Tenable Holdings, Inc. (TENB) Q3 2021 Earnings Report, Transcript and Summary

Welcome to the Tenable 3Q 2021 Earnings Conference Call. At this time, all participants are in a listen-only mode. A question-and-answer session will follow the formal presentation. [Operator Instructions] Please note this conference is being recorded. I will now turn the conference over to your host Erin Karney, Senior Director of Investor Relations. Thank you. You may begin.

Thank you, operator, and thank you all for joining us on today's conference call to discuss Tenable's third quarter 2021 financial results. With me on the call today are Amit Yoran, Tenable's Chief Executive Officer; and Steve Vintz, Chief Financial Officer. Prior to this call, we issued a press release announcing our financial results for the quarter. You can find the press release on the IR website at tenable.com. Before we begin, let me remind you that we will be making forward-looking statements during the course of this call, including statements relating to Tenable's guidance and expectations for the fourth quarter and full year 2021, growth and drivers in Tenable's business, changes in the threat landscape in the security industry and our competitive position in the market, growth in our customer demand for and adoption of our solutions, the potential benefits of our acquisition including our recent acquisition of Accurics, planned innovation and new products and services, Tenable's expectations regarding long-term profitability and the impact of COVID-19 on our business and on the global economy. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our management's beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. We disclaim any obligation to update any forward-looking statements or outlook. For further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent quarterly report on Form 10-Q and subsequent reports that we file with the SEC, which are available on the SEC website at sec.gov. In addition, during today's call, we will discuss non-GAAP financial measures. These non-GAAP financial measures are in addition to and not a substitute for or superior to, measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalents. Our earnings release that we issued today includes GAAP to non-GAAP reconciliations for these measures and is also available on the Investor Relations section of our website. I'll now turn the call over to Amit.

Thank you, Erin, and thank you all for joining us today. Today, I'll discuss our financial performance in Q3, our strong execution on our newer products, including OT, AD and cloud, and how our security solutions combined to create a differentiated platform and capabilities. With that let me first touch on our Q3 results. We are incredibly pleased with our performance in the third quarter. We delivered accelerated growth at scale highlighted by 25% CCB growth this quarter, which is up from the 23% CCB growth we reported last quarter. Our impressive results on the top-line are also accompanied by a sizeable beat in EPS and free cash flow. This growth is being driven by traction across all of our products during the quarter, validating our platform approach. That said there are a few areas of particular strength that are important to call out. In the third quarter, we saw a notable interest in traction with Tenable AD. Securing identities is quickly becoming one of the most critical initiatives with respect to zero trust customer implementations. Identities are also known areas of weakness and are highly targeted by ransomware. Customers have grappled with how to secure their Active Directory environment and Tenable AD is playing out exactly as we had hoped. It has opened the door to more opportunities for us. Tenable AD is a unique solution that combines a security audit of identities and ongoing attack detection in a lightweight platform. As mentioned, Tenable AD outperformed in its first quarter of availability. We believe the traction in the short-time since acquisition will continue as we see strong pipeline and great opportunity for Tenable in the identity market. We also saw customers increasing focus on securing their operational technologies. The convergence between OT and IT is accelerating and understanding these complex environments has become a priority given all the recent examples of converged high visibility, breaches and corresponding outages. Tenable's native OT capabilities work seamlessly with our deep understanding of IT creating dramatically differentiated results. Customer OT and IT systems are increasing interdependent resulting in expanded business opportunities to deploy our security solutions in a more programmatic fashion across their global facilities. While starting from a small base, Tenable IT is one of the fastest growing areas of our portfolio. A recent seven figure win and massive cross-sell with a forestry company helps validate these key investments. They've been using Tenable IC and IO and as we're looking to secure both their AD and OT environments, Tenable came the very obvious choice as a unified way of managing cyber risk. To further serve our customers, we're also expanding our AD and OT ecosystems. During the quarter, we announced a global strategic partnership with Splunk to secure Active Directory and converged OT environments. The clear takeaway is that we’re executing well on our strategic investments in AD and OT in an era where securing these technologies is of great importance and in high demand. We see tremendous traction with our existing cloud capabilities, and our acquisition of Accurics, augments and extend these capabilities in dramatic ways. Cloud usage has greatly accelerated and matured from a lift and shift virtualization of on-prem infrastructures to one that is cloud-native, where infrastructure are defined in code and deployed as needed. Infrastructure is code allows operations at cloud scale with just in time operational efficiency. The Accurics technology integrates into customers, public and private cloud deployments and integrates with their development and build pipelines. As code is checked in, it is assessed to assure that the infrastructure and systems defined comply with the organization’s security policies, compliance requirements and best practices. Laws are identified before cloud infrastructure and applications are deployed into production. Together Tenable and Accurics infrastructure is called platform cannot only identify these laws in advance, but can automatically remediate them before launching them into production. Once applications and systems are stood up at runtime, Tenable’s container security and frictionless assessment capabilities deliver market leading assessment of drift and security exposure. Accurics also provides CSP and functionality. Our capability to secure cloud environment spans the entire needs spectrum from the left into development, pre-production phase through to the right in run time and deployment and operational phase. We believe this is among the most holistic approaches to modern cloud security available in the market. Tenable continues to aggressively differentiate our core VM capabilities and we have also started bringing new products to market and some of the most exciting segments of the security space, risk analytics, OT, identity and cloud security. While these products are demonstrating their compelling value propositions, we’re most excited about our ability to integrate these technologies onto our unified platform. Doing so will deliver increasingly unique capabilities. We lead the market in our ability to deliver a unified understanding of converged IT, OT environments. We’re the only company, which can provide an understanding of AD security applications in OT environments. With the addition of Accurics, our infrastructure is code offering leaps to the leading edge of cloud-native capabilities. Integrating this shift left pre-deployment technology with our deep understanding of security at run time through containers, frictionless assessment and CSPM will allow Tenable to deliver a complete code to cloud experience to the market. One that I believe no other company matches. The strategic nature of our platform approach to our products should not be underestimated. It comes as no surprise that we continue to see strong demand for Tenable.ep our unified platform. EP combines Tenable.io, container, web application and Lumin into one platform, enabling customers to understand risk, prioritize actions and get the benchmarking they require so that they can focus on what’s really important. We identify key risks and automate the process for what to do about it. A great example of this is a six figure Nessus Pro upsell and competitive displacement. They purchased Tenable.ep to consolidate risk analytics for multiple programs into a common platform for holistic visibility and prioritization. We are seeing strong and we believe sustainable momentum and expanding use cases, as we bolster our platform of products and in the coming periods, we intend to create greater leverage and unique and differentiated capabilities by bringing these products closer together. Finally, before I turn the call over to Steve, I’m excited to invite all of you to a virtual Investor Day will be holding on December 15. We’ll be sending out more detailed information in the coming weeks and hope you can attend.

Thanks, Amit. As Amit mentioned earlier, we are delighted with our results for the third quarter, highlighted by accelerating top-line growth, due to strength and cloud, strong momentum from acquired products and a sizeable contribution from our public sector business. On the bottom line, we are very pleased with the substantial to EPS and the strong cash flow in the quarter. I will provide more commentary on each of these points momentarily, but first please note that all financial results we’ve discussed today are non-GAAP financial measures with the exception of revenue. As Erin mentioned at the start of this call GAAP to non-GAAP reconciliations may be found in our earnings release issued earlier today, which is posted on our website. Now, onto our results for the quarter. Revenue for the quarter was $138.7 million, which represents 23% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $4.7 million. Visibility remains high as our percent of recurring revenue is 95%, which is primarily a result of our annual prepaid subscription model. The outperformance and revenue as a result of accelerating growth in calculated current billings. CCB defines the change in current deferred revenue plus revenue recognized in the quarter grew 25% year-over-year to $166.9 million, which is up from the 23% growth we’ve reported last quarter and 20% growth we’re reported in Q1. Calculated current billings in the quarter was aided by strong demand in both new and renewal business. In terms of new business, we added 499 new enterprise platform customers, which is a record for us in any single quarter and up from the 335 we added in Q3 last year. We also had success with large deals as we added 62 net new six-figure customers in the quarter, which is up from 56 in the same period last year. We attribute this demand and the better than expected CCB growth to a number of factors, some of which Amit touched upon earlier, but certainly worthy of additional commentary. First, our cloud product such as Tenable.io and Tenable.ep continue to gain traction across both the large and mid-market. In aggregate, our cloud products now represent over 50% of total new sales and the growth rate for these products as a percentage of total sales is much higher than the overall growth rate of the company. As prospects and customers continue to move critical workloads to the cloud to support work from anywhere and other digital transformation initiatives. They're increasingly looking to Tenable to secure their host environments. Our recent acquisition of Accurics in October furthers our cloud capabilities and augments our existing strength and runtime environments by adding the ability to assess and secure critical cloud infrastructure prior to deployment into production. Second, our active directory and operational technology offerings are starting to make a difference and collectively contributed several points of growth in the quarter. These newly acquired products have expanded our addressable market by extending our exposure platform to assess new areas of the attack surface that have been exploited recently in highly publicized attacks. This traction is notable as these are newly acquired products with Alsid closing in April and sales of [indiscernible] OT offering commencing just last year during the pandemic. Given the compelling market opportunity for AD and OT and strong demand from a heightened threat environment, we've been able to build sizable pipe for these products throughout the year. While the conversion of pipeline for new products was not apparent the first half of the year, given limited history, we executed well in Q3, which contributed to the outperformance in the quarter and provides us with improved visibility headed into the fourth quarter. Finally, our public sector business is benefiting from a better spending environment, driven by executive orders and legislative proposals, which helped lift Q3 sales in this theater to 17% of our total company sales. Looking ahead, we remain very encouraged with the myriad of large funded and unfunded opportunities potentially available to us, including the impact of receiving FedRAMP certification to deliver our cloud products to U.S. federal government agencies. In summary, we're very pleased with the trend on the top-line this year, which is benefiting from new products and momentum in the cloud. We look forward to providing more insight on product momentum during our Investor Day in December. I'll now turn to expenses, which included incremental investments in growth, interest expense related to our recently completed debt raise and a full quarter of OpEx from the Alsid acquisition. I'll start with gross margin, which was 83% this quarter up a point from last quarter. I do want to know that even with our success in cloud and investments in our broader set of predictive analytics, our gross margin has held relatively steady due to the scalability of our architecture. We have managed this closely and have been very pleased with this trend. Looking ahead, we expect gross margin to remain at current levels in the fourth quarter, despite incremental cloud investments and the impact from the Accurics acquisition. Sales and marketing expense for the quarter was $60.7 million, which is up from $58.1 million last quarter. Sales and marketing increased sequentially primarily due to higher travel and headcount related costs, including an increased number of quota-carrying sales reps. Adding sales capacity and investing in our go-to-market efforts has been a major area focus for us this year, given the strength in our core business, expanded TAM and a strong secular tailwinds. Sales and marketing expense as a percent of revenue was 44% compared to 45% last quarter. Given our better than expected performance to-date and upward revised outlook for the year, we plan to increase our current level of investment in sales and marketing in the fourth quarter. R&D expense for the quarter was $25.1 million, which is up from $23 million last quarter. The change reflects an increase in personnel cost and the inclusion of Alsid for a full quarter. As a percentage of revenue, R&D expense was consistent with last quarter at 18%. Given our best of breed approach, innovation remains a top priority, and we plan to continue to invest throughout the year. G&A expense was $15 million compared to $13.8 million last quarter. As a percentage of revenue, G&A expense was 11% this quarter, which was flat compared to last quarter. As anticipated, G&A expense was sequentially higher in the third quarter due to increases of headcount-related costs. Income from operations was $13.7 million compared to $11.5 million last quarter. Operating margin was 10% for Q3 compared to 9% last quarter. As a reminder, we closed our credit facility in early July. So net income in the quarter was reduced by approximately $3.5 million of interest expense, which does skew the comparison in prior periods. EPS in the third quarter was $0.07, which was $0.05 better than the midpoint of our guided range. Now, let’s turn to the balance sheet. We finished the quarter with $652 million in cash and short term investments, which included $336 million of net proceeds from our credit facility. As a reminder, we used $160 million of cash in October to acquire a Accurics. Current deferred revenue at September 30 was $362 million given us a lot of visibility headed into the fourth quarter. Now, I’d like to discuss cash flow. With cash interest payments relating to the term loan B commencing in October, we believe unlevered free cash flow is a useful metric to aid in the assessment of the underlying health of the business. As such in the press release, we have provided a reconciliation of net cash provided by operating activities to unlevered free cash flow. In the third quarter, we generated $20.1 million of unlevered free cash. And for the nine months ended September 30, we generated $72.8 million of unlevered free cash flow, with high recurring revenue, high gross margins and high renewal rates. We feel confident that we can continue to generate attractive levels of cash flow while continuing to invest in the business. Now, with the results of the quarter behind us, I’d like to discuss our outlook for the fourth quarter and full year 2021. Our strong performance year-to-date continues to give us increased confidence in the business environment. With that said for the fourth quarter, we currently expect revenue to be in the range of $143 million to $145 million. Non-GAAP income from operations to be in the range of $7 million to $8 million. Non-GAAP net income to be in the range of $2 million to $3 million, assuming a provision for income taxes of $1.9 million. And non-GAAP diluted earnings per share to be in the range of $0.02 to $0.03 assuming $116.5 million fully diluted, weighted average shares outstanding. And for the full year, we currently expect calculate a current billings to be in the range of $602 million to $605 million. Revenue to be in the range of $535.1 million to $537.1 million. Non-GAAP income from operations to be in the range of $46.1 million to $47.1 million. Non-GAAP net income to be in the range of $35 million to $36 million, assuming a provision for income taxes of $3.1 million. Non-GAAP diluted earnings per share to be in the range of $0.30 to $0.31, assuming $115 million fully diluted weighted average shares outstanding. As a matter of clarity, the guidance we are providing today reflects our outperformance in Q3, as well as a notable raise for the year for both CCB and revenue. I would also like to highlight that our non-GAAP income from operations guide has been increased from the beginning of the year, despite the incremental OpEx associated with two meaningful acquisitions. Lastly, ours EPS guidance for the full year includes $7 million of interest expense equating to $0.06 per share associated with our new credit facility. In summary, we are excited about the differentiated capabilities, we are introducing to the market and pleased with the momentum we are seeing. The results of the quarter, give us increasing confidence that we remain well positioned to deliver compelling growth and profitability over the long-term. And now I’ll turn the call back to Amit for some closing comments.

Thanks, Steve. We’re helping customers solve the most complex, security challenges, including identities, critical zero trust, mission critical operational technologies, web applications, and critical cloud infrastructure. We’re especially excited about our platform based approach to bring these capabilities together and the compelling differentiation that doing so represents. We hope to see many of you virtually at the Stifel and Wells Fargo conferences, as well as our virtual Investor Day in the coming weeks. We now like to open the call up for questions.

Thank you. [Operator Instructions] Our first question comes from the line of Hamza Fodderwala with Morgan Stanley. Please proceed with your question.

Hi, guys. Good evening. Thanks for taking my question. And really good color on some of the traction you're seeing with the newer use cases and that's something I want to dig into. So, Amit, first question for you. You mentioned the seven figure win that you had with the OT product. I'm curious one was that a seven figure ACV win. What was the customer using beforehand? And could you give us a sense of what the uplift was when they adopted OT? And I think you mentioned the AD product as well.

Yes. Thanks. It's great to hear from you. It was an existing VM customer, a great relationship, good account team. And they originally went out to bid for an OT security requirement. We came in and we provided them visibility to how the OT product works with our VM capabilities and giving them holistic visibility. They got really excited about and then throughout that process learn more about what we're dealing with AD and ultimately decide to move forward with the EP suite as well as the AD and OT components. So I would call it a textbook, but a super exciting win and an indicator of the types of moves that we'd like to see going forward. And it was a several hundred thousand dollars ACV Delta between where they were with VM and the added components.

Okay. That's super helpful. And then Steve just a follow up for you, you mentioned cloud was over 50% of sales in Q3. I'm just curious if you could remind us what is like the general ACV uplift that you see with the Tenable IO product versus the on-prem SC version.

Hi, Hamza, great question. In terms of ASPs, actually Tenable IO if it's a subscription, it generally has commenced relatively the same price points as SA. It comes with a slightly higher carrying cost. But what's exciting about Tenable IO is that it's a prepositioned to selling other products such as WAS and Container Security and Lumin. On average, Tenable IO, as I called out earlier, is one of the fastest growing products for us. We're seeing strength in cloud. It's helped driving inflection in demand. It's over 50% of our new sales. And so, I think, we couldn't be more pleased with the demand pool that we're seeing combine – move to embrace digital transformation as well as work from home or some of the underlying reasons why we're seeing heightened demand for our cloud related products.

Got it. Thank you.

Thank you. Our next question comes from the line of Sterling Auty with JP Morgan. Please proceed with your question.

Yes, thanks. Hi, guys. So when you look at the strength of revenue in the quarter, can you give us a sense how much of that was coming from organic kind of Tenable products that you've had right along versus how much of that upside came from the recent acquisitions that you've done, especially relative to what you may or may not have put into the guidance for the quarter?

Yes, it's a combination of both. We're seeing strengthen in our core business and we're also seeing upside from new product. And so, if you look at the trend line over the past couple of quarters, 25% CCB growth this quarter, that's up from 23% growth last quarter, which is up from 20% growth in Q1. I think what's notable that some of the newer products works, which are expansionary TAM opportunities for us is the fact that Active Directory is the first – this is the first full quarter in which we're going to market and selling that product. That's a deal that closed in late April. And even for OT operational technology, we're really going to market for the first time last year during the pandemic. So we feel like over the course of the year, we've been hard at work at building pipeline opportunities and having conversations with customers. And while the conversion rates for some of these newer products were less certain in the first half of the year, given the execution in Q3 has given us increasing confidence, not only in this quarter, but also our outlook for the full year. So, in short, newer products are starting to make a difference as I mentioned earlier and have contributed several points of growth this quarter for us.

And then one follow up would be how would you kind of characterize the ramping of the sales resources that you kind of layered in earlier in the year? And do you feel like the pace of hiring has been consistent, so maybe you don't get any kind of gaps in growth as you're looking into 2022?

Yes. As I – we are that – that's an area of focus for us. So we continue to make investments in sales and marketing, you can see that play out in the P&L in terms of higher sequential quarterly spend. I think it's fair to say we're hiring more in the second half of year than in the first half in part, because we made investments to improve recruiting and outreach and other efforts. And in the third quarter, we saw our highest – it was our largest increase in quota carrying reps relative to any other quarter this year, so – and with planned expansion. So reps that we've hired in the first half of the year are certainly contributing. They're selling not only our core products, but also newer products. The reps that we're hiring in the second half of the year will continue to ramp as well. And hopefully that will pave the way for good growth, not only the rest of this year, but more so in 2022. Keep in mind that our average ramp time for full productivity is about 10 months for a new sales rep.

That makes sense. Thank you.

Thank you. Our next question comes from the line of Rob Owens with Piper Sandler. Please proceed with your question.

Great. Good afternoon and thanks for taking my question. Just one from me today. You mentioned strength in the public sector and thanks for the quantification there. How do you see this setting up moving forward? We've heard a lot from folks about probably better linearity and where pipelines are setting up for December and March quarters. And do you think this elevated federal spending levels or these elevated federal spending levels will last for some time? Thanks.

I think we started out with a very strong Q1, Q2 in federal space and continued to perform – very pleased with our performance in the third quarter. We do have a large number of six and seven figure deals in the federal space or deals in the pipeline in federal space for the fourth quarter. And I think we have the opportunity, the ability to have a strong year in federal market. We haven't seen candidly any tremendous windfall, if you will, directly as a result of any of the new programs. It's just an increased heightened awareness of cyber more broadly including in the federal government where Biden executive orders and the executive branch have just started paying a lot more attention to cyber security than previous years.

And just one thing to add, the demand environment has been strong this year given the content drumbeat of high profile data breaches in public sector, executive orders, as well as other legislative proposals. We are the market leader in public sector and believe there is a compelling long-term opportunity for us. And believe our FedRAMP approved IO product and our hardened OT product will be instrumental in our ability to grow and achieve success in this market over the course of time.

And I guess just as the follow up there, Steve, since you mentioned that FedRAMP, could you maybe articulate how much bigger the opportunity becomes as a result of that?

Well, it opens us up to new avenues of growth, has more workloads moved to the cloud where we offer customers a choice, so we can help customers secure their on-premise environment. We can help secure now environments in the cloud, including public environments. And so, this is another vector of growth. So, Tenable IO, OT, these are all newer opportunities for us, newer products. And as a result, we think it will continue. Our hope is that it will continue to strengthen our foothold in the public sector.

Thank you. Our next question comes from Andrew Nowinski with Wells Fargo. Please proceed with your question.

Hi, great. Thank you and congrats on a great quarter. I just want to start off with – yesterday obviously Microsoft announced they detected a large scale attack impacting about 600 of their customers. And I think one element of the attack that stood out was how they compromised Active Directory. I know you said the conversion of your new products like Tenable AD was not that apparent in the first half. So I guess would you attribute that sort of better conversion rates you're seeing now in Q3 to some of these recent attacks? Or if not, what's – what do you think is driving that better conversion?

Yes, Active Directory has been an underserved segment of the security, IT and the security market for years. And I would call the kind of – has been the dirty little secret that Active Directory is incredibly difficult to deploy in scale in any secure fashion. It's very difficult to audit and the monitoring mechanisms for detecting attacks against active directory have been inadequate. At the same time, given the critical role it plays, it's really the keys to the kingdom. And so, you see almost every modern attack, or I should say, a vast super majority of modern attacks going after Active Directory. You saw it. You see it in a majority of ransomware attacks. You saw it in Microsoft's recent disclosure and a whole swap of activities. Once you get in, you want to establish persistence, you want to expand the reach within the enterprise, all of those things lead adversaries to target AD specifically. And I think security practitioners know it and the headlines are sort of proving that out. So we see tremendous traction and in the third quarter with our AD product, it was the first – it’s actually the first quarter that we’ve had, first full quarter that we had the AD product in market, and very pleased with the results, and very excited about the pipe that we continue to build going into the fourth quarter, and beyond with Tenable.ad. And, I think notably also the most exciting part is that, that it can be, and is being integrated with other parts of the portfolio. So AD’s differentiation with OT is the type of insight that might have prevented a compromised, like Colonial Pipeline or JBS in the food processing and the type of insight that could lead to better protection of cloud workloads, and the whole slew of opportunities for leverage.

That’s great. That that’s great color. Thank you. And then I just wanted to follow-up maybe a question on your record or number of large deals, and new enterprise customers you talked about. I’m wondering, is it just the function of you’re having more products to sell customers now on the – that initial purchase or perhaps Tenable.ep where you’re bundling more of those together? Or if not, what do you think is driving just the bigger spend that you’re capturing with some of these larger deals now than you were at this point last year?

I think – it’s Steve, I’ll jump in, feel free to chime. I think it’s a combination of factors. One is understanding your cyber risk is more strategic than it’s ever been. That’s playing itself out the high profile breaches, the executive orders all of those things, and then understanding the attack surface is a lot more complex. If you had a VM program, you’re probably expanding it, but you also recognize the need for protecting your OT environment, your AD environment, and also all the analytics. So, we’re seeing tremendous traction with these – with some of the newer products that we mentioned, including EP, which is a more platform based approach to understanding exposure and risk.

And the one thing I would add there too, is that we’re also seeing continued strength in the mid-market, which is something we talked about at the beginning of the year, right? Mid-market customers making investments in digital transformation, pairing those with kind of a security first mindset. And so we’re seeing strength in the mid-market, strength in the mid-market usually comes along with more deal volume and more deal flow. So the fact that we’re able to add lots of new enterprise platform customers have our best quarter ever in this quarter, along with larger deals that were strength and new products in public sector. So, we’re pleased to see a good – high volume of deals, as well as our ability to continue to transact larger deals together as create outperformance in the quarter.

Sounds great, guys, keep up the good work.

Thank you.

Thank you. Our next question comes from Brian Essex with Goldman Sachs. Please proceed with your question.

Great, good afternoon. And thank you for taking the question and nice to see the acceleration revenue CCB and enterprise platform customers. And I guess, maybe on the back of that, I mean, it’s clear that new customer growth is pretty robust and you’re landing larger customers. But what is the experience with your installed base, particularly as you you’re rolling out, Accurics now and AD and OT, what is the adoption rate within the install base and how much of your growth is expand as opposed to new land?

Well, I guess, two points, one is, we’re still early in the cycles with some of these newer products, which have just been released, largely this year have just gone through, or have not even gone through a full quarter since centrally. So, we’re super excited about our ability to hit our expectations or even exceed our expectations. Our net dollar expansion rates continue to be within the range. And I’d say if anything tend to be – appear to be trending in a north, no other lead direction. And so that leads me to believe that it’s just a matter of our relationships continue to become more strategic with our customers. Customers continue to expand their deployments with us and starting to prove out our ability to sell some of these newer products in a platform based approach to our existing customers. And so, again, we’re in the early innings, but the indicators are extremely positive.

Got it. And then maybe just to follow-up, how should we think about SC customers given the traction that you have in IO and EP percentage of newer sales, are you, I mean, anticipating that those customers just stay on those platforms, is there any potential, maybe at some point to, I guess increase the attach with those customers that have both IO and SC, how do you think they’ll behave as you continue to expand your platform with more features, functionality, and more cloud focus?

Well, SC is a product with high renewal rates, and high – and very good and high MBS scores. So it’s a product that’s been in the market for a long time, and it’s a beloved product. We have a compelling glide path for our customers who currently use our SC offerings who want to use cloud and are increasingly choosing our cloud product. So that could come in the way of IO or EP. The one thing that we’re not doing is providing remuneration to the sales team. That’s one product versus the other. And the reason why is that can have a tendency to create some bad behavioral customers to make a choice we want to sell the right product to customers, given their needs. And the one thing that we see is that we see customers often buy both looking for products to secure their on-prem environments, looking for cloud-based products as well. So we’re one of the few companies that can cover the attack surface in that regard. And so there’s incentives for customers to move from SC to IO. But we’re doing that in a way that makes sense for them as well as us.

All right. Makes sense. Thank you very much. It’s helpful.

Thank you. Our next question comes from Saket Kalia with Barclays. Please proceed with your question.

Okay. Great. Hey guys. Thanks for taking my questions here. Maybe first for you Amit, I mean, we’ve mentioned EP a little bit earlier. I was just wondering if you could zoom out a little bit. What do you hear from customers about bundles like EP and maybe longer term how do you think about bundling for Tenable over next year or two?

Yes, we’ve seen tremendous traction with EP. We’re extremely excited about it. It’s one of those things where, we pulled it together based on a lot of feedback, our desire, candidly to show greater leverage, not only from a go-to-market perspective, but how some of these products can work together to create unique value propositions for our customers. But you never know how the sales team and how the market are going to gravitate to various offerings. We were extremely pleased with how the sales team gravitated toward EP and candidly their ability to drive customers and what customers through the value proposition and customer willingness to embrace EP despite its significantly higher ASPs and price per asset. So extremely excited about what we’ve been able to do with EP in a short period of time. Again, it only came out earlier this year, and also excited about our ability to continue to add in and bundle new asset types and new analytic methods into EP. So, it’s not a great leap of faith to look at some of the other technology assets in the portfolio where natural leverage can occur and to add those into the EP licensing. So the customers can expand their asset based with much more smoothly and derive greater value in seeing, the correlations between the various data asset types.

Got it. That makes a ton of sense. Maybe for my follow-up for you, Steve, I think you talked about maybe just a couple or few points of growth from inorganic in the quarter, maybe just to ask the question this way specifically for CCB, how much did organic contribute here in Q3 and how much are you assuming for CCB within that full year CCB guide?

So specifically in Q3 for CCB, what we said is inorganic opportunities. These are newly acquired products and specifically AD and I’ll put OT collectively, that’s how we look at the business collectively contributed several points of growth. And I think it’s fair to say, if you look at kind of performance in Q3 and compare it to the first half of the year where you now having Q3 the first full quarter of sales associated with AD, we all know that OT comes with higher selling prices, but also longer sales cycles and last year was our first year in the market selling that product. But given the backdrop of a heightened threat environment, we’re seeing tailwinds and good growth really for that product lines collectively those products contributes several points of growth. These are quarters in the making for us, we think a good setup into the fourth quarter, which tends to be seasonally strong for us, and for the full year I think it’s fair to say that at least specifically OT what we talked about give for specifically AD what we talked about is going to contribute roughly one point of growth. I think we’re on a pace to do a little better than that in the full year specifically given the strength in the third quarter.

Very helpful. Thanks guys.

Thank you. [Operator Instructions] Our next question comes from the line of Mike Cikos with Needham & Company. Please proceed with your question.

Thanks team, wanted to ask you if you’re seeing any changes here in win rates, based on this hoarding broader portfolio that you’re now offering. And then I guess building on that, is it fair to think that EP and IO are the – are primarily pulling through this cross sell for AD and OT, or are you seeing certain situations where maybe AD or OT are actually the primary lead, which get your tent under the nose and then you can start selling EP and IO in addition to that?

The EP, so I guess, historically the company has led with VM and now increasingly with EP showing a more holistic approach to understanding cyber risk. EP includes container, web application security, lumen, the analytics and core VM capability. To-date active directory OT some of the newer cloud capabilities are not yet included in the EP licensing schemes. So there’s I think a tremendous opportunity to make it much easier for customers to adopt us much more broadly. We do have, I think the easiest motion to generate the fastest traction is selling some of these newer products and bringing some of these newer products to our existing customer base, right. We have 35,000 plus customers on our core VM platforms and as VM customers and there’s some natural motion, natural ability to upsell them to some of these newer product lines, which can add tremendous value. We’ve also seen on numerous occasions, large enterprise customers, which already have a VM solution in place slightly integrated, and they’re not looking at near-term swap outs or they’re contractually obligated over a multi-year period. But they do have tremendous need for OT or AD or augmented cloud capability. And that’s where we’ve some of the newer products become significant land opportunities for us and expect those conversations will expand over time.

Very helpful. And if I could just ask one more question on your go-to-market, appreciate all the – I guess, the accelerated sales capacity investments you guys expect to make in 2H versus 1H of this year. But wanted to touch more on your go-to-market investments and channel specifically with the MSSPs. Can you talk to those investments and maybe help us better understand is that benefiting you when I think about some of the mid-market strength that you guys spoke about earlier in the call, anything that would be beneficial. Thank you.

Well, MSSP remained an exciting long-term opportunity for us and this year in essence, that’s a new route to market which was preceded by changes in product because products an important part of the MSSP market. You have to provide certain features and access rights and controls. But over the course of the last 12 months, we’ve added a number of new partners – channel partners in this market. And as a result, we’re seeing good pull from customers. Primarily in foreign markets, we’re having success here in the states, but in markets that rely heavily on an MSSP model, the fact that we’re able to add new channel partners along with changes in products have really made a difference for us. We think long-term MSSP could generate as much as 10% or more of our total sales. I think that’s not another question. We know that’s going to take time. But that’s a new route to market for us, one that we’re going to continue to make investments in. Our partner model is important here. And our ability to invest is going to be critical. So when we talk about investments in sales and marketing, we often spend more time talking about increases in quota capacity and specifically quota-carrying reps, but just as important the investments that we’re making in channels. MSSP is one of them. But doubling down on the channel and generating more channel in business is something that worked well for us over the years. And it’s one of the reasons why we’re able to have the success in the market that we’re having and be the best-of-breed provider.

Thanks again, guys.

Thank you. Our next question comes from the line of Jonathan Ho with William Blair. Please proceed with your question.

Hi, good afternoon. Just wanted to start out with the Accurics acquisition. Can you give us a sense of maybe how this acquisition can contribute to maybe the cloud and shift left inside of your strategy?

Yes, I think the Accurics factors significantly in how we expand our cloud strategy. So, Tenable has been leaning in on cloud for a number of years. We have cloud-native connectors to all the major public cloud infrastructure providers. We’ve deployed a container security capability. We’ve delivered frictionless, which allows us to assess assets in the cloud without deploying agents or conducting scans. So some real, what I characterize as cloud-native capability that is much more focused on assessing state while in run time after deployment in operations. Accurics brings two additional capabilities to bear. One is an infrastructure is code kind of shift left approach as you’ve noted. So now looking at code at checking time and looking at violations of policy and security issues in a pre-production mode. So someone checks their code in, you look at it, you look at the infrastructure which is being request and produced and you can identify where problems exist. And rather than just accepting the code check in, you can provide feedback and provide remediation is code back to the DevOps team, which really alleviates a lot of issues from ever making their way into production and environment. So a lot of cost savings, a lot of enhancements and improvements in security and doing that. The other capability the Accurics brings to the table is a more traditional CSPM functionality. So, we believe as we integrate our approach integrated across these capabilities in our approach to cloud, it’s really quite a compelling from code infrastructures, code through and preventing issues in a pre-production mode all the way through runtime assessment of drift container, frictionless assessment of assets and cloud configuration issues, providing customers an entire cloud platform based approach to protecting their cloud workloads.

Got it. Got it. And I guess, when it comes to the OT space, this is a business that you guys have owned for a period of time. And it seems like things are really sort of picking up or accelerating here. Can you talk about any inflection points that you’ve maybe seen in the business or product or pipeline that may be driving some of the stronger activity levels here? Thank you.

Yes, it’s a good question. I think some of it is just a matter of time and blocking and tackling in the early stages of the pandemic between supply chain, customers not being able to be on site to do proof of eval and deployments and things of that nature that business went into a slower growth mode. We did see acceleration over the past year predominantly through being able to deliver remote hands capability, being able to deliver software only distribution. And I think market – increased market appreciation for OT challenges between issues like Colonial Pipeline, JBS, we saw healthcare issues in the UK. There’s also been a number of executive orders and other high profile activity really highlighting to those that operate critical infrastructures or OT environments that they’ve got to protect them. And that there’s mission critical activity happening. And that our approach, combining OT visibility with IT is quite compelling. So we’re seeing some of those larger transactions occurring, and we’re also seeing some of our early adopting customers now talking about larger scale deployments, global deployments, moving from a first handful first dozen sites to significantly broader deployments, which shows that, these things are moving into a more operational phase.

Great. Thank you.

Thank you. Our next question comes from Gray Powell with BTIG. Please proceed with your question.

Great. Thanks for taking the questions. A couple on my end. The first one you’ve already kind of hit on, but I might ask it a little bit differently. Just at a high level, how would you categorize the demand environment in 2021 relative to prior years? And then obviously, what I’m trying to get at is, there were some obvious headwinds in 2020. So, I guess part of my question is whether or not you’re seeing sort of a catch up in spending this year and then just any insights on sort of the sustainability of demand going forward.

No, I don’t think I wouldn’t characterize it a catch up and spend, last year was – it was slowed down for a number of reasons, but I think we’re returning to what I would characterize as still a more normal mode of operation. If you look at it still, we still feel like we’re behind where we were from a demand environment perspective and the pre-pandemic and growth rates and feel like there’s still lots of room for us to continue to improve and execute and draw on the backs of our core market and a bunch of new capabilities and new markets that we’re now starting to tap into.

Okay. That’s really helpful. And then just as I look into Q4 and sort of the implied billings guidance for the quarter, does that include any material contribution from Accurics and how should we just think about the run rate of that business, particularly as we try to, think through things for next year?

Hi, Gray. Yes. So, as we talked about earlier with the Accurics. Accurics is going to be de-minimus in terms of the top-line. So it’s not going to have a meaningful impact on the top-line in the fourth quarter, not expected to we’ll assume about $4 million of OpEx. If you look at our guidance for the year full year CCB guide at $602 million to $605 million, which depending on where you are in the range is a $10 million to $12 million increase driven in part by the strong beat in Q3, as well as a raise for the full year. This represents about 22% growth for the full year and implies a 20% to 21% growth for Q4. And look, overall we’re very pleased with our growth in Q3 gives us a lot of confidence in our outlook for Q4 given the seasonality of the business strength in cloud things that we’ve talked about today, such as contributions we’re seeing from new and expansionary TAM products, specifically AD and OT, as well as a favorable spending environment in public sector. So it’s, I think a confluence of all these things together, that are delivering upside not only in this quarter, but give us more confidence in our outlook for the rest of the year.

Understood. That’s all good to hear. Congratulations on the good results. Thanks.

Thank you.

Our next question comes from Daniel Ives with Wedbush. Please proceed with your question.

Yes, thanks. So can you just hit in terms on federal with the executive order? It feels like more and more, you’re almost getting ratchet up in a lot of these deals, given the nature of the threat environment, as well as the actual executive order. I mean, is that true? Are you seeing that, that you’re starting from a pecking order given where you stand the solution set that’s changing?

We feel like we’ve got a solution that’s a solution set that is well understood by the federal government and large enterprises in general. It’s a core requirement from a security operations perspective and understanding cyber risk with lots of room for continued expansion, a number of existing customers, across federal civilian, especially, which don’t have complete coverage of and nor understanding of their vulnerabilities and exposures. We also have a number of our newer products and capabilities things like active directory, which have been plaguing public sector, as well as private sector, which I think can become tremendous opportunities for us. Operational technologies is another example. So, we’re still early, I think the increased awareness in the federal spend, starting to come together in terms of programs, but we’re still in the early endings of seeing, how this will play out.

Yes. I like the humble answer. So to have point just in terms of like sales, there should be partners and obviously you’ve invested a ton, but can you just talk about like investment on the public sector, within the beltway? Thanks.

Okay. So couple things in it, number one, in terms of investment, I think it’s for, to say that we’re continuing to invest in our go-to-market efforts, and that’s really across all theaters, domestically and abroad, and whether it’s public sector, as well as state and local, we’re seeing only strong demand, in federal, but also state and local. And we know there’s compelling opportunities there. And I think the success we’re seeing this year reflects the conversion, some opportunities with shorter sales cycles, along with the combination of some longer term projects, given our leadership position in federal, this is an important market for us, and our success closing recent opportunities in the current budget environment. We’re encouraged by what we see ahead number of sizable opportunities that are in front of us. And we think this is going to be potentially a catalyst, potential catalyst of growth for us. So, we are best – we’re the market leader in this space. And we think this creates a long-term complaint opportunity for us and public sector will be an important part of the story for us going forward.

Thanks. Awesome job.

Thank you. Our next question comes from Shebly Seyrafi with FBN Securities. Please proceed with your question.

Yes. Thank you very much. So if you bundled AD and OT into EP, what would be your average deal size uplift? Because I think you said before that your EP uplift is about 60% now, but if you add AD and OT and to EP, how much higher can that be?

It’s a great question. I’d love to throw some data out there. I’m sure Steve would not appreciate that, but the way I think about it is that there’s two dimensions, that would be at play. One would be an increased number of assets as you’re include AD, as you include OT, you’re simply covering more assets. And so there’s a natural expansion of ASP, which would occur in that along that dimension, there’s also a higher ASP on a per asset basis when we’re selling EP, because EP is not simply just, the inclusion of multiple products into a licensing scheme. It’s a platform based approach where the products can interact with one another, the analytics that we can deliver on top of those products, things like lumin and the light can deliver more value you for our customers. So they’re willing to pay a premium pricing for getting those products to interact and superior analytics we can deliver. So, I think it’s fair to assume that, if customers expand asset, their asset coverage significantly through the inclusion of OT and AD, and they’re paying a higher price per asset purchasing them as part of the EP bundle as opposed to standalone products that could have a significant impact on ASPs.

Okay. And my follow-on, is it looks like implicitly in your annual CCB guidance, your Q4, CCB group growth decelerate, I don’t know about four to five points from Q3 growth rate. And I would say that the comparisons actually a little bit easier, slightly is there a reason why CCB growth would decelerate by four to five points, or are you being conservative?

We think our guidance is appropriate. We delivered a sizable beat in Q3 both on CCB and revenue were getting great traction with cloud momentum with newer products. And obviously we talked about, strength in public sector. As we look out into the fourth quarter, we’re encouraged with what we saw in Q3. We’re raising our outlook for the full year. Keep in mind, we have a ton of opportunity in front of us with regard to these number of products. So, we talked about the exposure platform, which is a product, we launched in the end of March already contributing here, notably to the top-line. We talked about AD, which is, an acquisition we closed in late April. We talked about, hardening our OT product and how this is, these are longer sales cycles and more opportunities for us. So, we’re absolutely delighted with the activities and the pipeline opportunities are in front of us, not withstanding public sector, but these are conversions against no more products. We’ve had success in Q3 gives us confidence in Q4, and we believe, they’ll continue to serve the catalyst of growth for us. So we believe the guidance is appropriate. And we’re encouraged with what we say. So over all good quarter beat and raise, reflects the optimism for the fourth quarter. And we’ll look forward to giving you an update in February on our fourth quarter.

Okay. Thank you.

Thank you. Ladies and gentlemen, we have reached the end of the question-and-answer session, and this concludes today’s conference. You may disconnect your line at this time. And we thank you for your participation.