Erez Antebi
Analyst · Needham & Company
Thank you, Kenny. I'd like to welcome all of you to our conference call, and thank you for joining us today. Today, we are slightly changing the format. In the press release, you will be able to find all the numbers and tables that we typically release as well as those that Ziv previously used to share in the conference call. Therefore, after my remarks, we will jump straight into Q&A, and Ziv and I will be available to answer your questions. Our second quarter was another quarter of solid growth. Revenues grew 8% year-over-year for the second quarter and reached $35.3 million. In the second quarter, we also reduced our non-GAAP operating loss by about 40% compared to the second quarter of 2020 and increased our total cash and equivalents to $105.6 million. This is our 14th straight quarter of revenue growth year-over-year, and I am very pleased with the results we achieved during the second quarter. Also during the second quarter, we succeeded in signing several recurring security revenue deals for several of our Allot secure product lines. I'm very pleased with these results, and I believe it shows we are on track and successfully executing on our plan. Our business is expanding across our product lines and markets, and we are increasing our market share, especially in the cybersecurity business, as I will describe in more detail. As we see our opportunities grow, we continue to invest in order to capitalize on the significant number of opportunities that we are identifying. I want to start by describing what we see in our cybersecurity business and how the market is continuing to change favorably. As I have said in previous calls, Allot is rapidly transforming into a cybersecurity company, and this is where we see most of our future growth coming from. There is a revolution happening in the consumer cybersecurity market. Responsibility on securing the consumer, the family, the small business lies today with the individual. Each person is responsible to protect himself or herself and their families and small businesses. To do this, they need to find a security app, buy it, download it and install it on every one of their devices. The problem is that regardless how good or bad a security app is, more than 90% of consumers don't do what I just described and are left unprotected. This means that the current solution with endpoint security apps is not accessible enough to most people. End users, consumers and small, medium businesses are looking for a simple, 0 touch cybersecurity service. They prefer a simple security service and not have to do anything technical like downloading an app to each device and configuring it. While most people are practically left unprotected, threats such as phishing and others are growing. We recently published a report showing that our consumers protected by Allot Secure in Europe. During a period of 3 months alone, our security software blocked 140 million attacked attempts by the Flubot Banking Trojan. This is just one case, but it clearly shows the level of threats people are facing on the internet. The revolution of shifting responsibility from protecting the consumers and small businesses from the individual to the CSP is indeed happening. I'd like to use the analogy of water. We buy water from the water utility company and expect it to come to our faucet safe to drink. We don't expect it to come dirty and then have to figure out ourselves how to filter and purify the water so that we can drink it. Much the same, the internet access our CSP provides us should be safe for us to use. Currently, we see a growing number of CSPs worldwide that understand that this is no longer a "nice to have", but rather becoming a "must provide". And with this growing understanding, so grows our pipeline of security as a service deals. This is evidenced in the deals we signed and those we are working on. Recently, we announced several security as a service deals. 2 contracts with CSPs in APAC, 1 contract with a CSP in Europe and another contract with a Tier 1 European group with operating entities in Europe and North America. In addition, we have recently been selected by several CSPs in APAC and Europe, with whom we are currently negotiating the contracts. In North America, as I previously discussed, the market change in the past 18 months is very clear. Multiple North American CSPs are considering launching network-based security as a service to their consumer and SMB customer base. They are in discussions with us as well as with others. We see North America as an opportunity and a focus area for Allot. As we previously announced, we intend to sign a security as a service agreement with DISH to protect their mobile and fixed customers on the new 5G network DISH is building. While we cannot be sure that any of the discussions, selections and awards I mentioned will indeed result in contracts, I am optimistic. I believe the contracts we signed and the awards we got are strong testaments to the positive change in the market and to a lot strong position in the network-based security market. I would like to remind everyone of the Allot business model in a typical security as a service deal. When we sign such a deal with an operator, Allot takes upon itself to provide all the required hardware, software and professional services to enable the service. We further assume responsibility for the support and maintenance of what we provided and provide significant marketing support to the operator's marketing team. In return, we ask for a share of the monthly revenue generated by the service or a monthly fixed subscription fee. Operators worldwide can typically charge for network-based security services anywhere from 5% to 8% of the consumer's ARPU and much higher rate for the SMBs ARPU, which can reach even 20%. Allot will typically get anywhere from 20% to 50% of what the operator can charge to consumers or SMBs, depending on various factors. This is the preferred business model that most, but not all operators worldwide accept. While each of the CSPs have decide to work with us, may be interested in different parts of Allot Secure product family, we are seeing strong demand for all elements of the Allot Secure enforcement abilities. NetworkSecure in the core network, HomeSecure in the home router, BusinessSecure in the SMB router, DNS Secure and also EndpointSecure. Our ability to provide such a wide variety of security enforcement capabilities together with a unifying management layer of Allot Secure Management or ASM are important differentiators and key to winning many of these CSPS. I am not familiar with other technology companies that provide such a broad, unified experience across access means, devices and threats. While Allot has different competitors coming from different disciplines for each of its product lines, Allot is the only company that offers a comprehensive solution addressing such a broad range of consumer needs with a single unified management platform and with integrated policies. I would like to say a few words about the penetration levels we are seeing with those security as a service offerings that we have already launched. In CSPs that launched the service, we continue to see growth in number of consumers and SMBs that sign up for the service. CSPs that accept security as part of their core offering and offer the service in multiple touch points show high penetration levels even when customers sign up for the service separately. For example, in one of the operators when offered in a store, we are seeing around 80% of new customers signing up for the connectivity service, also signing up for the security service. The lifetime value of customers who sign up for the service is also high. In one of the CSPs, we see that even 1.5 years after signing up with the service, approximately 65% of those who signed up for the service stay with it. This is, in my opinion, very strong evidence that the service is valued by the customers. However, CSPs that launch it as "just another value-added service" with limited sales channels and less aggressive go-to-market plans show lower penetration levels. Allot has set up what I think is a strong marketing support service, where we work together with the marketing departments of the CSPs to show them the value of offering the service in broader sales channels and the right go-to-market plans. As a result, we are seeing CSPs appreciate the experience other operators are having, and some are modifying their go-to-market approaches and significantly improving their results. The number of operators closing deals and planning to launch is growing. COVID, especially with new restrictions imposed with the current outbreak of the Delta variant is causing delays in launches and various marketing activities. While we are very encouraged by the penetration levels of operators who launch the service, these delays have a short-term impact on our revenues. In addition, we are finding operators who decide to launch the security service with several months of free service, despite our view that 1 month of free service would result in very similar take-up rates. The combination of the delay in launches and prolonged free services have contributed to somewhat reduce the initial recurring revenues for us expected during 2021. We expect our recurring security services in 2021 to be around $5 million. When we look at our recurring security revenue growth plan, we see our revenues growing in 3 dimensions: one, signing up and launching cybersecurity services with additional CSPs; two, in a CSP that launched the service, having more end users sign up for this security service; and three, CSP is expanding the security offering to the market from an initial market segment such as mobile, to additional segments such as the home or off net protection or the SMB market. I believe this threefold growth opportunity is what can make our recurring security revenues grow very rapidly. Looking at the existing CSP services growth, as we see it now, the new CSP launches from existing contracts and the expected launches from deals we were awarded recently, we remain confident that in 2022, our recurring security revenues will be around $25 million. I would like to turn our attention now to 5G networks and our opportunities there. Securing internet access actually consists of 2 aspects: the first, that I described till now, is securing the end user access to the internet. But in addition, we also need to secure the operator's network itself, mainly the user plane from DDoS or BOT attacks. As I discussed in previous calls, Allot has a unique position to play in securing the user claim in 5G networks. Our combination of being able to analyze in real time, the full traffic flow, ability to mitigate DDoSs attacks in line very quickly and protect the network from rogue IoT devices, puts us in a unique position to help operators secure their 5G networks. Allot comes to the 5G world with a very strong telco-grade technology, products that scale easily to the 5G bandwidth requirements and full multi-tenancy support to enable differentiated services. These abilities are key differentiators for our 5G NetProtect product and future 5G deployments. Working with an operator to protect the growth of the network itself and the access by its customers is a powerful combination. This is what we are planning to do, for example, in the DISH network. Earlier this year, we announced that we signed a contract with the U.S. operator, DISH, to use Allot 5G NetProtect to help secure the user plane of the 5G networks they are building. The DISH design of a 5G cloud-native network is the most advanced we are familiar with. I view vicious selection of Allot technology to help protect their network as testimony to our technology and implementation capability, which will serve as a great reference for other operators, especially in the North American market. During the second quarter, we announced that we closed another 5G NetProtect deal with a Tier 1 CSP in APAC. I can share with you today that we have been awarded yet another Tier 1 5G network, and we are currently negotiating that contract. I believe the growth of 5G networks worldwide and the need for securing the network itself could become another powerful growth engine for Allot. To summarize, I believe the market for cybersecurity services by CSPs to consumers and SMB is taking off, and our pipeline is stronger than ever. I believe Allot is uniquely and very well positioned to take advantage of this and grow significantly. New deals with CSPs still take time, usually between 12 and 18 months and with COVID, some even take 24 months. One sign, it usually takes 9 to 12 months to launch the service and start gradually building a revenue base. Ongoing COVID-19 impact may cause further delays of several months launching the services after the deal is signed. Factoring all this, as I explained earlier, we expect recurring security revenues from security deals in 2022 to be around $25 million and to keep accelerated growth year after -- year-over-year after that. We also expect that in 2021, we will sign new recurring security revenue deals totaling at least $180 million of MAR. Finally, I would like to turn now to discuss our visibility and control business addressed by our Allot Smart product line. Revenue from this business is continuing to grow well for us in 2021. The main use cases we see today in CSPs are in traffic management, congestion management, quality of user experience, especially for video, policy and charging control and digital enforcement. During the first half of 2021, we were awarded several deals with operators requiring traffic management or visibility. In some of these deals, we will be replacing a direct competitor's product that is installed or we are being added to the network where the CSP had until now used our competitor's product exclusively. We are discussing multiple other opportunities with other CSPs currently using our competitor's product and are working on expanding such deals that we won last year. As governments look to fight crime and terrorism, we see a growing interest globally to be able to block illegal activities such as drug trafficking, trial pornography or terrorism. We are seeing growing interests in our products in this area as well. Our enterprise business is continuing to grow. During the first half of 2021, our enterprise revenues grew about 70% compared to the first half of 2020. The deal we signed in the beginning of 2020 with Broadcom to position Allot as the replacement for their Packeteer product, which is at End of Life, is contributing a significant portion of this growth. We are signing new distributors for our enterprise products in multiple countries, including North America and Japan. One example is a deal we announced with the North American government agency, which was broadcast by a distributor who previously worked with Broadcom. We expect continued double-digit growth of the enterprise business in the remainder of this year and probably in 2022 as well. To summarize, I believe demand for Allot Smart product line, including congestion management, traffic management, analytics, digital enforcement and enterprise use cases will remain healthy with single-digit growth for Allot in the years ahead. I would now like to summarize the overall picture and the key messages. We are proceeding according to our plan and continuing to grow the business. In the Allot Smart product line, we see a strong pipeline. Multiple use cases such as congestion management, digital enforcement and the enterprise business are growing. Overall, we see a solid demand for Allot Smart. The security area is where we see our long-term growth. We are very encouraged by the pipeline growth we see and by the consumer and SMB take-up rates as they sign up for the service. We signed significant deals for our various products. While these deals always take time to close, COVID-19 pushed the close of several deals a bit more. It is also postponing services commercial launch in some of the deals that we already signed. Overall, the number of operators we are closing deals with is growing worldwide, and our pipeline of potential future deals is growing as well. Looking at our backlog, the market demand as we see it now and the pipeline of deals that we are working on, I would like to reiterate our revenue guidance for 2021 between $145 million to $150 million, which includes about $5 million of recurring security revenues. We further expect to sign additional recurring security revenue deals in 2021 with a total MAR exceeding $180 million. And now I would like to open the call for questions and answers, and Ziv and myself will be available to take your questions. Operator?