Good day, everyone, and welcome to Qualys Third Quarter 2018 Earnings Conference Call. This call is being recorded. At this time, all participants are in a listen only mode. Later, we will conduct a question and answer session and instructions for asking a question will be given at that time. I would now like to turn the call over to Natasha Assar, Investor Relations.
Please go ahead, ma'am.
Good afternoon, and welcome to Qualys' 3rd quarter 2018 earnings call. Joining me today to discuss our results are Philippe Courteau, our Chairman and CEO and Melissa Fisher, our CFO. Before we get started, I would like to remind you that our remarks today will include forward looking statements that generally relate to future events or our future financial or operating performance. Actual results may differ materially from these statements. Factors that could cause results to differ materially are set forth in today's press release and in our filings with the SEC, including our latest Form 10 Q and 10 ks.
Any forward looking statements that we make on this call are based on assumptions as of today, and we undertake no obligation to update these statements as a result of new information or future events. During this call, we will present both GAAP and non GAAP financial measures. A reconciliation of GAAP to non GAAP measures is included in today's earnings press release. As a reminder, the press release, prepared remarks and an accompanying investor presentation with supplemental information are available on our website. With that, I'd like to turn the call over to Philippe.
Thank you, Natasha, and welcome, everyone, to our Q3 earnings call. Melissa and I are pleased to report both continued revenue growth and profitability. These results reflect our position as a leading cloud based security and compliance platform, unifying IT, security and compliance in a single pane of glass view with 2 seconds visibility across on premises, assets, endpoints, clouds and soon mobile OT and IoT environments. Such capabilities is the keystone of security as there is no security without visibility. To that effect, I invite all of you to watch a short video at ww dotqualis.com/visibility, so you could experience it for yourself.
This unique competitive position was in fact reinforced when I met many of our European customers earlier in the month in Monaco at Les Assis de la Security, the leading security conference in France. They shared with me their view that they see Qualys as a strategic partner as they move to consolidate their current security and compliance tax and accelerate their digital transformation, in part because of GDPR as well as by the need to remain competitive. As we continue delivering additional best of breed compliance and security solutions, the application natively integrated within our cloud platform and expanding our offerings on public cloud platform, such as Amazon, AWS, Microsoft Azure, Google Cloud and soon IBM Security Connect, we believe that we naturally increase our stickiness and drastically reduce both cost and complexity for our customers. This is underscored by the fact that we continue to innovate and deliver on our product road map. And in Q3, we showcased the passive scanning sensor, a new member of the family of the Qualys sensor family that natively integrates network analysis functions, deep packet inspection and data correlation into the Qualys cloud platform, delivering customers complete IT visibility at scale.
In combination with our existing data gathering sensors, specifically scanners and cloud agents and our groundbreaking app for global IT Asset Inventory and CMDB synchronization, iTAM, These new capabilities enable us to offer our customers a single source of truth for all IT assets within hybrid environment, including on premise assets endpoint, cloud and soon again mobile OT and IoT environment and you will see that on the video I just mentioned. We now have more than 30 customers using our Itam apps for known assets in beta and expect to go GA in November. Our passive network analysis for unknown assets will go into beta in November as well and is expected to go GA by year end. We also announced a new out of bank configuration assessment CloudApp that allows customers to achieve complete visibility of all known IT infrastructure by pushing vulnerabilities and configuration data to the Qualys Cloud Platform from systems that are otherwise difficult or impossible to assess such as highly locked down devices and on air gapped networks. Our expanded relationship with Microsoft and IBM are testament to the tremendous value our cloud platform offers to customers.
This quarter, we added an integration into Microsoft's hybrid cloud Azure Stack, which allows us to provide a single pane view of the security compliance posture of Microsoft Azure's infrastructure and user workloads across Microsoft Azure as well as the Azure Stack. We announced our release of monitoring and assessment for CIS, the Center For Internet Security, Inc, Microsoft Azure Foundations benchmark with our cloud security assessment to enable our customers to build security into DevOps initiatives. We also announced an expanded partnership with IBM, whereby X Force Red will deploy the Qualys Cloud Agent and Qualys Cloud App into client environments across the globe, providing a programmatic vulnerability management approach that leverages the breadth of Qualys' continuous visibility and the depth of the X Force Red team to identify, prioritize and remediate clients' most critical vulnerability. And finally, we were selected as a key partner for IBM's 1st open cloud platform, IBM Security Connect, to federate and analyze security data at scale. With IBM's open cloud platform, enterprises will be able to view their Qualys data across applications, integrated with our network and other security solutions.
Adding to our product capabilities, in October, we completed the acquisition of Layer Insight. Layer Insight, based in the Bay Area, is a pioneer and global leader in container native application protection, providing accurate insight into containers images, adaptive analysis of running containers and automated enforcement of the container environment. By integrating Layered Insight, new technology into the client container app, we'll add the ability to provide dynamic analysis of running containers and automated enforcement of the container environment. Layer Insights' unique technology brings transparent DevOps CICD pipeline, thus removing the resistance of deployment. These instrumentation provides real time visibility into containers at runtime, completing our current capabilities of accessing container images in the build system for vulnerabilities and configuration issues.
With this layered in approach, there is no sidecar or privileged container needed by the solution, making it an ideal solution for intelligent edge and serverless container as a service, CAAS deployments like AWS Fargate, which are quickly becoming the future of containers like IIS and PaaS quickly becoming the future of containers. So through the layered in presence in the application, the solution also provides protection, policy based remediation and response capabilities that further simplify end to end continuous security. We expect quick integration into our cloud platform with general availability in Q2 2019. In line with our acquisitions made to date, key employees have joined Qualys, including Asif Awan as CTO of Container Security and John Kinsella as VP of Engineering, Container Security. In summary, our acquisitions complement expanding our cloud platform to provide more comprehensive security and compliance coverage.
On the application side, customer owned web applications as and providers hosted SaaS web application and also providing visibility across all global IT assets, including web applications, containers, APIs, OT and IoT devices. We continue to make good progress in penetrating the federal market. We were delighted to win a large multi product deployment with DHS, which was a competitive displacement. DHS has licensed Qualys platform in support of the National Cybersecurity Assessment and Technical Services and CAT submission. Qualys will be used in the DHS initiatives for protecting critical infrastructure and election security.
Additionally, Cindy Staten joined as VP of Product Marketing for both public sectors and cloud providers. Cindy previously worked at our Logic and Verizon Business and we leverage experience to develop programs supporting federal agencies under digital transformation and cloud security initiatives. Additionally, we continue to leverage the cloud platform as a distribution channel. We announced the new comprehensive offering for consultants, consulting organization and managed service providers, the Qualys Consulting Edition, enabling them to perform multiple ongoing vulnerability assessment engagements and track these results from a single centralized and self updating platform. And we have seen a great response to the release of CloudView, SurgeView and the Qualys Community Edition, a successful lead generation effort, which serves to distribute our Qualys Cloud platform to more users from which we can sell many additional solutions.
We have over 12,000 activations now, out of which almost 6,000 are active users already, which is significant growth from the over 6,500 activation and 700 users we had at the end of Q2 2018. We're excited to host our customers and partners at our upcoming QSC User Conference in Las Vegas on November 14, 15. We expect this user conference to be significant for our company as we believe that it will be evident that we have moved well beyond Verdi Management and in fact are bringing IT, security and compliance together across environment, drastically reducing the cost of deploying and maintaining traditional enterprise solutions and this is due to our cloud architecture. At the conference, our Chief Product Officer, Simeon Thakkar, will showcase our new groundbreaking global IT Asset Inventory solution, which again you can now preview at ww dotqualis.com/visibility. And this is a solution which is always up to date with 2 way synchronization with CMDBs and enables organization to regain full visibility across their on premise, cloud, mobile, OT and IoT environments.
We will also showcase our new customizable dashboard that provides real time analysis of your security and compliance posture in a single pane of view that identify in seconds assets that are vulnerable attacks or that has been compromised or are suspicious. Finally, other innovative solutions, we will also unveil and discuss our forthcoming Patch Management and Mitigation solutions, a novel approach to continuous security, which I've mentioned earlier. And our colleagues can edit security into your DevOps and digital transformation initiatives. At the conference, our attendees will also have the opportunity to discuss and listen to customers, which will share their experience and best practices. And you are, of course, welcome to attend that conference, which we combined with an Investor Day and I will make some mention later on.
So we are hosting a dedicated track for this community on November 15, which will include a demonstration of our newest application in the platform by our Chief Product Sumit Tagar a financial update by our Chief Financial Officer, Melissa Fisher customer speakers and industry analysts. Before I turn the call over to Melissa to discuss our financial results, I would like to welcome Patricia Hatter to our Board. Patty brings unique experience as both buyer and seller of Security and IT Solutions, given her prior roles as both the CIO and SVP of Operations at McAfee, as well as the SVP of Services. In addition, she also served as GM of Security and Software IT and CIO for Intel Security and has also held a variety of leadership roles at Cisco and AT and T. As we continue to expand the breadth of application unifying IT security compliance, we expect to leverage our expertise as we increasingly sell our integrated solution cloud platform to CIOs and CISOs.
Thanks, Philippe, and good afternoon. Before I start, I'd like to note that except for revenue, all financial figures are non GAAP unless stated otherwise. As Philippe mentioned, our continued healthy financial results reflect our strong competitive position and continued platform adoption. I'd like to share the following Q3 financial and operational highlights. Revenues for the Q3 of 2018 were $71,700,000 which represents 20.5% growth over the same quarter last year.
Platform adoption continues to increase as a percentage of enterprise customers with 3 or more Qualys solutions rose to 39% this quarter, up from 30% a year ago. And the percentage of enterprise customers with 4 or more Qualys solutions rose to 20% this quarter, up from 14% a year ago. Cloud agent adoption accelerated with 13,900,000 cloud agents purchased over the last 12 months, up from 8,100,000 for the 12 months ending in Q2. Approximately 5,000,000 cloud agents were purchased by a cloud platform customer. New products released since 2015 contributed approximately 23% of total bookings in the quarter, up from 14% in Q3 2017, driven by solid growth from both Cloud Agent and Threat Protection bookings.
And we saw higher growth in the total number of orders from our SMB, SME and PCI customers. This positive result did pull our historical year over year average deal size increase down to 5%. However, the average deal size for our enterprise customers grew 12% year over year. Our scalable model continues to drive industry leading margins and generate significant cash flow. We now expect full year operating margins to increase approximately 2 50 basis points.
Adjusted EBITDA for the Q3 of 20 For comparability purposes, Q3 For comparability purposes, Q3 adjusted EBITDA margin would still be 44%, normalized for the impact of 606, specifically the amortization of commissions. In addition to the efficiencies inherent in our highly profitable operational model, this quarter, our R and D expense benefited from a catch up in software capitalization. Adjusted for this effect, R and D expense would have sequentially grown as we continue to invest in research and development and, in fact, are delighted with our successful recruitment efforts in Pune. We generated strong operating cash flow for the Q3 of 2018 of $31,600,000 a slight decline of 4% year over year. However, year to date, our cash flow has increased 21% versus the same period last year.
We continue to invest the cash we generate from operations back in the Qualys. In Q3, we spent $6,700,000 on capital expenditures, including principal payments under capital lease obligations, and we used $27,200,000 to repurchase 310,815 of our shares. We remain confident in our financial model due to our strong competitive position and leading cloud platform. As such, our Board of Directors has authorized additional $100,000,000 2 year open market share repurchase program, resulting in $153,500,000 of current repurchase capacity. This program will continue to minimize dilution to our shareholders.
We have a strong current deferred revenue balance of 100 and $55,100,000 as of September 30, 2018, 17% greater than a year ago. Current billings in Q3 were $75,400,000 or 13% greater than a year ago. Our Q3 current billings growth rate was negatively impacted by a large deal that we expect to close in Q4. Our business outlook remains healthy and we are maintaining the top end of our full year 2018 revenue guidance now in a range of $278,400,000 to $279,200,000 As we have consistently communicated, we do not manage billings and are focused on the long term growth of our business. We are also raising fiscal year 2018 non GAAP EPS guidance to a range of 1.6 $2 to $1.64 And for the Q4, we expect capital expenditures to be in the range of $7,500,000 to 8,500,000 dollars We feel very well positioned given the unique nature of our integrated IT, security and compliance cloud platform as well as our new groundbreaking applications, which you will see at QSC.
With that, Philippe and I would be happy to answer any of your questions.
Our first question or comment comes from the line of Daniel Ives from Wedbush. Your line is open.
Thank you. So my question is in regards to obviously you guys look like you're in a position to shrink going into year end. How are you in terms of thinking about things from an M and A perspective over the next year versus organic from a product perspective?
So this is Philippe. So we continue on the same strategy. If you recall, our strategy in terms of M and A has been that we are first of all, we wanted to really complete our cloud platform enough, so we could easily or more easily integrate additional technology. And what has been guiding us is identifying technology, which either will accelerate the current engineering developments that we have or will accelerate our entrance into new markets. And as you have seen, this is exactly what essentially that recent acquisition the 2 previous ones as well as the acquisition now of Layer Insight, which allows us to move much, much faster into that very hot market, which is container security.
So this being said, to answer your question, we believe that in 20 19, it will be absolutely the same. We see quite significant opportunities today. We have been, as I was mentioning earlier, very prudent in how much money do we pay, because we see there's been an inflation fundamentally far too much money being poured by the VCs into our space, we believe. I think the industry is entering into a consolidation phase, so we see a lot of opportunities. So we have the advantage of having a platform, which will allow us to integrate more solutions pretty easily.
And second, I mean, we have the cash as well. So I think we're in a very good position. But again, we're prudent. This is very deliberate. I used to say we're kissing a lot of frogs.
And we see a good outlook for 2019 in terms of doing a few additional acquisitions. Okay.
And then maybe from Melissa. I mean, look, expense controls is just phenomenal, I mean, especially relative to competitors, the way that they're spending.
How
when you think about just kind of putting the pedal on the metal to just sales and marketing and R and D, especially just some of the big opportunities out there over the coming year. Maybe you could just I know you're not giving guidance for 2019, but just anecdotally talk about that balance and how you're able to do that, especially with competitors spending money pretty significantly?
Yes. Thanks, Dan. So first of all, we're obviously proud of our industry leading margins, but we feel like we are actually putting in significant efforts behind both those areas. To clarify or maybe repeat, as I mentioned, R and D this quarter was sort of artificially depressed by this catch up in software capitalization. So as I said, we continue to invest in R and D.
And if we didn't have this catch up this quarter, it actually would have sequentially grown. Sales and marketing is obviously just from a comps perspective impacted by 6% to 6%, so we continue to spend there. Q4 is a big quarter for us in terms of sales and marketing because we have our annual user conference and we continue to anticipate that we would continue to invest in 2019 as well.
Yes. And I'd add something. What's one thing which I think is very important here to understand. At the end of the day, it's the modern stupid fundamentally. If you look at the way we have structured the company, we're totally cloud based since the very beginning, and we understood that as long if you can have your customers renewing, you can live forever.
And if you can sell them additional services, you can grow forever in a way and certainly more profitably than if you sell them enterprise software solutions. To continue having very low acquisition cost of customers through the free services that I just mentioned earlier. So it doesn't cost us much to distribute a free service across the planet. Of course, from there, the platform is already now in use and then we can upsell additional services to these customers that we essentially got through these free services. So the combination of sales and free services really help us to continue essentially maintain such a profitable model.
It's all about the architecture, the model.
Awesome. Okay. Congrats. This is just a great quarter. Thanks.
Thanks, Dan.
Thank you. Our next question or comment comes from the line of Alex Henderson from Needham. Your line is open.
Thanks. I was hoping you could give us a little bit of a sense of scale on the acquisition. What is the size of the nut that you're bringing in, in terms of cost? I assume that there's not much of any revenues attached to it. And on the R and D catch up, it looks like that's a pretty good nut.
If I were to take the 2Q number on R and D and grow it at 2% or 3% sequentially. Is that the right way to think about where you'd be in the Q4 if it wasn't for that? So in other words, up a couple of 100, dollars 3,000, dollars 400,000 versus 2Q?
Yes. So let me take the last question first. So on a non GAAP basis, it's about $700,000 So I'll just give you the numbers so you can do that for the modeling. And then obviously, as I mentioned, that was a catch up for the 1st 3 quarters. So that wouldn't that amount wouldn't continue going forward.
With regards to Layered Insight, I'll talk a little bit about the financials and then Philippe probably might want add some color around the strategic nature because we feel like this acquisition is really puts us at the forefront of container security when combined with our existing solution. In terms of transaction details, so from an expense perspective, it's really not going to be material relative to our overall expense structure. The expenses for Q4 is baked into our guidance. The transaction price is $12,000,000 and there's another $4,000,000 paid tied to and earn out another $4,000,000 paid tied to employment of key employees through 2019.
Yes. And I will add to what Melissa said that they have a quite impressive, albeit small numbers of customers like GE and you may have seen on the press release a quote from GE and a few others and they have very good prospect. And in fact, I would say that the 3 quarters of their customers are already Qualys customers, which all welcome the fact that now we combine the superior, if you prefer assessment technology that Qualys has with their very unique architecture, to be specific. And that's what attracted us to us, brilliant team of people, small, but absolutely brilliant. They know what they're doing.
And they build really the right architecture for container security or for containers. Instead of having a container, managing other containers, and as you know containers are ephemeral, and the drift, they essentially have built a similar architecture that the one that we have, which is a kind of a sort of an agent that goes inside into the containers. And that gives significant scalability plus an enforcement point. So now you can really start to speak about application protection and so forth and runtime. All that is real time.
So these are 2 solution combined. It's a very, very powerful solution. And then as I'm sure we all know now, containers are really taking the world by storm. This is a very strategic acquisition that we've made.
If I could, just one last quick question. The growth rate for the Q4 is kind of edged back under 20% after 4 quarters of pushing it over 20%. And I was wondering if you could just give us a little bit of granularity around why that might be decelerating sequentially or year over year in that Q4?
Yes. So Alex, we have a
very healthy business in outlook, as we mentioned earlier. If you remember, from a comparable perspective, we have tougher comps in the second half than the first half and actually in Q4 even more than Q3. So the year ago growth number was 20% in Q4 versus 17% in Q3. So that's what's impacting the growth rate.
Okay. Thank you.
Thank you. Our next question or comment comes from the line of Sterling Auty from JPMorgan. Your line is open.
Great. Thank you. Good evening, guys. This is actually Jackson Hader on for Sterling Canacc. Our question really revolves around the federal space.
You guys have made it clear in a number of initiatives that you're going to try and head into the federal space outside of Philippe, the large deal that you mentioned with DHS. How would you say that progress is tracking relative to your internal plan?
I think we're absolutely delighted. As you know, we've been patient, which is one of the trade off Qualys before deciding to finally enter the market because we thought the marketplace we knew the marketplace was not ready for cloud. Now it is. So I think we're extremely well positioned. I mentioned that having DHS as a customers now having selected us and it was a competitive displacement.
What they do appreciate here is the scale of what is the quality, the fact that we deploy. And when you look at the federal market, it's absolutely all about scale. And today, of course, scale and cost. So we have now we have the scale. And I believe we're going to really become a significant player in the federal space.
This being said, it always takes time in the federal market because of the procurement. We established a very strong relationship with Carousell, which is the premier distributor. So while putting all the pieces together, we attracted Cindy Stanton, which now is essentially our VP of Product Marketing for Federal. And there's more to come. So And there's more to come.
So but it's going to take time. So we don't anticipate significant revenues in 2019. As you know, our model, we take the revenue as we deliver the service. The orders in federal have more tendency to come around at the end of their fiscal year or the beginning of the other one. So in terms of revenues, it's going to this is would be more in 2020.
However, we anticipate to have more enrolled in that marketplace, which we'll be very happy to report.
Sure. Okay. Understood. And then a quick follow-up, Melissa, on the CapEx side. Anything to call out here in the Q4, reason why CapEx is expected to pop up a little bit?
Yes.
It's really just a timing issue. We had expense more in Q3 that didn't get paid, so it doesn't show up as CapEx on the cash flow statement. So it'll get paid in Q4, which then shows up on the cash flow statement then. But we're still on track for what we had said was our full year guidance CapEx of $28,000,000 to $29,000,000 All right.
Thank you.
Thank you. Our next question or comment comes from the line of Gur Talpaz from Stifel. Your line is open.
Hi, this is Chris Spiroz actually on for Gur. I know they're still in beta, but can you talk about the initial feedback that you've received from customers concerning both the passive scanning tool and the asset inventory product?
So this is a huge, huge positive response. In fact, this is absolutely a game changer. So you understand, this is not something we have just been working recently. In fact, we saw the opportunity about 10 years ago. This is when we saw Goldman Sachs using the result of our scans to audit their CMDB, which was Stivoli.
But it took for us not only mastering the scan, but then the agent technology, which give us the real time and absolutely the full inventory of everything that we that the device has. Now today, the missing piece was the passive scanning. So today, we have essentially more than 30 beta users of our of one part, which is the known asset, which is going to go GA in a couple of weeks. So now today, everywhere you can put our agent, you have the complete view of your asset inventory in real time essentially. You synchronize that 2 ways with the CMDBs.
And now today, we're entering beta for the passive scanning, which essentially will give us the unknown. And so that's anything which connect to the network. And you will see I always I encourage you to look at that video that we just published at again at www.qualis. Com/visibility, you are going to see the passive scanning, discovering unknown devices and then we fingerprint them. So essentially, that's another huge task that we have undertaken, which is to fingerprinting all the devices on the planet, very similar to what Google did with their cars, essentially mapping the streets.
So here, we're mapping all these devices. And of course, we use in order to do that machine learning. So we have already a huge effort, which has been undertaking. So when you combine all that together, we provide now the source of proof. And what's very unique, again, with Qualys, it's not only on a few devices on your endpoint.
It's on all of your on premise servers, etcetera. It's on your endpoints. It's on your cloud environment, on your containers, on your web application security. Early next year with the mobile, with the launch of our mobile agent technology that we acquired from 1 Mobility. And during next year, it will be more and more OT and IT devices.
And all of that, we have the platform. We have indexed because, of course, you want to be able to analyze, correlate and, of course, report almost instantly. So we have now today indexed more than 620,000,000,000 data points on our Elasticsearch clusters. We anticipate that by year end, we'll have essentially index close to $1,000,000,000,000 So this is really heavy lifting. And it again, it took us 10 years to get there.
So we're very excited and so are our customers.
Great. And thanks for the color there. Multi product customer growth was impressive in the quarter. Are customers more willing to adopt multiple products at the initial point of sale or is this growth being sourced primarily from add on sales?
It's both, but I would say that in general, we do see new customers taking on multiple products initially more than we had historically.
Yes. And we believe also that the other interesting part with that global IT asset inventory is that this is also going to be, as I'm sure you realize, a kind of a Trojan horse strategy to have our agent being everywhere. And once we have our agent, of course, there's significantly additional services like file integrity monitoring, detection of indication of compromises, etcetera, that we can absolutely now deliver almost part of inventory. We're really building the nervous system, the part of inventory. We're really building the nervous system, if you prefer.
And the beauty of our solution is that we help our customers, and that's something that very few company can do. And I would make another very important point after that. We can help them consolidate the stack of their current solution, which are becoming very costly and almost ineffective. And so that's one good thing for them, but also with them essentially build the security into the digital transformation. So what we see today is that we're also moving into a new model of setting.
And very few company, I believe, can do, at the same time, an architectural change. So moving from an enterprise software solution to a cloud based solution, but also doing a business model change. We see today the Amazon, the Azure becoming extremely powerful platforms, essentially frictionless delivery of IT solutions. So we are very easily embedding our solution into them. So we are envisioning an environment where you essentially will not even need that much salespeople.
What you will need is people to essentially onboard to make sure that absolutely everything works, the customers understand what needs to be done. So I don't see ourselves increasing our sales force significantly with what I call these Armandice sales guys, which cost you a fortune and hence, elephant. It's all about frictionless. And I think with the right platform, the right architecture, the right business model, the right sales force. This is a question that people say you're not spending enough in sales.
I say no, it's all about essentially building if you prefer that new delivery model. And that's by the way exactly what Amazon has done when you look on the physical world, where they do essentially the procurement, the fulfillment, they deliver, they invoice you, etcetera. You put your goods on Amazon and sell Great. Thanks for the color. Appreciate it.
Thank you.
Great. Thanks for the color. Appreciate it.
Thank you. Our next question or comment comes from the line of Erik Suppiger from JMP Securities. Your line is open.
Thanks for taking the question. The Cloud Agent, I think you said that you had a service provider that took 5,000,000 units. Is that right? Can you talk a little bit about that deal? And then if we exclude that deal, I think you added about $800,000 which I think is consistent with the prior quarter.
Is that kind of the range that we could think of in terms of ongoing unit volumes on a quarterly basis?
Yes. It's very difficult to predict. What you see here is the fact that now our agent is starting to be really adopted more and more into the cloud. In fact, our agent is the ideal solutions to give you the globalized asset inventory wherever you can put the agent, but also it goes into the cloud. And that's the beauty of our solutions.
It's a very, very small agent. So you could see that adoption of our agents into this new into this cloud environment. And that's what it is. So anticipating, of course, that we'll see more of those. So you have 2 dynamics here.
1 is the growth in the enterprise, if you prefer, moving more and more into the endpoint. And then you have that other dynamic, which is now cloud the cloud. And so it's hard for us to give you any kind of how to model at this stage because you have 2 different dynamics here.
Okay. And then Melissa, you had talked about billings being depressed in the Q3 because you had a deal that slipped into Q4. Can you give us a sense for what we might think of in terms of billings in Q4?
Well, it obviously was meaningful. That's why we called it out. But I think I would point you back to our earlier remarks. We have a healthy business, and that's reflected by the fact that our full year revenue guidance is 21% for the year. And to what we talked about earlier, we saw we have strong cloud agent adoption as well as multiproduct adoption.
Yes. And I would add one thing also on that billings is that, again, aligned to what I mentioned earlier that now the cloud is really moving. So what we see also is that all these new cloud deals, if you prefer that we are doing now, are more moving into a consumption based model by the hour, by the node, monthly billings type. So we see a gain that doesn't change the revenues. Again, that's the beauty of being 100% subscription based, but it does affect our billings.
So we start to see looking forward that we are going to start to see this kind of a new consumption based model. As you may know, Amazon is really pushing that very hard. So all these cloud providers are going now into an hourly model per node per hour. And of course, we are following that very naturally. And that's the reason why I made the comment earlier that unlike other companies, for us, it doesn't change anything because it just affect the billings, it doesn't affect the revenues fundamentally that much.
So we're in a very good position to do that business model change as well. Right.
And that's as Philippe said, that's why billings would become even less relevant for us and why we still were able to outperform on revenues despite the lower billings growth rate because we're focused on managing revenues.
Okay. When providers move more towards a consumption based model, does that change the size of the deal opportunities of those providers?
It will because it's all about commoditization of the entire IT sector, if you prefer. So yes, it will affect. However, you're discussing here of again significantly less cost. In fact, you just have to be a little bit more we are building today an additional sales force as we speak, which essentially will not be customer based. And the analogy that I give here is when you look today when you go and buy and you go to an Apple Store, you don't have a salesperson there.
Somebody is commission. You have a technical person which will inform you. And that's I think the way our entire industry is going. Everything being what we call transparent orchestration, we have demonstrated that with Microsoft where you click, click, click. You don't have to install anything.
Already there. And then essentially, what do you need in terms of a sales force? You need somebody to essentially onboard the customer, answer a technical question. And that's a sales force which is significantly less expensive. And then by the way, these new platforms, they do the invoicing.
They do the full everything is already pre fulfilled if you prefer. So you have significant velocity acceleration. So while the price will go down, you have absolutely significantly more volume that you generate. And that's the way that technology has always gone. Gone.
Remember the old days of the PCs, which really make Microsoft extremely profitable and for a long time because, of course, the PCs more volume at a lower price, but yet very profitable.
Thank you. Our next question or comment comes from the line of Howard Smith from First Analysis. Your line is open.
Yes. Thank you. Congratulations on continued solid results. First question has to do with kind of the CloudVue view community addition. The numbers you put out, it's clearly having the impact of getting people's attention and getting them to sign up.
Can you maybe qualitatively talk about the early signs of people actually becoming part of the ecosystem with other products through that lead gen effort?
So we no, it's a very good success everywhere. We're not publishing today much numbers about that. This is, of course, relatively new for us. But what I can say to you is that we have been extremely surprised by the number of activations. And so now it's also our challenge, and that's what we're building that Salesforce has alluded to, essentially onboard them, making sure that they use the service.
And then at the appropriate time, because all these additional services are in the platform, you now start to upsell them. But in that order, we are not here to interrupt the customers and trying to immediately send them which are already in the platform. So we're putting a big effort today to essentially manage all of that and essentially building the new sales force I just talked about. And then in that case, of course, we'll have we believe even we'll have additional, in fact, accelerated adoption, but we're very happy. I mean, this is absolutely again, the cost of delivering these free services is absolutely nothing.
It's pure engineers, which have built the product. And of course, we can disseminate that across the globe. So that's a very effective model.
Yes. And just following up on that effective and leverage on the sales and marketing, as you talked about hiring some R and D folks and the impact of the software amortization. But on sales and marketing, are you on pace with your staffing levels kind of to budget at this point in the year?
Yes. So we are very well in Europe. I think very happy with the European operation. It's sort of both the post sales and the presales. In the U.
S, we are very good on the post sales. We are looking at expanding our new business, if you prefer Teams. In fact, I'm in the process of hiring an EVP for the Americas to essentially start selling. And that's the purpose of that expanding our new business, selling to the CIO with again, with that global ITS at inventory that now you can look for yourself. It takes it's a 13 minutes video.
You're going to be flawed when you look at what we have done here. This is all real. This is not mock ups. This is absolutely production grade solution. And then now we can go and speak with the CIO.
And essentially, this is going to be the mission of our new sales force of our new business sales force, and we're expanding it mainly in the U. S. Because, of course, the marketplace is bigger. And in Europe, we're already essentially done. We did also another change in our post sales, if you prefer model, which also our customers are very happy.
Now that we have very large customers, so we have now created a kind of slightly change in our technical account managers, as we call them. So we have created a new category, what we call major account solution architects, which now handle a few very large accounts. And these are accounts which are becoming multi $1,000,000 account. We see also are becoming very strategic for them. We see also the demand from these large accounts to say, we would like to take all of your application, give us let's do a 3, 5 year contract, and we'll have for a fixed price to be able to deploy essentially all of your solutions.
And so our answer to that demand has been, let's do the global iTS IT inventory, because when we do the global iTS IT inventory, you will know exactly what you have and then we can talk about deployment, about these and come up with a good business decision about, okay, you don't want to buy one product at a time. You are standardized on our platform. So let's cut a bigger deal.
That's great color. And just real quick for Melissa. Is there any FX impact that you would call out that's materially affecting kind of growth rates sequentially or year over year?
No, nothing material.
Okay. Thanks.
And we're also starting to look at aging as well and as well because again our model is the ideal model to edge. So this is something we have not been doing in the past, but now today Melissa is really looking seriously at that, which we never eliminate completely, but at least would soften. And so that's something which we're going to be able to do very soon.
Great. Thank you.
Thank you. Our next question or comment comes from the line of Melissa Franchi from Morgan Stanley. Your line is open.
Okay. Thanks for taking my question. I wanted to follow-up on the commentary on the billing slowdown. So I appreciate that it's becoming maybe less relevant as you're going to more pay as you go. But if we think about the impact from the deal slippage and then the move to pay as you go, can you maybe parse out the magnitude of those 2 headwinds in the given quarter?
If we look at 20% current billings growth in Q2 versus 13% this quarter, What were kind of what were those impacts to what degree were those impacts driving that slowdown?
So in fact, Julius, when we mentioned when we said that we do not manage to billings, essentially, we don't fall on the trap of enterprise software, which is at the end of the quarter, let's get the deal within the quarter and against concessions, pricing concession. We have always refused to do that. And what happens then is that we could have sometimes some of these orders instead of coming at the end of the quarter, okay, they come a little bit later because the procurement people are busy trying to take their powder flesh on these enterprise software vendors. And so of course, we don't have the priority. And so you're speaking only of a few days or maybe a few weeks, but not much.
So it doesn't have a significant impact on the revenue side as, of course, we may lose few days here and there, but it's not that significant in a grand scheme of things. And that has been our strategy since day 1, and we've been absolutely firm and solid. We do not incentivize our sales force to precisely do that, when, of course, other company do exactly the opposite, and that's not the way we do it. So in terms of now the impact on the monthly billings, so this is something which is new Today is not really material at all. And but I we see it coming.
The good news is that we believe again, because we become a consolidator of the enterprise, we see our traditional enterprise business becoming stronger and stronger and stronger in the next, if you prefer, few years as we are now migrating into that new model. So I don't think overall, we're going to see much significant impact again on the revenues and we'll start to see the billings being again, not on a quality basis, if you prefer, not meaningful as much as, of course, as they could be with other models. Does that make sense?
Yes, that's fair enough. Just one follow-up question on the channel contribution. So the channel stays relatively stable at about 40% of the business. And I'm just wondering if it's a priority to move this higher Or are you comfortable with your channel relationships and the contribution that you have today?
Very good question. No, we love, in fact, we're becoming significantly the relationship with the channel. They love us. In the past, the channel, they didn't like us because they say, Oh, you're just essentially competing against us because, of course, there's less professional services, less installation. Today is exactly the opposite.
They all so we have a very good relationship with them. The reason why our channel business in dollars is not growing as significantly is because of the huge of sales that we do with our direct business and that compensate. But if we look now in terms of the new business coming into Qualys, we could say that we could see that more of the new business is now coming from the channels. And so that's but overall, when you look at the dollars, it's not that significant. At some point in time, we established more and more relationship.
We have developed very strong relationship with IBM and others. We could see them starting to sell wonderful relationship with SecureWorks. All the PWCs, etcetera, the Accentures, all the Indian outsourcers do have absolutely fantastic channels. And so the business, of course and we're there and again, we're very differentiated because don't do professional services 0. And so we don't compete against our channel.
And it depends on the customers if they want to really come direct to Qualys or they want they prefer to go through our partners. This is their decision. It's not ours. Historically speaking, I've been there before. I've realized that typically you've got about 25% of the enterprise market who absolutely wants to have the direct relationship.
So you could say ultimately the model will go to a 25% direct and 75% channel. But again, we let that happen. We don't push one solution versus the other one. We're just let live live, as I used to say.
Okay. Sounds good. Thank you very much.
Thank you. Our next question or comment comes from the line of Jonathan Rookhay from R. W. Baird. Your line is open.
Good afternoon, Phillippe and Melissa. Your fleet over the last year, you've expressed confidence around the opportunity with the endpoint agent, yet it does sound like that adoption continues to be sluggish. Can you just talk about some of the issues you're seeing around that opportunity and why adoption hasn't been stronger?
First of all, I would not say sluggish at all. We have some fantastic deployments 250,000 agents to 200,000 agents at the endpoints. What however, this has been said, what makes that penetration essentially not as fast as I would like to, but we're also very confident that it will accelerate is the fact that today if you look at the poor companies, they have like 9 agents on their endpoints. It's absolutely crazy. And then you have of course IT.
I'm not very inclined of putting another agent. That's what we believe that the global IT asset venture is going to be absolutely a game changer because that's who is the beneficiary of that, IT being the first one. Security, of course, is a very beneficiary of that because, again, you cannot secure what you don't know. That's the big secret in our industry. We're putting a lot of things to try to protect.
But if you don't know what you protect, you don't have a very good effective defenses. So I think that will really help us continuing that penetration. So I will not say sluggish. I would say it's a penetration. And again, we don't really push.
We let things happen. But we're very happy with our progression onto the endpoint. And I think what is going to be another game changer is the is essentially is our mobile agent. Why? Because we see a lot of our customers, we look at all the banks, they all have these kind of tablets, etcetera.
Agent. So that also will make our agent technology, if you prefer, becoming more pervasive. And that's essentially our strategy. I've done in my life the 5 times ubiquity and that's what I believe today. We are at the point that now today with that new class of agent combined with the passive scanning that global I tested inventory that now we have what it means what we need to really reach ubiquity.
And that's really what I'm really pushing absolutely now. And again, I've done that for a fact. I don't even count anymore in my life.
I appreciate that color, Philippe. Impressive the uptick in terms of new product contribution to bookings. Can you talk about specific products driving that higher, especially maybe some notable success if you're seeing it with products that may have been released more recently?
So the number one still driver is the agent. That's the big one. However, this being said, we start to see the file integrity monitoring picking up. Threat protect, it's a very natural addition as well. So these are the one that we see.
I'm absolutely convinced that we're going to see a significant adoption. We have already quite a big adoption of our synchronization with ServiceNow, and it's coming as well, of course, with the ITAM inventory with inventory behind. This is going to really make a lot of sense. So that's, I believe, is going to be hot. Container securities are absolutely crazy.
I mean, they are totally the containers are changing the world, and I think we're uniquely positioned today. So already, our container security solution is moving. And I think with the addition of Layer inside, we have another game changer here in Container Security. So this is going to be very hard. Our web application scanning is doing well.
Still, we are not having much traction and this is with our web application firewall, which we should have now containerized because one of the issue is the deployment of it. So that's what limits that's the resistance of the deployment. It's the fact that you've got to install it behind the load balancers. It's a little bit complicated. But I think once we containerize it and that should come pretty soon, I think we'll have now the really good solution for web application security.
Great. Thank you very much.
Thank you. Our next question or comment comes from the line of Patrick Colville from Arete Research. Your line is open.
Hey, there. Thanks for taking my question. Can you just give me a bit more color on this 5,000,000 agents, which were purchased by a service provider? Just any context you could provide would be very useful.
It's difficult to give you the any context here. This is a major cloud provider and cloud platform, I should say. This is a path, not a cloud provider. It's a path. It's a platform as a service.
And so that's they are deploying more of Qualys, and we expect they are going to deploy even more and the other ones as well. So but as you know, they are not typically inclined to tell the world what they do. So we cannot unfortunately speak too much about.
Yes. I mean, we obviously see it as a testament, their investment with us and using our cloud agent as significant, which is why we wanted to call it out.
Yes, understood. And then can I just ask about the competition? Just how you see trends with Tenable and Rapid7?
Yes, please. Yes. So those things basically Tenable, as you can see, I mean, they have very good growth. We don't see it's like we're in different universe fundamentally. We are now starting to go into the universe with our community edition, with the new packaging that we did for consulting and starting to essentially compete against them there and in federal as well.
So it's almost like we were in different universe, not really competing against each other. So we are moving now we are looking at moving into their space. Now as far as Rapid7 is concerned, it's like they have moved away in a way we always have competed with them in the mid range. And then they have essentially today, they are more into the Splunk turf, trying to essentially provide more the analytics and kind of a platform. So we still see them in the mid market, and we compete very effectively against them.
They have also kind of a managed security service with them. They don't compete against us, but against our partners. So they are there. And but I think we believe that as we continue delivering, especially that global IT asset inventory is a game changer. And at the user conference, and I hope you could come, we're going to also to unveil another major initiative that we are undergoing that will speak essentially more to our customers and trying to make it that public, but essentially embark our customers, which is always what Qualys has done, into a new adventure.
So now today, our big adventures, we took 10 years to get there with the global I tested inventory. We're now moving into another big adventure, continuing pushing the boundaries of our platform. Got it. Thank you so much. Thank you.
Thank you. I'm showing no additional audio questions in the queue at this time. I would like to turn the conference back over to management for any closing remarks.
Okay. So thank you very much, and thank you to you all for of these very good questions. So I would like again to encourage you to really listen to that video, which takes I think it's about 13 minutes. You don't have to listen to the entire 13 minutes to get a gist of it. I think you will get that pretty quickly.
And also, I really would like to invite you again to our user conference and Investor Day, where you can speak with our customers. You're going to see a lot of the thing and really will give you the sense that really Webbe the true platform. That platform is really shaping up extremely well. So you could see that again for yourself. So I hope to see you there.
And again, thank you very much for your time and for your questions.
Ladies and gentlemen, thank you for participating in today's conference. This concludes the program. You may now disconnect. Everyone have a wonderful day.