Palo Alto Networks (TICKER: PANW) Palo Alto Networks Inc S Panw Ceo Nikesh Arora Presents Citi 2021 Global Technology Virtual

Palo Alto Networks, Inc. (NASDAQ:PANW) Citi 2021 Global Technology Virtual Conference Call September 15, 2021 1:00 PM ET Company Participants Nikesh Arora - Chairman and Chief Executive Officer Conference Call Participants Fatima Boolani - Citigroup Inc. Fatima Boolani Good day. Good afternoon. Welcome to day three and the final day of what's been a terrific Global TMT Conference here at Citi. I am very pleased to host this afternoon session with Palo Alto Networks. And with me, I have CEO, Nikesh Arora. Nikesh, thanks for joining us. Nikesh Arora Hi, Fatima. How are you? Question-and-Answer Session Q - Fatima Boolani Good. Glad to have you. Before we get into the meat of the discussion because I know we have plenty to talk about. I just wanted to remind the audience, if you do have any questions, please feel free to email them to me at fatima.boolani@citi.com and I will do my very best to get them incorporated in our conversation and dialogue. So with that housekeeping aside, Nikesh, I want to start with you, it's been an eventful couple of days for you this week and last week, and so I want to dig right into the Analyst Day. You had your first Analyst Day in two years on Monday. What are the main highlights you want to emphasize and impress upon investors? Nikesh Arora Well, first of all Fatima, thank you for having me here and good to see you in a different setting covering this name and part of the market. Look, we had an Analyst Day on Monday, and part of the emphasis was showing that we are sort of entering our next phase of Palo Alto Networks, where the last phase was defined by us doing a lot of heavy lifting, doing a lot of product building and getting into categories and establishing ourselves where we had ideas and we wanted to get to a point where we had good product market fit, good customer adoption, and really understanding how to get that to scale. And we are at a point where we have three very well developed platforms around Strata, Prisma and Cortex, the first one around network security, the second one around cloud security and third one around automating the SOC capabilities. And we really felt this was the right time given the tailwinds we are seeing in cybersecurity, given the digital transformation we are seeing. To emphasize that, we see a robust opportunity ahead of us. We see us being able to do $8 billion in revenue by FY2024, $10 billion of billings, get our free cash flow rate up to 35% by 2024. So really getting to a point where we think we are not just the largest cybersecurity business, but as a cybersecurity business across all three platforms, development at scale. Fatima Boolani And maybe on a related note, taking a step back, you've been at the helm for now three-and-a-half years. So I want to ask you what has surprised you most, both negatively or positively in the last three-and-a-half years as CEO, and maybe how have these observations influenced a lot of what you talked about at Analyst Day, and frankly, the refreshed growth and margin algorithm that you've put out? Nikesh Arora Yes. Look, I think from a positive surprise perspective, what is interesting is as we didn't quite say it like that point in time, now we can say, we had a bunch of technical debt we have to pay because cybersecurity companies make their swim lane or win that swim lane and really let other people win those swim lanes. And we actually set an aspiration to have a consolidated platform across eight different categories, and we feel that - we feel vindicated, we feel like we built the three swim lane platform, which talks to each other yet can also be picked up as a best-of-breed in this category. And that surprises me that to get a team and get it motivated and get it to a place where we can actually execute that in the last two-and-a-half, three years was very surprising positively so. The part which I've learned is that you still have to go tackle this one customer at a time and each customer has their own maturation cycle and an option cycle or acceptance cycle, and then forth their budget cycle. So it's kind of not like if you build it, they will come, we have to build it and go to every one of them and convince them they have to go migrate down this path. And I think the recent cyber attacks, the cyber events that we've seen have allowed us to go convince those customers have opened the door for us to have those conversations. So more work to be done there, but at least I feel a lot better today than I did three years ago in terms of saying that time we are building products in certain categories, today, we believe we have leading products in those categories. That's a different challenge, but somewhat a higher degree of comfort. Fatima Boolani So on this notion of build it and they will come a good segue into thinking about your addressable market opportunity. You talked at length about being able to prosecute what is close to a $100 billion TAM growing in the teens. So relative to your medium-term outlook, which you put out a 22%, 23% ZIP code between revenue and billings. Help us think about which solution pillars in a much broader platform footprint do you think are going to drive that outsized growth relative to the market growth in advocate? Nikesh Arora Yes. If you look at the three categories on network security side not only is hardware growing again, the industry is somewhat low-single digits, mid-single digits. But if you couple that with the fact that people might get into cloud need software firewalls, and really we've seen this huge upsurge in SASE or remote security demands where actually the network TAM also bending into the network security TAM because you are not only providing security, but you are also providing remote connectivity and monitoring an SD-WAN, which is kind of often in the network space. So that allows the network security TAM to be faster than just the firewall TAM. So not only are we seeing the TAM growth, we also have more product in that category. So we didn't have SASE two years ago, now we do. So we are seeing -now we expect to see growth there. And from a scale perspective, that's still the largest part of our business. So that part of the business should grow and is the largest part of the business. So in absolute dollars, that's probably going to kind of contribute the most. Adjacent to that is the cloud security space, where the public cloud doing a $150 billion between Amazon AWS and Azure, we think that cloud security TAM is approximately 2% to 5% of whatever you spend on public cloud. Now, what you spend on the public cloud is today, what you deploy, it will take you 12 months to 24 months. So there's a bit of a lag between when people commit to go into the public cloud, actually deploying full scale security there, we are tracking how many customers can we penetrate. How many modules the other customers use because we believe the more penetration we see there, the more module adoption we see, the better the prospects to longer-term as more and more volume goes to the public cloud. So from that perspective, that will see steady growth and it will bear the growth of deployment in the public cloud for most of our enterprise customers. And last but not the least, on the security operations side, it's a competitive market on the XDR front. We are finally hitting our stride in terms of being able to get 300 to 400 customers a quarter, fully ramp that up further. But at the same time, we think that category expands in the next five years into more of a SIEM plus XDR plus automation category and where, in that category, we are very well placed. We are the - I guess, the second largest security automation business or one of the top two. We have XDR, which is now hitting Insights and Xpanse, which is weak in this category of Attack Surface Management. The more we integrate them, the more we can get an ingestion as part of that flow, we think again, that TAM expands for us and allows us an opportunity of growth there. Fatima Boolani I want to jump back and sort of pull on some of the threats vis-a-vis your network security business. It is sort of your flagship, bread and butter business, so to speak. And specifically, the hardware and product business, certainly investors have this view that hardware form factors are going the way of the dodo bird just kind of given the broader secular trends we are seeing, right? So can we just miss bust around here for a second because it is still about 20% to 25% of your business and immensely profitable. So just some of the puts and takes on the hardware and product business specifically, and you did characterize some increased confidence in that business after a period of some delays. So what are some of the assumptions that are sort of going into that confidence in hardware market? Nikesh Arora In the firewall business, we're glad that we've managed to convert 47% of that business to software. We think that gets to about 62%. So I think the industry was around - 60% of the firewall business will be software, we are at 47%, three years ago, we were in the 20%. So having reversed that transformation, and that's your thesis, the dodo bird, then there should be - others who should be more worried than us. But the dodo bird is alive. It's kicking and it's waking up again. And thinking of it is the people coming back from the pandemic, a lot of people postponed some capacity increases during the pandemic, there's nobody there, the data center upgraded their firewalls. So I think we'll see that happen. Couple that with the fact that it's time for refresh now in the next six to 12 months, again for us where we already have launched a - so a third piece, we've launched a newer, lower end form factor, which we have in the market where some of our competitors takes the lion's share of that market. With that launch, we are no longer letting lot of people to get a big walk in that space. So coupling all of those things, adding Okyo, which we just launched last week, add all those things together and we believe there is a mid single-digit growth rate that we can deliver. Hardware, couple that with all of our firewall business, we think we grow our firewall-as-a-platform business north of 20%. So we still keep taking share - more share in software. 80% [ph] of hardware is alive and the dodo bird lives on. Fatima Boolani And how would you sort of counter argue or respond to investors who believe that cloud migration and cloud adoption is mutually exclusive from - and remote work and hybrid work is mutually exclusive from stronger refresh activity in the branch office and in the data center for hardware form factors specifically? Nikesh Arora I'm sorry, mutually exclusive in what way? Fatima Boolani So a lot of investors do have this view that as much as - you're seeing some of these trends, you still have the drumbeat of remote work and flexible work, right? So you never really going to get back to that 100% in the office sort of situation. And so how do you sort of reconcile, again, some of the - a lot of the strengths that you're - and the revitalization you're seeing in the hardware business with a dynamic from a - work from anywhere standpoint that would actually be counterintuitive to that confidence? Nikesh Arora No. But I think - Fatima, I don't know. I mean, Citi being started shutting down the buildings and shutting down capacity because you guys aren't back to work. So I don't think companies can get away with thinking one planned capacity for all employees coming to work or - network capacity for everyone to work remotely. So you're seeing that capacity actually happen on both ends. And to be fair, actually, the remote security capacity expansions fully happen in the market. I think that's a five to eight-year trend we're going to see how [did the company going to get through] [ph] that cycle. So I think that's net tailwinds on the network security business. I don't think any CIOs or CISOs sitting there saying, I'm going to lower the capacity of my data center because don't forget, remote access or you accessing your data center is very marginal use case. There's tons of volume associated with the end consumer services that offer because I'm offering e-commerce, I'm offering streaming. I've got nothing to do with where I'm working in the office or working at home, it has to do with how much volume I'm processing behalf of my business, that volume is going up, whether you work from home, whether you work in the office. So I don't think there's any question in my mind that we're going to need more firewall capacity in the next five years than we have today. Fatima Boolani Fair enough. Maybe shifting gears, you talked about a couple of new metrics that I found really interesting and fascinating. You've essentially doubled the number of accounts in your base that pay you $1 million and the number of accounts that pay you $10 million has almost tripled, I think it's a little over 2x coming off a small base, albeit. And in the fourth quarter, you talked about a customer with whom you booked $100 million of business. So what are some of the commonalities between these mega customers that you see and what catalysts need to transpire for your entire base of 85,000 customers to mimic the same behaviors that you're seeing from these mega customer accounts? Nikesh Arora Well, as long as the 85,000 customer generates the same revenue in the first month, okay, at a more serious curve. Look, people who bought Palo Alto Hardware Firewalls five years ago or four years ago, couldn't buy a whole lot. They had everything sort of in the - and everything - the hardware portfolio was with them. They are salespeople who have built great relationships with those people and customers are happy with the Palo Alto implementation walk up and say, hey, you guys moving to the cloud, you get cloud security, or you guys need endpoint security, you got XDR, you won't go do automation, you should get XSOAR. So our satisfied customers are at the top of the pyramid, who are very happy with our products and services now have the opportunity of getting more from us because we've given them a great experience. So from that perspective, the number of customers we can get to spend $10 million thus tells you that they are buying more than one Palo Alto platform. And it's not like it's over time, the million-dollar customers evolve five, five and evolve to 10, 10 evolve to 20 and 20 evolve to 50. We had north of $50 million deals on last quarter. You couldn't configure a hardware solution customer or they'd have to spend $50 million, you'd have to promote security in there. You have to have Prisma cloud in there. You have to have XDR in there. So having a lot more best-in-class product in our portfolio helps us target or deliver those capabilities to those customers. So that's the catalyst that's going in. For that to continue to proliferate and for that to get bigger and bigger, we need to make sure that our entire sales team is fully trained. We need to make sure that we're driving the right relationship between our core team and our specialist team. And that's what we're focusing on, and that's what in terms of next two, three years are about. Fatima Boolani I can appreciate some of the newer solution pillars are improving your reach with brand-new logos. So customers that previously have never transacted with you, right? But the reality is you do have a substantial base of customers to form. So as you and Dipak were soundboarding on the medium-term guidance, can you help us think about what sort of embedded in that medium-term outlook in terms of customers graduating from paying you $0.5 million to $1 million to $10 million to $100 million, I mean, what's baked into that outlook? Nikesh Arora Well, it is both of a bottom up and top down analysis that in terms of how do we see the progression of our customers deploying more and more Palo Alto. At the same time, there's robust planning from our perspective in terms of what does our opportunity pipeline look like, what does our penetration look like. And really most of the impact is going to happen in our global 2000 customers. They have the capacity to spend tens of millions of dollars and they have the need to spend tens of millions of dollars. That's where kind of like a lot of the concentration is, and there's a lot of BJ's arrivals, there's a lot of work we're doing and making it more efficient to work with the channel, making more efficient work across some of our international regions. So we have a lot of opportunity to penetrate a lot more customers. And to your point, I give you an anecdote, 25% of our Prisma Access customers are net new to Palo Alto. When that happens, you go to somebody and say, listen, I am going to buy firewalls. I bought them three years ago from somebody else. But I love the way you guys are doing your remote security. Let's go start with that project and when it comes time for renewing the firewalls, we'll take a look at you in that context because you deployed Palo Alto remote security. So it opens the door again for us to go back to a customer where somebody else has gone in and sold them something else out of their portfolio where we have the opportunity because of a larger portfolio sharing other capabilities. Fatima Boolani A big part of - I imagine your bottoms up planning and forecasting has been looking at your go-to-market organization and your sales capacity. Can you just level set with us in terms of how much that sales capacity has grown in 2021? Some of the broad expectations you see playing out in 2022, and I'm just hearkening back to some of what Dipak was saying on the earnings call. But just if you can give us a reminder there and then we can chat about the speedboat initiatives in a little bit more detail? Nikesh Arora Yes. Look, we have about 4,000 sales people out in the field, about 3,200 in the core business, 800 odd in our specialists roles where they step in to support our core team when we have large complex deals where we're competing aggressively with other players in the industry. So kind of a model we're diving from an efficiency perspective where we have dedicated people if required larger deals because sometimes we end up in a situation where competition is proposing a certain solution. We have to close our solution. We need to make sure we have qualified people. And we've managed to hone that capability and process over the last two years as we've built these newer capabilities and newer speedboats. And part of going forward in the year, next year and year after is to see how to continue to get leverage from that joint one Palo Alto motion across all of our platforms, at the same time have the specialist capability if we have to go and do a hand-to-hand combat situation vis-a-vis individual customer. Fatima Boolani So just by my math, just a quarter of your sales force is even specialized in solution disciplines, if you will. Nikesh Arora Yes. We have 50% of our salesforce sells Cortex and 50% of our salesforce sells some other products. So it sound like our core team doesn't sell all this stuff, they do. The specialist team is available to assist them when needed. So you don't need one is to one coverage from a specialist perspective. You can actually - the relative revenue we have, the billings we have from NGS versus others, so you can see that our specialist salesforce are not out of proportion from the overall business. Fatima Boolani So is there something that you need to do from an enablement standpoint to get the broader proportion of the sales capacity to be equipped to sell more of the portfolio? And maybe as a related question, as you think about the sales quota strategy for the rep base, are you incentivizing behaviors in a certain way to advantage the adoption of certain pillars? Or how do you think about that as you know the carrot and stick approach to drive adoption behavior and selling behavior? Nikesh Arora Look, there's constant enablement that goes on in the company. We launched our product. We make sure that our teams are enabled. Having said that, with a $50 million deal or $20 million deal, you need the dedication of the core salesperson to work with each of the stakeholders on the customer's side, make sure that a lot of people puzzle are in place. You bring in specialists to deliver the capabilities on the cloud side or the Cortex side or the firewall side. So the enablement is there. People can actually sell all things, but sometimes you will need specialists help when it comes to specific technical issues or specific deployment questions and how it works. And so that's why we're striking the balance between the core and the specialist team. In terms of incentives, you spend three years honing this mechanism about how do we make sure that the teams are incented. So our core teams are incented to sell everything. In addition to that, our speedboat teams are incented to sell their product and we are able to strike the right balance in terms of making sure that there's ample focus on every category. We want to drive revenue. We've tried different ways and we think we've got [indiscernible]. Fatima Boolani That's helpful. I think the flip side of the sales enablement coin is the attrition aspect. Again, you've been very assertive in your sales hiring. It's a very competitive labor market right now. I think it's a great time to be enterprise software and a cybersecurity salesperson right now. And so how do you manage that aspect of the sales productivity enhancing equation? Nikesh Arora Well, we understand the market is - right now the market is very hot. It's very, very exciting if you're an enterprise salesperson. Having said that, our sales attrition is actually lower this year than it was in prior year and part of that is because we think our portfolio is robust. People are finally finding out and selling firewalls for the last three years to these 10 customers. I have more capability of selling SASE or cloud or Cortex. And I really know them, they like our product, they like the company. That helps. Our employer brand has gone up tremendously in the last three years and Liane alluded to that while she was presenting at our Analyst Day. So that's helped. Our stock price helps because people have a lot of unvested equity if the stock price goes up. So all these things go in and honestly maybe a way more emotional for me than it is, but people enjoy working here. And you go to a new startup, its great. You can get a new job. You can probably get 10% more money, but you got to go sell a $100,000 ACV product and go grind yourself out, or you could be doing $10 million deals at Palo Alto. Fatima Boolani Fair enough. Another aspect of... Nikesh Arora So just to add to that, we watch our business and as we enter Q3 to see how our business is going to land for the year and how we expect next year to be. So we've actually hired in advance of our next year because it takes four to six months to get your salespeople up and running and be productive. So you want to get them in. You want to get them enabled. You want to understand what the capabilities are, where their accounts are because you want to hit the ground running. So we've actually hired aggressively in Q3 and Q4 to prepare for this fiscal year, and we've seen a lot of attrition than we expected. So we feel comfortable that we can - we have ample sales capacity to deliver what we have to deliver, yet at the same time manage our attrition that we are bound to see. Fatima Boolani I like that detail. The other angle of sales capacity and sales execution is having more reps to market with distribution. You've been pretty vocal about the fact that the traditionally defined channel partner or value added reseller is perhaps no longer a reliable proxy for the type of momentum that you're seeing in the business that you're seeing in the pipeline, right. So talk to us about what's changed and ultimately how we should gauge your success in the marketplace outside of your direct salesforce and direct sales touch? Nikesh Arora Well, I think most of our business still comes from a channel, but I think the definition of channel has expanded. I was reading one of the notes last quarter, when we're in our quiet period and somebody had gone and done a channel check, and we actually knew from reading the note who they might have talked to. Problem is they don't understand that today Accenture, Lloyd, Pricewaterhouse, Orange Business Services, AT&T Business Service, Verizon Business Services, these guys are as bigger channel partner, if not bigger than some of the other traditional partners. And these guys are not open to conversations about channel checks in the quarter. So you could miss the entire profile, not just us, I'm sure, many other enterprise companies because we're selling stuff on Google's marketplace, and [indiscernible] marketplace through Accenture transformation services, through IBM's transformation services. You're not going to pick it up. You're going to pick up the traditional hardware-based channel partners, 25% of our business, like you said, is hardware, 75% are software and services. So the channel makeup is changing. The partners are changing. A lot more of the transformation is driven by consulting companies, where product is part of the overall capability, but it's not leader. So you got to make sure we're connected well with all the SIs and SVs. We've been doing a lot of work in that area over the last two years and we feel really comfortable that we have good partnerships. Some business comes direct, especially when the business gets to scale. Like when you have a $50 million deal or customer spending $100 million, they want to eliminate any friction, any third parties, any leakage of discounts, any leakage of commission. So they're trying to make sure they optimize the economic value for themselves, so. And at that point in time, it use them and us to put legal people in the room to go and get the deal done as opposed to deal with some other third-party favor, which is - it's not unique to us, which is kind of very standard across the industry. If you're going to do a very large deal, you're going to make sure that you optimize it for your scenario. Fatima Boolani I suspect the evolution of your partner base necessarily had an impact on your economic arrangements with your partner base. Anything to shed light on there, I mean, you're selling a lot more subscription and cloud delivered and cloud form factor solutions. So how does that sort of translate into how the economics have evolved between you and your largest partners? Nikesh Arora I mean, honestly, they stay pretty consistent because many of our largest hardware partners are not sitting on their laurels. They actually understand that dynamics much better than they might let out. They're building services business there. So there's a balance of us selling product and giving them services business where they come in and provide some of the transformation service or they provide some of the deployment services or they provide some of the monitoring services. So there is a - I think the economic balance is pretty consistent, but the kinds of things that they're doing to support the customers might have changed. Fatima Boolani Fair enough. I want to jump back to growth trajectory and topline trajectory specifically from the standpoint of billing. So again, taking a step back, if I look at the last eight quarters, reasonable degree of variability in your growth rates, right, 17% to 34%, if I just look at the quarterly growth rate over the last eight quarters, you're anticipating a low-20s sort of plateau looking forward and in your medium term guide. And so help us understand some of the distinct factors are in your billings trajectory going forward relative to what you've seen. And maybe that's in the form of some payment terms that are lapsing from what was a very difficult year for a lot of organizations last year or anything you've seen around duration from your customers shifting. So any sort of points we can digest on sort of billings trajectory and what's sort of going into that because it's a complex figure? Nikesh Arora I think, honestly, Fatima, a better gauge for investor's is the RPO. Because if you look at the market, there's financing that gets involved, there's annual billing terms that get involved. So that will color and has the ability to create variability in billing. Like, if I do $100 million deal in the quarter and the customer says, I'll pay you every year. You suddenly have to take off, it's a three-year deal to take off $66 million of billings. It's still an RPO, but I can't report as a $100 million billing. I can only report $33 million billing. So those things come and go. And unfortunately, customers don't care that changes your growth rate percentage quarter-over-quarter. They just want to get the deal done the way they want to get it done. So I think if you look at the RPO trend that shows you a much more consistent evolution over time, over quarters because it lead by duration impacts and duration impacts are not that major. Our duration has been pretty consistent for the last three years in the 35 to 36 months range. So that really doesn't impact billing. What does impact billings is the annual billing. When people went into the pandemic, they're like, I want to pay all the cash upfront. I'll pay you every year because I'm preserving cash flow or somebody says I want to be financed. And we set a plan for that reason so that people get financed. Now that doesn't - that is kind of like annual billings. They pay us when they're willing to pay us, but beneficial is up in billings, but annual billings doesn't. So you get a lot of movement from an accounting perspective. If you look at RPO, it gives you a very clear picture. We booked the business. We're eventually going to bill it. And I think that Dipak showed a phenomenal slide, shows that our RPO has gone up to 58% of the revenue, right, which tells you a lot more predictability and visibility into future revenue than we did when it was 47%. That number - as long as the RPO growth rate is growing faster than your revenue growth rate, your revenue growth rate has an upward lift towards the RPO growth rate. Fatima Boolani You mentioned payment concessions and again, it was a very unique year last year. Can you give us... Nikesh Arora Prefer to say payment terms. Fatima Boolani Payment terms. Flexible payment arrangements... Nikesh Arora [Indiscernible] do not pay. Obviously, I'll pay you every year at the beginning of the year, still paying me before I give you the service. That's a great business to be in. Fatima Boolani Fair enough. How about flexible payment arrangements for customers in dire financial straits in the middle of the pandemic induced prices? So we're essentially sort of anniversarying some of those timed arrangements. How should we see that sort of unwind actually help the model this year and you brought up Palo Alto financial services? Curious about customer uptake, how impactful it is to the model and how we should think about that as a competitive tool for you in marketplace? Nikesh Arora Well, it helps get business done in cases where customers are not willing to fund their entire purchase or they're not ready to do it. So it's been net positive to helping the business. From a model perspective, I would suspect we've given you a very clear evolution of free cash flow guidance and pretty much the billing stuff and the manifest stuff impacts free cash flow. So to the extent, we've given you very clear free cash flow guidance. We've absorbed any modeling impacts of billings or manifests in there. And to the extent billings vary because of annual billings, actually RPO is a better way to look at it and then give you a better sense of whether the business have continued strength or the billings are getting varied because of some mechanical factor. Eventually, we build them, right. If you didn't build people last year for a lot of the business we booked, we'll build them this year. Fatima Boolani Good segue into a discussion around profitability since you brought up free cash flow and your free cash flow guidance. But let's start with the P&L. You're looking at about 50 basis points to 100 basis points of improvement after fiscal 2022 through fiscal 2024, that's a steady improvement. But I'm wondering what's holding back a more visible improvement, especially as you exit, what was a very heavy investment period for you in fiscal 2021 along with M&A that was very dilutive to the OpEx profile? Nikesh Arora The M&A wasn't as dilutive to the OpEx as our investment in the product capabilities and so far go-to-market capabilities was and remember we have to grow the business 23%, 23% in billings faster in RPO. So that is required to make sure that our feet in the street, and we believe we can still extract margin out of that business. We don't want to sacrifice the growth opportunity. So we will be cautious about trying to squeeze the margins too much. But I don't think our operating margin leverage stops in FY2024. We're just guiding you to FY2024. So unfortunately doesn't fall into neat package by then, or it should continue to evolve the option and continue to get better. And I think we have to strike the balance between revenue growth in that $10 billion, a company that grew at 23%, 22% is the largest cybersecurity company out there. Fatima Boolani And maybe to ask it in a slightly different way, what would need to happen for you to materially exceed that 50 to 100 per annum basis point improvement book and on the operating margin front, what would it really have to go right for you to exceed that threshold? Nikesh Arora I think those are very good numbers, Fatima. I think those numbers are spectacular. I mean... Fatima Boolani Just poking the bear. Nikesh Arora Yes. Calling me a bear, okay. Fatima Boolani On the same line of discussion vis-a-vis free cash flow, we talked a little bit about what some of the contributing factors are, and really the inputs in billings and some of the assumptions there on given terms and duration. But when we think about what are - essentially two - two very different businesses under the hood as it relates to profitability profile. When I think about your hypergrowth businesses within the NGS bucket, can you point out for us what the lowest hanging opportunities are for efficiency gains in sort of ClaiSec, what you historically call the ClaiSec business? Nikesh Arora I'm sorry, are you talking about free cash flow perspective or an operating... Fatima Boolani From a free cash flow perspective? Nikesh Arora As you look at the free cash flow perspective, you should look at a slightly different - the total overall billings and bookings company. And you were telling you're going to improve operating margin, so that will have an impact and flow through our free cash flow capabilities because it'll reduce the expenses, right. At the same time, some moderation of our annual billings plans, some moderation of manifest gives us comfort. We can get to 35% free cash flow margins. I mean, the contribution of NGS and ClaiSec are all embedded in our operating margin assumptions, which we are saying would expand by 50 basis points to 100 basis points. Fatima Boolani I think you shared some disclosure with us over the proceeding quarters where - again, the bread and butter NetSec business was pushing at about 45% for cash flow margins. So conversely that's some of the best-in-class in the marketplace right now. So maybe the question to you is how sustainable is that high watermark in that core business? Nikesh Arora Well, the NetSec business - hardware, software and SASE, as SASE grows, SASE has a slightly different margin profile. So our bread and butter business should still deliver phenomenal cash flow, but the margins will moderate as SASE gets more from a mixed perspective. At the same time, our Caviar business, since you call the other one, the bread and butter business. Our Caviar business [indiscernible] and driving our 40% CAGR on NGS, will first turn from cash flow margin positive, but at the rate which is growing is very hard to drive too much margin expansion there because from a cash flow perspective, the growth rates are phenomenal. And as they moderate, you'll see more and more cash flow spin out, but they'll get free cash flow margin positive before they get operating margin positive, and that's all in our guidance for FY2024. Fatima Boolani Maybe a refiner point on the Caviar businesses, if you will. And the Caviar suite of solutions, you've been pretty deliberate about what your infrastructure strategy and your delivery strategy is going to be, you are going to leave that to hyperscalers whose day job is right. So can you just talk a little bit about how that is impacting the gross margin profile of the aggregate business? And specifically, what that infrastructure strategy looks like as the cloud portfolio scales an adoption? Nikesh Arora Fatima, I joined Palo Alto Networks three years ago. We had seven or nine data centers, and we're trying to build a service that would be available to 150 countries with low latency, quick access to SaaS capabilities, quick access to public clouds. And having spent 10 years at Google, I know the amount of investment that Google and Amazon or Azure does in building that capability and making it available. I think three to five years from now, we'll not be having this debate or conversation. There must be some insight that majority of the Internet companies that are created in the world all go directly to deploying the public cloud, do not deploy a data center architecture because they understand that the speed, agility and leverage you get from using the public cloud is different. So we've been very, very deliberate. We're pretty much off the data center strategy internally. We're pretty much a public cloud company. We work on pretty much all three clouds and provide our capabilities from that perspective. As it relates to our gross margin profile, you've seen that we've given gross margin guidance where we plan to be pretty consistent where we are. That's puts and takes pure on-prem software businesses have higher gross margins, hardware businesses have slightly lower gross margins and cloud delivered businesses have slightly lower gross margins than that. When you add it all together, shake it. We think we can maintain the current margin profile of the company at 75%. As we scale our Caviar business or SASE business, we get more leverage from the public cloud providers in terms of better economics. At the same time, as we scale, we're able better - able to design our services [indiscernible] public cloud because it's not just leading with hyperscalers. We have a lot of people. We are constantly evolving our design of the services to consume less resource as we get scaled, the less resource we consume, the better the margin profile business. And I think 75% gross margin business is a phenomenal business if you can generate 35% free cash flow. Fatima Boolani Having spent some time at Google prior to taking over here, I think you'd have some interesting perspectives on this. It seems like a lot of hyperscalers like to eat very young, so to speak sort of co-op some of the technology and sort of embed it, right, and then sort of talk about the virtues of cloud native offerings, right. So how much does the hyperscaler innovation around cybersecurity and embedded cybersecurity keep you up at native? Nikesh Arora It's kind of interesting. I'd say there's one of the three who is very aggressive in security space. The other two are not as aggressive. It's a 2% to 5% price of the total cloud spend. And I think they have a lot of work to do on the 95% price in their very competitive situations. So it's very hard to win at the 95% price and the 2% to 5% price at same time. Of course, they have the opportunity to leverage by throwing everything in a kitchen sink in an ELA type situation, but it kind of falls apart. The moment you go to a customer who is multi-cloud because a customer wants their solution to work across Google, Amazon, Azure, Oracle, Alibaba, so wait a minute. If I use the toolkit of a certain hyperscaler, which are always - almost always optimize better for their native solution than they are for the other cloud. So that's where we shine where we are able because we don't run a public cloud. Our job is to make sure our features work consistently across all public clouds, and that's where we see our sell-throughs, that's where we see our leverage. We don't see our leverage in a 100% dedicated Azure or 100% dedicated AWS. The good news is 70 plus percent of the customers out there are going multi-cloud, but on-prem. So that use case is much better for us than a dedicated hyperscaler use case. Fatima Boolani Fair enough. Well with that, I'm going to cap the discussion there. We covered a ton of ground. So I want to thank you for all the insights and a really good discussion. Thanks, Nikesh. Nikesh Arora Thank you, Fatima, and good luck with launching coverage and all the security stuff. Fatima Boolani Take care.
Scroll to Top