IronNet, Inc.

Q3 2022 Earnings Conference Call

12/15/2021

spk01: Greetings. Welcome to the IronNet Inc. Q3 Fiscal Year 2022 Earnings Call. At this time, all participants are in a listen-only mode. A question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. Please note this conference is being recorded. I will now turn the conference over to your host, Nancy Fazioli, Investor Relations. Thank you. You may begin.
spk00: Thank you, Operator. Hello, and thank you for joining us. Today's conference call will address IronNet's financial results for the third quarter ended October 31st, 2021 that were announced this afternoon. Before we begin, please note that some of the statements we will be making today are forward-looking. These matters involve risks and uncertainties that could cause our results to differ materially from those projected in these statements. We therefore refer you to the risk factors included in our latest SEC filings. Our comments today also include non-GAAP financial measures. Additional details and reconciliation to the most directly comparable GAAP financial measures can be found in our third quarter earnings release, which is on the investor relations portion of our website at ir.ironnet.com. And now I'll turn the call over to our co-CEOs, General Alexander and Bill Welch, who have some remarks. They will be joined by our CFO, Jamie Gerber, for the question and answer portion of the call. General Alexander?
spk03: Good afternoon, and thank you for joining us today. I'd like to address our disappointing third quarter results and revise fiscal year outlook right up front. Our prior outlook for this fiscal year was supported by what we assessed as late-stage, multimillion-dollar strategic customer opportunities. The majority of these customers are in the U.S. public sector. We had previously expected to finalize these opportunities in the second half of this fiscal year. However, a number of them are now being impacted by delays in funding at the federal level. Given the delayed timing, we have removed these strategic opportunities from our fiscal year ARR outlook. I want to be clear that these are not lost deals. They remain, almost without exception, in the pipeline as strong viable opportunities. Let me give you several examples that might help illuminate these delays. The first is a double-digit million-dollar ARR opportunity with a branch of the military that is held up as part of the federal funding delays playing out in Washington. This contract continues to grow, but at a reduced pace. The second is another multimillion-dollar defense industrial-based customer whose contract with us is making its way more slowly through government procurement than we anticipated. We have several deals with states that are gaining momentum as the American Rescue Plan funds are arriving and being approved by state legislatures. We also have a large multi-million dollar opportunity with an international government that was working through political turmoil and the impacts of the pandemic. At our stage, large strategic opportunities remain an important driver of growth. These are also extremely important in developing the public-private partnership. As you saw in our press release, we now expect revenue of approximately $26 million in fiscal year 2022, which would be down from 10% from the prior fiscal year. We reduced our outlook for exit ARR for the fiscal year to approximately $30 million, which giving timing uncertainty now excludes large strategic opportunities. We have missed our expectations and we understand the criticality of being accountable and predictable as a public company. While we are not proud of our performance, we remain optimistic about our future. I would like to underscore that our conviction about our technology and market opportunities is unchanged and that we remain committed to our mission. transforming cybersecurity through collective defense. Our proof of value pilot opportunities have doubled over the last year, and collective defense as a concept is gaining momentum in the marketplace. Let me give you a few examples. A major state power authority in the Northeast asked to have additional electrical suppliers in its area added to its collective defense group. Malicious nation-state activity was quickly identified and eradicated with the help of Iron Dome and Iron Defense. This model of energy sector leadership is also now being considered for replication in major states in the Midwest and south-central United States. Another example is a Midwest-based insurance customer. This past quarter, we displaced a competitor's network detection and response solution to expand our own footprint. We are expanding in the Midwest in both financial services and the healthcare industry. A third example is a U.S. Department of Defense organization with advanced cyber capabilities that asked IronNet to submit to a laboratory evaluation to validate IronNet's network detection and response capabilities. This focused on detecting advanced cyber threats using behavioral analytics and artificial intelligence. The rigorous test simulated an advanced low and slow attack against a representative commercial network. The scenario was specifically designed to evade common signature detection tools and endpoint detection technology. IronNet was tested against 25 separate sophisticated attacks representing nearly a dozen specific MITRE attack techniques. The evaluation concluded that the iron defense capability identified all attacks within the environment. We are currently engaged with government contract representatives as a result of this positive outcome. On the product development side, we have made important progress this quarter as well. First, in expediting time to deployment, thanks to significant orchestration effort, Iron Defense can now be provisioned and deployed in Amazon Web Services in minutes. We continue to build our virtual network sensor capabilities, which will allow the customer to leverage compute resources already existing in their data center. Second, with regard to our user interface, we developed and are now implementing a comprehensive training curriculum to improve knowledge of the significant features included in our product and to facilitate increased product adoption. We have made strides in making the user interface more user-friendly, facilitating greater collaboration among secure users of various levels of experience. Third, and notably, we have developed a proprietary and further differentiating event correlation engine we call CODA, or Correlation of Detection Analytics, which allows us to effectively chain events and entities together and provide the user a view of all related events in an attack sequence. This evolution of the product provides incredible alert efficiency while reducing overall alert fatigue of the users. We are in beta testing with key customers and anticipate that this will be a highly appreciated development for customers as we roll it out more broadly next year. In a recent example of our product strength, The log4j vulnerability highlighted IronNet's detection and collaboration capabilities. We leveraged our cyber operations center and hunt diagnostics to understand the exposure of the vulnerability. We deployed more than 400 rules and nearly 30 new behavioral analytics to ensure our customers remain protected. Our confidence in our underlying model is bolstered by the dynamics at play in security software in general. With digitization comes heightened cyber risks that continue to increase. We saw it this weekend with Log4J. The Department of Justice announced last month that a ransomware attack has targeted as many as 1,500 companies this past summer. The FBI issued a warning to U.S. companies about the threat from Iranian hackers. And the Canadian health care system was subjected to a disruptive attack. The escalation of malicious cyber activity is happening despite what has been reported as the highest level of investment in cybersecurity suspending on infrastructure protection that software has ever seen, which according to Gartner is almost $25 billion this year and growing at nearly 17% worldwide. Clearly, it's the significant investments that the private and public sectors have made in cyber defense and the manner in which they are being employed is still not working. The companies, states, and nations that are the foundation of global economies remain vulnerable. Collective defense is an important way to break the defend in isolation model that continues to show itself to be too slow, too inefficient, and is in fact a hindrance to the public and private sector alike from enabling each of their significant investments to become more than the sum of their parts. IronNet is the sole cyber technology addressing this gap. Our network detection response solution and our unique collective defense model has been evaluated and then recognized and lauded as a transformative technology that's absolutely critically needed. Recently, Chris Inglis, U.S. National Cyber Director, is quoted as having commented on IronNet's collective defense model that we need to make it such that if you are entering in this space, that you need to beat all of us to beat one of us. He acknowledged that we have not done that before, and we have had the wrong model when we were attempting to do that in the past. IronNet extended the concept of collective defense into cybersecurity, developed capabilities to make collective defense possible, and we are uniquely positioned to develop this market further. We missed our financial expectations for this year. We are working hard to rebuild your trust in us. I will now turn it over to Bill to address changes we are making and our plans to accelerate our business in important ways. Bill. Thank you, General.
spk06: We are very disappointed in our results. We did not meet our targets, and we know that is our responsibility. We recognize the importance of becoming a more predictable business. First, I'd like to highlight a few changes to the team. As disclosed in our Form 8K filed today with our earnings release, we and Sean Foster, our Chief Revenue Officer, have mutually agreed that he will depart our company at the end of December to pursue other opportunities. I will provide increased oversight of the sales organization for as long as is needed. Sean and I are working closely together between now and his departure to appropriately transition our sales efforts. We greatly appreciate his commitments to our customers. We thank him and wish him well in his future endeavors. We have also recently appointed a new Chief Marketing Officer, Michael Donahue, who has moved quickly to support our marketing organization and, in particular, identify areas for improvement in our sales motion. Our behavioral analytics-based network detection and response is significantly more robust than the solution being offered by our peers. We are now doing a better job of conveying that value. Also joining us earlier this quarter to lead corporate development was John O'Hara. John is helping to support important initiatives that broaden the company's offerings, penetrate new markets, and facilitate enterprise transformation. John has fielded a number of inbounds from cyber experts and tacticians from leading companies who see potential synergies and recognize the tremendous value and IronNet, and our mission. We're also extremely pleased to welcome this month a new head of customer success, Michelle Neisser, to our organization. Michelle brings a wealth of experience to this critical function where we have an opportunity to quickly make a tremendous difference for our customers to realize the value of IronNet. In addition to Michelle's expertise in the area of customer success, we are focused on cloud offering to facilitate ease of deployment. We're also supported by the strength of our external partnerships. In our relationship with Mandiant, we were able to leverage Mandiant services for threat assessment and security validation with the threat detection and response and intelligence sharing capability of IronNet's defense and dome offerings. With Dragos, we publicly announced an acceleration of the pace and depth of a new joint initiative designed to help ensure the security of the nation's critical infrastructure through an integrated ITOT approach to cybersecurity. And with our cloud partners, we are seeing leverage in a couple ways. With AWS, we jointly targeted and successfully closed on several opportunities in the public and private sector, leveraging the network threat detection and remediation capabilities of IronNet and their backend hosting solution of AWS. With Microsoft, we launched a deep technical integration with Azure Sentinel Cloud Native SIEM the joint efforts have accelerated IronNet entry into the Microsoft Intelligent Security Association, MISA, an ecosystem of independent software vendors and managed security service providers that have integrated their solutions to better defend against a world of increasing threats. We remain encouraged by these relationships with partners and the advantages of our joint sales efforts. A quick comment on results. We ended the third quarter with 74 customers adding 23 new logos. Our ARR at the end of the third quarter was 30% higher than at the end of the third quarter last year. Our cloud subscription revenue grew 71% year over year, which is where the market is developing the fastest and which gives us the greatest benefit. We have made strides in accelerating our ability to be more predictable on the transactional side of the business, and we will continue to merge in the strategic opportunities as they close. Finally, before we turn to your questions, I wanted to anticipate a question and touch upon how we are thinking about our current cash position. We are being mindful about the investments we are making in assessing strategic uses of cash. Prior to becoming public, we had worked to become an efficient organization from a headcount perspective. We have a strong culture and a team inspired by our mission to transform cybersecurity through collective defense. This includes the best threat hunters I would argue in any company in the world. We understand that we need to remain nimble and highly efficient with our cash, but we also have strong conviction in our strategy, know that we have an exceptional team, and see opportunities before us that have the potential to transform us quickly as a company. To conclude, I would like to end by saying that we are disappointed by our results so far this year. but we remain highly encouraged by what we see as an opportunity still before us, and we are working hard to rebuild your trust and confidence in us as a team. Operator, we are ready for our first question.
spk01: Thank you. At this time, we will be conducting a question and answer session. If you'd like to ask a question, please press star 1 on your telephone keypad. A confirmation tone will indicate your line is in the question queue. You may press star 2 if you'd like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. Our first question comes from the line of Mike Sikos with Needham & Company. Please proceed with your question.
spk04: Hey, guys. I had a question for you, obviously, on the downtick we're seeing today with the guidance as we look to calendar 21 for revenue and ARR. Maybe first for the general on the topic, I guess, can you talk to these budgeting issues that you're seeing on your side? And I'm interested in your thoughts specifically, just because I know that you do have that sort of experience on your side. And I'm just interested in how these dynamics are different from maybe what you would have seen when you were still in the position. And just curious how that's moved since we last received an update. And then I guess part two of the question would be more for Jamie, but Last time we received an update, I believe it was in mid-August. And I'm curious if you can help us in any way think about calendar 22 with this markdown we're seeing, how numbers have changed given the size of the magnitude we're seeing today. Thank you.
spk03: Okay. Well, thank you for that question. I'll start off with answering the first part and then turn it over to Jamie. With respect to the strategic opportunities that we have, and what we're seeing in the marketplace. First, the passage of the NDAA or the National Defense Authorization Act today means that we can start to see some of these move forward. We've seen a slowdown in public sector, especially in the ones we're dealing with, based on the congressional lack of movement on the NDAA. That was pushed forward today, as you may know, and is now being pushed to the White House for signature. Our confidence remains high in these strategic opportunities. We've revised our guidance for the year, and it reflects the fact that we aren't confident on what quarter they will actually come in, but we see these as viable opportunities for the future. We recognize that you want us to have a predictable business, And we can accomplish that with our transactional side, and we're going to do that. And these strategic deals will add momentum into our revenue as we move forward. I'll push it over to Jamie for his side.
spk07: So, Mike, thank you for your question. I think you were just asking about our guidance for this year of the $26 million for revenue. As we've noted, What we've significantly done is to completely remove all of these larger strategic transactions that are still out there, but difficult to predict. So we've reset the guidance at this point to not include them. Our guidance from August had included them. And so we're setting ourselves up here so that we can be sure that as they come in, and add materially to our number that we get that information out and we'll update our guidance accordingly. Was that your question?
spk04: Yes, yes. And just I think if I'm looking back to the last time we had received an update like this, I believe the comment was something along the lines of the commitment to maybe it was fiscal 23 or fiscal 24 targets. And I guess one of the things I'm trying to determine is if we're backing out some of these larger opportunities, which still remain in the pipeline and are viable, is the expectation then that as we look to next year, when you guys do provide guidance for that year, maybe some of these larger opportunities, which again are a little bit more difficult to predict, will be stripped away from that initial number that we receive. I'm just trying to get a sense of how we're looking at guidance now, given some of the updates that we had tonight.
spk06: Yeah, Mike, this is Bill Welch. Let me answer the question. So we are not proud of this year's projected performance. We obviously have to do better. But based on the foundation that we've set, our objective is to grow at the rate of a high-growth SaaS company. We're going to provide guidance on next fiscal year on the Q4 and fiscal year-end earnings call. which most likely will be in early April, where we expect we will align with other high-growth SaaS companies. We know this is a critical objective. Our revised guidance for FY22 is really that recognition that we have to be a more predictable business based on our transactional business, which we're accelerating to be commensurate with these other high-growth SaaS companies. And as the general mentioned, we have a number – of pending strategic opportunities that could transform the company quickly. So we're really managing those two realities. And when those strategic opportunities do come available, then we will notify the market.
spk04: Thanks for that, Bill. And then just two more, if I could, real quick. So with the passage of the NDAA and that being sent over to the White House, For those of us that might be less familiar with public sector movements in the budget, if let's say the White House signs that paperwork when it arrives at their desk, how quickly can some of these potential customers of yours turn around and start deploying that budget? Do we have a feel for a timeline for when those dollars become immediately available to them? And then the second question, more towards Bill, But if I'm thinking about the announcement for the chief revenue officer departure at year end, can you explain? I'm guessing you'll be commandeering the sales force in the interim, but is there a search underway at this point? How do you expect to transition the leadership of that team?
spk03: So I'll handle the first part on that with respect to the NDAA. As you noted correctly, it will go to the president. He will sign it. It then goes to OMB, the Office of Management and Budget. They take that and they push that out to the Defense Department, which then breaks it down and pushes it out to all the services and department agencies. Once they have that money and they know now what their full authorization levels are, they can apply that to these contracts and others. I talked to some of our partners in the Defense Industrial Base, some of the strategic partners, they face the same problem that we face here. They're having the same issue, and they believe that this will help. It won't change overnight. So the President signs it, it doesn't happen overnight, but we think this is something that will happen in the next few months.
spk06: And then, Mike, I'll address your question related to the Chief Revenue Officer announcement today. I will, as I said in my comments, I will be providing overwatch and oversight to the sales organization As many of you on the call know that I have a history of running sales organizations, and I will be helping the teams in the APJ, EMEA, Americas, our customer success, marketing, and those sales teams to drive the outcome and the transactional business that we've spoken about. That is something that we will not start a search. I will provide the overwatch for as long as it takes to drive this flywheel or this engine that's required for this type of software company.
spk03: Yeah, and I wanted to add one thing that was part of what I think you intended to ask, and that is the American Rescue Plan dollars are being pushed out to the states, and they do see that as an opportunity, and part of that includes security and cybersecurity. We are seeing momentum gain in those areas as well, and we think that's a future opportunity and why some of our strategic goals and objectives are increasing. That pipeline is growing.
spk04: Thank you for that. I'll see the floor now. Thank you.
spk01: Thank you. Our next question comes from the line of Joseph Gallo with Jefferies. Please proceed with your question.
spk02: Hey, guys. Really appreciate the color and all the delayed deals. I guess when you look at these strategic deals, I assume you mean government deals. And are we to assume that the entire delta, so the $75 million of ARR going to 30, is those deals? Or were there any of the transactional deals you talked about also implied in that cut?
spk03: So I'll start off. First, we had more than sufficient pipeline to cover the delta that we're talking about in our strategic deals. And that's grown, as I mentioned earlier. We also recognize that we have to drive predictability, as Bill mentioned, and we are working towards that. And that's getting the singles and doubles, or as we call them, as we've talked to you in the past on, and growing that. I'll turn it over to Bill to add to that on what we're doing in the singles and doubles in the transactional area.
spk06: Yeah, so I just want to add a couple more commentaries that, you know, we recognize that we must drive the predictability, and that's really going to come from that development of the transactional side. Our outlook for FY22 was primarily based on our ability to close these large strategic opportunities. We are gaining momentum here. In the transactional side, as you heard in the commentary of evidence, we added 23 new logos this quarter, which is almost as many as we added all of last year. We had 30% year-on-year growth in our ARR. Again, good growth, but we want to drive more growth. We had great traction with several of our domes. As you know, we set up these cybersecurity domes with energy and space, and financial services, all of those domes have doubled in participation year to date. As I mentioned before, we are driving a disruptive paradigm shifting company. I've had the opportunity to be part of those types of companies, and I'm taking overwatch over the sales org. And what we're doing to really accelerate the transactional business to drive the predictability that is required and expected is in marketing, our demand generation. You saw we announced a new leader, our brand awareness and our analyst coverage, doing much work there. In product, you heard about what we're doing with the user experience and our CODA, as it's called. We're also on the sales cycle. We're encouraged... by early indicators of new hires who have NDR, or network detection and response sales experience, where they're being able to open, manage, and close deals a lot faster. We also are encouraged by our customer success leadership around driving value and upsell. And then, as you heard about our strategic partnerships, these are all pipeline drivers, including our cloud relationships with AWS and Microsoft, the integrator community like Jacobs that you have heard, our public sector, and then our technology alliances with the likes of Mandiant and Dragos. So we believe those are the things that will help us drive our transactional business to a more visible, predictable, and repeatable business.
spk03: So, Joe, let me just add in one final thing to hit in two sentences. The transactional model that we're talking about, we believe, will put us right in line with what a high-growth, SaaS company should be. And we're modeling our company on that, something that you can use to predict and forecast where we'll go. We see these strategic deals as accelerants that will add to that model. We're not taking them off the table. It's just hard to say which quarter they will come in. Does that make sense, Joe?
spk02: No, it makes sense. And then based off your comments, General, it sounds like so that the The strategic deals were more than the 45, but the transactional business actually did pretty well, and the pipeline's strong there. I guess, and then as a follow-up to that, Bill, great to hear you're doing a lot of steps to improve visibility, but how should we think about guidance methodology for F4Q, especially given you added about $4 million of ARR this quarter and your guidance implies about $2 million next quarter? And I would assume F4Q would be the seasonal strongest quarter. So anything to read into that?
spk07: Right. This is Jamie Gerber. Let me jump in on that one, Joe. The key part of our guidance, and I think it's important to the way you asked it about methodology, is that we're really just going to focus on this transactional part of the business, and we're going to hold off on identifying any of these much larger, you know, double-digit million-dollar announcements until they come in. So, methodologically, we're going to just tell you about those as they come. We have not seen any in the last quarter or even in the upcoming quarter material losses on the retention. So, we feel good about that. We had some earlier in the year. But really, the trends here are not about slower ARR growth per se. It's really just not adding in the strategics.
spk02: Okay. And then if I can sneak one more in, of the 23 customers you added, I guess, how should we think about the split between cornerstone customers and just add-on domes from existing customers already? Okay.
spk06: Yeah, so just a good question. I will tell you that the majority of the customers that we added this quarter were focused on the lower end of the community. These were logos that we filled in at the energy, space, financial, those domes that I had mentioned had doubled year to date. Okay, thank you.
spk01: Thank you. Our next question comes from the line of Gray Powell with BTIG. Please proceed with your question.
spk05: Okay, great. Thank you very much. And so, yeah, I appreciate you addressing the balance sheet prepared remarks. I did want to follow up there. All right, so just kind of looking at headline numbers, you have $74 million in cash in the balance sheet. Free cash flow year-to-date is negative $61 million, give or take. How should we think about your liquidity and ability to fund for future growth targets? And then within that, like, do you have the headcounts in place today to hit your growth targets?
spk07: Yeah, let me take that one on, Greg. Another excellent question. Look, I think the starting point is really to talk about the raise that was done this summer that raised $138 million. So that did give us a really great spot, got us completely cleaned off, all debt on the balance sheet. So we did end up the quarter with a little over $70 million, as you note, in cash. Now, a couple of things as we address the forward-looking part of your question. So do keep in mind that these larger strategic opportunities have a lot of cash in them as well. So we're going to keep an eye on that, which means that we're going to stay agile. We do have all the resources that we need right now to fully scale into them. So we're not at all constrained on that front. The other thing that we're going to do, and I think Bill touched on this a little earlier, is that we really accentuated our commitment to the SaaS end of our business. And that brings itself a number of efficiencies in how you can structure and organize your organization. We're going to stay very thoughtful about where we make our investments and continue to add to our skill set, which we will. But we're going to keep a really close eye on that. And at the end of the day, this is about to that point, conserving our ability to have cash on the balance sheet all the way through the end of next year That's our approach to how we're going to approach the business. As a public company, we retain opportunities to do raises in the markets, and we're going to keep our eye on that, too. But without a raise, we're really focused on how to drive the correct balance here to navigate all the way through next year with the cash that we've got available, and we feel confident in being able to do that.
spk05: Got it. Okay, that's helpful. And then this next one's gonna be a tough question. But you know, I really do appreciate your candy here in the call in terms of, you know, how you're managing your cash position with investors. But you know, customers do look at balance sheet too. How do you make how do you make your potential customers comfortable in your financial position?
spk06: Yeah, great. I'll take that. This is Bill Welch. So one of the things that we're most encouraged by is the community organization that we've been able to establish with these domes within energy, space, financial, and some of the other ones you've heard about. And all of these anchor tenants are all very committed to the long-term mission of the company. They understand. They've been with us for many, many years. As you know, these contracts are long in-term contracts. We have some in five years plus. Many of them have already been renewed. As a matter of fact, they're actually out there trying to help us drive additional community membership into these domes. So it's all across the spectrum and including some of the stuff we're doing with the defense industrial base. That's helpful.
spk05: Okay. Thank you very much.
spk01: Thank you. Ladies and gentlemen, we have reached the end of the question and answer session. I will now turn the call over to General Alexander for closing remarks.
spk03: Thank you. We want you to know we are setting up the company as a SAS-based disruptor in cybersecurity. This is a long-term endeavor, and we are committed to making it a success. We believe and we are committed to our mission, transforming cybersecurity through collective defense. Thank you, and have a good evening.
spk01: This concludes today's conference and you may disconnect your lines at this time. Thank you for your participation and have a wonderful day.
Disclaimer

This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.

-

-