Good morning, and welcome to the SecureWorks first quarter fiscal 2022 financial results conference call. Following prepared remarks, we will conduct a question and answer session. If you have a question, simply press star then one on your telephone keypad at any time during the presentation. At this time, all participants are in listen- only mode. We are webcasting this call live on the SecureWorks investor relations website. After the completion of the call, a recording of the call will be made available on the same site. Now, I will turn the call over to Paul Parrish, Chief Financial Officer. You may begin. Thanks, everyone, for joining us. With me today is Mike Cote, our CEO, and Wendy Thomas, our President of Customer Success. During this call, we'll reference non-GAAP financial measures, including non-GAAP revenue, gross margin, operating expenses, operating income, net income, earnings per share, EBITDA, adjusted EBITDA, and cash flow from operations. A reconciliation of these measures to their most directly comparable GAAP measures can be found in our web deck and press release, which are available on our IR website. Please also note that all growth percentages refer to year-over-year change, unless otherwise specified. Finally, I'd like to remind you that all statements made during this call that relate to future results and events are forward-looking statements based on current expectations. Actual results and events could differ materially from those projected due to a number of risks and uncertainties, which are discussed in our press release, web deck, and SEC filings. We assume no obligation to update our forward-looking statements. Now, I'll turn it over to Mike. Thanks, Paul, and thank you everyone for joining us on this call. I appreciate your interest in SecureWorks. Before I discuss the quarter, I'm announcing my upcoming retirement as CEO and a member of the SecureWorks Board of Directors effective September 3rd, 2021. It's been an incredible pleasure and honor to have served as CEO of SecureWorks for almost 20 years. I thank our Board of Directors and all of my SecureWorks teammates over the years for this incredible opportunity. When I joined SecureWorks in 2002, we were a small team with a vision to protect organizations from the growing threat of cybercrime. Now, nearly 20 years later, SecureWorks is a global leader in cybersecurity with the best threat intelligence and products to secure our customers and partners. We have grown from less than $1 million in revenue to over $500 million. We had a great first quarter, which you will hear more about in a few minutes, and we continue to execute on our strategy. Our future is even brighter as our momentum in Taegis customer acquisition, revenue, and ARR continues to accelerate. I put a lot of thought and preparation into this decision, working closely with the board in recent years to prepare for this transition as we implement our succession plan. As a result, I am pleased to share that with my full support and recommendation, the SecureWorks Board of Directors has appointed Wendy Thomas to succeed me as the company's next President and CEO, effective September 3rd, 2021. Wendy has been with SecureWorks for nine years and has been instrumental in driving the company's strategy, including our focus on software development and the launch of Taegis. Please join me in congratulating Wendy. Thank you, Mike. It's a privilege to serve as our next President and CEO. We're at a pivotal point in our business, and I'm confident that the momentum of our transformation will drive value for all of our stakeholders. I will be working closely with Mike in the coming months to ensure a seamless transition. I'd also like to thank Mike for his leadership and mentorship over the years. Mike has built the company into what it is today, and I know I speak for so many in wishing him the very best. Now, I'd like to turn it back over to Mike to go through the business results. Thanks, Wendy. Wendy will also join me and Paul to answer questions during the Q&A at the end of this call. As I look across the threat landscape, organizations are facing an increasingly complex and hostile threat environment. Conventional point products operating in silos are not keeping up with the adversarial tradecraft, resulting in an increasing number of breaches. Organizations need comprehensive visibility into their IT infrastructure and efficient detection and response to attacks. The market is overloaded with more and more point products that increase complexity. We continue to have a shortage of security talent. In light of these challenges, our security products and expertise have never been in greater demand. Taegis, our cloud-native security analytics platform, defends against these evolving attacks. Enriched by our first-hand threat intelligence, Taegis provides threat detection and response across endpoint, network, and cloud, and offers a single solution for SIEM, XDR, and SOAR use cases. We have made Taegis an open platform with hundreds of third-party endpoint, network, cloud, and threat intelligence integrations. By correlating events from these tools, we provide the comprehensive visibility customers need while maximizing their existing investments. Let me give you an example. Recently, an employee at one of our customers clicked on a link in an email, which downloaded and executed a malicious script. Almost immediately, the customer's third-party endpoint product and Taegis XDR both triggered an alert. However, the endpoint product triggered hundreds of times for similar alerts across 30 different systems within the customer's environment. Using the same data, Taegis focused on the behavioral aspect of the event. Embedded with our deep intelligence of how attackers operate, Taegis was able to separate the true malicious activity from the noise, only alerting the company one time with the real threat. In addition, the attacker had successfully loaded a remote access tool onto the system. Moving beyond the visibility of the endpoint product, Taegis identified this attack pattern and cut off the intrusion with no harm to the customer. This is why Taegis is so powerful. It fills the gaps in visibility between point products that adversaries exploit, providing a holistic defense. Moving to results. Our first quarter marked a strong beginning to the fiscal year with clear progress. Taegis ARR has grown to $72.4 million and 17% of total ARR. Importantly, Taegis ARR growth on an absolute basis continues to accelerate, with $17.5 million added to ARR this quarter, up 35% from $12.9 million in the fourth quarter of fiscal 2021. Taegis revenue reached $14 million, and the average revenue per Taegis customer was approximately $143,000. We ended the quarter with 500 customers on the Taegis platform, up 25% sequentially as we added 100 customers in the first quarter. Finally, even as we're scaling Taegis, we achieved total gross margins of 62%, the highest in our history. When I speak with customers and prospects, they consistently ask for three things. One, the best security expertise and intelligence backed by machine learning and data science, delivered in real time without security experts needing to tune their numerous products for each new threat tactic. Two, full visibility of their environment to clearly see how attacks spread throughout their network, so when they respond, the entire attack is shut down. Three, they do not want to rip and replace their existing security infrastructure. Taegis XDR solves these problems. For example, we recently signed a Taegis contract with a large North American conglomerate. They wanted a software solution that could detect and respond to threats across their environment and help their team save time by focusing on severe or critical alerts. Before they became a customer, the Taegis XDR demo gave them full visibility across their environment, demonstrating its detection power. Now they receive high-fidelity alerts that are automatically enriched with threat intelligence from our CTU research team. They have real-time access to SecureWorks chat with an expert to help with their investigations and reporting capabilities that provide the full story of their security program to share with their senior management and Board of Directors. Their feedback has been very positive. They feel confident in their security, and they're pleased with their choice of Taegis over other competitors. Now let's talk about the progress on our portfolio. We're proud to announce that Taegis ManagedXDR, our MDR solution, was named a leader in the Forrester 2021 MDR Wave. While this recognition is gratifying, the team is focused on driving further enhancements. We recently released our Taegis XDR Adversary Software Coverage tool. This new tool shows granular detail on real threats as mapped by the MITRE ATT&CK framework and how Taegis detects these attacker tactics, techniques, and procedures with Taegis' XDR coverage now provided across 92% of the latest framework. With research from ESG showing that 76% of XDR customers would reduce or phase out their SIEM based on XDR's improved detection and response capabilities, we are well-positioned to benefit from this market shift. Finally, we're making continued progress on our go-to-market effort. As a reminder, we are investing significantly in our channel strategy to build momentum in the SecureWorks partner community, including an MSSP track. This push into the channel provides two key benefits. First, a robust partner program will help us accelerate Taegis sales. MSSPs get to add our leading software capabilities to their portfolio, while managed service providers can extend into security services by leveraging the Taegis platform and applications. Our MSSP partner certification program addresses one of the fundamental challenges in our industry, a lack of security talent. We know this market better than almost anyone and have the unique ability to train MSSPs and empower them with the same software we use. Our first MSSPs have been trained and certified and are now selling Taegis. We are also excited to share that Dell announced a new managed detection and response service powered by Taegis XDR. This partnership unlocks the Dell relationship in a way that wasn't possible before, expanding our reach to tens of thousands of organizations that trust Dell for their IT, security, and services needs. Make no mistake, there is a lot of enthusiasm in the channel to get access to our software, investigation workflows, and threat intelligence. The work that we put in today is the foundation for our growth in the future. Looking ahead, we continue to remain laser-focused on three goals. First, innovating and expanding the Taegis platform. Second, ensuring the protection and success of our customers. Finally, accelerating our go-to-market. In closing, I am pleased with the progress we are making to strengthen the security community. Our work enables contributions and sharing from across the security landscape to collectively beat the adversary at scale. I will now turn it back to Paul. Thanks, Mike. As noted, in Q1, our Taegis ARR grew to $72.4 million at quarter end, revenue grew to $14 million, and we finished with 500 customers. We're most excited to see our ARR and customer momentum is accelerating sequentially, reinforcing our conviction that we can significantly scale the platform this year. Q1 revenue was down 1%, primarily driven by a reduction in non-strategic areas of the business as we pivot toward Taegis growth opportunities. Total subscription customers were 3,600, down from 3,800 at year-end. Taegis customers increased from 400 to 500, while Managed Security Services customers decreased by 300. While our total subscription customer count is declining, we see a shift to better long-term economics. Whereas Taegis customers have an average ARR of $143,000, the median ARR per customer lost in Q1 was $22,000. Gross profit margins were 61.9%, up 170 basis points sequentially and 380 basis points year-over-year. Sequentially, we benefited from strong demand and incident response, resulting in high utilization of our teams favorably impacting overall gross margins while we are continuing to scale Taegis. Year-over-year, we've seen significant improvement in our subscription-based solutions margin and expect a longer-term benefit from improving mix as our mix of software sales increases. Operating expenses were up 1%. R&D expenses increased to 19.4% of revenue, up from 16.1% in Q1 fiscal year 2021, and we capitalized $1.6 million in incremental R&D spend as we accelerate investments in our security analytics platform. Sales and marketing expenses were 25.6% of revenue, down 40 basis points. General administrative expenses totaled 13% of revenue, down from 14.5% last year, with the difference primarily attributable to professional fees and consulting costs last year. Adjusted EBITDA margin was 5.8%. Turning to cash performance and the strength of our balance sheet. Cash flow used in operations was $30.6 million, with the Q1 use driven by our annual performance payouts along with an increase in working capital. CapEx was $2.3 million for the first quarter, including $1.8 million of capitalized R&D investments in Taegis, an overall increase of $1.3 million year-over-year. We ended the quarter with $181 million of cash and an untapped credit facility. For our outlook, starting with Taegis. For full fiscal 2022, we continue to expect Taegis ARR of at least $150 million, which translates to revenue of $90 million-$100 million. We expect continued strong growth in new customer acquisitions, accelerating as we ramp and leverage our channel sales and marketing investments. Further, we anticipate an accelerating portion of our existing customers will transition in fiscal 2022 as they look to benefit from the additional capabilities offered by the platform. We remain committed to providing incremental disclosures as the year progresses and look forward to updating you on that in the future. We provided guidance in the press release, so I won't go through all the details, but a few points to call out. We are raising our full-year guidance and now expect revenue of $540 million-$550 million, adjusted EBITDA of -$5 million to +$5 million, and a non-GAAP loss per share of $0.13 to $0.04. We are increasing cash flow from operations guidance to break even to a +$10 million. CapEx has increased to a $7 million-$10 million range as we capitalize additional Taegis software development. Overall, it's an exciting year for the company and a pivotal transition period. There's a lot of work to do, and our focus is on executing against this transition to capture the significant value we see. I invite Mike and Wendy to join me now for Q&A. Operator, can you please introduce the first question? Thank you. I will now open the call for questions. If you have a question, please press star then one on your telephone keypad. As a courtesy to others, please ask no more than two questions. We'll take our first question from Saket Kalia with Barclays. Your line is now open. Okay, great. Hey, good morning, guys. Thanks for taking my questions here. Congrats to both Mike and Wendy on your next chapters. Thank you. Good morning. Thank you. Good morning. Wendy, maybe just to start with you, and Mike, feel free to chime in here. Maybe you could talk a little bit about what you're seeing as core MSS customers have the option to convert to MDR, let's just say convert to Taegis. What sort of churn rate are you seeing as those customers make that decision? Conversely, what sort of run rate opportunity are you seeing as some of them do make that conversion? Does that make sense? It does. Yes, thanks for that. The great news is that our MSS base makes a great target for conversion to Taegis. As we've talked about before, we started a more formal program around that in fourth quarter of last year, and we're actually seeing acceleration of that conversion rate to Taegis, just as we see an acceleration on new customer adds to Taegis. What's been great is that we see them, on average, actually increase spend with us in that process. That primarily comes from them increasing the coverage to their full environment right across endpoint cloud network business systems. They both gain in terms of efficacy, efficiency because of the extension into investigations that are more automated and response capabilities. There's an added benefit in ROI for them and an increased capture and spend for us. You see that in our increasing total average revenue per customer, and that's driven by those higher average revenue per our Taegis customers. That's great. Very helpful. Maybe for my follow-up for you, Paul. I think you touched on this a little bit in your prepared remarks, but I was wondering if you could just talk a little bit about the differences in gross margin profile across sort of the, let's just call it the three main parts of the business, right? MSS, SaaS, and SRC. Even anecdotally, just to sort of get a sense for how that shift could play out over time. Yeah. We talked about this some in Investor Day when we had that last December. We haven't disclosed at that level of detail in our numbers. As we continue to explore disclosures going forward, clearly that's something we'll look at and evaluate over time as the size and scale occurs with our Taegis deployment. Look at, I think as has been discussed in the past, our SRC margins are ones that we're happy with. Of course, over time, we see the Taegis margins as we sell more and more software only, those margins will grow resulting from that. Size and scale is very important to continue that growth up the gross margin curve as Taegis is deployed. Got it. Very helpful, guys. Thanks again. Thank you. Our next question comes from the line of Mike Cikos with Needham & Company. Your line is now open. Hey, guys. Thanks for taking the questions this morning, and congrats on the strong quarter. Was curious if we could dig into the gross margins. Paul, I think you had a comment that there was a partial benefit from higher utilization of your teams regarding the strong demand for incident response. I'm curious, can you help us think about what that benefit was to the quarter? As we're trying to look out for the remainder of the year, if gross margins should normalize downward if that incident response demand lightens up. We did benefit from that, and we're very proud of our teams, how they responded to everything that's going on in the world, as we all know from reading the newspaper. The margins benefited. We didn't disclose how much that benefited from. Keep in mind, as we go through this year, this is a transition year for us as we're ramping up the efforts around Taegis, gaining scale and size with customers on that. There'll be pressures on margin as you go through the movement between our customer base and could continue to improvement from IR. That's something that comes as the demand develops, and we all know that's strong in the economy right now, but that's not something we control. It's what's happening in the environment. Understood. Okay. Then I guess the other question that I have for you, I know that you guys have been investing in the MSSP track as well as sales and marketing in general. I'm curious with this decline that we saw in Q1, at least on a year-on-year and sequential basis, how should we think about sales and marketing as we move throughout the remainder of the year? Yeah. We're going to be continuing to invest in sales and marketing as we're ramping a channel distribution up. There'll be costs on the front end, and we'll see that affect FY 2022. It's part of the transition year. Great. Thank you, guys. Thank you. Thank you. Our next question comes from the line of Hamza Fodderwala with Morgan Stanley. Your line is now open. Hey, guys. Good morning. Thank you for taking my question, and congrats to Mike on the retirement. Congrats to Wendy on the new CEO appointment. Thank you. My first question for Wendy and Mike, just around sort of the momentum you're seeing around the partnership ecosystem. You announced some new distribution partnerships for Taegis. I think I read one in Asia- Pac. Can you talk a little bit more about how you're trying to bring on net new distribution partners to the Taegis XDR platform? I have a quick follow-up for Paul. Sure. I can talk a little bit about that. Glad you read the recent announcement. As you know, we have been focused on building out our channel program, and there's sort of a two-part focus to that. The first was really starting with expanding our distribution and resale relationships, and the second, which was launched more recently, in May, is the Managed Security Service Provider Partner Program. No small part of that MSSP Program is continuing to work with distributors and resellers on the first part of the strategy with respect to channel to really create this force multiplier for us to address, frankly, a growing market opportunity and extend the reach of the platform. We're really pleased with the momentum of the number and the quality of partners and distribution partners that we've signed up to date. I think you'll see us continue to grow and announce those partnerships and see traction from that over time, over the course of the rest of the year. Got it. Helpful. Just a follow-up for Paul. Paul, you mentioned some of the transition impacts. At what point do you think we can get to a point where we reach an inflection point in overall ARR where it starts to grow again? Is that going to be beyond FY 2022? Could we see that potentially later this year? Any color you can give us there? Yeah. We haven't given guidance beyond this year. We've only given guidance on the ARR related to Taegis, which we're very excited about. You can see in the growth percentage as we grow up to greater than $150 million in ARR. We discussed some of this when we had the Investor Day, and you can go back to look at the growth that we talked about during the Investor Day. Look out beyond FY 2022 for that occurrence. 2023 wouldn't be outside the norm for some expectation. Thank you. Thank you. Our next question comes from the line of Brian Essex with Goldman Sachs. Your line is now open. Hey, good morning. Thank you for taking the question. Wendy and Mike, congrats from me as well. Wendy, looking forward to working with you, and Mike, best of luck on your next steps. Thanks, Brian. Thank you. Maybe if I could dig in a little bit to the customer growth. If we look at the Taegis customer growth, just want to get a better understanding of where those customers are sourced from. How many are conversions from the existing installed base? What is the primary motion of the customer acquisition on the Taegis platform at this point? Yeah. The growth's coming roughly from half from existing customers, half from new logos. The excitement around Taegis is causing many people to look at our product with excitement and be purchasing it. We're excited about that. I think over time, the growth in new logos will continue to go up that curve, and the existing customers will come down as that percentage. Roughly 50/50 right now. I'll just add in, as we mentioned, we are seeing accelerating momentum in both new customer additions and the number of customers that are re-solutioning onto the platform. You'll see that combined fuel to the growth. In terms of total logo count, the pressure you see is really around the churn of much smaller customers. The median customer that we lost had an average revenue of about $25,000. It's just a reflection, frankly, of the shift in our business model farther up market and powered by the momentum that we see on both sides of the house on Taegis. Right. That makes a lot of sense. Thank you for that. I guess, what is that process like? Within the install bases you've identified, or I imagine you've identified customers that are ripe for conversion. How far are we through that process, and does that become a competitive process? Is this a catalyst for customers to evaluate other options outside of SecureWorks? Or do you have a natural benefit as an incumbent in that relationship, and you're familiar with the platform, and you've already started that education process so that you grease the rail, so to speak, to onboard existing customers for conversion onto Taegis? Just want to get a better understanding of how that process manifests itself in your customer growth. It's a great question. As I mentioned, as we've gone on this journey with our customers starting late last year, we've certainly improved a few things that you touched on. First and foremost, we've always approached this as making sure that for our customers, it feels like an upgrade experience. We do have the advantage of knowing them very well, right? We know everything about their environment and their security use cases. We make that process as painless and seamless as possible. The second thing to your point about potentially exposing this to become a competitive bidding situation. What we've done is approach customers who are the right fit now and that makes sense for them, regardless of when their contract end date is. In fact, it's been better to have that conversation well in advance of their renewal date, because we are perfectly fine to exchange contractually committed spend from one platform or set of solutions to the other. That tends to not open up a competitive situation as a competitor is unlikely to do that. Got it. That's super helpful. Thank you very much. Thank you. Once again, if you do have a question, press star one on your telephone keypad. That's star one to ask a question. We'll now take our final question from Sterling Auty with JPMorgan. Your line is now open. Hey, guys. Hopefully last but not least. Mike, it just seems like yesterday that we were standing at RSA having our first conversation. Congratulations on a wonderful 10-year. Growing a company from as small as you started to where you are now is no small feat. Wendy, congratulations and well-deserved on the appointment. Thanks very much, Sterling. Was that RSA event 20 years ago or 10 years ago? Yeah, exactly. I'm just going to say yes and leave it there. Good answer. I just wanted to dive into, Taegis, in terms of the customer profile. Given the average size, it would seem that it looks like it's trending towards a larger customer. I'm curious if you can give a sense of where you're seeing the sweet spot of the land, and then I have one follow-up. Sure. I'm happy to take that. You're right, and you can obviously see that reflected in the growing revenue per. As we've talked about before, we really target what we would term mid-market in terms of security program as opposed to necessarily the size of the customer. Clearly in the financial services sector, for example, highly mature customers who have been dealing with regulatory compliance around security and just frankly being the target of attacks early on, that they've advanced much farther than necessarily some other industries. What we talk about is really customers who are willing to invest in security, but they might have a very small security team with a roadmap and a desire to increase their maturity with a partner like us. Folks who put together best-in-breed solutions, they're looking for a platform to basically help them scale across all of their point products in place and drive efficacy and efficiency across their security stack. Whether they're assembling those solutions or they're looking for a partner to run security with them, that tends to be our sweet spot of both new customers and customers that are transitioning over. They're willing and able to invest in a security program that's really driving amount of spend with us that's probably the right business model for us. That makes sense. On the new logos that you brought in, I'm curious, who are you seeing as that final shortlist of vendors that are vying for those opportunities? Are you actually, in all these cases, going through some sort of official RFP, or are they just looking to you as a vendor and they're not really going through a full-blown bake-off process? They're just coming to you because your expertise in the industry. We really see a mix of both. Well, I'll say this. We definitely see customers that come straight to us simply because of our reputation in the marketplace. We also have customers who do, it's easier to term a bake-off, but not necessarily a formal RFP process, and I think that's related to the target segments that we primarily operate in. When they are doing that comparison shopping, I'd probably call it, the ability to frankly deploy our demo in their environment and immediately start to see detections that they hadn't seen before tends to help us. To do that not just on their endpoint or in a container environment, but to be able to see that holistically across their network, that tends to help us have a pretty high win rate as soon as they see what they're dealing with. They may have other players in there doing a similar demo who want to put in their own proprietary tech stack. We tend to win with this open platform approach. Right. Competitively, when you see, what products are you competing against most frequently? Well, there's certainly some emerging XDR players who may be in the mix, or it may simply be a bake-off of security spend or share of wallet. As we introduced capabilities recently around sort of covering many of the SIEM use cases and can help customers reduce their total cost of ownership with features in our XDR platform that cover use cases for other point products, that also tends to help us win in those types of share of wallet bake-offs. Makes sense. Thank you. Sure. Okay. Well, thank you. That wraps the Q&A in today's call. A replay of this webcast will be available on our investor relations page at secureworks.com, along with our Q1 and full year fiscal 2022 web deck with additional financial tables. Thanks again for joining us today, and have a good day. Ladies and gentlemen, that concludes today's call. You may now disconnect at this time.
Loading workspace