Joe Head
Analyst · Walter Schenker. Your line is open
Thanks Ward. For some time now, Ward and I’ve been reporting that we were optimistic about our prospects. So as you just heard in 2018, we booked $900,000 in Q1, $2 million in Q2, $6.3 million in Q3, and $5.2 million in Q4. So our base level of business has moved up a step based on several large – new large projects. The driver for this new business is entirely based on our customers being pleased with our performance over many projects over the past years. One of our customers noted that our record of delivering on hard challenges made them want to stretch us with some larger projects, so we can add staff and be capable to engage on even larger projects. There are other many large contractors, but they don't always over perform and in fact they often underwhelmed on their work. And our customers want some options beyond their current stable of integrators and the solutions providers. In the third quarter, we booked 6.3 million of which 5.5 million was a single order from a new – for a new project. And then in Q4, we booked an additional $5.2 million which was mostly renewals. I'm glad to report that the one customer we were eyeing as a possible loss as another loss of customer in future ongoing business has issued a renewal covering the next five years. And so we expect this long-term customer continue for quite a while. The first 10 months renewal is included in the November bookings at $100,000 a month. We also booked a new Savant customer in Q4 in addition to a renewal of another Savant customer. Both of these are small. In total there's 350k. But as I've mentioned with the base business now, I feel profitable level. We’ve been able to shift a little bit of our intention to other business areas with growth potential. Large majority of these orders are for 12 months of business at a time. So the big uptake and uptick in new orders in Q3 and Q4 won't be up for renewal until Q3 and Q4 of 2019. So as usual, our new orders for the first half of 2019 is expected to be down quite a bit from these year end highs and bookings with the increased revenue we’ll ensure our profitability for 2019 as we continue the deliveries for these new orders. We were working to book new business to start working on a number of areas in the coming months. As a company, we have a number of datasets in our TraceCop family, which we use all the time and our analytic efforts to meet customer needs, but this represents part of the pipeline a fuel for new projects as well. In TraceCop, we have one dataset. We licensed for $1.2 million a year, and it represents a case where our customer's analysts make use of the data directly. And my pipeline is one new customer, who is a prospect for another $1.2 million a year TraceCop subscription. Like all prospects, this one might not turn into a new order, but this one is relatively – is a relatively new opportunity from a new customer, whom I've been working with for a little over a year. We find that developing new large datasets takes a few years to grow from initial efforts into world-class. During that time, we use the newer developmental datasets internally and weekly reports that customer – and weekly reports that answer customer questions and security challenges. But after a while, these new datasets grow and represent new subscription fees that we can sell on their own. In the $5.5 million order, I just mentioned, we have $600,000 license for analytic research using one of our newer data sets that we've been building for approximately seven years. If a customer wants to license this feed for regular use, the dataset will license for about 1.8 million a year per customer. At Intrusion, we collate some rather large datasets, of which this is one of the largest yet. We have been adding about $1 billion records a day into this dataset for seven years and have over 2 trillion rows added to this one dataset to-date. This one represents one of the largest commercial IP security databases in the world and this allows Intrusion to address a wide variety of concerns and challenges. Some of our datasets aimed to understand, who is infected by what, but other datasets are used to understand the context of observed communications at one of our customers. For example, what is it mean when our customer observes communications from inside their network to one of the 1.5 billion live hosts on the internet this month. To be complete, these 1.5 billion host names are parked on just 899 million servers, so there is more host names than that our servers, so some have a shared arrangement. So some of our databases specialized and what it means when you talk to a certain server. If that server serves up malware for a Nation State Actor, the simple visit likely means you have a compromised computer. If a server has almost no content, and you have computers talking to it all the time, it’s like a command and control node for a compromise that you have. So this fact shades light on what the advisory is up to on your network. So for every communication we see at a customer, we set out to answer many questions like why would you visit this server, what languages it in, where is it, who owns it, what content or topic is this data and is our customers' traffic showing signs of something risky by communicating with it, et cetera, so one of our latest new datasets for TraceCop is a survey of the Internet for topic. We know who owns every server and where it's located, but it's also nice to know what language or topic the sites visitors go there for. When we see a customer's machine going to a site that’s in a language they don't speak or read and it’s not – that’s not unexpected and you might click on an add that takes you to the Chinese or Russian language site. But that's not unusual unless you keep going back day after day after day. If so it's probably a site uses a relay for an exploited stealing your data, since the user doesn't speak that language. We have collections showing what the language and the topic for about 150 million websites, but we see about 250 million sites active this month. So one of our new efforts is to scrape every home page of every website in the world to discover new ones and record their language, and topics, et cetera. Security can be concerned with who wants to make a bomb, who sells drugs, or who wants to be a terrorist, but these are not usually that interesting or likely to be the case. Bad guys take over small sites and use them as relays for malicious command and control of compromised computers. So that have observed the security chief will dismiss the communications if there’s just some employee surfing a website. But one of Intrusion specialties is to discover compromise within the sea of normal. There's about 250 million www websites and there's about 1.5 billion total host on the internet, not counting users, that's just servers. So pinpointing [indiscernible] through otherwise innocent servers they have compromised it’s important to know. Sorry, we don't usually go down to this level of detail in our conference calls, but this is kind of where we live day-to-day. Security in the world is in a horrible state because people treat the problem superficially and look for a magic bullet. It takes huge data to discover and discern between normal and abnormal communications. In that specialty is one of the areas where we live and make some nice discoveries. Back to the main topic, discussing the nature of our new, larger orders there are a lot of companies who talked enough big data solutions, but their big datasets really aren't that big. Intrusion has some of the largest data sets around, as well as the track record of knowing how to apply that big data to a customer's security challenges. We're now starting to apply our knowledge in how to build, use and deploy our big data expertise at a higher level with the customers. Instead of just being a boutique firm with a more narrow focus, we're now working on solving larger customer challenge with custom engineering of systems which expand on our internal in house successes. As I mentioned earlier, many times the company has a desire to take this step and expanding their base, but for whatever reason can't or don't see that desire bear fruit. In our case a good customer pressed us to take these steps to stretch this, so that we could solve bigger challenges for them that's the $5.5 million order. So we're going to expand and we’re going to do that real successfully. By my count I'm working nine new prospects currently and expect that pipeline to grow by a few in the next few months. But count alone doesn't tell the story because of the mix of large and extra large prospects compared to small and medium ones. I'm not ignoring customers with small or medium size money presently, we’re working hard to ensure that our extra large opportunities, which I'm defining as 2.4 to 6 million a year get more attention, both the renewal of the current ones and also the pursuit of new opportunities that are larger than our historical order size. I'm also making presentations and writing whitepapers on a larger class, which I'll call giant. These won't happen in the next few months, but are worth spending some cycles on for the future. We'll make sure to keep our current customers happy as we always do intending to add new and even larger opportunities to our pipeline for next year. Ward?