A10 Networks, Inc. (ATEN) Earnings Call Transcript & Summary
February 2, 2022
Earnings Call Speaker Segments
Rob Fink;FNK IR
attendeeGood morning, everyone, and thank you for attending and joining us for the A10 Investor Day. As many of you know, FNK IR has been supporting A10's Investor Relations effort since the first half of 2020. And so we've had the opportunity to see the significant transformation that has taken place at the company from the early part of Dhrupad's tenure. Before we get started today, I'd like to call everyone's attention to the safe harbor statement on Slide 2 of the investor presentation deck that is current currently being shown on your screen. And with that, share that this webcast will contain forward-looking statements that are based on management's current beliefs and assumptions. These forward-looking statements are subject to known and unknown risks uncertainties and other factors that could cause A10's actual results to differ materially from those anticipated or implied. For a discussion of such risks and uncertainties, please see the Risk Factors section as described in A10's annual report on Form 10-K and their quarterly reports on Form 10-Q that are all filed with the SEC. In addition, the presentations you will see today include certain non-GAAP financial measures. A10 Networks considers these non-GAAP financial measures to be important because they provide useful measures of the operating performance of the company exclusive of unusual events or factors that do not directly affect what they consider to be core to its operating performance and are used by the company's management only for that purpose. Non-GAAP financial measures should not be considered in isolation from or as a substitution for financial information prepared in accordance with GAAP. A reconciliation between GAAP and non-GAAP financial measures can be found in the appendix of today's presentation deck as well as in the company's financial results press release that was issued last night. With that, I'd like to overview what you can expect today. In a minute, Dhrupad will start by providing an overview of A10's recent progress, highlight the company's evolution to a differentiated security-led solutions partner and showcase how improved operational execution can aid in the potential acceleration of the company's valuation. We will then welcome Fernando Montenegro, an independent industry analyst covering the cybersecurity market from Omdia for a brief discussion of the trends, threats for enterprise and security. Matt Bruening, A10's EVP, Worldwide Sales and Marketing, will focus on delivering better business outcomes for customers and showcase 2 customer case studies today. Tina Stewart, Vice President of Commercial Marketing will then review how A10 is transforming its go-to-market strategy in light of the evolution to a security-led approach. Rich Groves, Director of Security Research will overview A10's advantages in the security market. Terry Young, Director of Service Provider Product Marketing will do the same for the infrastructure markets. And then Brian Becker, A10 CFO, will conclude with a financial overview, focused on the company's 2021 financial results, its financial priorities and its go-forward outlook before we open the floor for an interactive Q&A session. [Operator Instructions] And with that, I'd now like to turn the podium over to Dhrupad, A10's President and CEO.
Dhrupad Trivedi
executiveThank you. Thank you, Rob, for the introduction, and welcome to all the attendees to our annual Investor Day today for those in-person and those joining us remotely. In terms of our safety protocols, we have taken measures to ensure safe distancing as well as other steps to improve our facilities as well as host this event in a more effective and meaningful manner. To that end, we will have some of the presentations also fed in remotely and via recording to ensure safety for all the presenters as well. With that, I would like to move on to talking about the business and our results. Yesterday, we released our fourth quarter and full year earnings. To note, we were able to achieve record revenue of $250 million for the year, which results in 11% year-over-year growth and an EPS (sic) [ adjusted EBITDA ] of $62.5 million, which is 25% of revenue and EBITDA -- and EPS of $0.63. With that, we were also able to grow our deferred revenue 12% year-over-year, continuing to build upon the progress that we have made in the last 2 years. Details of our financial will be covered further in Brian's section. And as we move through the day today, I hope you will get a better sense for how we are evolving as a company and what is enabling us to continue to make progress on our strategic initiatives and deliver the results that we have. The themes that I want to talk about today and our day is built upon are the ones of evolution, execution and acceleration. A10 had a tremendous legacy as a company in terms of our technology, installed base and world-class products. We have, in the last several years, evolved building upon that foundation from a legacy hardware company with purpose-built software and hardware to one where we are leading into growing markets with a security-led solution that allows us to participate in faster growth segments of the market while we deliver profitability. We have done this by continuing to focus more on cybersecurity and infrastructure solutions that are aligned with secular tailwinds and market transitions to cloud and 5G among other things. We have expanded our addressable market through several commercial initiatives, and you will hear some of these later in the day today. And lastly, we have continued to globally diversify our sources of revenue, which ultimately allows us to focus on our differentiation but also create more predictability and less variability in our business going into the future. We are accelerating our growth by capitalizing on large global installed base with differentiated technology that we continue to build upon. We are creating new routes to market, and you will hear about some of them in the commercial sections today as well. And last, over the last 2 years, we have demonstrated operating leverage. And we believe that as we continue to expand our strategy and we continue to deliver consistent results, there is an opportunity for multiple expansion for us as a company as we progress further. Simply put, we are enabling business-critical networks that are secure, available and efficient. If you think of the history of the company, it was founded in 2004 by Lee Chen, who built upon a very strong technology expertise and insight into customer needs over a period of years, including when the company went IPO in 2014, we built an industry-leading platform for high-performance application delivery controllers. We clearly demonstrated globally technical differentiation through low latency, high throughput and more scalability and doing all of that with integrated software and hardware platforms. Further, we built an IP portfolio during that period that was directly relevant to the trends in IT infrastructure as well as cybersecurity. And while doing that, we continue to develop a highly engaged global customer base, which you will see in subsequent slides as well. The next step for us, like for many people, 2020 marked an inflection point. In addition to the global pandemic and the challenges that came from business interruptions and other issues, we also underwent our own business transformation to leverage our historical strength and strong customer base to better realign with market trends, customer buying behavior and verticals and applications where we can create the most differentiation. Building around secular tailwinds on things like cybersecurity and infrastructure, which includes 5G, we achieved organic growth in spite of the challenges with the pandemic. We set a foundation for sustainable profitable growth, and I will show that in more detail. We shifted to strategic partnerships and created new routes to market that helped us improve our reach and breadth into more integrated solutions with partners. And last, we accelerated our focus and redeployed or reallocated resources to areas where we provided the most technical differentiation, which directly contributed to creating value for our customers, positioning us for profitable growth in 2021 and beyond. I mentioned earlier, we announced our results yesterday. To me, the most important bar chart, I would like to highlight is organic growth. So after the company had done a great job growing for a period of time with the changes in market and buying behavior, there was a slowdown. I think in 2020 and 2021, independent of market challenges, we see a very promising trend in terms of resumption to organic growth, that we believe is consistent with where the market is going and where our strategy and initiatives we put in place directly help us continue to build upon that. In parallel, we also ensured that we rightsize the business and continue to find ways to do things more efficiently, all the while focusing our resources and energies on the most important priorities, which led to creating customer value. As a consequence, you can see our EBITDA and EPS numbers continue to trend very favorably as well. 2021 full year, our revenue, EBITDA and EPS were all records for the company. Coming back to the point of how we have continued to evolve our positioning and market perception. Here's a snapshot of 2 Gartner Hype Cycle reports. The only thing I want you to take away from this is A10 is named as a sample vendor for 5G network security and for TLS decryption. And the reason this is relevant is that through a conscious shift in terms of how we create value, where do we create product innovation and how do we take it to market, our perception has continued to evolve as well to be seen as a critical network security partner as well as someone who has expertise of value to customers in cybersecurity, including things like TLS and others that we'll review later. Here's an interesting snapshot of that. So we are capitalizing on higher growth markets also with this portfolio evolution. One of the basis for our improving growth on an annual basis comes from the fact that as we go from 2019 to 2021, our stand-alone ADC products, which are best-in-class as it relates to performance, but becoming more viewed as a niche purpose-built solution, have actually become 26% of revenue and by the way, still growing year-over-year because we continue to innovate on that with security features. But as the other portions of our portfolio such as DDoS, SSLI encryption and carrier-class firewall and CGNAT become larger portions of our total portfolio. Those segments are growing at rates in the market that are much faster than the stand-alone ADC portion. As a result of that, we also see that our blended or weighted average market rate has improved and should continue to improve with our focus on security-led solutions as well as sales. Ultimately, when you see our product portfolio and where we are seen today and positioned, we believe that compared to our peers now versus, say, 5 years ago, we continue to believe that as the company executes on a consistent basis and delivers results in line with what we have been committing to there is an opportunity for expansion of value through multiple expansion. When you look at our EV-to-sales and EV-to-EBITDA relative to peers in that product categories that we just reviewed. An important thing for us to build a business in a sustainable and durable manner is to make sure that we are driving balanced outcomes for employees, customers and investors. We do this by being environmentally responsible member of the community, and we participate in several initiatives, including the 1.5°C global initiative. We foster a diverse, inclusive and safe environment for employees and customers alike around the world in all our global locations. And lastly, continue to maintain focus on strong governance. There is obviously a lot more we can continue to be doing along these lines, and we are absolutely committed to do that. And you'll hear more about it, including on our website. Last, I want to talk about how we have set the foundation for balanced and durable growth going into the future. First, I talk a little bit about our global installed base. We have 7,000 customers in our global installed base today. If you see the box on the bottom, the nature of those customers is 15 of top 25 video gaming companies, 21 of top 50 Fortune 500. What is unique is these are customers that handle a large amount of data, are worried about network performance and are continuously worried about new types and new volume of cyber attacks. We believe that resonates very well with our technical differentiation and where we can directly create value for them. Second, many or most of these customers plan to utilize a combination of some level of applications or equipment on-prem, in public cloud and private cloud. In fact, survey results show that 85% of them still plan to have on-prem applications or infrastructure as part of their strategy for several years to come, while they also use cloud. An interesting data point is for A10, 16% of our 2021 revenue was directly as a result of somebody building a public cloud or private cloud with our products. So while transition to cloud is clearly a secular tailwind for A10, I think our opportunity we see is even broader where we are engaged with large customers to operate in complex multiple environments while we provide consistency of how they can still achieve their business goals. And last interesting data point, if you look at our customer group in 2019 for that same customer group in 2021, our product revenue retention rate was 118%. And the reason that is important is it highlights 2 factors. One is as we develop more capabilities and features, our customers are very interested in buying more of those categories from us because they work seamlessly together and they bring together technical advantages, which are not possible with independent stand-alone products that our competitors might have gotten through multiple acquisitions. Second factor that's really important is our customers are in the business typically of having to deal with growth in Internet traffic, complexity of networks, whether it's because of remote work, whether it's because more people want to watch Netflix, while at the same time, the absolute volume of cyber attacks continues to rise, and they become more and more complex and state sponsored, et cetera. And we'll hear a little bit more about this in our section on cybersecurity. So with the same customer base, there is a growing attack surface that we can help them protect, there's new capabilities that they consume from us. And last part is they continue to expand their networks in the most effective manner that they can. A simple snapshot is how we think about our hybrid solution. So we can have traffic in the network coming from web, from bots, from IoT devices. A10 solutions, and we showed just a few illustrative ones here, which are Zero Trust, load balancing and CGNAT are all managed or handled by a single A10 management plane which is designed to cover these across public cloud, on-prem or private cloud. So our position with our largest customers is we will help you make that transition at your pace in the right way so that you achieve your business goals as opposed to saying the correct answer is to put everything here or there. And we see certainly with large customers, if you think of some of our target customers as somebody who's building and operating a large mobile network or a finance, trading platform, they certainly believe their critical applications are very important to them and are closely aligned with us to ensure that while they take full advantage of transition to cloud, we also help them do it in the right way at their pace. On one of the previous slides, we talked about how we are see in 5G network security. So I wanted to give a little snapshot of where we fit in and why that's relevant to us. There are unique challenges or new challenges with security in 5G networks. First is the 5G latency and time to mitigation, there is at least a 10x improvement in latency and theoretically even bigger than that versus 5G -- sorry, versus a 4G network. Second, the sheer number of things that are getting connected creates tremendous fragmentation of that solution. In 2019, there were less than 10 devices that were certified to work with 5G. And today, it's 900, right. So -- and it's going to be much more as that grows. Third, I would say, as you visualize more IoT, more connected factories and putting more and more connectivity everywhere, there's more than 100 times increase in traffic that needs to be now monitored, managed and remediated. And last, if you are a mobile operator who is looking at the business case to put in 5G, your cost of ownership of putting in and running that network is typically 70% higher. And the way you justify it is you're going to get more ARPU because customers are going to have a better experience or more devices will be connected or you will enable things like remote cars and things like that, that need very low latency. We believe that in that situation, working closely with our customers, as they look at their existing infrastructure and look at how to bring on 5G at the right pace, we are uniquely positioned to guide them in achieving their goals while they deploy 5G. And as we have spoken in the past, several marquee 5G deployments around the world have used A10 security. How do our solutions fit in? I'm not going to read all the schematic here, but it shows a visual of different parts of the network and where our products fit in to do what we call 5G network security. On the right are some of the elements. So first is our TPS, which is automated multi-vector DDoS protection. What is unique about it is the degree to which we can detect and remediate, including automatic remediation, while at the same time, enabling very flexible scalability and deployment models while we continue to demonstrate our efficacy on protecting those networks. Our CFW or converged firewall once again combines multiple critical capabilities needed by the service providers that combine to give them lower latency, higher throughput and ability to run many more concurrent sessions than competitors. Lastly, when we engage with these customers, as I mentioned before, increasingly, we are able to work with them on a solution-based approach, which typically is focused on understanding their business goals and then creating a solution that fits it. So oftentimes, these solutions will include many other elements, including technical support, deep packet inspection, maybe SSL encryption. And if I bring you back to the original point, our products are all built on a common hardware and software foundation, which makes this much more efficient and effective for us and directly results in better performance and optimized CapEx and OpEx for customers. If you look across our business around the world, we really look at it as how do we deliver better business outcomes in cybersecurity and infrastructure solutions for customers across multiple geographies and verticals. We are focused on solving those most important application problems that align with our technical strengths. It could be in Japan or it could be in Europe or it could be in North America. Our focus is on which customers can we create the most value for and focus on those verticals and applications, whether it's on product development or commercial initiatives. This is again a snapshot of just some of our product categories, if you will, that include ADC, CGN, SSLi and the Harmony Controller that has integrated machine learning, data analytics and threat intelligence, which, by the way, the easiest connection point to that is, if you are trying to detect and remediate complex unknown security attacks, there is a point at which you cannot do it with people. And that's why it's critical to have that capability integrated. In addition, of course, customers also engage with us on long-term support contracts and so forth. We have spoken before a little bit about Zero Trust security framework. And I want to calibrate all of us again on what are we talking about, right? So first thing, to note is the notion of cybersecurity has evolved from a perimeter-based defense to a new paradigm. What does that mean? So a few years ago, the concept was if you are in an enterprise, it is like a castle. You can build high walls. You can have a moat around it and you can have guards waiting outside. And the belief is if you are inside the castle, you're fine, you don't need to worry. When you think about co-location, common cloud infrastructure, common data centers, that's no longer valid because your threat could be the person two buildings away in your own complex. And they are bringing a device from home, which could be infected. So it doesn't even mean it's malicious. So the trend -- so that's a change in that thinking, right? The second is as you bring in more devices and you start connecting things with IoT, whether it's in the industrial environment or home environment, it simply creates more ways to plant new types of attacks. And we are seeing examples, right, where that is done through retailers POS system or an air conditioning system, repair, maintenance, et cetera. Networks also need to support different deployment models now because you can't tell people what they can or cannot do and where and so forth. So the concept of Zero Trust security framework. The picture in the middle is from NIST, which is a standard body. The concept is you never trust, always verify, which we have heard before. Zero Trust eliminates the notion of any implicit trust every device, user, network and application flow is secure. It removes excessive access privileges and threat vectors. So what that means is from 100 people who have access to a production tool, you make sure that only 40 of them really need it, just by doing that, you have reduced at least some risk of those 60 people causing an issue when they don't even need that access. So that's a very simplistic example, but hopefully, it illustrates the point. And it's a very sound common sense based approach. But what I want to note here is it is not a product. So we engage with our customers to say, you should take this approach to become more secure, to do that might require you to do training of your employees on phishing attacks. It might need you to do encryption of data, and we can help you with products and software to do that or it might need you to do better user authentication. So we work with our customers on how they can become more secure using this framework independent of just A10 products, right? So that's where we fit in. But our products like DDoS, SSLI, et cetera, of course, directly at the forefront of enabling that. So why do we win? Our differentiators are unified product architecture that delivers lower latency, higher throughput and higher scalability, state-of-the-art cyber security expertise with machine learning, detecting and remediating complex high-volume attacks, we support multiple security and IT infrastructure categories, flexible deployment models in hybrid environment and best-in-class technical support for mission-critical applications and infrastructure. In fact, when we survey our customers, we get validation of some of those as well. 82% of our organizations are likely to recommend us again, and 79% experienced a positive ROI in less than 24 months. The way we help them is through better performance, lower CapEx, lower OpEx. And consistent with all the things I covered before, the reason they choose our products are features, scalability, usability reliability and quality of support. You will hear later about how we have evolved our global go-to-market approach. This includes more collaboration to drive an outcome-driven approach, a solution selling strategy aligned with changes in buyer behavior and increase and expanded relationships to get more leverage out of our global partners. As a result of some of these measures, you can see that security-led portfolio continues to drive our sales and revenue. And we believe that this is once again a favorable mix for us as the security-led solutions typically are growing faster in the market as well. Our revenue diversification is based on geography, vertical and revenue type. And fundamentally, this provides durability to our revenue and forecast. What this means is we do not have goals on getting any of these to be a specific percentage. But what it tells you is by focusing on the types of applications where we create most value. We are able to find the best ways to deploy it and find a way to drive consistent growth and revenue without worrying or being overly dependent on a specific product or region or vertical. Here is an interesting chart that shows you how we have progressed. If you look at how cybersecurity-oriented companies typically look at their business model, you often hear about rule of 40, which is the combination of revenue growth and EBITDA percentage. Over the years, as we have been able to improve our top line growth, while at the same time, we have been able to manage OpEx and deliver EBITDA. In 2021, we were able to get to 36% for the full year. In Q4 2021, we did a little better, but that's seasonally the strongest quarter in the year. At the same time, it provides a data point or a proof point that this is a good goal for us to continue to work towards. And as we become more and more of a security-driven company, this is an important factor. We have a robust balance sheet with low CapEx requirements, strong free cash flow generation and capital allocation priorities aligned with driving growth and return to investors. Once again, I'll come back to the themes of how we have evolved from our historical strengths and tremendous foundation to growing and profitable security solutions partner, focused on cybersecurity and infrastructure while expanding market and globally diversifying our sources and continuing to accelerate growth. As we continue to execute on our business model and moving towards, for example, as I showed the rule of 40, we believe that we have the opportunity to have sustainable top line growth, which obviously will translate into bottom line growth as well. But we do that by focusing on customers the most and delivering solutions that create value, and ultimately, this results in the best outcome for our employees, our customers and our investors. Through the rest of the day, you will hear a lot more detail on some of these topics. But I hope that was a good foundation for the context on what we have been doing and where we are going. Next, we are going to hear from Fernando on the cybersecurity market. Thank you.
Fernando Montenegro;Omdia
attendeeHello. Welcome to this presentation by Omdia on 2022 outlook, trends and threats for enterprise and security. My name is Fernando Montenegro, and I'm a senior principal analyst for cybersecurity with Omdia. We'll just get by the copyright note and disclaimer. And as we get started, allow me to do a brief introduction. My name is Fernando Montenegro. I'm an analyst in Omdia cybersecurity industry research team, and I focus specifically on infrastructure security. Now this includes several areas, including cloud security, network security and others. My previous experience includes significant exposure to enterprise security in different roles as analysts, as practitioner in professional services and so on. I'd like to say I particularly like to think about security from the perspective of economics and from innovational design. And hopefully, you'll see this reflected in our presentation. My contact information is below, feel free to reach out as needed. Now as we get started, let's take a quick look at our agenda for today. First and foremost, I want to be able to set the scene for how on the outlook for cybersecurity, then we'll take a quick stroll through 2021, what did we see there. Then we'll focus on enterprise trends and challenges overall, wrapping up with a look into trends we see for 2022 as well as what next steps might be for organizations moving forward. Without further ado you let's just talk about how we like to see the world. Here at Omdia, we look at cybersecurity as a subcomponent of a broader information security practice, where we look at confidentiality, integrity and availability of information overall, focusing specifically on cybersecurity. We like to take a more holistic approach as you can see the diagram on the right. And we start at the core with data security as a key component. And then moving around that, we have more identity access from around that, we have infrastructure security and security operations, enterprise security management and other areas. The basic approach is that -- at the periphery we are looking at areas such as governance, risk and compliance, people, processes and technology, but all of these areas deeply overlap, and there's significant collaboration on all of our research. And that also includes bringing in other aspects of Omdia research, including IT and other areas. Without further ado, let's take a look into what 2021 has brought us in terms of security. Let's go back all the way to early January 2021. At that time, as you may -- and you may have seen that the World Economic Forum usually releases a report on what are -- what they call the Global Risk Report. So the 2021 edition was released in early January '21, and it included top key risks for the world overall, infectious diseases, of course, we're still in the middle of the pandemic. And that crisis leads to issues of livelihood across the world, right? How can people support themselves? Moving on from there, then extreme weather was listed as a key concern on the environmental aspect and incredibly, cybersecurity was listed as #4, right? Significant technological concern. Now of course, this is due to the increasingly technological nature of society. But it's also interesting that the 2022 report was just released and numbers are not exactly the same, but they are very similar. We're still in a scenario where cybersecurity is a key concern all over the world. Now that was January 2021. What did we see happen since then? Well, you may recall, just looking at headlines all over the world, 2021 -- realistically started, let's say, December 2020 when there was a significant breach disclosed at SolarWinds that affected thousands of organizations that is far from the only one. We've seen ransomware and supply chain attacks take their pick all over the world. We lost count of how many hospitals or financial institutions and so many others were hit by ransomware. We had, of course, the Colonial Pipeline attack in the spring and Kaseya as a key service provider, technology provider that was affected, but that was far from the only one, right. Throughout the year, we've had issues of, again, ransomware being key concern. We also had issues related to cloud security being affected in a few environments. And then finally, the year wrapped up with a significant effort worldwide in trying to clean up the consequences of the Log4j vulnerability that was disclosed in early December. So all in all, very active year. We have no reason to expect that 2022 is going to be significantly different. Now that's what '21 brought us. What kind of high-level trends and challenges are we seeing in this environment now? So we like to think about what's affecting the security. Well, we -- first of all, we see security being affected from multiple directions, not only you have the attacks themselves affecting security, but there's also a significant concern in terms of outside regulation that is now increasingly affecting cybersecurity whether it's compliance to industry regulations or public requirements and so on. On the other hand, there is the issue of how do we support innovation, right? Digital transformation is a reality for most organizations and security is a key component of that as we'll see throughout the presentation. And then finally, we have the issue of resilience. How can security move beyond fighting the current fire? How can it be more proactive moving from a reactive position to a more proactive position? So these are some of the pressures that are affecting security. Well, let's take a different look into this. This is a slightly more nuanced view of deeper view and just going from the top there. Vulnerability, there's thousands of vulnerabilities that are reported, right? Ransomware, as I keep saying, it remains a significant factor for most organizations. How do you support hybrid and multi-cloud environments? How do you harmonize security between different environments? Compliance is a key area in trying to comply with regulations. Cloud native is important. By cloud native we mean how do you support how software is built in a different way? How do you insert yourself into that pipeline? The skill shortage is a key issue. How we handle security operations for teams becomes increasingly important as well, teams have to cover a wide range of technologies. When we think about the importance of critical infrastructure, that's again driven by IT and then just wrapping up with -- at the high level there, the user community aspect. How do we get our users to be more engaged with security in the way that they are contributing to how the organization does security in that sense? Security is being challenged in virtually -- from virtually every direction. I do want to double-click briefly on the ransomware. And ransomware is a phenomenon that has shifted, right, over the years, starting from back in 2016, when it really came up -- started being more popular. What we've seen with ransomware is that ransomware has changed to the point where it's now no longer a simple infection of a computer here or a computer there, rather ransomware became a multi-stage attack, if you will, where the actual encryption or extortion is really the last chain -- the last link in a chain of a campaign where attackers break into an organization through a variety of means and then move laterally and escalate privilege and so on. So that they are able to have a deeper impact on the organization when they do strike. It's a little concerning that based on the results of a survey we did with Dark Reading, where we see that 22.6% of respondents indicate that they are confident about how they will be able to withstand ransomware attacks. It's definitely an area of focus, and it's something that will remain a concern about how organizations move ahead. Now it's not the only thing, of course. When we think about cloud security, again, it's an area of deep interest. In the context of cloud, security is a key concern, right? Projects even beyond other areas such as actual delivery. Now this means that practitioners will be hard-pressed to find security solutions that can support the cloud, the different cloud initiatives that the organization has. This may be in combination with significant resources that the providers themselves are applying to security, but the onus remains on the organization to take those services, et cetera, and harmonize them with their existing security operations practices. Now this is, of course, a significant endeavor, and that would be fine if it was the only thing that security had to worry about, we saw that it was not. The results come from a similar survey that from the other data where we asked 310 practitioners about what are the common challenges they face and more than security in -- securing new technology, it's interesting that they highlight how they manage incident response, incident management across the organization and at the same time, how do they deal with the limited resources that they may have, right? So how do you balance this, that has become a key concern for practitioners all over the world. When we say this -- when we look at the data from the same survey, but we're now breaking it down by industry, and we look at what people consider the top 3 challenges. Again, I cover cloud security a lot. So it's interesting to see the cloud security and securing new technology emerges as either #1 or #2 in virtually all sectors that we looked at, right? This highlights the importance of thinking through how we're going to secure the modern environment, right? Now as we think about securing that environment, I wanted to shift the conversation a little bit and talk about two key technology trends that we find very important in discussing modern security architectures. The first, you may have heard the term, is Zero Trust. Now Zero Trust has been bandied about as one of the more hyperbolic terms in the industry. And rather than discussing, is it a product? Is it a technology? No. We like to say Zero Trust is more of a concept or guidance. And it boils down to, as we say in the slide, "Never trust, always verify." What we mean by that is that implementing Zero Trust means eliminating implicit trust. Where someone is coming from? Did they authenticate once and that was it? Can they do anything on the network, right? It means that every device, every user, every network, every application flow is inspected, is secured. And over time, this means removing, as it says here, the excessive access privileges and thereby removing the threat vectors. Now is it a one and done thing? Absolutely not. Let me show you a quick visual at the high level. If you imagine that the organization has a logical boundary, right? So that's what the organization looks like. There's network access. Zero Trust means that any external entity, whether you are a remote user, bring your own device or not, you will even be in the office, right? It doesn't matter. Your traffic is going to be inspected, maybe [ anomalous ] traffic is going to be dropped, right? Then you are going to constantly be authenticated, right? And that authentication is going to work alongside the Risk Engine that's going to be gathering security signals about your environment, about that traffic, about that connection, about that transaction. And as you clear it and constantly -- again, the Risk Engine is working constantly for continuous authentication, then you can have access to external system, right? That's Zero Trust at a very high level. The other key concept is hybrid and multi-cloud. I'd like to say that, according to our research, virtually every medium and large organization already operates in hybrid. You have a co-location plus data center or cloud provider -- or other cloud provider. The thing about multi-cloud is that multi-cloud we find it, it's an emergent property of the organization, not of an individual project, and this will play a part in a second because for security teams, it means that they have to harmonize security and operations across multiple environments. As they do that, it's absolutely essential that they have a way to have centralized flexible distribution of security policy, right. How you manage policy across multiple environments? Ideally tying that into software engineering efforts, such as CI/CD, continuous integration/continuous deployment. Let me just show you what -- how that emerging property comes about security as a centralized function, right? Well, start with the data center. That's mission critical. Your organization signs up with a Tier 1 cloud provider and that's your strategic provider for new initiatives. But lo and behold, there is a particular system that needs to use customer services from another provider. I have to support you. Then a little while later, your company makes an acquisition of a smaller firm that's using yet a third provider. Now you're supporting 3. Well, perhaps you have a reach into a region that needs a specific fourth provider. And because you want to support innovation, some teams may have deployed some skunkworks on a fifth provider. Just to wrap up the picture here, you may even have edge locations such as supporting IoT or 5G that have cloud-native technology. All of a sudden, here you are in a multi-cloud environment even though each individual project may be single cloud. Now as we look into these high-level trends, now let's switch to what trends we're seeing for 2022. Now. First and foremost, at a very high level. This is -- this comes from our IT Enterprise Insights survey. It's a massive 5,000-person survey that just ended, just ran. And the key thing here is that across IT executives, they highlight the management of security, identity and privacy, as their top-tier IT concern. We are absolutely at a place where organizations are paying attention to this, and it's up to security to work alongside them in a way that makes sense. Now when we look into security itself, when we look into how -- it's a subset of that that's how is security making investments? As you can see from the picture, it's pretty well distributed across the different areas. We like to highlight that specifically, we see some managed services as an area that seeing some growth. Particularly, if you bring together the expertise that's needed for some areas as well that don't have the skill shortage that we currently have. But that's not the only area. We see significant investments in cloud security, security operations, network security plus firewalls and DDoS prevention and identity and access management as key areas that people are investing in. When we look into what will they be facing from different trends in the different areas, that's when we bring up our different service areas for cybersecurity coverage here at Omdia. Well, if you look at those 6 areas, we have data security, identity, authentication and access, infrastructure, security operations and security management. At the high level, I'll just -- I'll focus a little bit more on infrastructure security and security operations. But for the others, data security. Absolutely, ransomware plays a part there, how we protect data? Identity, authentication and access concerned with modernizing identity governance practices and introducing password -- better password controls. If you think about infrastructure security, we're definitely seeing a push towards rethinking network security, both in terms of supporting remote work, that's where things like [ SASE ] come into play, but very importantly, in supporting cloud security environments. How are we building new network security architectures that work alongside cloud environments, again, going back to that hybrid and multi-cloud environment I spoke about. On the security operations side, the key trend for 2022 is extended detection and response. How is that going to affect how teams do security operations? And again, a little bit of a push towards managed services as an area that worth paying attention to. On enterprise, security management with the user involvement, we see the use of AI and ML and on IoT security, we keep thinking about how critical IT has become in mission-critical systems, right? So that's a key area to pay attention to. Now if we move into -- okay, what's next? What do we see as next steps for organizations? Well, first and foremost, we like to think that, the quote says it here, cybersecurity teams must be recognized as strategic partners in technology and the business decision-making process. What we mean here is that the complexity of the modern organization means that security is not going to be able to do everything itself and it can't. So it is going to have to work with other partners within the organization. And in order to do that, it absolutely must be able to participate as a meaningful contributor. It means, for example, giving proper guidance and not necessarily taking over how teams are going to implement control. It will take more of an advisory approach sometimes. In other cases, it will be running processes. But it's this give and take, this complex relationship with other parts of the business that are extremely important for security moving forward. Another way to look at this is what I'd like to say is that CISO -- we call the CISO balancing act, right? Security has to maintain -- the CISO, the security executive, they have to maintain this balancing act, which includes, on the one hand, first and foremost, they have their own security organization. So they are there for the organization. They have to support their team, whether it's support the team growing, retention, attrition, et cetera, et cetera. Okay? Then there is a relationship with the Board of Directors and other C-level executives where, in most cases, the CISO is recognized as the subject matter expert on cybersecurity and participates in several enterprise risk management efforts. Then there's the relationship with the CIO to actually run IT for the organization. They'll be running IT, but securing that enterprise IT, that remote access, that user authentication, whether it be the technology, the processes and so on, that's that collaboration. Increasingly, we're seeing the relationship between the CISO and engineering in terms of support and product security. What we mean by this? The actual deliverables of the organization, it's virtually in every case, there's a heavy degree of security -- of technology that needs to be secured. Almost -- the other element internally is the rest of the organization. How does the CISO and their team interact with the rest of organization, driving culture, aligning to objectives and so on? And last but not least, we have the relationship between the CISO and the externals. What we mean here, it might be customers that are inquiring about security. It might be regulators. It might be other organizations where CISO is collaborating, joint partnerships, government, et cetera, et cetera, et cetera. So CISO has to maintain this balancing act. In terms of more specific recommendations moving forward, I would say that I'll break them down into both for vendors and service providers as well as enterprise. As you can see on the slide, for vendors, it's really important to understand what your customers are going through and be able to support their needs as diverse as they might be. One element I'd like to talk about is that, bringing it back to cloud, you have to be able to support hybrid cloud and multi-cloud environment. You have to be able to be flexible and deploy your products or services in a way that supports these multiple environments and be flexible in how you're going to scale up and down, change things, et cetera. It's really important for organizations -- for vendors to understand that there is potentially a new set of stakeholders that also have to be included in decisions. So perhaps you are including engineering teams that you weren't before, perhaps you have to have a deeper conversation with legal or other entities. Anyway, that's on the vendor side. For enterprise and government what we -- the high-level recommendation is, first of all, you have to build the organizational structure to support this pace of innovation, right? It means working alongside teams with providing guidance, et cetera, without necessarily impeding progress. That's number one. Number two is you only have limited resources. So we have to be very critical about which area you're going to prioritize. Going back to the data that we had before, we were talking about instant response, supporting technology and innovation, while balancing limited resources. So those may be interesting areas. And then finally, I keep saying, our top practices and architectures that may be -- that make it possible for the rest of the organization to move faster, right? That's absolutely critical. So with that in mind, I do want to thank you for your time. Here is my contact information if there are any questions or comments. And again, this was Fernando Montenegro. And thank you very, very much for your time. I hope you have a nice rest of your day.
Matthew Bruening
executiveWell, good afternoon -- or good morning and good afternoon, everyone. Thank you, Fernando. My name is Matt Bruening. I'm Executive Vice President of Sales and Marketing for A10. And today, I'll be kicking off the commercial section of our presentation by highlighting how our selling approach creates differentiation and also creates a better experience as we achieve better -- help our customer achieve better outcomes. Before I begin, I'd like to just mention a reminder. And that is, for those of you on the webcast, the Q&A platform is open on the webcast platform. So please submit your questions, which Dhrupad and Brian will handle at the conclusion of today's session. Okay? So if you go on the Internet and you Google sales mantras, sales methodologies, sales approaches, you'll find various answers to that question, the various quotes that are relevant to answering that question. The one that we think embodies the A10 selling approach more than anything else is when the customer comes first, the customer will last. And what do we mean by that? We think that this is something that with A10, our approach is one that aligns directly with our sales approach because the most important objective in mind is achieved if we do this and we live by that quote. And that is to achieve customer loyalty, okay? Research shows with all the things that go into the customer engagement process with our customers or for our customers, when we engage with them on an opportunity to help them solve their business needs, to achieve better outcomes is the sales experience. The sales experience itself in all the surveys taken was rated the most important to the customer from the customer standpoint. And that includes things like product quality, delivery -- time of delivery of the solution, support effectiveness, efficacy, all those other things that could be equal in the sales process. The good news is we perform very high in all of those aspects as well. But the key differentiator that we're shooting for to create differentiation is to create the best sales experience possible for the customer. And we'll give some examples of why that's important. Dhrupad referenced a key metric earlier in his presentation when he talked about the product revenue retention rate, which is an indicator of growth of the existing customer base. And this is what this loyalty feeds into, loyalty means growing your customer base by a factor of 118%. 118%, as Dhrupad mentioned, is the net product revenue retention rate that says our returning customers are spending more with us year-over-year, quarter-over-quarter. And that means 18% growth in aggregate net of churn, which is a very important indicator of customer loyalty and the customer growth. We want our customers to have a positive sales experience with A10, and that's what our transformation is all about. That leads them, that leads the customer to buy again, buy more, and then tell their peers in the industry about their experience with A10, and they become customers, which leads to new logo acquisition, which is also an important indicator of success and growth for A10. A catalyst for our transformation in the sales force is that the sales environment itself is becoming more complex. Now we don't strive to make our sales environment or the selling approach more complex. The reality is that the buying process is more complex. There's more people involved, infrastructure people, security people, compliance people. It's more complex. So we have to be more sophisticated and be prepared for that environment. In the past, sales strategies were about selling products and selling widgets. And the way I grew up in sales, I was trained in selling features and benefits. Sell features and benefits, Matt, you'll be a great salesperson. That's the old way of selling. We didn't really spend time putting ourselves in the shoes of the customer and building the outcome-based approach where we ask them what business outcome do you want to achieve and how can we exceed those expectations and create unexpected value that you didn't expect when you started to put this project together to evaluate different programs or different alternative solutions for your environment? So while selling value and benefits is still a key component of the sale, the industry has transitioned a much more collaborative approach where the sellers are co-developing solutions with the buyers in a highly complex environment with a goal of meeting a higher value of needs for the customers. So our sales teams, what they strive to do and what our customers expect of them is to be thought leaders, to be an organization that brings something different, a different perspective to the customer and increases the value of that, focusing on innovative tailored solutions, which prove to be commercially innovative, not just innovative technically, but commercially innovative. That's a key term here. And we'll talk about what that means in more depth here. So what we're looking to do is the sales team is striving to change the status quo by driving insight that might be counter to the original beliefs of what the customer thought they wanted in a sales process. What we employ is a formula, and this is our sales methodology. It's a formula based on curiosity plus creativity equals innovation -- commercial innovation. And commercial innovation embedded in that could be technology innovation, but it's commercial innovation. And there is an order of precedence where curiosity has to come first. You can't be creative unless you're curious unless you're asking the right questions and gaining insight and actually come to the customer with something they didn't expect. You have to be smarter than the customer in a lot of cases and have more in-depth knowledge about the organization than maybe they do and have a look ahead over the horizon in terms of what might be anticipated later on in the course of the sales process or in the customer's journey in the life cycle of the organization. So of course, A10 still needs to stand out and create real customer value. And as Dhrupad said earlier, we believe that we have a portfolio of solutions that delivers on all those value streams that the customers expect. These include state-of-the-art cybersecurity with machine learning and AI that detects and mitigates threats before the customer deals with a major problem in their environment, solutions that support multiple security and IT infrastructure categories with optimized OpEx and CapEx models and flexible technical support that works in both private cloud, public cloud hybrid environments, which is exactly what our customers are asking us about right now. And all of this has prevalence to what Fernando talked about when he talked about the importance of being an operator in a flexible environment both private cloud, public cloud and a hybrid environment and make sure that the customer has the same experience with your solutions in all those environments combined. Consistency of the solution in terms of its performance, efficacy and overall value. And then finally, this is a key differentiator, our best-in-class support, which makes sure that the customer is not left stranded when we sell them a solution to operate on their own, our world-class support organization makes sure that the mission-critical applications and infrastructure meets the expectations from day 1 when we sold the solution to the customer. So these differentiators and our commitment to the market, are things that we continue to innovate, both commercially and technically to help create a happy and loyal customer base. And this is all critical to the future of A10 and our customers. So speaking of customers, we're going to hear more from our customers here. We have a couple of customer vignettes. We sat down with a couple of customers of very different makeups and characteristics, the first being a telecommunications provider based in Edinburg, Virginia, Shentel Communications. And so I'm going to turn it over to Shentel and they're going to walk through how they derive value from A10 solutions.
Unknown Attendee
attendeeI am VP of Network Engineering here at Shentel. My team and I oversee the planning, design and engineering and deployment of all Shentel network infrastructure that supports all of our lines of business that's from video to voice to data. My team also includes the network operations center who is responsible for the monitoring and management of those networks. So under the Glo Fiber brand, Shentel offers fiber optic broadband services to our business and residential customers. And under the legacy Shentel brand, we offer video and data and regulated and unregulated services through the cable network as we are a cable operator as well, as well as the DSL Internet access in some of our areas, so we're also an RLEC in our area in the part of Virginia. And then under the Beam Internet brand, Shentel offers fixed wireless Internet service using existing cell towers in our network, all of which, of course, are owned by Shentel. We're seeing more and more networks transition to v4 but there still remains a large portion of that legacy Internet that is moving away from v4 more slowly than we would like. There is no expiration date set at this time on v4. So we have to have an expectation that v4 has to continue to exist in our ecosystem for whoever knows how long. So the A10 platform really allows Shentel to continue to support our v4 space as we continue our transition to v6. Paybacks immediate. A typical Shentel market generally requires -- when we launch the market, generally requires an average of at least [ a /20 ], which will support a little bit more than 4,000 subs. So in the beginning, when people were selling excess IP version 4 space, the cost per IP was between $10 to $15 depending on the block size, the bigger the block, the lower the cost. Today, that cost is around $50 to $55 in IP, again, depending on the block size. So us deploying, or Shentel deploying the A10 appliances from the very beginning, it resulted in immediate savings on day 1 because we were not required to continuously acquire that IP space to support the increasing demand on our customers' end. A10 Thunder appliances are currently supporting, I would say, around 90,000 plus subs today, which is expected to increase another 15,000 subs in 2022. So if you use the market pricing for v4 space over the past 5 years, conservatively, we're estimating a savings of more than $2 million. That's savings that we did not have to spend to acquire additional v4 space. Well, simply, a solution that exceeds all of our requirements backed by really a team of great professionals. You want to partner for success. The relationship between Shentel and A10 has been just absolutely phenomenal. It is absolutely vital that the reputation and commitment of the vendor that you're partnered with can support all your business objectives. There's an extreme value when you can partner with a strong vendor who comes -- who continues to evolve as Shentel grows. And that describes A10 perfectly.
Matthew Bruening
executiveOkay. Our second customer is a diversified Turkish industrial group based in Istanbul, and they implemented our SSL inspection solution to help detect and mitigate threats earlier than -- or faster than they ever had before. So let's turn it over to hear from Borusan Holding.
Unknown Attendee
attendeeBorusan Holding is a group companies. It has different group companies in different fields, something like energy, logistics and production. And then my role is group information security architect. And then I am responsible for CISO operation, information security and also security for planning. The challenge for today is to analyze all the traffic against the cyber attacks. All the traffic needs to be visible and needs to be analyzed by all our security devices to actively detect all the cyber threats. And also we check out our traffic and then more than 99% of our outbound internal traffic is SSL. This goes through via HTPS. That's the thing, we need to cover. We need to analyze all this traffic and even every phishing attacks or every credential attacks use HTPS. So we definitely need to detect them. A10 actually, as [indiscernible] has really straightforward to sell into [indiscernible] operation. It was very smooth. And then it is so easy to troubleshoot on SSL traffic. For example, because its working model is very easy, and then it actually translate the port and then we capture the ports somewhere on our upstream and then anchor it again. So it is so easy to manage. And then it is so easy to troubleshoot an issue on this SSL traffic. And also it is a very simple way to intercept traffic. A10 has a load balancer feature on it by default. So other than the solutions we actually have in POC, so we can load balance our security devices, especially the proxies with A10. So this is the good benefits to choose the A10. IPS actually detects much more threats than before A10. So for example, today, in one month, we actually detect some more than 1 million intrusions. But before A10, it was something like 400s or 500s, something like that. So we can say more than 100% traffic we can analyze with A10.
Matthew Bruening
executiveIt's always important to get the customers' perspective, isn't it? So as one of our recent new logo customers that we're working on told us, it's interesting to hear your value proposition from an A10 employee, it's even more valuable to -- I want to know what your customers are saying about you. So these testimonials are very key in a validation in terms of what we've been telling the market and our shareholders for several years now. We're going to shift our attention to -- I'm going to introduce Tina Stewart, who is our Vice President of Commercial Marketing. And Tina is going to highlight some more elements of our go-to-market transformation and how we're changing the outcome-based approach for the market and for our customers and provide some insight in terms of how do we do that, what partners do we need to make us more successful to reach those customer business outcomes?
Tina Stewart
executiveHi. I'm Tina Stewart, Vice President of Commercial Marketing for A10 Networks. Today, I'm going to discuss transformation and our go-to-market strategy. But first, I'm going to talk a little bit about the CIO transformation journey. CIOs have been driving significant business change during COVID-19 in order to keep business running in the work-from-home era. But as the new year starts, they're looking forward and assessing new realities and new priorities on-prem and in the cloud and how it all blends together in the hybrid world. There's plenty to keep them busy, of course, from tackling talent gaps, to keeping the business operational, to firming up cybersecurity protection strategies. And the CFO and Board are right in the thick of the planning process as they rethink technology strategies. The clear CIO reality is the operational and cybersecurity resilience is the top of organization's concerns as they move to the cloud. Simply put, it's about the CIO having a plan that includes the right people, the right processes and the right business partners to deal with problems as they occur as they continue to migrate to the cloud. This is why CIOs are really rethinking their third-party relationships and how they best operate in a hybrid ecosystem. This reality positions A10's quarterly and C-level priorities. A10 supports both on-prem and cloud native systems in a hybrid manner to ensure digital and cyber resiliency. With this as context setting, I'm now going to turn the discussion to our transformation journey and how we, at A10, are meeting our current customer and market demands. Accelerating solution adoption. So how the heck we've been doing this? A10 was founded based on a great product idea that aligned to customer needs. And we are still delivering on that promise today. However, the market has changed since we launched our product 15 years ago and even more so due to COVID and remote working requirements. With so many competing priorities in the market, we have to have a maniacal focus on the customer in this never-normal world. Our ambition is simple: we want to make it easier for customers to choose A10 networks. And we are winning because we have gone through our very own go-to-market transformation that includes cross-functional collaboration, an aligned solution portfolio and measurable partner traction. We consider this through the entire customer journey from awareness, to decision, to loyalty and everything in between with a very clear focus on outcomes, the market and a much greater sales alignment. Let me go a little deeper, in fact, I want to go to an entire level deeper on what I mean by outcome-driven approach. As a business, we took overt actions to differentiate our go-to-market strategy based on customer outcomes, customer experience, market segmentation, time to value and consistency with a digitized approach. By having an outcome-focused approach combined with the maniacal focus on the customer, we have improved our customer loyalty and have grown new logos and again, grown new logos, that's huge. We are effectively investing in efficient and effective activities aimed at improving our sales productivity. Hey, for example, we invested in sales, marketing and partner training. The outcome is a consistent experience throughout the entire customer life cycle. In addition, the training is aligned with the right set of tools to automate repeatable processes and track our incremental progress. It's worth noting that A10 has spent more on sales, marketing and partner training in the last 2 years than it has, well, since its inception. We believe customer engagement and thus sales success are highly correlated with the aligned training and process. That is why for every $1 invested in improving the customer experience, we have seen clear value to the business. Simply put, we are aligning our products, our go-to-market and support for our customer and market needs. When all is added up together, we have succeeded in diversifying our customers across multiple verticals while keeping focus on security and critical infrastructure. And when COVID has, honestly, impacted just about every industry and definitely many industries for sure, we have grown. And so we have grown by focusing on the right target audience, key partnerships for ourselves with a differentiated message and multiple consistent touch points that have really been yielding results. Now I'm going to jump a little bit more into our market opportunity and the GTM motion within service providers and enterprises. Service providers are a diverse group of organizations, including telcos, mobile operators, cable and broadband providers, universities and many others who are deploying 5G networks. Our 270-plus service provider customers are supporting over 1 billion subscribers, yes, 1 billion subscribers. Service providers depend on critical functions such as carrier grade networking and firewalls, DDoS protection and load balancing to absolutely ensure proper network performance and security. Service providers, they rely on A10 solutions for the highest standards of reliability, performance and security. Some of our successes include SK Telecom, who deployed the first 5G network ever with the goal to be the most secure network in the world. We also help smaller regional service providers to grow their subscribers without spending too much money on acquiring new IP addresses. One final example is our partnership with Ericsson. We partnered with Ericsson on its Packet Core Firewall, which is built around the carrier-class firewall, more about this in the future. These are just a few examples. But you will hear more about our service provider strategy later on in the session with Terry Young. In the enterprise, we are aligning our go-to-market strategy where we see the greatest market opportunity just like service provider. For example, cybersecurity threats are on the rise, including ransomware and malware, which are reaching an all-time high. Our solutions and security partnerships support a Zero Trust strategy and can help enterprises combat rising threats. By removing implicit trust, enterprises can ensure the integrity of their networks and drive greater digital resilience. Some key examples of our successes in the enterprise include -- well, let me start with one of the largest cloud providers are using A10. And they are doing so by protecting compute and back-office applications from crippling DDoS attacks. Gaming, and for those of you who have kids out there, gaming is a big deal, gaming is another huge area of success for A10. We are the vendor of choice with 15 of the top 25 gaming organizations deeply invested in A10. And gaming companies, honestly, are amongst the most cyber-conscious customers we have. And then finally, the financial service sector, they also rely on A10 for use cases such as low latency trading, security and routing. We continue to grow our footprint in the enterprise, but we can't do it alone. Partners are a huge, huge part of solving challenges for our customers and extending our reach. We have joined forces with a number of leading cloud security and solution partners. We do this -- so our customers can confidently deploy A10 into their existing infrastructures to protect against data center threats, simplify security operations and improve traffic visibility. We're also working with a major partner to create a set of turnkey solutions that help enterprises overcome the operational and security complexities they face with application delivery, whether from on-prem data center or a hybrid cloud infrastructure. So this is pretty cool news. As I mentioned earlier, a Zero Trust strategy can significantly increase an organization's ability to protect against cyber threats. The ability to inspect encrypted traffic is absolutely foundational to a Zero Trust architecture. Our technology helps an ecosystem of security providers to efficiently enhance their protection at scale. These vendors range from industry giants such as Cisco, who is just right down the road to security-specific solutions from companies such as OPSWAT. Finally, cloud transformation. Cloud transformation is now nearly part of every organization, particularly as the pandemic pushed businesses to truly rethink how they service their employees, partners and customers. Our software solutions ease that transition. And again, this pandemic has really pushed businesses to rethink how they serve their employees, partners and customers. So as our software solutions ease the transition to hybrid cloud environments, they're available in multiple form factors from pure software to cloud marketplaces like Azure and Oracle. These solutions can be highly automated with DevOps tools to help drive efficiency and accelerate digital transformation. Many organizations are rethinking their technology and vendor relationships. Our strategy around meeting the customer wherever they are with regards to their journey with the right solution at the right time as the right partner, and we are winning as a result of our efforts. As a closing note and a validation to our customers and partner support, it is truly gratifying to receive so many awards and recognition over the past 2 years from partners like Intel to industry organizations like RSA, Interop and Frost & Sullivan. We are focused on driving innovation through our go-to-market strategy to help our customers solve their most critical cybersecurity infrastructure challenges to ensure digital resiliency. I really appreciate your time. Thank you. And again, thank you for your time.
Matthew Bruening
executiveThank you, Tina. And I trust that Tina's overview provided a little bit more insight into the market dynamics, the market opportunity and the importance of a unified sales and marketing approach that defines our overall go-to-market strategy. Let's drill down on security for a minute. I think it's very well known that the sophistication and complexity of cyber attacks has intensified a lot in recent months and recent years. And the second thing that we all know very much in the cybersecurity realm is that the adversaries have more opportunities at their disposal, right? Playing defense is more difficult than playing offense. And the other thing that's happening is that the volume of attacks has increased. And then the third thing is that with digital transformation accelerating within the enterprise sector and in the service provider sector the attack surface has widely expanded, providing more opportunities for the adversary. No one at A10 knows the adversary more than Rich Groves, who is a Director of Security Research. Rich is going to talk about his perspective on the adversary, what's going on in security, what are we seeing in terms of recent cyber attacks, and most importantly, how are we implementing a Zero Trust strategy to help protect our customers short term and over the long haul. Rich?
Rich Groves
executiveHello. My name is Rich Groves, and I'm Director of Security Research here at A10 Networks. The attack surface has grown, there's a steady growth in connectivity and digital transformation. Cloud adoption is on the rise. So cloud infrastructure has become cheaper and easier to use. And therefore, people are using more -- taking more of their infrastructure and moving it into the cloud. But also enterprises are relying on Software-as-a-Service more and more over the years. So people are subscribing to services like Office 365, for example, and exposing more of their infrastructure to these Software-as-a-Service systems. The IoT growth is 1 billion devices year-over-year. As you can see on the left. Within this, so cameras, smart plugs, lights, et cetera, pretty much anything that's connected to the Internet. But these -- the real growth is in all of these, what I would call, sensor systems like cameras, smart plugs, et cetera. Each one of them has to have an API interaction, cloud API interaction to even function. And therefore, there's more exposure there as well. Bottlenecks in the Internet are always being removed. This past year has been no exception. So people are utilizing faster CPUs, certainly more cores and that is enabling pushing artificial intelligence, machine learning closer to the edge. And finally, faster switch chips are being deployed all the time because they're being commoditized. They're actually very cheap and because of that, it's enabling huge increases in network speed and port counts, which we all benefit from in having a faster Internet but also malicious actors benefit from this as well. Unethical and ethical hackers alike are incentivized to create new exploits of these IoT systems. As you can see off to the right here, the growth year-over-year of the number of vulnerabilities that are disclosed and found. Some, of course, are not disclosed, but have been found. And there are a bunch of 0 days in that aren't shown here as well. So what do we use those for? Well, the ethical hackers would end up utilizing bug bounties to go on phishing expeditions for new vulnerabilities, right? So valid and noble business. They're a community that's helping us not just as a vendor but as an industry as a whole, create more secure software. But by doing this, it's also enabling hackers to actually utilize these CVEs, these well-documented exploits to incorporate that into malware that allows them to expand their botnets, enable data exfiltration, ransomware installs. It helps them exploit current security parameters basically. So now they have the ability to not just launch attacks inbound but also outbound from your network and also from east to west within your network as well, finding new information to attempt to steal or utilize as a weapon. This IoT growth, coupled with the CVE growth that I'm showing here, it's growing at such a rate that it's really challenging for humans to deal with. And we believe here at A10, we believe strongly in machine learning, and we think that machine learning is a necessary tool for effective detection and remediation of these threats. The latest example of this is Apache's Log4j. Apache Log4j is a framework for logging. It's event logging. So events like security events, performance events, et cetera. It was disclosed on the 9th of December. So now it's an exploit that is -- it's called an unauthenticated remote command execution exploit. So really what that enables the malicious actor to do is to take control over the system that is exploited. That allows them to install malware, if they have malware to do that. This affects more than 35,000 Java packages across the Internet -- this was based on Google's research, across potentially billions of devices, actually more than a billion because Java is so ubiquitously installed. Scanning primarily started from Russia on the 10th. We issued guidance soon after that. But soon after that, we noticed malware being uploaded with Log4j being used as an infection vector. And then after this, a more distributed pattern of traffic -- of scanning traffic was seen, which is a really good indicator of viral spread and incorporation into botnets themselves. What you end up seeing down here to the right is a graph of utilization of this malware on a single host. So at T-0 of this line -- you'll notice that bots begin scanning for exploited systems about 3 seconds after the exploit actually happens. We were lucky enough to catch at 26 seconds, the command and control actually sending a command to this bot and launching this high-speed UDP flood that you can see that comes next at around 26 seconds after exploit. The important part of this graph that I want to show is that the system is exploited and then is used as a weapon in under a minute. And at these speeds, humans have difficulty. And this is why we think a more automated approach is actually needed. So DDoS attacks and weapons continue to grow, so we have 15 million DDoS weapons that we track here at A10. A UDP amplification sources are very large numbers of systems within this data set that I'm showing. So these are systems that generate a lot of traffic during attack. You've seen these in the terabit attacks that hit Azure, AWS and Cloudflare. But also we're tracking bots and bot like behavior, as you saw on the previous slide. In December alone, we observed 44,000 attacks, but this is just from our vantage point as a company, worldwide, it's far more. An example of a technology that we've created to deal with these attacks is called Zapper and it's our AI ML-based Zero Trust technology. So Zapper is used to create a dynamic signature of an attack on the fly. So it's difficult to mitigate with static signatures for DDoS. Attacks themselves are ephemeral in nature. So signature-based systems create a lot of collateral damage. In time frames, sub 10 seconds, we're capable of utilizing machine learning to come up with the exact signature at that one point in time. The exact filter to protect the end user. So what this means, since we're coming up with the filter on the fly, that we can handle new protocols, new attack types, et cetera, with very little tweaking essentially attempting to future-proof this Zero Trust system. So A10 Networks enables Zero trust architecture with technology that allows for deep visibility, Zero-Day DDoS protection, as you've seen, micro segmentation of services, protecting one service from another so that trust does not have to be transitive. Large-scale user authentication and verification is built into our systems. And protecting against malicious traffic within encrypted protocols is something that we do very quickly. Thanks for listening.
Matthew Bruening
executiveBased on what Rich sees and knows every day, I'm not quite sure how he maintains such a calm demeanor. It makes me a lot nervous than it appears to make him, but he's been doing this for a long time. So a great piece. So next, we're going to turn to Terry Young, who's the Director of Service provider product marketing for A10, and she's going to talk about that specific service provider sector in terms of the business drivers, why it's one of the most well-funded segments that we do business with today. And finally, how A10 enables and secures critical infrastructure expansion globally for customers in this segment. Please welcome Terry Young.
Terry Young
executiveHello, everyone. I'm Terry Young. I'm Director of Service Provider Product Marketing here at A10 Networks. I'm going to talk a little bit about the work that we do with service providers across the globe and more specifically about our recent work with regional service providers that are trying to bridge the digital divide. So catch up or leap forward -- if you read anything in the news or in industry publications, you might get the impression that the purpose of all these funding initiatives that are happening in the U.S. and across the world that the purpose is to allow these communities to catch up with where the rest of us are that have the urban broadband, the better broadband service here in the U.S. But really, I don't think that's what those communities want at all. They don't want to just catch up. They want to leap forward. They want to bring a better quality of life to the residents. They want to encourage new business and allow their communities to compete on the global market. They want to leap forward. And for those service providers that are looking to build out to these new -- to these underserved or unserved communities, they have to consider both their -- the last mile access that they have to build, but also how they can augment the capacity and the capabilities within the core network so that they can allow their communities to leap forward or even leap ahead of the current broadband capabilities in the more urban areas of the country. And that's where A10 Networks comes in. So A10 provides critical functions across the service provider landscape. And what that means is regardless of whether you're a mobile operator, a telco, a cable operator, CLEC, a small regional ISP or a very large Tier 1 mobile operator that has millions and millions of subscribers and moving to 5G. We provide functions that all these companies provide that help secure and scale the core part of the network. We have approximately 270 service providers globally, and we are proud that we -- with those service providers, we connect approximately 1 billion subscribers globally through one of our core technologies. So service providers have lots of different networks actually. They have data centers and networks for their internal operations and their websites and their retail stores just like any large organization would have. But when we talk about service provider networks, what we're really talking about is the production network. That's the customer-facing network, the network that you use to make a phone call, send the text message or do any Internet browsing. That production network is what faces the public. And that's what service providers of all types have in common that providing access and providing the highest security and highest capability to that core network is of ultimate importance. For an enterprise, for example, the core network is the network and their data centers are critically important to the functionality of their business. But for a service provider, the network is their business. So that means the technology that we sell them that sits in the core of the network has to have a highest availability, highest reliability and higher security for them to be willing to put it in their network. Our TPS functionality solution, for example, is used by large data center operators to not only secure their own infrastructure against DDoS threats, but also to offer DDoS protection as a service to their clients -- to their enterprise clients. The conversion firewall capability, conversion firewall product is used by Tier 1 mobile operators to provide a seamless transition between 4G and 5G, work for IP connectivity and also to secure the network infrastructure as well. Our carrier-grade networking CGM solution is used by regional service providers to preserve their existing investment under IPv4 infrastructure and also to allow them a path to migration between the 2 protocols. So there's a lot of discussion these days about the digital divide and the point of the digital divide, bridging the digital divide and this has really been kind of -- the focus has been increased due to the pandemic. Pandemic really made everyone aware of how critical our broadband capabilities are. And this is true not only in the U.S. but really across the world. In the U.K., for example, there's a project Gigabit that is allocating GBP 5 billion to invest in broadband infrastructure across the country. And this is true in many, many countries. In the U.S., there is an estimated 23 million households that do not have any kind of broadband connectivity at all. That's the official FCC estimate, which many -- most analysts agree is really under counting the number -- the number -- analysts have come up have estimated that the number is actually double that. It's more like 43 million, that's because of some of the processes the FCC does as far as estimating serving areas and the census maps that they use and so forth. But whatever the right number is, it's too many. And again, this is the problem that's been brought into sharp focus in the pandemic. And it's more acute in the most rural markets where the percentage of households that have no broadband connectivity is much higher than it is in urban areas. As a result, there have been a series of funding initiatives through the FCC and from the USDA to try to close the gap. It needs to address the problems that not only the last mile connectivity but also some of the affordability and just lack of technology is also present in either low income and in rural areas. The Emergency Broadband Benefit fund is now part of the affordable connectivity program and again, as a response to the COVID pandemic and the need for broadband service for schools and just people in general. Most recently, the FCC's Rural Digital Opportunity Fund, completed its auctions late in 2020. For their first portion of this $20.4 million initiative, allocating about $5 billion to 180-some service providers to connect about 5 million homes in the first phase of this initiative. And of course, most recently, the Infrastructure Investment & Jobs Act of $1.2 trillion includes a large portion of funding for broadband connectivity. So this has resulted in a lot of activity within the industry of service providers, the smaller service providers trying to figure out where the funds are, how to get them and how to manage them and how to apply them. And we've been working with the industry to make them aware of the capabilities that we offer and to offer our expertise where needed. One thing I think that's really interesting about how this industry is different than, say, what you might be more familiar with, which is some of the buildout for the mobile industry is that this is a very fragmented area. I mean what you really have is pockets of connectivity that are urban areas that have been built out by the Tier 1 operators. And then everything else is kind of rural. So these service providers have a lot more territory, a lot fewer people, a lot fewer resources and a lot less funding, obviously, to try to bridge the digital divide. And over the years, it's resulted in a lot of -- kind of innovative approaches that try to create that funding and unique partnerships and different types of companies, including electric cooperatives, including fixed wireless access providers, fiber-to-the-home providers, incumbent local exchange carriers, a wide assortment of smaller companies that are looking to trying to fill this gap. And so it's very fragmented. So you have a community that's trying to have the same technical challenges and same network challenges as the Tier 1 operators, but really doing with a lot less funding and a lot less resources available to them. So what we try to do is provide the capabilities that we have both in our expertise and as well as our carrier-grade technology that we offer to the largest Tier 1 and make that available to the smaller operators as well, so that they can start building a network that's carrier-grade end to end. Another area that we talk to our service provider customers about is like how much subscriber expectations have changed over the last couple of years, and again, largely due to the pandemic. The pandemic has raised the awareness of the criticality to broadband subscribers in a way that's very personal. And most of you probably have had experiences of your own, during the initial shutdown. But I think now when subscribers or potential subscribers think about broadband, they're not thinking about entertainment anymore, they're thinking about, gee, if I don't have a good enough broadband, I may not be able to work, I may not be able to get the medical care that I need, and I may not be able to educate my children. So it's now very personal. And I think as a result, the expectations that subscribers now have for service providers, regional service providers as well as the larger ones, the expectations have risen quite a bit. I mean because they know how critical connectivity and accessibility and reliability is. What's also increased is the level of subscriber or cyber criminal activity and the subscriber awareness of that activity, I think consumers today realize that security is no longer a nice to have. They've seen enough programs and news flashes about ransomware and different types of DDoS attacks that they have a much higher level of understanding and awareness of the necessity for cybersecurity. And I think -- you heard a little bit about our TPS, our TPS threat protection system and how we protect against DDoS threats. But I want to point out that for the rural communities, I think these threats are actually quite a bit higher. Those 15 million DDoS weapons that are referenced in our DDoS report can be just as easily turned to rural subscribers as they can to urban. I mean after all, this 23 million additional Americans, it's just another IP address to a cyber criminal. Most DDoS attacks are quite a bit smaller than the ones you read about in the news. They're under 10 gigabits -- like a 5-gigabit attack or even smaller can easily take out a small enterprise data center or something like a small hospital. And for rural communities where they may have only one hospital, a DDoS attack on that facility can be devastating. So I really think that rural communities are actually more vulnerable than urban communities because of that need. A second area that we help -- a problem that we help address for these regional service providers is their IT connectivity, that is, how they're managing their IPv4 and IPv6 connectivity and existing investment in IPv4 infrastructure. This is kind of getting in just a wee little bit about technology that's deep in the core network. So I'm just going to explain this a little bit about what I'm talking about. Every connected device on the Internet has to have an IP address, otherwise the Internet doesn't know where they are. So the original IP addressing scheme is called IP version 4, IPv4. And it has a set number of IP addresses. We ran out of those addresses about 10 years ago. 20 years ago, IPv6 was proposed and released as a replacement for IPv4. And so from then until now, there's been a serious -- a level of adoption of moving from IPv4 to IPv6. The problem is for service providers is that the adoption is not complete. You still have today, most websites are still IPv4, many devices are still IPv4, so basically, service providers have to manage both. They have to provide connectivity to everywhere. And this is going to be true for some time. The Tier 1 mobile operators or Tier 1 operators, not just mobile operators, this is an area that they have already come up with a solution for and many of them use our technology as a part of that solution. But for many of these smaller regional operators they have this growth of subscribers in some time. So they've had an existing pool of IPv4 addresses and now they're going to run out. So they now have to reconsider what they're going to do and how they're going to manage that continued connectivity as they grow their network and try to augment and increase the capabilities for the new environment. So this is kind of the basic problem that they run into is that because IPv4 addresses have run out, the only way to acquire them -- usually the only way to acquire them is on the open market through a broker. And the price has risen significantly, you can see from 2015 to now. The last time I checked, the high price in July was $60 per IPv4 address. So what that means, if you have 10,000 subscribers that's $590,000 just for the IPv4 addresses if you're trying to add new subscribers, that's a significant amount of money for a small SP. Most of these regional SPs are going to be running out of their existing IP address pool within the next 1 to 3 years. It is a problem that -- an urgent problem that they have to address and that we try to help them with and provide some solutions for. This is an example of a regional operator that we worked with. And this is kind of a typical operator scenario -- this is a fiber-to-the-home operator. They have an existing pool of IPv4 addresses that they've had for a long time. And they have -- currently, they're at about 55,000 subscribers, and they want to grow to about 11,000 more subscribers. They are expecting to run out of their existing allocation of IPv4 in about 1.5 years. So the cost of the IPv4 addresses at that time was about $45, which means that they're looking at over $500,000 just for the IPv4 addresses. With our solution, they were able to have -- to oversubscribe the IP addresses, that means that they can provide -- one IPv4 can serve 32 subscribers instead of just one. And so they can extend their existing investment. And savings with our solution was in the range of about $400,000 total, including the cost of the solution. So this is a typical scenario and one that many of the companies that we've worked with have found very attractive. So finally, we work with operators, both large and small, regardless of the access technology that they use. Our recommendations for all these operators really is to for -- it's first of all a prioritized security investment and for the small operators that might mean using a partner and double down on basic cybersecurity hygiene, upgrade DDoS protection as possible. Many smaller operators have found that difficult to do in the past. And recoup cost if possible through some kind of security monetization with your enterprise customers, for example, DDoS protection as a service. For our regional SPs, we encourage them to drive innovation across all the business models, and although there's a lot of excitement about the funding that's available now, they realize that funding or partnerships for that funding is just the first step. And then you consider the technology choices from the core all the way through the access and so they can continue to supply new services and meet the needs of their customers. And lastly, to understand the IP connectivity market, what's happening today and what the options are to address that, so that you don't overspend unnecessarily, and you have a plan for IPv4 to IPv6 migration. Thank you very much.
Matthew Bruening
executiveWell, that puts a cap on our commercial section for today's presentations. As you've heard from our business leaders, A10's commercial strategy focuses on helping our customer to achieve their business needs, right? And that means ensuring that the critical infrastructure that we help secure is done so they could be more successful in the future as they grow their businesses and available at all times. This means that from the -- let's kind of talk about all the types of organizations we do business with, right? From the largest service providers to the smallest, from the most complex and diverse enterprises and government agencies worldwide. We're -- our approach is directly aligned with helping them achieve their business outcomes. And we feel we do that better than any other player in our sector today. What I want to do now is transition to Brian Becker, hand it off to him where he's going to outline our priorities towards driving A10's continued financial success. Brian?
Brian Becker
executiveGreat. Thanks, Matt, and thanks, everyone, for joining. Today, we've discussed our focus on security led solutions, the steady and intentional shift in our revenue mix from a heavy reliance on legacy ADC revenue to a much more diversified revenue base influenced by recurring revenue and differentiated security revenue. We've also discussed our solutions-based approach to customer relationships. I'd like to discuss how the evolution and our improved execution have driven acceleration in our financial results and how that acceleration should continue. I'll also discuss our business model and how we look at capital allocation. This event is being held in lieu of a formal quarterly earnings call, so I'll also discuss our quarterly and full year results at a high level, and of course, answer any questions you have. I will reference our earnings release throughout my discussion, I do think it is important to view the quarter and full year results as clear proof points of the key messages we are delivering today. The evolution from selling a hardware-centric product to a more solutions-based security-led offering has produced significant benefits for our growth rate, and this is evidenced in our fourth quarter results. And our execution has changed the earnings power of the company. This progress is also clearly evident in our fourth quarter results. Starting with the fourth quarter. Quarterly revenue was $70.7 million, up 12.8% year-over-year. Our deferred revenue was $121.6 million as of December 31, 2021, up 11.9% compared to prior year. With the exception of revenue, all of the metrics I will discuss are on a non-GAAP basis, unless otherwise stated. A full reconciliation of GAAP to non-GAAP results are provided in our press release and on our website. Gross margin in the fourth quarter was 80.7%. We continue to successfully mitigate the impact of industry-wide global supply chain constraints and price increases. Non-GAAP operating expenses in Q4 were $39.4 million compared to $36 million in the fourth quarter last year. This reflects increasing investments in our priorities, including cybersecurity and commercial execution. We reported $17.6 million in non-GAAP operating income, and we continued to improve our adjusted EBITDA significantly, delivering a record $19.4 million for the quarter, a $3.3 million improvement year-over-year. This represented a 28% adjusted EBITDA margin. Non-GAAP net income for the quarter was $16.4 million, representing 23.3% of revenue or $0.20 on a per share basis. Diluted weighted shares used for computing non-GAAP EPS for the fourth quarter were approximately $80.3 million. On a GAAP basis, net income for the quarter was $10.7 million or $0.13 per share compared with net income of $7.8 million or $0.10 per share on the fourth quarter last year. And during the fourth quarter, we repurchased 469,000 shares. Since 2020, we have repurchased 6.6 million shares at an average price of $7.68. We have $93 million left remaining of our $100 million share repurchase program. In addition, we also made our first dividend payment of $0.05 per share during the quarter. Turning to the full year results. Revenue for the year was $250 million compared to $225.5 million last year. The 10.9% full year growth exceeded our growth targets of 6% to 8% and exceeds the industry's growth rate demonstrating that we have successfully captured market share and are benefiting from security-led solutions. We achieved this growth despite the ongoing impact of the pandemic and the associated supply chain challenges. We reported $54 million in non-GAAP operating income, and full year adjusted EBITDA was $62.4 million, a $16.8 million or 36.9% improvement year-over-year. On a GAAP basis, full year net income was $94.9 million or $1.19 per share, that compares with net income of $17.8 million or $0.22 per share last year. Non-GAAP net income was $50.1 million or $0.63 on a per share basis. For the year, we generated $50.1 million of cash from operating activities as a result of robust revenue growth and the financial leverage of our business model. We generated $44.9 million in free cash flow for the year. As a reminder, we define free cash flow as net cash provided by operating activities less capital expenditures. Capital expenditures is the purchase of property and equipment. As of December 31, 2021, we had $185 million in total cash and cash equivalents compared with $158.1 million at the end of 2020. To put this in context, we increased our cash balances by nearly $27 million while returning value to shareholders through share repurchases and dividends as well as investing in initiatives to accelerate our growth, and we continue to carry no debt. Taking a step back and looking at our progress over the past few years, you can see that we've delivered 3 consecutive years of growth, and our rate of growth is accelerating. More importantly, we have significantly increased our profitability, growing our adjusted EBITDA margin of 25% and our diluted non-GAAP earnings per share to $0.63. Let me now spend some time looking ahead, discussing our longer-term outlook, our business model and our 2022 outlook. Our strategy to create shareholder value is simple. Grow revenue and maintain a sound business model with solid earnings power and invest our cash in a balanced approach to benefit shareholders, employees and customers. Over the past 2 years, we have demonstrated our ability to follow this simple strategy, accelerating our growth, growing our cash reserves even as we invest in our business, and return capital to shareholders in the form of significant share repurchase program and cash dividend. Let me speak first of revenue growth. Over the past 2 years, our product revenue has increased by 22%. Product revenue is a leading indicator of total revenue as it drives downstream service and other recurring revenue. As a reminder, product revenue includes hardware and software revenue. Our annual recurring revenue, defined as annualized support and subscription revenue has increased by 44% during the same 2-year period. The result is an 18% increase in consolidated revenue over the past 2 years, including an 11% growth in just the last year. This growth exceeds industry growth and our 2021 growth target of 6% to 8%. Our deferred revenue growth includes both short-term and long-term deferred revenue. The growth in our deferred revenue provides better visibility and reduces the volatility of our quarterly results. As of the end of 2021, deferred revenue was $121.6 million and equates to 49% of our total revenue. A10 has always maintained solid gross margins with relatively little quarter-to-quarter variance. However, we have been steadily increasing our gross margins. The reason for this growth is a continued focus on operational efficiencies, including supply chain optimization and the benefit of a shift in our product mix. During 2020, we spent a lot of time on reducing our expenses and reallocating resources, particularly in our sales and marketing functions to position us for the highest value opportunities. You can see in the results of this effort on this slide, and our adjusted EBITDA has increased substantially. With the cost reduction efforts behind us, we continue to focus on operational efficiency and maintaining our business model in 2021. This further improved our operating margin with our adjusted EBITDA margin reaching 25% for the full year, which is inclusive of our strategic investments, which enabled us to grow further faster. With $185 million in cash and cash equivalents, a model with significant earnings power and sustained track record of profitability and cash generation, our Board and management have been evaluating our capital allocation strategy. First and foremost, we will allocate capital to organic growth opportunities, investing in research and development to maintain our technological lead as well as focus on cybersecurity and hybrid solutions. These investments are key for our long-term success. As I mentioned earlier, on October 28, 2021, we announced a new $100 million share repurchase program and also initiated a $0.05 per share cash dividend. This dividend represents approximately 25% of our 12-month cash generation, which, overall, our target is to return value to shareholders in the form of stock buybacks and cash dividends. To this end, our Board plans to evaluate the amount of our dividend periodically, adjusting as our cash generation levels change. Finally, we plan to retain a portion of our free cash flow to monitor for targeted growth opportunities. And we will maintain a disciplined approach in ensuring strategic fit and financial fit. We have clearly built a solid financial framework and continue to deliver acceleration in our financial results. Let me now turn to our mid- and long-term financial models. First, let's discuss Q1 and full year 2022 outlook. We're targeting revenue growth of 10% to 12%, significantly above our 2021 targets of 6% to 8%. This growth target takes into account the persisting supply chain and pandemic-related business realities and is inclusive of our continued investment and strategic opportunities for growth. We expect to maintain our business model going forward. Shifting to our longer-term model. Midterm, over the next 2 years, we expect a similar growth rate of 10% to 12% with our annualized recurring revenue growing faster than our consolidated revenue. In addition, we expect product revenue to grow faster than our total revenue. We expect security led revenue to approach 65% of total revenue which will set the stage for accelerated growth in our longer-term model. From a profit perspective, gross margin is expected to be 78% to 80%, driving adjusted EBITDA margin of 26% to 28%, which is ahead of our 2021 levels. With an increasingly favorable revenue mix, including more security-led revenue and more recurring revenue, our long-term growth outlook over the next 3 to 5 years is expected to be 12% at least with security-led revenue accelerating. Our target gross margins will be 80% to 82%, and we are targeting adjusted EBITDA margin of greater than 30%. So in summary, A10 has evolved from provider of high-performance but limited growth hardware products to a differentiated security-focused solutions partner. Our model has evolved, and we now have sustainable profitability. Thank you for your time. Thanks for joining. I'll turn it back over for Dhrupad for closing remarks.
Dhrupad Trivedi
executiveThank you, Brian. I think today, we have gone through several different facets of how the business has evolved, how we are focused differently and what we are doing to make that sustainable. About a year ago when we were entering 2021, and were still dealing with a lot of uncertainty, we had spoken about the market lead indicators as it relates to IT spending, cybersecurity, et cetera, and expected to be able to grow 6% to 8%, while at the same time, we had focused clearly on a few strategic initiatives that were aligned with our differentiation and with customer needs where we can create value. In addition, like many companies, we had to navigate through the year with supply chain shortages, input cost inflation, business shutdowns, et cetera. And I would say I'm proud of the A10 team as well as our partners and customers that we have continued to build upon our strength and our position now towards the future. As you heard today, the way we are approaching customers, the way we sell, the way we are addressing needs like crossing the digital divide or helping customers become more secure against threats that are too sophisticated otherwise, are ways that we will continue to create value. And as we enter the year, we once again are optimistic that our initiatives will continue to make us more relevant to our customers, create more value for them and continue to align with secular tailwinds. So hopefully, you have gotten a chance to understand after a period of maybe 2 years when we didn't have too many wins on what has changed at A10, how we have evolved from our strength and foundation to being more aligned with secular tailwinds, new buyer behavior and phenomenon such as increase in cybersecurity, which is not related to whether people work from home or not, it's related simply to the idea of more connectivity, more data and more threats. We believe that these secular tailwinds provide a durable foundation for us to have sustainable growth going forward. As Brian mentioned, we have taken steps to rightsize and have a strong business model in place, which is now, in fact, allowing us to invest more in higher growth opportunities, and that is part of the reason where versus 1 year ago, we were able to grow faster because we made investments to improve our North America commercial execution. We made investments on the product side to focus more on security features and attributes that were released through the year and continued to help us. Our goal is, as I mentioned before, we like the Rule of 40, but we absolutely want to drive top line growth while we continue to maintain and continue to improve upon our business model as well. So thank you again for the time. And as I said, we hope this gives you an understanding of where we are, what is the sustainable nature of the opportunity. And as we continue to execute that there is also an expansion opportunity in the value as well as the company itself. So thank you once again for the time, for everyone here in person. Thank you very much for being here. And for all the remote attendees as well, thank you. I will pause here.
Rob Fink;FNK IR
attendeeThe Q&A portion. For virtual attendees there's a Q&A widget on the left side of your screen, you can type a question in there, and I will moderate and ask the questions to Brian and Dhrupad. If you're in the room and have a question, just raise your hand, and I'll come over to you. I'm going to start with a question that came in from Anja Soderstrom from Sidoti who put this in earlier during the program. Growth rates across the industry have trended down, but you seem to be outperforming relative to the market. What is enabling that outperformance? And is it sustainable?
Dhrupad Trivedi
executiveYes, that's a great question, right? So when we look at our end markets, really, by segregating 2 different segments, the lead indicators for us are looking at things like projected IT spending from Gartner, looking at service provider and cloud provider, CapEx cycles and spending patterns, and we also look at secular trends on spending in cybersecurity. So as many companies who are more broadly exposed to small and mid-enterprise, have seen that the general IT spending that was related to digital transformation category has been deferred because there are more urgent requirements like getting people access or VPN and so forth. For us, however, that phenomenon ultimately still leads to growth of network and traffic and data in the core of the network and, in fact, creates more pressure for our customers to better handle that in terms of cost effectiveness. The second part is, as you heard a little bit today, the increasing volume of cyber attacks and sophistication creates 2 further vectors for us. One is the sheer volume means they need to do more protection and more points in the network. And the growing sophistication ultimately means at some point, every company cannot have on-staff experts in cybersecurity. So customers increasingly also rely upon us to provide that expertise, and you saw some examples today of where we are able to see patterns, detect anomalies and alert or remediate them. So for us, I think -- and the third element is a broader context of improvement in infrastructure has a component within it that is related to IT infrastructure. And we have also tailored our products and messaging along those lines to help those customers to better understand options they have which are not always to rip and replace everything, the most cost-effective way to deploy them and help them be an adviser on how to become more secure over time. So I think our focus on areas where we are differentiated, but further aligning our product road map and commercial strategy to those has continued to help us do better than the market average.
Rob Fink;FNK IR
attendeeGreat. The next question comes from Hamed Khorsand from Beating Wall Street. How has the partner landscape changed over the last couple of years for you? And which partners have been important in your current growth and your forward-looking growth?
Dhrupad Trivedi
executiveThank you, Hamed, good question. So as a company, we have always used partners as a way to fulfill demand. I think the way the landscape has changed in the last 2 years is in 2 ways. One is we are much more focused now on also ourselves having end user engagement that gives us insight into the customer patterns, the customer buying need and then collaborating with our partner to drive that in terms of a broader solution or more integrated solution. So I think we have continued to become a better partner to our partners. The other way the partner landscape has changed is, we have evolved from maybe more specialized regional niche partners to ones that are larger and more global and give us much better reach and expansion, whether it's in North America or Europe or Asia. So in that sense, we are also working with bigger partners with more scale that have the potential to give us reach in addition to system integration or [indiscernible] type orientation. So I think in that sense, we believe that our partner ecosystem is evolving to where they can be a more and more direct contributor to our own growth and opportunities as we move forward.
Rob Fink;FNK IR
attendeeGreat. Our next question was submitted by Hendi Susanto from Gabelli. Hendi wanted to know within the 10% to 12% year-over-year revenue growth target for 2022, can you break down qualitatively the growth of enterprise and service providers and which may be growing faster. And then the second part to that is within the growth expectations across geographies in 2022, how does that look?
Dhrupad Trivedi
executiveI can start, and then Brian you can add to that. So I think, first of all, when we talk about our customer vertical segmentation, as we mentioned a little bit, we don't deliberately try to make a product for enterprise versus service provider versus cloud provider, right? So we have common platforms. Our focus in enterprise is typically on large enterprise like financials, who handle a lot of data, are very worried about security and network performance is very important to them versus being focused on very large section in small- and mid-enterprise, but which is not our sweet spot on differentiation. So when we think of where our growth comes from next year, we tend to think of it as coming from people who will be dealing with more data and are more concerned about security. Within that, I think we certainly expect service provider cycles around the world to change. We also expect our enterprise business, which is large enterprise, but increasingly, by the way, the demarcation between those categories starts blurring as some of the service providers also sell to enterprise. So we don't hard segment it in that sense. But overall, we expect both those segments to be growing next year. And it's hard to predict now in Q3, Q4, what customer sentiment might be in enterprise versus SP CapEx. But we certainly -- our plans support both of them growing healthy next year like we saw this year. In terms of regions, it's the same, right? So we did talk about focus on growth in North America last year, and we made investments along those lines, including commercial and product. And I think our results, including Q4 and full year reflect that now. And I feel we are now at a point where all our regions are contributing effectively to where we need to be. One year ago, we had said we thought there was opportunity with North America with improving execution, and we feel we have made tremendous progress there. So as of now, I think we feel pretty balanced. In 2021, all our regions came within 5% of what we expected or did much better. So we are trying to achieve these goals in a very balanced way and we expect the same next year. So I don't know, Brian, if you want to add.
Brian Becker
executiveRight. And then on a go-forward basis, it's important for us to consider what does that mean from a planning perspective? I mean the balance across verticals, the balance across product lines, the balance across geographies really provides a stability and diversification that we're planning on for future growth. So it's really a benefit to us to look at all areas in combination as well as individually. But really, it's a diversification to really mitigate the risk we have around challenges in different regions, verticals or product lines, depending on what's happening in the market.
Rob Fink;FNK IR
attendeeHendi also wanted to know in the context of the metaverse in this emerging area, where do you see A10? And are there opportunities for you?
Dhrupad Trivedi
executiveYes. I think that's a good question. So I think what is interesting about how our business is positioned and what we focus on the most. Ultimately, a lot of these phenomenon, including metaverse creates more content, more data, more video, more traffic on the networks. And as a consequence of that, it ultimately requires people to be more effective at handling that traffic and making it more secure. So as we look at that similar to lot of the other trends we mentioned like IoT and others, while we will not participate in an endpoint device like an iPhone, we certainly participate when that traffic gets aggregated, whether it's at regional service provider, a global service provider, a cloud provider or large enterprise, right? So for us, it is an indirect positive that leads to further kind of affirmation of the trends that we are serving into as people look to solve these problems effectively but also be more secure.
Rob Fink;FNK IR
attendeeGreat. After watching the Shentel customer vignette, Christian Schwab from Craig-Hallum asked how many rural carrier customers do you guys currently have in the U.S. Can you give a sense for the type of revenue levels they contribute? And as part of that, does the proposed government stimulus serve as a catalyst in this area in this segment?
Dhrupad Trivedi
executiveYes, good question, and I'll probably, Christian, answer them in reverse order. So I think the government stimulus does create a catalyst for us. We are not probably astute enough to figure out exactly how that money will be spent and by whom and where. But we certainly see that as a trend where there will be promotion of increasing connectivity in rural areas and therefore, supporting those smaller service providers for literally regions where a big service provider has concluded, it's not profitable enough for them to go there, right? So we absolutely think that an infrastructure bill that is focused on bridging the digital divide is favorable to our solutions, particularly because our solutions are focused on solving the problems they face, which are constrained budget, lack of expertise and so forth as opposed to a metro where they might just rip and replace with a brand-new network. So we think that is certainly a positive. As it relates to the number and dollar per we don't disclose that, but it's at least in tens of customers. And the rollout is not in 1 shot, right? So you might do a first order and then they expand capacity, then they expand capacity. So -- but we don't split it out on sort of packet size by customer type, but you can -- based on the example you heard, you can imagine a typical customer probably has so many sites as 8, 10 sites and per site if they spend that much, what it could be over time. So we think it's a good opportunity, which is very well aligned to what we can do. And it's against the backdrop of an area which we expect will have budget, right? So the 2 things we look for in market selection is attractive market, where there is a need and a budget and our fit in the sense of what do we bring to it and can we win, right? So in that sense, we feel from a market selection perspective, we are very optimistic that, that's a good play for us here as well as actually -- globally, right? So we think that's an important part of the growth.
Rob Fink;FNK IR
attendeeGreat. The next question is in for Brian, and this is from Anja from Sidoti again. When we think about 2022 guidance, how should investors think about bottom line growth given the midpoint of 11% revenue growth in your outlook?
Brian Becker
executiveRight. Yes. The guidance we're giving is 10% to 12% for first quarter of 2022 and ongoing. We look at 2022 as a transitional year to some extent. We're growing the business by investing in R&D to keep up with technological advantages that we have as well as in commercial execution, which means that we continue to maintain our business model, accelerating growth while continuing to drop to bottom line adjusted EBITDA and EPS accordingly. So from a bottom line perspective, I could expect that we're expanding EBITDA as a percent of revenue. I wouldn't say that we would be accelerating at the same rate that we've seen. But absolutely, we continue to grow that at a faster rate than top line.
Rob Fink;FNK IR
attendeeGreat. We're down to our last 2 questions here. The next one, Brian, also for you. How should investors think about product revenue growth from Q3 to Q4, there was a decline in Q3 to Q4. And I just wanted to understand what that shows as an indicator for future recurring revenues.
Brian Becker
executiveGreat. Yes. Thank you for the question. Product revenue, we see as a lead indicator for future growth, as I mentioned in my comments. I look at seasonality is something that we are impacted by. If you look at quarter-over-quarter, it's one way to look at the business, but we typically look at it either in full year or year-over-year. We did see 16% growth in product revenue year-over-year. And for the full year, we see 14%. So that's outpacing our current revenue growth, and I see that as an excellent lead indicator for future growth.
Dhrupad Trivedi
executiveYes. And I think Brian, just to add to that. The other way to also look at that is in addition to that seasonality, if you look at our product growth in second half '22 versus second half '21, it correlates really well with the fact that in Q1, Q2 of 2021, we had a series of new product releases on software side that really drove home the security features and points. So when we look at that -- we still feel that the full year product growth is still faster. Q4 is still faster. Q3 is a function of 2 things, right? Obviously, we had a good Q3 '21, but we also had a slightly soft previous year. So if you net all that out, it's not a concern. It's clearly growing faster than total, which, with an attach rate in the future means it's a good lead indicator for future growth.
Unknown Analyst
analystGuys, thanks for hosting us here today. Appreciate it. It's good to be kind of back in person again. My question is actually for -- I have 2 questions, one's for Matt, if that's okay. And then the second question would probably be for all 3 of you. So Matt, you've been here for a couple of years now. Would love to hear sort of the changes that you've made to the sales organization since you've been here, whether that's relating to the interaction of overlays to reps or their marketing organization as well. And then -- and in comp, if there's any sort of changes you can share about sales comp? And then secondly, as the sales organization has matured under Matt, for all 3 of you, how has that impacted to your visibility and your confidence in terms of calling a quarter, when you look at attainment of reps across the landscape and then the evolution of the pipeline throughout the quarter. Maybe you can just give us some color as to how that's changed over time.
Brian Becker
executiveYes. I'll kick off and then you can get the microphone to add. Yes. So I think to answer your second question first, and then we'll go back to the first one. So I think I joined about 9 quarters ago, rough and tough. I think we look at a variety of metrics that help us get better at that. So we look at lead indicators, we look at funnel, we look at participation rate, we look at performance to quota, we look at what is the threshold, what is the MAX, what is the distribution we expect and what do we get versus that? We have made changes, of course, as it relates to sales incentive plan. But they were all designed to reward growth and more variable pay, not less, right? And I think Additionally, we made a bunch of other changes, which actually simplified the plan. So instead of having a salesperson spending 30 minutes trying to calculate what that payout would be, it would be obvious to them, right? So -- but focused on our strategic priorities on what we need to do. And so that was a big part of it. And Matt joined in January -- or about February of '20 -- 2 months after me, yes. And yes, so you can walk through it. But I think just even before Matt joined, we restructured the region structures, because we had regions that were 10 million a year, regions that were 100 million a year like the usual all the sales planning, like cell division, where you add saturation, you break it into 2 territories and give both people quota. So a lot of just basic metrics-driven commercial execution. And through that process, of course, we made a series of leadership changes on people who are aligned to that, right? So we -- simplest example would be -- you might be a great salesperson who says, "Don't bother me all year. I'm going to book 1 big PO for $6 million." I just don't know when. They're like, you're going to be miserable then, right? You're not going to like it because we are going to ask you, January, February, March, April, right? So I think just changing our operating cadence expectation and then additionally bringing in talent aligned with selling solutions versus being great at selling a box, right, which is an ongoing thing, not overnight. So -- but you can add to that now you are miked up?
Matthew Bruening
executiveYes, I think I'm miked up now. So Yes, [indiscernible], I'll give you more context, really good question. I think -- there's a couple of different things that we have worked on since I started with the company back in early spring of 2020. And things that we measure, talent that we look to acquire into the organization. There's a formula and there's a difference. So for instance, in terms of the makeup of the people we look for that we've recruited into the organization the last 2 years, Dhrupad hit on this in a second -- a second ago. It's looking for people that are good at selling fully more broad solutions. People that have adopted our new sales methodology, which is based on curiosity plus creativity equals innovation, people that can adopt that and do something with it practically and operationally in the field when they're with customers. The other thing we look for in terms of the makeup of the rep is historically, we had people that were -- I don't want to say good, but they were farmers in nature. We need a hunting mentality, hunters can farm, farmers can't hunt, right? It doesn't flow both ways. And so what we have right now is, obviously, we have established accounts that give us a good run rate of business. We talked about our customer -- our product revenue retention rate, which means that existing customers continue to buy and buy more and then refer us to other customers, but we need new logos too. So we need our hunters to hunt within the existing account base and to acquire new logos. Both are essential to grow. The last thing I'll say is that we have an important metric that we use to determine where resource allocation is placed, meaning where are we going to put reps for the best rate of return. We use a metric called commercial productivity, which we continue to advance and improve on each year -- each quarter, each year, incrementally. It's a journey, but we've improved it in the last 2 years by a pretty material factor. But commercial productivity is a factor of your gross profit divided by OpEx. So each dollar you spend, what's the rate of return on each dollar and what kind of profit does that yield? And that's something we use across our sales and marketing team to make sure that we're putting the right resources in the right regions for the best rate of return, okay? Good question, thank you. Yes. Yes. Yes. Thank you. Great question.
Unknown Analyst
analystI have a question regarding supply chain. You guys were talking about how that has been challenging. I'm curious maybe what the impact of that was on top line. If you can quantify it or just describe it in 2021. And in 2022, maybe you can elaborate on if you think it's going to be the same, better or worse? I know some of the supply chain -- supply chain issues started impacting other companies in the back half of the year and now going to 2022, they have a full year of that sort of impact and wondering if that's the same case for you guys or maybe a little bit better?
Dhrupad Trivedi
executiveYes. Well, I'll kick off at least. I think for us, we have not had at least a situation where we were unable to get revenue because of a supply chain outage, right? So we, of course, buy the same chips type of chips from the same type of chip suppliers. So we had to deal with input cost increases that were at 20% plus in many cases. But we have had 2 sides of it. So 1 is from a supply continuity perspective. 6, 7 quarters ago, we put a lot of processes in place around, much better supply/demand planning and interlock so that we don't end up where we are able to achieve our bookings, but we are not able to ship it. So we -- but we would be preempting that discussion three months before that happens, right? What is and saying, well, we need to sell this that we can ship. So we have gotten better at that. Second is we had a lot of initiatives in place on gross margin, related to footprint, freight logistics, PPV, all kinds of stuff that we had to, in effect, used to offset the input cost increases. That's why our gross margins did not deteriorate. And going forward, right, it's difficult to say. We are optimistic like many that it starts easing up in Q2, but there's no guarantee, right? That could change. We certainly don't see being getting worse right now for us. I don't know, Brian, anything to add there.
Brian Becker
executiveNo, I think that you touched on the most salient points. I mean in planning for next year, obviously, we've made a lot of progress in 2021 through the challenging marketplace, mitigating some of the cost increases that we've seen with chips and other components as well as freight and logistics. But going forward, we've made a lot of progress in 2021, and we're seeing the benefits of that, absent any major changes in the marketplace or some new development and availability for supply chain parts and chips. We're expecting to continue to be able to see that benefit. As I mentioned, we're expecting 80% to 82% in the next year growth from a margin perspective, and we don't see any challenges absent something unusual happening this year.
Unknown Analyst
analystOkay. But I think you mentioned in your prepared remarks that the 10% to 12% growth, it was inclusive of supply chain challenges. So if you're not -- I guess, I'm trying to understand what the top line impact is if you're saying you're not seeing any really in 2021 or...
Brian Becker
executiveI would say that our 10% to 12% takes into account any challenges. So part of it, we have -- our sales cycle, 6 to 9 months lead time for supplying that is about the same. So we have good visibility. It's about planning and interlocking all of our processes together to ensure that we don't have a miss.
Unknown Analyst
analystJust a couple of other housekeeping questions. Can you remind me recurring revenue, what that was at the end of the year? And what you expect that to be going forward?
Brian Becker
executiveYes. Recurring revenue, get my notes so I don't misquote something. Recurring revenue for the year grew 5%, in total recurring revenue was -- and I define recurring revenue as service revenue, not including professional services, but including some product revenue related to subscription. The recurring revenue at the end of the year was $29.1 million for Q4. For the full year, it was $111.1 million. That was a 5% growth over the prior year.
Unknown Analyst
analystShould it continue at that rate 5%? Or what do you think?
Brian Becker
executiveWe expect that to expand.
Unknown Analyst
analystExpand, okay. And then you mentioned share repurchases in the quarter, 469,000 shares. Have you disclosed at what price or where...
Brian Becker
executiveNo, I didn't speak to it, but yes, for the quarter, 469,000 shares repurchased in Q4 2021 at an average price of $15.04.
Unknown Analyst
analyst$15.04, okay. And then, I guess, lastly, on the -- there wasn't a huge amount of detail on your product road map. Dhrupad, maybe -- could you expand maybe where you guys might -- any new markets that you might be focused on or any new products that we should be focused on as well?
Dhrupad Trivedi
executiveYes, sure. So I think when you think about that, right? We have -- so the subtlety there is, right, as predominantly software-oriented road map, it's difficult to show progression of like widgets, right, over time. So I think for us, the road map is more about features we are integrating or capabilities we are adding to enable customers to operate in a hybrid environment. That means we have to support native cloud, multiple cloud, private cloud on-prem. And similarly, as we look at new features that customers need to expand what they do, it's all of a progression. So our road map is not -- no new hardware boxes, right? That's my point. It's predominantly around enabling new operating environments like hybrid. It's around enabling customers to use our products and deliver sort of micro services and other things based upon that. And it's based upon new capabilities that we can continue to add, whether it's through OEM partnerships or something else, that just continues to expand that security things we can do, right? So those are probably the main dimensions of it.
Rob Fink;FNK IR
attendeeGreat. We've actually had a couple of more questions come in through the virtual window. So I'm going to take this question from Jonathan Art. Can you discuss the components of services how much is maintenance and what is the retention rate of that maintenance? And then also how much are onetime services? And how much are growth-oriented subscriptions? And what does that retention look like?
Brian Becker
executiveYes, thank you for the question. So 2 parts of the answer here. Services includes support and maintenance contracts, so technical support for our products and services. And then a portion of our service revenue also includes professional services. So it's a configuration installation services. That portion of the revenue, the professional services portion of the revenue is not material. And the second part of the question, what can I look at from a -- actually...
Dhrupad Trivedi
executiveWell, I think the retention...
Brian Becker
executiveRetention rate, thank you.
Dhrupad Trivedi
executiveOur renewal rate is like 90%.
Brian Becker
executive90%. So I think we looked at product net retention rate at 118% looking at the support element of it, so what turns into services revenue, our retention rate of our existing customers is approximately 90%.
Rob Fink;FNK IR
attendeeGreat. The next question comes from Alex Henderson of Needham. Alex, thank you for hosting the Analyst Day. And he asked 2 of the key trends driven partially by COVID are, number one, increased traffic that is encrypted, jumping from 30% several years ago to over 70% today. And the second is the dispersion of employees using collaboration technologies. Both of these trends stress enterprise and service provider networks as more traffic is pushed across the IT stack. So does this drive your business up? And if so, is there a risk that when workforce returns to the office that could shift traffic lower?
Dhrupad Trivedi
executiveGreat question, Alex. Thanks. So I'll answer them separately. So the first question, I think, is correct. So recently, we have spoken a lot about and one of the customer case today was around our SSLI product, which is about decrypting and encrypting traffic and then monitoring for whatever you want to monitor for, and we work with partners on that. And so we certainly see with growth in that encryption, which makes it harder because even the threats are encrypted. So it becomes more important to decrypt it to do things with it and then put it back on the network. And we have obviously partners that align with us as well to do that in the decrypt zone. So yes, for us, that is absolutely a trend that is directly in line, and it's actually one of the areas where we did focus and increase our investment as well, right? But it is the same hardware box and same software platform that enables that capability for them. So quota, certainly, that encryption is a favorable trend, and we saw that we were cited also in the Gartner report on that. So the other area on remote work, for us, I think if you look at our results over several quarters, remote work for us was more a phenomenon of increase in complexity and volume of traffic that needed to be handled, whether it was a large bank or a service provider. For us, it was not directly linked to the actual remote office environment or devices people use to connect from home or VPN or things like that, right? There are still more about what happens when that data gets aggregated back. So I would say in cases like large enterprise, where people got dispersed where instead of 1,000 people in a building, you had 900 at home. That doesn't materially change what the main location was doing. And so we don't think that people coming back to work for us is negative just as people going remote was not a huge positive either, right? But in both cases, the fundamental growth on network traffic and security was favorable to us.
Rob Fink;FNK IR
attendeeGreat. And I'm going to wrap here with one last question. I'm actually going to consolidate a couple of questions about subscriptions into one. And then I'd just also note if you asked a question that we didn't address here today, we're running short on time. We'll follow up via e-mail and if necessary, scheduled time with Dhrupad, Brian or Matt or whoever else, your question is directed at. But in terms of subscriptions, one, are you selling subscriptions for hardware? Separately, what percentage of software is sold on subscription? And do you see any trends there changing?
Dhrupad Trivedi
executiveYes. So I think I'll probably give you the customer-oriented answer, and then Brian can add to the details. So I think the important part for us really is aligning our solutions and road map to the customer needs. So if you visualize our customers as large global service providers, whether it's MSO cloud, telco, it doesn't matter. Their business model is not to start consuming everything as a subscription from us, right? So -- and on the enterprise side, clearly, there is more of a shift to that. So where we are really focused in the market is -- what is it that they consume from us as a subscription that is creating value for them. Example is obviously cybersecurity updates or things like that. And so that's where we are growing that base. We have not gone down the route of selling hardware as a subscription like some companies have, but that is not counted for us as a subscription today, right? But clearly, we are directed more by aligning with our customers' needs as it relates to CapEx, OpEx, planning priorities. And there are places where we participate with our customers on a number of users that we true up and we get paid more if they get more, so we share in that. There are customers where we participate with data that goes through our devices, right? So those are all evolving models for us, but because of the nature of our customer base, it's not sort of a mid-enterprise orientation where there is a much stronger push to move everything to subscription, right? Brian, you can add to anything more?
Brian Becker
executiveYes. I think just as Dhrupad mentioned, we look at our customer base as either currently a vertical either as a service provider or enterprise. And today, our service provider companies are providing subscriptions to their customers. We're obviously working through developing or at least offering their infrastructure products -- our infrastructure products for them to enable that. As we see, we're beginning to roll out new features around security and a lot of that is content based, which drives subscription revenue, but we're also investing in hybrid solutions, which will also drive increased subscription revenue. So while it's a smaller portion of our revenue stream today, it is growing and we expect to see that continue to grow and be a huge driver of growth in the future.
Dhrupad Trivedi
executiveOkay. Very good. Thank you, Rob, for the last question. Thanks to everyone once again. Appreciate it and hope that was informative. We are certainly happy to follow up with any questions after the event as well. Thanks, once again, and thanks to everyone that helped put it together. Appreciate it. Thanks.
Rob Fink;FNK IR
attendeeJust as a matter of practice, there will be a webcast of this event and a transcript available on the company's website later today and tomorrow once those are processed.
Dhrupad Trivedi
executiveThank you.
This call discussed
For developers and AI pipelines
Programmatic access to A10 Networks, Inc. earnings transcripts and 32,000+ others is available through the
EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments,
full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.