Rapid7 Q1 2023 Earnings Call Transcript

There are 17 speakers on the call.

Operator

Good afternoon, and welcome to Rapid7's First Quarter 2023 Earnings Call. All participants are in a listen only mode. After the speakers' presentation, we will conduct a question and answer session. As a reminder, this conference call is being recorded. I would now like to turn the call over to Sunil Shah, Vice President, Investor Relations.

Operator

Thank you. Please go ahead.

Speaker 1

Thank you, operator, and good afternoon, everyone. We appreciate you joining us today to discuss Rapid7's With me on the call today are Corey Thomas, our CEO and Tim Adams, our CFO. We have distributed our earnings press release over the wire and is now posted on our website at investors. Rapid7.com, along with the updated company presentation and financial metrics file. This call is being broadcast live via webcast, And following the call, an audio replay will be available at investors.

Speaker 1

Rapid7.com. During this call, we may make statements related to our business that are considered forward looking under federal securities loss. These statements are made pursuant to the Safe Harbor provisions of the Private Securities Litigation Reform Act of 1995 and include statements related to the company's positioning, strategy, business plans and financial guidance for the Q2 and full year 2023 and the assumptions underlying such goals and guidance. These forward looking statements are based on our current expectations and beliefs and on information currently available to us. Actual outcomes and results may differ materially from the future results expressed or implied in these statements due to a number of risks and uncertainties, including those contained in our most recent Annual Report on Form 10 ks filed on February 24, 2023, and in the subsequent reports that we filed with the SEC.

Speaker 1

The information provided on this conference call should be considered in light of such risks. Actual results and timing of certain events may differ materially from the results or timing predicted or implied by such forward looking statements and reported results should not be considered as an indication of future performance. Rapid7 does not assume any obligation to update the information presented on this conference call except to the extent required by applicable law. Our commentary today will primarily be in non GAAP terms and reconciliations between our historical GAAP and non GAAP results and guidance can be found in today's earnings press release and our website at investors. Rapid7.com.

Speaker 1

At times in our prepared remarks or in response To your questions, we may offer incremental metrics to provide greater insight into the dynamics of our business or quarterly results. Please be advised that this additional detail may be one time in nature and we may or may not update these metrics in the future. With that, I'd like to turn the call over to our CEO, Corey Thomas. Corey?

Speaker 2

Thank you, Sunil, and hello to everyone on the call today. Thank you for joining us this afternoon on our Q1 2023 earnings call. I am pleased to report that Rapid7 started the year with strong momentum as we work to deliver customers a comprehensive security operations platform at the most compelling economic value. Faster than expected traction from our ThreatComplete and Cloud Risk Complete consolidation offerings, which together represented over 20% A new ARR in the Q1 supported steady customer demand for our Insight platform, driving 16% year over year growth and ARR is $728,000,000 Revenue and operating income both exceeded our expectations as customers gravitate towards our security operations solutions and as we manage the business for profitable growth. The customer spending environment in the Q1 was broadly in line with our expectations shared on the February earnings call.

Speaker 2

Despite ongoing complexity in customer budgets, including elevated levels of deal inspection, we saw strong underlying demand for our Insight platform to start the year. Our solutions solve a critical set of needs for security teams who are working through a complex threat landscape, constraints on talent and worsening consequences from cybersecurity incidents. While overall demand trends were consistent with our expectations, I'm pleased to share that our teams are demonstrating the ability to execute in an environment with higher budget scrutiny and ongoing macroeconomic uncertainty. A few positive themes continue to resonate in our business throughout the Q1. The first is that we are benefiting from a clear customer preference for consolidated security offerings.

Speaker 2

There is a persistent and crucial need to gain visibility and assess risk across traditional and cloud environments, As security teams are laser focused on improving both the effectiveness and efficiency of their programs while maximizing their budget dollars. Our solutions lean into this dynamic by offering best in class automated capabilities across cloud security, Detection and Response and Vulnerability Management, while being delivered through new and differentiated pricing and packaging models. As a result of this approach, we are at times seeing less competition for critical capabilities given the unique scope of our offerings, which in many cases customers aren't able to consolidate on a single platform with other vendors. These dynamics highlight our unique competitive position as we look to capture Waitr Wallet share in a consolidating security operations market. As customers gravitate towards vendor consolidation and our sales team ramps up on the new offerings, we are seeing the clear benefit in ASPs For our ThreatComplete and Cloud Risk Complete deals, which averaged more than 2 times our overall ASPs in the Q1.

Speaker 2

Our marketing enablement efforts around these offerings were largely competed in the Q1. And so far, over 1 third of our sellers have sold at Another theme that continued in the Q1 was the growing traction with our differentiated cloud security solutions. Insight CloudSec provided customers real time visibility into their cloud environments with a breadth of features, including posture management, Agentless Cloud Vulnerability Assessment, Workload Protection, Cloud Detection Response and Automated Remediation. The ability to bring these capabilities onto a cohesive platform offering is increasingly resonating with customers, particularly as usability and time to value have long been core differentiators for Rapid7. Cloud security has evolved over the last few years From a niche complex market into the one we see today, where mainstream enterprises show increasing demand for solutions that can solve their cloud challenges in an accessible, efficient and automated fashion.

Speaker 2

Our approach to the market Through a consolidated platform focused on accessibility and ease of use is making cloud security more accessible to a broader customer base. In addition, Cloud Risk Complete packages the breadth and depth of our top ranked cloud technology Alongside our enterprise grade vulnerability management, which provides visibility to traditional environments, This comprehensive risk visibility across cloud and hybrid environments, combined with a compelling Package pricing structure is driving a strong value proposition for organizations of all sizes. A great example of the value we're bringing to customers through Cloud Risk Complete is a recent 6 figure ARR deal with a mid cap technology company. The customer was unhappy with their vulnerability management provider and searching for a placement standalone VM solution. Our sellers were able to expand the conversation to include cloud security and application security as part of our new cloud risk complete package offering.

Speaker 2

Rapid7's robust product features combined with real time event driven data harvesting stood out as competitive differentiators as well as our ability to unite vulnerability data with cloud security data for more actionable alerts and more automated remediation. Ultimately, our sellers were able to bring together the customers' on premise and cloud security teams to win this deal by combining 3 silo solutions into a unified platform with a single cost efficient contract. Another first quarter example of our expanding value proposition for customers is a 6 figure ARR deal with a regional healthcare company. The customer is struggling to use a legacy SIEM solution managed by MSSP due to the complexity of the data and reports as well as the quality of the alerts. They needed a way to identify user behavior in one unified way and define automated solutions that reduce manual work.

Speaker 2

Our Managed Detection and Response offering combined With InsightConnect Automation allowed us to win the deal based on strong underlying technology amplified by the security expertise of our best in class SOC analysts. As part of our continued focus and commitment to customers, I'm thrilled to welcome Larry DeAngelo to Rapid7 as our Chief Customer Officer. This is a newly created role that oversees our sales organization And all of our customer success teams across advisory, onboarding and support. Larry has extensive background at various software companies and private equity firms, And some of you may remember that he served as Chief Sales Officer for LogMeIn for over 8 years, helping the company scale from $100,000,000 to $1,400,000,000 in revenue. We're excited to have Larry on our team and believe that customers will benefit from having a cohesive customer organization to support their growth throughout the end to end customer lifecycle.

Speaker 2

As we look out over the remainder of the year, We are encouraged by the underlying demand for our cloud native Insight platform, our ability to execute in a tighter budgetary environment and our unique position in the customer driven consolidation wave for security operation solutions. We are on track to meet our growth and profitability targets for 2023 And believe we are well positioned for long term growth as we execute on our strategic vision to bring Rapid7 to the center of customer security operations programs. As we refine our go to market strategy and invest to support innovation, we are focused on delivering better security outcomes to the large market opportunity in front of us, while maintaining a deliberate focus on expanding the efficiency and profitability of our business. With that, thank you for joining us on the call today. I will now turn the call over to our CFO, Tim Adams, to share additional detail on our financial results and outlook.

Speaker 2

Tim?

Speaker 3

Thank you, Corey, and good afternoon to everyone on today's call. Thank you for joining us. Before I turn to the results, a quick reminder that except for revenue, all financial results we will discuss today are non GAAP financial measures unless otherwise stated. Additionally, reconciliations between our GAAP and non GAAP results can be found in our earnings press release. Rapid7 ended the Q1 of 2023 with $728,000,000 in ARR representing growth of 16% year over year and consistent with our expectations.

Speaker 3

We continue to see year over year growth driven in large part by our anchor offerings of detection and response, cloud security and vulnerability management, which represent the foundational capabilities of our ThreatComplete and Cloud Risk Complete consolidation offerings. The breadth and effectiveness of our Insight platform along with our ability to drive value with our complete offerings are resonating with customers as they continue to navigate an evolving budgetary environment. We see ARR growth coming from both new and existing customers with ARR per customer that grew 9% over the prior year to $66,000 while our global customer base grew 6% year over year to over 11,000 customers. As Corey mentioned earlier, over 20% of our new ARR in the Q1 was driven either by a threat complete or cloud risk complete offering. We see traction here both with landing new customers and expanding with our current customers with new ARR for complete deals seeing healthy contributions from each type of customer.

Speaker 3

1st quarter revenue of $183,000,000 grew 16% over the prior year and exceeded the high end of our guidance range. Over 95% of revenue in the quarter was recurring and product revenue grew 17% over the prior year to $174,000,000 International revenue grew 21% year over year and represented 21% of total revenue, while North America grew 15% over the prior year. Turning to our operating and profitability measures for the quarter. Product gross margin was 76% in the Q1 and overall gross margin was 73%. Both were within our stated range of expectations, which is mid-70s for product gross margin and low 70s for overall gross margin.

Speaker 3

Sales and marketing expenses represented 39% of revenue compared to 43% in the prior period. R and D and G and A expenses were 20% 8% of revenue respectively compared to 23% 9% in the Q1 of last year. We delivered strong first quarter operating income of $11,000,000 above the high end of our guided range. Our adjusted EBITDA was $17,000,000 in the quarter And diluted net income per share was $0.16 Moving to our balance sheet and cash flow statement. We ended the Q1 with cash, cash equivalents and investments of $270,000,000 Cash flow from operations was $6,000,000 and free cash flow was ahead of our expectations and just below breakeven.

Speaker 3

This brings us to our outlook. We continue to believe that the largest drivers of ARR growth performance this year will be related to executional improvement, including continued momentum for our consolidated offerings as well as the impact of the broader macroeconomic environment on customer buying behavior. We are pleased that our first quarter results Track to the plan across all metrics despite a noisy environment. Therefore, we are reiterating our full year 2023 ARR guidance of $815,000,000 to $825,000,000 representing year over year growth of 14% to 16%. We are raising total revenue guidance for the full year to $773,000,000 to $779,000,000 reflecting outperformance in the Q1.

Speaker 3

This range represents growth of 13% to 14% with high single digit growth contribution from our professional services revenue. On profitability, We are also raising our operating income guidance of $59,000,000 to $63,000,000 for the full year, which represents operating margin expansion of at least 300 basis points. The increase reflects the portion of the first Quarter outperformance that was unrelated to timing of spend. We expect full year net income per share in the range of 0.83 to $0.89 based on an estimated 67,600,000 diluted weighted average shares outstanding. And for free cash flow, we continue to expect approximately $80,000,000 for the full year, which is approximately double our 2022 level and reflects over 400 basis points of free cash flow margin expansion.

Speaker 3

Moving to our outlook for the Q2 of 2023. We expect total revenue in the range of $187,000,000 to $189,000,000 We expect non GAAP operating income for the 2nd quarter in the range of $7,000,000 to $9,000,000 and non GAAP net income per share of $0.09 to $0.12 which is based on 67,400,000 diluted weighted average shares outstanding. Thank you for taking time to join us on the call today. And with that, we will open the line for questions. Operator?

Operator

If you have any additional questions, please rejoin the queue. Thank you. Our first question comes from Matt Hedberg from RBC Capital Markets. Please go ahead. Your line is open.

Operator

Great.

Speaker 4

Thanks for taking my question. To keep it to one here, I guess, maybe for Cory, the Success on the complete offerings is really great to see. Obviously, there's clearly, I think, a security efficacy benefit there when customers Select one of those bundled offerings, but

Speaker 5

I'm wondering if you could talk to

Speaker 4

the ROI element from a customer's perspective when they consolidate RRP. It seems to be a big part of the narrative here. I wonder if you could talk to that part.

Speaker 2

Yes, you're right, Matt. I think there's 2 things. 1, customers are more interested in consolidation because they have to do more with less budget I remind you that budgets are still growing. They're just growing at a slower rate than they were in the past with a little bit more uncertainty. So what customers are trying to figure out by and large is really 2 separate things.

Speaker 2

1, they want to figure out how do they actually continue the security improvements They've committed to, that are necessary, that are critical, in a more, I would say, tighter budgetary environment going forward. But they also importantly want to figure out how it boosts the productivity of their team. But remember, it's not just the budgets that we talk about, it's also their teams and their team's effectiveness and their team's productivity. The value proposition around our both the direct complete and the cloud risk complete is really focused on how do you actually Solve the problem of either managing threats or managing risks, but really doing that at high levels of efficacy and high levels of productivity. And one of the side benefits of that is that it's also cost effective to leverage spend on a common platform.

Speaker 2

But the primary benefit is that we're driving Productivity and efficiency. And the way that we actually do that with ThreatComplete is providing a complete stock stack and solution around how people Collect all the data across 100% of the environment to detect attacks and then the analytics to respond and then the automation to make sure that, that response is robust. And on the cloud risk complete, it's really that integration of looking at the best in class across both the traditional VM, but also increasingly people are migrating to the cloud, they want to find a way to actually manage the risk in their cloud environment holistically. So again, it's a productivity boost and about how they get more out of their talent and their staff, But also by compounding our platform, they get a direct economic boost to get them scale by investing with us.

Speaker 4

Thanks, Corey.

Speaker 2

Thank you very much.

Operator

Our next question comes from Saket Kalia from Barclays. Please go ahead. Your line is open.

Speaker 4

Okay, great. Hey, guys. Thanks for taking my question here. Corey, just to make sure that this question is asked publicly, I I was wondering if you could just comment at all on just the public headlines earlier this year around a sales process, of course, the same question I asked last quarter. But also maybe as part of that comment on whether that is a process that's still ongoing?

Speaker 2

Saket, you broke up a little bit there towards the end, but I believe that you were Apologies, we had a little technical difficulty. Saket, I believe you broke up for the end, but I believe you were asking about The rumors that I addressed on the last call, I would just say it's still the same comment, not really comment on rumors. That said, we have a pretty exciting opportunity in front of We have momentum that I think is demonstrated by our results this quarter. And so we understand why people would actually talk about us And that lends, but we're squarely focused on continuing to drive our performance in the business, deliver results for our customers and we think that's going to deliver a great return for shareholders.

Speaker 4

Got it. Fair enough. Thank you. Thank you.

Operator

Our next question comes from Rob Owens from Piper Sandler. Please go ahead. Your line open.

Speaker 6

Yes, good afternoon. Thanks for taking my question. I want to focus in a little bit around net new ARR and obviously it's been under pressure For the last year, and I think given your holding ARR guidance for the year, it does require some acceleration In the back half. So is that a function of sales productivity? Is that a function of where the pipeline sets up at this point?

Speaker 6

Just some color would be appreciated. Thanks.

Operator

Ladies and gentlemen, we are experiencing technical difficulties. Please stay on the line.

Speaker 2

I'm sorry, I might have been we had a couple of technical difficulties. Rob, can you hear me okay?

Speaker 6

I can hear you, Corey. Can you hear me?

Speaker 3

Yes. Yes. We can now.

Speaker 2

We can now. Apologies for that. Did you hear the answer that I gave?

Speaker 6

I did not. It went completely dark after my question. So I don't think I stumped you. So go ahead and maybe

Speaker 4

Yes, I did not.

Speaker 6

Sales productivity, net new ARR, Just put into context for us. Thanks.

Speaker 2

Yes, we had a bit of power surge there. Yes, thanks for that, Rob. And so the look, our outlook was Really based on 2 common names. 1 is execution of the sales force transformation, which I think look we're well underway. I would just say we're ahead of schedule And that's going to trend exactly as we expected to.

Speaker 2

The second thing is could we actually build the critical pipe in the platform consolidation areas that we were looking for, Which we are ahead of schedule and the pipeline builds continues to be. The third thing is, are the conversion rates for those areas where we expected them to be. And again, the conversion rates are quite strong in those areas. So as we sit here today with the pipeline build, the sales force adoption Meaning not just deep, but also broad and the conversion rates continuing to be strong, we're set up well for the second half of the year and it's really predicated on those So not really a shift in the trends, it's just a continuation of those trends that's baked into our core model.

Speaker 7

Thank you.

Speaker 2

Thank you very much.

Operator

Our next question comes from Srinik Katari from Robert Baird. Please go ahead. Your line is open.

Speaker 3

Hey, Srinik, go ahead. We cannot hear you.

Speaker 5

Sorry, can you guys hear me now?

Speaker 8

Yes, we can

Speaker 4

hear you now. Great,

Speaker 5

great. Thanks a lot. Yes, so very quickly on the traction that you guys highlighted on Insight Doctor and GlauSat Doctor, it's kind of driving multi product adoption for you guys. Can you I mean, and you guys also highlighted kind of this gravitation towards vendor consolidation, and this is something which we have been hearing from your peers and And Rival's as well and the benefit that you're seeing in ASP. So can you just comment quickly on the win rates and the competitive environment That you're seeing right now, I know there's a lot of noise out there, but I would appreciate some comment there.

Speaker 5

Yes.

Speaker 2

I mean, look, I think we're well positioned if you think about consolidation and security operations space. There's few folks that actually span Cover the span of security operations. You look at us, we're at VM, we're at cloud security multiple aspects of cloud security, CSPM, Cloud Vulnerability Management, Workload Protection, we also have a quite impressive SIEM technology that forms the core of our security operations platform for managed detection response Along with security automation. So if you look across security operations, I think we're set up better than anyone else I can make up to actually really drive consolidation In that space. So we don't have lots of direct competition.

Speaker 2

When you think about end to end security operations, how do you manage risk across both the Cloud on prem endpoint environments from a risk visibility and management perspective and how you detect and respond to attacks across the environment From a security analytics and automation orchestration perspective. And so that the win rate is extraordinarily high and what our sales force Because again, it's really because they're not challenged in that space. And what our sales force has actually learned is frankly to actually make that the primary focus With our consolidation offerings, because when we actually shifted to how you actually think about accelerating your security operations momentum At the best efficacy and the lowest possible long term cost that really differentiates the dynamic for our sales team. And so that's what we're seeing in the space. What we see competition is primarily in the point solution space, not the consolidation space of security operations.

Speaker 3

Corey, I would just add, we know it's still early with our consolidation offerings, but in Q1 over 20% of the new ARR came from the new packages And we're seeing more and more of our sellers engage and be successful getting that sale. So that's up from what we saw in Q4. So it's 2 data points that are looking very positive, but as you said, this was always intended to really gain full momentum towards the second half of the year.

Speaker 2

Thank you for the question.

Speaker 5

Thanks, Cory.

Operator

Our next question comes from Michael Turits from KeyBanc Capital Markets. Please go ahead. Your line is open.

Speaker 9

Hey, guys. This is Eric Keith on for Michael. Corey, just wanted to make sure I understand just kind of high level. Just Curious, it sounds like go to market execution is progressing better than expected. And then on the macro, it sounds like maybe it got a bit worse in the quarter, but no more than you were kind of already factoring 90 days ago.

Speaker 9

So just one curious if that's right. And then kind of secondarily to that, is that kind of gives you some more confidence in that ARR guide for the year?

Speaker 2

Yes, I think that's the right descriptor. I would say we factored in a little bit of pressure this year. And I would say the pressure materialized largely in line with what we expected. And so that's why I'd say the market expectation is in line with our expectations, Which frankly we feel good about at this stage. And then to your questions about the sales force, the two things that actually give us confidence as we Look out to the year.

Speaker 2

1, the breadth of participation in sales force, the retention of the sales force, but also look, Salesforce is live and breathe on confidence. And the fact that we actually have people both building the pipe and the pipeline converting, While it's still early because the pipe is relatively fresh in the cycle, that actually gives the broader team confidence and it also gives us better visibility more predictability as we go forward. So I would say incrementally, because we've executed against the plan, so far this year That yes, boosts our confidence. You have a plan. It's a high confidence plan when you start off, but you want to see that you're executing against that plan And we made steady execution against that plan as we go forward.

Speaker 9

Great. Thanks, Corey.

Speaker 2

Thank you.

Operator

Our next question comes from Gregg Moskowitz from Mizuho. Please go ahead. Your line is open.

Speaker 10

Hey, thank you for taking the question. It's great to hear about the traction with ThreatComplete and Cloud Risk Complete including that ASPs have been showing more than a 2x uplift. Is it fair to assume that you're seeing more of an uptake for these packages from enterprises as opposed to mid market? And secondly, now that you have a few more months of data, Do you have a sense of whether or not this strong ASP uplift could be sustainable? Thanks.

Speaker 2

Yes. It's a great question, Rick. As you would expect, yes, we do see early on, a bit more of the bias around the consolidation Offerings come from more enterprise oriented or larger customers in the mix. That said, we do expect that to change. We have high resonance and excitement on our mid sized team.

Speaker 2

From an expectations perspective, the mid market is in line with what we expected, but our team has lots of excitement about The pipeline that they're actually building there, the conversion rates while very early are healthy there. And so we do expect that to span. And we actually think the case for consolidation is extraordinarily strong, not just in the enterprise, but also in the mid market space.

Speaker 7

Okay. That's helpful. Thanks, Cory.

Speaker 2

Thank you.

Operator

Our next question comes from Brian Essex from JPMorgan. Please go ahead. Your line is open.

Speaker 6

Hi, good afternoon.

Speaker 11

Thank you for taking the question. Maybe Corey, just maybe if we can dig in and understand the setup for the second half of the year, Both from a macro as well as a sales productivity standpoint in terms of like what your expectations are embedded in the guidance For the rest of the year. So I guess on the sales front, are you assuming any kind of I guess maybe what was the linearity of hiring last year? And is there a certain Surety baked into your assumptions that you need to see from the sales force. And then from a macro perspective, is it stay the same, deteriorate, like what are the What's the setup?

Speaker 2

Yes, it's a great question. So I will sort of like break down the balance. So one on the sales force side, I would say, look, our biggest assumption was that we would be able to retain the critical parts of the sales force And that they would actually be able to continue to be productive. We retain the productivity at the building is where we So I would say the sales force piece is set up well. Keep in mind that we actually have a good setup when you think about a year over year comparative basis.

Speaker 2

We have A more experienced sales team, they've had sort of a ramp period of new offerings. The offerings are competitive. The conversion rates are stable. And so from a sales force setup, we feel extraordinarily strong about the setup for the back half of the year. There's work to do, but both on a comparative basis In an outlook basis, we actually feel relatively good there.

Speaker 2

The second part of the assumption for the first second half of the year It was predicated in the first half of the year that we could actually build the right pipe. I would say we're still building the pipe, but the pipeline build that we're actually doing It's actually increasing at the rate that we actually have. And so we think we'll have enough things even in this pressured environment for the back half of the year. And we expect the conversion rates to stay consistent with what we've seen in the recent quarter. Now all that tees up to our expectations for the back half of the year It continues to be a pressure environment.

Speaker 2

We are not expecting the economic outlook to actually get better. We're still expecting volatility. We're still expecting pressure. And what gives me confidence is our sales team has shown that they can actually deal with that environment. That's a little bit of why we actually are having higher pipeline requirements because we expect More things to be noisy in cycle.

Speaker 2

It's a little bit why our sales teams have to learn how to navigate, I would say, changing deal cycles. We expect longer sales cycles, but all of that's baked into our assumptions. And so I would say our trends as we're set up today are for what we're seeing to continue forward What we saw in Q1 and continue forward Q2 and Q3 and Q4.

Speaker 3

Corey, it's worth underscoring that point because our sellers are really adapting to this environment. We know there's budget scrutiny Across customers across the board and I think they really appreciate their understanding how to sell better in that environment.

Speaker 2

Absolutely. Thank you for the

Speaker 11

question. Super helpful color. Thank you.

Speaker 7

Thanks.

Operator

Our next question comes from Brad Reback from Stifel. Please go ahead. Your line is open.

Speaker 4

Great. Thanks very much. Corey, last quarter you talked about international retention rates being a bit of a headwind. Maybe you can talk See where they were this quarter and what the expectations are for the rest of the year? Thanks.

Speaker 2

Yes, I'll tag team that with Tim. But what I would say is that in general, From our expectations, the international team is performing in line with even slightly better than what I expected. So pretty good about the outlook for the year going forward as far as international income.

Speaker 3

Yes. No, Cory, that's right. Look, we've made that investment internationally. We're starting to see signs that it is Internationally, the retention has improved, let me say, modestly in Q1. Overall, retention is in line with our expectations And continues to be stable in North America, but something that's very important.

Speaker 3

We put a lot of effort into it and pay a lot of attention to it.

Speaker 4

Great. Thanks for

Speaker 2

the question.

Operator

Our next question comes from Matt Salzman from Morgan Stanley. Please go ahead. Your line is open.

Speaker 7

Hey, team. Good afternoon. Thanks for taking the question. So fully appreciate the ARRs, the key top line metric that we want to focus on here, but just in thinking about how that all flows through the model, can't help but notice that billings were a little bit lighter than expected in Q1. So I'm curious what the driver of that was and kind of where you expect to make that up over the course of the year to still achieve the updated revenue guide?

Speaker 7

Thanks.

Speaker 3

Hey Matt, no, I appreciate the question. Look ARR is the core metric that we share with everyone Which embeds a lot of different things to get to that number, the new, the expand, retention, etcetera. I think you do have to be a little careful when you're looking at a Quarterly billings number, we do look at that, but I do think a better way to look at it is on the last 12 months worth of billing. And if you do that, You'll see that that growth rate is more in line with the growth rate that we're seeing in ARR. There can be some anomalies.

Speaker 3

There's not a lot of those in terms of Timing of billings with certain customers, but I would encourage you Mabry to take that longer term view and I think it's probably the more indicative view That's going to

Speaker 4

link to ARR.

Speaker 2

Thanks for the question.

Operator

Our next question comes from Adam Tindle from Raymond James. Please go ahead. Your line is open.

Speaker 12

Okay. Thanks. Good afternoon. Hey, Corey, coming off of RSA, cloud Security was certainly a big theme. And on one hand, kind of viewed as a hidden asset within the Rapid7 model.

Speaker 12

On the other hand, there were some private companies with very healthy funding, Suggesting that they're taking share in cloud security and coming out with hybrid and runtime capability in the back half of this year that'll Go after some of the more traditional vulnerability management players like Rapid7. So just wanted to give you the floor, the truth behind some of those fears and competing with Wizz And how you're thinking about potentially defending that threat in the back half of this year? Thanks.

Speaker 2

So, first of all, I actually think it will be great. It will help market for customers that the way they should think about it is across their complete environment. And when you have customers that say, I want to look at risk across on prem endpoint In the cloud, we will actually dominate in that space. And there's a couple of different reasons. One, I think Wizz or any other player will find this incredibly long tail on vulnerability management.

Speaker 2

You can do some of the easy Windows pieces, but when you think about what customers are looking for, for enterprise grade vulnerability management, you have to be able to collect all the data, look at all the content, Assess that and look across that, that's not a 12 month engineering effort. If it was, this market would have been disrupted a long time ago. Most importantly, as we've been investing in the maturity of the cloud security, we've been under marketing and underselling it. So from a head to head perspective, We actually have a quite a compelling capability in cloud and now we've been ramping up in our focus on the sales and marketing of that. Now when you combine all that together, it benefits us to actually have the market.

Speaker 2

Think about the way that we think about it is that you should manage your risk holistically, Whether it's hybrid, whether it's on prem, whether it's at the endpoint or whether it's at the cloud. And the faster that the market thinks about that, The easier it will be for Rapid7 to actually execute its strategy, in that model, I think that we will be anyone head to head from a technology comparison basis. So We welcome any competitor in the market helping us frame the way that customers should think about it holistically from an end to end perspective, Because these things that that benefits us and we're certainly going to be investing in helping customers understand that they should be investing in those end in risk management platforms.

Speaker 7

Great points. Thank you.

Speaker 4

Thanks.

Operator

Our next question comes from Joel Fishbein from Truist. Please go ahead. Your line is open.

Speaker 13

Thanks for taking my question. Corey, one for you. Just I know it was a small acquisition, but Minerva, you did a little while ago. I know it wasn't very big, but I'd love to understand how that fits into the overall scene going forward, what the whether it will be Fully integrated and whether how it will be sold going forward? Thanks.

Speaker 13

Appreciate it.

Speaker 2

Great question. It's a tech and team deal and really enables us to Unlock our threat complete strategy. As you're aware is that we have lots of demand for customers to actually help them manage From the endpoint to the cloud, the ability to detect, respond and remediate threats. Now one of the things that our customers asked us for is that they had a wide range of endpoint technologies and antivirus. The ones that could actually sort of like afford to or focus or Had advanced endpoint protection technologies.

Speaker 2

We integrate with those. We'll continue to integrate with those and we're happy with a partnership or coopetition approach. But for those that actually truly just had SimpleAV, and they relied on us to provide their end to end detection and response capability, Minerva allows us to actually do advanced in memory protection on those endpoints that allows us to make sure that when we detect Those customers are empowered to stop those, the same way our automation and our SOAR technology allows them to actually orchestrate the across the environment and stop, The same way that we actually are able to stop processes, isolate resources, contain users. That same mentality is what actually has us actually helping our customers respond to their need for cost effective detection response. And frankly, customers should have to make this trade off between spending lots of money to actually have a highly effective and efficient end to end detection response capability.

Speaker 2

So again, Our focus is meeting customers where they are, endpoint to the cloud and providing the capabilities that they're asking for to deliver a robust detection response platform.

Speaker 13

Great. Thank you.

Speaker 2

Thank you.

Operator

Our next question comes from Gray Powell from BTIG. Please go ahead. Your line is open.

Speaker 13

Great. Thanks for taking the question. So yes, it was good to see the increase in the complete mix To 20% of net new ARR, I think that number was 10% last quarter. And then can you maybe just, was that more on the cloud security side or is that more the Right, complete products. Just be curious what drove that improvements?

Speaker 2

No, we got traction on both sides of the equation there. And the pipeline build has been healthy for both. And so we'll continue to focus on both. We don't I can't recall, we don't do the line item reporting You're on it, but we actually have gotten traction across both of those portfolios.

Speaker 4

Yes, Greg, and you're right,

Speaker 3

it was 10% of new ARR in Q4. So it's up significantly in Q1.

Speaker 13

Got it. All right. Thank you very much.

Speaker 2

Thank you.

Operator

Our next question comes from Jonathan Ho from William Blair. Please go ahead. Your line is open.

Speaker 14

Hi, thanks for taking my question. And this is Garrett Bergamo on for Jonathan Ho. So you mentioned the sales Transition is ahead of schedule, ahead of your expectations. So can you just expand on that a little bit? Maybe what Specifically, it's progressing well there and maybe where there's still room for improvement?

Speaker 14

Thanks.

Speaker 2

Yes. Well, I think there's room for improvement in this, we have to hit the plan. So we're ahead of schedule on the plan, but because you're ahead of schedule, you still have to manage for the plan. And so that's the big there's no big GAAP on sort of like where we expect it to be. And then specifically, what's ahead and what's the next step in the plan is there's a couple of elements that we've actually emphasized.

Speaker 2

One is that could you do the transition and retain the sales team? And check, we've actually done a very good job of actually doing the transition And retaining the sales team with confidence. The second part is could you actually get pipeline build not just across the few people, But across a broad base of people. And nicely, we're seeing pipeline build continually starting to actually ramp and increase across a broader and broader selection of the sales force. And then 3rd, let me Tim highlighted this in his remarks is that it's not just a few reps, but it's a larger and larger cross section of reps Landing deals.

Speaker 2

This is why that sort of moving from 10% to 20% over 20% matters. It's because you need the success to actually follow it. And so in Q1, we actually saw that progress that was ahead of where we wanted to be. And we need to continue to see that progress in Q2. Now, our outlook for Q2 presumes that that progress continues, Because that's the setup that we have both in the pipeline and the conversion rates that we've seen, but those are the elements of the sales force Are they there?

Speaker 2

Are they motivated? Are they building the pipe in the right areas? Are they converting that pipe? Are they closing deals? And so far versus planned, It's at or better than what we expected across all of those metrics.

Speaker 2

Thank you for the question.

Speaker 14

Got it. Thank you. Yes, thanks.

Operator

Our next question comes from Joshua Tilton from Wolfe Research. Please go ahead. Your line is open.

Speaker 8

Hey, guys. Thanks for taking my question. I know there's been a lot on it, but

Speaker 5

I kind of just want

Speaker 8

to come back to the guidance. It does imply that you guys have to kind of triple your net new ARR by 4Q. So assuming that this all does go to plan and you achieve that, what percentage of net new ARR by the end of the year is going to come from these complete consolidated offerings? And I'm only asking because it does feel like in addition to just these bundles ramping, you sort of need to see a pretty meaningful improvement in the rest of the business. So one, am I looking at this the right way?

Speaker 8

And 2, can you maybe just unpack for us the other 80% of net new ARR? What's driving that? And how will that trend for the rest of the year?

Speaker 2

Yes. So one, the primary drivers of the other part of the business AR is what you would expect it to be. It is our traditional detection response That doesn't have the complete consolidation factors around it. Think about that as a standalone SIM category, it's vulnerability management and it's standalone cloud. And really what you actually have there is, I would say, it's less efficient.

Speaker 2

You can clearly see that from the ASP dynamic Then the packages, so you get efficiency as you actually build out the packages. But to clarify a couple of things for you. 1, in no way do we expect it to be 100% of our sales are in the platform consolidations. We don't assume it's not in our base model. It's not remotely close to it.

Speaker 2

We still have to execute on ensuring that we actually Our successful in landing and closing the traditional SIEM, MDR, vulnerability management, cloud security, Those elements. We still have to sell and cross sell. So we have to add Threat Intelligence Zone. We have to add Sorum. All of those things are a part of the business.

Speaker 2

So the way that I would actually just think about sort of like the back half of the year is, one, I would just think about the backdrop and the setup. It's not just How it relates to this year is also what's the comparative base to last year. Keep in mind, we actually had we talked about sort of like the challenge at the end of last year, But we actually have those year over year comparables with a much stronger sales team that's actually more mature and in process With a stronger product portfolio. So one, if you just think about the setup, it's actually a much more favorable setup than the headline, I think, analysis that you actually did and would indicate. The second thing is that we have to have a robust pipe.

Speaker 2

We're building that. We're trending towards the pipe that we actually need for the back half of the year. And then we have to execute on the packages. It's clearly going to be above 20%, but we still have to execute on the other aspects of the business, But we are executing on those other aspects of the business. Cloud is actually our performance in cloud is actually getting better.

Speaker 2

We even though VM is where we expected it to be, And I think we're in line with the market there. We still will close business. But most importantly, we're still going to be executing on the cross sell and up sell. So the expansion in the installed base, which again is still a material part of the business, we'll be executing on that. So if you take that total setup, the setup, the packages, The upsell and the cross sell and then executing run rate against the parts of the business that we've already been executing against, I think we're set up quite well for the second half of the year And Q4, though I agree with the analysis that you actually gave from a numeric perspective.

Speaker 3

Yes, Corey, I would just underscore, we know the market opportunity It's over $30,000,000,000 so it's huge. We know the demand environment is there. Yes, there are some challenges from Macroeconomic budgets being tightened, but security is still critically strategic for all of our customers and our prospects. We see the pipeline, we see the conversion rates, we have the mature sellers and we have the breadth of products and we have the packages. And now it just comes down to execution, which we said will be heavily oriented towards the second half of the year.

Speaker 3

We're off to

Speaker 2

a good start, but we have more work to do. You for the question.

Operator

Our next question comes from Alex Henderson from Needham and Company. Please go ahead. Your line is open.

Speaker 4

Great. Actually a pretty good follow-up to the question that was just asked and I thought that was a good question as well. But I was hoping you could give us some sense of what a success trajectory would look like for the new ARR from these packages. If it's 10% going to 20%, is it 35% or 40% next quarter and 50%, 60% in the period? A portion of new ARR should be coming from it to hit your model as we go through 2Q, 3Q and into 4Q?

Speaker 2

Yes. So it's a good question. It's directionally up. We're not going to provide a specific number at this time and at this stage. But what I would say is we would expect it to continue to And most importantly, keep in mind, it's not just the packages.

Speaker 2

We also expect to continue to be doing cross selling and upselling. So when we think about our ARR and expansion, there's a number of different elements that are involved there. But I would say we absolutely directionally expect it to continue to expand. It's too premature to provide you a specific number of what it's going to be like per quarter by quarter right now.

Speaker 4

Well, if you're not going to answer that one, maybe I could ask another one. Can you give us any sense of whether there was any disruption associated with the financial The bottle impacting the CFO behavior of your customers in late March, was there linearity or Visitation?

Speaker 2

Yes. I'll give you a very quick response there. So one, what I would say is just like the whole world, I think lots of people took a moment and a breath to actually say like What does this mean? So we definitely saw some impact of some customers actually slowed down a little bit because they like, hey, what does this mean? Is this Sort of an indicator of a future select banking crisis.

Speaker 2

What I would say is both from our sales team perspective and our customer perspective, that was only like a breadth. It was a moment And they got back to the business and we actually had a fairly strong close to the quarter overall. But there was a breath that actually happened there. All right. Thank you for the questions.

Speaker 2

And let's keep going.

Operator

Our next question comes from Mike Walkley from Canaccord Genuity. Please go ahead. Your line is open.

Speaker 15

Hey, guys. Good afternoon. It's Daniel on for Mike. Thanks for taking the question. Yes, I guess, I just wanted to Steve, if you guys could provide some detail on how the productivity of your sales reps are trending, especially as they're now selling the 2 complete bundles.

Speaker 15

Is this, I guess, sort of in line with what you had previously been expecting or are they ahead of progress?

Speaker 2

It's in line with what we were expecting. And I would just say that the progress, it goes a little bit to the earlier questions about the Mix shift in the pipeline build, but that's where we're actually ahead. And frankly, the sales of the new packages and bundles, that's where we're headed. But I would say the overall productivity is in line to Again, our expectations assumed that there was going to be a ramp based on training, which we're seeing and we're expecting and we're delivering against. And we are seeing some of the larger deals that we actually talked about earlier, which do have slightly longer deal cycles in addition to the environment.

Speaker 2

So I'll say productivity is exactly where we expect it to be. And so as we look forward, that actually gives us the confidence that we are building pipe Actually close at the productivity rates we expect in the back half of the year.

Operator

Our last question will come from Shebly Seyrafi from FBN Securities. Please go ahead. Your line is open.

Speaker 16

Yes. Thank you very much. So your 10 ks showed that your sales and marketing employee headcount Grew by 16% in 2022. What kind of headcount growth in F and M do you expect in 2023?

Speaker 2

Yes, I think as Tim sort of like conveyed it earlier, I think we are looking for pretty modest growth there. I think we expect more productivity increases. We had the good benefit of actually having the people in place. It was allowing them to get more tenured to get the training, the enablement And the ramping, so I would expect modest and that's really a focus on the productivity. And I think we're trending well there.

Speaker 3

Yes. Shevylie, as you know, we've Doubled our profitability guidance from year over year and free cash flow and we are certainly very committed to that. We got in front of the headcount hiring curve over a year ago and it's something that we're just going to watch very carefully along with all of the

Operator

We have no further questions. I would like to turn the call back over to Corey Thomas for closing remarks.

Speaker 2

Well, thank you all for spending time with us this evening, And I hope you all have a great rest of the day and good week.

Operator

This concludes today's conference call. Thank you for your participation. You may now disconnect.

Earnings Conference Call
Rapid7 Q1 2023
00:00 / 00:00