Good day. Welcome to the Zscaler third quarter 2018 earnings conference call. Today's conference is being recorded. At this time, I would like to turn the conference over to Bill Choi. Please go ahead, sir.
Good afternoon, everyone. Thank you for joining us to discuss Zscaler's financial results for the fiscal third quarter 2018. With me on the call are Jay Chaudhry, Chairman and CEO, and Remo Canessa, CFO. By now, everyone should have access to our earnings announcement. This announcement may also be found on our website in the investor relations section. In addition, a supplemental financial schedule was posted to our website earlier today. Let me remind you that we'll be making forward-looking statements during today's discussion, including, but not limited to, the company's anticipated future revenue, operating performance, gross margin, operating expenses, net loss, pro forma net loss per share, free cash flow, and dollar-based net retention rate. These statements and other comments are not guarantees of future performance, but rather are subject to risk and uncertainty, some of which are beyond our control.
Our actual results may differ significantly from those projected or suggested in any forward-looking statements. These forward-looking statements apply as of today. You should not rely on them as representing our views in the future. We undertake no obligation to update these statements after this call. For a more complete discussion of the risks and uncertainties that could impact our future operating results and financial condition, please see our filings with the Securities and Exchange Commission, as well as in today's earnings release. Unless otherwise noted, all numbers we talk about today will be on an adjusted non-GAAP basis. Please refer to our earnings release on the investors' relations portion of our website for a reconciliation of GAAP to the non-GAAP. For historical periods, the GAAP to the non-GAAP reconciliations can be found in the supplemental financial information referenced a few moments ago.
We would also like to inform you that we will be participating in the Bank of America Merrill Lynch conference in San Francisco tomorrow on Thursday, June 7th. I'd like to turn the call over to Jay.
Thank you, Bill, and thank you everyone for joining our first earnings call as a public company. I'd like to thank our customers, partners, and investors who have been essential to our success to date. I'd also like to recognize the employees at Zscaler who have been instrumental to our growth and success. I am pleased to share our strong third quarter results with you today. We posted strong revenue and calculated billings as we continue to experience rapid growth in our business. With total revenue growing 49% year over year to $49.2 million and calculated billings for the quarter growing 73% year over year to $54.7 million. In addition to our top-line growth, we had healthy operating performance. Our operating margins improved 9 percentage points year over year, and we generated positive free cash flow for the quarter.
We believe these results demonstrate Zscaler's increased adoption in the marketplace as organizations embrace cloud transformation, as they are increasingly relying on the internet and cloud for business. They're adopting new SaaS applications such as Microsoft Office 365 for critical business functions and moving their internal applications to the public cloud. Cloud transformation is breaking the traditional perimeter-based security appliance-oriented approach. In the traditional architecture, organizations built hub-and-spoke network to backhaul branch office traffic over dedicated wide area networks to the data center in order to apply security checks and access controls. They built a moat of security appliances that established a perimeter around the corporate network to secure the network. That's why we call it network security. In the cloud world, where the perimeter has disappeared and the internet is becoming the corporate network, where would you deploy security appliances?
Our cloud platform eliminates the need for traditional on-prem security appliances that are difficult to maintain and require compromises between security, cost, and user experience. Zscaler Security Cloud is a purpose-built multi-tenant platform deployed across 100 plus data centers globally that secures access for users and devices to applications and services regardless of their locations. Zscaler delivers advanced security and policy enforcement no matter where the users are, connecting users to the nearest Zscaler data center, hence taking the shortest path to the application. Compute, storage, and applications are moving to the cloud, which requires a fundamental change to the network architecture and security. In a cloud and mobile-first world where applications are in the cloud and users are everywhere, security needs to be done in the cloud.
We have the opportunity to replace the inbound and outbound gateways of a traditional castle and moat security. Based on our analysis using IDC data, $17.7 billion annually is spent on various security appliances to perform the functions we offer in our platform. Additionally, deploying Zscaler results in reduced spend on bandwidth and network equipment costs. We believe we are the solution to secure the cloud-first, mobile-first world. We have 10 years of operational experience running our security cloud at scale. We process in excess of 45 billion internet requests per day during our peak periods. Each day, we detect and block over 100 million threats and perform more than 120,000 unique security updates. This cloud effect delivers far superior security than traditional appliances for all of our customers. In Q3, we saw strong growth in our platform adoption. Broadly speaking, Zscaler platform offers two complementary services.
First, Zscaler Internet Access, or ZIA, for secure and fast access to SaaS applications and the internet. ZIA is designed to ensure malware doesn't reach the user and valuable corporate data does not leak out. Second, we have Zscaler Private Access, or ZPA, for secure access to internal applications in enterprise data centers or the public cloud. ZPA connects a specific user to a specific application based on business policy without bringing the user on the network, resulting in better security while delivering the best user experience. This is how enterprises want to access applications on the public cloud without having to go through their data center. I would like to highlight a few noteworthy new customer wins in Q3.
A Fortune 500 medical equipment company with headquarters in the U.S. purchased our transformation bundle that includes Cloud Firewall, Sandbox, and data loss prevention, or DLP, for 40,000 users, and ZPA for 30,000 users. This customer is embracing a move to the cloud-first approach and is deploying Office 365. A key driver for this customer was to securely enable network transformation, which would deliver a good user experience while reducing MPLS networking costs. We cost effectively and efficiently provided superior security across a large number of office locations. While they're keeping their data center firewalls for protecting their servers, all traffic headed to the internet and SaaS applications from all locations goes through Zscaler's Cloud Firewall. For ZPA, the driver was to integrate a new acquisition rapidly and securely. M&A is an elegant use case for ZPA.
Rather than connecting two complex corporate networks together, which can take 9 to 12 months or more, ZPA can provide secure application access based on business policy across both companies in days. A European global bank purchased business bundle with SSL inspection and DLP for over 70,000 users. Driven by the business moving to Office 365, the customer needed a modern cloud security platform that included a best-in-class DLP. We work closely with a service provider partner who will manage the Zscaler service for this customer and enable the customer to have a compliant solution for the stringent EU data privacy requirements. Additionally, this SP now offers Zscaler as a part of their managed service to other customers. In summary, we're making significant progress in winning new enterprise customers across various verticals. We also had a number of notable upsell wins in Q3.
A Fortune 500 tech company, which purchased our transformation bundle for 20,000 employees and contractors just six months ago, purchased an additional 25,000 seats and now have all 45,000 employees protected by Zscaler. They also purchased Zscaler DLP module. The driver for this deal was migration from an on-prem HR application to a SaaS application. Zscaler worked closely with a systems integrator partner to win this project and to ensure secure access to internet and SaaS applications. I want to share an example of a deal where the customer simply wanted to replace an existing on-premise web proxy due to budget constraints. This is a Global 500 IT services and products company in Asia that purchased our entry-level professional bundle for 10,000 users in Q2. In Q3, they expanded the same bundle for over 130,000 users domestically.
Recognizing that threats often hide behind SSL, they also purchased SSL inspection functionality. Here is an upsell to a long-term customer, a Fortune 200 professional services company that has been a customer since 2014 for 10,000 North American users, decided to purchase an additional 28,000 licenses for its international users. In conjunction with the expansion, they upgraded from business bundle to the transformation bundle and DLP. They also purchased 10,000 ZPA licenses. We believe these upsell examples demonstrate the continued adoption of the Zscaler platform by our existing customers as they increasingly rely on us for their transformation journey. Our dollar-based net retention rate in Q3 was 120% and was driven by upsell activity for our high-end transformation bundle, which includes the Cloud Firewall and sandbox functionality. Recently, I spent 10 days on the road visiting our customers, partners, and field offices in Japan, India, and France.
I came back from that trip more excited because of the level of engagement we are having with CXOs and large service providers and systems integrators. We feel the world is coming towards us. I will highlight three key trends. Number one, an increasing adoption of SaaS applications and Microsoft Office 365 in particular. Number two, SD-WAN projects that transform the legacy hub-and-spoke network. Number three, application migration to public cloud like AWS, Azure, and Google. With these secular trends as tailwinds, our focus is on our execution. We have a strong team in place to execute our vision. Following the departure of our COO, I have spent the past month engaging even more closely with our sales teams and sales leadership. With strong sales leaders in place for Americas and international markets, I'm confident that our momentum will continue.
We are investing in our unique go-to-market capabilities, which enable us to sell top-down at C-level. A strategic advantage for us is our channel partnerships with large SIs and global SPs. We will continue to train and enable our partners to create leverage and accelerate our sales. I mentioned that I also visited our India office on my trip last month, where we have one-third of our employees. Our talented staff in India keeps our business running smoothly for 24 by seven coverage for customer support, cloud operations, and development. In summary, we are pleased with our results this quarter, and we appreciate your interest in Zscaler. We are at the beginning of a significant market opportunity and look forward to reporting our success in the future. I'd now like to turn the call over to Remo to walk through our financial results.
Thank you, Jay. As Jay mentioned, we're very pleased with the results for the third quarter. I'd like to start with a brief overview of our financial model, then I'll go through our fiscal third-quarter results before moving to our guidance. Zscaler has demonstrated strong revenue growth. Our cloud subscription platform provides visibility and predictability and also allows for attractive gross margins. We recognize subscription revenue ratably over the life of the contract, which is generally one to three years. Our subscription pricing is calculated on a per-user basis. Our gross margin was 81% for the quarter. We were able to achieve a high gross margin because our security platform is based on a purpose-built multi-tenant architecture that is optimized for high throughput, which reduces our capital expenditures, bandwidth, and operational costs.
Our cloud operations are also highly automated, and our ability to peer with leading internet exchanges also reduces our expenses. We focus our sales and support resources on large enterprises. Our channel strategy provides us with significant reach and leverage and the potential for meaningful operating margin expansion as our business scales. Most security companies sell through VARs and distributors, but our service provider and system integrator relationships gives us differentiated access to customers, which is relevant for a transformational platform. We had a very strong third quarter and are pleased with the results we achieved. Revenue for the quarter was $49.2 million, up 9% sequentially and 49% year-over-year. From a geographic perspective, Americas represented 46% of revenue and grew 48% year-over-year. EMEA was 46% of revenue and grew 51% year-over-year. APJ was 8% of revenue and grew 49% year-over-year.
Turning to billings and deferred revenue, we define calculated billings as the change in deferred revenue for the quarter, plus total revenue recognized in that quarter. Billings grew 73% year-over-year to $54.7 million in the quarter. This quarter, we benefited from a strong mix of upfront billings of multiyear deals. Even after excluding the upfront billings in both periods, billings would have grown over 60%. As a reminder, our contract terms are one to three years, and we typically invoice our customers one year in advance. Some customers prefer to pay us upfront for the full contract term. When looking at our billings for Q4 2018 on a year-over-year basis, please keep in mind that we had a few large deals paid upfront last year.
Our strong customer retention and ability to upsell have resulted in a consistently high dollar-based net retention rate, which is 120% for the trailing 12 months ending April 30th, 2018. This compares to 115% a year ago and 122% last quarter. We expect it will vary quarter-to-quarter, depending on the timing and size of upsells and new customer additions. Our net retention rate is largely based on sales of the ZIA product to our customers. Customers can add additional users and move to higher-priced bundles with more functionality. In addition, ZPA, which was released last fiscal year, can be additive as a cross-sell to our existing customers. ZPA has similar pricing to ZIA. Total gross margin was 81%, up 2% compared to Q3 last year and flat sequentially. The year-over-year increase was driven by an increased mix of higher-priced bundles with more functionality as well as operational efficiencies.
Turning to operating expenses, our total operating expenses grew 9% sequentially and 38% year-over-year to $42.8 million. We believe our large market opportunity justifies the investments that we are making. Sales and marketing increased 9% sequentially and 43% year-over-year to $28.4 million. We've been building our sales team to drive growth. We incur significant sales and marketing costs initially to sell our products, but after the first year, our sales and marketing costs decline significantly, as our commissions and marketing efforts are concentrated on the initial sale. R&D increased 3% sequentially and 20% year-over-year to $8.9 million, as we continue to invest to enhance product functionality and to offer new products. G&A increased 27% sequentially and 50% year-over-year to $5.5 million. These expenses exclude $2.8 million in litigation-related expenses.
The growth in G&A includes investments in headcount, consulting, and other expenses that we have made as we became a public company. Our third quarter operating margin was -6%, which compares to -15% in the same quarter last year. Net loss in the quarter was $2.6 million, or pro forma net loss per share of $0.02. We ended the third quarter with $287 million in cash and cash equivalents. We raised $205 million in net proceeds from our public offering. Free cash flow was positive $3.7 million in the quarter, which compares to -$1.8 million for the same quarter last year. We started our ESPP program in March, which contributed approximately $1 million to our free cash flow. Moving on to guidance. As a reminder, these numbers are all non-GAAP, which excludes stock-based compensation expenses and significant litigation-related expenses.
For the fourth quarter, we expect revenue in the range of $50 million-$51 million, gross margins of approximately 80%-81%, non-GAAP operating loss in the range of $6 million-$7 million, non-GAAP taxes of $500,000, pro forma non-GAAP net loss per share in the range of $0.05-$0.06, assuming approximately 120 million common shares outstanding. For the full year 2018, we expect revenue in the range of $184 million-$185 million, non-GAAP operating loss in the range of $19 million-$20 million, non-GAAP taxes of $1.5 million, and pro forma non-GAAP loss per share in the range of $0.17-$0.18, assuming approximately 110 million common shares outstanding. In the share count, we assume that the conversion of preferred stock occurred at the beginning of the fiscal year and not upon the effectiveness of our IPO.
Recall that our IPO was completed in the middle of Q3, and we issued 13.8 million shares, including the greenshoe. We are very proud of what we achieved and look forward to building on our opportunity. I will hand the call back over to Jay.
Thanks, Remo. I would like to close with a reminder that we are holding Zenith Live, our inaugural customer and partner cloud summit. It will be on June 26 and 27 in Las Vegas. We have an impressive lineup of keynote speakers to talk about the cloud transformation. Hopefully, we will see you all there. Operator, you can now open the call for questions.
Thank you. If you would like to ask a question on today's call, please press star then one on your telephone keypad. If you're using a speakerphone today, please make sure your mute function is turned off to allow your signal to reach our equipment. We'll take our first question from Melissa Franchi with Morgan Stanley. Please go ahead.
Great. Congrats on the quarter, hi, guys. Jay, it's clear that there's a lot of secular drivers that's impacting your business today, you mentioned a few of those drivers, the acceleration in billings was pretty notable, even if you take out the long-term deferred. I'm just wondering if you can maybe put a finer point on what were the one or, let's say, 2 to 3 different factors in the quarter that drove that level of acceleration relative to what we've seen in the past few quarters.
Melissa, thank you. There's no one or two big deals that are changing it. This is the normal course of business. We are seeing great momentum across the board, that's what has resulted in good billings revenues. Remo, you want to add any color to it?
No, I agree with Jay. We've got a strong business. We're seeing good momentum across all our geos. All our geos on a year-over-year basis have increased 45%-50%. The market, we feel, is coming to us. We've got tailwinds we've talked about before, the Office 365 and SD-WAN. It's a good place to be.
Okay, got it. I'm just wondering if you could maybe add a little bit more color around the extent to which you are displacing web security gateways, which is a pretty obvious opportunity for you, but that opportunity relative to addressing other areas of security. I know you gave some examples, but I'm particularly interested if the opportunity to displace firewalls is now a meaningful opportunity, or is that still sort of on the come?
Good question, Melissa. As we said, we really don't lead in with displacing either web security gateway or replacing firewall. Our number one focus is lead with transformation. When you lead with transformation, it's a holistic approach. It is true that in lot of those approaches, secure web gateway is often the first party that gets removed because they're looking for internet-bound traffic. On the firewall side, as you saw during some of my comments, we are selling a number of transformation bundles, which includes Cloud Firewall as well as Cloud Sandbox. Now, we don't go in and say, "Let's replace your firewalls." What happens is, typically customers have firewalls sitting in the main data center and a couple of three, four regional data centers. Believe me, majority of the enterprises still have different branches coming back to the data center.
When we do these transformation bundles, literally there's no firewall, there's no egress point, there's no gateway in most of these branches. It is greenfield, it is add-on opportunities. Now, when we replace those, we do end up taking whatever outbound gateway boxes they have in the data center as well. We aren't really doing head-on to say, "Let's remove this." I think we do see some of the retail guys having more local breakout branch firewalls. Generally, the field is fairly wide open for us, and we go in as greenfield add-on in most of the cases.
Right. Okay. Awesome. Thank you.
We'll take our next question from Gabriela Borges with Goldman Sachs. Please go ahead.
Hi, good afternoon. Thanks for taking my question, and congrats on your results. Either for Remo or for Jay, I remember coming into the year, you all had felt that it was prudent to assume productivity goes down with some of the sales force because you were hiring at a fairly elevated pace. How are you feeling about the productivity of the sales force at this point? Are we close to normalized levels, and how do you think the new folks are ramping? Thanks.
Thank you, Gabriela. Our productivity is essentially flat to slightly up. As you mentioned, we are hiring at a fairly rapid pace, and we do expect productivity to get better as average tenure increases. As we are driving these strategic and transformational sales, our price points are going up. That actually also helps us increase our productivity. Remo, you want to add things to it?
Yeah. Basically, also, we're in the early stages related to the acceptance of our product and our penetration. As Jay mentioned, our sales productivity on a quarter-over-quarter basis has been relatively flat. We would expect that to go up over time. However, what we've talked about before is that we're going to continue to invest in our business and build our sales and marketing organizations. We see this as a very large opportunity. We're able to achieve positive free cash flow this last quarter, which shows the leverage we have in the model. Our concerns aren't related to getting to profitability or free cash flow, or sustaining that on a long-term basis. Our focus is going to be to invest in our business and to grow our business on the top line in a prudent manner.
One of the things we've talked about before is that we plan to be at a sustained positive free cash flow, and also positive operating profitability on a non-GAAP basis sometime in fiscal 2020. We're going to keep on running the business with that in mind because of the large opportunity we see in front of us.
That's helpful color. Thank you. As a follow-up, if I may. Since the IPO, have you noticed any change in your customer conversations, either with respect to the credibility that you're able to have as a public company or perhaps with lead gen now that it's been a couple of months since the IPO? Are you seeing any change in those conversations and the ability to open doors? Thank you.
Yes, we have, actually. In fact, I was telling some folks that before, when I tried to reach a number of CIOs who I had not met versus now, the feedback and response is a lot better now than it used to be. As I go and talk to customers, I'm surprised how many of these customers actually know that we have gone public. Quite often I start, they say, "Jay, congratulations on being a public company." We are seeing that better awareness. Yes, that's leading to better leads. Can I quantify at this stage? Probably not. Okay. Do we think we have a better close rate? I think I would say yes, but I think it's a little bit too early to quantify. It's a positive momentum, and we are very pleased with it.
All right, good. I appreciate the call. Thanks.
We'll take our next question from Brad Zelnick with Credit Suisse. Please go ahead.
Thanks very much. Jay, Remo, congratulations to you and the team. This is a great day for Zscaler and for cloud security, for that matter. My first question for you, Jay. Firewall competitors are out there talking about their cloud offerings, replacing branch firewalls, and even calling out competitive wins against you guys. Can you just help us fundamentally understand why what you do won't be consolidated into the firewall platform like so many other network security features have over the last several years?
Brad, thank you. First of all, I would say I'm flattered that some of the big guys are beginning to call us out. Secondly, if you look at how cloud security has to be done, there are some basic things that are needed. Multi-tenant architecture that can take traffic from anywhere. The policies have to move around, logs have to come back together. There are some very critical requirements that a single-tenant appliances don't really meet. I would be surprised if traditional appliance vendors do not offer a cloud security solution in today's day and world, because that's what every customer is asking for. The easiest answer is to really spin a bunch of VMs in the cloud for each customer in each of the data centers, because you're not just a destination.
With the kind of solution we offer, you are in the traffic path across scores of locations, and we don't believe the technology scales and works. At least we haven't seen that out there yet. We also seen this movie before, where CRM dominant player Siebel competed with Salesforce and PeopleSoft competed with Workday. We know the outcome of that. We are comfortable with the technology we have built, and we think we'll keep on increasing our distance. That's one point. The second point, I also mentioned that we are leading our sales from transformation. When you do transformation, you don't really see firewall vendors and the like. From security point of view, it is interesting that SSL interception is becoming a very important area. Enterprises, when they look for securing the internet traffic, large enterprise are all standardized on proxy architecture.
We don't see a lot of firewalls handling outbound traffic on the large enterprises, though we see a number of them on the lower end.
Thanks very much.
Did I answer your question?
You absolutely did, Jay. Thank you for that. Remo.
Sure.
I have a follow-up for you. Duration seems to have benefited from upfront billings in the quarter, which I imagine reflects the strategic commitments customers are making to Zscaler. Can you help us understand what other factors might be at play driving long-term versus short-term deferred revenue growth, and how should we think about that trend going forward?
Yeah, there's two parts to that. One is the contract length. Over the past four quarters, for our new business, 75% of our customers' contract length is three years or greater. That's a very positive sign, showing that our customers are putting the confidence into Zscaler. The other part is the billing. Even though the contract length is increasing to three years for new business, our billings are still annual. We bill annually. Customers, though, some customers make decisions for budgetary reasons, or they have funds available that they want to pay upfront. We don't give incentives for upfront cash. We do give incentives to our sales organization to get into longer-term contracts because that increases the stickiness and shows the confidence that customers have in Zscaler.
Thank you very much.
We'll take our next question from Alex Henderson with Needham. Please go ahead.
Great. Thank you very much. I was hoping you could talk a little bit about the mix of business in the current quarter in terms of revenues that came in from ZIA versus ZPA, and how that might look different related to the contracts that you're winning today for future business. How much of a shift towards ZPA are we seeing in the current flow?
Alex, I'll take that question. Our ZPA still represents less than 5% of our revenue. However, our third quarter, which was our largest quarter for ZPA, and it is increasing fairly substantially. The revenue is less than 5% because recognized revenue on a ratable basis. When you take a look at the actual business coming in, it's doing well, and the increase in ZPA for new business and upsell this last quarter was the highest that it's been in the company's history.
If I may add, Remo, ZPA is the fastest-growing new product in Zscaler's history. We're pleased that we had our first seven-figure annualized revenue deal from ZPA this past quarter.
At the risk of asking a second question and looking forward a little bit, as you've got this major conference coming up, what's the size and scale of it? Have you been surprised at the amount of people signing up to come into the conference? Can you give us any sense of what that looks like?
Of course. This is our cloud summit. We call it Zenith Live. It's focused on cloud transformation. We have not focused on trying to get the masses out there. It's really people who are driving transformation. Our target is about 400 to 450 total people. About 25% of them are expected to be C-level or VP-level people. We got some great keynote speakers as well. We got Scott Guthrie of Microsoft coming as a keynote, along with Satya doing a video message. We've got Pat Gelsinger, CEO of VMware, as a keynote, and we got Michael Dell delivering a video message. We got some great customer keynotes as well. The CTO of GE, General Electric, will be there in person, and the head of global infrastructure for Siemens will be there as well.
Very excited, but focus will remain on transformation and smaller focused audience rather than trying to get thousands of people.
Great. Thank you.
Moving on, we'll take our next question from Joel Fishbein with BTIG. Please go ahead.
Good afternoon, congrats on the great quarter. I just want to follow up on Brad's question. I have a question for Jay. Jay, you mentioned the Fortune 500 medical device company win, I guess, obviously, you have had several wins in the quarter, but it would be great to hear about the competitive dynamics of that win and if there was a bake-off and how that actually manifested itself.
Great question. I think that's a good example to show where this is a significant deal. There was no bake-off. There's no competition. This was driven by CIO embracing the cloud. From CIO, it got to head of networking, head of security, we fit in their architecture where they did not really want a mix of appliances and then partially cloud. In fact, the CIO said, "I do not really want any more security appliances in my enterprise." Now, obviously, they're still keeping the firewalls and like sitting in the data center. Every office out there or every road warrior sitting on the road, essentially, traffic gets funneled through Zscaler's data centers, offering them same policy, same protection. We really did not compete with anybody in this opportunity, and there are lots of opportunities like that where we compete.
To me, I tell my sales team, "If you are competing with someone head on, you aren't doing the right sales execution.
Thank you. One quick follow-up for Remo, if I may. Remo, you called out the tough compare in billings in 4Q. Can you just give a little quantification around it so that we know exactly? I know you signed some big deals last 4Q, just so we have that modeled correctly.
Yeah. There's a few large deals in fourth quarter of 2017. We had called out before one deal, which is about $4.5 million. There are a few others. That's the reason for the tough compare. It's that $4.5 million plus some additional long-term deals.
Great. Thank you so much.
Thank you.
Moving on, we'll take our next question from Gray Powell with Deutsche Bank. Please go ahead.
Great. Thanks for taking the question. Just a couple, if I may. You showed excellent gross and operating margin leverage. You actually flowed through all of the revenue upside to the gross margin line and even more to the operating line. Can you talk about the main drivers there?
You got cut off. Could you please repeat that, Gray?
Sure. Can you hear me better now?
Now I can hear you.
Okay, great. Yeah, just in the quarter, you guys showed excellent gross and operating margin leverage. You actually flowed through all of the revenue upside to the gross margin line and then even more to the operating line. I was just wondering if you could talk about the main drivers there.
Our business is strong. We kept our expenses under control. We're able to maintain good gross margins. With the business that we build during the quarter, as well as the waterfall that we have from prior quarters, with the expense control that we have, maintaining the high gross margins gave us the ability to show positive operating margins. From a cash flow perspective, the reason we're able to beat our free cash flow initial projections is that we had better collections with strong gross margins, lower CapEx, lower operating expenses, and as was mentioned before, related to the ESPP that were withheld from employees, which gets put into accrued liabilities, that have a positive impact, about $1 million.
Yeah, if I may add-
Got it
As a strategy overall, our number 1 focus is top-line growth, and we'll manage the bottom line. We keep on looking for opportunities in sales and marketing or business development where we can invest smartly to keep on growing our top line.
I think that's an important point that Jay's making. We see this as just, as I mentioned before, a very large market opportunity. One of the things we talked about when we went public is we have a leverage model. We have the ability to show high operating profitability and free cash flow. We could do that relatively quickly. We feel that because of the opportunity that we have in the best interest for our shareholders and the company, is to continue to focus on that top line in a prudent manner and grow the business. That's what we're doing.
Understood. That's helpful. Just one more, if I can. Have you seen any changes in the level of discounting at your appliance-based peers over the last three to six months? Does that even matter in your conversations with customers?
If I were to have lots of competitive bake-offs, I would see a lot of that. In my transformational business, since I don't really see a whole lot of them, I don't. I do have some transactional business that we described in the roadshow, where these are tactical things, and this is largely coming through VARs who say, "This box need to be replaced," and customer is asking for cloud-based solutions. We do some of that. We haven't seen a broad-based stuff, but I will mention that there is one proxy, web proxy vendor, who has standing instructions with the sales field that if you see a Zscaler replacing us, drop whatever price they want to drop and try to keep it. Obviously, most customers don't just buy for price. They want a better functionality. They're moving their business to cloud.
Across the board, have not seen a broad things, but we have seen some web proxy vendors reacting to us and trying to save their business whatever way they can.
Perfect. Okay. Thank you very much, and congratulations on the quarter.
Thank you.
Thank you.
Moving on, we'll take our next question from Saket Kalia with Barclays Capital. Please go ahead.
Hi, guys. Thanks for taking my questions, and I offer my congrats as well on a great quarter.
Thank you.
First, maybe for you, Remo. Can you talk a little bit about the preference for different bundles that customers are opting for? I know that there were multiple point examples of customers opting for transformational bundles in the prepared remarks, but can you just give some broad brushes about how that perhaps looks across the base?
A good question. We haven't given any % related to where customers are buying currently with professional business and transformation. What I can say, though, is that transformation is increasing. On our Q4 earnings call, we'll give a breakout on a % basis where we currently are on an ARR basis with those bundles. There has been a shift towards transformation.
I would add the same thing. I would say I was a little surprised to see how faster shift to transformational bundle is happening.
That's really helpful.
That also, yeah, it's helping our average price as well.
That's helpful. Jay, maybe a follow-up for you. You talked about the COO departure and the strength of your bench. Could you just talk to us a little bit about how you're thinking about sales leadership, and perhaps a joint question for you as well, Remo, whether you've contemplated any potential disruption from that departure in your 4Q guide?
Yes. As I mentioned, we do have strong geo leaders running Americas and International. That's why we don't feel this will have any impact on our momentum. Are we changing our guidance because of this? We aren't, because we don't really see an impact of it. We are starting a retained search. It's a very important role, and we'll find the right person. Remo?
Yeah. To follow up with Jay, we've got really strong geo leads in our regions, APJ, EMEA, and Americas. Related to the fourth quarter guide, really not seeing any impact related to the departure of our COO.
Got it. Very helpful. Thanks, and congrats again.
Thank you.
Thank you.
We'll take our next question from Jonathan Ruykhaver with Stephens Inc. Please go ahead.
Yes, good afternoon, congratulations on the strong 3Q print. I have a question regarding ZPA and the competitive landscape. I believe Akamai introduced an application access solution last year. I believe Cloudflare also announced an offering more recently. Can you talk about how you differentiate competitively and why competition won't be a potential issue longer term?
Yes. This is a relatively young market. You can look at our ZPA as two opportunities. One opportunity is transformation for application access, how applications are accessed in the data center versus how they should be accessed when they move to a public cloud. That's where it gets very interesting. Traditional VPN products don't fit well when you need to access applications in public cloud. We are driving that push. We aren't seeing a whole lot of competition there yet. There are a bunch of new companies that are coming around, but it's a very nascent market. When it comes to VPN replacement, we can sell and we do sell ZPA for VPN replacement as well. That's where we typically actually compete more so with incumbent that we are trying to replace. That's typically the Pulse Secure and Cisco of the world out there.
Again, two approaches. One has incumbent competitors, and second, really don't have a whole lot. We've rarely seen some of the new guys out there yet. I'm not surprised because it's a relatively young market, and the market opportunity is big out there. Did I answer your question?
Yes. I just want to understand one other thing on ZPA. The use case you're seeing that's driving the growth today, is it more, access to the applications in the private data center, or is it the cloud application use case?
It's actually a good mix of two. It's the same product that offer both benefits. When we drive top-down sale of ZPA, it is really bought for access to applications like Azure and AWS or Google Cloud. VPN replacement ends up being a side effect of it. When we go in a tactical thing, when somebody says, "I hate my VPN, please come and help," it actually goes in as a VPN replacement, and then we kind of tell them the vision that this can also be used for access to your public cloud applications.
Right. Okay.
The mix is, it's pretty good mix. I would say it's pretty good mix. Neither side is dominating right now. We'll learn more over time.
Right. Understood. Thank you. One other follow-up question, this might be more for Remo. Could you help us understand the seasonal impact around net retention? I believe it was down slightly in Q3. How does seasonality impact net retention in Q4? Also as we look in the first quarter of 2019.
Yeah. Good question, Jonathan. We feel that 120% is very good. It's important to understand how we calculate net retention rate. It's calculated based on comparing the change in ARR for customers from a year ago to the current period, which takes into account upsells and churn. Our churn has been relatively flat for several quarters. If you take a look at Q3 versus Q2, the amount of new business and upsell was basically 50/50. There was a slight shift in Q3 to more new versus upsell. It's going to vary on a quarter-over-quarter basis. We feel that the net retention rate is strong. We feel that longer term, with the ZPA and customers going to the transformation bundle, there's an opportunity for it to go up. Making any projections related to net retention rate, it'd be difficult for us to do.
Okay, perfect. That's helpful. Thanks, Remo. Thank you very much.
Thank you.
We'll hear lastly from Fatima Boolani with UBS. Please go ahead.
Good afternoon. Thank you for taking the questions and squeezing me in. Maybe a big picture question to start with Jay. Jay, for a company of your size, you have pretty pronounced international presence. I'm curious to get your perspective on some of the demand drivers and distribution leverage that you have between India and APAC relative to the Americas. If you can compare and contrast, and then a follow-up for Remo.
Yes, we do have strong international presence, That is attributed to a couple of things. One, I had put the same size team outside the U.S. that I put in the U.S. when I started the company. Two, Zscaler was architected with data privacy in mind. We are probably the most data privacy-friendly security company out there because we are the only company that doesn't write logs in every location where traffic is processed. All these appliance guys, whether they put a VM in the cloud or whatever they do, wherever they're going to spin up a VM, the logs will be sitting there. They'll be figuring out how to do a batch push of those logs. In our case, the logs only go to one place, and that is in EU. That's why some of the biggest European companies have embraced us.
That is the product side of it. If you look at some of the demand drivers, I used to think that cloud will be embraced by the U.S. first, Europe will be a bit slow in embracing it. I have been in Europe every month for the last six months. Every large customer I talk to, they are deploying Office 365, Salesforce, Azure, AWS. I see the same kind of demand in Europe that I see in the U.S. as well. Your second part of the question was the kind of leverage we are getting. Actually, we get more leverage from service providers in Europe than we get in the U.S. You might seem why that's the case. There are many service providers in Europe, ranging from Orange Business, a great partner, to BT, to T-Systems, to Telefónica.
These partners are actually embracing cloud and there's these kind of partners. Good leverage. We'll see a good growth coming from international market.
I appreciate the color. Remo, a follow-up for you. I think about the dollar net retention patterns, looking forward, I think about some of the inputs around customers graduating or upsizing themselves within the bundles, maybe pure pricing increases that you could pass through ZPA adoption and also just seat-based increases. Amidst those factors, what do you feel is going to provide the most sort of upside surprise or upward pressure to that dollar net retention on the ARR front? That's it for me. Thank you.
That's a good question. I would say, number one, transformation. Customers moving up to the transformation bundle. We talked about before, on our roadshow, that about 10% was professional, 70% is business, and 20% is transformation. There's an opportunity, and the pricing of each of those is, if you look at professional at 1x, business at 1.5x, and transformation at 3x off of that professional. The opportunity as customers move up, there's a couple benefits. One is pricing, but also stickiness. Once you go to the transformation, you've made the decision that you're going to go with a cloud security company, basically, as your new security. In addition, ZPA is going to have an impact also. Related to net retention, we look at it's going to be a mix. It's going to be based upon what are new and upsells in each quarter, and that's going to vary.
Some quarters are going to have really strong upsell, other quarters not. Some quarters are going to have really strong new, and some quarters not. If you take a look at the levers that we've got in the company related to selling new, as well as selling upsell, related to selling increased bundles and increased products like ZPA, it's something that's going to vary, as I'd mentioned, quarter to quarter.
That's very clear. I appreciate the color.
Thank you.
That does conclude today's question and answer session. I'd like to turn the call back over to CEO, Jay Chaudhry, for any additional or closing remarks.
Well, thank you all for joining us. We are excited about the opportunity, and we thank you for the time you've taken us. We will be talking to you in the coming quarter and definitely during our next quarter's earnings calls. I hope you can join us at the Zenith Live.
Thank you.
Thank you.
Thank you.
Once again, that does conclude today's conference. Thank you for your participation. You may now disconnect.