Presentation. Oh, now he's recording it. There may be forward-looking statements, and they are provided safe harbor by the Securities Exchange Acts of the early 1900s. As with any forward-looking statement, there are risks and uncertainties. If you want an expansive list, please review our latest earnings release or 20-F. And with that, Gabriela or-
Max.
Max.
Folks, thanks for joining us at the Check Point session. I'm Gabriela Borges, Kip Meintzer to my left, Max Kamprad, my colleague, and we're excited to talk about Check Point.
I'm excited. I guess it's gonna be like a pong match here. I guess, like US Open, back and forth.
We'll be thoughtful about it.
Okay.
Okay. So here's where I wanted to start-
Okay
... which is you've been with Check Point for 16 years?
You say that like it's a bad thing.
Oh, it's absolutely a good thing-
Okay
Because you have a perspective that you can lend us on how the company's philosophy on growth and investment is changing.
Mm.
I say that in the context of you all having some of the best margins we see, not just in security, but across the software space. How would you compare and contrast the executive team's willingness to invest, or the trade-off between growth and investment today versus, let's say, five years, 10 years ago?
So I think it really comes to what's realistic and what the market really wants. If you look at five years ago, we were just beginning to get to the point of where we could deliver Infinity, which is our platform. Prior to that, we were in an environment where it kind of felt like a war. If you looked at our competitors and you looked at the marketplace, low to no interest rates really allowed people to spend like there was no tomorrow, right? All that, investors cared about was cash flow and revenue growth. They didn't care about profitability. They let people use stock-based compensation like it was popcorn. And, it's really hard to compete when you're in a market that way.
So, you know, we made a choice, and it was a conscious choice, and that was to focus on delivering the best technology. And it looks like today, you know, it gets validated because we built out Infinity. It took us some time to do it. It's a fully integrated solution. We continued to add more parts, like, you just saw our Perimeter 81 acquisition. And so I would say that the market, since the pandemic, seems ripe for what we have. And I think it gets validated because you see everybody else chasing us from a technology standpoint today. You know, you have people that have bought 19 different companies, what have you, deliver a bunch of disparate solutions, but they don't deliver integration, and most importantly, they don't deliver protection and prevention. Everybody's playing whack-a-mole. They're playing detection and remediation.
Everything they do is detection and remediation. All you have to do is look at some of the third-party tests to see what that looks like. So I can see why there's a big focus by our competitors all of a sudden, to care about security, because all they've cared about for 15+ years is sales and marketing. So now, when the market's receptive to what we have, now we'll start spending a little more sales and marketing. We've got a new commercial out there. I would say they're more... how shall I say it? Management wants to apply spend where it does its best, and we applied the spend building out a platform. Now we'll apply it in building a bigger business.
It leads nicely to a question about CFO priorities at different scales. You've had the experience of working both with Tal and now Roy.
Mm-hmm.
How would you compare-
You forgot I also had the very first one.
Oh, please. Yeah, of course.
Yeah. Yeah, all those for nine months.
Okay.
Yeah.
So, if you were to do the compare and contrast, how would you compare where Roy is focused today at the scale that Check Point is today, versus priorities in the prior five years?
Well, I think if you look at the prior five years, you have the pandemic, you have some things there that-
Fair enough, yeah.
... are probably a little bit unfair to, to compare up against, although he was here for a little over two of those years as head of finance, so he was part and parcel to that. I think if you go back a little further and you think about what we were doing, we were in investment mode. We were building out this platform. Hopefully, you know, we've tried several iterations on the, on the marketing and sales side, and I think now, where the market is and how receptive they are to a platform, I think Roei gets to spend a little more time in investing for growth than what we had in the past. And I think that's a collective effort by not only Roei, but by the board, by Gil.
You know, nothing, nothing is done with one. It's a group aspect. So I think, where we are in the marketplace and where we are with what we have to deliver from a platform perspective, and I think now is the time to, you know, put that exclamation point.
... The idea that, we've talked about this before, where the pendulum between consolidation and fragmentation and security depends on the macro environment, depends on the competitive landscape. It tends to ebb and flow. We're now talking about a period of time where a Check Point can press its advantages-
Mm-hmm.
Infinity platform. In that context, how do you think about prioritization, where you have a platform, you can take it in a lot of different directions, there are a lot of adjacencies. Where are you prioritizing your incremental dollars R&D and your incremental dollar sales and marketing?
Interesting. Well, you see from our latest acquisition, Perimeter 81, you know, we even though we had a SASE product, it wasn't where we wanted it to be. It was more of a time-to-market issue. So we bought Perimeter 81. That gives us a little bit of a jump start. We'll sell it, once, once we get it acquired, right? It should close at the end of this month. But you can assume we'll sell it, and then we'll also be integrating it fully within the platform. And I think that's our strength. When you look out there, nobody has anything that's integrated. So what we'll be selling as a separate solution will be on par with what everybody else is selling as far as integration-wise. But once we get it integrated, it'll take it to the next level.
So I think right now, I don't think we starve any part of the beast. I think we're very good at taking incremental dollars and adding value where we see the opportunity, whether it be like we did at the end of last year with the release of Titan. We added SD-WAN, we added IoT protections, DNS, et cetera, into the native platform. So we don't—I don't think we sacrifice any place. I think we find value that our customers will find value in our platform. And so, I don't think that's ever stopped. I think that's how we delivered the protection and prevention levels that we have in this marketplace today, so.
So if I connect the dots between some of the themes you're talking about, it sounds like through Check Point's perspective, the competitive landscape is actually getting easier. Is that a fair statement or am I overstating it?
It's probably me sounding a little more rosy than I should. Let's face it, it's still a battle every day. Our competitors are still, you know, claiming they do something they don't, and they, they spend a lot of money on sales and marketing trying to create a reality out of that. And they've got a ways before they can turn slideware into reality. So I would say it's more hopeful right now. Hopefully, we start to see customers make better decisions with their money. I think the pandemic and the ripping off of the Band-Aid with SolarWinds, Log4j, the Exchange hacks, and everything else that you saw occur probably brought a new sense of reality to this world, that just because somebody says they have the best single product doesn't mean they have what's best for you.
I mean, integration is key if you want to be successful in security. It's the only way to deliver prevention. Otherwise, everybody else would have the, the levels of protection and prevention like we have. Like you saw earlier this year from MITRE, we delivered 99.7% efficacy on advanced network protection—network security prevention, and our nearest competitors were 70% and 48%. So if it was easy to do, I'm sure everybody would be doing it. And so, that's where I think we really stake our claim, and I think that's what matters for the future, because I don't think anybody's looking for 48%.
Okay. One of the most interesting-
Max!
Yes.
Max, what do you have for me?
I think one of the most interesting things on your last earnings call was Gil's comment of signs of life at the top of the pipeline. Would love to have more color there. What metrics are improving?
You're always digging deep for the stuff I can't give you. I would just say this: we've seen deals slip in every quarter, right? Delays is what I would characterize them as. I think the exciting is when you start to see deals turn into something bigger than they may have been before. Like we've seen Infinity, a deal that's smaller turn into an Infinity deal. Excuse me, which underscores, you know, what we're doing, right? We're trying to provide that extensible platform for people to take and deliver prevention and protection across their whole organization. We saw an 8-figure Infinity deal in the last quarter. So you know, for us, these are signs that are very very nice to see, and I think you got...
You wouldn't be giving me this question if you didn't see the enthusiasm that Gil was showing. So, it's definitely there. It's just nice. It's nice to see something start to work, when everybody's told you, "Oh, nobody wants that." Right? So I'm sure you guys remember, like, five years ago, when somebody said, "Nobody wants a platform. It's all about point solutions. You know, you got to have best-in-breed point solutions." I mean, everybody, I mean, every analyst out there. Were you covering me in five years ago? You were, weren't you? I won't say it was you, but you might have said it also. And look, you know, the wind was blowing that way, right? That was all appearances. We made a choice when we started building Infinity, you know, what, 2012?...
We made a choice, and it was a commitment, it was a strategy. And so we achieved it, and sometimes you're early, and now the market's coming our way. So I think all of these things are benefiting us, and I think that enthusiasm is what you saw, you know, Gil alluding to.
Mm-hmm. Yeah.
You also saw the productivity in the sales force from the first quarter to the second quarter, right? I believe, if I remember right, he said a 60% improvement in, what rate was it? The engagement rate. So these are all good things.
Yeah. I also wanna ask about supply. How have industry-wide supply constraints impacted Check Point's market share?
One question first.
Yeah.
Are you gonna be pawning off your security? Is that why you have Max up here?
It's a, it's a team effort. Max is a little bit in the weeds today.
All right, all right.
Yeah.
He's too far in the weeds. That was just me. I just had one of my analysts call me and say he was gonna take all the software, and his associate-
I-
was taking all the security.
I think Max and I both love security-
Okay
Too much for that.
Okay, okay.
Yeah.
So your question is about supply chain constraints. So we didn't have the same problem. Sorry, guys. That's bad of me. We didn't have the same problems that our competitors had. And I think a lot of it had to do with we don't have customized hardware. We also have an ability to go out into the open market and get much of the parts that we have. We're an x86-based system. So what we would do is we would get the shortages from our ODM, and then we had our own purchasing people go out and acquire these products. And we paid a little more. That's why our margins went down. If you go back in time, it went down three or four points on the product side.
So we did have that hit, but the furthest we were out was two to three weeks. So if you were ordering towards the end of the quarter, you weren't gonna get it till the next quarter. So that was the worst we had on the supply chain side, and you can see over the last several quarters, we've actually started to see improvement on the gross margin side, and that's because there's becoming more of a rationalization on the supply chain side. In fact, some folks probably got stuck with too much stuff. So-
Yeah.
Go on.
Moving out of this period, what's your longer-term outlook on the growth of the appliance-based firewall market? Do you expect this market to grow? And how do you view the risks of proxy technologies and virtual machines eating into this market?
Oh, man, you're killing me. He really is in the weeds, isn't he? Oh, man! So let's start off with your first question on the firewall side. So I'm not sure it's shrinking, but let's just say it's probably not growing as fast as it used to. But at the same aspect, when we deliver Infinity, we're usually displacing a secondary firewall vendor. So I think there is potential for us to grow as we start to remove the other vendors out of organizations. So if you believe, like we do, that Infinity is a competitive advantage, we go from being... And we've seen this happen already. It's been going on for a number of years, especially, I think it started with Maestro, actually giving us an inroad into being able to spread out further inside organizations.
Now, it's not happening at a mass amount yet, so you're not seeing it, you know, show up in that way. But I think in the future, if things can go the way that Infinity appears to be going, if that accelerates, then that becomes an opportunity. But on the proxy technology side and all that, I'll have to pass on that one. I don't have a real good answer for you.
Well, I think it leads to an interesting conversation about how you think about market share displacements, because you made an interesting comment there, that you displace secondary firewall vendors with the rollout of Infinity. So help us understand, your product appliance growth today, or even more holistically, the growth that you're seeing today, how much of that is cross-sell into the installed base, which is greenfield, versus displacement of vendors, whether it's point products or core network security vendors that sit alongside you?
Mm.
How do you track that? How do you measure it? Or, is it not the right question to be asking?
We don't provide the metric, but I will say that when it comes to Infinity, sometimes it's going to be a company that doesn't have the products, the additional products, that we're, you know, throwing into the mix. And in other cases, there's vendors that are losing, that are being removed. Particularly when it's hardware, when somebody is taking our Total Infinity or taking Quantum with CloudGuard or Quantum with Harmony, then it doesn't make sense for them to do anything else but get rid of the secondary vendor. And understand, no matter what in this world somebody's going to tell you, displacement of the secondary vendor doesn't happen overnight. Companies aren't in the mood to lose money, so what they usually do is they slowly get rid of the secondary vendor.
So when it's time to refresh those appliances, they jettison them, and they add the new boxes. And that's generally- generally, it occurs over a two- three-year period, sometimes even longer. So, you know, rip and replace isn't a reality, unless maybe coming up with the SEC regs for material breaches and then reporting in the 10-K. I could see where, you know, boards might say, "Just get that stuff out of here if it's causing us a problem."... and given the levels of protection and prevention my competitors provide, I think there's a good opportunity, you know, something like that could happen. I mean, you see it happen with material weaknesses from a financial standpoint. Usually, it's the CFO that's gone or somebody like that. But I definitely think the seriousness around security has definitely changed.
So, Max and I have been having this debate on the changes in SEC regulations. Help put it, help us put that in context, because we've seen other catalysts in security before, GDPR comes to mind, where there's a lot of excitement about it, and then ultimately, the benefit was maybe a continuation of a trend rather than a step function change. Based on what your customers are telling you and what you know about the way regulations are changing, do you think that the most recent set of changes in the SEC regulations can catalyze a more material shift?
I don't want to have my optimism overshadow reality, so I'll say I'm hopeful.
Fair.
I am definitely hopeful.
Okay.
But like with any regulation you see, we'll have to see how it gets implemented.
Okay.
Right? We've seen the guidelines. They were implemented or put out there in July. Everybody has an opinion. All of the leading legal firms have put out their little diatribes on it. I think it's gonna remain to be seen. The one thing I am for sure of is that boards care about their reputations, and companies care about their reputations. And if you have any financial services aspect or data aspect to your business, and you're putting out there every time you get materially breached, you're putting out an 8-K, or you're putting this in your 10-K in an expansive view to talk about it and discuss it, I can't imagine boards are gonna be too happy because that's their reputation. They're running that... You know, they are the overseers of that company. And so I think reputation has a lot to do with it.
So we can hope. I mean, we all hope people do the right thing.
Right.
You know, taking shortcuts and dealing with technologies that only provide, you know, detection and remediation, that's not the way forward. I mean, you really have to deliver protection and prevention if you want to say you're doing security.
I wanna shift the discussion over to the product side, and I wanna focus on both SASE and cloud. Perhaps first on SASE. We already talked a little bit about Perimeter 81. Check Point also has a new SD-WAN product that was released recently.
Mm-hmm.
Where are we in the SASE product cycle, both from a Check Point building out all of the pieces of it and from an industry willingness to invest standpoint?
Good question. If you look at how small the market for SASE is right now, I mean, in the scheme of things, I mean, I think the largest player has maybe 8,000 or 10,000 customers. I think it kind of puts it into perspective because last time I looked, we have over 100,000 customers. Some of my competitors have several 100,000, most of them smaller, and one is not quite to 100,000. So that's a lot of folks and a lot of opportunity. And so I think somebody threw around a ridiculous number of, like, it's a $20 billion industry or opportunity. And I always look at those kind of numbers, and I shake my head because reality is, if everybody remained a standalone point solution, probably.
But the future is a consolidated platform, and that's not the way the value proposition works. You get more for less. I mean, that's how my, my competitors sell their products, right? They give multiple years and give you a one year for free or something. So I think they already know how that works. So when you look at it as a platform, it's got the same principle. You know, you're selling a lot of products, and they get a discount. And, and that's what happens when you go with one vendor, the power of the, of the platform.
So it sounds like there are two countervailing forces. The first is more penetration, SASE still being early on, but the second is, as you get into later stages of maturity, you see more consolidation, and that maybe is, manifests itself as either pricing pressure or, wallet share consolidation.
Well, I think it's just the natural evolution of consolidation of platform-
Sure
... right? I mean, have you ever seen anybody's TAM come true? I mean, the only way you can create a TAM is by adding up all of the opportunities you see in front of you, and that's created by the individual players, right? And then you add your extra on top. It's not realistic. It's almost disingenuous. It's a 30-year-old industry. I mean, we've been in this industry since the beginning, 30 years, and reality is, it shrinks. As you deliver more value, you're delivering more value, so they get more for their money, and that's what a platform does. Unless you corner the market and have the only thing in town, but, you know, I don't think we're there yet.
So-
I'd like to believe it is with our protection and prevention, but unfortunately, not yet.
Similar question on your set of cloud products, where I think there are some parallels. There are a fair number of point products. There are different pieces of the portfolio of being built out, whether it's cloud security, posture management, or workload protection, DevSecOps. How do you see the cloud piece of the portfolio evolving? And welcome your comments on competitor environment and cloud.
So I think it's interesting about the cloud is, you have companies that are cloud-first, and they tend to go with startups. You know, Wix comes to mind off the top of my head. They tend to go all in on that, on that side. I think your more mature-level companies that are looking to go with a platform, I think that's where it becomes: Look, I have that continuous management. I have policies that I can carry over. I can do this from one management console, one platform. And, you know, it comes back to something else, is when you're dealing with one vendor and you have a platform, it also is more efficient, right? Like, when you do Infinity, you're paying per seat, and you're writing us one check. You get one invoice.
You get to use the technology as you wish, and I think that has a very compelling nature to it, instead of being nickeled and dimed and everything else along that line. So, when it comes to the cloud, I think more mature companies will start going with the, you know, their platform they choose or the provider they choose, no matter where it be today or down the road. But I think in the immediate, you know, people are picking still best of breed. I don't wanna make it sound like everybody's chosen to move to a platform. By no means is that the case, right? It just seems that that is the evolution of what's going on, and people are in different stages of where they're going to be.
I think if you look forward five years, I think you're gonna have a lot more platform revenue than you do today. Much more.
The platform piece of this leads to a question about Microsoft as a competitor.
Mm-hmm.
Where do you think they will be strong versus where do you think the independence and best-of-breed nature of a platform like Check Point will be strong?
Interesting. So I think from a Microsoft perspective, I think they're very complementary to what we do. I think it's the same way with AWS or even a GCP. There are offerings they have. That's what cloud posture management is all about. It's about, you know, taking that native security and making sure that across accounts you have consistency, you don't have holes, you're not, you know, you're not naked to the world and, and having your data subjected to you know, being put out there in the public all the time. So I think there's a place for them. I don't think they're going to come in and displace us in the enterprise. I think what they do will have an offering. I don't quite understand how the SD-WAN piece from a SASE...
I can see the SD-WAN, but I can't see the SASE or the SSE part. Because what you want is enterprise-grade security, and you wanna have that consistency of policy, whereas if you were to opt, you're gonna be fragmented again. And so the delivery mechanism, the SD-WAN part of it, maybe there's a way for that to work, but the SSE part, I think, is the more difficult part.
Because the SSE policy needs to be consistent with core network security and-
Exactly.
- cloud.
You, and you want the unification. You want the checks and balances. When you start out with something that's disparate, there's always the chance that you won't have consistency.
That makes sense. All right, I'm going to pause and go to questions from the audience.
I'm in rare form, guys. Come on.
All right, Max, let's go to market.
Okay, let's do it. You grew your sales headcount by about 15% last year. How do you feel about the ramp of these employees? And then, can you tell us a little bit about your hiring expectations into the second half of the year and also into next year?
So for starters, I'm glad you got that 15% right. Most people seem to only remember the 25% goal we had. So, the productivity, I think Gil called that out. We saw a nice change between the first quarter and the second quarter, and I think those expectations hopefully are gonna become even better going forward. As far as where are we on the hiring front, well, we're doing the acquisition of P81, and, excuse me, with them, they had a direct sales force. They didn't use the channel, so we have a fair amount of salespeople coming over. We've also... They've continued to hire. If you go out there and look on the job board, P81 continues to hire, and we continue to hire ourselves.
I wouldn't say we're at an accelerated pace, especially now that we've acquired P81, or in the process of acquiring P81. But I think stay tuned for next year. It depends on how the year finishes and what budgeting for next year looks like. We'd love to, you know, add more sales force like we did last year, but we wanna see a reason to do it, so time will tell.
It's been some time since you've given disclosures on direct versus channel sales. Would you be able to give that split to us?
Everything's indirect. So we have a direct sales force, but everything is a meet-in-the-channel model, and so that'll even be going forward with Perimeter 81. So once they roll over, all that'll go into the channel, and it's a meet-in-the-channel model. We don't do anything direct.
... Got it. Yep.
I want to stay on some of the comments that you're making on investment into next year.
Mm-hmm.
I want to clarify. The productivity improvement that you saw in 2Q versus 1Q, what were the drivers of that?
I'd love to say it was a great talk or, you know, a beautiful email or something along those lines, but I couldn't attribute it to any one thing. All I can tell you is that we saw Sales force engagement improve. I think Gil called out 60%. You're the man with all the numbers, Max.
Yeah, I think so.
Yeah. Okay. So I believe he said it was a 60% improvement, and we looked for further improvement. Investments in the next year, let me qualify something. We haven't even begun our budgeting process for next year. And so what I can tell you is we-- I'd love to see more sales force, but obviously, you have to see if the, the business supports it.
Right.
So once we get budgeting and get that all solidified, when we give guidance, you know, for next year, whether it be the quarter or the full year or both, we'll probably go into more color there. But right now, I couldn't give any indication other than what my hope is.
If I were to be hopeful and optimistic about the continuation of increased productivity as a trend, do you think there is a scenario where you can get to 10% revenue growth and a margin expansion in 2024?
Well, I'd say from your lips to God's ears, but, the reality is, we have a goal of hitting double-digit revenue growth, and we've had that goal for some time. So much so that some people probably get tired of me saying it. But last year, we got to, what? 8% revenue growth. Macro stepped in and impacted that, I think, at the end of the year. We're hopeful that we can get there, and we think we have the products, we think we have the platform. We definitely know we have the right security level of protection and prevention. I think everybody's chasing that. And so hopefully, customers will start chasing it a little more.
Good stuff. Let's leave it there. Kip, thank you, and thank you all for joining us in the room.
Thank you, guys.