This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.
spk14: Thank you for standing by and welcome to the Xero Fox fiscal fourth quarter 2023 results conference call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question and answer session. And as a reminder, today's call is being recorded. I would now like to turn the conference over to Mark Griffin. Senior Vice President of Investor Relations for ICR. Mark.
spk15: Thank you, Operator.
spk16: Good morning, and thank you for joining us today to review XeroFox's fiscal fourth quarter 2023 financial results. With me on the call today are James C. Foster, as many of you know him, Foster. Foster is the founder, chief executive officer, and chairman of XeroFox. Also with me on the call is XeroFox's CFO, Tim Bender. After prepared remarks, we will open up the call for questions. During this call, we may make statements related to our business that are forward-looking statements under federal securities law, including statements related to our anticipated financial results, growth opportunities in external cybersecurity, our progress in achieving profitability, and expected benefits from our acquisition of IDF. These statements are not guarantees of future performance, but rather are subject to a variety of risks and uncertainties. Our actual results could differ materially from expectations reflected in any forward-looking statement. Forward-looking statements made today speak only to our expectations as of today, and we undertake no obligation to publicly update or revise them. For discussion of the material risks and other important factors that could affect our actual results, please refer to the risk factor section in our SEC filings and on the SEC's EDGAR system and our website, as well as the risks and important factors discussed in today's earnings refreshment. Additionally, non-GAAP financial measures will be discussed on this conference call. Please refer to the tables in our earnings release and on the investor relations portion of our website for reconciliation of these measures to the most directly comparable GAAP financial measure. With that, I'd like to turn the call over to ZeroFox's Chief Executive Officer. Foster, please go ahead.
spk04: Thanks, Mark. Good morning, everybody. I'm really excited to speak with you today about our strong close to the fiscal year. the continued significant growth opportunity we see in external cybersecurity, and our focus for the upcoming year on taking a balanced approach between capitalizing on growth and progressing on our path to profitability. Let's start with a high-level look at our Q4 performance. As the only cybersecurity company to go public in 2022, I'm proud of what our team was able to accomplish. We closed out the year on a high note, beating the high end of our guidance for the second consecutive quarter. We ended the year with ARR of 157 million, and year-over-year platform ARR grew 27%. We also had another strong quarter of new customer wins ending the quarter with over 1,200 subscription customers, up 20% year-over-year. We saw continued success winning larger deals as well, ending the year with 147 subscription customers with ARR greater than $100,000, an increase 25% year-over-year. Overall, we were pleased with the performance, particularly given a continued volatile and uncertain macro environment. The demand environment we experienced in Q4 was consistent with what we saw in Q3, and thus far is remaining more stable than the macro environment. That said, like other cybersecurity and technology companies, we've continued to see increased scrutiny on larger deals and longer sales cycles in certain cases and geographies, but it has not affected our overall demand. We attribute this experience to the resiliency of cybersecurity and our go-to-market execution. We also recognize our smaller size and emerging nature of the market are positive factors. Taking a closer look at Q4, we continue to see healthy demand for both new and existing customers across our external cybersecurity platform and service offerings. During the quarter, we had several key platform and service wins, including a multi-six-figure deal with the Fortune 100 U.S. grocery chain. This deal was a competitive displacement opportunity that we won over key public company competitors. The customers using ZeroFox to protect multiple brands, domains, executives, and mobile apps to detect and disrupt coordinated campaigns across the dark web through our threat intelligence products. ZeroFox won this deal due to the strength and comprehensiveness of our platform. differentiated dark web and dark ops capabilities, and our ability to take action against the threats we discovered, including removing leaked data and personal information with our new PII disruption service. We signed a six-figure deal with a Fortune 100 retail company that is using Xerovox to protect and disrupt threats to their corporate and executive social media accounts and domains. We also won a six-figure multi-year deal with a large European critical infrastructure company This was a competitive displacement with the customers selecting ZeroFox for our comprehensive platform across three of our four pillars, including digital risk protection, threat intelligence, and disruption. ZeroFox response, our fourth and newest pillar, focused on incident and brief response capabilities, also performed well in the quarter. We had several key wins, including a large deal with a U.S. restaurant chain where we were brought in to leverage our response platform and operations center. This was a competitive deal with a customer selected Xerofox because of our proven track record of delivering market leading breach response services at scale. Importantly, in Q4, we started to see early signs of synergies following our Q3 acquisition of IDX. For example, our recently launched PII Removal Disruption Service, a joint IDX and Xerofox innovation, was a key required capability for several end-quarter ZeroFox platform deals. One of our long-standing ZeroFox customers, a Fortune 50 media and technology company, also engaged with ZeroFox Response for the first time over their legacy incumbent provider. We also were able to drive some improvement in response rent weights by launching marketing campaigns to drive education and the value of the two combined businesses. This is an example of how we're leveraging Xerofox has larger and more established go-to-market capabilities to drive synergies. While we are pleased with this early progress, we know there is still a lot more work ahead of us. Consistent with what we said last quarter, we continue to expect these synergies to become more meaningful in the latter half of this year. Because this is only our second earnings call since going public, and some investors are newer to the story, I'd like to spend just a few minutes to provide an overview of external cybersecurity. The external cybersecurity category of products helps customers expose, disrupt, and respond to threats beyond the device and outside the perimeter. Traditionally, the focus of cybersecurity has been on endpoints and firewalls with the goal of protecting own assets with internal security controls. However, digital transformation is propelling a proliferation of digital assets and data on external platforms that are outside the control of organizations and not protected by traditional security controls. Examples of these platforms include the surface web, deep and dark web, social media sites, collaboration platforms, code sharing sites, and mobile app stores. As business shifts online, the external attack surface for every organization continues to grow, increasing potential financial and reputational risk. And the risk is real. The adversaries are increasingly targeting this external attack surface with phishing attacks, impersonations of companies, brands and executives, account takeovers, fraud, and even attacking those exposed external platforms. At the same time, the volume of threats continues to increase, making it more critical to use actionable threat intelligence for continuous visibility and continuous protection from threats beyond the perimeter. The size and scale of the external attack surface is driving a growing need for external cybersecurity solutions. Today, we provide continuous visibility into that entire external attack surface, robust threat intelligence, protection with the ability to disrupt active threats, and comprehensive response capabilities to assist with investigations, incidents, and breaches. So why do we believe that ZeroFox is well positioned to capitalize on this opportunity? Three main reasons. The first is our platform. We believe that solving the external cybersecurity problem requires a platform-based approach. This is exactly what we have and what we will continue to build upon. Our platform combines patented AI-powered analysis, full spectrum threat intelligence, adversary disruption, and response capabilities into a single comprehensive solution. Customers want a single pane of glass. The second reason is scale. We believe the scale at which we operate and disrupt threats on a daily basis for our customers represents a competitive advantage. We also believe that our growing size and customer base will increase this scale advantage over time. We believe this will be especially true in less predictable macro environments like we're operating in today. And the third reason is our experience and focus. Solving the external cybersecurity problem has been our focus since we founded the company just over 10 years ago. We continue to innovate and deepen our platform to ensure that we have identified and disrupt every external attack. Fiscal year 23 was transformational for Xerofox. We were the only cybersecurity company to go public last year, and we have the capital required to cross over free cash flow break even late next year. We raised new growth capital, and with the acquisition of IDX, we strategically expanded our platform to include Xerofox response. As we look to this upcoming fiscal year, we believe that ZeroFox has the resources, scale, and platform depth to ensure another successful growth year. At the same time, we believe it's important to pursue this growth in a disciplined way that allows us to make progress towards becoming profitable. Looking forward, I would like to outline our top three priorities, and you'll be able to remember these by the simple acronym FOX. First is for focus. We will continue to focus on executing our strategic plan to lead and grow our external cybersecurity platform capabilities and customer base. Success here will be reflected in quarterly performance metrics with a focus on core growth. Second, O is for optimization. We know that the path of profitability is an important area for focus for investors, and it's a key area of focus for ZeroFox. This year, we will continue to optimize our infrastructure to support our near-term growth while laying the foundation to drive operational efficiencies and leverage. Our goal is to achieve cash flow break even late next year. Lastly, X represents X factor. This year, our X factor will be executing on driving more meaningful synergies and improving our overall cross-selling efforts from our recent acquisitions. In summary, our strong fourth quarter capped off a transformational year for Xerofox. And with the continued energy, passion, and commitment of our Foxes around the world, I believe that ZeroFox is well-positioned to execute on our initiatives and further leverage our platform. With that, I would like to turn the call over to our CFO, Tim Bender, who will provide more color on our financial performance and our guidance for Q1 and this fiscal year. Tim, the floor is yours.
spk05: Thanks, Foster. As Foster mentioned, ZeroFox ended its fiscal year 23 on a positive note. Before we take a closer look at our Q4 results, I wanted to remind everyone that due to the accounting requirements of the transaction, prior period financials presented reflect only the results of ZeroFox, Inc. on a standalone basis and do not include the results of IDX. For comparable purposes, we have provided investors with supplemental financial information that includes historical standalone financial statements for both ZeroFox and IDX. This information can be found on our investor relations website. Now let's take a closer look at our Q4 results. With the exception of revenue, unless otherwise stated, all financial results we will discuss today are non-GAAP financial measures. Reconciliations between our GAAP and non-GAAP results can be found in our earnings release. For Q4, Xerofox reported revenue of $45.4 million. This exceeded the high end of our inferred Q4 guidance range. Subscription revenue was $16.5 million. Subscription revenue consists of revenue from zero Fox platform sales. Services revenue was $28.9 million. Services revenue consists of revenue from response services, as well as revenue from recurring and non-recurring intelligence services. As of January 31st, our annual recurring revenue was $157 million. ARR primarily consists of platform subscriptions as well as a small amount of recurring intelligence services and $83 million from our large government contract. We ended the quarter with 1,203 subscription customers. We continue to see a significant opportunity to both land new customers and expand platform capabilities and services within our existing customer base. As Foster mentioned, in fiscal year 23, we saw continued success winning larger deals. we ended the year with 147 subscription customers with ARR greater than 100,000, representing a year-over-year increase of 25%. Turning to gross margin. For the fourth quarter, subscription gross margin was 73%, an increase from last quarter's subscription gross margin of 72%. While there were some positive impacts from increased efficiencies, subscription gross margin also benefited from the timing of investments. From a seasonality perspective, our investments tend to be more heavily weighted to the first half of our fiscal year. Given this, we would expect subscription gross margin to slightly decline in Q124 and then increase moderately over the remainder of the year. While there is a potential for quarter-to-quarter volatility, our goal is to deliver consistent, moderate subscription gross margin improvement on an annual basis, as we have done so for several years. Total gross margin was 41 percent compared to 40 percent last quarter. The improvement in total gross margin was driven primarily by the higher subscription gross margin referenced above. We continue to see opportunities to improve our overall gross margin as we scale our business, drive greater cost efficiencies, and our higher margin subscription revenue becomes a greater portion of our overall revenue mix. Turning to operating expenses. Total operating expenses were $26 million in the quarter. When comparing expense levels to last quarter, keep in mind that Q3 was a partial quarter that reflected three fewer days of expenses. Setting this aside, the increase in expenses was primarily driven by increased sales commissions, which is typical in Q4 for us, as well as continued investment in R&D and transaction expenses in G&A related to becoming public. As we looked at Q1-24, we would expect operating expenses to increase slightly in absolute dollars driven by the timing of professional fees for our annual audit, residual transaction-related filing costs, and planned investments that should provide operating leverage in the second half of the year. Our loss from operations was $7.2 million. Looking at the balance sheet, we ended the quarter with $48 million in cash, $30 million in accounts receivable, and $54 million in total deferred revenues. Our total outstanding debt was $174 million, including $157 million in convertible debt. The convertible note has a cash interest rate of 7% and a pick rate of 8.75%. Consistent with last quarter, we elected the pick option for our second interest payment due on March 15th. We believe the pick option continues to provide us the opportunity and flexibility to prudently invest in the growth of our business. Turning to cash flow, cash flow used in operations was $5.3 million. Now to our outlook. As we indicated last quarter, we are providing revenue and non-GAAP loss from operations guidance for Q1 and fiscal year 24. Our outlook reflects our solid Q4 23 results, assumes no material changes in the macro environment and consistent demand for our external cybersecurity solutions, and does anticipate volatility within our service business. Our outlook also incorporates my prior commentary regarding the trajectory of subscription gross margin and operating expenses for Q1. For Q1 24, we currently expect revenue to be in the range of $44.0 million to $44.6 million and non-GAAP lost from operations to be in the range of $9.8 million to $9.3 million. For fiscal year 24, we currently expect revenue to be in the range of $183 million to $187 million and non-GAAP lost from operations to be in the range of $29 million to $26 million. As Foster mentioned earlier, we are focused on the path to profitability, and we continue to expect that we will achieve free cash flow breakeven in the latter part of fiscal year 25. With that, we'd like to take your questions. Operator?
spk14: As a reminder, to ask a question, please press star 11 on your telephone. To withdraw your question, please press star 11 again. Please stand by while we compile the Q&A roster. The first question comes from Joseph Gallo with Jefferies. Your line is now open.
spk02: Hey, Foster, Tim, Todd, really appreciate the question. Obviously, there's a lot of factors that impact the revenue guide between macro and the different components of the business following the transaction. How should we think about ARR growth trending versus revenue growth, which is probably a truer reflection of the health of the business?
spk05: Hey, Joe, this is Tim. Yeah, I mean, if you think about our overall growth, the subscription side of the business does grow a little bit faster. So you would expect that the ARR would grow a little bit ahead of our overall total revenue growth.
spk02: Okay, that's helpful. And then maybe just, Tim, while I have you, just talk through the puts and takes of the guidance. You know, your revenue guidance, I would believe, appears prudent. I mean, you just did 17% growth, and I think your full year guide implies you're exiting the year at mid-single digits. So, one, how should we think about your guidance methodology? And two, maybe as we move beyond these macro headwinds, how should we think about the sustainable growth rate of the business?
spk05: Yeah, so I guess if we get into methodology and philosophy, the first thing, we have the OPM contract that certainly weighs as an anchor on the overall growth rates. Obviously, a very consistent cash flow generating contract, but does weigh on overall growth. Again, subscription growth, that line of the business is the strongest performer, and I think you'll see that continue through Q1 in the fiscal year. And then we're just really mindful right now of the services business. Obviously, acquisition is fairly new for us, and there's a bit more volatility in that line of business as it relates to the subscription revenue. Awesome.
spk02: And then maybe if I can just sneak in one more. Foster, what surprised you in your first quarter as a public company? And then maybe focusing on the F and Fox, what are the inputs to the growth algorithm that you're factoring in, and what are the biggest opportunities for growth in fiscal 24? Thanks, guys. Yeah, thanks, Joe.
spk04: Well, I mean, outside of the fact that we had a near tech banking meltdown 72 hours ago, throwing a wrench days before our first public earnings call, I think we had a strong Q4 performance. As Tim iterated, we beat the high end of our guidance range. I'm pleased with what the team's doing. but we have meaningfully more in synergies available to us. But we're being mindful of the growth that we project this year given this uncertainty, and certainly the last 72 hours, you know, adding a new element of uncertainty to the macro environment that we have. If you look back at the growth numbers that we did put up for Q4, Tim mentioned that our subscription business is far outpacing the rest of our businesses in terms of growth rate. And I'd like to draw another proof point towards you here is the growth in large customers. I mean, our growth in large customers, over $100,000 in ARR, is also outpacing our overall growth. That's a positive factor that I'd like to make sure that everybody's cognizant of is when, in general, cybersecurity customers pay more for a solution set, we believe that shows that there's a demonstratable problem that's out there and that we have enough trust from our customers to solve it on their behalf. That's a very important metric that we keep a close eye on. Thanks, guys.
spk14: Please stand by for our next question. Our next question comes from Brad Reebok with Stiefel. Your line is now open.
spk20: Great. Thanks very much. Foster, you indicated some early synergies on cross-selling with IDX. Can you maybe give us a sense of where the sales force is in training, and is everyone fully up to speed, or is there still opportunity there? Thanks.
spk04: Appreciate the question, Brad. We have sales kickoff in 48 hours, and so we're using that as the foundation, as we do every year, to re-enable, re-establish the position We anchor any of our pricing changes that we have. We're using that as a meaningful catalyst to accelerate the revenue synergies for the acquisition of IDX this year. We did, however, see some nice what I call early synergies in Q4 that we mentioned. The release of this new PII disruption service capability on our platform was a meaningful win from multiple customer opportunities. I think we were positively surprised at how fast those deals moved through the pipeline and the traction and demand that we saw from those customers. And those were just small single digit percentages of the total net new customers we acquired in Q4. And so I think our saturation of opportunity is really just looking at a couple points of our total customer base. There's a lot of opportunity. upside and white space that we anticipate tackling this year with the team from IDX and the technologies that are in our platform now. That's great.
spk20: And then, Tim, you had mentioned some seasonality on expenses. How about helping us with seasonality on cash flow? Thanks.
spk05: Sure. I mean, I think typical for ZeroFox in our history, and I know it's a short history for you guys, but Q1 has always been our most challenge quarter from a cash flow standpoint and wouldn't expect that this year would be different. But just like the expense flow, cash flow tends to perform throughout the year, getting better each quarter, and we would expect that to happen again this year.
spk19: That's great. Thanks very much.
spk14: Please stand by for our next question. The next question comes from Yi-Fu Lee with Cantor. Your line is now open.
spk10: Thank you very much. Congrats on the strong finish, Foster and Tim, especially as a public company. A couple of questions for Foster or Tim. Starting with the IDX, I was wondering if you guys could give us some updates on revenue synergy generations from the platform upsell, cross-sell. I know, Foster, you mentioned about a deal, a joint deal between Zilfox and IDX. With a media company, I wonder if you could double-click on that one for us, on cross-sell revenue synergies.
spk04: Good morning, E. For better or worse, in terms of revenue synergies, I think it was minimal in Q4. We were excited to see what I call feature demand within the platform that accelerated sales cycles. But for me to say that just because of that Just because of that feature alone. We won those net deals would probably be doing our platform a disservice as a whole Where I see revenue synergies really Manifesting itself here this fiscal year will be an overall pipeline and demand generation improvement We are seeing consistent trends from q4 although we're being mindful of of what this year could bring in terms of the macro and then outside of that we We mentioned, as we were getting ready to go public, the very small overlap in customers that we had as an organization. What we put on record was about 5% or less total customers that overlap between the two organizations, which by definition leaves us a lot of upside for cross-sell and upsell this year. And that's something that we think about when we talk about our X factor is top of mind for our performance. And quick math would lead you to believe that if you look at our subscription ARR, any meaningful improvement in cross-sell, up-sell would see an incremental accelerated growth rate there for ARR.
spk10: That makes sense, Foster. Thank you for the comment on that. And then on the multi-six-figure deal, we understand Zilbox is coming from a platform play. I was wondering, you know, you mentioned about the rip and replace. You know, what type of solution did you rip and replace? How long was the deal cycle? Was the customer concerned with the cost? They want to lower their TCO, a total cost of ownership. That's why they went to Joe Fox. Can you give us more color on that multi-figure rip and replace deal?
spk08: Yeah.
spk18: Yeah, thanks for that question.
spk04: A couple thoughts come to mind. We're in a competitive market, and I think that is – That's a good thing for cybersecurity as a whole to have multiple solutions and multiple options. It allows customers to get educated on the problem set from multiple points of view. But as an organization, we've been working on this problem longer than our competitors. We've been focused on this problem longer than our competitors. And I think the market is really starting to take note of the differentiated capability set and our multi-pillar strategy within our platform. And it's something that's been asked for by our customers. If I think about innovation, we're a customer-first organization, and our path to innovation really is built on top of customer feedback and customer demand. The competitors that we see, especially in the enterprise, just about every enterprise deal we do is competitive in nature, come to this from maybe one of our pillars. Maybe they're a DRP pillar or a threat intelligence pillar. What we see is some folks don't feel like they're getting the true value. We have threat intelligence companies that we displace on a regular basis where our constant feedback we hear is they're too expensive and we're tired of searching for data or intelligence. We want to understand what's actionable and we want somebody to help us take action immediately. We don't want more work where we need to constantly search for answers. And I think our customers appreciate the proactive nature and protective nature of our platform as opposed to a search and find platform.
spk10: That makes sense. And then I'm going to end it off, Tim, on two more financial questions I made. The breakout between new and existing deals, we understand the macro conditions, right? Any percentage breakdown between new logos versus existing? And the last one is about the investments. You mentioned it's going to be first half heavy, first half of fiscal 24 heavy. You have about 800 foxes at the moment. what's your hiring plans, investments plans, et cetera. And that's it for me. Thank you. Thank you, gentlemen.
spk04: Yi, would you mind clarifying the first part of that question again? We have a little bit of time here.
spk10: On the new and existing deals, like how much of the revenue generation is coming from new logo versus your existing customer base? And then the second part is your investment plans. You have about 800 boxes right now.
spk09: I was wondering, you know, your investment plans for the first half, throughout the year, actually.
spk05: So, yeah, so if we think about, like, the revenue mix, again, I think it's in line with our ARR growth that we talked about from, you know, new customers and existing customers. Most of our revenue does come from existing customers. We have a nice base, and we're, you know, adding roughly, you know, maybe 100 new customers a quarter, but, you know, if you think about that number. So it's still mostly aligned to our existing base because we have a strong customer base in that regard. And then I would say maybe on the hiring plan, I mean, I think our hiring, without giving exact numbers, it's, again, going to be balanced where we need to see the growth in the company and support the growth. So as we grow our revenue, we'll grow our services, delivery, you know, commensurate with our margin and keep that in line. Again, talking about, you know, adding, you know, moderate growth over the course of the year. And then I think, you know, GNA will kind of moderate as we become more mature. Sales and marketing is, you know, as we add customers and as we continue to grow, we'll have to add, you know, capacity in our sales and marketing functions to, you know, handle new customers, handle our growth in customers and to drive, you know, growth for the upcoming and future years. And then R&D is just we want to be balanced in our investment. Again, we have a strong and robust platform, but as Foster mentioned, there's competition out there, so we want to continue to innovate as well as keep our platform strengthened, keep our strong platform as it's a driver of our revenue. So I think we're balanced there. I don't think we're over-investing in growth. I think it's the right balance to handle our revenue growth.
spk10: Thank you for that.
spk14: I show no further questions at this time. I would now like to turn the conference back to Foster for closing remarks.
spk03: Thank you, operator. As you can tell, we are very excited about the opportunity in front of us.
spk04: I want to emphasize that we are focused on taking a mindful approach that allows us to capitalize on the growth opportunity we see this year while also making progress on a path to profitability. Again, I want to thank everybody for joining us today.
spk18: And a special thanks to those that ask questions. Have a great day. Cheers.
spk14: This concludes today's conference call. Thank you for participating. You may now disconnect. Thank you for standing by and welcome to the ZeroFox Fiscal Fourth Quarter 2023 Results Conference Call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question and answer session. And as a reminder, today's call is being recorded. I would now like to turn the conference over to Mark Griffin, Senior Vice President of Investor Relations for ICR. Mark?
spk16: Thank you, Operator. Good morning, and thank you for joining us today to review ZeroFox's fiscal fourth quarter 2023 financial results. With me on the call today are James C. Foster, as many of you know him, Foster. Foster is the founder, chief executive officer, and chairman of ZeroFox. Also with me on the call is ZeroFox's CFO, Tim Bender.
spk15: After prepared remarks, we will open up the call for questions.
spk16: During this call, we may make statements related to our business that are forward-looking statements under federal securities law, including statements related to our anticipated financial results, growth opportunities in external cybersecurity, our progress in achieving profitability, and expected benefits from our acquisition of IDX. These statements are not guarantees of future performance, but rather are subject to a variety of risks and uncertainties. Our actual results could differ materially from expectations reflected in any forward-looking statement. Forward-looking statements made today speak only to our expectations as of today, and we undertake no obligation to publicly update or revise them. For discussion of the material risks and other important factors that could affect our actual results, please refer to the risk factor section in our SEC filings and on the SEC's EDGAR system and our website, as well as the risks and important factors discussed in today's earnings press release. Additionally, non-GAAP financial measures will be discussed on this conference call. Please refer to the tables in our earnings release and on the investor relations portion of our website for reconciliation of these measures to the most directly comparable GAAP financial measure. With that, I'd like to turn the call over to ZeroFox's Chief Executive Officer. Foster, please go ahead.
spk04: Thanks, Mark. Good morning, everybody. I'm really excited to speak with you today about our strong close to the fiscal year, the continued significant growth opportunity we see in external cybersecurity, and our focus for the upcoming year on taking a balanced approach between capitalizing on growth and progressing on our path to profitability. Let's start with a high level look at our Q4 performance. As the only cybersecurity company to go public in 2022, I'm proud of what our team was able to accomplish. We closed out the year on a high note, beating the high end of our guidance for the second consecutive quarter. We ended the year with ARR of 157 million and year over year platform ARR grew 27%. We also had another strong quarter of new customer wins ending the quarter with over 1200 subscription customers up 20% year over year. We saw continued success winning larger deals as well, ending the year with 147 subscription customers with ARR greater than $100,000, an increase 25% year over year. Overall, we were pleased with the performance, particularly given a continued volatile and uncertain macro environment. The demand environment we experienced in Q4 was consistent with what we saw in Q3, and thus far is remaining more stable than the macro environment. That said, like other cybersecurity and technology companies, we've continued to see increased scrutiny on larger deals and longer sales cycles in certain cases and geographies, but it has not affected our overall demand. We attribute this experience to the resiliency of cybersecurity and our go-to-market execution. We also recognize our smaller size and emerging nature of the market are positive factors. Taking a closer look at Q4, we continue to see healthy demand for both new and existing customers, across our external cybersecurity platform and service offerings. During the quarter, we had several key platform and service wins, including a multi six-figure deal with the Fortune 100 US grocery chain. This deal was a competitive displacement opportunity that we won over key public company competitors. The customers using Xerofox to protect multiple brands, domains, executives, and mobile apps to detect and disrupt coordinated campaigns across the dark web through our threat intelligence products. ZeroFox won this deal due to the strength and comprehensiveness of our platform, differentiated dark web and dark ops capabilities, and our ability to take action against the threats we discovered, including removing leaked data and personal information with our new PII disruption service. We signed a six-figure deal with a Fortune 100 retail company that is using ZeroFox to protect and disrupt threats to their corporate and executive social media accounts and domains. We also won a six-figure multi-year deal with a large European critical infrastructure company. This was a competitive displacement with the customers selecting ZeroFox for our comprehensive platform across three of our four pillars, including digital risk protection, threat intelligence, and disruption. ZeroFox Response, our fourth and newest pillar focused on incident and breach response capabilities, also performed well in the quarter. We had several key wins, including a large deal with a U.S. restaurant chain where we were brought in to leverage our response platform and operations center. This was a competitive deal with a customer-selected ZeroFox because of our proven track record of delivering market-leading breach response services at scale. Importantly, in Q4, we started to see early signs of synergies following our Q3 acquisition of IDX. For example, our recently launched PII Removal Disruption Service, a joint IDX and ZeroFox innovation, was a key required capability for several end-quarter ZeroFox platform deals. One of our longstanding ZeroFox customers, a Fortune 50 media and technology company, also engaged with ZeroFox Response, for the first time over their legacy incumbent provider. We also were able to drive some improvement in response rent weights by launching marketing campaigns to drive education and the value of the two combined businesses. This is an example of how we're leveraging XeroFax's larger and more established go-to-market capabilities to drive synergies. While we are pleased with this early progress, we know there is still a lot more work ahead of us. Consistent with what we said last quarter, we continue to expect these synergies to become more meaningful in the latter half of this year. Because this is only our second earnings call since going public, and some investors are newer to the story, I'd like to spend just a few minutes to provide an overview of external cybersecurity. The external cybersecurity category of products helps customers expose, disrupt, and respond to threats beyond the device and outside the perimeter. Traditionally, the focus of cybersecurity has been on endpoints and firewalls, with the goal of protecting owned assets with internal security controls. However, digital transformation is propelling a proliferation of digital assets and data on external platforms that are outside the control of organizations and not protected by traditional security controls. Examples of these platforms include the surface web, deep and dark web, social media sites, collaboration platforms, code sharing sites, and mobile app stores. As business shifts online, the external attack surface for every organization continues to grow, increasing potential financial and reputational risk. And the risk is real. The adversaries are increasingly targeting this external attack surface with phishing attacks, impersonations of companies, brands and executives, account takeovers, fraud, and even attacking those exposed external platforms. At the same time, the volume of threats continues to increase, making it more critical to use actionable threat intelligence for continuous visibility and continuous protection from threats beyond the perimeter. The size and scale of the external attack surface is driving a growing need for external cybersecurity solutions And today, we provide continuous visibility into that entire external attack surface, robust threat intelligence, protection with the ability to disrupt active threats, and comprehensive response capabilities to assist with investigations, incidents, and breaches. So why do we believe that ZeroFox is well-positioned to capitalize on this opportunity? Three main reasons. The first is our platforms. We believe that solving the external cybersecurity problem requires a platform-based approach. This is exactly what we have and what we will continue to build upon. Our platform combines patented AI-powered analysis, full-spectrum threat intelligence, adversary disruption, and response capabilities into a single comprehensive solution. Customers want a single pane of glass. The second reason is scale. We believe that scale at which we operate and disrupt threats on a daily basis for our customers represents a competitive advantage. We also believe that our growing size and customer base will increase this scale advantage over time. We believe this will be especially true in less predictable macro environments like we're operating in today. And the third reason is our experience and focus. Solving the external cybersecurity problem has been our focus since we founded the company just over 10 years ago. We continue to innovate and deepen our platform to ensure that we have identified and disrupt every external attack. Fiscal year 23 was transformational for Xerofox. We were the only cybersecurity company to go public last year, and we have the capital required to cross over free cash flow break even late next year. We raised new growth capital, and with the acquisition of IDX, we strategically expanded our platform to include Xerofox response. As we look to this upcoming fiscal year, we believe that ZeroFox has the resources, scale, and platform depth to ensure another successful growth year. At the same time, we believe it's important to pursue this growth in a disciplined way that allows us to make progress towards becoming profitable. Looking forward, I would like to outline our top three priorities, and you'll be able to remember these by the simple acronym FOX. First is for focus. We will continue to focus on executing our strategic plan to lead and grow our external cybersecurity platform capabilities and customer base. Success here will be reflected in quarterly performance metrics with a focus on core growth. Second, O is for optimization. We know that the path of profitability is an important area for focus for investors, and it's a key area of focus for ZeroFox. This year, we will continue to optimize our infrastructure to support our near-term growth while laying the foundation drive operational efficiencies and leverage our goal is to achieve cash flow break even late next year lastly x represents x factor this year our x factor will be executing on driving more meaningful synergies and improving our overall cross-selling efforts from our recent acquisitions in summary our strong fourth quarter capped off a transformational year for xerofox And with the continued energy, passion, and commitment of our Foxes around the world, I believe that ZeroFox is well-positioned to execute on our initiatives and further leverage our platform. With that, I would like to turn the call over to our CFO, Tim Bender, who will provide more color on our financial performance and our guidance for Q1 and this fiscal year. Tim, the floor is yours.
spk05: Thanks, Foster. As Foster mentioned, ZeroFox ended its fiscal year 23 on a positive note. Before we take a closer look at our Q4 results, I wanted to remind everyone that due to the accounting requirements of the transaction, prior period financials presented reflect only the results of ZeroFox, Inc. on a standalone basis and do not include the results of IDX. For comparable purposes, we have provided investors with supplemental financial information that includes historical standalone financial statements for both ZeroFox and IDX. This information can be found on our investor relations website. Now let's take a closer look at our Q4 results. With the exception of revenue, unless otherwise stated, all financial results we will discuss today are non-GAAP financial measures. Reconciliations between our GAAP and non-GAAP results can be found in our earnings release. For Q4, XeroFox reported revenue of $45.4 million. This exceeded the high end of our inferred Q4 guidance range. Subscription revenue was $16.5 million. Subscription revenue consists of revenue from zero Fox platform sales. Services revenue was $28.9 million. Services revenue consists of revenue from response services, as well as revenue from recurring and non-recurring intelligence services. As of January 31st, our annual recurring revenue was $157 million. ARR primarily consists of platform subscriptions, as well as a small amount of recurring intelligence services and $83 million from our large government contract. We ended the quarter with 1,203 subscription customers. We continue to see a significant opportunity to both land new customers and expand platform capabilities and services within our existing customer base. As Foster mentioned, in fiscal year 23, we saw continued success winning larger deals. We ended the year with 147 subscription customers with ARR greater than 100,000. representing a year-over-year increase of 25%. Turning to gross margin. For the fourth quarter, subscription gross margin was 73%. An increase from last quarter's subscription gross margin was 72%. While there were some positive impacts from increased efficiencies, subscription gross margin also benefited from the timing of investments. From a seasonality perspective, our investments tend to be more heavily weighted to the first half of our fiscal year. Given this, we would expect subscription gross margin to slightly decline in Q124 and then increase moderately over the remainder of the year. While there is a potential for quarter-to-quarter volatility, our goal is to deliver consistent, moderate subscription gross margin improvement on an annual basis, as we have done so for several years. Total gross margin was 41% compared to 40% last quarter. The improvement in total gross margin was driven primarily by the higher subscription gross margin referenced above. We continue to see opportunities to improve our overall gross margin as we scale our business, drive greater cost efficiencies, and our higher margins description revenue becomes a greater portion of our overall revenue mix. Turning to operating expenses. Total operating expenses were $26 million in the quarter. When comparing expense levels to last quarter, keep in mind that Q3 was a partial quarter that reflected three fewer days of expenses. Setting this aside, the increase in expenses is primarily driven by increased sales commissions, which is typical in Q4 for us, as well as continued investment in R&D and transaction expenses in G&A related to becoming public. As we looked at Q1 24, we would expect operating expenses to increase slightly in absolute dollars, driven by the timing of professional fees for our annual audit, residual transaction-related filing costs, and planned investments that should provide operating leverage in the second half of the year. Our loss from operations was $7.2 million. Looking at the balance sheet, we ended the quarter with $48 million in cash, $30 million in accounts receivable, and $54 million in total deferred revenue. Our total outstanding debt was $174 million, including $157 million in convertible debt. The convertible note has a cash interest rate of 7% and a pick rate of 8.75%. Consistent with last quarter, we elected the PIC option for our second interest payment due on March 15th. We believe the PIC option continues to provide us the opportunity and flexibility to prudently invest in the growth of our business. Turning to cash flow, cash flow used in operations was $5.3 million. Now to our outlook. As we indicated last quarter, we are providing revenue and non-GAAP loss from operations guidance for Q1 and fiscal year 24. Our outlook reflects our solid Q4 23 results, assumes no material changes in the macro environment and consistent demand for our external cybersecurity solutions, and does anticipate volatility within our service business. Our outlook also incorporates my prior commentary regarding the trajectory of subscription gross margin and operating expenses for Q1. For Q1 24, we currently expect revenue to be in the range of $44.0 million to $44.6 million, and non-GAAP lost from operations to be in the range of $9.8 million to $9.3 million. For fiscal year 24, we currently expect revenue to be in the range of $183 million to $187 million, and non-GAAP lost from operations to be in the range of $29 million to $26 million. As Foster mentioned earlier, we are focused on the path to profitability, and we continue to expect that we will achieve free cash flow breakeven in the latter part of fiscal year 25. With that, we'd like to take your questions. Operator?
spk14: As a reminder, to ask a question, please press star 11 on your telephone. To withdraw your question, please press star 11 again. Please stand by while we compile the Q&A roster. The first question comes from Joseph Gallo with Jefferies. Your line is now open.
spk02: Hey, Foster, Tim, Todd, really appreciate the question. Obviously, there's a lot of factors that impact the revenue guide between macro and the different components of the business following the transaction. How should we think about ARR growth trending versus revenue growth, which is probably a truer reflection of the health of the business?
spk05: Hey, Joe, this is Tim. Yeah, I mean, if you think about our overall growth, the subscription side of the business does grow a little bit faster, so you would expect that the AR would grow a little bit ahead of our overall total revenue growth.
spk02: Okay, that's helpful. And then maybe just, Tim, while I have you, just talk through the puts and takes of the guidance. You know, your revenue guidance, I would believe, appears prudent. I mean, you just did 17% growth and I think your full year guide implies you're exiting the year at mid-single digits. So, one, how should we think about your guidance methodology? And two, maybe as we move beyond these macro headwinds, how should we think about the sustainable growth rate of the business?
spk05: Yeah, so I guess if we get into methodology and philosophy, the first thing, we have the OPM contract that, you know, certainly weighs as an anchor on the overall growth rates. Obviously, a very consistent, you know, cash flow generating contract, but does weigh on overall growth. Again, subscription growth, that line of the business is the strongest performer, and I think you'll see that continue through Q1 in the fiscal year. And then we're just really mindful right now of the services business. Obviously, acquisition is fairly new for us, and there's a bit more volatility in that line of business as it relates to the service revenue, or the subscription revenue, excuse me.
spk02: Awesome. And then maybe if I can just sneak in one more, you know, Foster, what surprised you in your first quarter as a public company? And then maybe focusing on the F and Fox, what are the inputs to the growth algorithm that you're factoring in and what are the biggest opportunities for growth in fiscal 24?
spk06: Thanks, guys.
spk02: Yeah, thanks, Joe.
spk04: Well, I mean, outside of the fact that we had a near tech banking meltdown 72 hours ago, throwing a wrench days before our first public earnings call, I think we had a strong Q4 performance. As Tim iterated, we beat the high end of our guidance range. I'm pleased with what the team's doing, but we have meaningfully more in synergies available to us. But we're being mindful of the growth that we project this year, given this uncertainty. and certainly the last 72 hours adding a new element of uncertainty into the macro environment that we have. If you look back at the growth numbers that we did put up for Q4, Tim mentioned that our subscription business is far outpacing the rest of our businesses in terms of growth rate. I'd like to draw another proof point towards you here is the growth in large customers. Our growth in large customers, over $100,000 in ARR, is also outpacing our overall growth. That's a positive factor that I like to make sure that everybody's cognizant of is when, in general, cybersecurity customers pay more for a solution set, we believe that shows that there's a demonstratable problem that's out there and that we have enough trust from our customers to solve it on their behalf. So that's a very important metric that we keep a close eye on. Thanks, guys.
spk14: Please stand by for our next question. Our next question comes from Brad Reebok with Stifel. Your line is now open.
spk20: Great. Thanks very much. Foster, you indicated some early synergies on cross-selling with IDX. Can you maybe give us a sense of where the sales force is in training, and is everyone fully up to speed, or is there still opportunity there? Thanks.
spk04: I appreciate the question, Brad. we have sales kickoff in 48 hours. And so we're using that as the foundation, as we do every year, to re-enable, re-establish the position, re-anchor any of our pricing changes that we have. We're using that as a meaningful catalyst to accelerate the revenue synergies for the acquisition of IDX this year. We did, however, see some nice, what I call early synergies in Q4 that we mentioned. The release of this new PII disruption service capability on our platform was a meaningful win from multiple customer opportunities in Q4. I think we were positively surprised at how fast those deals moved through the pipeline and the traction and demand that we saw from those customers. And those were just small single digit percentages of the total net new customers we acquired in Q4. And so I think our saturation of opportunity is really just looking at a couple points of our total customer base. There's a lot of opportunity. upside and white space that we anticipate tackling this year with the team from IDX and the technologies that are in our platform now.
spk20: That's great. And then, Tim, you had mentioned some seasonality on expenses. How about helping us with seasonality on cash flow? Thanks.
spk05: Sure. I mean, I think typical for ZeroFox in our history, and I know it's a short history for you guys, but Q1 has always been our most challenge quarter from a cash flow standpoint and wouldn't expect that this year would be different. But just like the expense flow, cash flow tends to perform throughout the year, getting better each quarter, and we would expect that to happen again this year.
spk19: That's great. Thanks very much.
spk14: Please stand by for our next question. The next question comes from Yi-Fu Lee with Cantor. Your line is now open.
spk10: Thank you very much. Congrats on the strong finish, Foster and Tim, especially as a public company. A couple of questions for Foster or Tim. Starting with the IDX, I was wondering if you guys could give us some updates on revenue synergy generations from the platform upsell, cross-sell. I know, Foster, you mentioned about a joint deal between Zilfox and IDX. With a media company, wondering if you could double-click on that one for us, on cross-sell revenue synergies.
spk04: Good morning, E. For better or worse, in terms of revenue synergies, I think it was minimal in Q4. We were excited to see what I'd call feature demand within the platform that accelerated sales cycles. But for me to say that just because of that feature alone We won those net deals would probably be doing our platform a disservice as a whole. Where I see revenue synergies really manifesting itself here this fiscal year will be an overall pipeline and demand generation improvement. We are seeing consistent trends from Q4, although we're being mindful of what this year could bring in terms of the macro. And then outside of that, we mentioned, as we were getting ready to go public, the very small overlap in customers that we had as an organization. When we put on record, it was about 5% or less total customers that overlap between the two organizations, which by definition leaves us a lot of upside for cross-sell and upsell this year. And that's something that we think about when we talk about our X factor is top of mind for our performance. And, you know, quick math would lead you to believe that if you look at our subscription ARR, any meaningful improvement in cross-sell, up-sell would see an incremental accelerated growth rate there for ARR.
spk10: That makes sense, Foster. Thank you for the comment on that. And then on the multi-six-figure deal, we understand Zilbox is coming from a platform play. I was wondering, you know, you mentioned about the rip and replace. You know, what type of solution did you rip and replace? How long was the deal cycle? Was the customer concerned with the cost? They want to lower their TCO, a total cost of ownership. That's why they went to Jelfast. Can you give us more color on that multi-figure rip and replace deal?
spk18: Yeah. Thanks for that question.
spk04: A couple thoughts come to mind. We're in a competitive market, and I think that is – That's a good thing for cybersecurity as a whole to have multiple solutions and multiple options. It allows customers to get educated on the problem set from multiple points of view. But as an organization, we've been working on this problem longer than our competitors. We've been focused on this problem longer than our competitors. And I think the market is really starting to take note of the differentiated capability set and our multi-pillar strategy within our platform. And it's something that's been asked for by our customers. If I think about innovation, we're a customer-first organization, and our path to innovation really is built on top of customer feedback and customer demand. The competitors that we see, especially in the enterprise, just about every enterprise deal we do is competitive in nature, come to this from maybe one of our pillars. Maybe they're a DRP pillar or a threat intelligence pillar. What we see is some folks don't feel like they're getting the true value. We have threat intelligence companies that we displace on a regular basis where our constant feedback we hear is they're too expensive and we're tired of searching for data or intelligence. We want to understand what's actionable and we want somebody to help us take action immediately. We don't want more work where we need to constantly search for answers. And I think our customers appreciate the proactive nature of and protective nature of our platform as opposed to a search and find platform.
spk10: That makes sense. And then I'm going to end it off, Tim, on two more financial questions I made. The breakout between new and existing deals, we understand the macro conditions, right? Any percentage breakdown between new logos versus existing? And the last one is about the investments. You mentioned it's going to be first half heavy, first half of fiscal 24 heavy. You have about 800 boxes at the moment. What's your hiring plans, investments plans, et cetera? And that's it for me. Thank you. Thank you, gentlemen.
spk04: Yi, would you mind clarifying the first part of that question again? We have a little bit of time here.
spk10: On the new and existing deals, like how much of the revenue generation is coming from new logo versus your existing customer base? And then the second part is your investment plans. You have about 800 boxes right now.
spk09: was wondering, you know, your investment plans for the first half, throughout the year, actually.
spk05: So, yeah, so if we think about, like, the revenue mix, again, I think it's in line with our ARR growth that we talked about from, you know, new customers and existing customers. Most of our revenue does come from existing customers. We have a nice base, and we're, you know, adding roughly, you know, you know, maybe 100 new customers a quarter, but if you think about that number. So it's still mostly aligned to our existing base because we have a strong customer base in that regard. And then I would say maybe on the hiring plan, I mean, I think our hiring, without giving exact numbers, it's, again, going to be balanced where we need to see the growth in the company and support the growth. So as we grow our revenue, we'll grow our services, delivery, you know, commensurate with our margin and keep that in line. Again, talking about, you know, adding, you know, moderate growth over the course of the year. And then I think, you know, GNA will kind of moderate as we become more mature. Sales and marketing is, you know, as we add customers and as we continue to grow, we'll have to add, you know, capacity in our sales and marketing functions to, you know, handle new customers, handle our growth in customers and to drive, you know, growth for the upcoming and future years. And then R&D is just we want to be balanced in our investment. Again, we have a strong and robust platform, but as Foster mentioned, there's competition out there, so we want to continue to innovate as well as keep our platform strengthened, keep our strong platform as it's a driver of our revenue. So I think we're balanced there. I don't think we're over-investing in growth. I think it's the right balance to handle our revenue growth.
spk10: Thank you for that.
spk14: I show no further questions at this time. I would now like to turn the conference back to Foster for closing remarks.
spk03: Thank you, operator. As you can tell, we are very excited about the opportunity in front of us.
spk04: I want to emphasize that we are focused on taking a mindful approach that allows us to capitalize on the growth opportunity we see this year while also making progress on a path to profitability. Again, I want to thank everybody for joining us today.
spk18: And a special thanks to those that ask questions. Have a great day. Cheers.
spk14: This concludes today's conference call. Thank you for participating. You may now disconnect.
Disclaimer