Ladies and gentlemen, thank you for standing by, and welcome to the fourth quarter 2019 Rapid7 earnings conference call. At this time, all participants' lines are in a listen-only mode. After the speakers' presentation, there will be a question and answer session. To ask a question during the session, you will need to press star one on your telephone. Please be advised that today's conference is being recorded. If you require any further assistance, please press star zero. I would now like to hand the conference over to your speaker today, Mr. Neeraj Mahajan, Vice President of Investor Relations. Please go ahead, sir.
Thank you, operator. Good afternoon, everyone. We appreciate you joining us today to discuss Rapid7's fourth quarter and full year 2019 financial and operating results in addition to our financial outlook for the first quarter and full fiscal year 2020. With me on call today are Corey Thomas, our CEO, and Jeff Kalowski, our CFO. We've distributed our earnings press release over the wire. It is now posted on our website at investors.rapid7.com, along with the updated company presentation financial metrics file. This call is being broadcast live via webcast. Following the call, an audio replay will be available at investors.rapid7.com until February 18, 2020. As a reminder, our discussion today contains forward-looking statements about events and circumstances that have not yet occurred, including, without limitation, statements regarding objectives of future operations and future financial and business performance.
These forward-looking statements are based on our current expectations and beliefs and on information currently available to us. Actual outcomes and results may differ materially from the expectations contained in these statements due to a number of risks and uncertainties, including those contained in our most recent quarterly report on Form 10-Q and subsequent reports that we file with the SEC. The information provided on this conference call should be considered in light of such risks. Actual results and the timing of certain events may differ materially from the results or timing projected or implied by such forward-looking statements, and reported results should not be considered as an indication of future performance. Rapid7 does not assume any obligation to update the information presented on this conference call, except to the extent required by applicable law.
Our commentary today will primarily be non-GAAP terms, and reconciliations between our GAAP and non-GAAP results and guidance can be found in today's earnings press release. At times, in our prepared remarks or in responses to your questions, we may offer incremental metrics to provide greater insight into the dynamics of our business or our quarterly results. Please be advised that this additional detail may be one-time in nature, and we may or may not provide an update in the future on these metrics. With that, I'd like to turn the call over to our CEO, Corey Thomas. Corey?
Thank you, Neeraj, good afternoon, everyone. Thank you all for joining us today on our fourth quarter and full year 2019 earnings call. Rapid7 capped off another great year in 2019 with strong full-year operating results. Our ARR grew at 35%, and we again exceeded the high end of our guidance, with revenue growth of 34%, while delivering a nine-point improvement in non-GAAP operating margin YoY. We grew customers by 16% and ended 2019 with more than 9,000 customers, and average ARR per customer increased by 16% to over 37,500. These results again reflect a healthy demand environment and consistent execution. With a leading and well-diversified product portfolio, we see a large opportunity in front of us and believe we are well-positioned for future growth. As a result, for 2020, we expect strong ARR growth of 25% at the midpoint while continuing to deliver operating leverage.
Two years ago at our Investor Day, we outlined a set of ambitious goals for Rapid7 through 2020. We guided to revenue and ARR of $350 million by 2020 and break-even non-GAAP profitability in 2019. We comfortably met our profitability targets in 2019, we are on pace to exceed our revenue and ARR targets for 2020. Before we talk about 2020 goals, let's quickly review our 2019 goals. Our first goal was to grow ARR by 30%+ in 2019, we delivered strong growth of 35%. Our second goal was to make it easier for our customers to adopt our platform and optimize our customer economics. Our ARR per customer grew by 16% last year and by 60% from two years ago. With ARR per customer currently at $37,500 against a potential of $200,000, we have plenty of room to grow.
Our third goal was to achieve non-GAAP operating profitability in 2019. As we mentioned before, we continued to invest in our business over the course of last year. Even with these investments, we delivered significant operating margin improvement while delivering strong ARR growth in 2019, setting ourselves up for continued growth in 2020. We have strong momentum entering 2020. Our results reflect that the markets we operate in are healthy and our platform strategy is working with all four product pillars driving growth. These products are at different stages of maturity, but each represents a significant opportunity, and together they provide us with the foundation for meaningful levels of long-term growth. InsightVM remains our flagship product, and we expect the vulnerability management market to grow at a healthy rate, but slower than the growth experienced in the last few years.
Our investments in InsightVM are primarily focused on helping customers increase their productivity by improving prioritization, remediation, and automation. It is this focus on customer satisfaction and productivity that is best highlighted through the Forrester Total Economic Impact study of InsightVM, which is a recent commissioned study conducted by Forrester Consulting on behalf of Rapid7. Forrester highlights that with InsightVM, customers could potentially realize more than 300% ROI over a three-year period, over 20% reduction in false positives, and 60% reduction in patching efforts when compared to their incumbent VM solution. It's the success in winning new customers and recognition by our existing customers that really matters. A great example of how our platform strategy is resonating with customers is our recent expansion deal with one of the world's largest accounting bodies, with operations in more than 150 countries.
We initially engaged them in early 2019 to help secure their applications with InsightAppSec. Over time, we also began to understand the challenges they faced with their legacy vulnerability management and SIEM solutions. As they realized the impact and value of our Insight platform, they ended up adopting our complete platform, leading to a 6x multiple of the original deal in terms of ARR. InsightIDR, our SIEM solution, continues to grow at an exceptional rate. With our analytical focus on providing a simple yet powerful cloud-only solution, we are well-positioned to gain market share in this critical segment of the cybersecurity market. We have momentum not just with our established products, but also with our emerging products. Over the last few years, we have developed and refined built-in workflows and automation capabilities for InsightConnect. This year, we will be increasing our investments to accelerate growth.
The market opportunity for SOAR is huge, and we believe we're uniquely positioned to be the oxygen in the space. It is this dedication to focusing on the needs of resource-constrained enterprises that led Frost & Sullivan to recognize Rapid7 with the 2019 Global SOAR Company of the Year award. These recognitions by customers and industry experts give us the confidence that we are on track to build a durable growth company. Now, let's turn to our three main goals for 2020. Our first goal is to continue to drive sustainable top-line growth. We are forecasting ARR growth of 24%-26% and revenue growth of 21%-24% for 2020. Our second goal is to continue to optimize our customer economic engine. We're focused on delivering strong customer growth, and we'll be investing heavily in improving our existing customer economics.
While our customer acquisition cost is stable, the real improvement will be significant increases in customer lifetime value, driven by three key factors, increasing customers who are on our Insight platform, which we retain at a higher rate, increasing upsell and cross-sell efficiencies, and introducing our emerging products to our broad customer base. We're already seeing evidence of this for our Insight platform customers, which have substantially higher achievement of ARR per customer, driven by higher products per customer and a more efficient cross-sell engine. Our third goal is to continue to drive leverage in our business. We are guiding for a non-GAAP operating income of $7 million-$11 million for full year 2020, a 1%-2% margin improvement over 2019. Before I hand it over to Jeff, I would like to close out by sharing a perspective of how we think about our long-term process.
First and foremost, our set-top vision is resonating with customers, and we will continually focus on scaling and delivering the vision that we already set forth. Secondly, we're seeing the benefits of our platform engine, and we believe that we will be able to deliver sustainable growth with continued leverage and profitability. Specifically, we have confidence today that we can deliver a three-year revenue CAGR of at least 20% through 2022. Additionally, you should expect us to deliver operating margin improvement of 2%-3% if we grow ARR in the low to mid-20s. Expect an operating margin improvement of 1%-2% for ARR growth of mid to high 20s, and expect an operating margin improvement of less than 1% for over 30% ARR growth. This model and our operational focus allows us to aggressively pursue customer value creation while delivering ongoing value to our shareholders as well.
In conclusion, Rapid7 is very well-positioned to help solve cybersecurity challenges for enterprises of all sizes and needs. Our customers are embracing our platform, and our multi-product strategy puts us on a path to sustainable growth and profitability. We look forward to delivering on our 2020 targets. With that, let me turn the call over to our CFO, Jeff Kalowski. Jeff?
Thanks, Corey, and good afternoon, everyone. We're pleased with our strong performance in the 4th quarter and full year 2019, with results that again exceeded our guidance on all metrics. Before I begin, I want to remind everyone that except for revenue, all financial results we will discuss today are non-GAAP financial measures, unless otherwise stated. Reconciliations between our GAAP and non-GAAP results and guidance can be found in today's earnings press release. Total ARR grew to $338.7 million, a 35% increase YoY. We ended 2019 with revenue of $326.9 million, a growth of 34%, exceeding the high end of our guidance. Our recurring revenue grew by 45% in 2019 and constituted 87% of total revenue in 2019 as compared to 81% in 2018.
Strong top-line performance helped us deliver a significant beat on our operating income guidance as well, and we reported non-GAAP operating income of $2.4 million for 2019, a nine-point margin improvement over 2018. Our customer count increased by 16% to approximately 9,000, a result of our continued focus on new customer acquisition while maintaining our traditionally high retention rates. In 2019, we also started a program to accelerate the migration of our Logentries customers to the Insight platform. During this transition, we have successfully migrated about 600 customers so far, which are not included in our customer count today, as their contract value is less than $2,400 per year. Let's turn to our fourth quarter results. Total revenue for the fourth quarter was $91.6 million, an increase of 33% YoY and above the high end of our guidance.
This strong growth was primarily driven by better than expected product revenue. Average ARR per customer increased to approximately $37,500, up 16% YoY. As Corey mentioned, one of our goals for 2020 is to continue to optimize our customer economic engine. We'll significantly increase our investments to improve cross-sell and upsell efficiencies, bringing us closer to our ARR per customer potential. Our focus on recurring revenue drove a 47% increase in our product revenue YoY. This was partially offset by a decline in maintenance and support revenue as Nexpose customers continue to not migrate to the Insight platform, resulting in reclassification of maintenance revenue to product revenue. Similar prior quarters, we believe it's more useful to look at product and maintenance and support revenue together, which collectively grew 37% YoY.
In fact, from 2020 onwards, we will be reporting product and maintenance and support revenue together. Looking at the business geographically, in the fourth quarter, revenue from North America grew by 30% YoY and comprised 83% of total revenue. Rest of the world revenue grew by 50% YoY and comprised 17% of total revenue. Turning to margins, total non-GAAP gross margin was 75%, slightly better than Q4 last year and was primarily driven by a mix shift towards higher gross margin product revenue. During the fourth quarter, our sales and marketing expense remained flat at 45% of revenue when compared to Q4 2018. As we've mentioned in our previous earnings calls, we increased our spending to not only expand our market share in our core markets, but also ramped up investments in our hyper growth businesses to meet the 2020 goals that Corey mentioned.
R&D expenses were 19% of revenue in Q4 2019, down compared to 22% in Q4 2018, but similar to that of Q3 2019. We expect R&D spending, excluding the effect of capitalization of internally developed software, to be in the range of 20%-22%. G&A expenses in Q4 2019 were 10% of revenue, down from last year's level of 11%. For Q4 2019, we generated non-GAAP operating profit of $0.8 million, well ahead of our guidance. Operating margin was approximately 1% compared to a margin of -4% in Q4 2018. Adjusted EBITDA for the fourth quarter was $3.7 million and diluted non-GAAP net income per share was $0.03, also well ahead of our guidance. We ended Q4 with cash equivalents and investments of $262.5 million, compared to $257.7 million as of Q3 2019.
Contract length for Q4 2019 was 16 months, a slight increase from 15 months last quarter. We expect contract lengths to stabilize around these levels. During the quarter, operating cash flow was $7.8 million as compared to $11.9 million in the prior year. For the full year 2019, operating cash flow was negative $1.4 million. We exceeded our guidance from last quarter of negative $5 million due to strong Q4 collections, which drove a significant decline in our days billing outstanding. Now moving on to the guidance. First, the annual guidance. For the full year, we expect ARR to be in the range of $420 million-$427 million, which is 25% growth at the midpoint. We anticipate total revenue to be in the range of $396 million-$404 million, which is 22% growth at the midpoint.
We expect non-GAAP operating income to be between $7 million-$11 million for 2020. As Corey mentioned, at the higher end of ARR growth, we'll be investing back in the business to drive growth on a sustainable basis. We expect cash flow from operations to be approximately $10 million for 2020. We anticipate non-GAAP net income per share to be in the range of $0.11-$0.18, which is based on an estimated 55 million diluted weighted average shares outstanding. The weighted average shares outstanding for full year 2020 represent the diluted shares outstanding given our projected non-GAAP net income. Now moving on to the quarterly guidance. For Q1 2020, we anticipate total revenue to be in the range of $91.6 million-$93.2 million.
We anticipate non-GAAP operating loss in Q1 2020 to be in the range of -$6.3 million to -$5.3 million, which reflects front loading of certain one-time expenses. We anticipate non-GAAP net loss per share for Q1 2020 to be in the range of $0.13 - $0.11, which is based on an anticipated 50.2 million basic weighted average shares outstanding. The weighted average shares outstanding for the first quarter of 2020 represent basic shares outstanding given our projected non-GAAP net loss. In conclusion, 2019 was another strong year for Rapid7, where we delivered 35% ARR growth and non-GAAP profitability. We look forward to delivering another strong year in 2020. With that, we appreciate your time and support, and we'll now open the call for any questions. Operator?
Thank you. As a reminder, if you would like to ask a question, press the star, then the one key on your touchtone telephone. If you would like to withdraw your question, press the pound key. Our first question comes from Rob Owens with Piper Sandler. Your line is open.
Gregg, good afternoon. Thanks for taking my question. Corey, I wanted to get a bit of a broader view on your go-forward cloud strategy, and while you have a lot of capabilities to support workloads in the cloud, just how you plan on expanding that. Then to dovetail that question a little bit, and Jeff, thanks for all the guidance that you gave, but how does M&A fit into the picture? I know you guys have done tuck-ins in the past. Does that current guidance include any potential transactions, or could we see some dilution if you guys were to get acquisitive this year? Thanks.
It's a great question, Rob. First and foremost, as you indicated, we have a very strong starting position when we think about the cloud. All of our core technologies include the ability to consume data from cloud workloads. We have a strong and strengthening partnership with both Amazon and Microsoft Azure. Secondly, we actually are going deeper in the cloud in some areas. When you think about our tCell product, it's already looking at applications designed for the cloud, which enables us not just to have a standalone WAS solution, but that capability enables us to do detection for IDR in the cloud, and it also enables our broader AppSec story. We're starting with a very small cloud.
As you indicated, we have to continue to strengthen and evolve it, because cloud is one of the most relevant areas as we continue to grow over time. That is definitely heavily focused on organic investments, which we already have in plan and we already plan to make, and that's part of our long-term outlook. It could also include strategic M&A if the right opportunities come along for the right price. That said, our current plan, when we think about long-term growth and sustainable growth and that cake over the next few years of over 20%, it does not factor in M&A being a significant part of that. Without a doubt, I'm sure we'll do some tuck-ins, but we may do other things if they make sense and follow our strategy at the time.
Right now, we're heavily focused on executing our strategy that we've already laid out. We have an organic plan to do that. We're very disciplined around looking for the right opportunities at the right price point if they fit into our long-term strategy.
Great. Thanks.
Thank you, Rob.
Thank you. Our next question comes from Matt Hedberg with RBC. Your line is open.
Oh, hey. Great. Thanks, guys. I wanted to follow up on the 2022 guide. You've got some smaller products, IDR, QSR SOAR , AppSec, and Connect, well above the corporate averages. Just wanted to kind of get your thoughts, Corey, on how sort of your core VM business should trend over the next several years. I think you guys have been growing above market rates, what are the components there that allow you to continue to deliver that kind of core growth?
Yeah. One is TMI. We look at VM as one of the healthiest sectors, if you think about the overall technology market and even the security market. We said for a while now that we believe the sustainable growth rate in the VM market is in the low to mid-teens. We continue to have that view, and we think it's driven by a couple of fundamentals. The most important fundamental is that there's still lots of companies around the world that don't have VM coverage, and that's our heavy focus in expanding that mid-market and that global base of customers. Secondly, the number of assets that customers have in their environment continues to grow and expand. Even in established customers, that still adds a couple points of growth every year. We still have companies that are under-penetrated overall.
Our long-term view is that you have periods along the way where you have really high rates of, if you think about upgrade cycles or expansion cycles, where customers drastically enhance or grow the number of assets under management. We think the steady state growth rate still supports one of the best technology sectors in that low to mid-teens for the Vulnerability Management market, and we think that's a great core position, especially when you look at that in the context of our other hypergrowth businesses around IDR and SOAR.
That's great. Maybe a follow-up to that, sort of building up to that growth profile. Obviously, you guys have been methodical in how you add sales headcount on an annual basis and obviously count on cross-sell and upsell to aid growth as well. When we're looking out several years, should the cadence of quota reps continue, I think, kind of low double digits?
Yeah. You can think about the sales being tightly tied to our OpEx expansion over time, and we'll continue to get leverage in sales and marketing, but you can expect it to grow roughly in line with our total OpEx growth. When you think about the model that we outlined earlier, is if there's lower ARR growth, you're going to see faster margin expansion, which I think is reasonable and people would expect. At higher growth, you'll still see some expansion, but it'll be expanding at a slower rate of growth. What that really means at the end of the day is our sales expansion and our sales cost really is tied to growth. Regardless, we're looking to expand the leverage that we get in the business YoY.
Thanks. Well done this year, guys.
Thank you very much. Appreciate it.
Thank you. Our next question comes from Michael Turits with Raymond James. Your line is open.
Hey, Corey and Jeff. You gave a couple of ranges of ARR growth at which you were tying to where margins would be. Some of them, the latter ones, the higher ones, were above the current range of guidance for next year. What are the things that you see that are the toggle that could get you to ARR above the 2020 guide?
Yeah. Consistent with our past, we tend to think about businesses that actually have scale to be more predictable. Specifically, if you look at it, both our SOAR business especially, is a business that we are frankly starting to accelerate the investment this year. We've got amazing customer feedback, there's great fundamental demand in the market, our three-year plan that we actually laid out, has some of the cost of the SOAR but doesn't fully have the benefits of it, because that would not be reasonable and that's not our approach to fully bake in things that aren't scaled and are unknown. To the extent that that business takes off as expected, that actually gives us upside to the current plan that's there.
You can really think about the current plan really heavily focused on the stable growth that we have in the VM business and the continued strength that we see and that we continue to see in the overall IDR business, augmented by a healthy AppSec business and an emerging SOAR business. We're continuing per the previous question, to make investments in the cloud, which allow us to have ongoing upside over time. That's the core way we think about the overall business.
Thanks, Corey. Jeff, for you, the guide for cash flow from ops for this year is pretty much in line with the operating income guide. Considering that, I would assume that you said that duration should be about stable. I would imagine billing should be a contributor to working capital. What is it that's keeping cash flow from ops pretty much that same level as EBIT?
Excuse me. We're forecasting about $10 million in operating cash flow, which is, if you look at our It's not really about duration, but we're now normalized. If you take our last year's billings and you adjust for services and you apply the growth rate at the midpoint of 25% to that billings number, you're going to get to our approximate billings number for, you'll be directionally correct for that billings number for this year and 2020. Based on our net income guidance, I'm sorry, our operating income guidance is 711, that should get you to that $10 million number.
Okay, thanks, Jeff.
Thank you.
Thank you. Our next question comes from Gur Talpaz with Stifel. Your line is open.
Okay, great. Thanks for taking my question. Corey, if I look at the presentation, you've touched ARR for customer potential at about 200K, but if I think about all the recent endeavors you've made to connect and the ability to push upstream here into the enterprise, could this number ultimately prove conservative as you think about the push out into 2022?
Yeah, absolutely. We tend to take a more conservative approach for things that are unknown. If you think about both the application security and InsightConnect, we've taken a fairly modest approach when we actually think about those businesses. Then there's some businesses that we're partially in. We still have organic investments focused on, like our cloud businesses. Again, we've taken a fairly measured view when we look at it overall. We think that's the right thing. One of the things that we talked about before is while we're starting to approach the 40K mark, we have line of sight and visibility with fairly good confidence to the 60K. Then we think about it as a steady march and expansion of what's the addressable line of sight we can actually get there. At the same time, how do we grow the overall potential?
What I hope you'll see over time is us continuing to show progress, us having a path to line of sight to grow the actual current ARR per customer, but us also expanding the potential ARR per customer steadily over time. Really what I focus on and what I look at, just like we did three years ago, is what's the overall character of the company, the organization, and the customer base as we exit the next three-year period? When we exit that next three-year period, we want to make sure that we have a good growth opportunity with healthy economics in front of us, just like we have today.
That's all. That's really helpful. If you look at IDR specifically, as the product matures, have you seen any shifts within the potential customer set here as you sort of make a broader push upstream and as the product itself gets better? I think beyond that, have you seen any shifts in the competitive space as well within that market?
Yeah, look, similar to how Rapid7 approaches it, we always tend to focus on a narrow set of customers early in our market evolution, we just steadily add more and more customer segments. With IDR, that's been happening on an ongoing basis. I talked about last year when we acquired NetFort that in 2020 and 2021, you should expect to see us starting to move deeper into the larger accounts, enterprise Fortune 1000 segments. We've already slowly started that move, we're seeing some success there. We also are starting to expand around the world. Some of the pickup that we started to see last year was IDR being addressable in more markets around the world, I think that that'll continue as we go forward.
For context, while IDR has been successful, we still have relatively small market share of the overall market, but we have great momentum, and so we look at this as lots of potential in front of us.
That's all. That's helpful. Thanks again. Congrats on the results.
Thank you very much.
Thank you. Our next question comes from Jonathan Ho with William Blair. Your line is open.
Hi. Good afternoon. I just wanted to touch on the 108% renewal rates. I think you guys said that you're expecting it to sort of plateau around these levels. Can you just maybe give us an updated view on maybe what you're expecting here and if there's been any change in underlying churn? Thanks.
Jonathan. Last year ended roughly where we expected it to end. Our overall, if you think about the renewal rate really being comprised of two core things, one of them is the retention rate of how well we retain dollars of our overall customers. We continue to perform quite strong there and we're seeing healthy improvements there. The second thing is how much do we actually focus on upsell or cross-sell versus adding net new customers. As you were familiar, last year we had a heavy focus on adding net new customers. That was wildly successful as reflected by our 16% customer growth in the last quarter. Overall, we ended where we thought we would last year. We're set up well for this year.
Because it's not a primary metric, it's not something that we're actually forecasting or targeting for this year. When we have our analyst day, we are going to spend some time talking about the overall economic model and how we continue to actually grow and the segments of growth as we actually move forward.
Got it. Then, just in terms of your ARR outlook for 2020, I know you guys have shown some conservatism at the beginning of the year in the past. Just given, I guess, there's less of a focus right now on showing the same degree of operating leverage, should we expect there to be similar levels of outperformance, or has there been any shift in terms of that guidance strategy?
I think you will expect to see as we've actually moved to a more normalized model where we don't have the shift from subscription, which was frankly unknown. If you think about why we had some of the conservatism in the past, we just had more unknowns. We were actually going from single product to multi-product. We were shifting from perpetual to subscription. You just have to be more thoughtful and more conservative in your approach when you actually have more unknowns. The good thing is today we actually sit with a much higher degree of things that are known and are at scale. What I would expect is much more typical or aligned, so not as big a gap as we actually had in the past.
In fact, we even saw that last year, and we told people last year, we were like, when we started off the year, we said, "Listen, you expect 30%+", we ended at 35%, which we considered extraordinarily strong performance. We gave this year not a plus range, but we gave a tighter range of 24%-26%, because we expect this year to actually be much more normalized versus past years where we had a much higher degree of unknowns.
Thank you. That's very helpful.
Thank you.
Thank you. Our next question comes from Gregg Moskowitz with Mizuho. Your line is open.
Hi, guys. Gregg Moskowitz. How are you?
Hi, Gregg.
Hey, Gregg.
Corey, I think if I heard correctly, you mentioned that IDR continues to grow at an exceptional rate. Approximately, I guess, what was IDR as a percentage of net new bookings this quarter? I'm curious if you're having more success landing with IDR today as compared with six to 12 months ago.
Gregg, it's Jeff. It was again, over 30% of the new bookings. We started out disclosing when it was over 10 of the new, it was over 20, the next data point will be, if it gets over 40%. With respect to the ARR growth in total, it was about 75% for the year.
Okay. That's fantastic.
Yeah. To your question is that, yes, we're very successful in landing new customers and new accounts. It's one of our stronger land engines within the company, which is part of what gives us confidence as we go forward.
Terrific. Just a clarification, a follow-up to Mike Turits' question. By the way, very helpful to kind of get the fiscal 2022 outlook, so appreciate that. I did want to just confirm, because two out of the three scenarios do reflect an acceleration, and the third scenario contemplates maintaining an ARR growth rate in the mid-20s. This does not, even if you look at the higher-end assumptions on growth, it does not include any sort of heroic assumption for SOAR and other emerging products. Is that correct?
Yeah. If you think about our growth this year, you can think about the growth this year at sort of that 24%-26%, to be an area where we feel comfortable, but that is primarily driven off the IDR and VM. The reason that we actually communicate it, because we have parts of Applications, Cloud, and SOAR that we are starting to invest in, but they are unknowns. One of the things that we want to be clear on is that if we are seeing the return of the performance, we will be investing in those things because they actually have good potential. Because they are unknowns, they are not deeply baked into the revenue and ARR guidance that we have over the next three years. If we see good performance, they do represent upside.
It would be also not correct to say that it's upside that we should bank on today because it's an unknown. If we see the performance, then we are communicating that we'll continue to invest behind performance that we see.
Okay. Makes a lot of sense. Thanks, guys.
Thank you.
Thank you. Our next question comes from Melissa Franchi with Morgan Stanley. Your line is open.
Thanks for taking my question. Corey, I'm wondering if you could talk a little bit more about the AppSec product, particularly the investments you're making moving forward in that portfolio, how it's performing relative to your expectations.
Yeah. InsightAppSec is the dominant product in the market. That's our cloud-based SaaS solution. It's performed extraordinarily well in comparison to expectations. As you know, the AppSec market has great potential, but it's a massively fragmented market. We have to be very thoughtful about our expansion. We have both organic investments, especially as you think about that market and the cloud market together. It also has the opportunity for M&A, but we also have to be very thoughtful to make sure that M&A makes sense for us. You saw us acquire tCell a few years ago. We're seeing good demand. That's an area that we will continue to land, and that's an area that we'll continue to expand upon over the coming year. We're having good customer momentum, but it's very early on for the RASP market.
I would say AppSec also represents a market that has potential for M&A, but you'll find us fairly consistently thoughtful, strategic, and patient when it comes to long-term M&A. AppSec is an area of opportunity. We're seeing great success in the parts of the market that we participate into today, and we're going to continue to expand our efforts there over time.
Okay. Helpful. Thank you. A quick one for Jeff. If we're thinking about ARR growth next year relative to revenue growth, the difference I would assume is just a slower services revenue growth next year? Just wondering if that's correct, and then how we should think about the services business in terms of the mix moving forward.
That's correct. The difference is solely due to the services. I would assume that the services will be about flattish from this year. If you take the product revenues and the maintenance and support revenues and combine them together, those will be directionally in the same area as the ARR growth.
Okay, thank you.
At 25% of the mid, that would be about the same. It's closely related to the ARR growth.
Right. Okay. That's helpful. Thank you.
Thank you, Melissa.
Thank you. As a reminder, if you would like to ask a question, press the star, then the one key on your touch-tone telephone. We have a question from Nick Yako with Cowen & Co. Your line is open.
Hey, guys. Thanks for taking my questions. I wanted to ask about international, and I was just wondering if you could discuss some of the key investments you're making on the international front, and then any of those investments that you would highlight that could cause that international business to inflect over the next year or so.
I would say there's two core things. One, we're still scaling our data centers around the world, and we continue to add more data centers in more countries, and that's a steady pace. As we add those, it allows us to actually fully address the market. As you know, one of the unfortunate things as a cloud company is that more and more countries require their data to exist within the country's boundaries. We've been steadily expanding the number of countries that we actually have data centers in around the world.
The second thing to keep in mind is one of the things that you'll see for some of the momentum last year and as we enter this year around international is that typically when we have new products, we do start selling them in the U.S. because it's easier to actually target a customer segment in a local market. But as we get momentum, we actually start selling in more and more markets. So you saw that dynamic, especially with IDR last year, as it, for the first year, really became much more of a global business, and we think there's lots of growth in IDR over the next couple of years, and that's a catalyst.
Likewise, with SOAR, it's heavily focused right now on the early stages in North America, but over the next several years, we do expect some momentum if we continue to see progress on a global basis there. Those are two catalysts as we actually think about the overall international expansion as we go forward.
Okay. That's helpful. Jeff, I did want to ask if there's any additional color you can provide around just a mix of ARR by products finishing 2019. Thank you.
Yeah. Well, the ARR is still over 50% of the total ARR, but it's becoming a less percentage.
VM.
I'm sorry. VM is over 50%. It's becoming less of a percentage as the IDR grows. IDR is now over 20% of the business and of the total ARR. AppSec and others make up the difference.
Okay. Helpful. Thank you.
Thank you very much.
Thank you. I'm showing no further questions at this time. This concludes today's conference call, and thank you for participating. You may now disconnect. Everyone, have a great day.