated sector, what have those customer conversations been like? And just a real quick housekeeping to tap on to the end of that, but Steve, I know you spoke about the annual sales kickoff in Q1 as being in person. Is there any way to quantify how much of an expense that item is? Are we talking about an incremental $2 million to $3 million, or any color on both those fronts would be beneficial? Thank you.

Yeah, I'll provide a little bit of color here on both your questions. I think Amit will interject with maybe some color commentary on customer spending and budgets for 23. You know, first with regard to, I think your question was like, you know, how does it look here out of the gate? We're encouraged by what we saw in January and very, you know, very encouraged, but that's reflected in our outlook today. And obviously March will be determinative given typical monthly, you know, flow for us. The other thing I'll say, you know, with regard to sales kickoff, you know, the quantum of that investment is much larger than $2 million. We're talking north of $5 million. So it's a large, discreet item. We're very pleased to be doing a live in-person sales kickoff this year for the first time since the pandemic. And, you know, our sales team is really excited about it, as well as the rest of our company. Obviously, it's factored in our guidance. And our guidance, we believe, is strong out of the gate with regard to margins and cash flow. And our expectation is that Operating margins will improve throughout the year, consistent with what we've seen in prior years.

Yeah, I think the only thing I would add to it is that, you know, the VM market remains, you know, very healthy. We see customers continuing to expand their VM coverage. And we're also seeing great traction, especially with Tenable One around cloud security. We called out strength in our OT market. sales during the course of the quarter so customer budgets are there i think to the extent that we can become a cost effective vendor consolidation platform play for them there's a lot of interest a lot of strategic dialogue around that and i think customers are very excited about some of the newer analytics that we've introduced with uh with tenable one so you know we'll look forward to updating you during the course of the year but I feel like Temple 1 looks like it will continue to play a larger and larger factor throughout the year and going into next year.

That's great to hear. Good to see the profitability guide and the reiterated unlevered free cash flow guide when we think about calendar 24 as well. I'll turn it over to my colleagues, but thank you.

Our next question comes from the line of Saket Kallia with Barclays. Please proceed with your question.

Okay, great. Hey guys, thanks for taking my questions here. I mean, maybe just start with you, and apologies if it's already been addressed, but I was wondering if you could just talk about how customers look at the ROI from a platform like Tenable One. You know, it includes so much more kind of additional valuable product that lowers the risk profile, but I'm curious, when you talk to customers about Tenable One, how are they sort of thinking about ROI?

Great question. There's a couple of obvious and a couple of non-obvious answers to it. I think the most obvious is just from a vendor consolidation cost reduction standpoint. So if you're using Tenable for VM, let's say a random example, you have 30,000 assets and now you want to also look at your cloud security requirements, your Active Directory requirements. If you're going to a separate vendor for those solutions, you're spending unit one through 10,000 on cloud assets and one through 8,000 on Active Directory in addition to the one through 30,000 on VM. Whereas if you're consolidating your spend with Tenable and Tenable One, you can buy, you know, at volume discount, it's one through 50,000 on tenable one. And so the leverage in budget and spend through vendor consolidation is very meaningful, which in today's macro environment and what's happening with scrutiny of budget, we think is compelling differentiation for us. The second is in the analytics. We simply are able to bring more analytics and unified analytics to the table than going to disparate vendors. So for instance, building an asset inventory everywhere a particular piece of software exists across your environment, anywhere a vulnerability exists across your environment, whether it's on-prem, in cloud, or other places, uh you know we think is is very compelling prioritizing what needs to be addressed we think can be a compelling differentiation looking at attack path analytics so saying hey what is the path what are the various paths of systems and vulnerabilities and users and permissions that could get me to this sensitive internal asset from my external attack surface from internet facing assets is a pretty compelling differentiator compared to buying individual and stovepipe solutions. So we think both from a value and analytics standpoint, as well as a vendor and cost consolidation standpoint, the platform approach to understanding exposure and risk just makes sense. And that's why we're seeing both the sales team and customers really gravitate toward it.

Got it. Got it. That makes a lot of sense. Steve, maybe from a follow up for you again, apologies if this was talked about, but can we just talk a little bit about gross margins for, for 23, you know, that was, that was down sequentially in Q4. I'm guessing that's from, from hosting costs, but curious how you think about that here in 23 as tenable one, presumably becomes a bigger part of the business.

Sure. Uh, great question, Zach. It, um, you know, gross margin in the fourth quarter came in as expected. and is impacted by the recent launch of some new products for us. One is ASM, which is a new use case. The cost of domain attribution is something we can leverage over time as we see higher penetration rates. Also, with Tenable One, we have a more robust cyber asset inventory, which is critical to supporting functionality such as attack path analysis and lumen exposure view. So these are new areas of innovation, come with some initial semi-fixed costs that we expect to fully absorb over time, you know, and that's certainly impacting gross margins. Overall, very pleased with gross margins, and we said on the call that we expect gross margins to kind of stay in the high 70% range for 2023, and we expect gross margins to improve during the course of the year.

Very helpful. Thanks, guys.

And as a quick reminder, if anyone has any questions, you may press star one to join the question and answer queue. Our next question comes from the line of Mike Walkley with Canon Corriginuity. Please proceed with your question.

Great, thanks. My congratulations also on the strong close to the year. Amit, when you study your customer base, what percent do you believe will ultimately upgrade to tenable one? While it's high single digits of the base currently, where could that penetration go over the next couple years at the should be a strong source of sustained growth?

Yeah, it's a great question, and I think obviously there's tremendous potential. We're putting a lot of focus on it as a company. The leading indicator for that would be our new sales, and what we're seeing is you know, high teens percentage of new sales coming in on Tenable One. So, you know, over time, as long as that continues to remain healthy, we would see a larger and larger percentage of customers moving to Tenable One. You know, where it could go long-term remains to be seen, but, you know, we're pretty excited about the potential.

Okay, great. And just a quick follow-up question. You know, any changes in the competitive environment entering 2023, one year ahead, competitors potentially putting themselves up for sale. And you guys certainly have a lot of momentum with tenable one, just any change in the competitive environment that seems more favorable as you enter 23.

Yeah. I mean, obviously we wouldn't, wouldn't speculate about that, but you know, feel really good about the competitive environment. You know, we, we are pretty consistent, you know, saying that we have exceptionally strong win rates and, especially in, you know, this market and against our primary competitors. That remains, you know, those win rates remain exceptionally strong. And, you know, while we don't have a specific update to that, I'd say anecdotally, you know, continues to climb and the sales team feels exceptionally confident going into any VM opportunity that those are really ours to lose. And candidly, they feel like Tenable One gives them a very significant value differentiated capability to talk about as well.

Great. Well, I hope your in-person event goes well, and thanks for taking my questions. Great. Thank you.

Our next question comes from the line of Jonathan Ho with William Blair. Please proceed with your question.

Hi. Good afternoon, and let me echo my congratulations as well. I wanted to maybe dig in a little bit into the Active Directory and identity products. Can you talk a little bit about what you're seeing in terms of demand there and maybe the potential for that to be a larger product set over time as well?

We think there's tremendous market potential there. As you know, John, if an Active Directory is target number one for hackers, whether it's a nation state adversary, as we saw in the Mandiant breach, or whether it's ransomware, where over 90% of ransomware is going directly after domain controllers and Active Directory. Active Directory is a freaking mess to deploy in any large environment. And almost impossible to keep clean when you look at the number of pieces of software and the complexity of Active Directory, the number of pieces of software which modify it as they get installed into enterprise environments. So having a solution – and most organizations don't have a solution in this area. The security teams know it's a big problem. They maybe do a consultant and an annual audit or assessment of their Active Directory environments, which is – you know clearly not not enough so we feel like there's tremendous market opportunity the sales team has a lot of confidence in the active directory product and bringing it into customers we had a great quarter with active directory in q4 so excited about the potential both in 2023 as well as uh active directory playing an increasingly large role in in tunnel one and some of the analytics that we're unlocking with uh with active directory and identities

Great. And just as a follow-up for Steve, I think there was a small reduction in force. Can you maybe give us a little bit more detail on the RIF and maybe what that means in terms of your margins, maybe where some of the cuts came from? Thank you.

Yeah, it was fairly broad across many functional departments, really with an eye towards improving operational efficiency and better aligning our cost base with the market opportunity that's in front of us. And we felt like we're in a great position this year to make investments, as Amit talked about earlier, making investments in terms of product and adding lots of quota capacity. And then one of the comments I made earlier was our expectations that we're going to have more quota capacity in 23 than we did in 2022. Obviously, the demand environment remains highly dynamic, but we've done a good job over the years balancing growth with profitability driving margin leverage and achieving sustainable levels of growth.

Thank you. Our next question comes from the line of Joshua Tilton with Wolf Research.

Please proceed with your question.

Hey, guys. Thanks for taking my questions. My first one is kind of high level, but the feedback from the channel, I guess, throughout last year on VM, I would say, has gotten incrementally worse. each quarter. But if we look at your guys' results, it sounds like you guys have almost gotten incrementally better, especially in regards to your six figure ads. Could you maybe kind of just help us reconcile those data points?

Yeah, in terms of the channel checks, I hate saying this, but we don't see it. Our channel partners remain very bullish on VM and very bullish about their ability to differentiate Tenable as the leading VM vendor and provider and feel bullish that their customers are looking to expand their VM capabilities as more and more executive questions are asked of security programs. Are we vulnerable? Where are we vulnerable? Are we exercising good standard of care? Are we patching our systems quickly enough? Are we being negligent? I think answering those types of executive questions really comes from your VM program, not from your firewall, not from your endpoint or your logging solution. As more executives are asking questions of cyber, we feel like it bodes well for VM. We're seeing that in our results. We're seeing that in our conversations with customers. And Tenable One allows us to have even more strategic conversations across a broader set of asset types. So we've remained committed to the VM and cyber exposure market. And I think given both our results and our confidence and what we're seeing in in our own conversations with customers and channel partners, we will remain committed to and increasingly invest in that strategy.

Yeah, and the one thing that I'll add is keep in mind that we transact sales in 160 countries. We have hundreds of channel partners, and so I can't speak to the channel checks, but sometimes if you're talking to a partner or a contact, they may only have a very specific view. into our business or maybe even to the VM market. And also our exposure solutions collectively represent about 50% of our total sales. So over the years, we've done a really good job becoming more strategically relevant to our customers, broadening the focus, and we're having success selling a platform and playing in larger market opportunities such as cloud security and even identity and security analytics, which are top spending priorities and paying points for our customers this year.

Makes sense. And then just a quick follow-up. It sounds like you guys are definitely communicating that the initial CCB guidance for 23 is, in your opinion, de-risked. I think you talked about that it assumes the macro actually gets worse. Is there anything else outside of that that you can just, you know, quantify or take one level deeper in terms of what exactly inside the guide is more de-risked? Maybe, you know, expansion versus new business, where you expect NRR to kind of shake out, anything else you can kind of talk to in the 23 guide that should help us feel like those numbers are de-risked?

Yeah, we think our CCB guide for the year is good, but we described it as cautious, and we think that's the right... approach to have in a market like this, the tally dynamic, right? Each quarter is different in its own right. And our expectation going into 2023 is that the macro will remain challenged and perhaps will even worsen, you know, the first half of the year. So we want to be prepared for whatever comes our way. We've done a good job over the past several quarters, really identifying opportunities where, you know, where we're, where we have success, larger closing, larger deals, and some verticals are stronger than others, as we've talked about earlier. And, Tech was particularly strong for us, financial services, You know, all of those. So we have a good sense of what's working really well for us. I think with regard to the guide, I think we're just taking a more cautious approach and we're assuming that, you know, the macro could potentially impact close rates and maybe even renewal rates. But what I will say is that our renewal rates continue to remain strong. Upsell was very strong in the quarter. We did add lots of large deals. But, you know, our expectation is that new lands for new logos could be tougher to transact in 23. Thanks, guys.

Appreciate the update.

Our next question comes from the line of Rudy Kessinger with DA Davidson. Please proceed with your question.

Hey, thanks for taking my questions, guys. Certainly a lot of talk about tenable one and good traction there. I think it was last quarter. maybe the quarter before you guys started talking about the Salesforce really leading with that product as opposed to leading with VM. Just where are we in that evolution? I don't know if you can speak to maybe the percent of deals or cycles where your reps are leading with 10 of one as opposed to VM, but just how has that changed over the last six months?

Yeah. I think the sales team has a lot of confidence in the product. seeing the customer traction and the results that customers are experiencing with tenable one gives them an increasing level of confidence uh you know today it remains a you know teens percentage of of new sales but obviously in the pipeline you know pipeline is more heavily weighted toward tenable one and we expect that to continue to accelerate um with sales kickoff and more training and more time and more differentiation.

Got it. And then secondly, you talked about vendor consolidation playing out as a positive for you guys. I guess I'm also curious, there are some other kind of larger, broader cyber platforms out there that have thrown in a VM product in the mix over the last couple of years. I'm curious if you're seeing vendor consolidation maybe hurt you in some cycles with some of those larger platforms out there throwing in the end products.

Yeah, you know, there's been a lot of vendors over the course of years making a lot of noise about, you know, VM, you know, going back four or five plus years, you know, Tanium, CrowdStrike, Microsoft, others. And what I would tell you is, you know, they make noise. We see them for a quarter or two and then very quickly their sales team understand that their products are inferior and they start gravitating to Their core markets and candidly where their companies are investing much more aggressively logging sim and and elsewhere so especially in a product like VM or independent audit is is an important function and where a We feel like we've got a quantitatively and qualitatively differentiated product and experience in understanding the enterprise. We almost never see those larger IT vendors participating and certainly never see them beyond a first phase of competition. I guess the only other thing I would add to that is, you know, obviously our footprint is broader than VMs. So if customers are really looking to understand cyber more broadly than, you know, even other solutions which offer VM capability are not really competitive. And our cyber exposure solutions now represent, as Steve said, 50% of our sales. Got it. Thanks for squeezing me in.

And our next question comes from the line of Shabli Sayrafi with FBN Securities. Please proceed with your question.

Yes, thank you very much. So were there any call-outs on the geo side? EMEA, for example, growth there was decelerating the last two quarters. You have a tough comp in Q1 and EMEA as well. Just any call-outs on the geo side?

No, I think on the geo side, what we just said earlier is that all theaters performed pretty much to expectations in both enterprise and commercial segments. So felt good about the international markets and the balance of our international performance.

Okay. And separately, you had a 2% headcount reduction in Q4, but... and I think you said 1,900 employees for the end of the year. I think that's up 10% or so year to year. What's your expectation for a headcount growth and B, quote, a caring salesperson growth in 23? Sure.

Well, we provide headcount at year end following our Q4 results, so this is not a number we provide for the upcoming year as part of our annual guidance, but As we discussed earlier, we are hiring and we're planning to make investments, most notably in product and go-to-market. In terms of quota capacity, we expect to have more quota capacity in 2023 than we did in 2022, unequivocally. We have a lot of confidence based on the results of not only this quarter, but the past couple of quarters. So we're adding lots of customers, transacting lots of large deals. You know, the takeaway here is the business climate is pretty fluid. And so we're constantly reassessing investment priorities. But as we discussed earlier, we're going to add headcount. Look, we're in the fortunate position to make these investments in 23 because. We grew our workforce very thoughtfully since the pandemic. Our workforce grew in total 28% over the last three years, which puts us in a great position to invest this year while still delivering margin improvement. So we think we're doing a good job aligning our cost base with the investment opportunities that are in front of us.

Thank you. And ladies and gentlemen, we have reached the end of the question and answer session, and this also concludes today's conference, and you may disconnect your lines at this time. Thank you, and have a good day.