Greetings. Welcome to the Tenable Q4 2022 Earnings Conference Call. At this time, all participants are on a listen-only mode. A question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. Please note this conference is being recorded. I'll now turn the conference over to your host, Erin Karney, Vice President of Investor Relations. You may begin.
Thank you, operator, and thank you all for joining us on today's conference call to discuss Tenable's Q4 and full year 2022 financial results. With me on the call today are Amit Yoran, our Chief Executive Officer, and Steve Vintz, our Chief Financial Officer. Prior to this call, we issued a press release announcing our financial results for the quarter and full year. You can find the press release on our IR website at tenable.com.
Before we begin, let me remind you that we will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for Q1 and full year 2023, growth and drivers in our business, changes in the threat landscape in the security industry and our competitive position in the market, growth in our customer demand for an adoption of our solutions, planned innovation and new products and services, and our expectations regarding long-term profitability and free cash flow. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events.
Forward-looking statements represent our management's beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. We disclaim any obligation to update any forward-looking statements or outlooks. For a further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent annual report on Form 10-K and subsequent reports that we file with the SEC, which are available on the SEC website at sec.gov. In addition, during today's call, we will discuss non-GAAP financial measures. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalent.
Our earnings release that we issued today includes GAAP to non-GAAP reconciliations for these measures and is also available on the investor relations section of our website. I'll now turn the call over to Amit.
Thank you, Erin. Today, I'll discuss our financial performance, the strong traction we're seeing with Tenable One, and our growth beyond vulnerability management in exposure management. With that, let me first touch on our financial performance. In Q4, we delivered strong revenue growth at 24% year-over-year. In addition, non-GAAP income from operations was $19.9 million, and unlevered free cash flow was $32.1 million, both above expectations. For the full year, our results were well above our initial expectations, with full-year CCB growth of 26% and $67.7 million in income from operations. Additionally, we had another strong quarter with large deals as we added 140 net new six-figure customers, which is a record for us and is up 40% year-over-year.
Even more importantly, the number of 6-figure deals accelerated throughout the year, further validating our corporate strategy and demonstration of momentum we're building. As the market leader in vulnerability management, we're seeing great demand in the market, including new customer acquisition, renewals, and expansions. Our years of leadership in VM has put Tenable in a great position to target bigger, more strategic deals as customers continue to move beyond traditional VM to understand and reduce their cyber risk. We believe this is driving the acceleration of six-figure deals. We had strong performance in OT, including a number of six-figure deals. This is an early-stage market with tremendous opportunity where we are now proving our ability to close larger transactions. We also saw particular strength in Tenable One, which I will discuss in more detail shortly.
At Tenable, we continue to differentiate ourselves as a technology leader by continuing to prioritize investment in product innovation and go to market, including our partner ecosystem. Over the last several quarters, we have moved quickly to align our efforts where we see the greatest opportunities in the market. As our Q4 results indicate, we are clearly seeing success. Our decision to focus our product and go-to-market efforts around a unified platform is resonating in the market. We are incredibly excited by the traction we're seeing since launching Tenable One. Tenable One continues to see rapid adoption and represented mid-teens percentage of total new business in the quarter. Demand was broad-based as we saw healthy numbers of lands from new customers as well as upsell from existing customers across SC, IO, and Nessus.
Despite a tougher macro, we continue to see a material uplift with Tenable One relative to standalone VM. We're also excited to note that customers are allocating Tenable One licenses across more of their attack surface, including their cloud infrastructure, truly leveraging the power of the platform. Collectively, including Tenable One, our exposure solutions now represent approximately 50% of our renewals and new business, up from 40% a year ago. We're able to leverage our leadership in VM for a natural upsell to Tenable One, making us more strategic and driving larger transactions. Tenable One brings a single unified view across VM, cloud security, Active Directory and identity, and external attack surface management to deliver compelling analytics. Threat actors don't limit their attacks to one silo of technology. They're looking for the right combination of vulnerabilities, misconfigurations, and account over-provisioning that will meet their objectives.
Security teams have been operating on point products and specialized solutions, which created isolation within their operations. Tenable One enables collaboration across the entire security stack. It achieves this through enhanced analytics, asset inventory, and building Attack Path Analysis to determine which combinations of vulnerabilities, access and permissions, and misconfigurations could result in paths from external points to sensitive internal targets. Leveraging these capabilities, we believe we offer the first platform to truly operationalize preventative security. Operationalizing preventative security has been an objective in the market for a long time. It's really hard to do and requires a deep understanding of vulnerabilities, context, and prioritization. It's our long history of understanding exposures at a very deep level that uniquely positions us to deliver on this objective. We believe this gives us an edge with our technology and also in helping our customers' security teams operate more efficiently.
Connecting related points across security issues enables our customers to have broader visibility into risk across siloed security functions. In these market conditions, security teams need to do more with less. Tenable One enables vendor consolidation, we are consistently attracting a more senior economic buyer, which is crucial as investments require more scrutiny. A great example of this is a win with a very large global technology and media company. They were going through a large digital transformation, and they were looking at different vendors to secure their cloud, their external attack surface, and their VM assets. Tenable One enabled them not only to consolidate vendors, in doing so, also unify visibility across asset types. Years ago, we pioneered the concept of exposure management and set out a roadmap aligned with that vision.
Tenable One leverages our leadership in VM and realizes the next great step in that vision for managing cyber exposure. Customers and industry analysts alike validate our VM leadership and the importance of cyber exposure. Gartner continues to talk about exposure management as a discipline, in particular, the importance of advancing a cyber exposure management program as critical to developing actionable security posture improvement plans. We believe their commentary aligns very well with the attributes of Tenable One. Additionally, IDC recently published their 2021 VM market share report, highlighting Tenable as the 2021 market share leader for the fourth year in a row. IDC added commentary around the importance of a holistic view and risk prioritization as the number of vulnerabilities is accelerating every year.
As the leader in VM and now a platform-first company, we believe we've earned the trust of our customers to be the vendor of choice as they look to cover more of their attack surface. Since the release of Tenable One, we're seeing an immediate interest and adoption of Tenable One for cloud-native use cases. Customers are looking to improve visibility into cloud assets, understand exposures, and manage risk around this portion of their attack surfaces. This provides a means to consistently enforce cloud security posture and compliance across multi-cloud and hybrid environments that is delivered in a single unified platform and is more cost-effective and scalable than continued use of point provider tools. In fact, a great example of this was a Q4 upsell for Tenable One within a large aviation company.
They saved budget by converting from another cloud security product and instead expanded from Tenable.io to Tenable One. As we look to 2023, we will continue to focus on innovation, and we'll continue to increase our investment in quota capacity, enterprise customer support, customer experience, and our partner ecosystem. While making these investments, we're also delivering a strong annual cash flow guide for this year and reiterating our $240- 250 million in unlevered free cash flow target in 2024. Our ability to deliver profitable growth with investments in innovation and distribution leaves me with great confidence that we will be able to execute on the opportunity in front of us. In short, we're incredibly proud of our ability to execute in this market and look forward to yet another successful year.
I'll now turn the call over to Steve for further commentary on our financial results.
Thanks, Amit. We are pleased with our results for Q4, highlighted by better than expected growth and profitability due to strong customer demand. I will provide more commentary momentarily, but first, please note that all financial results we discuss today are non-GAAP financial measures, with the exception of revenue. As Erin mentioned at the start of this call, GAAP to non-GAAP reconciliations may be found in our earnings release issued earlier today, which is posted on our website. Now on to the results for the quarter. Calculated current billings defined as the change in current deferred revenue plus revenue recognized in the quarter grew 23% year-over-year to $238.9 million and benefited from strength and vulnerability management and continued momentum with Tenable One, our exposure management platform. Underpinning our better than expected top line results is strong customer demand.
Specifically, we added 571 new enterprise platform customers and 140 net new six-figure customers in Q4. While both metrics are exceptional, large deals in particular grew 40% year-over-year. The takeaway here is the investments we've made over the years to build a vast ecosystem of partners and extend our global reach allow us to effectively serve customers of all sizes in most major markets for traditional VM or increasingly for unified risk and exposure management. Our Tenable One platform also creates a compelling upsell path for our customers and is benefiting our dollar-based net expansion rate, which remains strong and was 117% in the quarter. While this expansion rate may fluctuate on a quarterly basis, we generally expect it to be within a 110%-120% range.
Revenue was $184.6 million, which represents 24% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $3.6 million. Visibility remains strong as our percentage of recurring revenue was 95%, which is consistent with prior periods. I'll now turn to expenses, where we are demonstrating notable operating leverage while also continuing to prioritize investments in growth and innovation. I'll start with gross margin, which was 78.5%, a decrease from 81% last quarter. Gross margin for the full year was 80%. As anticipated, cost of revenue increased sequentially, primarily due to higher demand for our cloud-based products, including Tenable One, which was launched in Q4 and includes Attack Path Analysis and External Attack Surface Management.
Looking ahead, we expect gross margin for the full year 2023 to be in the high 70% range with modestly improving margins throughout the year as adoption of Tenable One increases, and we absorb the initial costs related to our newer exposure management offerings. Sales and marketing expense was $78.3 million, which was up from 74.5 million last quarter. Sales and marketing expense as a percentage of revenue was 42% compared to 43% last quarter, reflecting greater efficiency in our go-to-market efforts. Sales and marketing expense reflects higher personnel costs, including payroll taxes, as well as higher sales commissions and variable compensation attributed to our strong sales performance and higher renewal base in the quarter. For the full year, sales and marketing expense as a percentage of revenue was 44%.
R&D expense was $28.7 million, which was up from 27.4 million last quarter. R&D expense as a percentage of revenue was 16% this quarter and last quarter. R&D expense increased sequentially, primarily due to lower capitalized software development costs in Q4 subsequent to the launch of Tenable One. For the full year, R&D expense as a percentage of revenue was 16%. G&A expense was $17.9 million, which was up from 16.7 million last quarter. As a percentage of revenue, G&A expense was 10% this quarter and last quarter as well as for the full year. We will continue to make investments in G&A to support the growth and scale of our business.
Income from operations was $19.9 million, 4.4 million above the midpoint of our guided range due to the better than expected top-line results and greater operational efficiency in our business. Operating margin for the quarter was 11%, which was 220 basis points better than the midpoint of our guidance. Operating margin for the year was 10%. The takeaway here is even in a dynamic environment, we've been able to efficiently invest for growth and expand our operating margins by leveraging our VM market leadership, sizable customer base, and broad exposure management platform. In terms of headcount, we ended the year with 1,900 employees, which reflects a 2% reduction in force in Q4, resulting in $1.8 million in severance.
By aligning our cost structure more closely with our investment priorities, we believe we are well positioned as we enter 2023 to capitalize on the opportunities in front of us. All of this resulted in EPS in Q4 of $0.12, which was approximately 0.05 better than the midpoint of our guided range. Let's turn to the balance sheet. We finished the quarter with $567.4 million in cash and short-term investments. Accounts receivable was $187.3 million, and total deferred revenue was $664.6 million, including $502.1 million of current deferred revenue, which gives us a lot of visibility into revenue over the next 12 months.
We generated $32.1 million of unlevered free cash flow during the quarter and $128.1 million for the full year, which is up from $95.2 million last year. With 95% recurring revenue, high gross margins and high renewal rates, we feel confident that we can continue to generate attractive levels of cash flow while continuing to invest in the business. I will discuss cash flow in greater detail momentarily. With the results of the quarter behind us, I'd like to discuss our outlook for Q1 and full year 2023. For Q1, we currently expect revenue to be in the range of $186- 188 million. non-GAAP income from operations to be in the range of $9- 10 million.
Non-GAAP net income to be in the range of $3- 4 million, assuming interest expense of $7.5 million and a provision for income taxes of $2.1 million. Non-GAAP diluted earnings per share to be in the range of $0.02-0.03, assuming 120 million fully diluted weighted average shares outstanding. For the full year, we currently expect calculated current billings to be in the range of $915- 925 million. Revenue to be in the range of $800- 810 million. Non-GAAP income from operations to be in the range of $86- 91 million. Non-GAAP net income to be in the range of $63- 68 million, assuming interest expense of $31.3 million and a provision for income taxes of $9.3 million.
Non-GAAP diluted earnings per share to be in the range of $0.52-0.56, assuming 122 million fully diluted weighted average shares outstanding. Unlevered free cash flow to be in the range of $175- 180 million. There are a few comments I want to make today that will provide important context to our guidance. First, we're delighted with our results for the quarter, which gives us a lot of confidence headed into 2023. We beat on the top and bottom line, added hundreds of new customers, and closed a record number of large deals in one of the most highly dynamic markets we've seen in many years.
Our unified exposure platform, Tenable One, provides the security, analytics, and insights to help customers effectively assess risks across the enterprise by building better interlock across siloed security functions at a time when security teams are being asked to do more with less resources. While pipeline continues to build, we are mindful of the current spending environment. Accordingly, our initial CCB guidance for the year reflects 18%-19% growth, which we believe is appropriately cautious given the macro uncertainty. In terms of quarterly flow, we expect modestly lower year-over-year growth in the first half of the year due to our strong quarterly compares last year with modestly higher growth in the second half. In terms of profitability, we expect income from operations for the full year to grow approximately 30%, reflecting an 11% margin.
We also expect to follow the same seasonal spending patterns as prior years, with incremental investment and higher operating margins in the second half of the year. We're also excited to be hosting a live in-person sales kickoff in Q1 for the first time since the pandemic, which is a discrete expense that is reflected in our Q1 guide. With regard to cash flow, our unlevered free cash flow guidance for the full year represents 40% growth, resulting in a 22% margin, which is up from 19% last year. We expect unlevered free cash flow margin to gently ramp throughout the year with Q3 as our typical seasonal high point. We're very pleased to provide an annual guide for unlevered free cash flow today.
Please note that we do not plan to update our guide quarterly as the timing of collections and payments can vary from quarter to quarter. Our next update is expected to be mid-year on our Q2 call. One final parting comment on cash flow. The strength of our business model enables us to generate this type of improvement while continuing to make strategic investments in innovation and go to market. We delivered better than expected unlevered free cash flow in Q4. We're providing a strong initial guide, that is, to the year, and we are well on our way to achieving the $240- 250 million target for 2024. In summary, we have a lot of confidence in our ability to effectively grow and scale our business and drive higher levels of cash flow.
At this point, I'd like to turn the call back over to Amit for some closing comments.
Thanks, Steve. We're very confident in our differentiated technology, our future, and our ability to deliver exceptional results even in a tough market. We hope to see many of you at the Morgan Stanley Conference in the upcoming weeks. We'd now like to open the call up for questions.
Thank you. At this time, we will be conducting a question and answer session. If you'd like to ask a question, please press star one on your telephone keypad. A confirmation tone will indicate your line is in the question queue. You may press star two if you would like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. One moment please while we poll for questions. Our first question comes from the line of Hamza Fodderwala with Morgan Stanley. Please proceed with your question.
Hey, guys, it's Matt Salton on for Hamza. Thanks for taking the question. Just wanted to hit on pipeline for the year ahead. Obviously, you've had a difficult macro situation. There's been some unevenness over the last year in terms of deals closing on time, deals getting pushed. I'm just curious what you guys are seeing kind of for the year ahead. Also just any incremental commentary that you guys can provide around the federal opportunity. Thanks.
Thanks. We're generally pleased with pipeline. Feel like we've gotten a pretty good rhythm, good understanding of customer buying behaviors over the last several quarters and able to invest where we see continued opportunity. Prioritization of VM, especially in the enterprise market, and candidly, our ability to move enterprise customers through the Tenable One motions as well. Feel good about pipe. In terms of federal space, I'd say it's very consistent with previous years in terms of seasonality. You know, weighted in what's typically Q3 . We feel good about the momentum that we're building and the pipeline that we're building throughout the year, especially in the state and local markets as well.
Is that all, Hamza?
That's it. Thank you.
Our next question comes from the line of Joel Fishbein with Truist. Please proceed with your question.
Thanks for taking my question, and great quarter. Amit, I just wanna drill down a little bit on Tenable One massive new product cycle. Love to understand, you know, how customers are, you know, thinking about, you know, the attack service management and also talk about the price uplift. I, you know, You've mentioned previously, you know, 30%+. Love to just understand, you know, a little bit more detail about how that's the go-to-market structure. I know you're doing the sales kickoff this year, so 2023 could be a really good year for that, but any color you can provide would be really helpful. Thank you.
Yeah. I think directionally still, you know, looking at that 70%. We, we haven't updated that figure, but, you know, directionally, consistent with, what we've seen, previously with Tenable One. You know, I'd say both the sales team and the customer base seem to be gravitating to it. It's a, you know, double-digit percent of new sales and increasing high single-digit percent of existing customers now on Tenable One. I think the, you know, the message resonates. It makes sense. They can look at, a more complete understanding of cyber exposure, a more complete perspective of risk, a much more compelling set of analytics, including Attack Path Analytics, and asset inventory types of things which, they haven't historically gotten with the vulnerability management program.
The other piece is it allows us to do spend and vendor consolidation. By increasing their Tenable One spend to cover not only traditional VM, but also looking at cloud-based assets or also looking at their identity, we can offer them some volume-based pricing, which ends up being much more attractive than going to one vendor for VM, going to another vendor for external attack surface management, going to another vendor for cloud security. We're seeing, you know, great leverage in go-to-market function, and it really has been resonating with customers. We expect that trend to continue, if not accelerate.
Joel, this is Steve. As a matter of clarity, the uplift we're getting on Tenable One, we've said in the past is 70%, and this quarter was no different. We're getting a substantial uplift. We're transacting larger deals, and it's one of the reasons why we're having great success adding lots of large customers.
Great. Just one quick follow-up, Steve, or Amit. OT is obviously a very big opportunity. I think, you know, I know we're early days, but. It feels to me to be greenfield. Can you just go through the competitive dynamics in some of these OT deals? You know, what inning are we in with regard to, you know, this OT opportunity?
Yeah. I'd say we're probably still... we're, you know, we're probably in the second inning at this point. You know, if we rewind the clock couple of years as questions would come up about OT, what we'd say is we've entered, you know, some small procurements. We've entered pilot or phase one deployments, where they're looking at a couple of factories, a couple of facilities, trying to operationalize the data and the workflows that come along with the OT product. Over the last couple of quarters, what we've said is we're seeing some follow-on deals, global types of deployments, six and seven-figure types of transactions. We're seeing that momentum build.
You know, I think we're still early in the market, and it's a market that, you know, that doesn't move as fast as the IT market, but it's very deliberate, and I think the spending is very real. In terms of competitive dynamics and competitive landscape, you know, I'd say we're predominantly competing against, you know, just a small number, two or three private, you know, pure play-focused vendors in the OT space. We feel like our technology is compelling and really leads the market when it comes to looking at the converged IT, OT environment. If you look at a factory floor today or if you look at pipeline operations or other OT environments, they are, you know, they are not exclusively OT.
They have a bunch of IT systems, IT control systems in those, factory floors as well. We're, I think, unique in our ability to deliver incredible insight for overall risk of facility, which would include both OT and IT. We think it's a significant competitive advantage for us.
Thank you so much.
Our next question comes from the line of Brian Essex with J.P. Morgan. Please proceed with your question.
Hi, good afternoon, and thank you for taking the question. Maybe, Amit, just to kind of follow up on, you know, spending environment. Any incremental color you can or additional color you can provide in terms of maybe how you've seen, customers react to macro headwinds in the past and what's different now? Do they tend to maybe approach asset coverage a different way? You know, does that maybe impact your ability to expand on the asset coverage side? Maybe how is it as you're seeing adoption of Tenable One and Tenable.ep, does that insulate you somewhat from that kind of environment? Maybe if you kind of touch on that a bit.
Yeah. Brian, great question. You know, we had a very successful quarter from an expansion business perspective, from a net dollar expansion business perspective. We are seeing customers expand both the number of assets we're covering for them as well as through Tenable One, in particular, seeing the different types of assets where they're allocating licenses to, you know, more cloud security, identity or other areas where we had smaller presence in previous periods. I think the sales team's gotten into a pretty good rhythm in terms of identifying how to identify opportunities, how to hunt for the budget and identify the new workflows in customer environments that are required in order to transact business. Again, if you rewind the clock, three quarters or so, we said, "Hey, we're seeing elongation of sales cycles.
We're implementing more rigorous inspection, MEDDPICC processes across our sales forecasting. I think those are paying off. I think the sales team feels more confident in transacting business in this environment. It's tougher macro, and it's just the reality we're operating in. I think we feel pretty good about both pipe and our ability to close transactions.
Got it. That's real helpful. We'll keep it to that one. Thank you.
Our next question comes from the line of Rob Owens with Piper Sandler. Please proceed with your question.
Great. Thanks for taking my question. Could you speak to just how the quarter progressed, I guess, from a linearity standpoint? To that end, Steve, maybe anecdotes around the different puts and takes regarding conservatism on the 23 numbers. Just, you know, what you discounted, what you took into effect there. Thanks.
Hi, Rob. Good questions there. First, I would say we had a strong finish to the quarter. We closed a lot of deals in December and especially the last couple of weeks. That said, our quarters continue to be very back-end loaded, more so than what we typically see. I believe this is a consequence of the macro as customers continue to scrutinize budgets and evaluate spending priorities. You know, we think cyber exposure fares pretty well in this market, but increasingly customers are waiting to see how their quarters play out before committing to a purchase. I think the takeaway here is that linearity is certainly a little more back-end loaded now than what we've seen in prior quarters.
You know, in terms of our guide, our CCB guide, you know, as we head into 2023, you know, first, we have a much tougher compare, particularly in Q1, where we grew CCB 31% last year. We're assuming the macro will continue to be challenging and potentially even deteriorate further. That's reflected in our guide. Look, overall, I think we're pleased with the progress on the quarter, adding lots of new customers, adding lots of large customers. Pipeline levels are healthy, but I think we're trying to take a cautious approach here as we set guidance initially out of the gate. Obviously there's a lot of selling left in the year, and we're encouraged with our progress to date, and we'll have to see how the rest of the year plays out.
We feel very good about our business and have a lot of confidence in our ability to be successful in this dynamic environment.
Great. Just the one for me. Thanks.
Our next question comes from the line of Andrew Nowinski with Wells Fargo. Please proceed with your question.
Hi, this is Justin Donati on for Andrew. Thank you for taking our questions. Congrats on a good quarter. When you were talking about the pipeline, you specifically, you know, spoke about strength with your enterprise customers. Just wondering if you're seeing any difference in terms of buying behavior between your mid-market customers versus your enterprise customers. Thank you.
No, I think, we saw strength pretty much across the board, including in the mid-market customers as well. If anything, on the enterprise side, maybe just slightly smaller in the net new lands, but continued health in the number of new lands and the expands and certainly, strength in the mid-market as well.
Great. Just as a quick follow-up, you know, you talked about your continued investments in your go-to market. Just wondering what your plans are for sales hires in the coming year, and if you're expecting that to be more front-end loaded, or if you're taking a slightly more, you know, conservative approach this year.
Well, first and foremost, we are planning to hire in 2023. I think it's fair to say it's adding more quota capacity. Our expectation is that we're gonna add more quota capacity in 2023 than we did in 2022. We have a lot of confidence in our business, and investments are certainly a big part of that, and obviously continue to double down on innovation and invest in product as well. We've been very active, you know, from a product perspective and bringing new products to market. We did talk a little bit about on the call the factors that kind of influence the timing of those investments. You know, first is hiring.
You know, we tend to front load our hiring early in the year, you know, more of the hires will come online in the first half of the year, and specifically with Q1. We also have a number of industry and other events in the first half of the year, such as our annual sales kickoff, which will be live, in-person event this year, RSA and many others. Clearly making a lot of investments. We're very pleased to be offering the guide in terms of operating margin and cash flow that we're providing today, and we have a lot of confidence in our ability to continue to drive further margin leverage.
All right. I appreciate the color.
Our next question comes from the line of Mike Cikos with Needham & Company. Please proceed with your question.
Hi, guys. Thanks for taking the questions here. I did wanna touch on the customer behavior. I know you answered some earlier questions with respect to enterprise versus mid-market, and obviously the strong expansion we've spoken to. For sales cycles, and that's really what I'm driving at here with the customer behavior, have they been relatively stable versus what we spoke about in Q3? Have we seen any elongation anyway on that front? Maybe it'd be helpful too if you could kind of pepper in any color when thinking about geographic theater.
Hey, Mike, great to hear from you. We have not seen any elongation or any significant change in sales cycle since what we spoke about in Q3 of last year. I think that allows our sales team to just have continued confidence in their adjusted sales processes and forecasting methodologies. In terms of geos, I think, you know, last year we called out some any peculiar behaviors in geos. At this point, I think we're seeing fairly consistent performance across all major theaters and geos.
That's great. One more, if I could. I did just wanna ask about Q1, just given the fact that we're almost halfway through it already. Can you provide any additional color for how customers have put together their cybersecurity budgets as we think about calendar 2023? Obviously, we're all talking about the increased scrutiny here, but curious since cyber is perceived as being this more insulated sector, what have those customer conversations been like? Just a real quick housekeeping to tap on to the end of that, Steve, I know you spoke about the annual sales kickoff in Q1 as being in person. Is there any way to quantify how much of an expense that item is?
Are we talking about an incremental $2- 3 million, or any color on both those fronts would be beneficial? Thank you.
Yeah. I'll provide a little bit of color here on both your questions, and I think, and Amit will interject with maybe some color commentary on, you know, customer spending, and budgets for 2023. You know, first, with regard to, I think your question was like, you know, how does it look here out of the gate? We're encouraged by what we saw in January, and very encouraged. That's reflected in our outlook today, and obviously March will be determinative given typical monthly, you know, flow for us. And the other thing I'll say, you know, with regard to sales kickoff, you know, the quantum of that investment's much larger than $2 million. We're talking north of $5 million. It's a large discrete item.
We're very pleased to be doing a live in-person sales kickoff this year for the first time since the pandemic. You know, our sales team is really excited about it as well as you know, the rest of our company. Obviously, it's factored in our guidance, and our guidance, we believe is strong out of the gate with regard to margins and cash flow, and our expectation is that operating margins will improve throughout the year, consistent to what we've seen in prior years.
Yeah. I think the only thing I would add to it is that, you know, the VM market remains, you know, very healthy. We see customers continuing to expand their VM coverage. We're also seeing great traction, especially with Tenable One around cloud security. We called out strength in our OT sales during the course of the quarter. Customer budgets are there. I think to the extent that we can become a cost-effective vendor consolidation platform play for them, there's a lot of interest, a lot of strategic dialogue around that. I think customers are very excited about some of the newer analytics that we've introduced with Tenable One.
You know, we'll look forward to updating you during the course of the year, but I feel like Tenable One, looks like it will continue to play a larger and larger factor throughout the year and going into next year.
That's great to hear. Good to see the profitability guide and the reiterated unlevered free cash flow guide when we think about calendar 2024 as well. I'll turn it over to my colleagues, but thank you.
Our next question comes from the line of Saket Kalia with Barclays. Please proceed with your question.
Okay, great. Hey, guys. Thanks for taking my questions here. Amit, maybe just start with you. And apologies, if this has already been addressed, but I was wondering if you could just talk about how customers look at the ROI from a platform like Tenable One. You know, it includes so much more kind of additional, valuable product that lowers the risk profile. I'm curious, when you talk to customers about Tenable One, how are they sort of thinking about ROI?
Hey, Saket. Great question. There's a couple of obvious and a couple of non-obvious answers to it. I think the most obvious is just from a vendor consolidation cost reduction standpoint. If you're using Tenable for VM, let's say, you know, a random example, you have 30,000 assets, and now you want to also look at, you know, your cloud security requirements and your Active Directory requirements. If you're going to a separate vendor for those solutions, you're spending, you know, unit one through 10,000 on cloud assets and one through 8,000 on Active Directory in addition to the one through 30,000 on VM. Whereas if you're consolidating your spend with Tenable and Tenable One, you can buy, you know, at volume discount, it's one through 50,000 on Tenable One.
The leverage in budget and spend through vendor consolidation is very meaningful, which in today's macro environment and what's happening with scrutiny of budget, we think is compelling differentiation for us. The second is in the analytics. We simply are able to bring more analytics and unified analytics to the table than going to disparate vendors. For instance, building an asset inventory everywhere a particular piece of software exists across your environment, anywhere a vulnerability exists across your environment, whether it's on-prem, in cloud or other places, you know, we think is very compelling. Prioritizing what needs to be addressed, we think can be a compelling differentiation. Looking at Attack Path Analysis, so saying, "Hey, what is the path?
What are the various paths of systems and vulnerabilities and users and permissions that could get me to this sensitive internal asset from my external attack surface from internet-facing assets?" Is a pretty compelling differentiator compared to buying individual and stovepipe solutions. We think both from a value and analytics standpoint as well as a vendor and cost consolidation standpoint, you know, the platform approach to understanding exposure and risk just makes sense. That's why we're seeing both the sales team and customers really gravitate toward it.
Got it. Got it. That makes a lot of sense. Steve, maybe for my follow-up for you, again, apologies if this was talked about, but can we just talk a little bit about gross margins for 2023? You know, that was down sequentially in Q4. I'm guessing that's from hosting costs. Curious how you think about that here in 2023 as Tenable One presumably becomes a bigger part of the business.
Sure. Great question, Saket. You know, gross margin in Q4 came in as expected and is impacted by the recent launch of some new products for us. You know, one is ASM, which is a new use case. The cost of domain attribution is something we can leverage over time as we see higher penetration rates. With Tenable One, we have a more robust cyber asset inventory, which is critical to supporting functionality such as Attack Path Analysis and Lumin Exposure View. These are new areas of innovation, come with some initial semi-fixed costs that we expect to fully absorb over time. You know, that's certainly impacting growth margins.
Overall, very pleased with growth margins. We said on the call that we expect growth margins to kind of stay in the high 70% range for 2023. We expect growth margins to improve during the course of the year.
Very helpful. Thanks, guys.
As a quick reminder, if anyone has any questions, you may press star one to join the question and answer queue. Our next question comes from the line of Mike Walkley with Canaccord Genuity. Please proceed with your question.
Great. Thanks. My congratulations also on the strong close to the year. Amit, when you study your customer base, you know, what percent do you believe will ultimately upgrade to Tenable One? You know, while it's high single digits of the base currently, where could that penetration go over the next couple of years that should be a strong source of sustained growth?
Yeah, it's a great question. I think obviously there's tremendous potential. We're putting a lot of focus on it as a company. The leading indicator for that would be our new sales, what we're seeing is, you know, high teens percentage of new sales coming in on Tenable One. You know, over time, as long as that continues to remain healthy, we would see a larger and larger percentage of customers moving to Tenable One. You know, where it could go long term remains to be seen, but, you know, we're pretty excited about the potential.
Okay, great. Just a quick follow-up question. You know, any changes in the competitive environment entering 2023 when your competitors potentially putting themselves up for sale, and you guys certainly have a lot of momentum with Tenable One. Just any change in the competitive environment that seems more favorable as you enter 2023?
Yeah. I mean, obviously, we wouldn't speculate about that, but, you know, feel really good about the competitive environment. You know, we are pretty consistent, you know, saying that we have exceptionally strong win rates, especially in, you know, this market against our primary competitors. That remains, you know, those win rates remain exceptionally strong and, you know, while we don't have a specific update to that, I'd say anecdotally, you know, continues to climb and the sales team feels exceptionally confident going into any VM opportunity that those are really ours to lose. Candidly, they feel like Tenable One gives them a very significant value differentiated capability to talk about as well.
Great. Well, I hope your in-person event goes well, and thanks for taking my questions.
Great. Thank you.
Our next question comes from the line of Jonathan Ho with William Blair. Please proceed with your question.
Hi, good afternoon, and, let me echo my congratulations as well. I wanted to maybe dig in a little bit into the Active Directory and identity products. Can you talk a little bit about what you're seeing in terms of demand there and, you know, maybe the potential for that to be a larger product set over time as well?
Well, there's tremendous market potential there. You know, as you know, Jonathan, Active Directory is target number one for hackers, whether it's a nation state adversary, as we saw in the Mandiant breach or whether it's, you know, ransomware, where over 90% of ransomware is going directly after domain controllers and Active Directory. Active Directory is a freaking mess to deploy in any large environment and almost impossible to keep clean when you look at the number of pieces of software and the complexity of Active Directory, the number of pieces of software which modify it as they get installed into enterprise environments. Having a solution. Most organizations don't have a solution in this area. The security teams know it's a big problem.
They maybe do a consultant and an annual audit or assessment of their Active Directory environments, which is, you know, clearly not enough. We feel like there's tremendous market opportunity. The sales team has a lot of confidence in the Active Directory product and bringing it into customers. We had a great quarter with Active Directory in Q4, excited about the potential both in 2023 as well as Active Directory playing an increasingly large role in Tenable One and some of the analytics that we're unlocking with Active Directory and identities.
Great. Just as a follow-up for Steve, I think there was a small reduction in force. Can you maybe give us a little bit more detail on the RIF and what that means, you know, in terms of your margins, you know, maybe where some of the cuts came from. Thank you.
Yeah. It was fairly broad across many functional departments, really with an eye towards, you know, improving operational efficiency and better aligning our cost base with the market opportunity that's in front of us. We feel like we're in a great position this year to make investments, as Amit talked about earlier, making investments in terms of product and adding lots of quota capacity. One of the comments I made earlier was our expectations that we're gonna add more quota capacity in 2023 than we did in 2022. Obviously, the demand environment remains highly dynamic, you know, we've done a good job over the years balancing growth with profitability, driving margin leverage, and achieving sustainable levels of growth.
Thank you.
Our next question comes from the line of Joshua Tilton with Wolfe Research. Please proceed with your question.
Hey, guys. Thanks for taking my questions. My first one is kinda high level, but the feedback from the channel, I guess throughout last year on VM, I would say has gotten incrementally worse each quarter. If we look at your guys' results, it sounds like you guys have almost gotten incrementally better, especially in regards to your six-figure ads. Could you maybe kind of just help us reconcile those data points?
In terms of the channel checks, you know, I hate saying it this way, we don't see it. You know, our channel partners remain very bullish on VM and very bullish about their ability to differentiate Tenable as leading, as the leading VM vendor and provider and feel bullish that their customers are looking to expand their VM capabilities as more and more executive questions are asked of security programs, you know, are we vulnerable? Where are we vulnerable? Are we exercising good standard of care? Are we patching our systems, you know, quickly enough? Are we being negligent? You know, I think answering those types of executive questions really comes from your VM program, not from your firewall, not from your endpoint or your logging solution.
you know, as more executives are asking questions of cyber, we feel like it bodes well for VM. We're seeing that in our results. We're seeing that in our conversations with customers. And Tenable One allows us to have even more strategic conversations across a broader set of asset types. you know, we've remained committed to the VM and cyber exposure market, and I think, you know, given both our results and our confidence in what we're seeing in our own conversations with customers and channel partners, you know, We will remain committed to and increasingly invest in that strategy.
The one thing that I'll add is keep in mind that, you know, we transact sales in 160 countries. We have hundreds of channel partners. I can't speak to the channel checks, but sometimes if you're talking to a partner or a contact, they may only have a very specific view into our business or maybe even to the VM market. Our exposure solutions collectively represent about 50% of our total sales. Over the years, we have done a really good job becoming more strategically relevant to our customers, broadening the focus, and we're having success selling a platform and playing in larger market opportunities such as cloud security and even identity and security analytics, which are top spending priorities and pain points for our customers this year.
Makes sense. Then, just a quick follow-up. It sounds like you guys are definitely communicating that the initial CCB guidance for 2023 is, in your opinion, de-risked. I think you talked about that it assumes the macro actually gets worse. Is there anything else outside of that that you can just, you know, quantify or take one level deeper in terms of what exactly inside the guide is more de-risked? Maybe, you know, expansion versus new business, where you expect NRR to kind of shake out. Anything else you can kind of talk to in the 2023 guide that should help us feel like those numbers are de-risked?
We think our CCB guide for the year is good but we described it as cautious, and we think that's the right approach to have in a market like this. It's highly dynamic, right? Each quarter is different in its own right. Our expectation going into 2023 is that the macro will remain challenged and perhaps will even worsen, you know, the first half of the year. We wanna be prepared for whatever comes our way. We've done a good job over the past several quarters, really identifying opportunities where, you know, where we have success. Closing larger deals, and some verticals are stronger than others, as we've talked about earlier. Tech was particularly strong for us, financial services, you know, all of those.
We have a good sense of what's working really well for us. I think with regard to the guide, I think, we're just taking a more cautious approach, and we're assuming that, you know, the macro could potentially impact close rates, and maybe even renewal rates. What I will say is that our renewal rates continue to remain strong. Upsell was very strong in the quarter. We did add lots of large deals. You know, our expectation is that new lands for new logos could be tougher to transact in 2023.
Thanks, guys. Appreciate the update.
Our next question comes from the line of Rudy Kessinger with D.A. Davidson. Please proceed with your question.
Hey, thanks for taking my questions, guys. Certainly a lot of talk about Tenable One and good traction there. I think it was last quarter, maybe the quarter before you guys started talking about the Salesforce really leading with that product as opposed to leading with VM. Just where are we in that evolution? I don't know if you can speak to maybe the percent of deals or cycles where your reps are leading with Tenable One as opposed to VM. Just how has that changed over the last six months?
Yeah. I think the sales team has a lot of confidence in the product. Seeing the customer traction and the results that customers are experiencing with Tenable One gives them an increasing level of confidence. You know, today it remains a, you know, teens percentage of new sales, obviously in the pipeline, you know, pipeline is more heavily weighted toward Tenable One, and we expect that to continue to accelerate, you know, with sales kickoff and more training and more time and more differentiation.
Got it. Secondly, you know, you talked about vendor consolidation, sort of playing out as a positive for you guys. I guess I'm also curious, there are some other, you know, kind of larger, broader cyber platforms out there that have thrown in a VM product in the mix over the last couple years. I'm curious if you're seeing, you know, vendor consolidation, maybe hurt you in some cycles, with some of those larger platforms out there throwing in a VM product?
Yeah. You know, there's been a lot of vendors over the course of years making a lot of noise about, you know, VM, you know, going back four or 5+ years, you know, Tanium, CrowdStrike, Microsoft, others. What I would tell you is, you know, they make noise. We see them for a quarter or two, very quickly their sales team understand that their products are inferior, they start gravitating to their core markets and candidly, where their companies are investing much more aggressively, logging, SIEM, elsewhere.
Especially in a product like VM where independent audit is an important function and where, you know, we feel like we've got a quantitatively and qualitatively differentiated product and experience in understanding the enterprise, we almost never see those larger IT vendors participating, you know, and certainly never see them beyond a first phase of competition.
I guess the only other thing I would add to that is, you know, obviously our footprint is broader than VM. If customers are really looking to understand cyber risk more broadly, then, you know, even other solutions which offer VM capability are not really competitive. Our cyber exposure solutions now represent, as Steve said, 50% of our of our sales.
Got it. Thanks, thanks for squeezing me in.
Our next question comes from the line of Shebly Seyrafi with FBN Securities. Please proceed with your question.
Yes. Thank you very much. Were there any call-outs on the geo side of EMEA, for example? Growth there was decelerating the last two quarters. You have a tough comp in Q1 in EMEA as well. Just, any call-outs on the geo side?
I think on the geo side, what we just said earlier is that all theaters performed pretty much to expectations in both enterprise and commercial segments. Felt good about the international markets and the balance of our international performance.
Okay. Separately, you had a 2% head count reduction in Q4, and I think it's in 1,900 employees for the end of the year. I think that's up 10% or so year-over-year. What's your expectation for, A, headcount growth and B, quota-carrying salesperson growth in 2023?
Sure. Well, we provide headcount at year-end following our Q4 results. This is not a number we provide for the upcoming year as part of our annual guidance. As we discussed earlier, you know, we are hiring, and we're planning to make investments, most notably in product and go-to-market. In terms of quota capacity, we expect to add more quota capacity in 2023 than we did in 2022, unequivocally. We have a lot of confidence based on the results of not only this quarter but, you know, the past couple of quarters. We're adding lots of customers, transacting lots of large deals. You know, the takeaway here is the business climate's pretty fluid, we're constantly reassessing investment priorities. As we discussed earlier, we're gonna add headcount.
Look, we're in the fortunate position to make these investments in 2023 because we grew our workforce very thoughtfully since the pandemic. Our workforce grew in total 28% over the last three years, which puts us in a great position to invest this year while still delivering, you know, margin improvement. We think we're doing a good job aligning our cost base with the investment opportunities that are in front of us.
Thank you.
Ladies and gentlemen, we have reached the end of the question and answer session. This also concludes today's conference. You may disconnect your lines at this time. Thank you. Have a good day.