Summer 2024 Quarterly Cyber Security Update

Below is the post I recently put on a few different boards within the paid portion and as usual, I am sharing a copy here. Because I am the Tickerguide for PANW it is a little more focused on PANW but I hope does not favor them but instead just a summary of the facts and thoughts based on those. In any event, here it is…

Here is my quarterly Cloud Cyber security comparisons again. I am once again looking at PANW, S, CRWD, and I have added ZS the last few quarters.

As usual, I will center on the Cloud Cyber Security space as this is the most exciting in terms of growth and future potential and is the easiest to compare across the companies. Also, as usual PANW has a large traditional firewalled business that is separated out for this posts purposes. Clearly this assumption and how to account for it is open to debate and disagreement, but I just do the best I can. So be it.

I will also point out that there are other interesting companies that I could include but because I don’t want to make this too confusing nor compare apples to oranges, so I am not including Fortinent, Okta or others that could be argued should be included. If the interest is there I can (or someone can offer to augment this with a follow on post!)

Also, I will take a shot at looking at the firewall portion of PANW in a follow on post as I think that brings a lot of confusion and perhaps an investing detriment to people buying the company where the others are much more pure play cloud cybersecurity companies.

With that out of the way, I first will repeat the last four quarter’s comparison of a couple of key aspects, cloud ARR (Annual Recurring Revenue) and said growth rate. The first is important to show overall size of the cloud portion of the business and the second to show how it is growing. Then I will share the most recent quarters results.

Last year’s June / July Qtr results:

Company ARR ($M) % increase(yr/yr)
S……………….612.2……………47%
PANW……… 2,950…………….56%
CRWD……….2,930…………….37%

And the Sept/Oct Qtr report:

Company ARR ($M) % increase(yr/yr)
S……………….664………………43%
PANW……… 3,230……….……53%
CRWD……….3,150…………….35%

And the year end 2023 quarter for each and adding ZS into the mix.

Company ARR ($M) % increase(yr/yr)
S……………….734………………37%
PANW……… 3,490…………….50%
CRWD……….3,440…………….34%
ZS …………….2,100………….…35%

And the March 2024 quarter results

Company ARR ($M) % increase(yr/yr)
S………….…….762………………35%
PANW……… 3,790…………….47%
CRWD……….3,650…………….33%
ZS …………….2,212………….…32%

Finally the June/July 2024 results

Company ARR ($M) % increase(yr/yr)
S………….…….806…………….32%
PANW……… 4,220………….….43%
CRWD……….3,860…………….32%
ZS …………….2,372………….…30%

Note: For ZS, I estimated ARR by multiplying revenues by 4 to get an annual number. Not sure if that is perfectly correct but the best I can think to do. It’s funny because they are the only one who doesn’t report ARR right up front. If someone sees it and it’s worth correcting, let me know.

Overall, it seems to be more of the same. PANW surpassed CRWD a few quarters ago as the biggest in ARR and are adding to their lead every quarter. Growth for all four is great but has been slowly dropping but PANW seems to be hanging on to its lead from a year over year growth rate as well.

And in this quarter, the qtr over qtr rates also favor PANW with a 11.3% rate vs 5.7% rate for CRWD, and for completeness, the q/q for S was 5.8% and 7.2% for ZS. Personally I don’t put as much weight in qtr over qtr since seasonal or one sale in or out can change the game.

Similar to last quarter, I will say it seems like an interesting decision by PANW to announce changes in their sales efforts to offer freemium packages to entice customers to buy multiple products a couple quarters ago. As explained by PANW, the margins for customers with multiple products are much better. The fact that they are taking these actions when their results seem to be fine is a good sign in my mind. You want a management that is looking forward, not reacting to the past. And now I can say, looking at the results (at least one qtr in) I hasn’t seemed to hurt the cloud based sales at all where they seem to be holding their own (at least!!) against the competition in terms of numbers. I guess we wait a couple more quarters (again) to see further.

As I said earlier, I will try to break out the Firewalled business in a separate note, but I will say that the economics of the company haven’t gotten any worse at all. Since this was 4th quarter, they reported Non-GAAP earnings up only 5%, but Operating margin up 320 basis points, and 2024 adjusted free cash flow up to 3.1 Billion dollars!!!

So there you have it. I never want to underestimate how the market reacts to a company as it is seldom wrong, especially over the long term, but it does seem like PANW was taken to the wood shed a little more than I would see as appropriate and has recovered a bit. It almost feels like ZS and CRWDs management hype is driving some of it, where as PANWs is a little more circumspect, although the numbers don’t really support the low key approach. And now CRWD has a bit of a hangover from their software update disaster. We will have to wait to see what if any long term effect there is from that.

As for PANW, if you are in for the long term, how much penalty do you attribute to a management that has a plan to improve margins even if there is a little short term pain. Especially when it is coming from a management that has consistently produced great results for years and appears to be winning the cloud business which is a land and expand industry at the moment.

Finally, this is a little bit of an embarrassment of riches. All of these companies are in an industry that is doing great and seems to have a bright future because it is hard for me to imagine a world where this doesn’t continue to grow in importance over time.

Me, I own shares in both CRWD and PANW and don’t plan on selling anytime soon.

What are your thoughts?
Randy
PANW Tickerguide and long PANW and CRWD

45 Likes

Thanks Randy - good job as ever. Agree on lack of ARR disclosure by ZS - they only seem to mention it at milestone moments and only then in approximation, however we do know that virtually their entire revenue is ARR.

Perhaps a better measure than QoQ ARR change would be to look at New ARR growth - but then that measure could be even more difficult to source or compute than ARR QoQ change.

Disappointed S lost its 2nd place lead in growth so quickly. I hold S, ZS and Crowdstrike. S now indicating an uplift in client enquiries post Crowdstrike’s escapade. ZS also generating a lot of client engagement from it but given their elongated consulting led sales process, it might take the longest to benefit if at all.

Ant

PS I haven’t gone through the details yet but looks like Fortinet was just hacked via their MS Sharepoint site. Can’t be good for either Fortinet’s reputation or Microsoft - although it never seems to matter for Microsoft they just keep on winning no matter how bloated their product or vulnerable their security.

17 Likes

So everyone knows, Sentinel One Achieved FedRAMP High Authorization for Singularity Platform and Singularity Data Lake today. This is a big development. They are also seeing their pipeline build, and having higher win rates. This is what many predicted after CRWD’s disaster, and would not have been reflected in recent earnings. Going forward, I think this is the quarter S has to shine. LONG CRWD, ZS, NET and S.

24 Likes

S has consistently underperformed on Fed than CRWD despite having FedRAMP Moderate auth for a long while.

Any boost from High auth (greater systems can be covered, esp operational servers and cloud services) will take months to engage with customers and then sell into extremely long sales cycles.

Q3 is the big Q for Fed sales per CRWD, so S is not likely to have bigger Fed contribs from this higher auth until the following Q3.

-muji

43 Likes

Something more positive and potentially imminent in financial impact is Lenovo’s deal with SentinelOne. SentinelOne shares ended up over 7% on this news. Lenovo represents a lot of endpoints!

SentinelOne’s (NYSE:S) deal with Lenovo to include SentinelOne’s software and generative artificial intelligence solutions on all new PC shipments could “meaningfully” contribute to the former’s top line in 12 months, Wells Fargo said on Tuesday.

“While it may take 12 months to have an impact, we believe this partnership should have a meaningful impact on SentinelOne’s ARR, given that Lenovo is the top PC manufacturer,” Wells Fargo analyst Andrew Nowinski wrote in an investor, noting that Dell’s (DELL) deal with CrowdStrike (CRWD) added $50M to CrowdStrike’s $3.4B in annual recurring revenue in its fourth quarter.

“If Lenovo can reach $50MM in 12 months, it would account for 5% of the estimated $1.01B the Street is estimating for SentinelOne,” Nowinski added. He has an Overweight rating and $30 price target on SentinelOne.

22 Likes

I doubt it will have much impact. People will be able to upgrade to SentinelOne if they choose. Mcafee comes on a lot of computers but most people use the free version of Microsoft that they do not have to pay for.

4 Likes

This made me realize I have not seen a Lenovo PC in years. In fact, I was just over at NewEgg and didn’t see one Lenovo at all on the sales page. How many PC’s/Laptops can they really be selling if there are none out there for gamers/home offices? My work is all Dell, so no Lenovo’s there either.

3 Likes

Personally, I would not consider another laptop brand from durability standpoint, which might be confirmed from you computer service company.

From a web search today

"The overall market leader in the global personal computer market in 2023 was Lenovo with a market share of 24.7 percent with HP Inc. in at second with a 21.9 percent share. In terms of unit shipments, Lenovo recorded 59.7 million, while HP Inc. had around 52.9 million. "
2024

Sounds like a good customer for S to get.

Graydrake

18 Likes

SentinelOne Takes Top Honors at 2024 SC Media Awards as AI-Powered Singularity Platform Wins Best Enterprise Security Solution and Best Endpoint Security Solution

9:00am ET, 09/18/2024 - Business Wire

Awards validate SentinelOne’s position as market-leader with superior technology

Sep. 18, 2024-- SentinelOne® (NYSE: S), a global leader in AI-powered security, announced that SentinelOne’s Singularity™ Platform won both the Best Enterprise Security Solution and the Best Endpoint Security Solution at the 2024 SC Media Awards.

“As one of the pioneers in applying AI to cybersecurity, SentinelOne has consistently pushed the boundaries of innovation to protect enterprises from today’s most complex and novel threats,” said Bryan Gale, Senior Vice President, Product Marketing, SentinelOne. “Over the last decade, we’ve evolved into a comprehensive, AI-driven security platform that empowers businesses to detect, defend, and respond to attacks with precision and speed beyond human capabilities. In an environment where cyber risks threaten every facet of operations, we’re proud to be recognized for delivering the solutions that keep organizations safe, resilient, and prepared for the future.”

Leading the Way in AI Security

SentinelOne introduced the first generative AI-powered platform for cybersecurity. The company broke new ground with Purple AI, a transformative AI security analyst, that customers are rapidly adopting. And the company continues to deliver new capabilities within the Singularity Platform designed to transform cybersecurity operations by combining the visibility of Singularity with the breadth and scale of the Singularity Data Lake and power of Purple AI to transform how security teams manage the complexity of their environments and defend threats.

“At SentinelOne, we’re not just keeping pace with cyber attackers, we’re looking to stay ahead of them by harnessing the power of generative AI to protect organizations worldwide,” Gale added. “These awards are a testament to the hard work and ingenuity of our teams as we continue to redefine what’s possible in cybersecurity and deliver world-class defense.”

The SC Awards were evaluated by a distinguished panel of judges, including cybersecurity professionals, industry leaders, and members of the CyberRisk Alliance community from sectors such as healthcare, financial services, education, and technology.

“These award recipients represent the very best of what the cybersecurity community has to offer,” said Tom Spring, Editorial Director at SC Media. “Each winner has shown a commitment to advancing the industry with forward-thinking solutions and an ability to adapt to new challenges. Their contributions help drive progress in securing our digital environments.”



I’d say that this press release speaks for itself.

Saul

25 Likes

After looking at the (cybersecurity-focused) SC magazine winners, it’s a rare year where CRWD didn’t walk away with any wins in the US awards – esp after their big sweep in SC’s EU Awards in June (winning best cloud sec, best endpoint, best security AI, best threat intel, best IR).

CrowdStrike was a finalist in Best Enterprise Security, Security Company, MDR, CWP, and CNAPP (not Endpoint).

The winners:

  • SentinelOne won best endpoint and enterprise security, as Saul shared [CRWD had best ent security last year, and won best endpoint in EU 2 mo ago]
  • Palo Alto Prisma Cloud won best CNAPP [CRWD won this in EU awards 2mo ago]
  • Sophos won best MDR [CRWD won best MDR last yr]
  • Abnormal (AI email security platform) won best security company

This is nice to have, but I see Forrester Wave and Gartner MagicQuandrant as more impactful industry minders to security tool decision-making. But does give S1 some gloating to do!

-muji

33 Likes

Do they detail any professional services revenue at all? Because that wouldn’t be added to ARR, since it’s a perpetual revenue by any accounting rule. Other than that, if they don’t have any other legacy revenue stream, I agree with this approximation, too.

1 Like

Those sales cycle are long, though. Do you think it will have an impact soon, even with CRWD apparent solid execution in the Federal Government space?

1 Like

Absolutely! I work at a SAAS company that deals with endpoints/end-user computing and Gartner Magic Quadrant first, and Forrester Wave second, are often the conversation starters, if your company have those honors.

11 Likes

For what it’s worth Sentinel just got a very high rating in End Point Security from Gartner too.

It’s also got a “Customer’s Choice” and is listed first (although I’m not sure what that means).
Saul

https://www.gartner.com/reviews/market/endpoint-protection-platforms

16 Likes

The listing order is by number of customer reviews (1704 for SentinelOne, 1696 for Trellix, etc.).

You can change the sort to be by Average Rating, and then skip the ones that have just a handfew or ratings to see Crowdstrike is tied #1 with 4.8 stars, with SentinelOne at 4.7 stars. Again, these are just responses from users on Gartner’s site.

The latest Gartner report I could find is from Dec last year:

Crowdstrike was #1, then Microsoft, then SentinelOne/TrendMicro.

It’ll be interesting to see if that changes on the next report.

20 Likes