F5, Inc. ($FFIV)
Earnings Call Transcript · May 28, 2026
Earnings Call Speaker Segments
Suzanne DuLong
ExecutivesGood afternoon, everybody. Thank you so much for being with us. We really appreciate it. I'm Suzanne DuLong. I lead Investor Relations at F5. We are really glad to have you here today. We've got a great agenda for you. I'm going to start with just a little bit of housekeeping, of course, before we get started. I need to remind everybody that today's event is being recorded and will be available for replay on our IR website. The webcast replay and the slides will be posted after the event concludes today. I'll also note that today's discussion will contain forward-looking statements, which will include words such as believe, anticipate, expect, and target, and these forward-looking statements involve uncertainties and risks that may cause our actual results to differ materially from those expressed or implied by these statements. We have summarized risk factors in our recent SEC filings. In addition, we'll reference non-GAAP metrics during today's discussion. Please see our full GAAP to non-GAAP reconciliation in the appendix of the slides. And please note that F5 has no duty to update any information presented today. With all that said, let me share with you a quick overview of our agenda and timing. Francois will kick us off with some perspective on secular trends and the strategic actions we're taking to capitalize on them. Chad Whalen, John Maddison, and Kunal will dive a bit deeper into the actions we're taking to capitalize on those trends. We'll take a 15-minute break around 2:10. Those of you in the room will find refreshments in the area where we entered. And then from there, we'll resume at about 2:30, when Lisa Citron, our SVP of Global Partner Ecosystem, will sit down for a fireside chat with a very special guest, Chris Konrad, who's VP of Global Cyber from WWT. Tom will then discuss our services growth and product adoption, and Cooper will discuss how we're driving sustainable revenue and earnings growth. We'll then hear some closing remarks from Francois before we open the floor to questions from our in-person attendees. Thank you again for being here. We're really excited to be here with you. And it's my pleasure to introduce our Chairman, President, and CEO, Francois Locoh-Donou.
François Locoh-Donou
ExecutivesThank you so much, Suzanne. Well, welcome, everyone. Welcome to those of you joining us here in the room and everyone joining us online. Thank you for being with us today. Okay. So this is our first analyst and investor event since 2024. And a lot has changed in the last 2 years. The world has changed, the world of IT has changed, and of course, F5's opportunity has changed. And today, I'm really excited to be here with our entire executive team, and we want to lay out for you how F5's opportunity is unfolding and how we intend to translate that opportunity into sustainable revenue and earnings growth. Let's talk about the trends that F5 is benefiting from. F5 is benefiting from both cyclical and secular tailwinds in our business. And I will start with the secular drivers. We sit at the intersection of 3 secular mega trends that are reshaping IT infrastructure. And whilst each of these trends is unfolding separately, each actually is bigger than the one -- and has greater potential than the one that preceded it. So I will start with hybrid multi-cloud adoption. Hybrid multi-cloud adoption has been accelerating for several years, and it's driving workloads to be distributed across multiple environments. It started several years ago as a practical way for enterprises to get the flexibility that they need in terms of where they deploy their applications. But that more tactical start has now evolved to be a go-forward strategic architecture for most enterprises. Organizations now require the flexibility, the resiliency, and digital sovereignty everywhere they operate, and they are investing in hybrid multi-cloud accordingly. In our own research at F5, we found that 90% of enterprises now operate applications in hybrid multi-cloud environments. And on average, F5 customers operate their applications over 22 locations, multiple cloud regions, colocation facilities, multiple data center facilities. And the result of hybrid multi-cloud deployment is complexity, and complexity drives demand for a platform that can simplify the complexity for delivery and security. That platform is the F5's Application Delivery and Security Platform, and we will touch on that today. But hybrid multi-cloud accelerates demand for an application delivery and security platform. The second very substantial trend that we're seeing is an expanding threat landscape, and it is accelerating demand for AI-powered best-in-class security. As AI models grow more capable, they are attacking applications and API with greater variation and greater scale than traditional defenses were built to handle. Our customers recognize that, that things are changing, and they are acting. Our customers are expanding their application security deployments, and they are raising the bar for what good looks like. So just good enough check-the-box security is really no longer viable for most of our customers. They need best-in-class security and increasingly, that is AI-powered security. That puts F5 in a great position to solve that need and that demand. And the third mega trend, of course, is AI inference, and that is accelerating demand for application security and application delivery. Organizations increasingly now are connecting their applications and APIs to AI models and inputs calls are becoming a regular part of how applications run. We've done research, again, at F5 that shows that 78% of organizations are actually operating inference themselves, meaning they own the workloads and they own delivery and security for these workloads. On average, organizations today already have 7 generative AI models in production. And so as organizations standardize on the new architectures with models distributed across data center, the cloud, and the edge, demand for delivery infrastructure for these models is growing. And the next shift, which is agentic AI is already underway. AI agents are moving into production and enterprises are adapting their applications for agent interaction. And that is driving more compute, more data delivery, and more security to protect inference. So F5 in aggregate is benefiting from all of these -- the effect of all of these drivers. Now we're not just riding these trends. We are using them to grow faster. We're building on our market leadership to capture growing demand in ADCs. We are unifying our product portfolio to drive platform adoption, and we are capturing new AI opportunities. Today, you're going to hear about each of these from our speakers. Now you can see the combined effect to sustain that momentum going forward. Now to put our expectations in context, it helps to look at our track record because it demonstrates our ability to execute. Since our 2024 Analyst event, we have driven strong performance and met or exceeded our commitments, including exceeding our mid-single-digit revenue growth target, delivering 7 consecutive quarters of double-digit product revenue growth, and expanding our operating margins and delivering double-digit CAGR on earnings per share. And we're not seeing this in a static environment. The market around us is changing very quickly. Those shifts are widening the set of problems that our customers are dealing with, and it's expanding F5's opportunity. I highlighted earlier that we are at the intersection of these 3 secular mega trends. I'm now going to double-click on each of these, and I'm going to explore how they are accelerating demand for F5 solutions. Let's start, of course, with hybrid multicloud adoption, which has been accelerating across the board. To talk about hybrid multicloud, I'm going to go back in time a little bit and give you a refresher on the origin story of ADCs. So if you go back 30 years ago, apps were simple to access. Data went from a user to a data center and back. And typically, in a data center, it was on applications that were hosted on a single server. With the advent of the Internet, the number of users that could and would access an application remotely exploded. And as a result, copies of apps were needed to deal with that demand. Apps were no longer hosted on a single server, but copied across multiple servers. That, in turn, created a need for load balancing technology, which at its core, was routing application traffic between users and multiple servers so that the app would be always available, always fast, regardless of who accessed it from anywhere. F5 pioneered this category. We pioneered load balancers and then broadened their capabilities to become the Application Delivery Controllers or ADC category to solve those challenges, ensuring applications stayed fast, reliable, available, and secure as traffic scaled. Now a lot of things changed and over time, both the type of users and where applications live have changed. The types of users have gone from not just humans, but APIs and bots and machine-to-machine communications and have continued to grow at a very rapid pace. And applications are now hosted in multiple data centers, in multiple geographies, multiple clouds, colocation, and edge facilities. But what hasn't changed is that F5 sits in a uniquely valuable place in the flow of customer traffic directly in front of the applications that matter most. And we've capitalized on that position over time by expanding what an ADC delivers. It's no longer just load balancing and availability. The same control point is where our customers need to enforce policy to ensure that their operations are resilient and, of course, to protect applications. And so we've expanded the ADC role into web application firewalls, DDoS protection, API security, bot security, DNS security, and are now allowing our customers to deliver and secure their applications consistently across any environment and at scale. Now ADCs for the most part, have been deployed in data centers, in enterprise private data centers. And so I want to go back and share with you a little bit the growth of data center capacity over the last 20 years because it does have correlation with ADC demand. What I'm going to show you here on the X-axis is time and on the Y-axis is worldwide core enterprise data center capacity measured in gigawatts. And I should note that this does not include hyperscaler infrastructure. This is all enterprise private data centers. So in the decade between 2005 and 2015, enterprises moved aggressively to deploy web-based application in production and many, many enterprises also undertook their digital transformation. What that meant is that a lot of customer interactions moved online, a lot of business process moved online. And as that happened, the demand for capacity in the data center grew quickly, more applications, more users, more traffic, higher availability expectations. The result of all of that is that worldwide core data center capacity grew at a CAGR of 12% in that period. In that period, F5 grew at a rate of 21% CAGR on the decade. In the 2015 to 2023 time frame, the growth engine shifted. Enterprises embraced cloud-first strategies, many embraced SaaS applications, which did not require necessarily additional infrastructure in their data centers, and a lot of enterprises either built all their new applications in public cloud or moved a portion of their application portfolio into public clouds off-premise. And so the data center did not go away, but the growth curve fundamentally changed. In fact, data center capacity between 2015 and 2023 grew at a compound annual growth rate of only 2% as more incremental demand was absorbed by the cloud. During this period, F5 grew roughly at a rate of 5%. Now things are shifting again. There are 3 dynamics today that are accelerating hybrid multicloud deployments and driving reinvestment in private data centers. The first of these dynamics is cost and workload optimizations. Customers are getting more surgical about placing workloads where they run best economically and operationally. So they are balancing cloud elasticity with predictable, lower-cost private infrastructure for steady-state demand. That is why we have seen workload repatriation, and we have seen a rebalancing of application portfolios. The second is regulation and digital sovereignty. A lot of companies, for regulatory reasons, have to build true resilience, have to comply with requirements around how fast they must recover from a disruption that's happening globally, and causing companies to deploy applications in hybrid multi-cloud environments where they can achieve that resilience. And especially outside the U.S., digital sovereignty is accelerating, meaning more organizations need to have more autonomy over their data, over their technology stack, and over their operations. And for a lot of companies, that means moving away from global cloud environments into either regional or local cloud alternatives or on-premise data centers. And so that is also causing reinvestment in data centers. And then thirdly, data gravity and governance in AI. We're seeing a large number of companies wanting to keep their proprietary data on-premise, in many cases, repatriating data that was in public cloud on-premise because they want this data that has now become enormously valuable for their AI models, they want their data pipelines to be close to the infrastructure they trust and that's causing, again, a wave of investments in private infrastructure. The result of these dynamics is that enterprises are reinvesting in private infrastructure as part of this hybrid multicloud strategy and data center capacity growth is reaccelerating. We expect data center capacity to grow at roughly 7% CAGR, and that's a meaningful step-up from where they have been in the last decade. And as data center capacity grows, ADC demand accelerates with it. So when you take it together, these forces are driving hybrid multicloud adoption and bringing private data centers back into the investment cycle. Let's go to the second mega trend, which is the expanding threat landscape, which is also accelerating demand for F5. The data on this slide clearly shows that the number of attack on IT asset continues to grow rapidly, growing more than 60% over the last 3 years from 180 million to 290 million attacks. But if you double-click on that, what's most relevant for F5 is that the front lines of cyber defense are actually shifting to the application layer. So it's not just that the attacks are increasing, it's where they're concentrating. Attackers are increasingly targeting the app and API layer. And they're doing that because that's where the data is. That's where the business logic lives, and that's where digital experiences are delivered. So that is where the value is, and that has real implication for customers. It implies that traditional perimeter-oriented approaches aren't enough on their own. Security has to be enforced closer to the applications consistently across hybrid and multicloud environments and at the scale and speed that this new threat environment demands. Now if you double-click on these application layer attacks and you go into what specifically are the type of application layer attacks that we're seeing, what I'm showing you here is data from F5 Labs. F5 Labs is F5's security research and threat intelligence organization. We track and analyze cyber threats and attack trends. We publish reports and guidance, and we share data-driven insights to help security teams improve their defenses. What we're seeing in that research is as application -- as organizations modernize, they're deploying more applications, more micro services, and far more APIs and integrations. And this data is showing rapid growth in web application attacks, API abuse, bot activity, Layer 7 DDoS attacks. So all of this is not a theoretical shift. Our customers know that defending the business now means protecting the app layer, continuing that at scale with controls that can keep pace with both the volume and sophistication of attackers. Now going further, I've talked about attacks on the application layer. I'm going to go into a specific type of application, which is AI models because AI models themselves are a new threat surface and are expanding the -- sorry, a new attack surface and are expanding the attack surface. Now what you see here is the Comprehensive AI Security Index or CASI, which is a framework developed by F5, F5 Labs, to rate the vulnerability of AI models. And so what we're doing is our AI Red team uses a swarm of autonomous agents to run more than 150,000 attacks against these models every month, including the latest tactics and techniques. You look at the most secure or least vulnerable of these models here at the top that has a 98% score. And 98% may appear like a great score, but we are now in the realm of quadrillions of tokens that are flowing in and out of these models. And so 2% of a very large number is a large problem. In the specific case of the attacks we run against these models in our own toolkit, 2% on 150,000 attacks, if 2% come through, that's 3,000 successful attacks against even the best-scoring model. And that's just the model layer. Now let's zoom in and look at the full attack surface. The total attack surface today on IT assets if you will, is $20 billion. It includes endpoints, humans, of course, workloads that includes AI applications, AI models, and IoT devices. That is about to explode because it's clear that AI doesn't just change applications. It's going to change the scale of interaction on the Internet. AI agents will dramatically increase machine-to-machine activity, more automated tasks, more API calls, and more always-on workflows operating on behalf of users and businesses. And the result of that is a step function increase in the attack surface. Our estimates suggest that agents will increase, of course, by more than 10x between now and 2035. But every one of those interactions becomes a potential point of exposure, an identity to validate, an authorization decision to enforce, or traffic to inspect. So the implication of all of that is clear; that security now has to be built for a world of autonomous, high-volume API-driven traffic. And we have to protect applications and APIs in line at scale and across every environment. Now that wasn't enough. There is also -- in terms of the expanding threat surface, there is also the risk that Quantum brings to the equation. So let me elaborate a little bit on why this is a risk and why it actually creates an opportunity for F5. A bit first on quantum. So classical computers generate bits, a series of 0 and 1 to encode data. Quantum computers use quantum bits or qubits and qubit can represent a 0, a 1, or a combination of both at the same time. And so when multiple qubits are linked together, a quantum system can evaluate many possibilities in parallel. And the result of that is that certain classes of problems can be solved dramatically faster than with classical computing. Well that speed actually does matter because modern encryption is built on mathematical problems that are extremely hard for classical computers to solve. An example of such a problem is breaking 2048, 2048-bit encryption. With classical computers today, that would take 149 million years. But with a quantum computer that is powerful enough and stable enough, that could take as little as 8 hours. And so that is why the move to post-quantum cryptography is actually becoming very urgent. We at F5 believe that post-quantum cryptography is shaping up to be a meaningful infrastructure investment cycle, and we believe F5 is well-positioned to benefit as customers migrate. The driver for that is very straightforward. Quantum-related security risk is not hypothetical. It is starting to happen now. And how it's happening is cyber criminals and nation-state actors are already capturing encrypted traffic and they're storing it and betting that they will be able to decrypt it later when the right quantum computers reach the necessary scale. And that threat is what we call harvest-now-and-decrypt-later. Q-day is the point at which a sufficiently powerful, fault-tolerant quantum computer becomes available and can break widely used public key cryptography. The exact timing of that is uncertain. Estimates are ranging from as early as 2029 to sometimes in the early 2030s. But generally, these estimates have been shifting and coming closer and closer as folks doing research in quantum are making more and more breakthroughs. And so in response for -- to the predictions around the coming advance of Q-day, the National Institute of Standards and Technology, or NIST, has been standardizing post-quantum cryptography and the industry is moving toward multi-year migration plans that phase out classical algorithms over time. And 2025 is the time at which the NIST has declared that classical cryptography will be the sellout. But clearly, organizations are not going to wait for Q-day. They will start modernizing ahead of it because it affects compliance, it affects risk, and long-lived data. In our world at F5, in conversations with our customers, what we are already seeing is customers are starting to do planning, early testing, and road map work to move to the post-quantum world. The great news for F5 is that ADCs will be central to making that transition practical because PQC can introduce real overhead and handshake certificates, key management. Enterprises will not want to absorb all of that complexity into applications and impact the performance of applications. Customers will want to absorb that complexity at the infrastructure layer and not force every application team to rearchitect. That plays to F5's strength because we can help customers adopt PQC while maintaining performance, availability, and security across environments. And as a result, we expect PQC to accelerate demand for ADCs and, in particular, hardware ADCs to drive performance. Let's now go to the third mega trend, which is AI inference. So in just a few years, we have shifted from the build phase to the operate phase in AI, and AI traffic growth is now happening and happening quite exponentially. So if you go before AI, network traffic growth was steady and pretty predictable with conventional applications that are expected to grow at a 4% CAGR over the next decade. If you factor in AI-enhanced applications, they will grow at a much faster rate. We expect that 26% CAGR. And that's because the network traffic becomes multiplicative with AI agents. AI-enhanced applications are either traditional or modern applications that interact or include AI components, could be interacting with an agent, could be interacting with an AI model. And so the traffic between the application and the model, the application and the agent increases overall application traffic. And then on top of that, we'll see net new AI apps that will start growing very rapidly. The result of all of this is 2 things. First, AI traffic is going to become the dominant traffic. We expect it will be at least more than half of the traffic by 2031. And AI traffic will become potentially more than 80% of the traffic within a decade. It will drive a significant increase in overall traffic, a 6x increase, in the next decade. And the result of that is demand for more infrastructure. That scale is going to show up quickly into demand for infrastructure, largely because agents will increasingly communicate with other agents, shifting interactions from one user and one assistant to many software actors coordinating in real-time. And as AI gets embedded into more applications and workflows, inference becomes always on, creating this continuous, bursty, and unpredictable traffic. All of that accelerates demand for delivery and infrastructure in a few concrete ways. So first, it means more infrastructure because AI-driven traffic creates more connections to manage, more APIs to protect, and more services that have to stay available. Second, it demands more data delivery because there's going to be a lot of data that needs to move securely, efficiently, and at scale between data stores and AI models or between data stores and AI applications. Third, inside of AI factories, it's going to create a need for more traffic management to solve the problems of GPU utilization to improve the efficiencies of these factories that are extraordinarily constrained. And then last, it will create more demand for AI-native security, AI-powered security that can protect against -- that can protect AI models, AI applications against all these AI-native threats. So all of these are new demands that are coming from this very, very rapid growth of AI traffic. Now I want to go into that a little more and share with you where specifically in the flow of traffic, we see net new opportunities for F5. Now this here is where we are today. Today, where F5 already sits at the front door of our customers' most critical applications. We load balance and secure all the traffic, humans, APIs, bots, no matter where those applications run. But increasingly, as attackers use AI to find and exploit vulnerabilities faster than signatures and patches can keep up, our security is AI-powered. You'll hear later today that, for example, our AI-powered WAF that released recently is rapidly gaining adoption amongst our customer base, and we expect our entire portfolio to be AI-powered within a very short time frame. And what I mean by AI-powered is what we're using neural networks to inspect Layer 7 traffic and detect attacks at a level of accuracy that our competitors simply cannot match. So that is what we are doing today in the flow of traditional and modern applications. But with AI, new opportunities emerge. The first one is this new insertion point is AI runtime security. The future of traffic is AI, as I've just shared, and that AI traffic has to be secure. And so building on our Calypso acquisition, we secure AI traffic into the application and from the application to the AI model. That is a place in infrastructure that we have not been at before, and so it's a net new opportunity for F5. The second net new opportunity is data delivery. Now this is F5 helping data stores or helping data stores connect with AI application with the right efficiency, the right scale, and the right security. And it's also helping move data between data stores and AI factories in training, again, with the real -- the speed that's needed, the scale, the throughput that's needed and the right level of security. Again, that's a net new insertion point for F5 and a new opportunity. And lastly, AI factories themselves. As you know, AI factories convert energy into tokens and they do so at scale. But today, these AI factories often run into low GPU utilization problems. As you may have seen, studies commonly cite 25% to 50% utilization on GPUs. F5 improves traffic efficiency and GPU utilization, both across and within the AI factory, boosting token throughput, reducing time to first token, and lowering per token cost. So when customers use F5 to load balance traffic inside of an AI factory, we've seen token throughput increase by 30% to 40%. So those are the net new opportunities in AI. But if you step back and look at the overall picture for our customers, these dynamics are changing the way that our customers view and manage their IT infrastructure. They were already managing a complex set of challenges across multiple environments, but that complexity is magnified by the new dynamics. Most companies are managing today, 9 different AI models, which are running in different places, AI factories. In addition to that, you have AI traffic, as I shared earlier, that is growing exponentially. You have the threat of quantum. These things are compounding the challenges that our customers have had. And it creates the need for a platform that simplifies that complexity. F5's Application Delivery and Security Platform or F5 ADSP, is uniquely positioned to address these new dynamics. We deliver and secure every app, every API, traditional, modern, or AI anywhere with one unified platform across on-premises, multiple public cloud, and the edge. Our Application Delivery and Security Platform reduces the complexity our customers are facing, but without compromising speed or scale. We are able to give customers centralized best-in-class security, industry-leading high-performance delivery, and consistent policy without having to stitch together multiple products. Let's now talk about our addressable market as a result of these dynamics. When you look at these secular trends that are converging and you look at the actions we have taken to position F5 to capitalize on them, we see demand continuing to rise for both Application Delivery and Security. Based on a combination of third-party analysis and our own research, our own bottoms-up analysis, we estimate that our TAM today is approximately $15 billion. We estimate that it will grow to $28 billion by 2030 if we exclude AI-related demand, and that growth we expect to come from continued hybrid multi-cloud deployments, application modernization, API proliferation, and higher security requirements. Now if I include AI demand, our addressable market by 2030, we estimate to be $40 billion, driven by net new AI use cases that I'm going to double-click on now. So if you look at specifically the use cases in AI demand, we see that AI is already driving accelerated demand in our business. But we see that demand across 3 distinct use cases: AI data delivery, AI runtime security, and AI factoring load balancing. Kunal, a little later today, will go in more depth on each of these use cases when he discusses our AI opportunity. At this point in time, these direct AI use cases are contributing modestly to our overall revenue. But what's important is the trajectory. We see clear potential for meaningful TAM expansion over time, and we expect additional AI-driven use cases to emerge in areas where F5 is uniquely positioned to win given our role in application delivery and security across hybrid and multi-cloud environments. Now these are the direct use cases. But beyond those direct use cases, we see what may be an even larger opportunity. And that opportunity is from indirect AI-driven demand because as customers expand capacity to support a rapid acceleration in workloads and as AI capabilities get embedded into modern applications, AI is increasingly underpinning broader enterprise priorities. For F5, this is showing up in increased demand for Application Delivery and Security, data center modernization, digital sovereignty and infrastructure capacity expansion. So 3 direct use case today, more new AI use cases emerging and coming, and indirect demand from AI already playing a significant role with F5. And so we are -- we believe that we are well placed and we're taking actions to capitalize on these trends. Now Cooper will go and elaborate on our financial outlook in more detail in today's agenda. But that said, I wanted to preview for you the key takeaways on our guidance. We expect accelerating revenue growth and earnings expansion as a result of the mega trends we are exposed to and the actions we are taking to drive growth. First, we are guiding to upper single-digit revenue CAGR through 2029. And I'll note that we do not see upper single-digits as a ceiling for our opportunity longer term. We aspire to drive the business to double-digit revenue growth beyond this horizon. We also continue to drive durable earnings growth and are guiding to double-digit non-GAAP EPS CAGR through 2029. I'll close with the 4 takeaways we'd like you to remember today. And our next presenters will take you through the actions that we are taking. Chad Whalen, our Chief Revenue Officer, will speak to what we are doing to build on our market leadership to capture growing demand for ADCs. John Maddison, our Chief Marketing Officer, will speak to how we are unifying our portfolio capabilities and driving platform adoption. and Kunal Anand, our Chief Product Officer, will speak to how we are capturing new AI opportunities. And with that, I'm going to hand over to our Chief Revenue Officer, Chad Whalen. Thank you.
Chad Whalen
ExecutivesThank you, Francois. Well, it's a pleasure to be here today. So let me go ahead and get started on what's driving -- before we get going, let me just give you a little background on myself. I've been at F5 for the last 8 years, driving our go-to-market and sales organizations. And I can tell you, at this point in time, my teams on the go-to-market side have never been more excited than we are right now. Throughout the presentation, I'm going to give you some insights as to what's driving that excitement. Market dynamics are very favorable. In many ways, the market is coming to us, and I'll point to some of those. It's always helpful to ground ourselves before we get into a presentation on the customers and the markets that we serve. And so when you look at this slide, it's a fantastic testament to the deep and trusted relationships we have across many industries and governments, the top 15 of 15, the top 10 of 10, whether it's financial services, automotive, what's going on in insurance and the like. As a result, of these fantastic relationships, we're a foundational partner to the largest enterprises and governments of the world over. 85% of the Fortune 50 are partnered with F5. Over half, and growing every day, of the Fortune 1000 are partnered with F5. We have earned a tremendous privilege over the last 30 years of this partnership, which provides us immense access and the ability for brand leverage to drive portfolio scale. So as Francois mentioned in reviewing the Application Delivery and Security Platform, I'm going to take this opportunity to drive down and expand a little bit on the deployment modes. The deployment modes, I want to provide some texture as to why this is so important. This was an explicit decision that we made many, many years ago about being a hybrid multicloud solutions provider. The whole premise of that was founded on our customer-centricity, giving them the ability to deploy where they wanted that was best fit for the application. That does not matter if it was cloud native, appliance, purpose-built hardware, software as a form factor, Software as a Service, or even DPUs. In fact, over the last 2 years, 1,900 customers have deployed in 2 or more modalities in the last 2 years. We have 1,600 customers leveraging our as a Service platform today. And what does that mean? Those customers, what we're witnessing and observing, that have 2 or more modalities grow at a rate much, much faster than customers that don't. In fact, they're growing at 25%. So what is underpinning the growth that we're having? There's a couple of factors, both cyclical and structural. From a cyclical standpoint, there's no doubt we're experiencing fantastic demand dynamics in our Refresh Plus event that's going on as we speak, okay? But it's not just refreshing equipment. It's expanding that equipment, and they're doing so simultaneously. But the 3 I want to punctuate, and to give you guys some insight and context, is the structural trends that are driving the demand, okay? And I will cover these in more detail. The first one is digital sovereignty. Next one I'll cover is competitive displacement. And finally, I'll talk about AI-driven demand. Just going through digital sovereignty. It's a very different time. Our customers are realizing they cannot meet the evolving government standards and regulations for both data and resiliency without having a hybrid multicloud architecture. That's really, really, really important, okay? If you think about what's going on in EMEA, you have DORA and NIS2. Those are regulations that are in flight today and really come to life in 2027. It doesn't just end there. We have a very similar thing in APCJ. PDPA is in Singapore, similar thing in India. This is not a one-off. This is happening in the world over. We have over 6,000 customers that are shaped between governments, BFSI, health care, and telecom that are bound by these regulations. That customer set makes up over $700 million of opportunity for us between calendar year '27 and calendar year '30. Let me give you some insight on a recent win. We had a non-U.S. government customer doing a sovereign data center build-out that required AI data delivery, Francois talked about earlier, web application firewall, and API security. We were the only purpose-built solution they had available, okay? Why? Hybrid multicloud. Many of our deployments are hybrid multicloud. Customers have to be able to have that flexibility. We have that with consistent services, unified security services. What this means? It's a fantastic opportunity. Not only was the size of the win great. So I have expansion with that entity, but also taking that entity to all the other ones that are tightly adjacent. Again, it was all driven by our architecture as a key differentiator from everybody else in the market. Let me talk about competitive displacement because this is a very significant opportunity for F5. We are successfully displacing customers resulting from, A, our new products to market. Our innovation velocity is phenomenal. Kunal is going to talk about that later today. The flexibility that we offer in our consumption models and the choice that you get with how you want to deploy. All of those things are very different and unique. So as a consequence of that, we're taking share from Citrix, we're taking share from Broadcom and others. What you see here is we have identified 3,000 enterprise and governments across the globe that we're actively targeting to expand our footprint and take share. This is creating an additional $600 million opportunity, again, from calendar year '27 to calendar year '30. Let me talk about a recent win that we just experienced in this space. A Fortune 50 customer in oil and gas was looking for a solution that required highly performant, also on-prem as well as in the public cloud. That is the exact use case for our architecture. This happened to be a multi-billion-dollar win for the company, and we were chosen specifically because of our hybrid multicloud architecture with the unified security services, both on-prem and in the public cloud, giving them architectural flexibility and licensing simplicity. Many of our competitive displacements are multi-modal. They buy it both on-prem and in the public cloud. What's exciting about this win? Lots of expansion. These customers are looking to consolidate, and they're choosing us as they go through that consolidation. The next trend I'll talk about is AI data-driven -- or excuse me, AI-driven demand. Not surprisingly, this is the biggest trend. So as infrastructure build-outs, they're driving a material uplift in what we see every day, whether it's going to be direct use cases or non-direct use cases. We have around 15,000 customers that we believe are in the zone for these types of use cases, representing over a $1.3 billion opportunity, again, from calendar year '27 to calendar year '30. Let me talk about a customer win in this example. We had a big 4 professional services and accounting firm that was looking and required a highly performant AI data delivery solution to front-end their S3 storage tier. We secured that win not only because we had the most performant solution, but also because we had the technology integrations and partnerships with both NVIDIA and NetApp, where we have reference architectures for both. In today's climate, partner ecosystem integrations are critical, and we find ourselves working with many, many partners in the space. What's in front of us is we are now foundational to their AI roll-outs. And so as they continue to scale out their applications, we will benefit as a result. So in summary, with these 3 structural trends, F5 is incredibly well positioned to capitalize on this opportunity. Digital sovereignty and resiliency requirements are not going away. It's only intensifying the growing requirement for our customers that are looking for both data custody and resiliency to meet the requirements that are imposed upon them. Our competitors' customers are looking for alternatives. Those competitors that I mentioned, the innovation velocity has not been there. They're looking for that. They're looking for flexibility in how they deploy. They want to be able to have the opportunity to go on-prem, off-prem. They want to have licensing postures that scale with their business. And then lastly, we are in the critical control point for AI workloads as ADC use cases expand and continue with the AI roll-out. So thank you so much. I'll now introduce John Maddison, our Chief Marketing Officer, to review driving platform adoption. Thank you.
John Maddison
ExecutivesThank you, Chad. Okay. John Maddison, CMO. I've been at F5 18 months. Before that, I was 10 years at a rather large network security company. And before that, 10 years at an endpoint company. I do my 10 years stint each of these companies. But what I thought when I was at the network security company was when AI comes, what's going to be most effective? It's going to be application security. Now F5 not only has application security, but it also has application delivery, the opportunity to create a converged platform, just like SASE. Before I go and talk about how our customers are adopting ADSP, I thought I'd go through why we need a platform for ADSP. Three main reasons: application structure, the infrastructure itself, where the applications are, and the attackers, threat landscape. In 2015, there was a rather major change across all 3 of these. Applications themselves became more microservices. Today, it's called Kubernetes. Applications started to migrate towards the cloud and the attackers became more sophisticated, advanced persistent threats, nation-state actors were now attacking. Fast forward to today, and all 3 of those are changing even faster, applications becoming inference. I think we've talked about hybrid multicloud quite a bit. That is here to stay. And then, of course, now we're using AI technology to attack frontier models. Just imagine a social engineering using agentic, extremely powerful. And what that means is the complexity, our networking gear now has to understand tokens, not just packets. The attack surface is becoming very dynamic and very large. And this complexity means you've got a lot of vendors because most enterprises don't give up on each of these pillars. They still have 3-tier applications, data centers, microservices. There's a survey done by Forrester last year. And one of the questions inside there was why do you want to drive towards a platform approach? And you can see some of the top reasons there. Automation, ease of integration, ease of use. And the reason is to try and make different vendors work together is extremely hard. Getting 10 vendors is hard. Imagine when you've got 60 vendors trying to make them work together. And so the industry, enterprises are driving towards platforms, and they've already been doing that. You may recognize some of these acronyms here in our industry, we like the acronyms, EPP, endpoint protection platform, basically endpoint protection, workload protection. We even roll in SIEM and SOAR these days there. Secure Access Services Edge, SD-WAN, SSE, CASB, cloud-native application protection platform, workload protection, posture management, and of course, identity access management, single sign-on, multi-factor privileged access management. Most enterprises are working towards deploying these platforms going forward. F5 believe is another platform called ADSP focused on application delivery and security, basically taking ADC, WAP, and AI security and bringing it together. This platform is a bit different from SASE and EPP and CNAPP and all -- and identity and all those platforms are really focused on employees. ADSP is the gateway to enterprise customers. And Francois talked about this. It is the front door to customers and to agents going forward, making it extremely important to enterprises. So let's look at ADSP in a bit more detail. One of the foundational components is the application delivery controller, sometimes called load balancing traffic management. That definition has expanded a bit to include gateways and ingress controllers. It also includes security such as WAF, SSL termination, which I'll come back to, and optionally zero trust. The second component of ADSP is the web application and API protection. That includes WAF, that includes API, bot, and DDoS. And WAF is usually a SaaS implementation because the CISO wanted a single point, a single control point when applications move to the cloud and into the data and into the edge. Optionally, in that service, you'll have CDN, DNS, and multi-cloud networking. Now as Chad said, our SaaS, our WAP customers, now exceed 1,600 customers. More interestingly, 50% of those customers have 4 to 6 services. So bot, API, and WAF. And this is a great cross-sell opportunity for F5. Also, 90% of those customers have WAF. We believe WAF is the virtual patching capability required now that frontier models are discovering vulnerabilities. In fact, 200 of those customers have already implemented AI-powered WAF. And 80% of those customers have implemented blocking on WAF. Sometimes customers don't like doing that. It affects sometimes the customer experience, but they're so worried now that implementing WAF in a blocking mode. And then, of course, the third component is AI security, very fast growing, AI governance, discovery, testing, guardrails, and observability. Bringing us full circle to the ADSP platform making sure you can deliver customers, eventually agents to any application, including AI apps, being able to apply a full security stack, again, whether it be AI security, network security, WAF security, being able to sit in the data path, hardware, software, different control points, and managing it through XOps for the network ops people, SecOps [indiscernible]. And how we're building this platform? Well, we have 3 main product families: BIG-IP, which is hardware and Virtual Edition. We have our Distributed Cloud Services, which is SaaS, and NGINX, which is mainly software. And our road maps are gradually bringing these platforms together into one ADSP platform. When you look inside each of these product families, they have different use cases. Some of them are very specific to those product families like firewalling in BIG-IP, bot protection in XC, and some are common. Here's an example of a very important common application across everything, web application firewall or virtual patching. And our goal is to bring that service that capability wherever the application is, again, whether it's sitting behind hardware, software, or cloud. So this is a graph of our 3 product families by customer. This is actually our top 1,000 customers, I think. And you can see if you go back to 2018, everyone was one product family, which is hardware. Today, 70% of our customers, top 1,000, have 2 deployment modes. In fact, 26% already have 3 deployment modes. That means SaaS, hardware, software, and cloud. Here's a couple of examples. Here is a leading financial services customer. Again, they started with hardware. They actually added WAF capability to the hardware. Then East West, virtual capability in the data center, also added NGINX for cloud-native capabilities, and then they added a SaaS console across that. Three deployment modes, 16 use cases. Here was a global commercial bank, again, starting with hardware, but pretty quickly decided to put some of the security capabilities in WAF and SaaS. And then most recently, they added F5 Insight to provide management across everything. That's 5 deployment modes and 30 different use cases. So every enterprise is dealing with complexity. They're all driving towards a platform approach. And our market is ADSP. We're seeing great adoption of our platform as we go forward. We'll continue to push that, cross-sell, and give the customers that capability. Thank you for listening in. Next is Kunal Anand, our Chief Products Officer, who is going to do a deep dive on AI. Thank you.
Kunal Anand
ExecutivesHello, everybody. As John mentioned, my name is Kunal, and I'm our Chief Product Officer. My team and I are responsible for product vision, product strategy, and product execution at F5. And the last couple of years, we've seen so much change with respect to AI. I think it's pretty clear that AI is rewriting the operating manual of applications. And it's really creating a new wave of opportunity for F5. We sit as a company at the center of users, apps, APIs, agents, models, data, and infrastructure. And as AI moves from pilots to production, that control becomes even more valuable. Over the next 15 to 20 minutes, I'm going to walk you through these new opportunities. But what I want to start with is why AI is changing both halves of our business. AI is simultaneously expanding our delivery and security services. On the delivery side, inference is not a normal application workload. It's changing traffic patterns. We see more desire for increased utilization and, of course, brand-new insertion points in places like AI factories. On the security side, the operating model has flipped. Attackers are now able to find and exploit vulnerabilities faster. We see an expanding surface area, thanks to things like agents and APIs, and there's a greater need now for runtime protection. AI is raising the value for every routing decision, every security choice in every throughput metric in the network. This has always been F5's turf. Now one thing I want to do is reframe how to think about an AI workload. In the real world, AI is not just a model. It's a rich and layered ecosystem. You have users and agents, which drive traffic via intent. Apps and APIs hold business logic, but they perform things like routing and they have to make decisions. Models and inference are where the intelligent lives, but they demand security and governance at scale. And you have data that underpins all of it, providing rich context and, of course, driving a lot of infrastructure load. The model may be the brain, but the ecosystem is the body. AI needs delivery, security, and control, working together to make it usable in real enterprises. So from this ecosystem view, clear opportunities are emerging for F5. First is AI data delivery. Customers are using object storage for AI workloads, and they demand programmability and high performance. The second is AI runtime security. Attacks are getting faster. They're getting more complex. And as applications become more dynamic, protection has to also be adaptive and at the runtime. Third, AI factory load balancing. This is the most nascent opportunity, but the economics are compelling. These 3 opportunities have one common theme. F5 sits where delivery and security converge. Now let's dive into the first opportunity, which is AI data delivery. AI is requiring so much data, not just for training, but also inference workloads. And customers need a combination of performance and control to get data to the right place at the right time. And this, this is where F5 has a natural role to play. As customers modernize their data platforms and standardize on object storage, F5 is able to provide intelligent, high-throughput capabilities in front of their data tier. We give customers 3 things that their storage controllers simply don't. First, programmability. That's really important because we can manage Layer 7 traffic intelligently while allowing customers to craft advanced controls. The second is hardware scale. We absorb traffic patterns and scale that storage controllers were never designed to handle. And third, vendor neutrality. We sit across the entire S3 ecosystem. We don't lock customers into a specific vendor or a specific architecture. All of these allow customers to remove data friction, which enables all sorts of AI workloads and capabilities in their environment. Now I want to show you the performance lift our customers are seeing from all of this. Across the network, the lift ranges anywhere from 95% in low-latency SD-WAN environments up to 300% in high-latency edge, multi-cloud, and SD-WAN environments. That range that I just shared with you matters because data doesn't just live in one place. It can live on-prem. It can live in a private cloud, across public clouds, or at different edges. And it's important to note the way that we've engineered our underlying solutions. They have been built and designed to inspect, route, and secure all this complex S3 object storage traffic while being vendor neutral. It's a really important point. Now that is data delivery. I want to now turn to what's going on with AI runtime security. When it comes to security, our customers have to secure 2 things at once. The first are traditional applications, but these applications are now exposed to AI-accelerated attacks. The second are AI apps themselves. These are the new workloads that are AI enhanced. They may be invoking a model. They may have a model embedded within them. What's happening across both, however, is also a natural extension of F5's existing protection of apps and APIs. Now before I get into the opportunity directly, I just want to take a second to touch on the changing security operating model. In this era, I think it's pretty clear that speed is now favoring the attacker. It's also meaning that on time protection is becoming a nonnegotiable. Today, attackers can now find, they can now exploit vulnerabilities faster than ever before, and they can do it with better precision than a human team. What that implies is that fixed and static defenses no longer hold. They just don't work in this era. Customers need security that can inspect traffic, that can look for anomalies, that can adapt, learn from those signals, and enforce policies in real-time. And today, we're already seeing all of this play out in customer adoption. John talked about it just a few moments ago, but we recently introduced an AI-powered web application firewall, and the customer uptake has been awesome. We've already onboarded more than 200 enterprise customers in our first 70 days. It's important to note that this web application firewall was built entirely in-house, architected, designed, trained, fine-tuned all within the walls of F5. 80% of our customers have this web application firewall already in a blocking mode, meaning we're taking action and we're stopping CDEs or critical exploits from being taken advantage of in production. And we've also seen our detection accuracy increase to 98%, whilst our false positive rate has decreased to just 1%. Security leaders are practical. They only invest and take on technology and capabilities when it lowers risk and just fundamentally works in the real world. We're seeing that with this adoption. And over time, we're going to extend AI across the entire security portfolio. We're really excited about that. In addition to AppSec, we also secure the full AI life cycle. Our customers are valuing our end-to-end model for securing AI workloads. With AI Red Team, we run tests using agents and all sorts of attack signatures that we've built up, generating 10,000 attack signatures every single month now. And we're able to go and find weaknesses in AI models and applications. Those findings then go into a solution we call F5 AI Remediate. We take those findings and automatically build guardrails, automatically build defenses out of those findings. What that means is that we can quickly go from a vulnerability or weakness that's discovered to a protection very quickly in production. That's a big deal. Our operators no longer have to be security experts. They no longer have to be an AI expert to put a signature into production to stop these types of attacks. Then there's AI guardrails. AI guardrails can protect AI models and AI-enhanced applications at runtime. We offer centralized enforcement, observability, and governance. Now at the bottom of this slide, you'll see an independent test that was conducted by SecureIQLab. We scored 98.4% overall with F5 AI Guardrails while being 99.3% effective against direct prompt injection and 99% effective against sensitive data leakage. These are great stats. The customer adoption is strong, and we're really excited to help customers protect these AI workloads, especially as inference scales all over. So that's AI runtime security. Let's now cover AI factory load balancing. This is the most nascent of the 3 opportunities. However, it's the one that affects the economics of inference the most. As AI shifts from training to inference, AI economics or what we call tokenomics will become even more significant. AI factories are really conversion systems. Power, GPUs, and prompts go in, tokens, outcomes, and business value come out. That conversion process can be measured. It's generally referred to as tokenomics. And you'll see a bunch of properties listed here, things like total tokens generated, time to first token, cost per token, end-to-end latency, and tokens per watt. The word that you see repeated the most in there is token because the unit of value in AI infrastructure is the token. And the control point that improves tokenomics is the one that becomes strategically important over time. We're building this brand-new control point at F5, and I want to share the numbers with you. We now have third-party testing and early design partners who confirm that F5 can deliver better tokenomics. The independent testing results you see behind me are impressive, 40% higher total throughput, 61% faster time to first token, 34% improvement in full inference response time. And we're not just delivering these performance optimizations. For those who are familiar with F5, we're providing core delivery and security functionality. In addition to that, we've also created brand-new capabilities for AI factories, things like intent-based routing, semantic caching, and much more. Our goal is to bring the power of the Application Delivery and Security Platform to the AI factory. And the platform we're building that on is BIG-IP for DPUs. BIG-IP for DPUs is our bet on what AI infrastructure will need in the future. It's early days, and the milestones show what we've done so far, starting with getting into NVIDIA's reference architecture, bringing on early design partners and engaging in those early POCs, performing independent testing and, of course, releasing software. But I want to be clear eyed about this. This is a nascent opportunity for F5. DPU adoption from everything that we've observed is lagging behind inference build-outs. The Neo cloud stacks are also different. They're polyglot and they're still forming. And we're only now beginning to see the shift from training workloads to inference workloads. However, as inference scales, tokenomics that we've been discussing will be decided in the data path. We at F5 are ready for this, and we are early. So that covers AI factory load balancing. I'd love to just zoom out for a moment. What I want to do is dimension all of these opportunities, share how they contribute to the business, identify where the momentum is and close with an overall reflection. AI isn't a single market for F5. It's different demand motions, different maturity curves, different monetization models, and different product entry points. AI data delivery is our most mature. It's sold to large enterprise, government and telco customers. It's majority hardware on-premises. Adoption is strong today. Then there's AI runtime security. It's the same customer base, software licensing across cloud, edge and on-premises. Momentum is real and growing. Then AI factory load balancing, which, as I've already described as our most nascent. The targets there are sovereign AI factories and Neo clouds. It starts as hardware with a software licensing opportunity on DPUs over time. And then, of course, there's the fourth motion, what you see all the way to the far right of the slide. And it's one that often gets overlooked, indirect AI demand. As AI-driven workloads grow, they actually drive more F5 into the surrounding infrastructure. That demand is real, and it's already showing up. One example of that is, as organizations embrace agents, those agents are making more calls to APIs and existing applications, thus driving a greater demand to put F5 technology and capabilities in front of those applications, in front of those APIs, not just for delivery, but also for security. I want to share some customer wins that we're seeing across these. These examples should give you a sense of the momentum that we're seeing across these 3 direct opportunities. For AI data delivery, this is a health care services customer that's deployed F5 in their AI-driven voice response platform. It's a $2 million deal. The second is AI runtime security. A global financial services customer deployed F5 to secure enterprise-wide generative AI adoption with high fidelity threat detection. That was a $4-million-deal. And then AI factory load balancing. An energy and chemicals customer is using F5 to improve AI inference, to improve latency, and to stop overall time outs in their ecosystem. That was a $1-million-deal. Across all of the opportunities, it's really important to mention that this is not just one buyer, and it's not just one vertical, and it's not just one deployment pattern. It's important to mention that because AI is creating demand across all these opportunities simultaneously, which brings me back to the core thesis. AI doesn't reduce the need for application delivery or security. It raises the stakes for both. More autonomous systems, more AI-driven traffic, more surfaces to secure, more decisions in the data layer. Now earlier, I said the model is the brain and the ecosystem is the body. F5 is what makes the body safe, reliable, and efficient. We deliver and secure traffic for any app, any API in any agent in any environment. That is the F5 thesis in the AI era. Thank you so much.
Suzanne DuLong
ExecutivesThank you. Thank you, Kunal. Thank you very much. We're going to take a quick 10-minute break. Why don't we come back at 2:35, please. [Break]
Suzanne DuLong
ExecutivesThank you, everybody. We're going to get started again. I'm really happy to introduce Lisa Citron. She is F5's SVP of our Global Partner Ecosystem. So please welcome Lisa.
Lisa Citron
ExecutivesAs Suzanne said, I have the honor of leading our global partner team. What does that mean? It means that I work with our hyperscaler partners, our reseller and distributors and our global system integrators. I have the opportunity to help develop these routes to market and to work with our biggest and best customers in the process. And I'm thrilled to be here today with one of our most important partners, WWT, Worldwide Technology. WWT works with us across some of our biggest verticals, including banking and financial services, government and telecommunications. So I'd like to introduce Chris Konrad from WWT to join me up here.
Chris Konrad
AttendeesAll right.
Lisa Citron
ExecutivesWelcome, Chris.
Chris Konrad
AttendeesGreat to be here.
Lisa Citron
ExecutivesGreat to have you here. So why don't you give everyone a preview of what your role at WWT is?
Chris Konrad
AttendeesYes. No, happy to do that. But maybe before I do that, I can honestly tell you, and I think you and I have had this conversation in the past. I don't think there's a more urgent, a more consequential and a more opportunistic time than we're living in right now. And candidly, there's no better partner to be doing this with an F5. So thank you for the opportunity for me to be here.
Lisa Citron
ExecutivesYes. Thank you. Thank you.
Chris Konrad
AttendeesSo I'm the Vice President of our Global Cyber business at Worldwide Technology. So for those who don't know WWT. We're a 36-year-old company, about $20 billion in top line revenue, about 15,000 employees. And the lines of business that we're in are all about helping -- help our customers solve the most complex challenges they're in, whether it's in AI or cloud or infrastructure and cyber. And I'm responsible for our cybersecurity business, which is a fastest-growing business at Worldwide. It's a $5 billion contributor today. And so I'm responsible for all the teams that make that engine run.
Lisa Citron
ExecutivesThat's awesome. So how do you see AI changing the way you're working with customers? How is that security view coming to life? How is that affecting how you work with customers?
Chris Konrad
AttendeesSo I always fall back to a quote from Jen Easterly, former Director of the Cybersecurity and Infrastructure Security Agency, or CISA, is now the President of the RSA Conference. And she had a quote a few years ago that said AI is the biggest innovation of our lifetime. It could also be the biggest weapon of our lifetime. And where we are today, how true that really feels. We have been in AI now for a long time. This isn't our first rodeo, over 10 years. And involved in AI, I have over 100 data scientists at WWT supporting our go-to-market strategy. We've been NVIDIA's Top Partner of the Year for 8 years in a row. But as we build out these AI infrastructures for our customers, AI security at times has been an afterthought. And so for the last couple of years, it was like we're just trying to have a seat at the table to talk about AI security. And candidly, it is the #1 topic that our customers want to hear about today. It's a Board-level initiative. And when you think about some of the frontier models that are now being released, you heard Francois talk about it, Kunal talk about it, it's changing everything. And so what we did is we developed a framework inside of WWT called ARMOR. It's the AI readiness model for operational resilience. And essentially, that helps guide -- it's a framework to help guide our customers in securing AI from, we'll call it, from chip to cloud. And so it's just a really easy way for our customers as they start to build their AI factories and thinking about how do I secure it? Because when we're talking to CIOs and CTOs and Chief Information Security Officers, that's the first question they're asking us, okay, is this factory that I'm buying secure? How do I know it's secure? So they need a framework to be able to manage that and watch it.
Lisa Citron
ExecutivesYes. That must be a huge relief to them to be able to look to you for that framework.
Chris Konrad
AttendeesFor sure.
Lisa Citron
ExecutivesSo underneath the C level are the IT teams who actually have to do the work. What are you seeing in the biggest challenges that they're facing today? And what do you think those challenges look like in the next 12 months?
Chris Konrad
AttendeesWell, the word I used at the beginning of this was consequential. And so when I look at IT teams today and what they have to deal with, they're facing the next essential threat. When you think about what some of these frontier models are capable of doing, so whether it's Anthropic or whether it's OpenAI or others that are coming out, it is making us rethink how we're doing security. I've been in cyber nearly 3 decades. And when I take a look at everything that I've learned and understood about cyber, that's all changed. It changed overnight. So how do you do vulnerability management? How do you do patch management? All the basic fundamentals that sometimes it's so hard to do. And our customers sometimes struggle with that because they don't want to break something within their environment. And so I like to think is do you want to live in uncontrolled chaos or do you want to live in uncontrolled compromise. And so just really helping our customers rethink. And so -- we have done over 150 customer briefings just in the last month alone, where people want to know how do I deal with this? Are we on the right track? What's the strategy? What's the plan? How do we make this work?
Lisa Citron
ExecutivesYes. I think that those teams are really in that same shift that you just talked about where they have been grounded in working in one specific way and now they're being forced, right? Because the attack surface is just wider and more complex. Absolutely. So ADC has long been an essential part of the stack, right? Working across layers 4 through 7. And how do you see ADC playing a role in the AI stack?
Chris Konrad
AttendeesWe heard a lot about it already today. I mean just -- it's fascinating watching the evolution of the ADC, managing application traffic. Today, it sits right in the middle of AI. So whether it's AI prompting, AI response, you talk about inference traffic, vector queries. So now it just needs to be an agent communications. And when you think about it, it now needs to be AI aware. It needs to be model aware, GPU aware. And the work we've done inside of our advanced technology center to test in these types of complex environments is really where the value and impact of our partnership comes together, so we can put these reference architectures in front of our customers very early on and say, this is how it works in these environments. So yes, I mean, it is a control point for sure. You cannot build a modern network without thinking about that ADC.
Lisa Citron
ExecutivesYes. Yes. It's been great to see how customers have come to the [ ADC ] and your AI proving ground, looking at the data delivery use case, obviously, the security -- runtime security use case and then the growing interest in the AI factory conversation that is early. So when you think about F5 specifically, how do you see us getting into this next era of delivery and security?
Chris Konrad
AttendeesYou've been around 3 decades.
Lisa Citron
ExecutivesYes, we have.
Chris Konrad
AttendeesAnd you think about just all the major shifts in how organizations are developing their networks. I mean, think about your roots from networking and load balancing and then to modern applications into the cloud. And now you're sitting in the front of AI. And so for me is that every major architectural shift, F5 has been involved in that, and you've adapted to that. And so I don't think you can build a modern network architecture without thinking where F5 is going to play in that. It is so consequential.
Lisa Citron
ExecutivesYes. No. And it's great to hear, and it's great to have your partnership on that. So shifting to the AI factory conversation. This is an area that NVIDIA will talk about you as a top partner there. It is a key thing that I know is a growing piece of your business. So as everyone heard, we have a great piece of technology that is in the growth -- starting in that growth vector right now that will make AI factories more efficient. We're in this world of tokens, how do you see this journey that customers are on, especially as they move from training to inference there?
Chris Konrad
AttendeesYes. Just -- I'll go back to something I said a minute ago, just every CIO, CTO, CISO that we're talking to are wanting to understand the factories that they're buying from any of the vendors, is this thing secure or not? And how do I know that's secure? So I go back to the conversation around ARMOR and how that works. But I will also say token economics is a real thing. You heard Kunal talk about just a few minutes ago. So I mean, we host customer advisory board meetings. And the top 2 or 3 topics that they're talking about is token economics and they want to get a real-life total cost of ownership of how this is being applied. And so when you think about this in the AI security world is you don't want to have an inference challenge in an incident. And so we have to make sure we square that away. And when I think of F5 in this particular category, candidly, you are the toll booth for tokens.
Lisa Citron
ExecutivesThat front door, right?
Chris Konrad
AttendeesYes, you are the front door, you're going to continue to be. So it makes a major difference when it gets architected and done the right way upfront.
Lisa Citron
ExecutivesYes. And that's what we're seeing from those conversations with customers, looking for that, not only the security, but how do they drive the efficiency in the usage of that tremendous infrastructure that we just invested in. So wrapping it up, I'll go to something that's near and dear to my heart, which is what are the factors that you see or believe that makes F5 a good partner to work with?
Chris Konrad
AttendeesI think in any good relationship, it all starts with trust. And so we have a long-standing partnership, and we trust each other. We have trust at the executive leadership level and all the way down into the field. It has to start right there. The other thing that we can do, and it's part of our culture and our core values that we both share is to be able to have difficult conversations. There are some challenges we may have in the field, but you and I and others, we can have that conversation. So that is just so fundamental and not everybody has that. But the other part that I hold near and dear to my heart is that you listen. And so when we talk about product design or what's working in the field, what do you see? What's not working? What do you think about, what products work well from an integration standpoint? We live in a multi-OEM world. Our customers have 2 and 3 of everything. So how do we work together in this system? And so that's what I really value. And not everybody does that as well as what F5 does. So I appreciate that.
Lisa Citron
ExecutivesNo. And we appreciate WWT, and I certainly appreciate you being here with us today and the long-time partnership we have. Thank you so much.
Chris Konrad
AttendeesAll right. Thank you.
Lisa Citron
ExecutivesSo I'd like to hand off to Tom Fountain, our Chief Operating Officer, and he's going to talk about delivering services. Thank you, Tom.
Thomas Fountain
ExecutivesSo thank you, Lisa, and particularly thanks to Chris for sharing a little bit about F5's role in this emerging AI stack. I'm Tom Fountain. I'm Chief Operating Officer at F5, and I've been with the company for 8 years now. And I think when I look back, I am perhaps most pleased at the foresight we had around the role of hybrid and multi-cloud. And I'm especially gratified to see the momentum and even acceleration that we're now seeing in our business as a result of the strategy we laid out a few years ago and our very deliberate execution against it. I wanted to share with you today a little bit about the services business. F5 services business really complements our product portfolio with services that allow us to both monetize our offerings and promote adoption and consumption of our solutions. This creates a virtuous cycle that I think is a pretty key part to our differentiation. We support the application delivery and security platform through a comprehensive portfolio of value-add services. These services represent approximately half of F5's total revenue. The world-class service offerings that we deliver span 3 broad capabilities. First is around support services. This provides around-the-clock access to engineering experts who support our broad customer base in addressing over 170,000 customer cases a year. These engineering professionals assist customers not only in their moment of greatest need, but they also create a lot of new knowledge that increasingly feeds our AI technologies. Support services also includes F5 Security Incident Response Team. And this provides customers immediate access to an elite team of cybersecurity professionals that help customers use our solutions in responding to cyber crises. Second, with the rapid growth of our software and SaaS subscription business offerings, we've aggressively built a new customer success capability. These professionals work closely with customers throughout their ownership journey to get the most from the F5 products. And finally, professional services executes 1,300-plus customer engagements annually to provide full-time designated and dedicated engineers in customer environments, execute against defined SOWs that architect, implement and operate F5 products on behalf of our customers and train customers on the use of all of these solutions. These services are really purpose-built for customers operating the most demanding IT environments. That's across enterprise, government and service provider. We serve over 80% of the Fortune 500 and are trusted by all of the top 10 companies in each of the verticals across banking, retail, automotive and insurance. The services that we deliver are mission-critical to organizations that are themselves offering, delivering -- are often delivering essential services. So from early engagements of architecting our customers' environments to services designed to ensure customers get the most from our solutions, services is a critical part to every phase of the customer's ownership journey. So Chad, John and Kunal each spoke about the actions we're taking to further accelerate our growth. Services addresses a vital need in each of these areas that they described by providing white glove human-led assistance. We construct and tune service offerings to complement each of these growth levers, including ensuring availability and trust of mission-critical workloads, supporting our commercial offerings through adoption and expansion motions and providing domain experts who work side-by-side with our customers. Let me offer one specific example to illustrate the value of services. We launched our distributed cloud SaaS platform in 2022. And that first full year after launch, customers needed an average of 92 days from the start of their subscription to the time they first pass traffic on Distributed Cloud. Over the course of the last several years, we've systematically improved our onboarding instructions, developed detailed playbooks across different technologies and use cases, expanded our global team of onboarding engineers and built out our managed services offerings for customers seeking to outsource operations entirely. We have focused on helping customers achieve their business objectives and rapidly extract value from distributed cloud. As a result, customers today complete initial adoption in an average of only 21 days. This means customers benefit from our solutions faster. It also, in turn, means that we increase our renewal rates and improve opportunities for expansion. This is but one example of the type of motion we develop with services to accelerate product revenue. We've embedded this approach to driving both services revenue and product usage into our operational playbook. Our services measures include ensuring a high initial attach rate and then maintaining high renewal rates leading to long service duration. In addition, because of the strong symbiotic relationship between products and services, we've also built operational rigor around adoption measures focused on initial onboarding and usage of products throughout the subscription life and expansion measures that focus on motions to promote consumption beyond the initial contracted value. I'll highlight an example measure in each of these areas. First, our initial attach rate has remained steady in the high 90%. This shows customers see value in our services portfolio. Second, our services obligation average age is steady at approximately 4.5 years. This average age demonstrates the durable nature of the services revenue streams. We also see healthy operational results from our product-oriented measures. I spoke just a moment ago about the improvements to initial adoption for Distributed Cloud. Over the course of the last several years, we also improved adoption of our multiyear subscriptions. Here, we show the average time to reach 80% utilization on these multiyear contracts. In our 2020 investor event, I celebrated progress in reducing the time to full utilization from 22 months down to 7 months. Through continued focus, we improved that further to 5 months in FY '23 and reduced it now to only 3 months in FY '25. Again, customers realize value from these contract vehicles faster and establish a foundation for future expansion. And as a consequence, we've also seen robust expansion for these multiyear contracts at a 25% to 26% annual level. Services delivers impactful results to both services operating segment and product usage. To enable these results, we've been on a journey for the last several years to digitally transform services. Leveraging technology improves customer experience and expands margins. For example, in customer support over the last few years, we deployed a new case management system and focused heavily on knowledge management to build a proprietary data set that makes our employees and customers more productive. In customer success, we focused on automation. We introduced low-touch and digital touch customer success motions to extend our reach to even more customers. Both of these are examples where digital transformation improved the business. But finally, and most importantly, though, we've also been aggressively building AI into our workflows. We've built a process to identify candidate new use cases, conduct proof-of-concept testing and then build and deploy new AI solutions in a consistent and repeatable manner. As of today, we've initiated over 70 AI projects and services across all stages, of which 23 of those projects have now graduated into production deployments. These production AI use cases have already had a significant impact on service delivery. I'll share a few examples in just a moment. Together, though, these digital transformation efforts allow us to improve the customer experience, focus more resources on earning customer trust as a strategic adviser and deliver this value at lower cost. As I mentioned, our extensive use of AI, particularly generative AI, is already having a profound impact on the services we deliver. We benefit from using AI in many of the expected ways. For example, our professional services engineers have seen a 53% reduction in time spent generated code. More significantly, though, we are embedding AI deeply into the individual workflows within services. Our internal AI-powered [ case hero ] solution support -- helps support engineers resolve issues faster. Already 85% of our cases benefit from AI. Certain AI capabilities are extended to end customers. Our MyF5 Guided Support, for example, increased case deflections on our website by 3x, reducing the overall case submission rate by 15 percentage points. We are automating manual content creation such as sharing insights during customer QBRs. And in manufacturing, we're applying AI for visual verification on our assembly line. While AI could hallucinate, it doesn't blink. AI vision replaced human verification and improved our manufacturing test yield by 16%. What is perhaps most telling, though, is the positive impact these changes have on customers and how customers view F5. Services has long been a differentiator for F5 relative to competitors. The actions we've taken over the last few years to digitally transform and improve service quality is paying off in the improvement of CSAT from an already strong 9.2 to an absolutely exceptional 9.6. We enjoy a strong virtuous cycle between product and services. Post initial sale, our white glove services provides a durable source of revenue and margin. Delighting customers through these white glove services ensures customers get the value they expect. In turn, customers grow their product usage of F5, which again unlocks even more service opportunities. Overall, we offer a comprehensive portfolio of services across the entire customer journey. Our deep expertise in app delivery and security differentiates F5. We have delivered strong operating metrics, both traditional services measures such as initial attach and contract duration, and we are accelerating product sales through adoption and expansion. I will now hand it to Cooper Werner, our F5 CFO, to speak to our sustainable revenue and earnings growth.
Cooper Werner
ExecutivesThank you, Tom. Okay. So my name is Cooper Werner. As Tom said, I'm the CFO at F5. I've been in this role. This is my second year, but I've actually been with F5 for nearly 25 years, if you can believe that. But it's been kind of fun just watching the presentations today, a little bit of a walk back in time with the history because I've lived a lot of that history. But I think what excites me most is what we're seeing with the velocity around innovation, the number of new use cases, the new products we're rolling out to market. In my time at F5, I've never seen this pace of innovation. And I think the timing is really good right now with where the market is going and the addressable opportunity we have in front of us. So just a very exciting time to be at F5. I feel privileged to be in this role as CFO. And I'm privileged today to be able to share how we see this strategy manifesting in our financial results over the next few years. So first, I just want to thank everybody for investing the time with us today to walk through our strategy. It's been great connecting with many of you over the past few years. And I'm going to go ahead and get going, translating how these opportunities will translate into our financial model and drive accelerating revenue and growth over the next few years. So first, just to kind of ground the discussion, and we've kind of gone through this already, so I'll keep it high level, but I thought it would be helpful before we get into the financial results, just to kind of revisit the core building blocks behind our strategy, which really position us for an accelerating growth opportunity. And we're already seeing this in our results. You see we're off to a very strong start to FY '26. So it's -- a lot of these drivers are already manifesting in the business. But really, the hybrid multi-cloud reality that customers are seeing today, that's the vision that we laid out years ago. And we've been very intentional about building a portfolio and a business model to support this architecture. And that set of choices is proven pivotal to the growth opportunity that now sits in front of us. And our continued innovation over the years and our commercial model and deployment model flexibility that we've provided for customers has positioned us to capitalize on our leadership in ADCs, where we're seeing growing demand across new use cases and new insertion points. And customers are embracing the full breadth of our portfolio through the platform adoption opportunity that John walked us through earlier, and that's really driving continued strong expansion across our business. And then, of course, perhaps most exciting is the AI opportunity, which has already become a significant opportunity for us, and we're starting to see that impact show up in our revenue growth today, but we're really just kind of getting into this opportunity. Okay. So just to kind of set up the discussion of our outlook, I thought it would be helpful just to do a quick review of our financial execution over the past few years, and then I'll get -- dive into the business model inflection that we see over the next few years. Okay. So as we've discussed over the past few years, we committed to delivering double-digit earnings growth, and we shared that we could deliver these results through a combination of mid-single-digit revenue growth and continued operating margin expansion. And we've delivered 6% average revenue growth over this time frame, the last 6 years, 2020 to '25. And of course, this growth has been accelerating in the past several quarters with a double-digit revenue growth outcome in FY '25 and a continued strong start to the first half of FY '26. And over this time, we've been running this business with financial discipline. We've been driving healthy operating margin improvement, bringing our operating margins up from the 30% range in 2020 to our current 34% to 35% range that we've guided to for FY '26. And this has all translated to a double-digit EPS growth rate over this time frame, which remains the North Star of our financial model. And alongside our earnings results, we've also been very disciplined stewards of our balance sheet. We've generated very strong cash flow over the years, nearly $4 billion over the last 6 years, and we've returned well over half of our cash generation to shareholders through a consistent share repurchase program. We repurchased $2.5 billion of shares over the last 6 years, which is 63% of our free cash flow, well above the 50% threshold that we've committed to. Okay. So we've spent some time today walking through the markets that we address, our positioning with our portfolio and our strategy to continue driving the innovation and simplicity that customers require to deliver and secure their apps and APIs. So now I want to talk about how this translates to a more exciting revenue growth opportunity moving forward. So I'm going to start with our systems business. So we're seeing today multiple tailwinds for our systems business as shifting dynamics in application architectures are driving new performance requirements for securing and delivering apps. First, we're seeing a very strong refresh plus cycle. And in my time at F5, this is the strongest refresh cycle we've ever seen, and we expect the strength of this refresh to extend well into FY '27. We're also seeing capacity expansions tied to workload growth from AI-enabled applications. Francois already walked us through how traffic growth has been accelerating driven by AI. Kunal gave some more details as to how that translates to new needs for infrastructure build-out for customers, and we're seeing that in the form of capacity expansions in addition to data sovereignty and resilience requirements. And then we're seeing new use cases, particularly around AI data delivery. Again, it's relatively early, but it's starting to contribute to meaningful results. And we're seeing additional competitive takeouts. The velocity around competitive takeouts has been going up. And the net of these tailwinds is our updated view that our systems business will sustainably grow in the mid-single-digit range over this time frame. Now that's a material change from how we had laid out our outlook for systems business if you go back to the 2020-ish time frame. And so I want to dive in a little bit deeper as to some of the new growth signals that we're seeing that are underpinning that update to our outlook on the systems business. So first, let's spend a little bit more time on the refresh plus motion. So first, as customers are going through their refresh motion, we're looking at the replace rates. And so we think about the ratio of new appliances that customers install in their environment to replace legacy appliances that they're retiring from their environment. That ratio of replace to retire has been higher across this refresh. The second dynamic we're seeing is when they're making that replacement, the appliances that they're replacing -- that they're adding to replace legacy appliances, they're moving up the stack in terms of performance. And that's driving a higher price point and higher ASPs. So that's also driving growth within this refresh plus motion. And then the other phenomenon that we're seeing, unlike in prior cycles, is that a lot of times customers when they're going through this replacement motion, they're adding capacity at that time. And really, what they're doing is they're trying to address this inflection in traffic that they're seeing and also plan in advance of additional anticipated growth with their traffic. All of these 3 elements are why we're seeing such a strong refresh cycle in this period. And I will acknowledge that there is, of course, a cyclical element to any refresh motion as customers are going through this replacement of the legacy appliances. And so there's going to be periods from the refresh of exceptional growth such as we're seeing today. And there will be periods where that growth is slower following kind of on the back end of these refresh cycles. But it's the growth signals we're seeing during that refresh that we feel are most critical as we look out over longer periods of time and what this overall growth opportunity could be. Okay. So that's the refresh. So let's talk about other sources of growth that we're seeing in the systems business. One is capacity expansion that's outside of that refresh. So not all customers at any point in time are going through a refresh, but they're still subject to the same demands to support growth that they're seeing in their applications, particularly driven by some of this AI-embedded capabilities in their apps. And so a lot of customers are continuing to add capacity, whether they're going through a refresh or not. And then we're also seeing digital sovereignty that we talked about, resilience. Those motions are starting to drive new capacity increases. And then further downstream, PQC, we expect to be a driver of additional capacity. And then the third project, I touched on it earlier, but inflection in new projects. Again, AI data delivery is driving a lot of new opportunity for F5 and then competitive takeouts. Chad talked a lot about the dynamics behind that, but we're seeing an acceleration in customers that are coming from other vendors in the space that are coming to F5, largely because of the commitment we've made to hybrid multi-cloud architectures. Okay. So that was a look at systems. So now let's spend a little bit of time on software. Software has been the biggest growth category for F5 over the past few years. And we believe that it's going to be a consistent and sustainable double-digit growth category in our revenue stream going forward. And I'll break down kind of the 2 key categories behind that growth. Starting with our term subscription business. So this is BIG-IP and NGINX delivered in the form of term subscriptions. We've talked a lot over the years about these multiyear agreements with this flexible consumption program that we designed for customers. It's been so successful for F5. That's a category where we have really good visibility as to how customers are using our products. We have a view as to the growth that we would expect moving forward just based on the utilization rates. We've had very strong renewal rates, very consistent renewal rates, and we've had really good expansion over the course of these -- the duration of these subscriptions. And so we've got really good visibility to this category that's been consistently growing at a strong double-digit rate, and we believe that we'll continue to see very strong double-digit growth from this category moving forward. The second category is our SaaS and managed services business. And this is a category we've talked about over the last couple of years that we've been going through a bit of a transition with some legacy offerings that we've been retiring. And that served as a bit of a headwind to growth as that software revenue has come out of our business models, we've retired those offerings. But we're complete with that transition. So going forward, it will be a headwind -- sorry, a tailwind to our growth because the underlying growth we're seeing from Distributed Cloud, which makes up the majority of this category has been very strong, and we no longer are going to see a depreciation of revenue related to retired offerings. And so the combination of growth from the term subscription business that's consistently been so strong and now a new growth opportunity within our SaaS and managed service business, in addition to some new use cases, particularly around AI runtime security and the continued expansion we're seeing across our platform, those all position us to see very strong growth going forward from software. Okay. And then the last category I'm going to touch on with our revenue base is our services revenue. This makes up about half of our revenue today. Tom talked a lot about some of the underlying dynamics that we're seeing. But the 2 kind of data points that I'll point to that underpin our outlook for services revenue, start with the very high attach rates and consistent attach rates we've had, attaching services to our products that we sell into the marketplace. And this really reflects the value that customers place on our software support and our maintenance services. And those have remained very consistent over the years. And then hand-in-hand with that, the installed base that we attach those services to is growing now that we're seeing services revenue move into a new growth trajectory. And so over time, as that installed base continues to grow and we continue to have very high attach rates, that should drive an inflection in our service revenue growth rate. Now of course, services always has a bit of a lagging correlation to product revenue because product revenue is recognized upfront. You sell the services alongside the product revenue that gets recognized over time. And so today, we're seeing a low single-digit growth rate from our services business. But with the continued strong growth we're seeing on product and the high attach rates of services, that's going to start to manifest in our service growth rates with an acceleration to mid-single digits over time. Okay. So we've covered the revenue base and its components. Now I'm going to jump into our operating model, and I'm going to start with our gross margins. So if you look back over time, you can see that we've been effective in driving our gross margins up from the '23 to '25 time frame. We've talked about some of the dynamics in the marketplace around cost of components that have really increased pretty dramatically, particularly for memory and SSDs. I talked about this on our last earnings call, and it's a pretty well understood dynamic across the landscape. We did a really good job. I should credit our manufacturing team for getting in front of some of the supply chain challenges that they saw coming. Going back to FY '25, they saw some signals that this was going to start to become more of an issue across the industry, and they acted very aggressively in securing components largely to make sure that we are meeting high ends of potential revenue opportunities across our systems business. But another consequence of acting early is that we secured a lot of components at lower cost points before prices really started to accelerate. And so as a result, we've been able to kind of navigate these cost pressures to date because we've been building in these lower-cost components into our products that we've been shipping. But we're now at that point where some of these higher costs are going to start flowing into the model. And I talked about that on the last earnings call, but we expect the initial impact to be really in Q4, and that will persist through a lot of FY '27. We do expect things to start to stabilize around costs later in the year in FY '27. And as a result, our gross margins will stabilize. And long term, we expect gross margins to rebound to historical levels. But that's kind of the dynamic that we're looking at for FY '27. But meanwhile, we maintain disciplined driving efficiency across our cost base. Through internal use of AI to increase operational efficiency and increase sales efficiency from our land and expand motion. And this enables us to reduce operating expenses as a percentage of revenue and fund innovation and go-to-market investments to secure long-term revenue growth opportunities. And as such, as gross margins stabilize and we continue driving productivity gains, our operating margins are expected to increase to the mid- to upper 30s range over time. Okay. So now what I'm going to do is summarize how these trends translate into an updated overall financial outlook to deliver strong earnings on an improving revenue growth opportunity over time. So I walked through the components of our revenue opportunity, and I'm going to tie it together now with the overall revenue outlook. So first, Francois already kind of flashed this, but we're guiding to a total revenue outlook of upper single-digit growth through FY '29. And while we're not guiding beyond FY '29, we believe we're well positioned to further accelerate our overall revenue growth rate in the long term beyond FY '29. And this opportunity is created by the continued strong product revenue growth and the accelerating service revenue outlook over this period. Specifically, we expect product revenue to grow double digits throughout this time frame, and we expect services growth rate to increase over time based on the strength of those product sales and accounting for the lagging correlation between service growth against product revenue due to the ratable revenue recognition with services revenue. And this all equates to a strong revenue growth exit trajectory, and we also see significant upside growth opportunities as AI use cases continue to mature and PQC readiness becomes forefront in our customers' planning activities. So turning to our operating model. In concert with the revenue growth acceleration I just discussed, we expect a short-term reduction to gross margins in FY '27, followed by an improving outlook back to historical levels by FY '29. And we continue to drive operational efficiency, enabling additional investments into long-term growth opportunities while at the same time, reducing operating expense as a percent of revenue to the mid- to upper 40s levels through FY '29. The net result of our accelerated revenue growth and continued operating efficiency is a financial model that we expect to deliver improving operating margins at the mid- to upper 30s levels by FY '29 and sustainable double-digit EPS growth. And finally, we have a very strong balance sheet and cash position, and we've demonstrated over the years a very disciplined approach in regards to capital allocation. Our strategy remains committed to identifying and capitalizing on growth opportunities through both organic and inorganic initiatives while rewarding our investors with a strong share repurchase program. So organic investments in product innovation and sales capacity and internal AI enablement enable us to continue this velocity that I talked about earlier with our road map. And at the same time, we're also exploring inorganic opportunities, which largely would be focused around security and AI. And we continue to expect to use at least 50% of our free cash flow for share repurchases, which we've exceeded for each of the last 4 years. And of course, we're off to a pretty fast start in FY '26. So that concludes the overview of our financial model. I'd like to thank you all again for investing your time with us today, and I'm going to hand it off to Francois for some closing remarks, and then we'll bring the rest of the presenters up in front to go through Q&A.
François Locoh-Donou
ExecutivesAll right. Thank you. Just before we move to Q&A, I wanted to recap the takeaways of today. I shared with you that we are seeing a shift in the industry to hybrid multi-cloud architectures. This is a shift that we had anticipated several years ago. We had been talking about this shift as early as 2018, 2019 when conventional wisdom was that everything would just go into the public cloud. And it's happening now, and we are benefiting from this shift, and we're capitalizing on these trends. We are building on our market leadership in ADCs, continuing to see growing demand in ADCs, but our incumbency, our market leadership, our differentiation relative to our competitors is allowing us to gain share in ADC, and Chad talked about that today and how we're making that happen in the marketplace. Beyond that, we are driving platform adoption. We have multiple capabilities in delivery and security. We have converged the capabilities in delivery and security into a single platform. It is the one platform, the only platform in the industry in the world of delivery and security that works across hardware, software and Software-as-a-Service and gives customers the ability to consume our technology in CapEx or OpEx or subscription or consumption in whichever model they want to consume. That flexibility is an incredible differentiator in the market, and it's complexity that we absorb in our business model to give simplicity to our customers, and we are going to continue to be rewarded by that. And then AI is, of course, a very exciting new trend. We already have a number of direct AI use cases that we're benefiting from. And we're also benefiting indirectly from a general increase of traffic related to AI, which is growing demand for ADCs. So with that, I'm going to invite the presenters to join me here for being able to answer any questions you may have. Thank you.
François Locoh-Donou
ExecutivesThank you, Joe. Thank you, Michael. Okay. And we will be able to take questions from the room. There will be 2 mics circulating for anybody who wants to get us started with a question.
George Notter
AnalystsI guess I'll start here. George Notter from Wolfe Research. I guess I was just kind of curious about how aggressively you want to monetize this business. It seems like you guys are really in the center of some really important changes going on inside enterprises and applications and APIs and Agentic and yet -- you're kind of raising pricing, I think, on a cadence of like single digits earlier in the year. I mean your competitors, I think, are driving much more significant price increases. I know there's a share game you're trying to play, but it seems like there's an opportunity to monetize more aggressively. And I guess along those lines, I was looking at kind of some of the deal sizes you put up on the screen. I think there was like $1 million and $2 million and $4 million deals, but yet here you are, you're in such a critical spot inside these networks, like shouldn't the deal sizes be bigger? Any thoughts there would be great.
François Locoh-Donou
ExecutivesGeorge, thank you for the question. I'll start with that. I think the deal size that you saw was illustrating specific use cases that are emerging and of significant interest for us. We obviously do deals that are in the multiple tens of millions as well in our markets. But in terms of monetization, look, we have a very important philosophy that we stick to. F5, as you know, we're celebrating our 30-year anniversary this year. And we have been for 30 years, serving enterprise, government -- enterprise customers, government entities, telcos across all verticals. And we've done that, built a very strong franchise by building strong relationships with our customers over a period of time. And so we believe in building long-term value for F5 shareholders starts with having very strong relationship with customers. And part of that is having practices that are sustainable over time, both for our customers and for us. And that is why we have leveraged our incumbency to continue to monetize our relationship with customers, but we've done so and we'll continue to do so in a way that is sustainable. A good example of that, by the way, is we have been taking share from competitors in our market who have different philosophies and different behaviors around pricing, and we continue to win franchise after franchise that will pay off for us over the long term. So we will continue to be disciplined in realization, but also measured in the way we approach that with our customers. Lauren, here.
Simon Leopold
AnalystsSimon Leopold with Raymond James. I want to come back to the mix between the systems growth and the software growth in that it does appear that with the demands, it would make sense that maybe more customers should be attracted to systems for the performance that's required for AI, yet you're forecasting double-digit growth coming back on the software side. It sort of feels like I think you've made a case for why systems are more attractive than we used to think. So I'm a little bit puzzled as to why we wouldn't see an offset from your software business.
François Locoh-Donou
ExecutivesCooper, do you want to start with that?
Cooper Werner
ExecutivesYes. So there's a couple of dynamics in place here. So a lot of our portfolio is software only. So we talked about Distributed Cloud, for example, where we're seeing very strong growth, AI onetime security. And then just the expansion we're seeing across the platform has really been manifesting in our software opportunity. And so we're just seeing the trends of how customers have been deploying the technology, both in the hardware and the software form factor. But the trends we're seeing is a really strong expansion trend, and that really kind of underpins that software outlook. But I think when we take a step back, like what we're really looking at is the growth in applications and application traffic and the solutions that we sell to support both the delivery and security of these applications. And that's the hybrid multi-cloud bet that we made 7, 8 years ago was that customers were going to need to have the flexibility to adjust as new dynamics came into the arena. And so -- and that's what we've been seeing, right? And so that's where the strength on the hardware side of the business is coming. And it may prove that hardware is stronger than we've guided just based on how these dynamics continue to evolve. But I think the critical thing is that we've had so much success because we have intentionally provided that choice for our customers, and that's really paying off right now. So right now, it's a balance of strong growth across both. But yes, over time, I mean, especially as AI use cases continue to accelerate, there may be an opportunity for stronger growth on the hardware side than what we're outlining today.
François Locoh-Donou
ExecutivesWe'll go to. Yes.
Timothy Long
AnalystsIt's Tim Long at Barclays. Maybe, Cooper, for you. Curious a little bit about disclosure here. You guys gave a little snippets last quarter on kind of what you know is AI contribution in the numbers. I'm just curious if you've done any more work on -- you said there's a lot of tangential type of business. So just curious if there's any updates there. And then going forward, I'm just curious how -- obviously, a lot going on with AI, and it matters for you guys in the industry. Are you envisioning over time this being like security, like maybe once a year, you'll give us some numbers? I know there was a time with the first few years when you started the cloud offerings, we got some numbers and then we didn't get some numbers. So maybe if you can just let us -- I know we're early stages and it's tough to define now, but anything you could kind of update us on where we are currently and your vision of how we'll see more regular data on these important new drivers for the company?
Cooper Werner
ExecutivesYes, I'm happy to. So we talked today about 3 distinct direct AI use cases and then also the opportunity we're seeing driven by AI application traffic. And so we gave a $50 million update on the direct use cases that we've seen over the first half of the year. And really, that was our effort to kind of give an update kind of as to how things are trending within those use cases, but it is a subset of the overall AI revenue that we're seeing today, and we expect that the growth is potentially going to be just as strong for the indirect use cases. Now we can't track that revenue discretely because it's still BIG-IP being sold in a new -- as part of expansion in this infrastructure, customers are buying to support all their workload growth. It may be largely driven by AI traffic. There could be other dynamics in place. So -- but what we can do is track the growth we're seeing outside of refresh motions in the form of expansion. And we are able to attribute that the majority of that is coming from AI-driven expansion. So that's just some background. Over time, we're not going to update our direct use case revenue consistently, but we will try to give more context as that business continues to manifest. And then we also talk -- we expect that additional use cases will start to emerge over time as well.
François Locoh-Donou
ExecutivesI think, we'll go to Tal.
Tal Liani
AnalystsOn AI, I have a few questions. Who is the customer? And within the existing customer, is it the same buyer? Or is it a different buyer? And then what's the pricing model of AI modules? Meaning is it more like hardware pricing modules? Or does it change more like NGINX? Or does it go based on volume? So if you can talk about kind of the way to monetize AI?
François Locoh-Donou
ExecutivesYes. So Tal, I'll take that one. We've talked about 3 use cases in AI. And the answer to your question is different depending on the use cases. So you're starting with the one that's most mature, which is AI data delivery. The target customers for that are large enterprises typically. The buyer in that organization, it varies by organization. Sometimes it's an AI team that's been set up to build the AI infrastructure. They own the AI data pipeline, and they're building all that infrastructure. And we get to that buyer through the F5 buyer, which is typically a NetOps buyer. Sometimes the buyer in our organization is the NetOps buyer. So this is a motion, a go-to-market motion that already has scale inside of F5, where our teams and our partners understand the buyers, understand the use case, and we're seeing strong traction. And most of the revenues we've done in AI in these use cases has come from that motion. AI security is more nascent. The buyer is typically a SecOps, CISO persona. The consumption model is largely software for securing -- AI-native security to secure AI models. And -- but it goes into our large enterprise customers, whether it's government entities, enterprise across all verticals. The ones who are doing that today are those who are more sophisticated, have already deployed AI models and are already worried about guardrails in front of these models. So it's typically large financial services, technology companies that are doing that. And then the third use case is very different. So this is AI factory load balancing. So it's improving traffic efficiency, tokenomics, as Kunal shared, inside of AI factories. The buyers there, it's not today thousands of enterprises. It's concentrated into a few players who are doing sovereign AI and some neocloud. So that would be just a few tens of companies that could take that in. And the buyers there are the people building the infrastructure and in charge of optimizing that. But that use case is more nascent, both because of where we are in the cycle of getting through the reference architecture and getting our products GA and getting the product tested, et cetera, and also because of the market is not yet mature. Most of the players there have been focused on GPU-as-a-Service, meaning just renting GPU capacity and have not yet been focused on selling tokens and monetizing tokens. And it's when you are focused on monetizing tokens in an inference use case that token efficiency matters tremendously and that F5 has a very important role to play. So those are the 3 routes to market and the customers we're targeting.
Chad Whalen
ExecutivesYes. And each one of those has a different pricing model. So the first one is mainly high-performance hardware ports. Second one is scanners, depending how much traffic is between the model. And the third one is software on DPUs.
François Locoh-Donou
ExecutivesSamik?
Samik Chatterjee
AnalystsSamik from JPMorgan. Francois, you're outlining that you're being a bit more mindful about pricing to offset some of these costs, whereas the rest of the industry isn't being the same way where a lot of the other infrastructure is seeing strong price increases. And what we're generally picking up is a lot of enterprises are now exploring public cloud more for the initial AI use cases versus building something that's more on-prem. How do we think about that shift or any delays on that front? How do you capture the sort of value still if enterprises are leveraging more to public cloud in the meantime, just given the overall inflationary impact we are seeing in building infrastructure. So that's maybe one. And if I can just quickly follow up. You're talking about a big increase in traffic with AI. But probably what stood out is in terms of AI data delivery and the TAM you're outlining there is only about $1 billion for AI factories and AI data delivery, which seems pretty small for the kind of traffic growth that you're outlying. So is there an underlying assumption there of how many enterprises or what portion of enterprises are investing in 2030 to drive that TAM estimate?
François Locoh-Donou
ExecutivesOkay. Thank you, Samik. I'll start with the second part of your question, and then I'll come back to public cloud versus on-prem. Kunal may want to add on that in a moment. So on data delivery, yes, you are right. When we show this TAM, it looks -- we're saying this is going to grow to $1 billion. By the way, these are forecasts from -- I forgot which analyst firm is forecasting that. We actually -- our belief is that it could be larger than that. But that is a very narrow use case of ADC. And so if you look at that $1 billion relative to the ADC market, it's a pretty substantial inflection in the ADC market. AI security, the TAM that we're showing is not narrow. It includes a number of security capabilities, and that's why we think it's going to be a multibillion-dollar TAM very quickly. So it's true that today, we have a lot of concentration in our AI revenues that is coming from what seems to be the smallest market opportunity. And the ones that are larger, we are not yet having a significant contribution. I think that's going to evolve over time. In terms of enterprises and where they're building their AI infrastructure, look, what we have seen is a lot of enterprises are initially because of the cost of GPUs and the speed with which GPUs are evolving, we have seen a lot of enterprise initially say, I'm not going to invest in my own GPU infrastructure. I'm going to wait for this to mature because I can't depreciate assets at this speed. And so whilst I'm doing that, I'm going to rent GPU infrastructure in the cloud. But I fully intend to control my AI infrastructure end-to-end. And at some point, I will have that in my own infrastructure. And so that's -- I think we will see an element of that evolution. And we're already seeing -- by the way, what we are seeing is a lot of companies realizing data, their data, their proprietary data is more valuable than it's ever been. They want that to be close to their AI models. We've seen companies repatriate data from the cloud just because they're collecting way more data from their customers, from their products. Their bills are exploding, and they want to have the data on-prem because it's lower cost. So I think we'll see a mix of both. I do see also the inflationary nature of everything now, server, storage, et cetera, potentially pushing customers to the cloud, but we're -- we've seen the reverse movement in a lot of our customers. I don't know, Kunal, if you have a perspective on that?
Kunal Anand
ExecutivesYes. We are seeing some really interesting behaviors with the enterprises that we serve. We don't typically see our enterprises move everything to one location. Specifically when it comes to the cloud, what we are seeing them do is take specific training workloads. Very few companies, though, are training by themselves. They're doing a lot of fine-tuning. So they're leveraging a lot of open models and then doing fine-tuning runs in the cloud. That's a pretty common practice to what Francois was describing. They may not have the GPUs on-prem to fulfill a pretty large training run with all their data. And then they may come back on-prem after the model is built where they don't necessarily need to run a very large model. The phrase LLMs or the term LLM sometimes gets overused. I think in reality, there's a pretty big spectrum here between SLMs and LLMs. And most organizations, when they're doing the training and fine-tuning, they're living on the SLM side of things. In many cases, some of the models that are being built by enterprises don't necessarily need GPUs to run. They can run on CPUs or they can run on a smaller scale setup with GPUs. That said, where we are able to help organizations is the transport of that data. So in some of these cases, where we've been able to help folks around the context of data delivery is they may have data -- source data that's living in one environment that they need to feed into another environment where the GPUs are. And in that particular case, they'll use BIG-IP at the source or at the destination to ultimately feed that data, control the flow of that information and feed that in whether it's to an object store or ultimately feeding that into a cluster where GPUs are.
Michael Ng
AnalystsIt's Mike Ng from Goldman Sachs. I just wanted to ask about the multiyear software revenue outlook. In the slides, it seemed to suggest that there was an acceleration in fiscal '28 and fiscal '29. Is that the case? And what's driving that? And then second, I was just wondering if you could talk a little bit about some of the things that inform your visibility, whether that be the timing of term contracts or a greater mix towards SaaS or an expectation of agents driving software demand? Just any color there would be helpful.
Cooper Werner
ExecutivesYes. So I'll start. Historically, if you've been tracking our software business, it's been a strong growth business, but there have been some kind of ebbs and flows on that growth rate, and a lot of that is the cyclical nature of some of these renewals. As that base continues to grow, the cyclical amplitude it starts to get more normalized, right? And so we also -- so -- but to your point, we have -- we do have very good visibility as to what that base looks like today, not just in terms of what we've sold, but also what the current adoption rate is within these contracts that customers, and we're seeing that expansion rate continue to go up. And then as we're adding new offerings, that gives customers more opportunities to consolidate additional features into this platform. And so that all gives us good visibility. The SaaS business becoming a growth business. And also, by the way, that one is a much more consistent growth rate business because it's ratable by nature. And then the runtime security is kind of the third category of growth that we see that is also software. And so I think over time, what you're going to see is we're probably going to be a while before we're away from the quarterly variability in the growth rates. But from an annual basis, we believe that we're going to have pretty consistently double-digit plus growth rates in our software business.
Unknown Analyst
Analysts[indiscernible]
Cooper Werner
ExecutivesSo we don't -- yes, we're not going to guide within the time frame. The base that is coming up for renewal in the back half is very healthy. But of course, there's still a lot of work to do to continue to drive expansion within that base.
John Jeffrey Hopson
AnalystsJeff Hopson from Needham. With the growth in AI agents, I'm curious, it seems like API security is the most obvious or near term to see impact of that. Is it the monetization side the sheer growth of calls? Or is it different features that companies are asking for? Just kind of curious what the actual monetization looks like.
François Locoh-Donou
ExecutivesJohn, do you want to take that?
John Maddison
ExecutivesYes. So right now, it really depends where the APIs are flowing. So a lot of our API services right now are sitting on our Distributed Cloud, XE, and we've seen really good growth in the last 12 months of the API services. But as we go forward, they're also looking for APIs in the data center and in the cloud. And so we're rolling out that API services across our BIG-IP. So we just introduced BIG-IP API discovery, for example. And then for API services, you've got discovery, you've got protection and security. So it's kind of a multi-vector is it's in the cloud, in SaaS, it's in data centers and then there's different API services as we roll them out. By -- in the next 6 to 9 months, we should have all of that across all our control points and all our product families.
Kunal Anand
ExecutivesI'd love to add a little bit more on that. With respect to APIs, I think there's definitely going to be more API consumption because of agents. It's a structured form of input and output, which works great with AI models. What we see right now is a lot of interest around discovering these APIs. Part 1 usually is find all the APIs, and that's for multiple reasons. One, if you know where the APIs are, they can become useful for these agents upstream. The second bit of it is also security. APIs are still one of the leading factors around data exfiltration today. So it isn't just for agents, but also for security. It serves a dual purpose of why people would want to continue to go down that discovery path. So data exfiltration is typically a problem there. In terms of features and functionality around discovery, it can include things like sensitive data leakage, data classification, things like that at that point. Then, of course, you get to the run time around API, which involves pretty heavily for us, security. And that's a pretty important factor, again, not just because of data leakage, but also what you can do downstream with that. The thing about agents and what we're all kind of learning in this new normal is multi-turn and reasoning, you add all those things up and the ability to stand out to multiple APIs. You can get a lot of information from everywhere, you can take action in lots of different places. And so organizations are looking for that sort of centralized governance across APIs wherever they may be, could be on-prem, it could be in the cloud. And that's the other thing that's pretty interesting in this new normal is these agents are hybrid and multi-cloud by design, right? They're meant to fetch data locally, maybe pass that on to a model which could live in a cloud or could live on-prem and ultimately work with them. But typically, it's happening through APIs. And so again, discovery is one aspect of it, data classification is another, broad security is another and then, of course, insights around just generally what's going on with that API traffic.
Chad Whalen
ExecutivesAnd if you saw the McKinsey attack, agentic attack, that was a shadow API to begin with and it's a SQL injection. It would have stop with API discovery and protection and a WAF.
Unknown Attendee
Attendees[indiscernible] from Bloomberg Intelligence. A couple of questions, Francois. You had a couple of vectors of growth. TAM of 15% to 28%, that implies a 13% growth. On top of that, you've got the $11 billion AI kicker, but you -- and you also gave us the data center growth of 7%, and you've been growing at 2x that rate. Why a high single-digit guidance relative to the TAM and the growth vectors that you provided? And then secondly, you had mentioned the GPU-as-a-Service segment as a potential opportunity for tokenomics and tokenomics delivery. What gives you confidence that, that is a potential market, especially given that the public cloud guys build their own virtual ADCs in-house and low balances in-house. That took away share from you guys over that period of '15 to '22.
François Locoh-Donou
ExecutivesYes. thank you. Well, actually, I'll start with the second part of the question. In terms of the GPU, the opportunity for F5 to help people who build AI infrastructure get more efficiency, get more tokens out of the factories. The target market for that is not the very large hyperscalers that, indeed, as you say, have built their own stack and will not rely on third-party software to go do that. But there is a class of customers that will likely do that. Time will tell, but it's more the neoclouds, not the big U.S. hyperscalers, Microsoft, Google, Amazon, et cetera. But neoclouds will likely do that. People building sovereign AI, some of whom are already F5 customers outside of the U.S., it's typically telecom companies have taken on the mandate to build sovereign AI or large organizations, they are candidates to leverage our technology to improve the efficiency. So that's -- and eventually, large enterprises who build significant GPU infrastructure will also want to have better token efficiency because, as you know, token costs are exploding for everybody and tokenomics is going to matter enormously as enterprises do more inferencing. So there's 3 classes of customers, neocloud, sovereign AI and enterprises are the customers ultimately that we will go after, not the hyperscalers. Now to the first part of your question around our guidance given the growth in addressable market. Look, I would say when you look at our guidance, you have to balance that we see substantial opportunities, and we're giving long-term guidance here. On the one hand, if you look at what we've baked into our guidance, we have baked the things that are -- that either have already been proven. Well, that have actually both been proven and for which we've had enough run time to know that it's sustainable. So it's things like hybrid multi-cloud deployments, continued adoption of our platform. That's a part of it, growing demand of ADCs because of the general demand we see in the general growth in traffic, those are elements we have built in. There are things that are upside opportunities that are not, frankly, in our guidance. We talked about PQC, I think, in my presentation, PQC could have a substantial effect on demand for ADC for F5 in the horizon that we're discussing. We didn't bake that in our guidance. We didn't bake enormous success in the work with NVIDIA on DPUs because these things are nascent. There's a lot of uncertainty around how things will materialize. So that's not in. In AI security, that is also nascent. We don't have enough run time to bake a lot of that in. So we have very modest assumptions around that today. So there is upside, but at the same time, we're giving long-term guidance, and we have to be mindful. The world changes very quickly. The last time we gave long-term guidance in 2020, we went through COVID, we went through a massive supply chain crisis, we went through a big enterprise pullback. In the last couple of years, we've seen a lot of geopolitical uncertainty. And all of that has driven volatility in our growth and in our numbers. And so we are also mindful of that because macro can present a risk over the next 2, 3 years. And so we've balanced those elements to build a guidance that we think is prudent. And if you look at our track record over the last couple of years, we've been really focused on giving guidance that we can meet and exceed. And our goal is to do the same thing. Tim for return appearance.
Timothy Long
AnalystsYes, maybe for -- I'm not sure who, but I wanted to touch on the systems business. I think you talked a little bit about this. One of the vectors was like market share gains. But I'm just curious of your views. Obviously, someone talked about pricing dynamics. You had a big competitor that went private equity. So that's always helpful for the incumbents and the bigger leaders. So maybe when you think about that mid-single or high single-digit systems hardware number, could you just give us a little insight on -- I mean, you could only gain so much share? And how much do you see as category growth? Obviously, a lot of these new AI use cases are a positive in there. So maybe if you could just decouple how much of this is actually share gain? And when do you start bumping up against the ceiling there and it has to really be more industry growth that's going to drive the performance in the systems hardware.
François Locoh-Donou
ExecutivesCooper can start. Chad may want to add on whether we see a ceiling on the competitive installed base.
Cooper Werner
ExecutivesYes. I think that the majority of the growth is coming from workload growth, new use cases, a lot of the dynamics we outlined that are really kind of expanding what we're doing for our customer base. And then augmenting that is -- or supplementing that is the continued kind of acceleration of the takeout opportunity. But we've had very strong success with competitive takeout motions over the last few years. So there is some of that already in our baseline. And we think that, that continues to expand over time. But we do think it's a large opportunity, and it's a long-tail opportunity. I mean a lot of these competitive bases are locked into multiyear type agreements. And so there's a lot of planning activity that we already have in sight. We're working with some of these companies that are looking to plan to migrate to F5 at the end of these terms. And there's also -- it's also akin to a land and expand motion. So typically, we get in with these customers, we do the design work with them. They roll us out into an initial segment of their environment. And then over time, there's the opportunity for us to continue to take out the rest of the infrastructure. So we think it's a nice element of the growth opportunity, and we think it's a long-term growth opportunity.
François Locoh-Donou
ExecutivesChad, do you want to...
Chad Whalen
ExecutivesYes, I think that's a really good capture. I mean, typically, when we get these competitive displacements, it's for a first part of the franchise, right, entity of the franchise. And the expansion beyond that is significant. And so we see quite a bit of runway left from a planning perspective, multiple years across competitors that we lined out along with Cooper was saying. So we have to sequence this against what they're doing for their obligations, right? Nobody wants to pay for duplicative solutions. And all of these things have been sequenced over time. And as they come up, we compete for them and find our success that way.
Simon Leopold
AnalystsSimon Leopold from Raymond James again. Considering the patterns we've seen on your free cash flow and your buybacks, what has been the Board's consideration and discussion about introducing a dividend? Has there been -- has it come up? Obviously, you haven't done so, but just wondering whether or not it's something that's been discussed and where the company stands on that.
Cooper Werner
ExecutivesYes. I mean -- so it's funny, we were just having a conversation about this. If you look at the impact from a dividend versus a buyback, at least with F5, where we've been growing our market over time, I think the impact for shareholders is much more attractive with the share repurchase program. You just get better leverage with an effectively executed share repurchase program. We also do like that there is flexibility. It gives us more flexibility over time as we think about use of cash. But we've been very committed to that 50% threshold, that is really kind of where we feel is the most effective way to return cash to shareholders through a share repurchase program.
Suzanne DuLong
ExecutivesQuestion, but I am relaying a question from Meta Marshall, who is unfortunately traveling today, can't be with us in person. She's asked, how do you size the data sovereignty opportunity in EMEA? And how do you see that developing outside EMEA?
François Locoh-Donou
ExecutivesChad, you want to start?
Chad Whalen
ExecutivesGo ahead.
François Locoh-Donou
ExecutivesWell, let me start with the part about sizing you may be better than, the part about how do we see it developing outside of EMEA. I mean, Chad mentioned there's some regulation that has happened in Europe. GDPR is one, DORA is another. NIS2 is another one. That has really forced all entities of relevance -- of national relevance in these countries, whether it's government entities or telcos or in the financial services to really drive this autonomy, this resilience, move things back on-prem or have true resilience between cloud and on-prem environment. In EMEA, that's happening. In Asia, we actually are starting to see more of it. In EMEA, we've seen it over the last 9 months. We now start to see that developing more in Asia, not in all countries in Asia, but in certain countries in Asia Pacific, Australia being one of them, Japan and other countries, India, where we see more of that digital sovereignty playing, and we think that's likely to accelerate over the last -- over the next 12 months. In terms of sizing the opportunity over time?
Chad Whalen
ExecutivesYes. So -- and I went ahead and I discussed that in my presentation today. Again, I would say this is not EMEA specific, right? We are seeing this in Asia Pac. You mentioned what's happening in Singapore, India, Japan and others. This is an overall trend in the industry period. And in terms of sizing it, we believe the collective opportunity is hundreds of millions. I think it was $600 million of incremental opportunity in the time period from calendar year '27 through '30. We're seeing the early adoption that started in EMEA, but that is translating beyond that. And I think one of the meta points of this just isn't digital sovereignty, right, in isolation. It's really about resiliency. And so customers have to have custody of their data. And it doesn't matter where they reside. They have to have custody of their data. And a lot of things when you look at the geopolitical situation, what's taking place with the conflict in Iran, that has changed the dynamics overnight in different parts of the world about what they're going to be doing with their assets and how they're addressing those assets. And so for us, the meta point is really resilience, and we're seeing that kind of the world over. Of course, it's easy to point to the governance that's taking place in EMEA and now the onset of new governance in APCJ.
François Locoh-Donou
ExecutivesThank you, Chad. We'll take one last question.
George Notter
AnalystsGeorge Notter again. I think you guys said last quarter that roughly half of the hardware installed base is still iSeries or maybe a little larger. Are you surprised that it's still this big at this point? I think you're only a few quarters away from going into software support. Also like with Mythos and all the security stuff going on in the world, it seems like customers will be more hesitant to continue to run these systems. I think, Cooper, you mentioned the refresh would continue into '27. But like any updated thoughts there?
François Locoh-Donou
ExecutivesWhy don't we break that into -- Cooper, do you want to talk about the installed base? And maybe, Kunal, you can say a word about the implications of Mythos for what we see customers doing in terms of runtime security and ADCs.
Cooper Werner
ExecutivesYes. So you're right. So we have 2 product families that were going end of software support. So the chassis-based product family, VIPRION, where we've hit end of software support, the majority of customers that were migrating on to newer offerings that have already taken those measures. But there's always been a long tail of the refresh motion even beyond end of software support dates. We'll still see that with VIPRION. iSeries is still more than half of that opportunity has yet to be refreshed still. We're about, I think, 3 quarters out from that end of software support date. So we're definitely seeing that motion pick up and accelerate. And that's why we said we expect this opportunity to be very strong through FY '27. I do think that there will be customers that wait until after that date. There always are. And it's really just a balance of how -- where customers perceive they have risk and what the risk tolerance is. But we -- the bigger story that we're seeing really is the growth that we're seeing alongside the refresh with the expansion opportunity. And so I think that's where we're most excited is when we're through this refresh opportunity, that base that then we can sell continued expansion against and sets up for the next refresh when we introduce the next generation, it's going to be a larger opportunity for us.
Kunal Anand
ExecutivesOn the larger point on Mythos, we at F5 are using a combination of advanced research and preview models to ensure that we can identify and remediate vulnerabilities inside our code base. We take security super seriously as an organization. This is a program that we've been executing on for some time in terms of leveraging AI to find problems and fix those issues. And so we're going to continue to support our customers that have our software and hardware platforms and those combinations that are under support. It's important for us that we obviously do that for them. And it's important for the industry to protect critical infrastructure. Now the other side of this as an opportunity that is emerging in the Mythos moment is security. Application security is so important for organizations. And what we didn't spend too much time talking about with AI-powered WAF was, we are seeing the attackers leverage extremely sophisticated techniques mostly generated from AI today to try and get around defense systems. And so the point I mentioned earlier around static defense is not being able to hold anymore is really true. And so there is a really interesting opportunity ahead of making our security software AI-powered for these organizations. And they would want to have a capability that can defend against these novel types of attacks that are out there. So today, AI-powered WAF, we recently introduced API security, API discovery for our BIG-IP customers as well because we have seen the rise of agents. We've started to see that type of traffic show up in organizations. And so we want to make sure that we are positioning these platforms with the ability to take on that traffic, disposition it and secure all of it.
François Locoh-Donou
ExecutivesThank you, Kunal. Suzanne?
Suzanne DuLong
ExecutivesWe are ready to wrap up, Francois. I don't know if you want to say a few closing remarks or if you'd like me to.
François Locoh-Donou
ExecutivesI would like you to.
Suzanne DuLong
ExecutivesWonderful. Thank you so much, everybody, for joining us. We really appreciate it. The slides and the webcast will be available on the website shortly. For those of you that don't have to rush off that are here with us in person, we'd love it if you join us in the reception area for some refreshments. Thanks so much.
For developers and AI pipelines
Programmatic access to F5, Inc. earnings transcripts and 32,000+ others is available through the
EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments,
full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.