Thank you so much for joining us for day two of Citi's Global TMT Conference. If you haven't met me yet, I'm Fatima Boolani. I jointly head up our software equity research team here, and I am absolutely delighted to be hosting the CEO of CyberArk, Matt Cohen, this morning. Thank you so much for being here. Thanks for having me. I'm excited to be here as well. Right. Well, I wanna waste no time. I wanna get right into it. I had a little bit of a monologue here. I think when we look at your financial results over the course of, you know, the last two quarters, but frankly, the last four to six quarters, there's clearly been an upswing and a trend that certainly intrinsically is really impressive, but even more so in the context of, you know, the broader performance of the peer set in cybersecurity. Mm-hmm. You know, the question I wanna start with at the highest level is: How are you continuing to demonstrate such strong execution? And Matt, what do you think specifically is working so well that your results, both from a relative and absolute perspective, are so starkly in contrast to your peers? Listen, I think it comes down to a couple different factors. You start with a market that's at a turning point in understanding the importance of identity. You know, when you look at the threat landscape and the constantly elevating threats that are out there, you know, every organization is under attack. Generally speaking, ultimately, where the bad actors are trying to get to is to identity, and so you have this, like, growing rise of awareness, just overall, of the importance of what it is that we do, and then you combine that with what I think is a differentiated strategy for us, which is the idea of we can secure every identity, human or machine, with the right level of privilege controls. And so we're able to actually take what was traditionally our, excuse me, our market of securing IT and expand it from securing IT to securing the workforce, securing developers, and securing machines, which fundamentally allows us to be able to, to cover more of the identity market. So you have a growing market that really cares about it. You have a differentiated platform, and then, as you mentioned, our ability to be able to execute, I think, has been pretty solid. Our reliance on really strong partners, we've always been partner first, partner friendly. They help drive the business. Our sales and marketing team are some of the best in the business around their ability to be able to execute, and ultimately, you see the results that we've been able to perform against. You know, sometimes I forget that, it's only really been three years since you've been a SaaS company. Mm-hmm. Just because the cadence you've had and the reps you've developed kind of makes you forget that you were not doing SaaS the whole time you've been in existence. Yeah. I think I'd like to remind people that CyberArk has been around the block. You've been an established company for some time. Yeah. And so, can we maybe walk down memory lane a little bit and, you know, talk about the SaaS transition and how that's potentially been another vector that's really helped you ride this wave of the, you know, growing awareness about PAM? These attack volumes have just shown a very bright spotlight in the value proposition you offer. So just purely that SaaS transition, how that's put more wind in your sails? Sure, sure. Yeah, so, CyberArk is a 25-year-old company. We celebrated our 25-year anniversary this year. Yeah, that's about as old as I am. Yeah, exactly. Great. Let's share a birthday, maybe. It's been 10 years being public, so we've been 10 years as a public entity, which also is a nice milestone. And I came to CyberArk five years ago. When I came to CyberArk five years ago, we were a perpetual company, and I showed up, and I actually couldn't believe that I was back trying to run a sales team selling perpetual licenses. It's not fun. Every quarter starts over again. And since that five years, yeah, we've been able to move from perpetual to subscription with a dominance on SaaS. And what that's done for us is it's opened up the opportunity to be able to improve sales cycles. It, it's allowed us to be able to perfect the land and expand motion. It's helped us to be able to talk to customers about a platform versus products because we built it out with a common architecture and a common set of services. And ultimately, what it does is it just changes the dynamics of the business, the velocity, if you will, of the business. And we've even seen that lately in our secrets business. Secrets is a part of the machine identity persona, where that was one of the last areas that we actually launched the SaaS version of the products. And since we launched the SaaS versions, that business has accelerated, and it's accelerated again because that's a particularly tough spot to adopt. And when you have a SaaS solution, and it can be deployed in weeks versus months, and developers can use it quickly within their own environment, it makes a giant difference. I wanna go to the, I wanna break down the business from a pillar perspective. You talked a little bit about, you know, not only touching the IT persona, you're touching the business persona, the developer persona, and so we'll, we'll certainly get to that, but I wanna talk about the bread and butter business. It's kind of your claim to fame, right? Privileged access management. So, you've historically shared with us, and even kind of talked very publicly about the fact that many organizations still just don't have robust, privileged access controls, right? So with today's landscape, a very elevated threat landscape, breach activity, and, you know, all of the nefarious things that are happening, why do you think we haven't seen, you know, more kind of notoriety with the PAM category in the same way as network security and firewalls have become a household kind of concept, so to speak? Yeah. No, listen, I think at some level, we're playing. We were, when we were only a PAM company. We're playing in a part of security that is like the security. Like, the people who really know security, they know PAM, and you're locking down originally, you're locking down the most critical users, a pretty small user group, when they access the most critical targets. That's what PAM was founded. And I think that made you well-known within the deep security professional, but maybe not that well-known across the broader idea. And by the way, it led to maybe slower adoption, because PAM was hard. I think what you're starting to see now is with what we call modern PAM, which is the ability to be able to, so basic PAM, for a second, is you take a user, you vault their credentials, you vault their password, you rotate that password on a regular basis, and you broker the session. So you stay in with the user when they're accessing critical targets, so you're isolating that session, you're recording that session, you're making it more protected. That's traditional PAM. Well, now we've been able to launch offerings around just in time or zero standing privilege or modern PAM. What that means is you actually use your, as a user, you use your own credentials, your username, and password. You don't actually have to vault your password. We'll sit you with no credentials, no entitlements when you're outside of a target, and we'll start to apply those same controls, isolation, recording, step of authentication, at the point of access, when you actually log into these targets. That changes fundamentally the dynamic of how easy it is to deploy, how easy it is to use. The change management changes, and that opens up the opportunity, which I think a lot of investors don't quite get, around the runway still in securing IT. Like, we've been securing IT admins for a very long time, but now we can secure everybody in IT, from the database administrator, to the data scientist, to the cloud architect, all within one solution. You know, you ran the sales organization before you moved into this, you know, broader CEO role. You know, when you were thinking about the privileged access security, privileged access management market opportunity, you know, what does that runway look like for you in terms of market size and penetration? And the spirit of the question here is, again, you've been doing the yeoman's work for 25 years, telling people this is a big problem, and yet there's still so much greenfield opportunity. But we're also in a different environment in that, you know, one of the big questions I get is, "Hey, aren't, you know, two decades in, shouldn't we be closer to maturation, closer to saturation?" So what are some of the green shoots of growth within your core PAM market? Because, you know, like I said, there might be some perceptions or misperceptions that you've kind of run the course in your core market. Yeah. I mean, I think it comes back to really a basic concept, which is what a privileged user is today is different than what a privileged user was yesterday. And so if the very nature of privilege had not changed, that would be right. We wouldn't run saturation because we own the IT admin. But because you now have to think about anybody in IT as a privileged user, because you have to think about, by the way, a business admin sitting in the business, accessing a SaaS application as a privileged user, because you have to think about a developer. Developers are some of the most privileged users in an organization. When you start to think about all that, it just creates a much longer runway for us to be able to go after these new identity groups, excuse me, not even talking about machine identity. Within PAM, I know you've made some kind of changes, new packaging changes. You've introduced a new Chief Business Officer to the executive team earlier this year. So what is the impetus for some of those efforts to help drive, you know, ongoing momentum in your core business? And then I definitely wanna shift gears to some of the other categories that you've been building a lot of momentum in. Yeah. I think we, from a packaging perspective, we wanted to simplify, and we still have a lot of customers that are out on kind of, à la carte offerings of our old PAM solution, and we wanted to get them into the SaaS platform and get them on either a standard or an enterprise bundle. And, we went out with that package, and that package includes some of these newer, just-in-time, zero standing privilege approaches to privileged access management, to PAM, and that's really resonated with our customers. By the way, as we get to it, the base notion that we have these four persona groups: securing IT, securing workforce, securing developers, and securing machines, we wanted to have packages that map to that, that were, again, very easy. That's how you sell. You sell when you walk in and you say: "Where's your risk? Is your risk in IT? Is your risk in workforce? Is your risk with your developers? Is your risk lying in machines?" And we wanna have packages that map to that. Adjoa Danso, who's our CRO, who came in, kind of runs all of go-to-market, sales, customer success channel, I mean, she's really focused in on kind of the next level of growth. How do we get the channel partners, and the MSPs, and the marketplaces to where we need to get to? How do we get customer success to be able to service and farm accounts, so we can free up the sales reps? How do we get marketing and sales to even be more effective together? That's where she's been focused on and has done a phenomenal job in the first nine months, as you can kind of see. PAM is about, you know, 55% of your total ARR. That means there's another half of the pie that we need to talk about, right? Yeah. You know, we did discuss kind of the spectrum of personas and identities that you are tackling with a broader platform. You know, within the remaining 45% of the business, how should we think about the most sizable pillars of solutions and capabilities, and what do you think about kind of the growth prospects of each as we work through? Yeah. Yeah, so, so core PAM, 55%, growing in the mid-teens, really healthy business, and I think that has a lot of runway, as we were just talking about. Then we've got workforce, and in workforce, we've really got two buckets. We've got the traditional access space, and we've got-- that's really where we put our EPM, our endpoint privilege management, is securing the workforce. So EPM, endpoint privilege management, which sits alongside an EDR, it's another agent that basically removes admin rights and locks down the desktop or the server, is our second biggest business. It's you know, a greater than a $100 million ARR business. And for a long time, had incredibly high growth rates and still grows faster than PAM, but it's becoming a more sizable business. I think that's the second biggest one we have. If we go over then to the workforce side, the access side of the workforce, that's where we would compete against a Microsoft or an Okta. And that's where I think we have hyper-growth potential. We're, I mean, we're a distant fourth in that market. I mean, we're not claiming to be anything other, but that growth rate over there is phenomenal, and it's based on the idea that single sign-on and multi-factor authentication, the core offering of Okta and Microsoft, is not enough. It's not, it's not actually securing the workforce. And so we estimate that about 20%-30% of enterprises really care about this, on the workforce side, on the access side. And by the way, if they don't care about security, and they're just doing it as a check in the box, they should choose Microsoft. That's who they choose, by the way. They choose Microsoft, not Okta. They go in and that's fine. But when they choose it, when they care about security, we can wrap MFA and SSO with secure web sessions and with password management and with a secure browser, and we can actually make the workforce secure. And that is, for us, the differential. So we go in on the workforce side, and we say, "Hey, our $9 package is as good as their $9 package, is the same as their $9 package, but you can actually get security out of it." So that seems to work for us, and that's a high-growth area for us. Developers is the smallest business for us, by far, but it's also a really interesting business. And this is where we go in, and we say, a developer should never have privilege at all. Like, most developers sit out there, and they do whatever they want in AWS, Microsoft, and Google. That's really dangerous. So actually turn off all their entitlements, turn off all their privileges, and let's let them, at the point of login, get assigned privilege, and at the point of logging out, remove and deactivate that account completely. That, for us, is a high, high growth area. Very small business, because we just launched it. Mm-hmm. And then we've got machine identity as the fourth persona. So the three humans are workforce, IT, and developer. Now we go to machine. This is where we've had the secrets business. Mm-hmm. It's growing at a very high rate as well, like the access business. It's kind of taken off- Mm. In the last 18 months or so based upon some market factors, and we can talk about that in a little bit. And that's where we obviously also have acquired Venafi to boost out and make that machine identity business bigger. On Venafi, this was a pretty significant acquisition for you. It was a $1 billion deal, so one of your biggest ones, and you've been fairly judicious generally in the history of the company, and certainly I want to ask your perspectives on the broader trends in VC-backed companies and private company trends. But so we'll put a pin in that and come back. But Venafi, very significant for you. What was it about Venafi that struck you as this is an incredible value proposition that synergizes brilliantly with the portfolio, and what are you expecting to do with the asset that they weren't able to accomplish standalone? Sure, sure, so I mean, I think in order to understand Venafi, we have to understand the larger machine identity market for a second, and so let's just, let's just sit there for a second. Machine identity is any application, IoT device, bot. It can be a robot, an RPA bot, it can be an AI copilot bot. Think of all of this cloud computing and AI-generated innovation. It just creates a sheer number of devices and applications that are unmanageable. Those devices and applications need to be able to access data and talk to each other. The way they access data, the way they log into a database, is with a secret, just like we log in as humans with a username and a password. So our secrets management business is the act of securing the username and password that an application would use when it's logging in to get data. That's really foundational security, and it's very similar to PAM. Mm. on the human side. What Venafi does is there's another form of identity for applications. There's these things called certificates or keys. What those are, are really identifiers of who this application is. It's like a birth certificate mixed with a driver's license. It says, when was this application born, and why should I trust this application that it says who it is, and it's all encrypted, and in order for an application or a device to be able to communicate, to be listed on the web for Google Chrome to work with it, it needs to have a certificate or a key, so proliferation of number of machines, okay, then a growing recognition that actually these are security risks, that actually more and more attacks are happening at the machine layer, okay? Now, on top of all of that, you've got regulation coming out around what you have to do with these things, like certificates and keys. So Google's come out and said, "Every 90 days, you have to reissue a certificate." It used to be two years. So if you have 5,000 or 10,000, some companies have hundreds of thousands, of certificates, and you're managing on a spreadsheet or in an automated fashion, kind of with, with maybe Microsoft or ServiceNow. But you're trying to figure out how to discover tens of thousands of certificates that now have to be rotated every 90 days, you need an enterprise-grade solution. So we started hearing this more and more from our customers that they want us to do more in machine identity. We went out and looked. We were partners with Venafi for seven years. We knew them well. Frankly, didn't think they were probably the right target to begin with, because I could imagine that they had the latest and greatest and best technology. We went out and looked at all the startups, then we went back and looked at Venafi, and we found that they had spent the last three years ground up building a SaaS offering across both legacy and modern applications that was heads and shoulders above everybody else. Nobody knew it. The customers didn't really know it, but we saw it, and we're like: Okay, so we can get 150 million of ARR. We can get a highly profitable asset, actually margin accretive for the company, and we can get the best technology in the market. It's a pretty good value story. So we went out, and we spent $1.5 billion +. Hopefully, we'll close the transaction here in the back half. Well, we will close the transaction here in the back half. And ultimately then, all right, now, what can we do with it? And there's the second part of your question, which is, but what were they doing that wasn't quite right, given how excited I sound about the overall market? Well, they were a small company. They had 23, 24 sales reps. They hadn't built out a really strong go-to-market engine. They didn't have a partner ecosystem, and in security, you can't really live without a partner ecosystem. Mm. So they didn't quite understand how to scale from a go-to-market perspective, and even if they did, I'm not sure as an independent entity, they would've been able to go do that. So you take their 23 reps, their products, and you put it in the hands of our 200 reps and our market reach and our market scale, and this market problem, and that's where I get excited about what we can go do. Long, long answer, but I think an important one. No, I appreciate the detail. I mean, look, I think one of the questions we get a lot is, you know, why is it the time now for machine identity to kind of come out from, you know, the wings on the side, and why is the time now? So, you know, with the benefit of hindsight in terms of how the PAM market has evolved, do you see a lot of comparable parallels between, you know, what's kind of germinating in the machine identity market to give you confidence that this category is on the cusp of being ready for prime time, and you are at the ready to monetize this in a disproportionate way relative to, you know, anyone else and your peers and competitors? Yeah, I think the PAM analogy is a good one, and I think what we see is that the market is probably where the PAM business was about five years ago or so. You know, where... You know, post-Equifax breach, post some of the big prominent breaches, where it became top of mind for everybody. I think machine identity was always not that, not that cool to be in. Mm-hmm. Certainly, certificate lifecycle management doesn't sound all that cool to be in. But the idea here is it is having its moment. It is this, this idea where all of a sudden, machine identities are proliferating, like I said, at just such a fast rate, and the factors that will drive more growth are kicking in. You know, we get really obsessed with AI, but AI is going to drive more and more machine identities. Mm-hmm. And so I do think it is this moment in time where people are recognizing it. And then, in addition, I referenced the Equifax breach and some of the big, big breaches, the Marriott breach, back in the day of PAM. More and more of the recent breaches are at the machine identity layer. The most recent Microsoft breach on the email service started with a service account and a machine identity. And so you see kind of the public consciousness around machine identity as a breach point becoming more and more important. And I do think it's an inflection point. The interesting thing is, even though we haven't closed the acquisition, I am allowed, not allowed to do some things, but I am allowed to talk to their customers, our customers, and prospects, and the reception has been remarkable. What is that overlap in your customer base? They have about 500 and some change customers, about three hundred that are overlapped. We've got, you know, close to 9,000 customers overall, so there's a lot of white space to cross-sell into. But these customers come, and they're asking me about the acquisition. A lot of times when you acquire a company, you have to say to them, "Hey, let me tell you about this company I just acquired." They're starting the conversation with me, saying, "I heard you acquired Venafi. Can you talk about what that means? Can you talk about your roadmap?" Another data point, by the way, and again, I get excited when I'm talking about it, but, like, we have standing- room only of our partner community around the world getting trained and certified on Venafi now. We haven't even closed the acquisition. Mm-hmm. We didn't invite them. They've been showing up because they wanna learn about this space. We discreetly talked about the opportunities within your portfolio, but I think a magic happens when you derive network effects between, you know, linking the IT admin security to the dev admin security, to the workforce- Yep. business user security. So just to put some quantitative framing around it, you know, in a world where you were just doing PAM, right, you had more of a niche focus, right? But subsequent to having expanded the portfolio, can you talk to us a little bit about what happens to your deal sizes? What happens to your customer engagement? What happens to the types of outcomes and ROI you can deliver to customers when, you know, you layer on secrets on top of a, you know, an existing PAM footprint, you layer on workforce on top of an existing PAM footprint? Yeah. I think it makes you the strategic partner of these customers at a more meaningful layer. I think it makes you their identity security partner, and I think it, it opens up the space for us to be one of the couple adopted platforms. You know, sometimes people ask me about this platformization concept, and do I think the whole world is going to consolidate? And the answer is no, it's not going to all consolidate. But what a CISO wants is, like, four or five main partners, and then they're going to go buy a bunch of point solutions to try on new areas. And I think it opens up the door for us to be the identity security partner for the major enterprises around the world. What it, what it then does is, as you said, it increases the deal sizes. You see that in some of our new business, where we're landing not just with PAM, but we're landing with multiple products. More than 50% of our new logos, we did 245 new logos, which is a healthy number in this economy, last quarter, and they're landing with two or three or four of the persona groups being covered. You see that in our ARR growth in our $500,000+ cohorts. I mean, our fastest-growing cohort as a company is our $500,000+ cohort of ARR. That's because they're expanding their footprint from just PAM to all these other areas. So I think it will play out more and more in the months and years to come, but we can start to create a deeper enterprise relationship with these customers, and ultimately, the ARR per customer should be going up. So land sizes and land deal sizes are getting bigger. Mm-hmm. That's directionally very positive. What about expansion? Have you seen a very discernible improvement in your expansion velocity, whereas maybe it took you 12 months to convince a customer to expand their footprint with you, has that drifted to nine months, to six months, especially under the SaaS form factor? Yeah, absolutely. The land and expand motion and the time between first purchase and second purchase and third purchase is the most dramatic element of the SaaS transition and of the importance of our breadth of portfolio. So if we close somebody in Q1, like a new logo, we're expecting they're going to do the second purchase in the same fiscal year. If within the existing base, they're making multiple purchases throughout the year, and they're kind of tying it to their overall roadmap as they go forward. So we've seen acceleration in deal cycle of deal number two, deal number three, deal number four. We've seen that since we shifted to SaaS, and we've also seen it in the breadth of the portfolio. It's a key piece of our growth story. As, just as a frame of reference, what did that expansion conversation and time frame look like before the SaaS transition? Yeah, I think you a lot of times saw the second or third purchase come 12, 18 months later, and I think now you see it come six, nine months later. So half, you know, in terms of what kind of the acceleration happens. And then again, what you see is more and more solutions being taken and being adopted. You know, we talked a lot about the model transition. We talked a lot about the portfolio expands and the green space from a penetration standpoint. But another angle that I really want to kind of sink my elbows into is just around your install base. So you've had the benefit of having a very captive, very loyal install base that, for the most part, hasn't actually fully moved to SaaS, right? So a lot of that momentum that you've been seeing in your financial results, frankly, has been from newer customers or existing customers maybe expanding their footprint. And so what I want to get your perspectives on is this notion of, hey, converting the base, because there is some immediate financial benefits from taking an old, you know, stodgy, perpetual customer and getting them to SaaS because there's immediate sort of ASP uplift, right? So I'd love to get, you know, maybe a flavor of where you are in the journey of your install base being completely, you know, forklifted to SaaS. And secondarily, what the implications are of that, because in the interim, you are having to manage two software codes and two forms of software architecture, right? So, you know, certainly that has, you know, margin implications, which we can get to in a second, but would love to kind of get your views on where you are in that converting the install-based journey. Yeah, I mean, I think we're early days still, and I think we've taken a smart but also carrot-based approach to getting them over. We wanted to get the landing spot to be better than the current spot. We're finally there. We wanted to make sure that customers were doing it on their own time. You know, you started with, we have a very loyal customer base. We do. And what I study most is what is the different cohorts in terms of their buying patterns? If I started to see that the existing customers who are on-prem weren't expanding at the same rate as customers who have moved over, I would take a more stick approach. I would get them over quicker. But that cohort actually is buying at the same rate as people who sit on the subscription or SaaS platform. So that means there's no urgency because they're partaking. Secondly, we still see a 3x multiple on average when they move to SaaS. We see about 1.5x multiple if they move to on-prem subscription. I don't want to force them to on-prem subscription like a lot of other companies have, because I'd rather get the 3x, and I'd rather get them to the modern platform. So I'd rather plan it out with them. And a lot of our customers, we have plans over the next, you know, 12, 18, even 36 months, because we have that type of relationship to kind of detail out when they're going to move. It becomes a steady tailwind for the company, but not something that's going to, like, accelerate in one quarter or the next. In addition, there is real reason why certain companies want to have their vault on-prem. Mm-hmm. Financial institutions, highly regulated industries, government accounts. I'm not sure they're ever gonna change. Mm-hmm. Then the question becomes: How do we actually keep their vault on-prem, even do other aspects of PAM in a SaaS format, and then do everything else in SaaS? I think that's maybe more of the long-term strategy for some of these customers. ... Fair enough. The R&D engine, you know, aside from, you know, basically architecting a SaaS form factor for the entire business, you've still been pumping out a lot of new product, right? So, identity threat detection and response has been kind of this new bubbling topic in the space, and we've seen kind of that DR moniker in all the different control points, right? You've got DR for endpoint, you've got DR for network, you've got DR for cloud, now we have it for identity. So it was a long time coming. What is your approach here with identity threat detection and response? You know, what's the, you know, the driving force behind introducing this product? And what are some of the differentiating factors for you in terms of, is this gonna be an incrementally monetized SKU? Is this just gonna make the whole CyberArk user experience better? Yeah. Listen, I think ITDR, identity threat detection and response, is not a market unto itself. I think you see that in some of the startups that are out there that have been acquired. I don't think it has legs for that path. I think that it needs to be built into a platform. That's our take, that's our approach. What you can do is you can use it to be able to identify all privileged accounts, all accounts and what entitlements they have, where risk lies. More importantly, though, because that's kind of table stakes and kind of easy to do, you wanna be able to respond. The R is actually the most important component of ITDR, right? The ability to be able to understand what to do with the risk when it starts to materialize. We at CyberArk are differentiated in that we live in the session with the user, and it's really important, because there's not many security tools that actually do that, live in the session with the user. We're brokering the session, we're monitoring the session, we're recording the session. We know what's going on, and we can spot anomalous behavior, and we can spot it, particularly against high-risk users and high-risk targets. Our ITDR approach is to enhance the platform, to leverage the data, to make sure that we are the best at spotting and responding to risks around identity. I don't plan on charging separately for it. I think it's a way to get more and more people onto our platform, and that ultimately will be the growth of CyberArk. If we get more identity on the platform, we have runways of growth that are beyond years to come. ITDR will be one way we differentiate the platform itself. Now, I wouldn't be a card-carrying enterprise software analyst- Yeah If I didn't ask you about your generative AI strategy. So I think there's generally two ways most organizations have gone about this, right? It's you, you make generative AI seen and not heard by way of platform experience, or you're actively monitoring... What's CyberArk's approach to infusing generative AI in the way you're thinking about your R&D? We launched this concept of Cora AI. That's our AI. It needs a name, so we called it Cora. It's the core of our platform. It has what we say is the brain, and we wanna use all of the data that we have within sessions. We want to use the ability to be able to manage and automate policy. Obviously, we want an assistant that will make natural language an easier way for people to interface with the product itself. And we wanna, again, like I was saying about ITDR, we wanna make it core to our platform, so when you're on it, you're getting the advantage of it. So again, not planning on selling it, not planning on monetizing it, planning on building it into everything that we offer. We have a center of excellence out of our headquarters that is just an AI center of excellence, and its job is to infuse the AI into every solution, every product, every nook of CyberArk, even the internal side of CyberArk. That's our approach. I think there's two other things to say around AI. One is, I think people need to understand that the AI... the biggest place AI is having an impact is with the attackers. The attackers are ahead of us as an industry with the use of AI to be able to come after us, and part of the why the breach environment has become so bad, the threat landscape has become so bad, is their use of AI. We need to respond to that with core tools. Second of all is, how do we secure AI? Is it a decreasing component of thought within the industry? AI can be thought of as data sources or it can be thought of as identities. Our belief is that AI ultimately should be secured as an identity, and we need to secure that as any other machine identity, as part of our overall platform. Matt, really quickly on how you're thinking about the investment envelope and the OpEx posture, you know, certainly near term, but medium term too, as you know, acquire and digest and incorporate and integrate Venafi, certainly. So when you think about the growth and profitability algorithm, I think one of the concerns is, hey, Venafi, great asset, respectable growth, but they're going through a model transition, and we all know what happens with model transitions, right? Mm-hmm. There's sort of this transient, kind of temporary dip in your profitability profile. So how are you hoping to manage some of that impact into your P&L? Because you do have targets out there with respective commitments on free cash flow generation and operating margin generation. Yeah. So I think we continue to transition more and more of the SaaS. Mm-hmm. That creates a little bit of a revenue headwind, but clearly, we still deliver a good number. I think Venafi also, as they go through, will have a little bit of a revenue headwind, but it'll be pretty countered by the growth that we think we can drive overall in the business. We're very comfortable with the long-term targets that we've put out there for 2027, 20% + operating margin, 25% + free cash flow margin. We'll update targets at some time in an investor event in first half of next year, with the Venafi model, with our model overall. But, we're well ahead of our profit- Mm-hmm. kind of plan. Mm-hmm. You know, we guided to a midpoint of 12 points of profit this year, kind of really coming out of the trough- Mm-hmm of the subscription transition. And I think there's... As we think about it long term, profit is something we feel very comfortable we'll achieve. The question will be: Okay, when do we modulate that profit at above the 20% level because we're investing for growth? I think the 20% bar is a given. Mm-hmm. And then we'll figure out what do we do with that. Matt, the last question I have for you, and I think it's a good place to kind of put a capstone on our discussion, is you've kind of already hit the elusive $1 billion ARR mark. That's That's an incredible milestone for a software company to hit. When you think about the path to $3 billion in ARR, the path to $5 billion in ARR, what are the priority sequencing of the key inputs towards you achieving those levels of ARR from here? So what needs to happen from a go-to-market perspective? You know, where are you the most confident from a portfolio monetization scale perspective? I know you love all your products equally- Yeah. -but what are you the most excited about? Yeah, I mean, I think the short answer on that is, we turned our attention to the $2 billion-$3 billion mark, you know, a year or so ago, when we really understood that the $1 billion that we've hopefully, roughly, that we'll achieve by the end of this year is kind of hardwired in. Mm-hmm. So I think that we think we have a go-to-market engine with our partner ecosystem, the investment in MSPs, the investment in the marketplaces, to be able to grow. We already put the portfolio and platform in place for a two-, three- billion- dollar company by going into these other personas. Venafi and machine identity is probably what I'm most excited about overall, within the growth opportunity that we talked about. But across all of that, workforce, IT, developers, and machines, we've got a lot of runway, and the TAM supports being a two-, three-, four- billion- dollar company. I think the company is wired now for that. That's what we've been working on over the last 12, 14 months, is that vision of Cyber. It's been incredible to watch, so we're gonna keep tuning in. Thank you. Thank you so much, Matt. Yeah. Really appreciate your insights. I appreciate the time. Thank you.