Varonis Systems, Inc.

Greetings, and welcome to the Verona System, Inc. second quarter 2024 earnings conference call. At this time, all participants are in listen-only mode. A brief question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. As a reminder, this conference is being recorded. It is now my pleasure to introduce your host, Tim Hurst, Investor Relations. Thank you, sir. You may begin.

Thank you, operator. Good afternoon. Thank you for joining us today to review Varonis' second quarter financial results. With me on the call today are Yaki Fidelson, Chief Executive Officer, and Guy Malamed, Chief Financial Officer and Chief Operating Officer of Varonis. After preliminary remarks, we will open the call to a question and answer session. During this call, we may make statements related to our business that would be considered forward-looking statements under federal securities laws, including projections of future operating results for our third quarter and full year ending December 31st, 2024. Due to a number of factors, actual results may differ materially from those set forth in such statements. These factors are set forth in the earnings press release that we issued today under the section captioned Forward-Looking Statements, And these and other important risk factors are described more fully in our reports filed with the Securities and Exchange Commission. We encourage all investors to read our SEC filings. These statements reflect our views only as of today and should not be relied upon as representing our views as of any subsequent date. Gronus expressly disclaims any application or undertaking to release publicly any updates or revisions to any forward-looking statements made herein. Additionally, non-GAAP financial measures will be discussed on this conference call. A reconciliation for the most directly comparable GAAP financial measures is also available in our second quarter 2024 earnings press release and investor presentation, which can be found at www.varonis.com in the investor relations section. Lastly, please note that a webcast of today's call is available on our website in the investor relations section. With that, I'd like to turn the call over to our Chief Executive Officer, Jackie Fadelson. Jackie?

Thanks, Tim, and good afternoon, everyone. Thank you for joining us today to discuss our second quarter results, our SaaS transition progress, and the tailwinds impacting our business. First, I would like to remind you why VoIP exists, and how we help our customers. Today, the purpose of almost any cyber attack is to steal data, but the purpose of the security solutions most organizations deploy are to protect their endpoints and their perimeters. These technologies are very important, but they aren't enough to protect data. To protect data, you must have a data-first solution and a data-first approach. Voronis' data-first approach helps companies lock in their sensitive data, visualize who has access to it, automatically lock it down, and then detect and respond to threats from it. To use a simple example, credit card companies keep making it harder for bad actors to get your credit card number, but they know credit card numbers will still sometimes be stolen. So they also watch the credit card transactions and compare them to what they know normal usage looks like to detect and stop fraudulent transactions. Coronis uses the same approach for protecting data, make it harder for the wrong people to access it, and monitor the data transactions to spot and stop anything abnormal, like ransomware insider threats or AI abuse. With our SaaS platform and recently released MDDR offering, we have a sophisticated and automated solution that enables customers to protect their data with very little time and effort. This allows companies to collaborate safely while also managing risks. Innovation has always been at the core of Voronis, and in late June, we achieved the FedRAMP in-process designation, which represents an important step towards enabling us to provide the benefit of our SaaS platform to our federal government customers. I would like to take a moment to thank everyone involved in the process. Now, I would like to turn to our second quarter results, which reflect the growing momentum of our SaaS platform in the recently introduced NBDR offering. These offerings are driving strong new customer addition and healthy convergence activity from existing customers. ARR grew 18% to $584.2 million, and year-to-date, we generated $67.3 million of free cash flow versus $40 million generated last year. TASI ARR now represents approximately 36% of total ARR, guided review of Q2 results, and our updated guidance in more detail shortly. This was another quarter of strong execution by our team that has risen to the challenge of a stable but a challenging environment still with elevated levels of build scrutiny. The transition to SaaS delivery model is progressing quickly Because of the many benefits that our customers realize, customers can achieve automated outcomes, which means they can ensure the data is protected with very little effort. SAS is quicker to deploy and operationalized because of significantly lower infrastructure and personal investment, and SAS is easier to maintain and upgrade. Additionally, there are three key benefits that we realize. They are shorter sales cycle, larger initial length, and margin benefits over time. I would now like to turn to a couple of tailwinds that we believe will drive momentum in our business. The first is our managed data detection and response offering, which we call MDDR. This is the first managed service for monitoring and protecting data critical data, and is only available for our SaaS customers because of the visibility and automation that is built into our SaaS platform. MDDR was only introduced in Q1 and is already becoming a key driver of new business swings and existing customer conversions to SaaS. And we believe that we are just scratching the surface with this opportunity. We continue to see that CISOs don't have the resources to monitor and investigate alerts fast enough. With MVDR, we handle this for them. If we see a threat, we can stop it and simply notify the customer after the threat has been neutralized. We pioneered the use of machine learning to perform user behavior analysis and build highly accurate threat models. Our team leverages this significant automation plus our unique telemetry to efficiently detect if data is under attack and to catch threats missed by others. Bottom line, the early proof points that we are seeing leaves us excited about what the future holds for MDDR. The second tailwind, We see generative AI. This technology is top of mind for many organizations and is a key theme in nearly all conversations with prospects and customers. The productivity benefits that Gen AI brings are widely understood, but Gen AI also worsens the data access risks companies already face. Take, for example, a bank. that was piloting a GenAI tool with users on their trading floor. They wanted to make trade more productive and earn the bank more money. The traders started to use it for research. They started searching for answers on questions like, what stocks do our employees invest in? The problem is, The tools started showing names, social security numbers, 401K positions, and account numbers. The security team immediately turned it off because they were going to face major fines and sanctions. And it wasn't because those traders were acting maliciously. They were just trying to use the tool and ended up finding extremely sensitive data that was mistakenly open to everybody in the company. We believe that Gen AI adoption within enterprises will serve as a catalyst that exposes their underlying data security risks. And this is the very problem that Varonis was built to solve. As a result, we expect that as companies adopt Gen AI, they will be forced to make addressing those risks a top priority. Without Varonis, Right-sizing access controls is extremely challenging. We mitigate these risks by automatically ensuring only the right people can access the data necessary for their job function. Companies are thoughtfully considering these risks before expanding from pilots into broad rollouts. The feedback we are hearing from customers continue to strengthen the conviction We have in our ability to benefit from enormous secular tailwinds, and we are seeing a healthy pipeline build with respect to this opportunity. With that, I would like to briefly discuss a couple key customer ruins from Q2. A large Midwest hospital system became a Voronis customer this quarter. This organization was concerned about where its sensitive data was located, who had access to it, and how they would respond to a ransomware attack. During the risk assessment, we detected attacks already in progress, including an attack on their CEO account coming from outside the organization. The company was able to prevent it and ensure that account was secured. The second attack that occurred was a business email compromise that began when an employee clicked on a phishing link that came from a malicious email and the account started accessing files from an unusual geolocation. our team was able to confirm they would detect and stop this compromise before any sensitive data was accessed. Because we have a conclusive record of the data transaction and prevent any damage from being done, they purchased Veroni SaaS for their hybrid environment with NBDR protection and were able to avoid material breach that could require them to publicly file any data breach disclosures. We continue to see healthy demand from existing customers converting from our self-hosted platforms to Veroni SaaS. One example of this is a multinational commercial real estate firm that has been a Veroni customer since 2014. They wanted to decrease their infrastructure spend and reduce the time spent maintaining and upgrading their software. moving to Voroni SaaS allowed them to immediately cut their server footprint and reduce their ongoing maintenance requirements. In addition to this operational saving, they will automatically remediate overexposure in Microsoft 365. They also purchased the Voroni SaaS hybrid package through the Azure Marketplace, which simplified the procurement process. In summary, The adoption of our SaaS platforms and MDDR offerings are driving positive business momentum, and we are just scratching the surface of our long-term opportunity. We are excited to enter the second half of 2024 from a strong position to capitalize on the tailwind of MDDR, GenAI, in increasing data-centric compliance regulation. With that, let me turn over to Guy.

Thanks, Yaki. Good afternoon, everyone. Thank you for joining us today. Our second quarter performance gives us increased confidence in our full-year trajectory, driven by our SaaS platform and MDDR offering. At the end of Q2, SaaS ARR increased to approximately $210 million, or 36% of our total company ARR. driven by strong contribution from new logos and existing customer conversions. This momentum, coupled with the tailwinds Yaki mentioned, allows us to raise our full-year ARR and free cash flow guidance, and also to increase our SaaS ARR expectations. The key drivers of our business this quarter were SaaS and MDDR. With each passing quarter, our story becomes more strategic and simpler for customers. SAS eliminates the two biggest pushbacks of not wanting hardware or having the headcount to manage the platform. SAS obviously requires less hardware and meaningfully simplifies maintenance and upgrades. And MDDR removes the need for people to review alerts since we do it all for them. We're seeing that the value proposition of our platform, together with the simplicity of our story, is shortening deal cycles when compared to on-prem subscription deals. Generative AI remains a theme in nearly every customer conversation we are having and reinforces our view that this will become a secular tailwind. Our pipeline continues to be healthy as a result. And as we discussed in the past, we are still not seeing material contribution to our reported metrics derived from it. Consistent with our prior comments, we have not included the impact of material GenAI adoption in our guidance. As we enter the second half of the year, we look forward to converting more of the installed base of on-prem subscription customers to our SaaS platform. Pricing continues to be in line with our price list increase of 25% to 30%. And in some cases, we see deal sizes increase in excess of that as customers consume more of the platform upon conversion to our SaaS platform. We expect that the ramp up of this phase will not be linear. and momentum should grow in each quarter, with further acceleration in dollar terms in 2025 and 2026. In the second quarter, ARR grew 18% year-over-year to $584.2 million, and year-to-date we generated $67.3 million of free cash flow, which was up from $40 million generated over the same period last year. These metrics demonstrate our commitment to balancing top-line growth with improving cash flow generation during the transition. Turning now to our second quarter results in more detail. As a reminder, the leading indicators of our transitions are ARR, free cash flow, and ARR contribution margin. As we have said many times, the faster we progress through the transition, the more headwinds we will experience to our traditional income statement metrics. But we view this in a positive light. As compared to three months ago, we feel increasingly confident in the trajectory of the business following our second quarter results. While the macro environment remains challenging, it is also stable, and SAS and MDDR are resonating well in this market to drive positive business momentum. Q2 total revenues were $130.3 million, up 13% year over year. During the quarter, as compared to the same quarter last year, we had approximately a 6% headwind to our year-over-year revenue growth rate as a result of having increased SaaS sales in our booking mix, which are recognized radably versus the upfront recognition of our on-prem subscription products. In the second quarter, SaaS revenues were $44.8 million. Term license subscription revenues were $62.7 million, and maintenance and services revenues with $22.8 million as our renewal rate, we're again over 90%. Moving down the income statement, I'll be discussing non-GAAP results going forward. Gross profit for the second quarter was $109.6 million, representing a gross margin of 84.1%, compared to 87.1% in the second quarter of 2023. Gross margin continued to be strong, and the year-over-year change is due to the revenue headwind associated with a higher mix of SaaS sales, increased headcount to support the transition, and increased hosting costs. Operating expenses in the second quarter totaled $107.5 million. As a result, second quarter operating income was $2.1 million, or an operating margin of 1.6%. This compares the operating income of $0.9 million or an operating margin of 0.8% in the same period last year. During the second quarter, as compared to the same quarter last year, we had approximately a 5% headwind to our operating margin as a result of having increased fast sales in our booking mix, which are recognized ratably versus the upfront recognition of our on-prem subscription products. Second quarter ARR contribution margin was 14.9% up from 8.2% last year. The significant leverage improvement, even during the early stages of the transition, reflects our ability to drive strong incremental margins while growing ARR and transitioning to SAS. During the quarter, we had a financial income of approximately $8.1 million driven primarily by interest income on our cash, deposit, and investments in marketable securities. Net income for the second quarter of 2024 was $6.8 million, or 5 cents per diluted share, compared to net income of $1.1 million, or net income of 1 cent per diluted share for the second quarter of 2023. This is based on 128 million and 127.3 million diluted shares outstanding for Q2 2024 and Q2 2023, respectively. As of June 30, 2024, we had $790.3 million in cash, cash equivalent, short-term deposits, and marketable securities. With the six months ended, June 30, 2024, we generated $68.4 million of cash from operations compared to $42.6 million generated in the same period last year. And CapEx was $1.1 million compared to $2.6 million last year. Turning now to our updated 2024 guidance in more detail, it is important to note that our guidance now assumes 48% of total company ARR will come from our SaaS platform by year-end. As it relates to our quarterly revenue guidance, there are more conversions embedded in our Q4 guidance versus our Q3 guidance because we have more renewals in Q4 from a seasonal perspective. And the third quarter is federal's largest quarter, and we still expect to sell on-prem subscription in that vertical. For the third quarter of 2024, we expect total revenues of $140 million to $143 million, representing growth of 14% to 17%, non-GAAP operating income of $7 million to $8 million, and non-GAAP net income per diluted share in the range of 7 cents to 8 cents. This assumes 128.2 million diluted shares outstanding. For the full year 2024, we now expect ARR of $629 million to $635 million, representing growth of 16% to 17%. Free cash flow of $80 million to $85 million. Total revenues of $544 million to $552 million, representing growth of 9% to 11%. non-GAAP operating income of $18 million to $21 million, non-GAAP net income per diluted share in the range of $0.22 to $0.24. This assumes 128.1 million diluted shares outstanding. In summary, our second quarter performance, coupled with the many tailwinds in our business, gives us confidence to raise our full-year ARR and free cash flow guidance. And also, to increase our SaaS ARR expectations. We look forward to driving continued momentum as we move through the second phase of our SaaS transition and unlocking meaningful value for our customers, our company, and our shareholders. With that, we would be happy to take questions. Operator?

Thank you. We will now be conducting a question and answer session. If you would like to ask a question, please press star one on your telephone keypad. A confirmation tone will indicate that your line is in the question queue. You may press star 2 if you would like to remove your question from the queue. We ask that you limit yourself to one question so that others may have an opportunity to ask questions. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star key. One moment, please, while we poll for questions. Our first question comes from Kalia with Barclays. Please proceed with your question.

Okay, great. Hey, guys, thanks for taking my question here and nicely done this quarter.

Thank you.

So I'll keep it to one here. Yaki, can you maybe just talk about the success that you're having in converting your on-prem customers to SaaS? And Guy, maybe as part of that discussion, I mean, you talked about I think sort of an inline uplift as you talked about in the past. But it sounds like maybe it's doing a little bit better. Maybe you could just talk us through, just anecdotally, how the economics are looking on some of those conversions. Thanks.

Hi, Scott. The stock conversions are working very well because of the offering. We're talking about completely automated outcomes. If you have us, most probably you will not have a data breach and a data loss and we are taking a lot of the operations on us. This is on top of just the regular, you know, such benefits. Literally, 10% of the effort for the customer and 10 times most value. This works extremely well, and it's very easy for us to demonstrate the immediate value and the ongoing value. The customers are benefiting tremendously while moving to SaaS. So this is a fairly easy proposition for them to move to a SaaS platform.

And from a pricing perspective, there's a 25%, 30% price list uplift on a like-for-like basis. So when you assume kind of the same features and functionality. But when we look at the data, the discount rates of health firms, so we really are recognizing pricing in line with that uplift. And what's very interesting to see is that when we kind of built the packaging for SaaS, our desire really was to have customers consuming more of a platform And what we're seeing is that they're actually doing that. We're seeing deal sizes increase in excess of that uplift. So that's working really well for us. When you look at the conversions in Q2, that really helped us get to approximately 36% of total ARR coming from SAS or really $210 million. And what we actually saw is an increase in the conversions a lot of them came from perpetual maintenance customers, which was really a positive sign for us. So when we look at kind of the pace of the transition, the focus is on SAS ARR is kind of the leading metric to measure the progress, and we're really happy with the progress we've done so far.

Our next question comes from Hamza Farawal. Please proceed with your questions.

Great. Thank you for taking my question, and congrats on the continued SaaS momentum. Yaki, why don't I ask this question to you on what you talked about with generative AI, not expecting contribution this year, which I think is prudent. I just wanted to get a sense of your timing as to when you think these gen AI deployments will be more mainstream at the enterprise that you serve, and when do you think Bronis could start to benefit from some of these deployments, right? You're already talking about seeing more interest in pipeline. So I was wondering if you could maybe flesh out the timing of this opportunity for us.

Yes. Thanks for the question. Before the timing of the opportunity, I will tell you what I see from customers that are seeing these tools, these co-pilots and LMs, that immediately it's exposing the problem of excessive permissions and inintent. So you use it, and it's like a packman from hell that goes and mines all the available data. And by that, if you go to the platform like ours, you get a lot of data that you don't need to get. And once you get it, it's just digging, and people are starting to do a lot of things that can harm organizations badly. And even before, it was in the wrong hands. You know, God forbid you have an attack over something like that. I think that eventually it's inevitable that it will be in the hands of every business user. I don't know how to predict, but I believe that eventually it will be something like World of Excel. It will be in the hands of every end user. And if you do not solve the data protection problem and you understand behavior, you're going to have a lot of risk. And we definitely start to see that in a major way organizations are starting to use it. But we also started to see a slowly material impact on the pipeline. I think that people are saying that this is inevitable to use these tools because of the productivity gains. And you can't do it. If you will do it as is without seeking permission, understanding of normal behavior, the ability to classify, your data, it's a position for the organization. So we believe that over time, we will benefit from it and we believe that slowly but surely, this is something that will be in the hands, in one way or the other, we believe that it will be in the hands of every knowledge broker.

And Hamza, just to add from a numbers perspective and to add to what Yaki just said, when you kind of look at the results of the quarter, they were really strong. And that's without CoPilot being a material contributor yet. So, you know, when we look at kind of the guidance and the assumptions there, we don't bake in any optimistic assumptions in our guidance before we see enough data to support the trend. So we haven't yet baked in any contribution related to co-pilot. We're seeing that healthy pipeline that Yashi talked about. And similar to what we have done in the past, we'll be happy to update you on any changes when the time is right. So bottom line, It's not part of the current guidance, but we think it should serve as a tailwind to the business.

Our next question comes from Brian Essex with JP Morgan. Please proceed with your question.

Hi, good afternoon, and thank you for taking the question, and congrats from me as well. Nice to see the acceleration or slight acceleration in ARR along with better profitability and cash flow. particularly so early on in your transition process. And I guess that leads me into the question, you know, maybe for Guy, sustainability of profitability and cash flow here on out, how should we think about it, both in terms of the sustainability and level of, you know, potential margin expansion that we might expect?

When you look at kind of our philosophy in terms of the investments and growing top-line growth, we've always been very focused on Not increasing the top line, but making sure that some of it's coming to the bottom line and making sure that we're generating more meaningful cash generation. I think we've done that very well. As you mentioned, it's not easy to do that at the beginning of a transition. I think we managed that very well. But when you kind of look at the quarter, there were a couple of things that really contributed kind of the strength of the quarter and I think can help us drive top line growth and free cash flow going forward. We're definitely seeing shorter sales cycles on SaaS and also seeing healthy and much better new logo activity. That's being driven by SaaS value proposition and the fact that we're eliminating the two biggest pushbacks of customers. One, not wanting to buy hardware, and the second one, is that they don't have enough people to support the solution. So kind of when you look at the momentum in the quarter, really the factors that drove that outperformance in the quarter were those two. And overall, we're really happy with the progress and want to make sure that we grow top line and generate more meaningful free cash flow in the years ahead.

Our next question comes from Joel Fishbein with Truist Securities. Please proceed with your questions.

Thanks for taking the question, and congrats on the great execution. Yaki, for you, you mentioned the hospital system that, you know, deployed Varonis during the quarter, and I would love to understand the competitive landscape around that deal or competitive dynamics. And also, Guy, if you could share maybe the size of the deal, any parameters around that would be really helpful as well. Thank you.

Yeah, thanks. So, also, we don't see... more competition in the pipeline. For different use cases, we see different companies, but essentially, regarding this deal and others, what I think that is very important to understand, I saw hundreds of big breaches in the last few years, And they all usually have modern security stuff, world-class EDR and modern firewall and this thing. But once you have an identity, there is no perimeter anymore. And you need a data-first solution in order to solve this problem. You can invest a lot without getting the benefits. Without that solution, it's really, in order to protect your data, the first thing you need to do and the last thing that is going to save you And you get the world-class security people that are looking at it once four by seven to make sure we don't have a data breach or a data loss. And this is just a common thing throughout all the deals. And with more automation and more coverage, we have more use cases and more ways to get into enterprises. So just the whole self-motion with the value proposition is working very well.

And in terms of the deal itself, what was very interesting about the deal is that they bought the full package, including the MVDR. So they wanted to make sure that we help them in protecting against any breaches that take place. And obviously, what we can do with them, we can do with many other customers. So this was several hundred thousand dollars in deal size. They bought the full package. They had about just over 6,000 users. So a very healthy deal in what they consumed from a platform perspective.

and the ASC that we were able to get there.

Our next question comes from Matt Hedberg with RBC. Please proceed with your question.

Great. Thanks for taking my question, guys. Congrats as well. You know, there were some questions earlier on about, you know, GenAI and Copilot, but I wanted to focus on Office 365. I think You had an analyst day, I believe it was in March of 23, and you talked about maybe 1% penetrated in the Office 365 base. I think you said the time of that equated to maybe $125 million of cloud or SaaS ARR. I'm curious, could you give us an update about how that's progressing? It just seems like that's such a huge opportunity. Just sort of wonder if there's an update on how you think about penetration within that opportunity.

So you're absolutely right. When we laid out kind of the penetration, it was, you know, about 1%. And when you look at kind of the Office 365 in terms of how that's contributing to total ARR, we've seen a steady increase as a percentage of total ARR that's coming from the Office 365. But what's actually very interesting to see is that customers are now consuming more of a platform together with the MVDR, which is making this extremely more appealing for them and helps in kind of the whole conversation with the customer. So I wouldn't say that we're even close to scratching the surface. It's obviously improved slightly, but in terms of the opportunities, we're so far from kind of even getting to a point where it gets to the mid- single digit percentages. So we're far away from that. And that just shows kind of the essence of how we can take advantage of the opportunity going forward.

Our next question comes from Fatima Balani with CIDI. Please proceed with your question.

Hi, good afternoon. Thank you for taking my question. Guy, I wanted to ask you about MDDR and if you can help put some numerical contours around some of the comments you made around the solution driving new customer velocity, better transaction velocity, influencing deal sizes. Just wondering if you can add a little bit more quantitative color around that. And the reason I ask is this time last year, you were in very early innings of your SaaS transition and you didn't really have a formalized monetization model for MBDR, whereas this year you do. So I'm wondering if you can compare and contrast how much MBDR has positively influenced the SaaS momentum and the broader metrics. Thank you.

Absolutely. I think that's a great question. Just to remind everyone, we actually introduced MBDR at the beginning of this year. So it's not even been full two quarters, but the way we're seeing both the sales force and our customers adopt it has been phenomenal. they've really embraced the simplicity of us doing things for them. So that's been very well received. In terms of exactly quantifying how much It's increasing in terms of ASP. We're seeing the ASP go up. But if you remember, we talked a lot about the fact that the way we price MVDR is that either you buy additional licenses and then you get the MVDR at a reduced price, or if you want to buy kind of MVDR as a standalone with kind of, I'd say the package plus, then you would pay a higher price. And what we've actually seen from a behavioral perspective is that the customer is actually are going towards buying the extended package, which is helping us in terms of the ASP. I don't want to quantify it because it's so early, you know, less than two quarters in, but I can tell you that in terms of adoption, it's been one of the fastest adopted, I call it platform because we're selling the platform with NBDR, so it's been one of the fastest adopting platforms. And not only that, we truly believe that this offering should be part of every customer. It's obviously going to take time, but that's kind of the journey that we believe every customer should go through.

We are also surprised with how effective this offering of saving customers, like many customers on a weekly basis from a catastrophe, from attacks that people bypass the printer. They have an identity and they can do massive amount of damage in the way that our user behavior analytics is working. With all the telemetry that we are taking from Active Directory, Azure will be stuff like Okta, DNS, and proxy, make sure that most of the time they even don't get to the data. If they get to the data, we see immediately the abnormal behavior will stop them in doing very effective forensics also on the data layer, and they know exactly what happened. So it's just amazing to see how effective it is and how much value it brings to customers.

Our next question comes from Shaul Yao with TD Cowen. Please proceed with your question.

Thank you. Good afternoon. Congrats on the outperformance and improved guidance. Yaki or Guy, it's been about 10 days since the global CrowdStrike ID outage. Just curious, Yaki, maybe for your views, have you seen any increased interest, heightened interest over the course of this past very, very short period?

Not really. Software updates can sometimes go wrong. What happened here, CrowdStrike is a great company. They're taking care of it. But in general, what we see are completely unrelated to CrowdStrike. is that organizations understand that they need a data security platform. I think that in general, we understand that the limit of security is very important, but it's not enough. And you can be 99.9% okay, but then bad actors will manage to bypass it in any way. And if you don't have something like us, it will end up with a horrible breach. So this is what we see in the market, that just organizations understand that they need to be the first solution, and this is the way to protect the valuable information.

Our next question comes from Andrew Nowinski with Wells Fargo. Please proceed with your question.

Okay, thank you. So you talked about now expecting more conversions in Q4, which obviously creates a revenue headwind. But I'm wondering what prompted this change in assumptions this quarter and what you saw in the results in Q2 that may have prompted that, because the guidance for the year suggests a fairly steep deceleration in Q4 revenue growth. Just wondering maybe what changed or what prompted the change. Thanks.

I don't think there's any change in the way we're looking kind of at Q2 and definitely not putting anything in different light in Q4. I think there's a couple of things to note about the conversion. First of all, Q4 is the largest quarter. So we're taking advantage of any renewal as an attempt and desire to convert them into SaaS. And I think if you look at Q2, there was a large revenue beat, and that's Revenue beat had a couple of mechanics behind it that had to do with it. First of all, I think it's important to note that ARR is kind of the leading indicator and was really strong this quarter with good momentum in the business. I think that's very clear. During the transition, I think revenue is not really the indicator that would indicate on the health of our company, and I think we've been very clear on that as well. And when we look at what we've said in the past, the more conversions we see from on-prem subscriptions to SaaS, the greater the headwind for our traditional income statement metrics. And this quarter, we actually had really strong conversions, and there were two positive factors that took place that didn't cause revenue headwinds. The first one was that we saw perpetual maintenance customers choose to convert to our SaaS platform. Since perpetual maintenance revenue is recognized radically, just like SaaS is, there is a tailwind when those customers convert to SaaS because of the uplift. So as you remember, when we laid out the transition plan during the investor day last year, we didn't initially plan for those customers to convert to our SaaS offerings. So the fact that we're seeing this happen in a natural way is a huge positive to the business. And kind of the second factor that impacted Q2 is that we saw an increase in customers choosing to convert ahead of the actual renewal date, which doesn't serve as a headwind to revenue this quarter, but will have an impact on our revenue in future quarters. So really to summarize, when you look at kind of the momentum of the business, it's really strong. And although revenue should not be the measure for the health of the business, the reason it was stronger this quarter is because of the perpetual maintenance customer conversion and the early on-prem customer conversion that will impact revenue in Q3 and Q4.

Our next question comes from Roger Boyd with UBS. Please proceed with your question.

Hey, everyone. Thanks for taking the questions. And again, congrats on the good results. You launched a number of database SKUs at the beginning of the year, including for Snowflake. Can you just talk about the momentum you're seeing with those products, and particularly with the Snowflake SKU? Have the data security concerns stemming out of the incident there benefited the uptaker pipeline of that product? Thanks.

I think that we're starting to see a lot of concerns from every data repository that being complicated in the permission model, and the use is a lot of collaboration, and Snowflake is one of them, we're definitely starting to see a lot of momentum for these products, and we also see that the very unique intellectual property that we have, the deep technology that we have, is very much needed there. The other thing that we see is that Exactly what I said about the perimeter is if you want to protect data, you need to protect data. You need the data first solution. Because if you don't have it, as I said, once you have an identity, that's it, you are in the data. And I just think that once you have the right product, organizations are starting to take data security very seriously.

Our next question comes from Joe Gallo with Jefferies. Please proceed with your question.

Hey, guys. Thanks for the question. Just wanted to double-click on the new logo business. How was it this quarter? Any quantitative metrics, whether it's total customers or growth, that you can share? And should we expect that side of the business to accelerate now that you have Copilot and MDDR in addition to the sales comp changes? Thanks.

So the majority of the new ACV in Q2 was driven by new logos. We're definitely seeing shorter sales cycles on the SaaS fields. And SaaS is really opening up new markets for us because it eliminates, as I said before, the two biggest pushbacks we used to get. One is that they don't have the people or don't want the hardware. So when you look at kind of the opportunity of growing the new business, and we talked a lot about kind of SaaS and NBDR combined, simplifying the conversation, making it easier for our sales team to talk to customers and kind of talk about the value proposition in a simplistic way. I obviously hope and I think we have good indicators that the new customer would continue going forward. But I can tell you that when you look at the results in Q2, the Q2 new business was very strong.

Our next question comes from Jason Adder with William Blair. Please proceed with your question.

Yeah, good afternoon, guys. I wanted to ask about gross margin. I guess a little surprised at how strong it was in the quarter, just given the growing mix of SAS. Can you just talk about what your expectations are for the second half of the year and into next year for gross margin? And are there any kind of specific idiosyncrasies around the gross margin beyond just the rising SAS mix, which obviously has a negative impact?

Yeah, you're 100% right. We were very happy with kind of the growth margins. They were really strong. I think that when you look at kind of the ARR contribution margin and do it based on calls, you'll see that we were really at the same percentage that we had last year, which is 12%. So we were extremely happy with that. If you look ahead, the one thing that we want to make sure is convert our customers to SaaS. So the quicker we convert them, the more headwind we'll get from a revenue perspective. And on top of that, we have to make some investments in support to transition, really to support the transition. So you should see gross margins somewhat having kind of declining slightly, but I can say to you that when we look at the gross margins in the bigger picture, we're really happy with where we are, especially with the initial investments that we need to make to support this transition. And we expect to see the leverage even further coming in the years ahead.

So Guy, just to be clear, the gross margin for Q3 and Q4, you expect to be below where Q2 was?

So we don't really guide on the gross margins in a quarterly basis. I'll talk conceptually about the fact that overall, when you look at kind of gross margins this quarter versus last year, on the ARR contribution margin, you didn't see much of a change. You might see a bit of a change because of the investments that we're making. But overall, in the big picture, the gross margins are really healthy, and we're really happy with what we're seeing from kind of the margins on the SAS product. And on top of that, there's leverage that you see in the different departments. You know, you get the leverage in the sales and marketing, There's leverage down the road on the R&D when you stop supporting two types of codes. So the fact that we're making those investments in kind of the support team and the customer success team to support the transition doesn't really impact the overall bottom line, and we're very committed on showing operating margin improvement. And when you look at the ARR contribution margin, we saw a really nice increase versus last year.

Next question comes from Rob Owens with Piper Sam. Please proceed with your question.

Great. Thank you for taking my question. I was hoping maybe you could elaborate a little bit around compressing sales cycles on the SaaS front and if you could quantify that versus maybe where your traditional sales cycles are. And I guess secondarily, what you're seeing from a renewal standpoint. Thank you.

So I can definitely dig into this. I think what we're seeing in the sales cycles already that they're shorter on the SaaS versus the on-prem subscription. I think it comes to the fact that the value proposition of our platform, together with the simplicity of the story, is causing that shortening deal cycle when you compare them to the on-prem subscription deals. You know, we said from day one that we expect sales cycles to be shorter on on SaaS versus the on-premise subscription because of the simplicity, how much it came down should be really a focus point. Whether it's 25%, 33%, or even 50% shorter, the point is really that we're seeing a significant enough reduction for us to talk about it and call it out today. So really, it gives us a lot of momentum, and I think it's a critical benefit that we talked a lot about on the fact that we transitioned to SAS and the benefits that that generates. In terms of renewal rates, we're seeing very healthy renewal rates. We're very happy with them. And we've also said that we expect, over time, to have renewal rates increase with a SAS offering.

Our next question comes from Joshua Tilton with Wolf Research. Please proceed with your questions.

Hey guys, thanks for taking my question. First of all, congrats on a great quarter. I guess what I'm trying to understand is just, I think if I look back, this is probably one of your best beats on ARR, total ARR in quite some time. And I'm just trying to understand what exactly changed this quarter that drove that rate of change to the positive and how durable is that going forward? I know you mentioned that, you know, Gen AI is not contributing to the model yet, but did you just do way more conversions this quarter? Did MDDR just start showing up in the numbers? Or is it just a function of maybe maintenance to SaaS uplift is just much higher than what you've seen on your prior conversion rate? So just help us understand exactly what drove this rate of change and how durable you think this outperformance that you delivered today is going forward.

First of all, thank you. We're really happy with kind of the results of the quarter. And as you mentioned, the strong quarter is really without the co-pilot being a material contributor yet. I think when you look at kind of the underlying factors that helped drive this quarter, One of them was the shorter sales cycles on SaaS, and the other one was much better new logo activity. Those were kind of two of the elements that drove that. I think it kind of ties to the fact that MDDR, together with our SaaS offering, is making things much easier for our customers to consume. So when you look at kind of the overall health of the business, we're really happy with where we are. Obviously, we're very focused on continuing on that execution, but I wouldn't say that the conversions is what drove the business. What drove the business in Q2 was the new logo activity and the shorter sales cycles that we saw in the past.

Our next question comes from Rudy Kissinger with DA Davidson. Please proceed with your question.

Hey, guys. Thanks for taking my questions, and congrats to the numbers. Looks like a great quarter. I guess I'm curious, you know, on Copilot, you've talked about it, you know, becoming a healthier material contributor to pipeline. You know, if we combine that with what you said about some of these faster sales cycles on SaaS and obviously those deals being SaaS deals, I guess that would imply we should start to see some material benefit to your new business from Copilot, probably, you know, several quarters out from now. Is that the right way we should be thinking about it? Or with some of these deals, Around Copilot, are you seeing them progress slower, faster than your typical deal, just given the pace of how those companies are rolling out Copilot? Thank you.

So one thing we try to do is only comment on kind of data that gives us enough confidence to call it out. And you've heard us talk about the expectation that sales cycles on SaaS would be much shorter from day one of announcing the transition. But this is kind of the first quarter that we feel confident in calling it out because 18 months have gone by since we announced the transition and we have that data to support it. I don't know how Copilot kind of changes the data. I can promise you that from a transparency perspective, we've tried to be very clear in providing color when we see data that materializes. But I think if you look at kind of co-pilot starting to contribute, we really don't know if it can contribute later this year or in 2025. What I promise you is that once we see data that supports that, we'll call it out and provide you that part.

The way to think about it, we believe, is to understand that if these co-pilot tools are going to be in the hands of knowledge users the need for security will be almost inevitable. And without a doubt, at this point, we believe that we have the best product in the market. So if this tool will be in the hands of users and we believe that there is real AI revolution based on LLM, you will need a solution like Vaughan's in order to protect it.

Our next question comes from Shanique Kothari with Robert W. Baird. Please proceed with your question.

Yeah, thanks for taking my question and great job this quarter. Yaki, so you highlighted, of course, the shorter field cycles and the pricing uplift. continues to be strong. In some cases, you've seen deal sizes increase in excess of what customers, as a result of customers consuming more of the platform upon conversion. And Kyler, the real estate firm, is immediately able to reduce the footprint and the maintenance by moving to SaaS. Just that's all great. But I'm just curious if you still have a long tail of the on-prem base, which might be a bit more price sensitive and a bit more averse to transition that that we kind of have been hearing. And you have sales incentives you touched upon. Just can you elaborate a bit on how do you plan on working with these customers to demonstrate the value proposition and justify this price uplift of the SaaS platform for this existing cohort of on-prem and have a quick follow-up for Guy?

Yeah, I think that with the vast majority of our customers, it's just very compelling to move to SaaS because of the automated outcomes. So you want to make sure that you can avoid a breach without almost any effort, and it works very well. But these transitions are hard work. You need great attention to details, a lot of execution. You need to go to the customers that use one product, and you need to make sure that they understand that this is something completely different. and demonstrate it, but we know how to do it. We know how to do transitions, but I can tell you that every day is just a lot of work, and you need to do it diligently and effectively, but this is exactly what we are doing, and you can see the results.

It appears we have no further questions at this time. We would now like to turn the floor back over to Tim Kirst for closing comments.

Thanks to the interest in Varonis. We look forward to speaking with you all at conferences this quarter.

This concludes today's teleconference. You may disconnect your lines at this time. Thank you for your participation.