Earnings Labs

Rapid7, Inc. (RPD)

Q4 2017 Earnings Call· Mon, Feb 12, 2018

$5.87

-1.92%

Key Takeaways · AI generated
AI summary not yet generated for this transcript. Generation in progress for older transcripts; check back soon, or browse the full transcript below.

Same-Day

+0.91%

1 Week

+5.66%

1 Month

+14.13%

vs S&P

+10.48%

Transcript

Operator

Operator

Thank you for standing by. Welcome to the Rapid7 Fourth Quarter and Full Year Conference Call. [Operator Instructions] As a reminder, this conference is being recorded, Monday, February 12, 2018. I would now like to turn the conference over to Jeff Bray. Please go ahead, sir.

Jeff Bray

Analyst

Thank you, operator, and good morning, everyone. We appreciate you joining us to discuss Rapid7's Q4 2017 financial and operating results in addition to our financial outlook for the first quarter and full fiscal year 2018. I'm Jeff Bray, VP of Investor Relations, and I'm here today with Corey Thomas, our President and CEO; and Jeff Kalowski, our CFO. We distributed our Q4 2017 earnings press release over the wire and is now posted on our website at investors.rapid7.com. We have also posted our updated company presentation and financial metrics file on our Investor Relations website. This call is being webcast and can be accessed at investors.rapid7.com. The webcast of this call will be archived and a telephone replay will be available on our website until February 19, 2018. We would like to bring the following to your attention. The date of this call is February 12, 2018. Our discussion today contains forward-looking statements about events and circumstances that have not yet occurred, including, without limitations, statements regarding our objectives for future operations and future financial and business performance. These forward-looking statements are based upon our current expectations and beliefs and on information currently available to us. Statements containing words such as anticipate, believe, continue, estimate, expect, intend, may, will and other similar statements are intended to identify such forward-looking statements. Actual outcomes and results may differ materially from the expectations contained in these statements due to a number of risks and uncertainties, including those contained in the risk factors section of our most recently quarterly report on Form 10-Q filed with the Securities and Exchange Commission and subsequent reports that we file with the Securities and Exchange Commission. The information provided on this conference call should be considered in light of such risks. Actual results and the timing of…

Corey Thomas

Analyst

Thanks, Jeff, and good morning, everyone. Thank you all for joining us today on our fourth quarter 2017 earnings call. Today, we are speaking to you from our Belfast office, where we are attending our annual global research and development team kickoff. Rapid7 finished a strong 2017 with a great fourth quarter. Our end markets are healthy and our SecOps portfolio is resonating with customers. Security and IT teams are finding that they have more suspicious events on their network than they could possibly investigate and more vulnerabilities that they can patch. And Rapid7 we can help provide the visibility, analytics and automation necessary to prioritize and accelerate remediation and reduce risk. In Q4, we delivered ARR growth of 36%, revenue growth of 28%, recurring revenue growth of 36% and calculated billings growth of 44%. For the full year 2017, we delivered revenue growth of 28%, recurring revenue growth of 33% and calculated billings growth of 31%. These strong results were driven across multiple regions and multiple products, and we are especially pleased with the progression of our subscription transition. 2017 was a transformative year for Rapid7 where years of hard work culminated in several significant events. We completed the migration of our products to our analytics and automation cloud and launched subscription solutions across our SecOps portfolio. InsightIDR was recognized as a visionary in the Gartner SIEM Magic Quadrant and has begun to significantly contribute to our financial results. We entered the security orchestration and automation market with acquisition of Komand. We exceeded $200 million in annual revenues, and we improved our annual operating loss and generated positive operating cash flow for the second year in a row. Also in December, we held our first Investor and Analyst Day. And this January, we completed a secondary offering, continuing the…

Jeffrey Kalowski

Analyst

Thanks, Corey. We're pleased with our strong performance in the fourth quarter with results that exceeded both our original guidance and our preliminary results announced on January 23. Total Q4 revenue was $57.7 million, an increase of 28% year-over-year. Product revenue was $34 million, increasing 38% year-over-year, driven by strong bookings in both VM and IDR with expanding recurring revenue. In addition, we had a onetime benefit from the impact of revenue previously deferred in 2017 that met the criteria for revenue recognition in the fourth quarter. Maintenance and support revenue was $12.5 million, increasing 20% as we saw an ongoing migration of perpetual customers to our cloud products, and our professional services revenue was $11.2 million, an increase of 13% year-over-year. We continue to have high visibility into our revenue forecast with 84% of our Q4 revenue having been on the balance sheet as of the first day of the quarter. And 70% of our Q4 revenue was subscription-based recurring revenue versus 66% in Q4 2016. And our recurring revenue grew 36% year-over-year. Value of our annualized recurring revenue increased to $164.9 million at year-end, a 36% increase year-over-year. You did see that about half of our new VM bookings during Q4 were InsightVM. And with the announcement of our shift to subscription-only for most of our customers, we expect that the majority of our product bookings going forward will be subscription-based. As a reminder, we define ARR as the annualized value of all recurring revenue-related contracts in place at the end of the quarter. During our transition from perpetual to SaaS, we believe this metric is the most relevant when evaluating the health of our business. Total deferred revenue grew 33% year-over-year to $224.5 million at the end of Q4. Calculated billings for the fourth quarter were $93.6…

Corey Thomas

Analyst

Thank you, Jeff. In closing, I'd like to reiterate that we are pleased with our strong results for Q4 and we look forward to an exciting 2018. I'd also like to thank our customers, employees and stockholders for their continued support of and commitment to Rapid7. With that, I'd like to turn the call over for Q&A.

Operator

Operator

Thank you. [Operator Instructions] Our first question comes from the line of Saket Kalia with Barclays Capital. Please proceed with your question.

Saket Kalia

Analyst

Hey, guys. Thanks for taking my questions here. How are you?

Corey Thomas

Analyst

Doing well. Thank you.

Saket Kalia

Analyst

Hey. Actually, Corey, maybe I'll start with you. You've mentioned during your prepared remarks shifting your on-premise products to subscription-only, I believe. Could you just give us a little bit more detail on that? I guess, the question is does that mean that we're going to be end-of-life-ing perpetual on all products in favor of SaaS? Just any more detail on that change would be helpful.

Corey Thomas

Analyst

Yes, absolutely. So the first thing is that in the second half of last year, we saw very positive uptake in InsightVM. And we saw customers really resonating with our subscription offering, and specifically InsightVM. One of the requests that our field had at the time to make things simpler and more aligned was to offer our on-premise solutions, primarily Nexpose, under a subscription model. And we think that will be very well received by customers all over the world. And that is how our sales teams are incentivized as well as that's sort of the way that we're actually selling all over the world. That said, there are limited markets and existing quotes where we will continue to offer perpetual licenses. But we expect that to be very, very limited in nature and [by exception only] [ph].

Saket Kalia

Analyst

Got it. That's really helpful. Maybe for my follow-up for you, Jeff Kalowski, understanding that ARR is the metric of focus kind of going forward. I think you just mentioned in your prepared remarks in the guidance section that billings could maybe be slightly up for '18. Just to fully kind of bake that, could you just remind us how you're sort of thinking about duration in 2018 versus '17?

Jeffrey Kalowski

Analyst

Yes, Saket, as we go through the transition in the first quarter, we would still probably have to honor quotes on a perpetual multiyear basis. But as the year progresses over time, that will diminish. So I would say that the first half, the contract lengths, they're not all going to go to 1 year. But they'll be higher in the first half and less in the second half. As we get through more of that transition, then they'll be closer to the 1-year mark. They're not going to be at the 24 month period that we've historically had under the perpetual model.

Saket Kalia

Analyst

Got it. That’s very helpful. Thanks, guys.

Corey Thomas

Analyst

Thank you.

Operator

Operator

Our next question comes from the line of Rob Owens with KeyBanc. Please proceed with your question.

Rob Owens

Analyst · KeyBanc. Please proceed with your question.

Yeah, good morning. And thank you for taking my question. Corey, on a high level, you're early in this transition, both in the pivot to SaaS as well as arguably selling the broader portfolio. So can you talk about the selling motion, kind of how you've re-tooled your sales force because the change over the last 6 month have been impressive, number one. And number two, maybe broader channel education and how you'll leverage the channel moving forward of kind of the new portfolio, if you will.

Corey Thomas

Analyst · KeyBanc. Please proceed with your question.

No, absolutely. And I'll take it in sort of phases. The first phase is really to acclimate both our sales team and our customers to our cloud-based subscription model. And that started in 2016, where we did two things. One, we introduced InsightIDR to great success and continued momentum. We also introduced Nexpose Now, which provide cloud-based capabilities for vulnerability management and was really a precursor to InsightVM, which we offered in Q2 of last year. As of the end of Q2 of last year, we had all of our technologies cloud-ready and under a subscription model. And our focus then was really enabling our sales team and also management of customers [product] [ph]. And I really emphasize that this was not one that we pushed. It was one that we heavily focused on looking to what customers' response was going to be. And what we found is that customers were highly, highly receptive to our cloud-based subscription offerings. And so as we entered this next phase, which is really to align the compensation model, we're doing that under the situations where our sales team has actually been actively selling and engaged in cloud-based subscription products for well over a year now, where our customers have actually voted with their feet, so to speak, and actually been buying and frankly enhancing their position with Rapid7. And so now we're aligning the compensation models around that. And we think that, that's a natural next step to what we've seen in the momentum so far. You actually nailed the next piece of the equation, Rob, is that now that customers are demonstrating that they want our cloud-based subscription offerings on SecOps. Now that we're selling multiple products under our SecOps platform and our sales alignment is there, it's really starting to really drive the alignment around the channel. And we're early stages there, but we have positive momentum from the channel.

Rob Owens

Analyst · KeyBanc. Please proceed with your question.

And it seems like customer acquisition was strong last year, adding about 800 customers roughly on a year-over-year basis. Are these competitive displacements? Are they greenfield opportunities? And as you're adding new customers, is it a VM-for-VM type of situation? Or are you selling them the broader portfolio?

Corey Thomas

Analyst · KeyBanc. Please proceed with your question.

Yes, that's a great question. So we're seeing a mix of net new customers that are new to the security or the SecOps and analytics ecosystem altogether. And we're also seeing customers upgrade. By and large, the way to think about the customers that are upgrading or displacing existing solutions, whether that's SIEM solutions or whether it's vulnerability solutions, it's ones that have been used in their existing technologies in relatively limited ways. And they have primarily been compliance-oriented and driven. If you think about the genesis and the focus of SecOps, it's about how to operationalize security. And so as people are thinking about operationalizing and scaling their security program, that's often a good trigger where people will consider an upgrade or a displacement. But that's because their requirements changed, not because the existing technology was failing under their old legacy requirements. It's just they actually introduced new requirements about how they operationalize security, and that where we find our partners and our sellers actually have a good opportunity going then to upgrade those customers.

Rob Owens

Analyst · KeyBanc. Please proceed with your question.

Great. Thank you very much.

Corey Thomas

Analyst · KeyBanc. Please proceed with your question.

Thank you, Rob.

Operator

Operator

Our next question comes from the line of Gregg Moskowitz with Cowen and Company. Please proceed with your question.

Gregg Moskowitz

Analyst · Cowen and Company. Please proceed with your question.

Okay, thank you very much and good morning guys. Getting back to the 44% billings growth this quarter, and I know billings, of course, will be far less relevant going forward, but it was an impressive growth rate, especially in the context of the increasing mix shift to cloud. But I'm wondering if there was any pull-forward of business that you saw this quarter.

Corey Thomas

Analyst · Cowen and Company. Please proceed with your question.

Yes, we didn't see any pull-forward. We spent a lot of time looking at not just the Q4 performance, which we were impressed with, but also what it held for our Q1 pipeline. And our Q1 pipeline continues to be healthy as indicated by both our annual and our Q1 guidance.

Operator

Operator

And the line disconnected. Our next question comes from the line of Michael Turits with Raymond James. Please proceed with your question.

Michael Turits

Analyst · Raymond James. Please proceed with your question.

Hey, guys. Quick one for you Jeff, I think, did you mention what that onetime deferred revenue benefit to revenue was in 4Q, how much that was?

Jeffrey Kalowski

Analyst · Raymond James. Please proceed with your question.

Yes. It has to do with some installations that we couldn't recognize revenue on certain contracts until the customers were installed. So again, these were bookings - this would have been revenue that would have been recognized earlier. But until they achieve that milestone, we couldn't. So we got that onetime benefit. With respect to how significant it was, we still would have exceeded the guidance without that.

Michael Turits

Analyst · Raymond James. Please proceed with your question.

Okay. But you didn't quantify it for us?

Jeffrey Kalowski

Analyst · Raymond James. Please proceed with your question.

No.

Michael Turits

Analyst · Raymond James. Please proceed with your question.

Okay. And then Corey, can you talk - this is, I think, a little bit of an extension of Rob Owens' question, but a little bit more about on go-to-market relative to InsightOps in particular. How are you doing in terms of cross-training sales to be able to sell something that's outside of security? I know SecOps is increasingly converging but still somewhat of a divergence. And have you found, in terms of who you're selling to and who the buyer is, how smoothly that's gone?

Corey Thomas

Analyst · Raymond James. Please proceed with your question.

Absolutely. So InsightOps continues to grow. It's sold by the same sales teams that sells InsightIDR. And so what we're finding out is similar to other people that are in this space is that customers are increasingly looking to have broader coverage over their environment with more capabilities. And so what we find is that because InsightIDR is a super set of InsightOps, frankly more customers are opting for the larger purchase that covers more of their environment and has more capabilities. And so even if customers that start off looking at InsightOps or might even make a small purchase, many of them quickly move on to start looking at the full capabilities of InsightIDR, which offers not just the search capability but also the User Behavior Analytics capabilities and also more robust functionality.

Michael Turits

Analyst · Raymond James. Please proceed with your question.

Okay. Last quick question. Did you quantify InsightIDR this quarter? I think you have in previous.

Jeffrey Kalowski

Analyst · Raymond James. Please proceed with your question.

Yes, it was - what we said in the past, Mike, was that it was over 20% of total bookings. It was again this quarter.

Corey Thomas

Analyst · Raymond James. Please proceed with your question.

Yes. And we'll provide updates on that as sort of the milestones change. But again, the growth has been healthy and continues to be healthy.

Michael Turits

Analyst · Raymond James. Please proceed with your question.

Perfect. Thanks very much.

Corey Thomas

Analyst · Raymond James. Please proceed with your question.

Thank you.

Operator

Operator

Our next question comes from the line of Matt Hedberg with RBC Capital Markets. Please proceed with your question.

Matt Hedberg

Analyst · RBC Capital Markets. Please proceed with your question.

Hey, guys. Good morning. Thanks for taking my questions. Maybe, Corey, for you from a high level, I'm curious how fast you're seeing ARR growth within InsightVM relative to market peers. And could we see your VM growth, I guess, relative to the overall market remain more durable, just kind of given some of the cross-selling success that you're seeing with other products like IDR?

Corey Thomas

Analyst · RBC Capital Markets. Please proceed with your question.

Yes. No, absolutely. We believe, and as we said on our Investor and Analyst Day, that we see great health in demand for InsightVM and vulnerability management overall. We believe that if you look at our ARR growth that we will continue to grow ahead of the market. And we see durability over there for a good time to come, and we think that there's a couple of key contributors to that. One is that people lack our SecOps vision to operationalize security. So looking at vulnerability management from the context of IT and how you operationalize the security of IT is something that's not just catching on, it's becoming a mainstream concept and idea. The second thing is that the ability that we have with our SecOps vision to establish relationships anywhere along the spectrum and then to expand later gives us great access to customers. So we do expect to actually continue to grow healthily there. We expect to continue to take share in the market. And we are seeing continued evidence of that.

Matt Hedberg

Analyst · RBC Capital Markets. Please proceed with your question.

That's great. And then I think in your prepared remarks, you called out InsightAppSec for a win. I'm wondering if you could give a little bit more details on that and who you guys typically see when customers are baking off of that product.

Corey Thomas

Analyst · RBC Capital Markets. Please proceed with your question.

Yes, this is a good example of where InsightAppSec historically has been a sale that we saw both as part of the MDLs [ph] and also standalone. We are increasingly seeing this as a great cross-sell opportunity within the portfolio. As companies think more comprehensively about their security posture, they are looking at not just at their infrastructure, but they're also looking about their customer applications that they are responsible for. And what we're starting to see is more and more customers looking at that as part of larger commitments to Rapid7, either in the initial purchase or in follow-on purchases over time. So we're fairly optimistic about the future of InsightAppSec, and in general, application security. Again, the key thing that we keep pointing back to is that our SecOps vision is really centered around bringing together IT operations security and developers together to actually figure out how to operationalize that security.

Matt Hedberg

Analyst · RBC Capital Markets. Please proceed with your question.

Thanks, guys.

Corey Thomas

Analyst · RBC Capital Markets. Please proceed with your question.

Thank you.

Operator

Operator

Our next question comes from the line of Jonathan Ho with William Blair. Please proceed with your question.

Jonathan Ho

Analyst · William Blair. Please proceed with your question.

Good morning. Just wanted to get a sense from you in terms of InsightIDR, with the over 100% growth, how should we be thinking about the sustainability of that growth rate for 2018?

Corey Thomas

Analyst · William Blair. Please proceed with your question.

So it's a good question. What I would say is that we're seeing strong continued demand. It is a large market of which we view ourselves as having still, with all of our success, a relatively small share today. And so if you think back to our Investor and Analyst Day, we said that, that market could actually grow over 50% in ARR for the next several years. And we continue to believe that, that growth is durable and sustainable.

Jonathan Ho

Analyst · William Blair. Please proceed with your question.

Got it. And then just as a follow-up, given the 60% cross-sell opportunity that you referenced on billings, could you maybe give us a sense of what products you most often saw on the cross-sell side and how you think about that trend over time?

Corey Thomas

Analyst · William Blair. Please proceed with your question.

Yes, if you just think about from our prior descriptions about sort of our -- sort of like top-selling products in terms of growth, we, of course, have vulnerability management. So InsightVM is clearly a strong focus there. InsightIDR is clearly a strong focus. So if you think about those being the lead two products that you see lots of demand, I would say followed by InsightAppSec there, and then you have our other products that are newer in orientation but are further down, including Metasploit, which we've had for a while now, InsightOps and a number of other products. But that's kind of how we think about it. It's heavily weighted towards the InsightVM and the InsightIDR. And then we actually are able to land and expand in either direction.

Jonathan Ho

Analyst · William Blair. Please proceed with your question.

Great. Thank you.

Corey Thomas

Analyst · William Blair. Please proceed with your question.

Thank you.

Operator

Operator

Our next question comes from the line of Anne Meisner with Susquehanna Financial Group. Please proceed with your question.

Anne Meisner

Analyst · Susquehanna Financial Group. Please proceed with your question.

Thank you very much. Corey, as you continue to transition towards analytics and SecOps, maybe you can just talk about what the competitive environment looks like now, so who you're seeing competitively that you didn't see when you were more focused on vulnerability management.

Corey Thomas

Analyst · Susquehanna Financial Group. Please proceed with your question.

Yes. No, it's a great question. So we continue to see the market as one where the SecOps competitors are still selling individuals. So our primary competitor is our customers that have to hobble together 3 or 4 solutions to deliver the SecOps provision that we deliver integrated, comprehensive experience around. And what we're finding is that it's increasingly becoming a competitive advantage for us. There's no company at scale that we're aware of out there that has the comprehensiveness of our SecOps vision that actually brings together all the key critical pieces of SecOps together under one integrated platform and under one integrated user experience. And as customers look to solve this problem, we think that, that will continue to be a net benefit to us.

Anne Meisner

Analyst · Susquehanna Financial Group. Please proceed with your question.

Okay, great. And then a quick one for Jeff. Jeff, maybe you could elaborate on what the we should expect to see with respect to the operating margin trajectory as you get closer to the 2020 target. It looks like you expect to see a lot more progress in '19 relative to '18. And I assume that will come from a combination of improvements on both the gross margin line as well as just more efficiency with respect to OpEx. Maybe if you can just kind of elaborate there on the operating model transition as you approach these longer-term targets.

Jeffrey Kalowski

Analyst · Susquehanna Financial Group. Please proceed with your question.

Yes. So what we said in '18 is that we'll see some leverage in sales and marketing and G&A, and R&D will stay pretty much in the low 20% range. But the big driver of the leverage in '19 and through 2020 is really the transition to subscription or our SaaS transition. So we're going to get a lot of leverage off lowering our cost of sales with those renewals coming in. And as we said on Analyst Day, our projected margin in 2020 was 4% to 7%, I believe. So the big driver of that will be the conversion to SaaS.

Anne Meisner

Analyst · Susquehanna Financial Group. Please proceed with your question.

Thank you. That's very helpful.

Jeffrey Kalowski

Analyst · Susquehanna Financial Group. Please proceed with your question.

Yes. And just - we still maintain that gross margins will be in the low to mid-70s. So there's no change there.

Anne Meisner

Analyst · Susquehanna Financial Group. Please proceed with your question.

Okay, great. Thanks.

Operator

Operator

Our next question comes from the line of Alex Henderson with Needham & Company. Please proceed with your question.

Alex Henderson

Analyst · Needham & Company. Please proceed with your question.

Thanks very much. So given the broad shift away from perimeter defense towards things like vulnerability management or OPSEC, are you seeing a change in the deal sizes and the scale of your transactions or any change in the time that you closed the process length of transactions? Could you talk a little bit about the sort of the tone of the pipeline? I know you said it was healthy, but a little bit more granularity would be helpful.

Corey Thomas

Analyst · Needham & Company. Please proceed with your question.

Yes, we're not seeing any significant changes in deal cycle. We've always said that it's a wide set of deviation. You have some deals that close fairly quickly, and then some that takes sort of several quarters to actually close. But we're not seeing any significant deviations there. We are seeing larger deal sizes. And that's across segments, so that's not a shift from sort of mid-market to enterprise. That's been relatively consistent. We're seeing customers make larger commitments to Rapid7 to actually get more visibility and operationalization of their overall environment. And so that is the change that aligns with the comments that you made about customers really looking to shift their investment focus.

Alex Henderson

Analyst · Needham & Company. Please proceed with your question.

One other question if I could. So the international business was a little bit difficult for us to look through because of the year-over-year comp. Obviously, you've got a large opportunity over there. Can you give us any more granularity on when you expect that to reassert itself as the faster growth piece of your business? Is it in the first quarter? Or will the change in the reporting architecture impact that timeline?

Corey Thomas

Analyst · Needham & Company. Please proceed with your question.

Yes, I'll talk to the high levels about just the business overall. So international continue to grow and perform well. We saw healthy growth in international last year, especially in EMEA. More broadly, we expect the international to continue to grow faster than the overall business. And that looks like that's continuing on pace for 2018. As far as the impact of 606 or some of the mild changes, Jeff can talk to that.

Jeffrey Kalowski

Analyst · Needham & Company. Please proceed with your question.

Yes, Alex, I think what you're referring to is we had a tough comp related to the large services deal. But the bookings are growing faster internationally than in the U.S. So we would expect that the revenue to follow soon. They would go hand-in-hand.

Alex Henderson

Analyst · Needham & Company. Please proceed with your question.

One last question if I could, just a simple quick one. So just to be clear, you only talked about year-over-year customer adds. I assume that your customers were up 3Q to 4Q. Is that -- can you confirm that, that's true?

Jeffrey Kalowski

Analyst · Needham & Company. Please proceed with your question.

Yes, that is true.

Alex Henderson

Analyst · Needham & Company. Please proceed with your question.

Perfect. Thanks.

Operator

Operator

Our next question comes from the line of Melissa Franchi with Morgan Stanley. Please proceed with your question.

Melissa Franchi

Analyst · Morgan Stanley. Please proceed with your question.

Thank you. And good morning. Corey, I'm just wondering if you can maybe talk about your traction moving into the enterprise space relative to maybe more of the mid-market. And are you seeing your customers that are coming on, any of the new customers that are adopting Insights, do they have different characteristics in terms of maybe size or verticals than what you've seen historically?

Corey Thomas

Analyst · Morgan Stanley. Please proceed with your question.

Yes, we continue to actually make very good traction in the enterprise market. Our goal and our aspiration is to be a broad-based platform that can be used by mid-markets as well as the Fortune 10. And we have our customer base that actually spans that entire segment and that trajectory. What we saw last year specifically was sort of two dynamics. One, the mid-market and mid-sized enterprises continued to be healthy. Last year, we did see sort of like the strength come back in the enterprise segment overall. And that's something that we feel good about. As far as the demand characteristics, it's not outside of the expected. We've had enterprise customers for a long time. And we deliver the scale and manageability that they need. And we find it easier and easier for us to actually compete in those enterprise deals. The one thing I would actually clarify though is our focus continues to be on the -- as we think about the enterprise that actually demands productivity -- and some people call that the resource-constrained enterprise, but we really think about it as enterprise organizations that are really looking for the most bang for buck. And so we can do quite well in specific markets within financial services like insurance. We can do quite well in health care. We can do quite well in the energy sector. We can do quite well in retail, and so -- I mean, we even do quite well in the technology sector, which is one of our strong verticals there. And so we tend to be very focused about how we actually participate in the enterprise segment. What we don't focus on is people that are looking for us just to be a hyper customized technology solution. And so you see us focus less in things like the traditional Wall Street banking sector. But the other segments of the enterprise that are really concerned about how they operationalize their security efficiently and effectively at the most bang for buck, we're doing quite well in those segments.

Melissa Franchi

Analyst · Morgan Stanley. Please proceed with your question.

Okay, that's helpful. And then if you don't mind, I'd like to follow up on the security consulting business. The revenue growth is a little bit slower than the overall revenue growth. And so I'm just wondering if you could comment on what kind of capacity you have in that business, excess capacity with the security consultants. And then at the higher level, how strategic is this business to your overall top line growth? Is it a meaningful kind of channel or driver for the other parts of your business?

Corey Thomas

Analyst · Morgan Stanley. Please proceed with your question.

So to answer your last question first, it's not strategic from top line growth. In fact, we're doing so well on the product sales front that we actually have the leeway to really make our services about being strategic to our customers and our customer relationship, which is the primary focus on it. And we're afforded that because our products have such healthy demand there. So what we decided that our focus for our services organization was going to be is about really how to help our customers assess and develop and mature their security programs and their security offerings. And that's where we're putting our talent and our investment to work there. We think that, that creates stickier, healthier customer relationships over time. So the strategic focus is really about our customer relationships, not about revenue.

Melissa Franchi

Analyst · Morgan Stanley. Please proceed with your question.

Got it. Thank you.

Corey Thomas

Analyst · Morgan Stanley. Please proceed with your question.

Thank you very much.

Operator

Operator

Our next question comes from the line of Sarah Hindlian with Macquarie. Please proceed with your question.

Fred Havemeyer

Analyst · Macquarie. Please proceed with your question.

Hi, good morning. This is Fred Havemeyer on for Sarah Hindlian. So I wanted to focus again on international, where you're reporting that bookings growth was ahead of the overall company, and digging to what you expect as we're approaching the May 2018 deadline for GDPR. So how are you seeing GDPR as a driver in your pipeline? And where would you say you stand with the overall opportunity around this new regulatory environment?

Corey Thomas

Analyst · Macquarie. Please proceed with your question.

Yes, absolutely. Well, clearly last year, we actually had healthy and good performance in EMEA. And so that indicates that we're starting to see some strength in demand there. How much of it is attributed to GDPR is hard to tell. But we see very healthy EMEA and we expect EMEA to be healthy again in 2018. What I would say is most of the opportunity, I believe, is in front of us. I've had lots of time to spend time both here and other places looking at compliance. And typically, you have what I think of as the lawyer and the consultant wave before the product wave fully kicks in. And it's clear that there's lots of assessments being done there. We expect that the product purchases to follow the assessments that are being done there. So we do expect to see some positive impact this year. But we still think we have several years of benefit ahead of us.

Fred Havemeyer

Analyst · Macquarie. Please proceed with your question.

And then a follow-up question for Jeff. Under ASC 606 adoption -- and we realize it's early phases of this right now. But do you expect or anticipate any impact to deferred revenues? And if so, have you made any early estimates for this going forward? Thank you.

Jeffrey Kalowski

Analyst · Macquarie. Please proceed with your question.

No. The deferred revenue change as of the end of December 2017, it's about the same. What we pick up by putting back some of the revenues previously recognized is offset by the services that we lose. So the gross amount or the net amount as of the end of the year won't change very much. And we'll report that -- when we report our first quarter's results, you'll see that.

Operator

Operator

Our next question comes from the line of Michael Romanelli with Cowen and Company. Please proceed with your question.

Gregg Moskowitz

Analyst · Cowen and Company. Please proceed with your question.

Hi, guys. It's Gregg Moskowitz again. And apologies, I got disconnected earlier. But just a couple of follow-ups if I could. And first, for Jeff, you reiterated that total gross margins will remain in the low to mid-70s going forward. But your product gross margins have been steadily declining due, of course, to the transition to SaaS. So as it relates to product gross margin specifically, Jeff, does that mean we're nearing the point of stabilization? And how are you looking at that?

Jeffrey Kalowski

Analyst · Cowen and Company. Please proceed with your question.

Yes, what we've done is we are putting in some efficiencies with scale. And we expect to realize that as the year progresses. So I think your question is are we at the low point of the product gross margins? I would say that we are estimating that we pretty much are. So we don't expect that to degrade much more going forward.

Gregg Moskowitz

Analyst · Cowen and Company. Please proceed with your question.

Okay, very helpful. Then just for Corey, curious if you had an update on the Worldwide Head of Sales position. Thanks.

Corey Thomas

Analyst · Cowen and Company. Please proceed with your question.

Yes. No, we are continuing -- so our Andrew, our COO, continues to actually make progress in building up the sales org. He has a strong bench under him. We made several key hires. And we'll talk sort of subsequently about sort of what we're doing around the organization. But what I'll say is productivity is doing quite well. The team is performing quite well. And his build-out strategy that we actually started talking about last year is ahead of plan from our perspective. And we'll talk more about the organization later. But I would say we are ahead of where we want to be.

Gregg Moskowitz

Analyst · Cowen and Company. Please proceed with your question.

All right. Terrific. Thanks very much, guys.

Corey Thomas

Analyst · Cowen and Company. Please proceed with your question.

Thank you.

Operator

Operator

Mr. Thomas, there are no further questions at this time. I will turn the call back to you. Please continue with your presentation or closing remarks.

Corey Thomas

Analyst

Thank you all for joining us this morning. We appreciate your time and effort. And we look forward to chatting with you on the next call. Thank you, and have a wonderful day.

Operator

Operator

Ladies and gentlemen, that does conclude the conference call for today. We thank you for your participation, and ask that you please disconnect your line.