Good day, everyone, and welcome to the Palo Alto Networks Fiscal Third Quarter 2018 Earnings Conference Call. Today's conference is being recorded. At this time, I'd like to turn the conference to Amber Osman, Director of Investor Relations. Please go ahead, ma'am.
Good morning, and thank you for joining us on today's conference call to discuss Palo Alto Networks' fiscal third quarter 2018 financial results. This call is being broadcast live over the web and can be accessed on the Investors section of our website at investors. Paloaltonetworks.com. With me on today's call are Mark McLaughlin, our Chairman and Chief Executive Officer Kathy Banano, our Chief Financial Officer Mark Anderson, our President and Nikesh Arora, Palo Alto Networks newly appointed Chief Executive Officer. This morning, we issued a press release announcing our results for the fiscal third quarter ended April 30, 2018.
If you would like a copy of the release, you can access it online on our website. We would like to remind you that during the course of this conference call management will make forward looking statements, including statements regarding our financial guidance and modeling points for the fiscal fourth quarter full fiscal year 2018. Our competitive position and the demand and market opportunity for our products and subscriptions, benefits and timing of new products and subscription offerings, and trends in certain financial results, operating metrics, mix shifts and seasonality. These forward looking statements involve a number of risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. These forward looking statements apply as of today, and you should not rely on them as representing our views in the future, and we undertake no obligation to update these statements after this call.
For a more detailed description of factors that could cause actual results to differ, please refer to our quarterly report Form 10 Q filed with the SEC on February 27, 2018, and our earnings release posted a few minutes ago on our website and filed with the SEC on Form 8 K. Also, please note that certain financial measures we use on this call are expressed on a non GAAP basis, and have been adjusted to exclude certain charges. For historical periods, we've provided reconciliations of these non GAAP financial measures to GAAP financial measures the supplemental financial information that can be found in the Investors section of our website located at investors. Paloaltonetworks.com. We would also like to inform you that we will be participating in the Bank of America 2018 Global Technology Conference on Wednesday, June 6, in San Francisco and the 2018 William Blair's Growth Stock Conference on Wednesday, June 13th in Chicago.
And finally, once we have completed our formal remarks, we will be posting them to our Investor Relations website under quarterly results. And with that, I will turn the call over to Mark.
Thank you, Amber, and thank you everyone for joining us this morning for our fiscal third quarter 2018 results. Before getting to the results for the quarter, I'd like to start by welcoming Nikesh who will succeed me as Chairman and CEO of the company this I've been working with the Board of Directors over the past several quarters on a succession plan after having had the incredible privilege of leading the team here for nearly 7 years. I'm immensely proud of all the team has accomplished that time and the company is on a very strong footing and well positioned for the future. Indicash, we found a leader who is ideally suited to take the company on the next leg of its journey of rapid market share gains with our security operating platform. His experience at Google is the Chief Business Officer as well as his experience as the President of Softbank brings demonstrated abilities to scale at rapid rates and run very large and fast growing global organizations.
I'll be working with Nikesh over the coming months to assist in the transition and I'll remain with the company as Vice Chairman of the Board of Directors, supporting the cash and the team with our mission of protecting our way of life and digital age. Welcome to the need team to cash and congratulations.
Thanks, Mark. This is Dave Minas 2 for me on the job. So all I can talk about are my impressions. I've had the pleasure and privilege of getting to know the Palo Alto team, the board and the company over the last few months. The more time I spent, the more excited I get about this space, by the company and the people.
It's clear to me that we're still in the very early stages of the cloud revolution for enterprises. I was fortunate enough to see it early at Google participating in the growth and scaling there. I think we have a very, very similar opportunity here. I think cybersecurity is one of the most exciting spaces out there. For me, even more exciting is to be able to see firsthand what near you and the team here have built.
This company for me is truly unique. Your growth is testament to the quality of the offering, your customer centricity as well as the execution capability that you have built over the last 7 years. For me, great companies are built by collecting great people, motivating them towards a common mission with the right set of values. And it's evident to me that the members of Palo Alto Networks team are those people. I couldn't be more excited and honored to become part of the Palo Alto Networks team and work with the leadership to continue to build on the good work that you have done and cement the company's position as a leader in the security space.
Thanks for that, Kashy. Welcome again. With that, let's turn to percent to $567,100,000. Billings were up 33% to $721,000,000. Non GAAP operating margin was 20 security operating platform due to the ever accelerating and rapidly evolving threat landscape and the resulting significant consequences to businesses that lose the trust of their customers.
As our results show, our competitive advantage is increasingly evident. The ecosystem leverage of our platform is growing rapidly and we continue to capture market and are pleased to now serve approximately 50 1000 customers around the world. In addition to robust new customer acquisition, we also continue to rapidly increase our wallet share and existing customers. Our top 25 customers, all of which may have purchased this quarter, spent a minimum of $28,700,000 in lifetime value in Q3, a 43% increase over the $20,100,000 in Q3 of fiscal 2017. Some examples of customer wins and competitive displacements in the quarter include beating Cisco to become the security standard in both a global leader in the hospitality and entertainment industry as well as a leading cloud based provider of benefits and HR solutions.
A checkpoint replacement in the data center of 1 of EMEA's largest defense system manufacturers and a competitive win against both checkpoint and Cisco to become the public cloud security standard for 1 of the largest U. S. Healthcare providers. Also competitive wins against Symantec to become the endpoint security vendor on tens of thousands of workstations to secure a U. S.
Statewide education system, as well as Zscaler with our new GlobalProtect cloud service to secure more than 1500 stores of a large U. S. Based retailer. Customer and prospect interest and engagement in our security operating platform is very high. We are pleased to host a record crowd of over 4000 customers and partners recently at our annual Ignite user conference in Anaheim.
At Ignite, we showcased a continued strong momentum around our platform capabilities, including the 3rd evolution, which is the Application Framework. The Application Framework fundamentally changes the entire consumption model and security, and we were delighted to have over 30 companies such as Microsoft, ServiceNow and Proofpoint as well as leading, highly innovative startups like Phantom, which Splunk just acquired, preview their applications. The application framework marries security innovation and ease of consumption, which is a compelling value proposition for our customer base and is helping to drive purchases of the foundational element of our security operating platform in the network on endpoints and in the cloud. In the network, the introduction of PAN OS8.1 in addition to the new hardware delivered over the past 15 months, including the most recent PA 3200 series, the PA 5180 and the ruggedized PA220 allows us to reach new customers, while driving expansion sales and opening new use cases and existing customers. These appliances offer customers increased SSL decryption capabilities, higher performance and capacity and superior price performance.
And they serve as critical sensors for log collection and enforcement points for the application framework. And on endpoints, we pleased to announce the release of Traps version 5.0 in March, which brings a new level of functionality to our advanced endpoint protection offering. Customers can now utilize our cloud delivered management service, which allows for easier deployment and day to day management. Also, with the addition of Linux support, Traps now plays a major role in securing cloud applications. We continue to see strong momentum with Traps and are receiving market validation as a leading endpoint security vendor.
In April, NSS Labs independent evaluation of advanced endpoint protection offerings traps garnered a recommended rating. The report evaluated 20 different vendors looking specifically for protection against a variety of malware exploits blended threats and evasions. Traps blocked 100 percent of evasions and exploits with 0 false positives. And the report identified Traps having the most favorable rating when weighing overall effectiveness and total cost of ownership. We also announced the acquisition of Secdue in April, Sectu brings leading endpoint detection and response capabilities to traps.
Sectu's unique, thread level approach to data collection and visualization goes beyond traditional EDR methods and will also feed into our logging service, giving applications running in the application framework greater precision to detect and stop cyber attacks across our entire platform. For cloud security, we have shown that you must protect all applications and all platforms through the combination of inline, host and API based security, which we do through our VM series, Traps and aperture offerings. And we were excited in the quarter to acquire Evident IO, a leader in public cloud infrastructure security. With Evident, we now provide continuous monitoring of public cloud deployments cloud storage protection, and compliance validation and reporting. Customers can now better understand how applications are being deployed and used in their cloud environments, produce detailed compliance reporting and achieve an overall superior security posture for cloud deployments.
We will also be able to leverage consistent monitoring to enhance the effectiveness of other applications in the application framework. We've seen very good traction already with Evident both in terms of customer interest and pipeline. Are helping our customers solve their most pressing security needs and drive digital transformation through security transformation. As we head into the end of our fiscal 2018, we're excited about the significant and growing total addressable market for security, our leading position in the market and the growing competitive advantages we are driving through security operating platforms. I want to once again thank our team and partners for their ongoing hard work and dedication to our mission for a technical way of life in the digital age, and our customers who place their trust in us every day.
And with that, I'll turn the call over to Kathy. Kathy?
Thank you, Mark, and welcome Nikesh. Before I start, I'd like to note that except for revenue and billings, all financial figures are non GAAP and growth rates are compared to the prior year periods. Unless stated otherwise. In the third quarter, we drove robust top line growth with both new and existing customers adopting offerings across the full breadth of our security operating platform. We once again delivered market leading revenue growth in combination with year over year operating And as we look to the remainder of fiscal 2018, we are well positioned to deliver a strong finish to the year.
In Q3 twenty eighteen, total revenue grew 31 percent to $567,100,000, By geography, Q3 revenue grew 29% in the Americas, 35% in EMEA, and 37% in APAC. Q3 product revenue of $215,200,000 grew 31% compared to the prior year. Q3 SaaS based subscription revenue of 192 $500,000 increased 38 percent. Support revenue of $159,400,000 increased 25% In total, subscription and support revenue of $351,900,000 increased 32% year over year and accounted for 62 percent share of total revenue. Turning to billings, Q3 total billings of $721,000,000 increased 33 percent.
The recently announced acquisitions were not material for revenue and billings in the an increase of 34%. Gross margin was 76.2%, a decline of 20 basis points compared to last year. Q3 operating expenses were $316,600,000 or 55.9 percent of revenue, which is a 210 basis point improvement year over year, driven primarily by ongoing increasing leverage in sales and marketing. Operating margin was 20.3 percent, an increase of 190 basis points year over year and includes approximately $3,000,000 of operating expense related to M And A. We ended the third quarter at 5121 employees.
Non GAAP net income for the $1,000,000 or $0.99 per diluted share. On a GAAP basis for the 3rd quarter, net loss declined 23 percent to $46,700,000 or $0.51 per basic and diluted share. This includes a loss of $23,800,000 due to updated sublease estimates associated with the company's former headquarters $13,300,000 in acquisition related expenses. Turning to cash flows and balance sheet items. We finished April with cash, cash equivalents and investments of $2,200,000,000, which takes into account approximately 3.75 $1,000,000 of cash consideration for acquisitions of $241,300,000 increased 14%.
Free cash flow was $212,500,000, up 31% and a margin of 37.5 percent. These numbers include approximately $10,600,000 of operating cash outflow related to M And A for acquisition related costs and ongoing operating expenses Capital expenditures in the quarter were $28,800,000 DSO was 58 days a decline of 20 Please remember this guidance includes the type of forward looking information that Amber referred to earlier. For fiscal Q4 2018, We expect revenue to be in the range of $6.25 to $635,000,000, an increase of 23% to 25% year over year. Product revenue to be in the range of $246,000,000 to $249,000,000 an increase 16% to 17% year over year. Billings to be in the range of $8.15 to $830,000,000 an increase of 22 percent to 24 percent year over year.
We plan to invest between $10,000,000 to $12,000,000 or $0.08 to $0.10 per share related to our recent acquisitions. With this investment, we expect 4th quarter non GAAP EPS dollars using approximately 97,000,000 to 99,000,000 shares. For the full year fiscal 2018, we expect revenue to be in the range of $2,240,000,000 of 27% to 28% year over year. Product revenue to be in the range of $850,000,000 to $853,000,000 representing growth of approximately 20% year over to $2,822,000,000, representing growth between 22% and 23% year over year. Non GAAP EPS to be in This includes our acquisition related investments in the 4th quarter.
And we continue to expect capital expenditures to be approximately $100,000,000. Before I conclude, I'd like to provide some additional modeling Our non GAAP EPS guidance includes the impact of our recent acquisitions and assumes that we will be at the lower end of our gross margin range. Our Q4 non 20 dollars, which includes approximately $30,000,000 of cash expenditures associated with acquisitions. Excluding the acquisitions, we expect full year fiscal 2018 free cash flow margin of between 40% to 41%. With that, I'd like to open the
the question and answer session will be
questions.
Our first question will come from Keith Weiss with Morgan Stanley.
Excellent. Thank you guys. Very nice quarter. Mark, it's been a pleasure working with you and I'm sorry to see you go, but it does seem like you guys got a really solid replacement in Nikesh and welcome on board. I guess a high level question on the performance in the quarter.
31% product growth is something we haven't seen from Palo Alto in a while, but even more so, something we're not really seeing across the board in terms of your peers, who seem to be struggling to sort of sustain any really type of growth in their core markets.
Can you talk to us a little
bit about, sort of what's kind of creating that separation between you and your peers and how durable you think that is on a going forward basis? And to what degree the messaging around security operating platform is playing into that separation?
Sure. Thanks Keith and thanks for the kind words. I appreciate that. The, well, as you can see, the product growth is very strong, platform growth very strong. And I think it's really important for us to understand inside the company, outside the company as well.
The whole concept of security operating platform is resonating very well. As we've talked about before with the 3 evolutions with the application framework being the third one right now, the customers we speak with, the prospects we speak with, all most unanimously across the board really resonate with that. It's an answer to significant significant problem about how do you get more automation and how do you get less complexity in their environments. They like it a lot. Now they realize as well that in order do that or achieve the most value from that, it will become increasingly important that they in essence standardize on Palo Alto Networks and all the positions for data sensors and enforcement points, which is in the network on the endpoint and in the cloud.
And of course, we need to every single day of the week be the very best at all those positions as well. And I'll call it standalone basis, which we're very confident in. You can see that from the release of the hardware, the operating system releases the new version of Traps. The Evident acquisition things we're doing in every one of the physicians to make sure we win head to head pay costs. But I would say that it seems that to me, and I think the team here spends a lot of time with customers, The concept of the application framework, the 3rd evolution in getting consistency across the entire platform is working very well and driving purchases of all the underlying aspects.
Got it. And if I could sneak in one follow-up. In the cash flow, definitely has a great background as a leader, not a traditional security pick. Maybe, Mark, as your new position is by Chairman of Board. You can give us some visibility into how the Board got comfort in sort of having a non traditional security leader be the leading up what is still very much a security focused company.
Sure. And security will continue to be our focus. So let me be clear about that. And thanks for the question. The yes, as I was talking with the board of last several quarters about succession planning.
It's been amazing to run the company for the past 7 years or so. So we would want to make a change at the right time. There is no no hurry for this. It was basically saying if we found the right person at the right time, we would do it. That had us thinking of course about what does the future look when we look at the company, we have 5000 plus security professionals companies in the best in the world, starting with Near and Lee and Other folks in the team, we have some of the best operating executives in the Renee and Mark Anderson and folks who are very committed to the company, which is fantastic.
So security is something we know genetically and from a DNA perspective. So we start to think about where the company is going to look like in 5 years from today. I would I would partner to say that it's more of the security operating platform I just laid out. It's got a lot to do with massive datasets with analytics. With the infrastructure required to support those.
The cloud SaaS, it's very clear that the securities head in that direction that we're forcing it in that direction. As a company. So that really informed our pick for the succession planning, which would be a great accomplished business leader, somebody who's a culturally great fit. Then somebody also has experienced ideally with large scale platforms that have those kind of characteristics. So there's not a lot of those platforms in the world.
There's a lot of people who have that kind of experience. We're fortunate to find a cash and spend the last few months with them to make sure that we had alignment across all those variables I just laid out. So that was really the thought process.
Our next question will come from Phil Winslow with Wells Fargo.
Hey, thanks guys for taking my question and Mark, my congrats again for or move up to Vice Chairman. I haven't noticed since back at VeriSign, you've not only been a super impressive executive, but a real gentleman. So, it's been fun and congrats on your, here we roll.
Thank you, Phil. I'll try to continue to be a gentleman.
Or at least you pulled it off well. So. All right. But the, yes, just a question on the quarter. I mean, obviously, you noted several competitive displacements of wins sort of across the portfolio.
When you think about just the competitive environment out there, particularly from a pricing perspective, there's been a lot of conversation about that. Just sort of what have you seeing out there? Any changes that you highlight sort of across the platform?
Yes, sure. Let me take that first. And I think Mark probably had some good commentary as well, expenses in Massimo time in the field of the customers. What we're seeing from a pricing perspective is no change in the sense of it's a very competitive market. The competition always been competitive in pricing.
I think they increasingly go to the price card out of desperation in a lot of cases and what we've seen in our businesses being able to sell value first the security operating platform as being very unique. Nobody can match that. And the 3rd in doing that and perhaps interestingly as we We've done a very nice job discipline wise by having discounting improve quarter over quarter improved again sequentially and year over year. So in the face of all that strong competitive pricing pressure, we continue to build on the value of the platform, the market. Yes.
Hey, Bill, it's Mark Anderson here. So with the last 18 months, of product announcements, the hundreds of features that we brought into the platforms that we've, the hardware platforms that we've replaced. So I think price performance wise, we've got very compelling offers there. But, but I think most importantly, when customers get a sense for where we're taking security with the the 3rd evolution, the application framework. I think the kind of future proof nature of us being able to help them distill security innovation into consumable form factors on the Palo Alto Networks kit, I think, is a very compelling value proposition.
And I think that's something that every customer I talk to takes into consideration when they're making a decision for paying 2 or 3 times for Palo Alto Networks, what our desperate competitors are charging for their stuff.
Got it.
And just actually a follow-up on the app framework for my next question here. I'm wondering if you could give us sort of, I guess, a grade of sort of where you stand so far in the development, what milestones should we from the outside looking in, point toward, for sort of success there?
Yes, that's a great question, Phil. So first, let me start with where it is. The application framework is very, very real today. We announced it about a year ago and over the course of made a lot of progress on a number of things. 1 is making sure that from an app framework perspective, the third parties can right, absolutely easily into the framework.
The second thing was the development release and so far very successful launch of a logging service which allows all the data to be collected there. We just had a night user conference last week and we had 4000 folks there. And there were so 30 companies who are previewing their applications, which was fantastic right there on the demo for, we really, really liked that. The customer saw not only for applications, but also workflow between the applications as well. And we highlighted the number of
them, the
number of them on stage, just give a sense of that. We also announced that the application framework will be production ready in August. So very soon, we'll be able to actually use that with customers. So lots of lots of good traction. I would say, and people have asked me this before, how do you think about it in the future?
It's a definition of success in the application framework, which you're driving towards would be. There'll be a lot of applications in that framework. And I think somebody said one time that a real platform successful when there's more value driven across the top of the platform than the platform itself. So we would expect it over time. Customers will get a lot of value from the applications running on top of the framework
We'll go next to Matt Hedberg with RBC Capital Markets.
Hey guys, thanks for taking my questions. I'll offer my congrats to you, Mark, as well. It's certainly been great working with you over the years. And And Nikesh, congratulations on the role. Excited to see what you bring to the company.
Maybe I'll start with Nikesh. Obviously, you mentioned it's day minus 2. But your ability to scale businesses at Google was certainly impressive. You mentioned there are some similarities. I'm curious when you did your due diligence, what are some of those similarities came away with?
And any insights in how you think Palo Alto is well positioned to thrive in a public cloud environment?
Thank you, Matt for asking the question. And thank you for your congratulations. As I said at day minus 2. So anything I'd say is, subject to change. So I think the early impressions are, I think this is no question in anybody's mind that we're still early in the cloud revolution.
And in the next few decades, we will see almost every company out there having to make that transition. And I think Palo Alto's networks mission on sort of preserving our digital life and keeping safe, it's kind of in line with that cloud transition. As we go to that transition, huge amounts of datasets are going to be created. People are going to have to keep track a lot about a lot of data. We have to apply a lot of AI machine learning and just this notion that Mark talked about of sort of migrating or transitioning to an application framework where we can bring a best of breed help people to sort of participate with Palo Alto Networks being sort of the ones who brings this solution to the end customer is extremely empowering and extremely powerful.
I think that's sort of my early impression that being able to take the company along that path with the team that is working on those products. So we're just going to be fundamentally excited.
That's great. And then maybe as a follow-up, we continue to hear good things about global Tech and, Mark, you called it out in your prepared remarks, a nice win there. Could you talk a little bit more about the competitive landscape there? Are there some even some some legacy competitors that you're seeing there? And I guess, just a better sense on pricing for GlobalProtect would be helpful.
Thank you.
Yes, sure. And Matt, we can know, as you know, we have GlobalProtect, we have GlobalProtect cloud service as well. And the, that's all part of the platform, of course. And over time, what you've seen us do is ensure that customers can use our security operating platform with the appropriate form factor for the appropriate use case, right? So we have hardware in some cases, big hardware or small hardware.
We have agents on the endpoint. We have virtual machines in the cloud API hooks for SaaS applications. And with GlobalProtect cloud service, you have the ability for what we would traditionally call network security to just point it at the cloud. And have the full on next gen firewall capabilities as well. Now that's important for branch offices, mobile users in places where you want to reduce your MPLS costs.
And customers reacting very well at that. From a pricing perspective, we're competitive, price wise as we are with everything on our platform, we can be because think it's passed on a head to head basis and also the value of it being consistent across the platform helps as well. And we've seen really good early success with the CloverTech that call serves.
Our next question will come from Andrew Nowinski with Piper Jaffray.
Thanks. Congratulations to cash on your appointment. And Mark, it's been a real pleasure working with you over the years.
Thanks, Andrew.
Just a question on maybe on virtual firewalls. There's always been a view in the market that the move to the cloud is somehow bad for security. Can you just give us any color on the demand trends you're seeing at the virtual firewall side and how they may be driving some larger deals?
Yes, sure. The it's a really good question. And as Nikesh mentioned a little earlier, move to the cloud is inevitable when you look at the amount of IT spend, and how much of it's in the cloud that it's actually pretty small. So we think we're in the early innings of this. And we've seen in our business, again, back to the right form factor for the right use case that the M Series is selling very well.
That's the in line portion for protection and protecting offerings in the cloud. And that's growing very well. That's been, we think, additive to the business. So far, I'd expect that to be the case into the future because we see existing customers not only buying VM series, but most everything else in the platform along the way, which is fantastic. And we would expect that that part of our business has been to grow as people continue to adopt the club.
Okay, got it. And then I know it's the platform and automation, as you said, were driving a lot of the product revenue growth this quarter. But could you maybe give us just an update on where you think we're at regard to a refresh cycle given the new 3200 series out in February and you had the 5200 last year, a lot of new appliances in the market. Just wondering how much that's contributing just specifically from the refresh cycle? Thanks.
Yes, great question. As you can see from the about 51,000 customers are surfing today, the size of customer base continues to grow very nicely over time quarter over quarter so the cohorts keep growing over time. As we said in the past, as those cohorts get bigger and as the latter years that refresh cycle becomes an increasingly large contributor to the business. We'd expect that would continue into the future. And by giving customer's new capability sets, not only in the hardware, but also the operating system and reasons to refresh if they're already a customer or come to us.
If they're not, the drivers in the hardware side of our business, I think, really fall into 3 categories. The first and I think the most prevalent today is the expansion opportunity with so many customers who are where you can see the lifetime value creation goes up very significantly. We think that's the biggest driver. We also have net new customer acquisition is very high. GNC again from the quarter that certainly helps.
And then the 3rd is refresh, which is performing very well for us. We think that's going to continue to be the case and we'll continue to grow contributor over time.
That's great. Thanks, Mark.
Thanks, Andrew.
We'll go next to Jonathan Ho with William Blair.
Let me echo my congratulations as well. I just wanted to start out with the Application Framework And maybe some of the commonalities that you're seeing with some of the new customers that have signed up and maybe how you think about that from a revenue opportunity as well?
Yes, Jonathan. Great question. I've described this since we started with the Application Framework as what we inevitably would see as a push pull model right and the push aspect of it is going to be over time of how much value these applications deliver over top of the application framework and perhaps someday we would monetize those. We don't have a plan to do that right now. We think our main focus there should be just growing a very healthy ecosystem of developers and we'll see how that transpires over time.
The flip of it with a pole, I think, is very evident already for us, which is customers really resonate with the ability to reduce the complexity of their footprint in their, in all of their network, including cloud. And also the simplicity of working with less vendors through a platform rate. And that is driving purchases of all the foundational aspects which we view as not only fantastic security, capabilities themselves, but also data collectors and enforcement positions. So that's in the network that's on the cloud. It's on the endpoint.
And all of those are growing very nicely for us.
Got it. And then relative to Trapps 5.0 and the Secu acquisition, can you talk a little bit about on what new capabilities you're adding here and maybe what challenges you're addressing with that acquisition? Sure.
Yes, I think there's 2 ways to think about that, Jonathan. The first and the most probably evident one is that Sekdo brings EDR capabilities to track that's an important capability that customers definitely want. So our ability to have that is an important. We believe that there the way that Secoo does EDR is very unique with some very unique thread level capabilities and visualizations. You'll see that come back into trap early in the calendar fiscal 2019, I'm sorry, early calendar 2019.
And that's what we're going to do with that ability. In addition to that, and I don't know if you were at Ignite or had somebody there, but we also talked about taking the SECU EDR capability and applying it across the entire platform. So not just endpoints, but also network and cloud as well as this concept we call XDR across the entire platform. So you can get the best EDR capabilities, everywhere from a security perspective, not just on endpoints. We think that's going to be an unmatched capability simply because of the size of the deployments we have in all the data locations.
Thanks, John.
Gabriela Borges with Goldman Sachs has our next question.
Good morning. Thanks for taking the question and congratulations to the team. Maybe for Mark Anderson and maybe Cathy as well, the last time we saw a 30% plus type product growth we were back in 2016 and that was subsequently followed by little bit of a slowdown. So the question is how are you thinking about managing through tougher comps at a high level going into next year? And follow-up for Kathy, just on the incremental investments that you discussed in the prepared remarks in the acquisitions.
It's a little more on what you're investing in. Thank you.
Hi, thanks for the question. Yeah, we're, very excited about our product growth this quarter. Obviously, very strong number The platform, as Mark mentioned, is resonating with customers and the security operating platform is experiencing a lot of interest from customers, both push and the pull side, as Mark mentioned. So we're really happy with the performance of product We think that we still have a lot of market share opportunity and we've been growing into that share year after year after year. So we think there's still a lot of opportunity for us to grow and that growth can be sustainable for years to come.
In terms of incremental investments that we're making, We're obviously integrating the newly acquired technology, in the case of Sextu into our platform. So that's coming off of the market. And sect due alike, we are working on operationalizing, making sure that we have a great go to market plan for both of those product offerings and just overall making sure that we have the right marketing messages, integration and operational plan for those services.
Yes. Hey, Gabriel. It's Mark A here. So I think a couple of things. Our field sales team is really quite disciplined in going after business, both with expansion opportunities with existing customers as well as propositions for new customers, especially ones that are embarking on their own digital transformation journey.
I think we provide a consultative type of approach that really a subject matter expert with regards to security in that journey. And it gives us the opportunity to show them how important, being able to future proof their investments with, again, access to the application framework, like I mentioned earlier. I think also just hardware cycles come and go, but I think by and large customers are telling us that our approach to security to provide consistent security everywhere at the endpoint in the cloud and on prem in customer's parameters is really differentiated from what our competitors are doing either by by providing an architecture that is just unrivaled out there.
We'll go next to Saket Kalia with Barclays Capital.
Hey, thanks for taking my questions and congrats to both of you and your new opportunities. Maybe for you, Mark, I believe several other parts of the Application Framework are going to be generally available here starting in August. Maybe related to Jonathan's questions. Can you give us any broad brushes on how the pricing here might work? And what you're seeing initially from customers on accepting that different consumption model?
Yes. Hey, Saket. That's a very good question. And, yes, probably the best thing to do is clarify, when we say the application framework is production ready to come, April, what that means is that third party applications, we will be able through the framework. From a pricing perspective, today, the relationship for that is between the application provider.
I'm sorry, I said, April, I meant ARGUS, ten people give me notes to correct that in August itself. The relationship from a pricing perspective will be through the customer right, with the application provider themselves. So that's what it'll look like in the beginning. Meaning, we don't have a we don't have intent right now to try to monetize that from our perspective, perhaps over time, like I said, we're driving a lot of value. We'll be in a position to do that.
What we're definitely seeing right now in the business though is the pull aspect, which is because of the compelling nature of the idea of being able to actually have a lot of innovation in the market but not have to deploy form factor after form factor to collect data to get 1 more feature. Customers like that a lot and I think they will standardized on Palo Alto Networks. And I think they are standardizing on Palo Alto Networks. And the network increasingly endpoints in the cloud as well. So a driver of our business.
I think that's been a driver for the last year. There's lots of other drivers as well, but I think that's a driver that's happening and I think we're going to see that continue into the future.
That's helpful. Maybe for my follow-up for you, Cathy, you were nice enough to give us the impact that Evident and SEC that we're having here from the EPS perspective in the fourth quarter. Can you give us any broad brushes on any billings or revenue impact that might have either in the quarter or maybe on an annual basis?
Yes. In the quarter, the billings and revenue impact was immaterial. Going forward, obviously, we're working on our plans and our go to market plans, and we're certainly hoping that we have good revenue and billings performance from both of them. We see a lot of opportunity with both of those products given the demand for cloud, security and as well the EDR capabilities are going to be a great addition to our endpoint service offering.
Our next question comes from Ken Talanian with Evercore ISI.
Nikesh, I realize it's early, but could you provide some of your initial thoughts on M and A and general thoughts for the potential for consolidation within the security sector?
Thank you very much for the question. I think it's, it would be inappropriate for me to have thoughts on M and A until I fully understand the entire part offering of Palo Alto Networks, which I do to some extent, but I'm going to spend a lot of time in the early part, understanding the company, our priority to make sure that we continue to execute on the rhythm and pace that Mark has set and what you guys have gotten used to because that's kind of like mistaken the table, I need to make sure I maintain. And then we'll hopefully, over future quarters, have a more substantive conversation with all of you about where we see the opportunity in if we need to do anything or not.
Great. And I guess as a follow-up, just to circle back around GlobalProtect cloud, is the primary use case there branch office applications or are you seeing broader interest in using the solution instead of hardware?
Yes, we're seeing a few use cases primarily, Ken, early on. One is branch office. 2nd is mobile users as well. So I think both of those are our drivers, we expect those to continue to be drivers in the future.
We'll go next to Walter Pritchard with Citi.
Hi, thanks.
Mark, as well, congrats on finding a successor here that looks to fill your shoes at least mostly. On a few questions for Kathy. 1, just on as we think about going into Q1, I know you're not providing guidance for next year, but seasonality has been a bit moving around as the business has evolved. And I'm wondering what you could tell us about how you think about the shape of the year and into next year with Q1? And then just had one follow-up question on the subscription side.
Sure. Thanks, Walter. Yes, we have definitely seen seasonality become a bigger factor in our business. And we are seeing pretty normal seasonality patterns with our strongest quarters sequentially in terms of sequential growth being Q2s and Q4s. And that continues to be the case, and I would expect that to continue into Q1.
Great. And then on the subscription side, I'm wondering, you have 2 pieces there. 1, I think is pretty easiest for us to model with the attaching to appliances. You're seeing a continuation, it looks like in 3 year attached there. And then on the unattached side, you just have a number of new products, some acquired some products you've had for some time.
Can you help us understand how the subscription side is splitting out and maybe relative growth rates between the attached and non attached
Sure. The non attached business we mentioned at Analyst Day was on a $240,000,000 run rate, growing very fast, growing at about 85% year over year. And so while it remains about getting close to about 10% of our overall business, still a relatively small portion of our business growing much faster than the rest of the business because it's newer and obviously smaller portion of our business. So just in terms of law of large numbers, growing much faster. We're obviously adding more and more subscription offerings that are non attached.
And you'll see that in the application framework as well. And so we do expect that the non attached business will continue to become a bigger part of our business and will continue to grow very fast. The rest of the business is also growing very well. As you saw, our services billings growth rate was over 30% this quarter. And so the rest of the business continues to grow very fast.
And the attached business because it's non attached business because it's a relatively small portion doesn't influence the overall growth rate to a significant at this point. Yes, if
I could just make one other point, as Kathy said at the end of Q2, we've given out the billings contribution run rate about $240,000,000 growing very quickly. As you can see, that continues to go up over time. And I think probably the interesting thing about that is with that approaching 10% of the billings run rate, which is good. It's against a very large base as well. And that base is continued to grow very well.
So if you think about the network security and particularly the SaaS security services associated with it. That's a large business growing very well itself, right? So the level of contribution takes time for the non attached to grow simply because it's being matched against a large, very fast growing business as well.
Great. Thank you.
Thanks, Walter.
Our next question comes from shaul Eyal with Oppenheimer.
Thank you. Good morning, guys. Congrats on a strong quarter and outlook. Nikesh, welcome on the board. Mark, we still have you on board literally, so not saying good bye here.
1 for Mark, 1 for Nikesh. Mark, on Europe, another strong quarter, up thirty 5% year over year. Talk to us a little bit about the different dynamics you're seeing in Europe than those in the U. S. Maybe how does GDPR in that context play into the equation?
Yes, sure. So I'll take that again. Market just came back from over there a little while ago. GDPR just is a big picture is driving a lot of interest in how do you use what would be termed state of the art capabilities? Basically, GDPR has a requirement or the for avoiding liability that folks are using state of the art capabilities for cyber security.
Of course, there's no definition to that, which is probably the right thing to do for regulators. But it raises a lot of questions for customers, which are positive to us, which is how would you do that at state of the art capabilities? And we think the we think everything that we provide plus the platform very uniquely, Mark, on Asia?
Yes, I think you just nailed it, Mark. I think for us, legislation like GDPR just heightens awareness of of customers to do something different than what they've been doing for the last 2 decades. And I think I would highlight that and also highlight the fact that government over there, the EU, as well as each of the individual countries in the EU, have never been more open to working with thought leaders like Palo Alto Networks to do things like share threat intelligence have bilateral threat sharing agreements. So I think our relevance in Europe because it's maybe a little more conservative group of countries has really ramped in the last 4 or 5 quarters and you can see that in the performance.
Can we get invited to the next one more? Sure.
Nikesh, you're coming from some SoftBank, invested heavily in security in recent years. I think you had a big $100,000,000 check for cyber reason just about, I think, less than 18 months ago, Google appears to be eyeing security from afar who knows what they might be doing down the road. It seems that security software requires a bit of a different DNA, I think, Michael, so I can phrase that coin. And Second before you plunge into the security software arena, if you can share with us your thoughts as to how security is being well preserved by the big tech company, the Google, the Amazon, the Microsoft, They haven't done a lot so much. So it could be a great opportunity on your end.
So maybe just a second world is becoming crazy for you with Palo Alto. Just share with us maybe how the big tech behind us are viewing security.
Look, I think it's fair to say, I had the privilege of working with the Google Enterprise team, which was part of our image when I was at Google, And for the first time, as you see in the history of innovation, cloud came to the consumer first in a big way and is now slowly making it to academic enterprise. And Google's realized that Microsoft's realized that Amazon realized that. So they're all charging ahead. With trying to address the cloud opportunity visavisenterprises. I think that's great.
Having said that, given that they're all to some degree offering proprietary solutions to people where you can have 1 or the other, there is an important need for an independent security team to look at it and see how we can take these massive amounts of data across multiple cloud offerings, provide a solution around it comprehensively to the end customer and have somebody who they can trust to be the arbiter between all these different offerings that they have. So I think that's the big opportunity out there Given that we're all going towards the cloud, given that these huge amounts of datasets are going to be created, we need to make sure we understand their aspirations and set our aspirations visov them and provide the solution to the end customer. I think that's where the opportunity
Thanks.
Our next question will come from Michael Turits with Raymond James.
Hey guys, thanks you very much. Mark, thanks for everything over many years. Nikesh, a welcome. I'll come back to the M and A question and then I have a follow-up for Kathy. On M And A, and let's just maybe say strategically product in general, Mark, there's still some very large areas of security that you're not in.
Email, DLP identity, how are you thinking about those given the fact that you've done so much in terms of expanding in
the last quarter or so? Yes, great question, Michael. When we look at security, we think in terms of outcomes, meaning that if you're the CIO or the CISOs for an enterprise, If you put technologies aside for a second, they have to solve for various outcomes. And in those out, there might be 8 or 10 of those depending on broadly you define those. And they're not technical when you think about them.
The outcome that we're solving for customers is to stop all known threats and ideally stop all unknown threats or at least detected very quickly and limit the damage rate. Now that's a very, very large outcome statement and very important. That lives alongside other outcomes like making sure you can withstand a massive denial service attack, for example. And we've been particularly focused over the years and in during that whatever outcomes we choose to solve or for customers that we bring something unique to the table in a highly competitive way. Now those outcomes blend over time as well.
And that's why we've done a lot of very strong partnerships in the identity space, for example, something you just mentioned. In the messaging security space with Proofpoint something you just mentioned as well so that we can make sure that the customer using the best capabilities from the vendors who are selling these outcomes doesn't have to be the back end systems integrated themselves for that. And they really appreciate that. But bringing that holistic picture to the table and solving those outcomes for customers is very important.
Great. Thanks. And then for Kathy, thanks for detailing the impact on expenses and cash flow of the acquisitions in this quarter. How do those acquisitions and, this has been particularly, again, period of strong investment? How do those acquisitions impact margin expansion next year?
Talked in the framework about 150 to 250 basis points. And are we on track to that even with these acquisitions?
Yes, we have talked about organic operating margin expansion of 150 basis points to 250 basis points. Q4 guidance that we've given is that we plan to invest between $0.10 to $12,000,000. And that equates to $0.08 to $0.10 per share. On our recent acquisitions, outside of the organic operating margin expansion that that we are, working towards for the full fiscal year.
It says, yes, it's pretty early.
We're still working on our planning, obviously. But we have been, obviously, we, yes, committed to that framework and growth and profitability remain very important to the company.
Our final question will come from Rob Owens with KeyBanc Capital Markets.
Wow, under the wire. Thanks guys for taking my question. With regard to product revenue and the 5 quarters of acceleration that you've seen, just opposed, I guess, where your competitors are and we've actually seen meaningful deceleration. Can you talk about your win rates and whether or not you think those are ticking up or is your success more a function of ASPs at this point? And then number 2, Mark Anderson mentioned hardware cycles come and hardware cycles go, which spegs a question.
Do we think one's coming or do we think we're going at this point? And we're one to come. How could that possibly be reflected in customer acquisition and those numbers you're showing there? Thanks.
Maybe you can take them in reverse and I'll
do that.
Everybody's saying Mark here, so it would be, I think on the cycle 1, Rob, it's over time, if you take a snapshot back of 10, 15 years, long periods of time, you see cycles in 4 or 7 years it's a little hard to nail that down of buying patterns here. What I think what Mark was saying is that regardless of what cycle they're in Palo Alto Networks, continues to outperform everybody in the market. You can see that in all through the last 10 years. As a matter of fact, and including recently in the last four quarters as well. Our job we think is to make sure that we have the most competitive offering in the market and we'll always be taking market share and we're very confident we'll be able to do
Yes, just big picture, Rob. We've got low double digit market share or we prosecuted low double digit market share in about a $20,000,000,000 total addressable market. So I think both in terms of new customer opportunities, customers want to, if they're going to make a change for security, they're going to look to the thought leader. And for existing customer expansion, we're just starting to hit the veins of significant customer sizes from the cohorts that we saw big customer growth last 5 or 6 years. So I think both give us tremendous opportunities to grow the business.
And I think that's what gives us the confidence that's embedded into our guide.
It's been a long competitive win rate lines.
Yeah, competitive movements, I think I said it earlier, I think, I feel bad sometimes for our competitors because they're trying to sell either stitch together acquisitions that look like Frankenstein's monster or they're, they're trying to sell point product. Against an architecture. And I think we've developed this platform over the last dozen years organically primarily with some small technology tuck ins that that really, drive the automation that's needed in the digital age.
Yes, we've seen win rates be very consistently high, Rob, against all comers.
Great. Thanks guys and cheers, Mark.
Thank you very much. Appreciate that.
Okay. I
think that was our last question. So I'd like to close off. I want to thank everybody here. All the employees at Palo Alto Networks, our customers and our partners for the privilege of working with you. For me, it's been a really amazing experience want to thank everybody for their time this morning for the call.
We look forward to seeing a lot of you in the upcoming future. Take care.
That does conclude today's conference. Thank you all for your participation.