SentinelOne - Q3 2022

Transcript

Speaker 0

Good afternoon. Thank you for attending today's SentinelOne Q3 2022 Earnings Conference Call. My name is Selena, and I will be your moderator. Is at the end. I would now like to pass the conference over to our host, Doug Clark, Head of Investor Relations at SentinelOne.

Please go ahead.

Speaker 1

Good afternoon, everyone, and welcome to SentinelOne's earnings Call for the Q3 of fiscal year 2022 ended October 31. With us today are Toma Weingarten, CEO Nick Warner, COO and Dave Bernhardt, CFO. A press release and a shareholder letter were issued earlier today and are posted on our website. This call is being broadcast live via webcast and following the call an audio replay will be available on our Investor Relations section of our website. Before we begin, I would like to remind you that during today's We will be making forward looking statements regarding future events and financial performance, including our guidance for the 4th fiscal quarter and full fiscal year 2022 as well as certain long term financial targets.

We caution you that such statements reflect our best judgment based on Factors currently known to us and that the actual events or results could differ materially. Please refer to the documents we file from time to time with the SEC, in particular our S-one and our quarterly report on Form 10 Q. These documents contain and identify important risk factors and other information that may cause our actual results to differ materially from those contained in our forward looking statements. Any forward looking statements made during this call are being made as of today. If this call is replayed or reviewed after today, The information presented during the call may not contain current or accurate information.

Except as required by law, we assume no obligation to update these forward looking statements publicly or to update the reasons actual results could differ materially from those anticipated in the forward looking statements, even if new information becomes available in the future. During this call, unless otherwise stated, we will discuss non GAAP financial measures. These non GAAP financial measures were not in accordance with generally accepted accounting principles. A reconciliation of GAAP and non GAAP results is provided in today's press release and in our shareholder letter. These non GAAP measures are not intended to be a substitute for our GAAP results.

The financial outlook that we provided today excludes stock based compensation expense, employer payroll tax on employee stock transactions and an amortization expense of acquired intangible assets, which could not reconciled in today's press release. And with that, let me turn the call over to Tomer Weingarten, CEO of SentinelOne.

Speaker 2

Good afternoon, everyone, and thank you for joining our fiscal Q3 earnings call present year over year in the 3rd quarter, our 3rd consecutive quarter of triple digit growth. We continue to scale our business on the back of leading endpoint protection, machine speed EDR, XDR Innovations on the cybersecurity landscape, I'd encourage you all to also look at our shareholder letter we have on our Investor Relations website, which provides a lot more detail. We're still early in the generational shift it is every year. This is unacceptable and a growing risk to enterprises across the world. The increasing number of attacks and sophistication clearly shows that enterprises must deploy best of breed solutions that enable them to stay 1 step ahead of Take the current state of ransomware.

Attackers have shifted from simply holding operations hostage to actual data compromise 1st purpose built AI powered XDR platform to make cybersecurity defense truly autonomous from the endpoint and beyond. We believe it's essential to protect all parts of the enterprise estate such as unknown devices, cloud workloads and the data itself. We focus on data to provide enhanced Our approach is resonating with our customers. We received the highest Overall rating in the 2021 Gartner Voice of the Customer report for endpoint protection platforms where 97 Scento reviewers would recommend the Scento 1 Singularity XDR platform. I'm very proud of the work we all do to keep our customers secure, engaged and delighted.

We focus on putting our customers first. Let's turn the discussion to how we're executing. During our IPO earlier This year, we outlined 5 key aspects to our growth strategy. Our 3rd quarter results demonstrate success and progress against each of these. First, we continue to innovate and enhance our cybersecurity and data platform.

Automation is a top priority for SentinelOne. Machine speed automation can help counter instantaneous cyber attacks and enable under resourced IT teams. Last quarter, we introduced Storyline Active Response or STAR for customized dynamic detection and response rules. This quarter, we began offering remote script orchestration or ARISO to instantly investigate and triage threats on multiple endpoints across entire organizations remotely. Together, these two capabilities deliver increased level of automation as well as help enterprises consolidate legacy workflows and tooling with the I want to dig more deeply into RSO.

We designed RSO to transform endpoint management for incident response providers and Enterprises. We're offering complete remote control and orchestration across endpoints. It's a scalable way for security providers to not only detect and respond with existing endpoints, but also manage and control the entire deployed footprint. It's like Our customers and partners are already realizing the benefits of the advanced capabilities of RSO. 1 of our incident response partners said RSO helps eliminate time consuming efforts to collect and consolidate forensics data and rapidly contain attacks enabling us to minimize adversary impact.

On the customer side, The Fortune 500 wholesale company added RSO to help automate threat hunting capabilities, making SentinelOne more powerful and integral to their security posture. In addition to automation, we believe a true XDR platform must be a comprehensive and open platform that provides visibility, protection and response across the entire enterprise landscape. Customers have been asking us to provide mobile to complement our leading protection capabilities. And just this week, we announced Singularity Mobile. CenterOne customers can now manage mobile device Alongside endpoint, cloud workloads and IoT devices, Singularity Mobile brings behavioral AI driven machine speed protection, detection and response directly to iOS, Android and Chrome OS devices.

Putting this all together, we were recently recognized as a Strong performer in the Forrester New Wave extended detection and response providers report. Forrester highlighted that in ST Labs annual report. The second part of our strategy is to protect more enterprises every In Q3, our ARR grew by 131% year over year and our revenue was up 128%. Our business is performing exceptionally well. We added over 600 new customers sequentially.

We grew our total customer count by over 75% to over 6,000 compared to a year ago. Customers with ARR over $100,000 grew 140% We continue to see a growing mix of large enterprises within our business. In addition to expanding our global presence through direct sales teams, Our channel remains a source of scalable growth and differentiation. With our partner friendly approach, we're succeeding by further expanding our scale with incident response in managed security service provider partners. Nick will touch on this in more detail later on.

3rd, we're unlocking further product adoption within our existing customer base. In the fiscal Q3, our net retention rate reached 130%, a new record This growth was driven by strong license expansion, platform upgrades and customer adoption of our new capabilities. We're early in our module strategy, but we're seeing great customer interest and adoption. Our emerging products such as Ranger IoT, product delivered the highest growth during the quarter, a testament to the demand for our real time runtime protection for cloud workloads and containerized environment. In one case, a leading book publisher selected SentinelOne for cloud workload protection because of its ease of use, Simplicity of deployment and having a true EDR in one console to manage their cloud native Windows, Linux and Kubernetes environments.

The 4th element of our growth strategy is to further expand our global footprint. Revenue from international markets grew 159% year over year. International markets now represent 33% of our total revenue, up from 29% a year ago. As an example, in Q3, We secured a European conglomerate by replacing over 20 different antivirus products. This shows how our platform can help with vendor consolidation while also delivering leading performance.

We're growing our sales coverage and channel presence in international markets. Last quarter, we talked about opening a new R and D center in the Czech Republic, and I'm excited that we're hiring great talent in this region. These initiatives will continue to strengthen our international presence. 5th and last, we're well positioned to expand our total addressable market Through both acquisitions and strategic investments, we further strengthened our leadership team with the appointment of Rob Salvagno to lead corporate development. As we consider acquisitions, we value prospects that align with our product, customer and strategic market opportunities.

Over time, we intend to use these opportunities to extend the reach of our XDR platform into adjacencies that complement our offerings. Our strategy also involves making minority investments. We recently made 2 strategic investments in early funding rounds For Leminar and Torq, companies that in line with our approach to automation and APIs, investments in emerging technologies will allow us to constantly enhance the SentinelOne platform in areas that may be of future interest to us. These investments reflect our long term commitment to innovation, automation and securing data wherever it resides with a front row seat into cutting edge cybersecurity technologies. Finally, as part of our XDR roadmap, Scalar is performing extremely well and it continued to grow year over year and quarter over quarter.

Scalar is integrated into our technology backbone and we're using it to redefine XDR. At the same time, we're onboarding all new customers on our revamped back end We've begun migrating select existing customers. By using Scalar, our customers are enjoying faster performance and advanced analytics capabilities. Before I turn the call over to Nick, I want to discuss our people and our culture. Our true competitive advantage comes from the employees of Central 1.

We've invested in talent across sales, marketing, engineering and corporate functions while cultivating an inclusive and diverse workplace. We've grown rapidly in the And our number of employees has gone from 600 to about 1100. This has been no small feat and we're continuing to grow and expanding the team. We work very hard to foster a productive and inclusive culture and our efforts are showing up in results. As part of the 2021 Great Places TO Work Certification, 96% of responses from employees said SentinelOne is a great place to work.

We received several other awards during the quarter That recognize our workplace culture. With the combination of our differentiated technology and dedicated team, we're helping our customers stay ahead of adversaries, We're helping our customers reimagine cybersecurity. I'm excited about what we can do from here. Thank you to all Sentinels and our customers and our partners. With that, I will turn the call over to Nick Werner, our Chief Operating Officer.

Speaker 3

Thank you, Tomer, and welcome, everyone. Our go to market flywheel of sales and marketing, Channel and technology partners resulted in another outstanding quarterly performance across the board. Strong demand for our Singularity XDR platform is evident by our Q3 results. Our customers are clearly choosing SentinelOne as a partner and technology of choice. In Q3, we reported an impressive ARR growth of 131%, reaching $237,000,000 compared to last year.

This growth was driven by a healthy combination of new customer additions, existing customer renewals and upsells. Today, we are protecting over 6,000 customers through our Singularity XDR platform. That's total customer growth of more than 75% or almost 2,500 more customers compared to last year. I want to be clear, this is a competitive market. The environment has not changed.

Yet we've maintained incredibly strong win rates in all competitive situations against legacy and next gen vendors. With every new quarter, we're protecting more and more mission critical businesses around the world. In Q3, we added a leading global financial change in a 7 figure multi year agreement. This was a true platform win. They selected SentinelOne for endpoints, Cloud workload protection, remote script orchestration and data applications.

It's telling that we're getting so much attention by our competitors, which speaks to the traction we're having in the market. We're winning more and more customers and our growth rates speak for themselves. What enterprises need is automated security, not repackaged legacy AV and crowd powered protection. Our mission is to elevate security for our customers through a relentless focus on innovation. And our customers are happy with 97% gross retention rate and the highest score in Gartner's Voice of the Customer survey.

That's 100 Customer reviews and that speaks volumes compared to any single customer example. Let me take a step back and share some details around our customer and business mix. We grew customers with ARR over $100,000 by 140% versus last year. Our business mix from customers with ARR over $100,000 new larger customers were seeing strong retention and expansion within our existing customer base. Gross retention rates remained consistent with prior quarters.

Our net retention rate was 130 for our company. This record NRR was driven by license expansion, platform tier upsells and adoption of emerging capabilities. In Q3, 2 of our Fortune 10 customers renewed with multi year deals and both expanded their use of the Singularity platform, adding modules such as Ranger and Remote Script Orchestration. I'd like to talk more about our channel partners. Our partner ecosystem helps magnify our market access and significantly extends our reach and efficiency.

We do not compete with our partners. Instead, we equip them with industry leading capabilities like multi tenancy and open APIs. In fact, we're expanding our ecosystem and this is driving significant growth for us. Let me double click on our managed security service provider partnerships as an example. MSSPs provide outsourced monitoring and management of security devices and systems.

Our growing and highly scalable partnerships with MSSPs give us robust mid market and large enterprise coverage. Together, we have fueled significant new customer and business growth over the past several quarters. We're proud to partner with companies like Enable, AT and T, Pax8, Continuum, Kroll and many others To demonstrate the momentum we're seeing in our 3rd fiscal quarter, ARR from our MSSP channel increased by 300% year over year. In addition to MSSPs, our incident response partners leverage the SentinelOne platform for their breach response services, making us an integral part of their capabilities. Last quarter, we talked about our commitment to support even more IR partners through our Singularity platform.

In Q3, we built upon that progress and further expanded our network of IR partners. We Added KPMG as a global go to market partner for incident response and proactive cybersecurity services. Our growing network of IR partners continues to Finally, I'd like to share how we're putting our customers and partners first. We recently hosted our first ever customer conference called 1 up. Participation and response has been incredibly positive.

We've also hosted partner conferences throughout the Americas We added continuing education courses to complement our accreditation programs. These courses keep our partners up to date on new capabilities and modules, which in turn support our growing scale and platform reach. We had around 2,000 accreditations in June 2021. We've made amazing progress since then and now have surpassed over 6,000 accreditations across our sales and presales courses through the end of November. This tremendous improvement illustrates the growing attention we're seeing in the channel.

I'm proud to work with our global team of relentless sentinels every day. I'm excited about our future. We will continue to deliver on our vision with focus on execution and listening to our customers. Thank you again for joining us. And let me turn it over to Dave Bernhardt,

Speaker 4

Nick, Tomer, thank you and thank you all for joining us today. I'll touch on the financial highlights from the quarter and then provide additional context around our guidance for Q4 and fiscal year 2022 after we will open the call to your questions. Our 3rd quarter results exceeded expectations across the board. Our revenue and ARR growth both accelerated in the quarter. Our performance strength was broad based coming from a healthy mix of new customers and existing customer It also balanced across geographies and customer sizes.

We achieved revenue of $56,000,000 increasing 128% year over year and delivered ARR of $237,000,000 with growth accelerating to 131% over the same period. Turning to our costs and margins. Our non GAAP gross margin in Q3 was 67%. This was up 9% year over year and up 5% quarter over quarter. The biggest benefits are coming from our increasing scale and business expansion, including Costs associated with the migration of existing customers to our Scalar back end were minimal in Q3.

This contributed to the gross margin upside relative to our prior expectations. I want to provide more detail here, giving us enhanced data storage and ingestion capabilities. We are balancing our product roadmap with our migration of existing customers. We will follow the optimal cadence for our customers and our business. In Q3, we took a more measured approach to migrations, which had less of an impact to margin.

We anticipate migrating more customers in Q4 and the first half of next year. That said, when I look at our Q3 gross margin of 60 7% and how far we've come in just the past few quarters as we put in some scale and efficiency in our model. Looking at the rest of our P and L, we're investing for growth and achieved triple digit growth rates in ARR and revenue again this quarter. Our non GAAP operating margin was negative 69%. We're continuing to make strategic investments that enhance our product and scale our go to market.

Even still, this is a significant improvement from negative 102% in the year ago quarter and also from negative 98% last quarter, showcasing the potential for leverage throughout our business model. We remain in investment mode in the near term, which is the right strategy given the vast opportunity in front of us. Now for our outlook for Q4 and the full fiscal year. In Q4, we expect revenue of $60,000,000 to 61,000,000 reflecting growth of between 101% to 104% year over year. We're raising our full year revenue guidance from $199,000,000 to 200,000,000 This implies full year growth of 115 percent at the midpoint.

The structural tailwinds of digital transformation, Work environments in an evolving yet persistent threat environment are here to stay. We're executing extremely well. Our product innovation, increased Brand awareness and scaling go to market are giving us favorable opportunities to engage with existing and prospective customers. We expect Q4 non GAAP gross margin to be between 62% to 63% and full year non GAAP gross margin to be between 61% to 62%. Our Q4 guidance implies a minimum of 8% non GAAP gross margin expansion year over year as we're benefiting from increasing scale and Our guidance also reflects the migration of existing customers to Scalar, which we expect will continue into the first half of next year.

Finally, for non GAAP operating margin percent in Q4 and negative 91% to 90% for the full year, we see tremendous opportunity for growth and the investments we're making today will put us In addition, if the stock up expires, invested options and outstanding shares can be traded starting December 9, 2021. This is a continuation of late September's 15% lockup expiration. In closing, Q3 was another excellent quarter with Strong execution company wide and we're expecting that momentum to continue into the end of our fiscal year. I want to thank you all for attending our earnings call. Operator, can you please open up the lines for questions?

Thank you.

Speaker 0

Absolutely. We will pause here briefly as questions are registered. The first question comes from Saket Kalia with Barclays. Please proceed.

Speaker 4

Tomer, maybe just to start with you. Can you just touch a little bit On the mix of customers on different packages, clearly beyond winning new customers here, you've talked about the higher value opportunity with higher value packages. Can you just touch on that going forward?

Speaker 5

Of course.

Speaker 2

Yes. The vast majority of what we saw this quarter was the complete package. I think that we're seeing just overall Standardization on the complete platform, people are opting for our complete EDR package. I think what I can also say on top of that is just increased adoption Our cloud modules, we're just seeing increased demand for cloud workload protection. And given that our platform is one of the best of breed platforms right now in the market, it's something that we're seeing more and more.

Right now in the market, it's something that we're seeing more and more. On top of that, I'd add that with Complete, we also have About 10 expense story modules, data retention is one of them, and that is something that we're also seeing more and more adoption of. So to kind of sum it up, I think complete and EDR is becoming the standard for us going forward. And on top of that are the expansion modules that we're providing to the market.

Speaker 4

Got it. That's very helpful, Tomer. Dave, maybe for you, you talked a little bit about the Scalar migration and understand, I mean, there are some timing Considerations around that and but it was great to see the gross margin expansion in the quarter. How do you think about the long term gross margin benefit After completing the migration to Scalar. Does that make sense?

Yes, sure. I think what you're seeing a bit is kind of a new baseline that we have on a go forward basis. Scalar was not As much of a migration this quarter as we had originally expected, we told you guys I think during the IPO road show and as well last quarter That transitions about a 4% hit to cost of goods sold in that period. So I think what you're seeing now is really the benefit from the business expansion, the benefits of scale, The higher revenue, we're seeing the efficiencies from the Scalar product for our own back end. And then you're also seeing some of the benefits of the cross sell and the AWS renegotiation we've done.

So all of that is Great tailwinds for us going into the future. I think we haven't Change anything in regards to our long term goal, which is in the 75% to 80 plus percent. Being at 67% when we were substantially lower than that a year ago, You're already seeing great strides from everything we're doing to execute against that. So I see this to be depressed For a couple of quarters as we finish this migration and then I think we'll be back in this range and operate for improved margins from that going forward.

Speaker 0

Thank you, Mr. Kalia. The next question comes from Alec Henderson with Needham. Please proceed.

Speaker 6

I was hoping you could talk a little bit about your thoughts on

Speaker 4

I know when you're growing at

Speaker 6

the pace you're at, it's difficult to talk to, but seasonality and particularly Given the sales organization going into your fiscal Q4 here and then going into the seasonally, I would assume somewhat weaker fiscal Q1. So can you talk a little bit about how the seasonality might be impacting Your thoughts on growth and whether we should be factoring that into our assessment of the next couple of quarters?

Speaker 3

Sure. Good question. Q4 is our strongest quarter. I think that, that has been the case historically. I think if you look at broader buying trends in the security industry, Q4 is The most active quarter.

We expect to have very strong Q4 in terms of where Our pipeline is at where deals in the flow are sitting right now. And so I think your assessment is accurate.

Speaker 4

And I think we echo that a bit with just the guidance. That's guiding Q4. We feel very confident in where our revenue is going to be. So as you would expect, we know that seasonality and that's why you're seeing us With the tailwinds and the momentum we've had right now, you're also seeing us increase the guidance for Q4 and the full year.

Speaker 6

So with the expansion of the distribution, the incident response, the MFSPs, all the other players that are Driving your product, does that tell us that we should be a little bit more cautious on the direct sales force contribution going into 1Q, Given you look like you're significantly beating internal targets, therefore, obviously, risers and Salesforce compensation push in the 4th quarter?

Speaker 3

No, the way that we really view it is, it's all part of the flywheel and that flywheel is picking up momentum by the quarter. And in fact, if you look at Our MSSP or incident response ecosystems, they work in conjunction with our own SentinelOne sellers. So, in the case of, Let's take an example within the IR space. An incident response partner will deploy our technology platform to Uncover, mitigate and eliminate an active threat within the customer environment. At that same time, a sales motion kicks off And especially if you're talking enterprise side deals, our own sales force can be deployed within that account to assist in Pricing, closing, the deal, etcetera.

So it's really selling in cooperation with incident response partners. As it relates to our managed service providers, many of those customers are Are in the mid market. A lot of them are in the large enterprise. And I think the same sort of waiting holds true where Within larger enterprise deals, our great team of SentinelOne sellers Can and do get involved as needed in those deals and often they're in their shoulder to shoulder with our partners. But What it really means for us is, it's lead gen, it's really improving the quality of leads And it's giving us really this flywheel and gear effect in terms of coverage because we're essentially Engaging and building these force multipliers around the world of channel partners, MSSP Folks as well as incident response companies, all working in conjunction with SentinelOne to help improve security for companies around the world.

Speaker 6

So less than normal seasonality than would be the case given the expansion of the distribution? Thanks. That's great answers.

Speaker 0

The next question comes from Brent Thill with Jefferies. Please proceed.

Speaker 7

Hey, guys. You have Joe on for Brent. Really appreciate the question. It's great to hear that ARR from MSPs grew 300% year over year. I guess how much of total ARR is From the MSSP channel and then what is the real differentiator there?

Is it awareness, the non competition, pricing or is there a technology differentiation?

Speaker 3

Yes. Hi there. So we don't break out MSSP numbers, But I can definitely speak to the technological advantages that SentinelOne Singularity platform has, as well as Really, I think our go to market culture, which is very different. So talking about technological advantages, we have Unique capabilities like true multi tenancy and that's incredibly important if you think about the way a managed service platform works with 100 or thousands of customers under 1 central tenant. So SentinelOne is really leading that set of capabilities in the space.

We also have unique capabilities like RSO or remote script orchestration, It really lends itself to having an automated way for folks at the managed service provider level To take meaningful real time action on each and every machine. And then switching gears over to sort of go to market differences, A fundamental decision that SentinelOne made a few years ago as we're building out our go to market motion was Really, philosophically, we decided to have a posture of enablement and not competition. So we don't compete with our managed service providers. We don't compete with our incident response partners. And that really means everything when you're talking about having A long lasting business relationship that's founded on trust and cooperation.

Speaker 7

That was really helpful, Nick. And then maybe just staying with you, could you just talk through your hiring plans? Maybe how many?

Speaker 3

Yes, we're not disclosing exact numbers in terms of hiring. But as you can imagine, we're really still investing in the business As we continue to enjoy tremendous growth and so we're really going to continue hiring across the board whether or not you look in Sales, sales engineering channel, both in the U. S. As well as outside the U. S.

I mean, I think it's pretty remarkable If you look at our sustained growth in the international markets, where you're looking at 159% growth And now today international represents a third of our global revenue. And so We're going to continue to invest and we're really investing in people around the world.

Speaker 2

I'd just like to add that The reach that we're unlocking throughout all these different ecosystems, via MSSPs, IRs and now international, I mean, that becomes A real differentiator for us. I mean, we're using in a good way all of these partnership ecosystems to really unlock parts of the TAM that we feel Some of the other vendors can't really reach and that gives us a very sustainable advantage as we kind of unlock growth over time.

Speaker 7

Makes a

Speaker 4

lot of sense. Thanks.

Speaker 0

Thank you. The next question comes from Brian Essex with Goldman Sachs. Please proceed.

Speaker 8

Hi, good afternoon and thank you for taking the question. I was wondering if maybe you could touch on the rate of Migration to Scalar, what are the dynamics of that migration and the impact that it has on revenue for customers that adopt? And How far through your installed base are you with that migration?

Speaker 2

Yes. To It's a very gradual approach that we're taking. I mean, we kind of split it in 2. A, all new customers are already onboarded On the Scalar back end, and that just creates a new cost saving element for us as we look into the future. When we look at the existing customer base, it's a very elective approach that we're taking.

We're basically any customer that asks to be migrated can be migrated. But moreover, we're taking this new approach to XDR that we're unlocking over time, Where we're actually offering better capabilities for each and every customer that uses the Scalar backend as their own backend right now, That creates another avenue for us to continue and monetize over time. As you're probably well aware, Our approach to XDR is an open one and we're starting to allow our customers to ingest data from any other product they have In their ecosystem, and you can imagine that that will be monetized by actually monitoring data ingestion And while allowing these customers to take that data, put it in and retain it for longer, it will again create better economies for scale for And again, more avenues to monetize. We are seeing, I think, increased demand for XDR capabilities as the entire market is I think our approach is different. And I think we're looking at a singular consulate, singular platform that can ingest all data, Unlike most of the other vendors that are really coming in with EDR on one end and XDR on the other.

So to us, I mean, it's just this gradual execution for our XDR roadmap that comes in tandem with our migration of customers.

Speaker 8

Got it. That's super helpful. Maybe to follow-up, I'll take elements of Stackit and Alex's question and maybe approach New logo seasonality. It looks like over the past few years, 3Q has been a lighter a seasonally lighter Quarter for new logo adds. Maybe if you could unpack that dynamic a little bit And help us understand the mix of customers.

It looks like you nicely went up into larger enterprise deals, ARR per customer is Certainly growing really nice. So that's great to see. But maybe just how you're approaching the customer mix That you're bringing on board and how we should think about logo ads going forward?

Speaker 3

Yes. So I think you stated it well where really the most important element of our customer Is that 140% growth of customers over $100,000 of ARR. And I think if you pair that to what Tomer had said, where the vast, vast majority of customers, new customers in particular, are going with Singularity Complete. Inherently, that means they're utilizing the Singularity and SentinelOne platform for more, which makes us more sticky, more involved, more touch points within various parts of an enterprise. And I think as part of that, also what we're really seeing that's exciting is Increased module adoption and attachment at time of sale for new customers.

And that's a Different motion than say a year and a half ago and we're really excited by that. So if you look at overall growth From a high level, it's great. If you look at customer mix becoming increasingly weighted to the enterprise, those signals are also there. And then If you look at the product mix, all of those are trending in the right direction from our perspective.

Speaker 8

Great. Makes a lot of sense. Thank you.

Speaker 0

Thank you, Mr. Esses. The next question comes from Patrick Colville with Deutsche Bank. Please proceed.

Speaker 9

Hey, thank you so much for taking my question. I guess one of the questions I wanted to ask you, we get a lot from investors, is how far through The displacement of antivirus are we as of what December 2021, is there still a lot of McAfee, Symantec, and are these companies left or is that kind of process now largely complete? Just kind of, I guess, help us

Speaker 3

Frame that opportunity

Speaker 9

or what's left of it?

Speaker 2

I think it's safe to assume that it's far from complete. One data point to point towards that is the fact that pretty much every deal that we closed this quarter and in past quarters We've had an incumbent vendor in the mix. So they're obviously still there. They're obviously still are the vast Majority of what we deal with when we go into environments. And I think that even if we take a very conservative view that the overall TAM, I think it's safe to assume that about Over 50% of it is still in the hands of the incumbent.

Looking at our pipeline for Q4 and the out quarters, That doesn't seem to change. So to us, that cycle is still ongoing. It's a pretty big TAM that we're serving. And obviously, if you look at our mix today, also going into the cloud security opportunity kind of Further compounds it and it's something that the incumbent vendors never had to offer, so that makes the entire buying cycle Really more sticky, more inclusive and just overall more important for the enterprise. So it becomes part of But again, in almost every account that we go into, call it, high 90s, we see an incumbent vendor.

So We don't see that tapering away anytime soon.

Speaker 3

Great. Thank you so much.

Speaker 0

Thank you, Mr. Colville. The next question comes from Gray Powell with BTIG. Please proceed.

Speaker 10

Great. Thanks for taking the question and Congratulations on the good results. So yes, a couple on my side. Maybe just to start off, I just want to follow-up on Scalar and gross margins. So you beat the Q3 gross margin guidance by a little over 8 points.

Is it fair to say that roughly Four points of that beat was due to the timing of the Scalar migration and then the rest of the upside was just sort of natural leverage in the business model?

Speaker 4

Yes, that's correct.

Speaker 8

All right. That was easy.

Speaker 10

And then my other question could The so you highlighted that emerging products like Ranger, Cloud Workload Protection and data capabilities, they all grew well into the triple digits. I guess can you give more color there? I mean the entire business grew triple digits. So I'm just curious like how much faster are emerging products growing versus the core? Or can you give us a sense as to like the mix of new sales that are coming from emerging products?

Thanks.

Speaker 2

Yes, significantly faster than the macro growth rate of the business. And cloud is definitely the leading Product line there, and that's something that we see building over in our pipeline as well. We're starting to actually generate Pipeline per product line, so we're seeing major traction in each one of these emerging modules. We're seeing the attach rates for those On the rise, our MDR service that we launched about a year ago is now really starting to gain complete scale. So all in all, we kind of see this as additional growth vectors in the business that will help carry our growth rate into the years to come.

Speaker 3

All right, great. Thank you very much.

Speaker 0

Thank you, Mr. Powell. The next question comes from Andrew Nowinski with Wells Fargo. Please go ahead.

Speaker 11

All right. Thank you for taking the questions. I want to start with the vigilant service. So can you just give us any color in terms of what the attach rate was Of that service to your new deals and how much of a revenue uplift it provides when a customer adds Vigilance?

Speaker 2

Yes. Vigilance for us is something that we started selling about a year, a year and a half ago. It's about a third of enterprise We got 2 new tiers that have been added to the vigilant service. We're seeing adoption for those as well.

Speaker 11

Okay. And then as it relates to net new ARR, it's increased triple digits for the last three quarters. As we think about how to model Q4, can you just Talk about how your sales capacity compares to last year and what other factors might influence the year over year growth in net new ARR?

Speaker 2

I think it's relatively very linear for us. I mean, if you look at our business in the last couple of years, ARR Growth has been very, very linear and very much according to our expectation, really no matter what happened

Speaker 4

to the market.

Speaker 2

To us, We're just continuing and scaling our business. We're, I think, unlocking more capacity on the sales side, while We're expanding our partner ecosystem. So to us, I mean, we are continuing that's again slide wheel effect Nick was talking about, and we're just continuing our growth. You've seen our guidance for Q4 and for the year. We feel that's very sustainable.

Speaker 11

Okay, thanks.

Speaker 0

Thank you, Mr. Nowinski. The next question comes from Hamzah Fodderwala with Morgan Stanley. Please go ahead.

Speaker 12

Hey guys, thanks for taking my question. Dave, I just wanted to follow-up on earlier questions that was at. I think last quarter you mentioned Something like 10% of the net new ARR came from securing cloud workloads and IoT. Was that right? And do you have an updated metric there at all?

I mean, probably didn't change much quarter to quarter, but just curious.

Speaker 4

Cloud still remains our fastest growing module. About 10% of endpoints are covered by cloud and servers. It has been our fastest growing module for some time. Cloud is a piece of the business. I think that we think will expand greatly in the future.

We anticipate that at some point, it will be the similar size to the endpoint market.

Speaker 2

Yes. And when we look at all of our emerging products Together, it's well over 10% contribution for every given quarter, and we definitely see that on the rise. So to us, I mean, when you kind of look at emerging, we look at data, IoT and cloud, and again, all of those are just showing great, great progress.

Speaker 12

Got it. And there seems to be a lot of focus on the growth algorithm for the top line Between new logos and then average revenue per customer, just going forward, how should we think about that? Should that be More weighted on ARR per customer, I know, I mean based on my math, right now it's about 40,000 ARR per customer across your base. How do you think about that going to 50,000 or maybe even 100,000 over time?

Speaker 4

Yes. I mean, obviously, as we've seen module expansion, as we've seen customers take step ups From core to control or control to complete, we're seeing higher price points from customers. So I'd anticipate that that will continue. And as well, we're Obviously bringing in new customers that are of substantial size. So I think you'll see continued growth from us in both vectors.

We're excited about our guidance and where we continue to think we'll execute to in the future.

Speaker 1

Thank you.

Speaker 0

Thank you, Mr. Fodderwala. The next Question comes from Roger Boyd with UBS. Please proceed.

Speaker 3

Going back to cloud workload protection, can you just talk about how often you're seeing that show up in new logos versus upsell? And To the extent cloud security is becoming a bigger consideration in endpoint protection purchase decisions.

Speaker 2

Yes. We definitely see it a lot in new logo motion. I think even more than what we concentrate on the Retention and upsell side, it's definitely this, I think, mainstream awareness that you now need basically the same type of protection that you Years had on the endpoint and server side now onto your cloud workloads in runtime. It's actually also a very different competitive set that we see on the cloud workload side, where the vendors that we meet most often in cloud Workload protection opportunities are going to be parallel to networks and its slew of start ups. It does impact what we Kind of call it joint cycle between selling endpoint and cloud in tandem.

Even though we also address Cloud only opportunities with our cloud Workload Protection platform. It's regarded as one of the leading offerings in this space right now. So to us, again, cloud just represents a very exciting new opportunity. We've been working on Linux Servers, Linux environments, which is really kind of an adaptation of what you're seeing right now in the Kubernetes platform, and we've divided the 3 cloud native platform to address that opportunity, It is showing great traction right now.

Speaker 3

Perfect. Thanks a lot.

Speaker 0

Thank you, Mr. Boyd. The next question comes from Shaul Eywal with Cowen and Co. Please proceed.

Speaker 13

Thank you. Good afternoon. Congrats on the strong results and guidance, guys. Tomer, I have a product related question. Your Singularity platform is being integrated With Microsoft Azure Active Directory where SentinelOne provides endpoint and identity solutions, and Correct me if I'm wrong, under your conditional policy solution.

So should I be looking at this integration as Microsoft Potentially cannibalizing its own Defender platform in the long term. Can you maybe double click on that specific integration?

Speaker 2

Yes, sure thing. And I think to us, obviously, providing for conditional access in this 0 Trust world It's a much needed ingredient for a lot of these enterprises out there. And you kind of see what other vendors are also doing in this space around Identity Protection and what we found is that their offerings are incredibly narrow and ones that we can actually Delivered to the customer by just integrating directly with the identity providers. Now it just happens to be that 1 of these identity providers is Microsoft, and Microsoft is also obviously a competitor in this space. But I wouldn't say that one really touches the other.

For us, it's just a great way to deliver more value for our customers without the need to really attach another module or Provide another capability, but really just giving them out of the box integration for conditional access, which is actually something that our competitors are charging for. So to us, just again, just a great way to address a much needed capability in the space in a completely native way By directly integrating with Microsoft, another integration will be with the other identity providers that's coming soon. All in all, once again, a seamless way to deal with 0 Trust.

Speaker 0

Thank you, Mr. Yao. The next question comes from Rob Owens with Piper Sandler. Please proceed.

Speaker 3

Good afternoon and thanks for taking my question. I was wondering if you could touch a little bit just around the linearity of the quarter and how it played out. Want to drill down into the extension receivables and days billings outstanding. Is this a function of larger customers moving up market or is this a more normalized Range here that we should expect it to remain in? Thanks.

Speaker 4

Yes. I don't think there's anything They were forecasting differently. I think there are larger customers, which we anticipate will continue. So we'll see the benefit there, but I think it's also just we're getting better at operating a business. So I anticipate Those numbers

Speaker 3

would be similar.

Speaker 0

Thank you, Mr. Owens. The next question comes from Tal Liani with Bank of America. Please proceed.

Speaker 5

Hi, guys. I want to go back to something you said on the prepared remarks. You mentioned that There is competition with both new and existing kind of antivirus players. And if you look at the in the last year, if you look at the Competitive landscape, do you see any significant change in pricing or aggressiveness of other players? There are some concerns that the pricing environment is deteriorating on the basic product or the initial And I'm wondering if this is something you're actually seeing in the market or that's more just a high level concern?

Speaker 3

We're not seeing that. And in fact, year over year, our prices, our land prices are rising. And That's a function of product enhancements, the innovation that we show our customers as well as our module attach rate. And Really, SentinelOne competes and wins because of the differentiation of our data and AI driven technology. In this space with enterprise buyers, no customer selects a security vendor based solely on pricing.

That just doesn't happen. And so I think what we're really seeing is a combination of a few factors. 1, folks are relying on and going to the best technology that provides an automated and easy to deploy solution. The second thing is We have a number of highly interesting modules that customers are consuming. And the third is the surfaces that we're protecting Are increasing.

So if you look at what we just announced with Singularity Mobile, that opens up an enormous amount Of adjacent surfaces for us to protect. If you think about what Tomer talked about with cloud workload protection, Combined with the already vast number of only legacy protected devices in the enterprise, Really, there is an amazing amount of opportunity for us both within new customer, but also existing customers to Continue to grow our ASP and our price per node. So we are not seeing that. We'll see within any given account, there could be one off price pressures. But in terms of macro trends, we're really not seeing that.

Speaker 2

Overall, what I'd just like to kind of add to what Nick said is that it's becoming increasingly hard to do any type of apple to apple comparison in this market just because of the number of moving pieces, different modules, different offerings that each and every vendor To the market, so I think it's something that is highly dependent on the deal composure for any given deal. And again, if you put a layer on top of it, a consumption usage based module that we'll start introducing as well, And we're already introducing with our data retention modules, that becomes even harder to slice and dice and figure out exactly. But to the next point, I mean, our PPN is on the rise. And all in all, we're very pleased with our progression with new lands and the price points there.

Speaker 5

And, Tomer, is there initially when you went public, some distributors or resellers were saying that your price level is lower than that of Crowd Strike. Is this still the case? Are you winning also on price or did the Because of what you just said, we can compare pricing levels.

Speaker 2

Yes, I think it was never the case. I don't know if it's no longer the case. Again, the way that we price is our the share system that we found to monetize our platform, think it's very competitive. I think in certain cases, you'll see it's more expensive than the competition. In some cases, You'll see the competition actually coming in and discounting deeply to try and win against us.

I I think the dynamics in our market are very account and sales cycle dependent. As a whole, again, if you look at our entire business, PPN is on the rise. We like our price point. Look at our margin. I mean, that would not have been possible without a very Healthy price points for our offering.

So to us, I mean, it's incredibly healthy.

Speaker 3

One thing I would add is Commonly, our public company peer competitor force bundles in a myriad of human powered services into their deals. And so often when folks are looking for an overall outcome of better visibility, better protection And if they're comparing apples to apples, well, if the other bunch of apples also have some oranges in there, that ends up being A higher landed cost and really a much higher operational cost. So I think one thing that constantly delights our customers is That they're able to get automated technology that doesn't require heavy handed services to deploy and maintain and that overall return on their investment, They get higher ROI and they get to that much faster with the Singularity platform.

Speaker 5

Great. Thank you.

Speaker 0

Thank you, Mr. Liani. There are no additional questions registered at this time. So I will pass the conference over to Tomer Weingarten, CEO, for closing remarks.

Speaker 2

Thank you. And thank you everybody for joining us today and see you next quarter. Thank you.

Speaker 0

That concludes the SentinelOne Q3 2022 earnings conference call. Thank you for your participation. You may now disconnect your line.