Roy Zisapel
Analyst · Jefferies
Thank you, Yisca, and thank you all for joining us today. We ended the second quarter of 2023 with revenues of $65.6 million and non-GAAP earnings per share of $0.10. Total ARR growth accelerated to [Technical Difficulty] was $208 million compared to a 5% growth recorded in the first quarter of 2023. Our cloud security business had another strong quarter. Cloud ARR growth accelerated to 23%, reaching $59 million at the end of the second quarter. This strong cloud performance was reflected across multiple metrics, including cloud bookings, new logos and the total number of cloud customers, which all grew double digits.
The growing cloud business and the growth in our product subscriptions are gradually forming a sustainable and durable SaaS business model. This progress is reflected in the steady growth in recurring revenue which increased by 7% in the quarter and now accounts for 79% of total revenues as compared to 65% in the second quarter of last year.
While the cloud security business produced strong results in the second quarter, the appliance -- encounter strong headwinds, which we believe is a temporary pullback. The spending patterns of large customers have impacted CapEx purchases. Over the last few weeks of the second quarter, we witnessed increased delays in closing large on-prem deals globally, primarily among large enterprises and carriers. To the best of our knowledge, we have not lost [Technical Difficulty] for environment and [Technical Difficulty] we have to be prudent in [Technical Difficulty] expenses. To that end, we have proactively taken steps to optimize and align our costs and maintain stronger profitability.
We reduced sales and marketing expenses and reallocated spend towards growth markets in our cloud delivery and go-to-market efforts. Guy will elaborate more on this in his remarks.
While large [Technical Difficulty] service providers consider their investments more carefully, strengthening cyber defenses remain a business priority. Organizations around the world are experiencing a dramatic increase [Technical Difficulty] and sophistication of cyber-attacks. In the first half of 2023, we are observing a significant shift in the DDoS market pattern. Increasingly, DDoS -- incorporating a mix of Layer 3, 4 and Layer 7 attack vectors. The Layer 7 DDoS or Web DDoS attacks are not about sheer capacity of traffic. Rather, they are encrypted, high-volume requests per second that evade standard web application firewalls and network-based DDoS tools.
The attacks hit many large enterprises across different countries and industries [Technical Difficulty] services, airports and health care organizations. Microsoft, which was among the affected organizations, disclosed multiple waves of Layer 7 attacks that cost outages in services like Azure, Outlook and OneDrive.
To mitigate these Web DDoS attacks, we introduced our new Cloud Web DDoS Protection Service. The Web DDoS service is based on 2 years of AI algorithms and has uniquely positioned us to combat this emerging generation of aggressive Layer 7 attacks, which are leaving companies vulnerable. Our behavioral-based solution [Technical Difficulty] the attack [Technical Difficulty] by 2 orders of magnitude higher than any on-prem solution. And unlike any other solution in the market, it surgically block [Technical Difficulty] outblocking legitimate traffic.
With the fast training of [Technical Difficulty] and excellent proven results in dozens of customers [Technical Difficulty] market differentiator that will set the ground for future DDoS cloud and appliance growth for our business.
In the second quarter, we are [Technical Difficulty] to our Bot Manager, which are part of the 360-degree cloud application protection. The advanced solution prevents Bot from bypassing, additional security controls, to gain unlawful access to native Android and iOS mobile applications. It offers first-to-market integrated authentication for both iOS and Android devices and new identity algorithms, allowing organizations to defend themselves against bot attacks with the highest accuracy and performance.
Our investment in cloud innovation continues to pay off. I would like to share with you a few examples of the deals that demonstrate the critical value we bring to our customers and contributed to our cloud ARR growth in the second quarter. We closed the deal with one of the largest transportation hubs in North America. This customer didn't have active DDoS protection for its data centers. Instead, it was using a public cloud solution. While we were engaging with the customer, it was hit with the wave of DDoS attacks that were targeted in the region. When the cloud provides [Technical Difficulty] the customer recovered under our emergency [Technical Difficulty] this enabled us to showcase our capabilities in real time and win the business.
We also closed an important cloud DDoS deal with a large Tier 1 carrier and managed security service provider in Asia Pacific. Recent [Technical Difficulty] business and government organizations impacted the provider's ability to protect some of its customers properly and expose the weakness in the incumbent solution ability to mitigate this new wave of attacks.
Our leaders in DDoS mitigation and proven expertise in these verticals position us as the go-to vendor to replace the incumbent and pave the way strategic seller partnership agreement.
Going forward, we intend to continue [Technical Difficulty] cloud security strategy in our SaaS business model, which is an even more resilient and durable business model. Together with continuous improvement in our go-to-market, our expectation for recovery in the on-prem purchases, we trust we can strengthen our company performance. We are confident in our leadership position in our technology and products, and we have significant advantages in mitigating real-time cyber-attacks for large enterprises and materials. We have a superb customer base, and we are becoming more and more critical to our customers' operations. All these assets position us very well to achieve our long-term targets.
With that, I will now turn the call over to Guy.