Tenable Holdings, Inc.

Greetings and welcome to the Tenable First Quarter 2025 Earnings Conference Call. At this time, all participants are in a listen-only mode. A brief question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. As a reminder, this conference is being recorded. It is now my pleasure to introduce your host, Erin Carney, Vice President of Investor Relations.

Thank you.

You may begin.

Thank you, Operator, and thank you all for joining us on today's conference call to discuss Tenable's first quarter 2025 financial results. With me on the call today are Co-Chief Executive Officers Steve Vince and Mark Thurman. Prior to this call, we issued a press release announcing our financial results for the quarter. You can find the press release on our IR website at tenable.com. We will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for the second quarter and full year 2025, growth in drivers in our business, changes in the threat landscape in the security industry and our competitive position in the market, growth in customer demand for and adoption of our solutions, including Tenable One, cloud security, exposure management, our ability to expand integrations with third-party tools and data sources, including new capabilities from our Vulcan acquisition, planned innovation and new products and services, and our expectations regarding long-term profitability and free cash flow. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. And we disclaim any obligation to update any forward-looking statements or outlook. For further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent annual report on Form 10-K and subsequent reports that we file at the SEC. In addition, all of the financial results we will discuss today are non-GAAP financial measures with the exception of revenue. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalent. Our press release includes GAAP to non-GAAP reconciliations for these measures. I'll now turn the call over to Steve.

Thank you, Aaron. We're excited to share our strong results for the quarter, discuss customer and end market dynamics, and provide our outlook for the remainder of the year. Before delving into these areas, I do want to acknowledge that Mark and I are honored to be named co-CEOs. We are committed to advancing our exposure management strategy and accelerating the expansion of our market opportunities. I also would like to welcome Eric Doerr as our new Chief Product Officer and thank Shai Morag for leading the product organization over the past year and helping us at an important time. I'm very excited that Eric is joining us as he brings nearly three decades of experience at Microsoft and Google, building and scaling security products and in leadership and developing innovative security solutions aligned perfectly well with Tenable's mission. With that, I'm pleased to say we're off to a great start to the year. This quarter, we beat all of our guided metrics on the top and bottom line, We delivered 11% growth year-over-year and a 36% unlevered free cash flow margin, which reflects our balanced growth approach and ability to drive continued operating leverage in the business. Our outperformance in the quarter also reflects the continued momentum with our exposure management platform, which drove acceleration in new sales due to a high conversion rate with large deals. In fact, this was our best quarter ever for seven-figure wins. and Tenable One was certainly the catalyst for that success. It's also worth mentioning that on our February call, we highlighted the potential for a more modest Fed contribution this quarter due to uncertainties related to the change in the administration, and that played out as expected. Clearly, enterprises are becoming more thoughtful and strategic in how they invest. These organizations are growing with us, adopting Tenable One to identify, prioritize, and remediate exposures across an expanding attack surface and diverse asset types. As a result, we're seeing increased opportunity, larger deal sizes, broader platform adoption, and greater asset coverage. What's clear is that few vendors can deliver solutions that address the needs of an enterprise operating in a complex multi-cloud hybrid work environment. This is becoming increasingly more important. Our platform addresses a rapidly evolving world where customers are constantly evaluating the right deployment model to fit their needs. In fact, we're making great progress executing on our product roadmap as we continue to find ways to break down longstanding security silos and give organizations a more unified way to reduce risk. A top priority is expanding integrations with third-party tools and data sources, including new capabilities from our Vulcan cyber acquisitions. These integrations feed Tenable One's analytics engine with rich data from application security tools, code repos, and more, broadening the intact surface visibility and sharpening prioritization so customers can focus on what matters most. Now, the same rich contextual data is also the foundation of our AI strategy. The power of AI lies in the quality, diversity, and history of the data it learns from. And this is where we see a decisive advantage. We believe no vendor in the market can match the depth and breadth of our exposure data we've assembled over the past two decades. This gives us a real competitive moat with a uniquely comprehensive view of risk, spanning assets, vulnerabilities, misconfigurations, identities, and more. And that's why we think we are positioned to lead in AI-powered exposure management. We're working toward building the most intelligent, scalable, and complete exposure management solution on the market. With these advancements, Tenable One is evolving from a system of record to a system of action, closing the loop on exposure management by not just identifying risk, but also by helping customers act on it in real time. A great example of this is our recent research into the security posture of AI workloads. Our research team found that 70% of cloud workloads leveraging AI services contain unresolved vulnerabilities. This isn't just an interesting data point. It's actionable intelligence that we operationalized in Tenable One. We're also seeing growing momentum in our AI-aware discovery capabilities, with many of our customers using Tenable to help secure their expanding AI footprint. While the broader market for securing AI is in the early stages, Tenable is already delivering at scale. In Q1 alone, Tenable One detected 22 million AI-related applications. up from 14 million in the prior quarter. We identified over 160 million instances of AI-embedded browser plugins. These are not just numbers. They're a testament to Tenable's ability to help customers stay ahead of the emerging threats tied to AI. We're also investing heavily in remediation to tie exposures to fixes. We're expecting to roll out powerful new capabilities, including bi-directional ticketing and automated workflows to help customers close risk faster with greater accountability across fragmented environments. In short, we're executing on our strategic initiatives that we outlined at the beginning of the year by accelerating innovation in our platform and expanding our footprint in cloud. We're also already seeing progress in both these areas. While there's a lot of uncertainty in this macro, we continue to be a very valuable partner to our customers by helping them reduce risk with greater efficiency across the enterprise. I now like to turn the call over to Mark.

Thanks, Steve. Steve underscored a critical point. Our leadership in vulnerability management is not only holding strong, it's driving real acceleration and tenable one adoption. Our customers are taking this journey with us. As the threat landscape has evolved, so has the mandate of exposure management. It's no longer just about finding vulnerabilities. It's about understanding how those risks connect across your entire environment. That's why we made deliberate strategic investments to expand Tenable One into a comprehensive exposure management platform. And our customers are responding. This quarter, that partnership was on full display with major Tenable One expansions across industries. We had strong win rates against major players in the VM, EM, and cloud space. This is a direct result, not just of extending our leadership, but reshaping what exposure management looks like. In Q1, we secured a major federal win with the organization undertaking a global modernization effort. The organization is using Tenable to manage over 1 million assets globally. Hosted in a private cloud environment, our solution is providing them scalable, centralized visibility, and consistent risk insights across the global footprint, an essential foundation for enhancing their overall security posture. Beyond the public sector this quarter, we also secured a seven-figure expansion with a global financial institution. This institution was an existing tellable customer, underscoring the value of delivering in a highly regulated industry. These organizations need a unified, comprehensive view of risk, particularly as they prepare for regulatory audits. In this case, the customer upgraded to Tenable One to support both audit readiness and vendor consolidation across a complex attack surface. The deal includes hundreds of thousands of assets, reflecting a broad market shift. Customers want to centralize control of their environments, and they're turning to Tenable to make that happen. We believe this also opens up significant opportunities as customers are beginning integrating third-party security data into Tenable One, giving them a more complete picture of risk and fueling momentum for platform consolidation and upsell. By combining our first-party assessments with third-party inputs, we're making it even easier for organizations to manage their full exposure landscape through a single platform. Another significant new customer win that underscores the momentum behind our unified platform strategy and the value of our Vault One acquisition was with a Fortune 100 customer. This customer has selected Tenable as their North Star for exposure management as part of a broader cybersecurity consolidation effort. They're replacing multiple vendor solutions, choosing to standardize on Tenable One. The ability to ingest third-party data combined with first-party assessments was the differentiator for this customer, as it allows us to deliver insights on holistic risk. We consider this multi-year commitment as a strong validation of our ability to deliver integrated, high-impact solutions that align with enterprise needs for simplicity, consolidation, and clear ROI. As we've said many times now, we see cloud as a critical pillar of exposure management. And this quarter showed exactly why. We landed a seven-figure deal with a global software and services company operating in over 180 countries. With a massive multi-cloud environment spanning AWS, Azure, GCP, and OCI, they needed a smarter, more scalable way to manage risk across their cloud footprint. With compliance pressure rising and thousands of assets to secure, they launched a competitive review of multiple vendors to replace their Microsoft deployment. Tenable came out on top for our fast deployment, seamless multi-cloud integrations, and real-time visibility and control across their cloud infrastructure. In under two months, we proved our value. We are managing tens of thousands of cloud resources and thousands of identities, helping them strengthen their overall security posture while laying a foundation for more unified exposure management strategy. The takeaway here is we're seeing exceptional momentum in exposure management and believe we are best positioned to help our customers evolve their solution stack as they implement modern technologies such as cloud, AI, interconnected IT-OT systems, and hybrid environments. With that, I'll turn it back over to Steve to dive deeper into our results for the quarter.

Thanks, Mark. I'll now turn to our results in the quarter, which, as a reminder, includes the impact from the acquisition of Vulcan. Calculated current billings defined as revenue recognized in the quarter plus the change in current deferred revenue grew 9% year-over-year to $215.4 million. As discussed earlier, this outperformance was largely driven by Tenable One, including cloud security. Current RPO grew 13% year-over-year, 400 basis points ahead of CCB growth, as backlog accelerated during the quarter. During the quarter, we added 361 new enterprise platform customers, and our LTM net new six-figure count was 54. Our net dollar expansion rate was consistent this quarter at 108%, and our overall renewal rates remain strong. Now onto the P&L for the quarter. Revenue was $239.1 million, which represents 11% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $5.1 million. Our percentage of recurring revenue remains high at 96% this quarter. Gross margin was 82% this quarter, flat relative to last quarter and in line with expectations. Going forward, we continue to expect gross margins to be in the high 70s to low 80% range. While we're investing to deliver enhanced functionality and analytics to customers, the scalability of our platform has enabled gross margins to remain constant. Sales and marketing expense was 85.5 million, up from 80.1 million last quarter. And as a percentage of revenue, sales and marketing was 36% compared to 34% last quarter. Sales and marketing expense was higher sequentially on an absolute dollar basis and a percentage basis primarily due to the cost associated with our annual sales kickoff conference in February, partially offset by lower sales commissions from a seasonally lower renewal base in the quarter. Looking ahead, we expect sales and marketing as percentage of revenue to be modestly higher in Q2 due to the industry events and other investments we're making, including sales capacity, and trend lower in the second half of the year. R&D expense was $39 million, which was up from $32.5 million last quarter. R&D expense was higher this quarter in comparison to last quarter, primarily due to increased personnel costs resulting from the Vulcan acquisition, as well as the foreign tax credits we received last quarter. As a result, R&D expense as a percentage of revenue was 16% this quarter, up from 14% last quarter. We expect R&D expense as a percentage of revenue to increase in Q2 due to a full quarter of Vulcan costs with improved margins the second half of the year. G&A expense was $22.7 million, which was up from $20.5 million last quarter, primarily due to compensation expense associated with the passing of our former CEO and payroll taxes, which reset at the beginning of the year. G&A expense as a percentage of revenue was 9% this quarter, which was flat relative to last quarter. Income from operations was 48.7 million and exceeded the midpoint of our guided range by 7.7 million. Operating margin for the quarter was 20%, which was approximately 300 basis points better than the midpoint of our guided range. We're very pleased with our ability to drive continued leverage in the business while investing for growth. EPS for the quarter was 36 cents a share, which was 9.5 cents better than the midpoint of our guided range. Now let's turn to the balance sheet. We finished the quarter with $460 million in cash and short-term investments, reflecting $149 million of net cash used for the Vulcan acquisition. Accounts receivable was $168 million, and total deferred revenue was $808 million. Deferred revenue was $633 million, which gives us a lot of visibility into expected revenue over the next 12 months. We generated a record $87 million of unlevered free cash flow during the quarter. While this quarter's result was influenced by seasonal timing of collections from Q4 sales, we feel confident that we can continue to expand our operating and free cash flow margins over the ensuing years, as we have done so every year since our IPO. During the quarter, we repurchased 1.6 million shares of our common stock for an aggregate purchase price of $60 million. In total, we've repurchased almost 4.3 million shares for $175 million since November of 2023 and have $125 million of remaining authorization. Now, with the results of the quarter behind us, I'd like to discuss our outlook for Q2 in the full year 2025. For the second quarter, we currently expect revenue to be in the range of $241 to $243 million. Non-GAAP income from operations to be in the range of $43 to $45 million. Non-GAAP net income to be in the range of $36 to $38 million, assuming interest expense of $7.1 million, interest income of $4 million, and a provision for income taxes of $3.2 million. And non-GAAP diluted earnings per share to be in the range of $0.29 to $0.31 a share, assuming $123 million fully diluted weighted average shares outstanding. For the full year, we currently expect calculated current fillings to be in the range of $1.25 billion to $1.45 billion. Revenue to be in the range of $970 to $980 million. Non-GAAP income from operations to be in the range of $205 to $215 million. Non-GAAP net income to be in the range of $178 to $188 million, assuming interest expense of $28.4 million. interest income of $16.8 million, and provision for income taxes of $13.1 million. Non-GAAP diluted earnings per share would be in the range of $1.44 to $1.52 per share, assuming $123.5 million fully diluted weighted average shares outstanding, and unlevered free cash flow in the range of $265 to $275 million. While we're off to a great start for the year and see real momentum in our business, There is clearly more economic uncertainty in the market now than at the beginning of the year. As a result, we are taking an incrementally more cautious approach with our outlook today. Specifically, we extended the cautious first half outlook we provided in February in the U.S. public sector for the remainder of the year. We also acknowledge that recent U.S. policy actions have the potential to reduce visibility in our enterprise business, which could lengthen sales cycles. It's important to note that demand creation and top of the funnel remains strong. A revised guidance today simply reflects the fact that the world is more uncertain and visibility into when deals close has become murkier since we provided our initial guide in February. We believe our updated guidance appropriately balances these potential geopolitical and economic risks and sets us up for success the remainder of the year. Our guidance for operating income remains unchanged and reflects our emphasis on profitable growth. We expect operating margins to generally increase throughout the year, resulting in an approximate 100 basis point improvement over 2024, even as we absorb the costs associated with the Vulcan acquisition. Notably, our disciplined approach to balanced growth has enabled us to manage the business in a way that allows us to continue to drive strong margins in multiple environments. As a reminder, we typically update our unlevered free cash flow with our Q2 call, but we continue to expect to deliver 265 to 275 million of unlevered free cash flow in 2025. With that said, Mark and I would like to thank everyone for joining the call today. We're very excited about the opportunity ahead and look forward to updating you throughout the year. We hope to see you at the J.P. Morgan and D.A. Davidson conferences in the coming weeks.

And we now like to open the call for questions.

At this time, we will be conducting a question and answer session. If you would like to ask a question, please press star 1 on your telephone keypad. The confirmation tone will indicate that your line is in the question queue. You may press star 2 if you would like to remove your question from the queue. We ask that analysts limit themselves to one question so that others may have an opportunity to ask questions. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. One moment, please, while we poll for questions. Our first question comes from Brian Essex with JP Morgan. Please proceed with your question.

Hi, good afternoon. Thank you for taking the question. Congrats to both of you on the CEO appointments. Great to see. Thank you. Maybe Steve. Maybe, Steve, if you could maybe touch on the guidance and what you're seeing in the business that's driving that incremental caution. I mean, you mentioned that, you know, things from a MAPA perspective were a little bit more, you know, volatile perhaps than we saw at the end of the year. But what specifically are you seeing in the business and what's the philosophy around, you know, the level of incremental conservatism that you're baking in the guide? Thank you.

Sure, Brian. Good question. As we mentioned earlier, we did revise our CCB outlook for the year due to ongoing macro uncertainty, and that's most notably in our public sector business. We're off to a terrific start for the year. We're pleased with the print in the quarter, and top of the funnel remains exceptionally strong. And the one thing I want to be very clear about today is that demand gen in the quarter exceeded our own expectations, and there's certainly more appetite for a broader platform play and expansion within our own customer base. That said, we have to acknowledge what's playing out and potentially could come our way. Subsequent to our last call, we've seen an acceleration in DOGE-related activities and disruption from a personnel perspective, a lot of disruption, and there are several notable open leadership roles in Fed, and all of that creates a confluence of activities and creates less visibility in our business short term. We spent a lot of time analyzing and scrubbing our pipeline and taking a data-driven approach to provide our outlook today. We disaggregated our opportunities and looked at them by geo, industry, such as Fed and other sides of customer, and we're assuming longer lead times here for procurement decisions. This is most notably in our public sector business, but we're also applying that level, some level of caution to our enterprise business, which has the potential to be disrupted due tariffs and geopolitical events. We think this is a prudent approach, and we think this sets us up well for the rest of the year.

Does that impact your free cash flow? Because you pretty much reiterated you're adjusting for Vulcan, which you said would hit another free cash flow of about $20 million. You're pretty much reiterating your Vulcan-adjusted free cash flow for the year.

Yes, that's a great point. We are a balanced grower, and we have a strong track record of success expanding our operating margins. And so there's a lot of natural leverage in the business, and we are reiterating our outlook, despite the visibility that comes with some of these recent policy actions, but we're reiterating our outlook for operating income and free cash flow.

Excellent. Thank you so much.

Our next question comes from Saket Kalia with Barclays. Please proceed with your question.

Okay, great. Hey, guys. Thanks for taking my question here. Very, very helpful answer earlier there, Steve, on why maybe the CCB guide is changing. But, Mark, maybe for you, just to make sure the question is asked, can we just talk a little bit about the competitive environment here in VM? I think we all know you're established players, but curious what you're seeing from... Other players here, like Endpoint, for example, in VM?

Sure. No, absolutely. Great, great question. When you take a look at Q1, it was actually an extremely strong quarter in regard to the competitive environment. If you kind of break this up and look at just the pure play VM players, so take a look at the Qualis and Rapid, we had historically high win rates. A couple of the deals that I referenced earlier, in the beginning of the call were seven-figure replacements of traditional VM players. So our compete level is extremely high, and that is continuing from the end of last year, and now we're seeing it again this year. So extremely strong, very, very historically high win rates. In regard to the endpoint players, say a CrowdStrike and or a Microsoft, same type of trend in regard to no massive shifts or changes in regard to the competitive dynamics. We do see them. We don't see them a significant amount of times, though, compared to obviously the traditional VM players. So our win rates are high. Our compete level is very high in that space. And so, you know, we're very, very optimistic, especially, you know, based on those seven-figure wins. And I think, as you know, right, it takes a lot to rip and replace an incumbent. And to be able to do that, you know, on seven-figure deals, we were pretty excited about what we did in Q1.

Very helpful. Thanks, guys.

Our next question comes from Andrew Nowinski with Wells Fargo. Please proceed with your question.

Great. Thank you for taking the question, and congrats on both your appointments to a co-CEO. I wanted to ask a question on your cloud business. So you talked about how cloud is a critical pillar of exposure management. So I'm wondering... Do customers understand that cloud security and exposure management go hand in hand? And really what I'm trying to get at is how are you thinking about the impact of Google's acquisition of Wiz in the cloud space and do customers want to buy exposure management and cloud together? Does that make sense?

Sure. I'll start and Mark might provide additional color, but in short, The acquisition of Wiz we think creates certainly a market opportunity for us. It's clear that Google views Wiz more than just a security business. It's widely believed in talking to some of these customers that will see more innovation perhaps on the Google platform will be used as a means to sell more workloads there than perhaps on other platforms. So we're actively talking to customers in that regard. You know, we're seeing the outsides growth in cloud. We talked about the record number of large seven-figure deals this quarter. We're seeing a lot of expansion opportunities within our own VM customer base, customers that are stepping up buying the larger exposure management platform. And cloud is an important part of that and their ability to assess other asset types. So if you look at kind of the underlying trends of the business between VM and cloud and specifically exposure solutions, we're seeing a continuation of those trends. real strong growth certainly in exposure solutions with outsized growth in cloud and certainly lots of opportunities in our VM business. But we think we're still very early on and we're continuing to take and win share here and cloud's an important part of the exposure management story.

Yeah, and I will just add on to Steve's comment. It is definitely a net positive for us, right, when you have a acquisition of that size to a very dominant player, it does create a bit of uncertainty. And so we definitely have heard that from our prospects, and they are coming to us where in the beginning when Wiz was a standalone, they might not have even included certain players in regard to RFPs and to do proof of values and proof of concepts. We have seen over the last three and a half weeks an increase and the amount of activity and being invited to participate in RFPs. We have customers that are saying, hey, before this might have been a locked-in Wiz deal. We're now opening it up. We want to look at options. We have a multi-cloud environment using Azure, AWS, OCI, and they do not want to get locked in. So this is definitely going to be a net positive for us. And one thing I will highlight is this hybrid environment of being able to look not just at your cloud environment, but be able to look at holistically these other asset types is a massive differentiator, and that's kind of what exposure management and the Tenable One platform is all about. So we view this as a net positive moving forward.

Super. Thanks, guys.

Our next question comes from Mike Sikos with Needham & Co. Please proceed with your question.

Hey, guys. This is Matt Colitre. I'm from Mike Sikos over at Needham. Thanks for taking our questions, and I'd like to echo my congratulations to Steve and Mark. On the calendar 25 guidance cut, can you help us think about how to quantify how much of that impact is in the public versus private sector, and can the move-up market help combat any of this weakness you're projecting?

Sure. If you look at the revision to our guidance today, specifically on CCB, we say about two-thirds Approximately two-thirds is in U.S. public sector, and then obviously the remaining third is in our enterprise business. Now, look, we had a strong print. We transacted a record number of seven-figure deals. We're seeing momentum in the enterprise market. We have some of our highest conversion rates than we've ever seen, and new business was strong. But we do have to recognize what potentially could come our way. It just feels like there's more uncertainty now since our February call. than there was early in the year, and we think this is certainly the right approach to take, and we're pleased to see top of the funnel remain strong.

Understood. That makes sense. And then just generally in the U.S. federal business, are budgets on hold, or is there any sort of clarity coming up? Now there were a couple months into the new administration. How is FedRAMP impacting any of this? Just any general color would be helpful.

Yeah, I think it's really a question of visibility. When we talked at the beginning of the year, we provided an incrementally more cautious approach to our outlook, and specifically the U.S. public sector. And that was really due to the change in the administration and the budget uncertainty surrounding continuing resolution. And we said we would get less contribution from PubSec first half of the year, most notably in Q1, and that played out as expected, despite this sizable seven-figure deal that we closed on the defense side. As we look at the rest of the year, I think just more generally, there's just more uncertainty. There's been a lot of disruptions from a personnel perspective, certainly more so on the civilian side than the defense side, and we're just taking more of a cautious approach for the remainder of the year, and just assuming longer lead times here.

Yeah, and let me just kind of piggyback on that, too. When you take a look at what has gone on in regard to some of the Doge cuts and also some of the leadership changes, right, there have been pretty significant leadership positions within the federal government, especially on cyber side of the house, that have not been filled yet. And so while we're seeing, you know, a positive pop of the funnel build out, We now are FedRAMP authorized for Tenable 1, which is new here, coming into Q2. We actually see huge opportunity for the consolidation. The biggest theme that's coming out of the federal government right now is what vendors can save us money? What vendors can consolidate multiple products onto a single platform? So we actually feel good in the top of the funnel. But it really is what Steve hit on. It is just a challenging environment determining how deals are going to happen, when they're going to actually close, who's going to be processing and doing the mechanics of getting the deal done, and then getting some of these leadership positions done. So it is just a bit gray right now. We are optimistic about the business and Fed and PubSec, but we just need to get a little more clarity to be able to call the business.

Very helpful. Thanks so much.

Our next question comes from Rob Owens with Piper Sandler. Please proceed with your question.

Great. Thanks for taking my question. This is Ethan for Rob this afternoon. You know, there's been a lot of commotion in industry recently around the potential end of funding for the CVE program. It seems that the funding has been extended for the time being, but what do you think the implications would be for Tenable or the VM industry more broadly if we were to see the funding end for that program in the future?

Sure. Well, the MITRE-backed CVE program, there are some questions about funding, and then we were pleased to see funding get extended for the remainder of the year. I think the big takeaway here is that collaboration is really important, and that's a program that's used as a means to facilitate sharing of vulnerabilities and exploits. I think there will always be a need for that. We're one of the few companies that's able to contribute and add funding CVEs to that national database and program. We recognize that's an important effort. So we're here to serve and help customers and we're actively working with members at the highest level both within the public sector as well as the private sector to see if there's a better approach here. And certainly the CVE program has had its limitations, right? There's been a proliferation of vulnerabilities. A lot of those vulnerabilities are categorized as critical or very critical and so we certainly think there's a better and there's an opportunity here and this is where we like to see better collaboration.

Appreciate the color.

Our next question comes from Patrick Colville with Scotiabank. Please proceed with your question.

Thank you so much for taking my question. I guess, can I just ask a cheeky two-parter? So Steve and Mark, what are your strategic priorities for the next 100 days as Tenable co-CEOs? And then the second part, if I may, is I think in four Q results, you mentioned that US PubSec was 15% of revenue. So the guidance cut for 2025 is being largely attributed to US PubSec, Do I have my numbers right? And if not, would you mind correcting me? Thank you so much.

Yes, with regard to the latter, U.S. PubSec is approximately 15% of our total sales. And so the revision to the top line today, we said a majority of it, about two-thirds of the revision is for U.S. public sector. And we said we're also taking a bit of a cautious approach to enterprise where we continue to see great momentum and traction there. And with regard to Really our priorities here, you know, first let me just say the co-CEO structure is one that, you know, we're very familiar with and reflects how we've been operating as a company really for the past year. We're committed to certainly expanding our market opportunities and to our mandate. Our roots are in vulnerability management, but the outgrowth of that is exposure management. And so with that, you know, there's, I would say, several opportunities. We're delivering incremental value to customers, and so we see a lot of momentum with our exposure management platform. Exposure management platform is a catalyst to higher deal sizes. The ESPs this quarter were very high, in part to those seven-figure deals that we announced. And we're using that really as the tip of the spear to be able to consolidate spend in areas like cloud, like web application, like OT and other areas. So that's certainly one bigger opportunity is to use the platform as a means to assess other asset types and do more first party assessments. The second thing is we recognize that the security market is fragmented and there's a lot of players and there's been vendor sprawl and no security company can possibly assess all these different asset types. We're bringing the market here a more expanded version of our exposure management platform. That will include not only our first party assessment data but also our third-party data that we can ingest from other security providers, whether it's cloud security, application security, whatever it may be. So combining third-party data with our first-party assessment data really provides a broader set of exposure data for customers and help them remediate and mobilize their efforts to reduce risk. The last thing here I will say is AI. AI is a force multiplier on the types of insights that we can deliver to customers. We think in the years to come, the real competitive mode here for exposure management, and AI is kind of central to exposure management, is not so much features and functionality, that will be important, but the insights that you can deliver to customers. So aggregating all that data from all those different asset types, both first party and third party assessment data, to be able to integrate it in a way and combine vulnerabilities with threats and identities, is really a powerful offering and a means to help customers not only identify risk, where we've historically been focused, but help them actually reduce risk and tie balls to actual fixes. So look for more here, investments from us and AI, but certainly it's a big opportunity here and really create more competitive mode and a catalyst for growth going forward.

Yeah, no, very, very well said, Steve. Totally agree. And I think when you look at it from a go-to-market, to keep it really basic and simple, We're going to be focused on continuing to drive the T1 message and positioning. With Eric Doerr now joining us from Google, I think you'll see a lot of fantastic innovation on the points that Steve just hit on. When we talk about Tenable One, it is truly a very strong consolidation story that is resonating in the market right now. The second big piece is going to continue to be cloud. So cloud as part of Tenable One is the two big areas that we're going to go for from a go-to-market perspective.

Terrific, thank you so much, and looking forward to this next chapter.

Thank you.

Our next question comes from Rudy Kessinger with DA Davidson. Please proceed with your question.

Hey, thanks for taking my questions, guys. Can you hear me okay? Sure. Great, great. Well, congrats to both of you on the co-CEO roles. Hopefully, I'm your last question on public sector, but, you know, with the two-thirds of the cut that is being attributed to public sector, I guess I'm curious, Is that mostly just from less visibility on new deals, or have you actually had any contracts that have been canceled or downsized? And if the answer is yes, with what kind of notice did you have that they were being canceled? Did you kind of have a sense, or were they kind of cut out of the blue? Thank you.

Yeah, so, you know, commentary around Fed applies both to new as well as renewal, but more so the former. than the latter. We have a long-standing relationship with the federal government. We serve every three-letter federal agency from defense to civilian to intel. And so we know this is a foundational piece to their program. As you probably know just from looking at the headlines, some of the disruption that we've talked about from a personnel perspective has been more on the civilian side. And so we've seen certainly you know, lower rural dollars coming out of some of those civilian agencies that are seeing more disruption from those related actions. But going forward, we just see longer times, you know, longer lead times here and cycle times to be able to close the opportunities. Mark talked about our two newer products, Tenable One and Cloud Security getting FedRAMP authorized. We're seeing certainly a lot of market pull there. And the three themes that we're focused on to better serve the federal government is really modernization. That's a big area of emphasis for them, consolidation, and then certainly more efficiency. And the platform strategy and approach that we have here certainly creates a lot more utility for a lot of our federal customers.

We'll take your next question, please.

Our next question. Our next question comes from Joseph Gallo with Jefferies. Please proceed with your question.

Hi, this is Anjali Paladopoulos for Joseph Gallo. I appreciate you taking our questions. So my question is, I guess, can you give us an update on how things are progressing with the channel and where you are on a sales quota, rep carrying capacity basis, and how we should think about additional go-to-market investments going forward that you haven't touched upon yet?

Sure, yeah, no, and when you take a look at the Q1 performance, the channel performed extremely well. I mean, the beautiful part of the Tenable distribution models, we are 100% channel, so we do all our business through the channel. So we saw great momentum in the channel in Q1. We saw excellent channel in business coming in from the partner community. So that was excellent. We did add some sales capacity in Q1, and we will continue to evaluate looking at certain regions, theaters, and countries that are showing signs of growth. And if we see significant growth patterns, those are going to be some geographies that we might take a look at adding sales capacity throughout the year.

Okay, thanks. I appreciate the color.

Our next question comes from Joshua Tilton with Wolf Research. Please proceed with your question.

Hey, this is Patrick O'Neill. I'm for Josh. Just a quick one for me. Can you talk a little bit about the progress you're seeing with Vulcan and maybe some early anecdotes from customers there and adoption, and then are we still thinking about $5 million contribution from Vulcan for this year?

Thanks. Yes, this is Steve. So, yes, we said beginning of the year contribute roughly a half a point of growth. That's roughly $5 million. That's more weighted towards the latter part of the year, so just to be mindful of you know, what we acquired here from an IP perspective and, you know, it's very complimentary to our Tenable One platform. We now have the ability to ingest third party data and findings and metadata from other security providers. We'll be in market with a more expansive Tenable One offering sometime in Q2. So the plan here is kind of build some of these capabilities natively into our platform and then be in market. sometime over the ensuing months. And then we expect the contribution that I just mentioned earlier to be more weighted in the back half of the year. And then obviously the remediation capabilities is another important part of the platform. So very complimentary to what we do. And we're seeing good traction out of the gate here, but obviously had lower contribution in Q1. The one thing I will mention is one of the seven figure deals that we talked about here was a VM displacement that we had been chasing for really a couple of years now and Vulcan was the catalyst for that displacement. So we actually displaced the incumbent VM provider who is using us for VM and now will be turning to us for third party data generally over the ensuing months and so certainly creates a lot of expansion opportunities for us.

Perfect, thank you.

Our next question comes from Oscar Sever with Morgan Stanley. Please proceed with your question.

Hi, guys. Thank you for taking my question, and congrats to Steve and Mark. I guess for me, it's just a quick one. It's great to see Tenable One being a strong driver of those large deals that you noted. Last quarter, I believe it was 40% of new business sales was attributed to Tenable One. Any update on how that was this quarter? And on the cloud security side, I think... you know, the footprint expansion was, like, more than doubled in Q4. Maybe an update on that.

Thank you. Thank you. Yeah. So, yes, tenable one. So, first of all, the tail of the tape this quarter and the outperformance was because of tenable one with traction and cloud and other areas of our business. So, it continues to represent a sizable percentage of our new business. This quarter was notably over 30%. I think in Q4, it tends to tick a little higher just to budget slosh, and it just tends to be a seemingly stronger quarter for us. So certainly seeing a lot of pull for Tenable One. ASPs are higher, anywhere from 50% to 90%. And usually the catalyst for a customer to move to Tenable One is this desire to do VM+, VM+, Cloud, or OT, or Identity, or other there. So certainly pleased with the continued momentum that we're seeing with the platform and we'll continue to add capabilities I talked about earlier, specifically with regard to Vulcan short-term, the focus on adding third-party data, the ability to ingest that, as well as add remediation capabilities, remediation automation capabilities, and mobilization capabilities.

Yeah, I mean, the only thing I'll add there, too, it's a phenomenal summary, is three buckets you really want to think about with Tenable One. Phenomenal, phenomenal positioning in regard to driving new licensed business. Also, from a competitive displacement, right, when we talk about those seven-figure deals, one of the main factors that's allowing us to beat the competition and get into those accounts is Tenable One, so allowing us to do big rip and replaces. And then the third is obviously the expansion in the install base. And so those are the big drivers when you take a look at the Tenable One activity and growth, and we're going to continue to drive that throughout the year.

Awesome. Very clear. Thank you very much.

Our next question comes from Kingsley Crane with Canaccord Genuity. Please proceed with your question.

Thank you, and I can echo my congrats. Thinking about the shift to exposure management, for many companies that includes OT, how should we think about that ongoing ramp? And OT, are you getting more excited about that opportunity versus maybe two to three years ago? And I'm curious what you're hearing from customers. Thanks.

Yeah, you bet, you bet, you bet. So Q1 actually was a strong OT quarter, and we're still seeing momentum there. So year-over-year growth was strong, very happy with the performance we're seeing there. And it goes back to the theme that we touched a little bit about. Every quarter you're starting to see more of a pickup where OT is being more centralized into the chief security officer, into the CIO, and they want to be able to have that full visibility of the attack surface, obviously including the OT assets. And so this is a driver for us that we still think will be very strong for us throughout 2025, being able to go in, consolidate, get the OT asset into Tenable One and continue to be a driver for us.

Really helpful. Thank you.

Our next question comes from Adam Borg with Steeple. Please proceed with your question.

Awesome, and thanks so much for taking the question, and congrats on the co-CEO structure. Maybe for Steve, just on Vulkan Cyber, I'd love to hear a little bit more on just the R&D priorities and the sales and marketing priorities. It's great to hear that you can bring some new stuff to market, but I'd love to go a step deeper there. That would be great. Thanks so much.

Yeah, I'll talk about the R&D priorities. Mark can chime in on the go-to-market priorities. You know, it's really pretty straightforward. Vulcan adds, it's very complimentary to Tenable One, as I mentioned earlier. It'll add third party data into the platform. We'll have the ability to ingest data from other security providers. And not just the basic findings, but also the metadata. A lot of the network info, who's responsible. So we talked about this bigger focus on AI. Certainly that will be a means for us to expand our exposure data on top of the 40,000 plus customers, on top of the 3 million plus users and downloads of our Nesta's product. So we believe certainly one of the big notes here going forward for cyber, the ability to deliver exposure management at scale and evolve us from a system of record to a system of action will be AI and Vulcan is an important part of that aggregating that data, combining third-party data with first-party assessment data. And then the other piece is really tying vols really on the back end to actual fixes and driving and automating remediation ops. That's a really important part of the value chain. There's a lot we can do from that perspective for everything from identifying unmanaged applications and devices to then integrating on the back end with ticketing systems to be able to drive remediation and updates and then closing the loop back into the platform. So that's a big area of focus for us going forward. Vulcan certainly means to do so, but it's complementary to our whole exposure management mandate and certainly will help enable a lot of the AI initiatives.

Very, very, very well said. And when you take a look at it from a go-to-market perspective, and we touched on this in Q1, the beautiful thing about Vulcan is we've actually been talking and positioning third-party ingest, and automated remediation with our customers for quite a bit of time. So our sales force and our channel understand this talk track. They understand how these type of third-party assets and automated remediation flows into the tenable one consolidation story. So we do not have specialized sellers and specialized SEs. This is mainstreamed into our core sales force and is a core sales play that we're out there talking to customers, prospects, and channel in regard to what we're doing with Vulkan. And so as I discussed earlier, those two big themes of driving Tenable One and driving cloud security, Vulkan fits perfectly into the Tenable One story.

Super clear. Thanks again.

Our next question comes from Trevor Rambo with VTIG. Please proceed with your question.

Great. Thanks for taking my question. This is Trevor on for Gray Powell. So going back to Tenable One, it was good to hear the positive commentary again around adoption and that cloud security drove a lot of the outperformance. Could you give us some more color on how the rest of the portfolio performed in relation to cloud security in the quarter? And then is cloud security something that you see going forward that's going to continue to outperform within that segment?

Yeah, listen, you know, at the end of the day, when you look at Tenable One, it was a very, very strong quarter and drove a lot of those seven-figure deals, which is outstanding. We touched a little bit in regard to some of the OT asset was very, very strong also. Cloud security, because there was obviously a bunch of very sizable deals and a seven-figure deal that was in there, and we do continue to see that type of activity and be able to use cloud security as part of Tenable One. As we discussed earlier in this call, we also are optimistic in regard to the cloud security business because of some of the M&A activity that we hit on before with Wiz and Google. And so we're already starting to see decent pipeline build from a cloud security perspective as part of T1, you know, once that acquisition was announced. So, yeah, we expect those two to be big drivers for us in 2025. Awesome.

Thanks for the call.

Our next question comes from Srinik Kathera with Baird. Please proceed with your question.

Great. Thanks. This is Zach Schneider on for Srinik. Thanks for taking the question and wanted to echo our congrats to Steve and Mark. So I wanted to ask about pricing. You know, one thing we've picked up sort of across the sector is just some more aggressive discounting in pricing. So just curious if this is something you're seeing in customer conversations or if there's been any changes to your pricing strategy. Thanks.

Yeah, no, we've actually seen no significant changes in pricing. We haven't modified or done anything different in regard to our pricing strategies. Obviously, our margins are extremely stable, so we expect, you know, our pricing strategy and the way we're discussing and managing all these different opportunities to remain extremely consistent, you know, the way they did in Q1.

Great. Thank you.

We have reached the end of our question and answer session. This concludes today's teleconference. You may disconnect your lines at this time. Thank you for your participation.