WithSecure Oyj (WITH) Earnings Call Transcript & Summary

October 29, 2020

Nasdaq Helsinki FI Information Technology earnings 49 min

Earnings Call Speaker Segments

Henri Kiili

executive
#1

Hello, everyone, and welcome to F-Secure's Q3 results presentation. I'm Henri Kiili, responsible for Investor Relations at F-Secure. To start off, we will go through some practicalities. So first, our CEO, Samu Konttinen will give the presentation, after which we'll have a Q&A session. We'll first take the questions from the room, after which I'll read out loud the questions from the webcast bottle. Remember that you can submit the questions in the portal at any time throughout the presentation. But without further ado, Samu, the stage is yours.

Samu Konttinen;President, CEO & MD

executive
#2

Thank you, Henri, and welcome on my behalf as well. So looking at the F-Secure Q3 performance of 2020. So overall, we delivered very much according to our own expectations, some areas where we are very happy and some areas where there's room to improve, and I will walk through our results for Q3. So key takeaways definitely will be that we are very happy with the profitability. We delivered EBITDA margin of 20%. So we are extremely happy with that. On that note, so that definitely was supported in some areas with a lower activity levels because of COVID-19 pandemic. So we continue seeing obviously areas like traveling costs and some marketing events related costs being abnormally low, and that is helping with the profitability. But there are also normal operational factors impacting to a good profitability. As an example, the most profitable business area within F-Secure consumer security growing by 7%, which I will talk more in detail further on in the presentation. So that is one example that is helping with the good profitability now in Q3. On the corporate security products, so that area grew slightly. MDR, the big investment area for us continue growing very nice. I'll give some highlights from that business separately. Further on, endpoint security revenue-wise grew slightly, but there are a lot of positive momentum kind of behind the scenes in that line of business that we are reasonably happy with. Cybersecurity consulting revenue decreased by 8%, and this is definitely an area that continues being somewhat challenged with the pandemic and very significant regional variations. We continue seeing a very healthy or even fast growth in some countries, whereas in some countries with some clients, the circumstances are more challenging. The consumer security, definitely one of the highlights in this business -- in this quarter for F-Secure. So the 7% growth, I think, talks about also the potential in consumer securities that we see. And we issued a financial outlook for 2020 a couple of weeks ago, so we're not going to be changing that today as we go. And then a leadership change at F-Secure as I'm leaving the company. Actually, tomorrow is going to be my last day and Juhani Hintikka appointed as the new President and CEO starting on Monday. So here, recapping the numbers. So the revenue growth for the group, 1% compared to year ago, consumer security very good 7%, corporate security overall minus 3%. And again, now this corporate security includes all 3 B2B business areas, endpoint security, managed detection, and response and consulting, and that's the consulting that is dragging that number to a negative growth. Adjusted EBITDA and EBIT both a very significant improvement to a year ago and landing adjusted EBITDA of 20% and EBIT, 13% of revenue. So very good performance on that front. Cash flow from operations before financial items and taxes, almost EUR 8 million. So very happy with the cash flow as well, and I will talk a bit more about details on that item as well. So now looking at the corporate security. So I'm starting with the endpoint protection solution. So that's an area that is increasing revenue-wise slightly, excluding the effect from some discontinued products, and we discontinued those products from the beginning of this year. So we're going to be seeing a couple of percentage points impact because of the discontinued products also in Q4. But then going into 2021, the numbers should be fully comparable. The main positive there is that the growth of new orders clearly outpaced the revenue growth. And this is now, I believe, the third quarter in a row, all quarters in this year. So the orders have outpaced the revenue growth quite significantly. And furthermore, reflecting on the positives kind of the underlying momentum we see in this business and the sales performance is very good across all our main markets. It's very often that you have good things happening in some of your regions. And then in some other regions, you are solving some challenges. But currently, it looks that all are main markets in the Europe that would be Germany, France, Finland, U.K. and also Japan, which always traditionally has been a good market for F-Secure. So we are seeing a very steady, good improving performance across all these main markets. Renewables are staying on a very good level, which is kind of at the backbone of this business. And then one of the highlights is a deal that we published a while ago, cloud protection for Salesforce solution with Yahoo! in Japan. But there are many other great examples of cloud protection for Salesforce really having a good momentum. So just using Yahoo! there as one example. As in this industry, you very rarely get to talk about references so this is one nice exception, and therefore, we are raising that here. So good quarter there, and we will later on in the presentation see how this growth of new orders, especially on the multiyear deals where customers are committing not only for 1 year, but for 2 years, 3 years, sometimes even for 5 years, how that is also now yielding very positively in our noncurrent deferred revenue that in Q3, I believe, grew by 15%, but I will get back to that. So that is visible there. And then moving on to managed detection and response. So that line of business continue growing for us. We won several deals in Europe in health care, media, defense as some of the industry verticals to mention. But we still see that the pandemic is causing challenges in the sales and marketing operations and giving some additional color to that. So we saw previously before the pandemic that as an example for what comes to marketing mix, organizing events with customers kind of our customer briefings, talking about the threats, talking how to detect them, how to organize the cyber poster and how to conduct the incident response. These events as one example have worked really well for F-Secure for what comes to lead generation. And obviously, these events with customers, we have not been able to organize those during pandemic same times as before. World is definitely moving towards using video tools, collaboration using modern technologies. So we are doing a lot of that as well, but the impact is not yet -- I would say, the effectiveness of those marketing operations is not yet on the same levels as it was with the kind of old ways of working. But we see that we are gradually getting better and better grip how to conduct go-to-market actions in these changed circumstances. So we are quite positive with the future. New deals wise, this was the best quarter of the year. So very, very happy with that one. So we signed more new managed detection and response deals than at any previous quarter this year so far. And new renewals, we are, I would say, currently practically perfecting the renewables performance. So it could have not been any better than it was in Q3. So we're quite happy with the MDR, and the reason of saying quite is the fact that we still see that the pandemic is casting a bit of a challenge for sales and marketing operations. But we are getting there and improving our capabilities in this new environment. A little bit as a recap, looking at just the corporate security solutions. So looking at the offering we have. So we continue believing that this is the right business mix for us going forward. Having the capabilities for the pre-attacked predict states, having capabilities to prevent the attack and having the capabilities for the compromised situation for what comes to detecting and especially responding. And this responding is quickly now becoming, I would say, that the most seeked capability amongst our customers. So the customers are increasingly understanding that even if they would somehow be able to detect the attacks, but what happens after you detect it. Can you have the right countermeasures, the right response in place quickly. So that is an area that continues being very important for our clients and very strategic for F-Secure. And then I thought that I'll talk a bit more about the new cloud security solutions that we've taken to the market. So the cloud protection for Salesforce is something that we've been pushing for quite some time now, whereas the cloud protection for Microsoft O365 is something that we launched very recently. I'll -- there's a couple of examples about the cloud protection for Salesforce as we are seeing very good traction there, as an example, the case with Yahoo!, but I'll give some additional color how that solo scenario works. So in short, we are there protecting the content. We are not technically protecting the cloud environment. So we are not protecting the Salesforce platform per se, but we are protecting the content that goes through that platform. And examples could be that one of the biggest carmakers in the world is our customer there and how they use the Salesforce platform is that they have thousands of dealers who are selling their cars. So those dealers have access to the carmakers system through kind of an extranet solution. And that is -- that extranet solution is provided by Salesforce. So it's kind of, I think, collaboration cloud solution from Salesforce. And once you have partners accessing that solution, there's always a risk that some partners either by intent or accidentally would place some malicious content in the portal. And then once you are able to do that, there's a risk that, that would be impacting all other users of that extranet, all other car dealers and even the car manufacturers themselves. So we are providing that extra layer of protection. So we are scanning and securing all the content that goes into that portal. So that's one example. And very similar example is one of the biggest technology companies in the world is using Salesforce technology to collaborate with their customers, to collaborate with their resellers. And again, the use case is very similar. So their customers and resellers have access to the company system using this collaboration cloud. And again, we are making sure that no malicious content can be kind of put into that system, and we are scanning and protecting the content. So not technically protecting the technology, not protecting Salesforce, but protecting the content there. So very, very exciting area for F-Secure, and we currently don't see practically any other, in our opinion, credible cybersecurity company offering similar solutions. So we are cautiously excited about the opportunity, but I have to remind all of you that this is still very small in the bigger scheme of F-Secure, but the momentum looks very good. And then a little bit recapping on the F-Secure Countercept or MDR. So a little bit of the value delivery there. So helping customers to detect advanced persistent attacks, helping them with the response, analyzing malware, doing threat hunting. And then a couple of these items like improving security poster and threat research. And these 2 are areas what we have previously often categorized as peacetime value. And this is very important in this managed detection and response service as it's not that often that customers are going through an attack that we are detecting and then responding to that. So there is a lot of peacetime. And what we have focused quite a lot over the last few quarters is that how can we improve that peacetime value. So as we are scanning customer operations, we are looking for threats. We are doing threat hunting. We are learning more and more about customer IT environment. And then we are capable of giving customer an advice how should they improve their cyber resilience, how should they improve their cyber poster overall. And these are couple of examples what that peacetime value is all about. And why this peacetime value is also very important because through that successful peacetime value delivery, we are seeing how well it resonates with the customers and the financial impact, obviously, is a very strong renewal rates. So that is very, very important line there to keep in mind. Then moving on to cybersecurity consulting. So this area business decreased by 8%. And a couple of viewpoints there, too. About a year ago, we started to work on a very significant size project in the Nordics that we have not disclosed in more details. But similarly, as was the case already in Q2, this now continues in Q3 that this very significant project is coming to a finalization phase, meaning that the revenue coming from that project is clearly more than it was a year ago in the same period. Pandemic obviously has changed the way we operate. So practically all deliveries are done remotely. And we are very much innovating for new services and new delivery models. And we're actually quite happy how we see us taking the right steps there. And although you cannot be happy with the business performance if it's minus 8% compared to a year ago. But I think it's always also very important to understand that as cybersecurity consulting for us is predominantly project business, there are some continuous services like incident response retainers that has the recurring revenue flavor to it. But predominantly, this is project business. And in the project business, as you don't have the recurring revenue business model, so sometimes the more important comparison point is the previous quarter than the same quarter a year ago. And now through that lens, we see that Q3 was significantly better than Q2. And our outlook for Q4 is also kind of a same flavor. So we see that this business is improving. So definitely moving to a right direction, but at the same note, have to be very clear that the pandemic situation is living. It's changing with definitely cast a shadow on the short-term predictability of the business. So the visibility on the business performance doesn't currently go as well beyond next couple of months as one would hope. But if I just analyze Q3, so Q3 was a clear improvement from Q2 and through that lens, we are rather optimistic about the future. Long term, this continues being a very attractive area for profitable growth. And the world is increasingly digitalizing. Pandemic is impacting to that digitalization trend positively. And that's one of the main drivers that is then kind of helping cybersecurity consulting companies and creates demand for cyber assurance as companies are digitalizing their business models and their services. And a few more kind of viewpoints on the consulting. So we continue working on global customers with critical data, customers who don't want to take any chances with their cybersecurity. So there is just a handful of examples of cases that we delivered in Q3. And these examples, I think, are very important. So although we see that the pandemic is impacting negatively to this business. But a lot is still happening. So we are delivering red teaming assignment for customers. We are doing telematics audit for automotive industry. We are working with some of the largest aviation companies, which is quite interesting, although you would thought that the aviation companies are not having the cyber topics top of mind for them currently, but a lot of things are happening there in the IoT and mobile security, doing targeted attack simulation. So a lot of activity. So we continue liking this business also for the fact that it gives us that frontline exposure to attacks and that insight we are capable of delivering to the detection and response technology capability. So there is that kind of a know-how synergy that we see very important between these 2 business areas. Then moving on to consumer security. So very happy with the 7% growth. Have to remind there a notion that this 7% growth was helped slightly with some positive one-offs. But even if we are excluding those one-offs, which are not part of the kind of a normalized run rate pace of the business. This business is still growing faster, that's growing for many years for F-Secure. And I think it talks about the potential and the resilience of the operator channel specifically. The growth currently comes almost entirely from the established solutions like F-Secure SAFE that is sold increasingly together with F-Secure KEY kind of creating a bundle of internet security and password manager. And also in the F-Secure direct business, we are even throwing F-Secure FREEDOME into the mix that's creating the F-Secure TOTAL package. So the growth is predominantly coming from subscription growth of the -- from the established solutions. And then these newer solutions that we are very excited about F-Secure SENSE and ID projects, and they don't yet contribute much to the revenue. And we don't believe that in the short term, the impact will be very significant from these new solutions. But they are future growth opportunities and future bets that we continue being very excited about. But short-term impact, you should not expect too much of them. And I think in the identity protection. So looking at the strength we have with our operators, channel partnering with roughly 200 operator channels partners. So the reception from the operator partners for our ID protection has been very positive. So it's a double-digit volume of operator deals that we have already for ID protection. So that channel is responding to that very well. It will take some time before they get to productize it and to launch for their consumer customers, but the first critical step to get the channel excited and about the solo. So that is clearly happening. And then I guess, we wanted to share a little bit about the router security. We've been talking about that quite a long time. So we still see that the consumers are very much worrying about the overall security and privacy of all the household digital devices. And placing that protection layer to the router, it helps you or enables you practically to reach the entire user base of the operator. So the take-up volumes can be very significantly higher than with the endpoint solutions. If we are looking at our top 40 operator partners, so more than half of them are currently engaged in router security discussions. So we see that the operator channel is starting to awaken for this opportunity more than before. And we believe that this has a good possibility to deliver increasing average revenue per user. Then on the challenging side, what is causing some delays is that there is a great diversity of router model. So whenever we place our software to that router, very often different operators, they are cooperating with different router manufacturers. So that prolongs the sales and delivery cycles. And also, very often the operators are seeing the router as part of their network. And once it's part of their network, it's a very critical area for them, which makes practically the contract negotiations for what comes to warranties and liabilities often very long. So you have these 2 factors of the long contract negotiations and the diversity of router models that is kind of making this business to move a little bit slower than what we would want. But we continue liking this opportunity, and we think that it fits to the F-Secure overall portfolio in our consumer business very, very nicely. Then a few words about the financial performance in the profitability lens. So as mentioned earlier, 20% adjusted EBITDA, very happy with that one. And partially helped with the lower activity because of COVID-19, but also because of scalable and high leveraging consumer security business. Looking forward, we believe that the marketing and R&D costs are starting to increase towards the end of the year as we are becoming more and more confident that the COVID currently doesn't impact our product business much at all. So the only area where we really see COVID impacting clear and negatively is consulting. And in other business areas, we don't see any reason that we should be extra cautious with cost and with new investments. So through that lens, we are starting to look this more as a normalized circumstances rather than something extraordinary where you want to be extra careful with cost. And then this is something that we talked about earlier. So how the deferred revenue graphs are looking. And here, I think on the -- on your right-hand side, you see the noncurrent and current deferred revenue growth graphs. So the current is the deferred revenue of 12 months, and the noncurrent is a deferred revenue of more than 12 months. And here, you practically see the strong order intake growth that we have had in the endpoint security and also in MDR that is not going through in revenue immediately. And here you see that this year from Q1 onwards, we have seen 10%, 5% and 15% growth in long-term deferred revenue. So that talks about the strength of the business model and how we are definitely laying a very solid foundation for years to come, although revenue is not recognized immediately. And perhaps one last point to make about the deferred revenue. So we also see an increasing demand from our corporate customers moving into monthly subscriptions. And obviously, this is kind of a tender counter force. As customers are moving to monthly subscription, there's no deferred revenue at all whatsoever. But overall, I think looking at this current and especially the noncurrent deferred revenue is practically the financial evidence of the good performance in the orders in endpoint security, especially also in MDR as in that line of business, we are very often signing customers for more than a year. We are very often signing them for 2 years or 3 years. And then looking at the cash flow. So definitely a very, very good quarter there. So cash flow from our operating activities EUR 7.9 million, a very clear improvement from the same quarter a year ago and helped by many things. So helped with the strong orders as most of the cases, not always, but most of the cases, customers are paying upfront the multiyear deal. So that helps with the cash flow, but also looking at the trade and other receivables. So our debt collection is going pretty nicely there, so receivables collection. So helping also with the cash flow. So very solid financial performance from a cash flow perspective. Finishing on with the outlook that we are not changing today as we issued the outlook only a couple of weeks ago. So going to questions now.

Matti Riikonen

analyst
#3

It's Matti Riikonen, Carnegie. A couple of questions. First, regarding EPP, you said that orders have been growing faster than revenue. But has the guide of annual revenue recognition of these orders also increased? Or is it just that the time for the orders extends to a longer period, but it doesn't increase the annual revenue?

Samu Konttinen;President, CEO & MD

executive
#4

A lot of that fast orders growth come from multiyear deals, which we see is very positive. So although we have been quite vocal that we believed us having quite good renewables performance, but renewables performance is not -- never ever 100%. So especially in the endpoint security business, which is small and medium-sized companies, mid-market and below. So the deal volumes are very significant. So we have -- number of customers is not hundreds, but it's thousands or tens of thousands. And through that volume, if you make more than ever before multiyear deals, it practically secures you 100% renewing rate in practice for upcoming years. So that is the biggest driver we see customers increasingly committing for longer periods of time. And that is driving orders, less so short-term revenue, but it gives the financial stability and also talks about the customers' kind of a trust to F-Secure. And I think another point why we like this trend quite a bit is the fact that today, our portfolio starts to have more ammunition than perhaps 3, 4 years ago. It's not just the endpoint production. We have detection and response technology. We have radar, the vulnerability management. We are adding these cloud protection stuff. So as we are locking the customers for multiyear deals that gives a very good cross-sell opportunity to the existing customer, as you have the relationship kind of guaranteed for 3 years. So there is many reasons to continue visiting that customer. So there's a lot of things that we like in this business, but short-term revenue impact as we see, it's very modest.

Matti Riikonen

analyst
#5

Okay. Then secondly, you didn't talk much about EDR. You have said earlier that EDR is sold together with EPP offering, so basically difficult to separate. But how would you see that the EDR contribution to the EPP sales, is it still kind of positive compared to your own expectations and it's supporting the EPP sales?

Samu Konttinen;President, CEO & MD

executive
#6

Good question. And absolutely, yes. So we see EDR increasingly an integral part of the whole portfolio. And as we have explained earlier, so we see more and more customers looking to buy both EPP and EDR solution from the same source. And this trend is definitely there. And we don't foresee that trend to go away. The main positive from the EDR for us is we see a very clear price premium. So when a customer goes and buys EDR, together with EPP, the price point of that combo package is significantly higher than EPP alone. So that's definitely a positive. And perhaps your second question is that if we would somehow, I would say, partially artificially try to isolate the EDR performance from the EPP, EDR combo. Just looking at the EDR alone, so that is going slightly better than what we planned ourselves. So we believe that it's tracking nicely, but it's more part of the suite rather than an independent stand-alone solution.

Matti Riikonen

analyst
#7

Okay. Then in the consulting business, you have mentioned earlier that the large contract that is ending or remains of the contract are still generating some revenue. But if we kind of exclude that big contract also on the comparable numbers, how is your consulting business faring revenue-wise?

Samu Konttinen;President, CEO & MD

executive
#8

It still would be slightly declining. So point is it would be declining, but not as much as it's declining with that reported minus 8%.

Matti Riikonen

analyst
#9

Okay. And then finally, you mentioned in the report that there was some positive element in the consumer business growth, which is nonrecurring or one-off. Could you give a rough idea how much that contributed to the fairly good 7% growth?

Samu Konttinen;President, CEO & MD

executive
#10

It's perhaps in the ballpark of few percentages. So we are not talking about many percentage points. So a few and few perhaps is less than 3 in this case.

Atte Riikola

analyst
#11

Atte Riikola from Inderes. You have seen quite impressive profitability improvement during the last few quarters. Could you give us any ballpark how much do you have to sacrifice that profitability when you are trying to get back on the growth track in corporate security in the next quarters?

Samu Konttinen;President, CEO & MD

executive
#12

It's a good question. So how we see is that, as I explained, so definitely, partially, the good profitability in the last 2 quarters is helped because of some of the lower activity levels due to pandemic. But then if you try to model how that outlook will be going forward. So most probably, some of the lower activity levels because of pandemic will continue being the case also of Q4, Q1, Q2, as an example, traveling. So us carrying operations in almost 30 countries around the world. So that type of our organization generates easily quite much traveling cost. And I think that is a good example that we don't believe that the traveling cost will be returning to a normalized level anytime soon. So it's almost that, to some extent, you can start taking that as a new normal. So I don't see that it's a sacrifice then you have to make because we currently see that the business is tracking quite nicely even if you can't travel. So I think that's there. The other point that you are perhaps referring to is that what I tried to little bit explain is that when the pandemic started, there was no way any of us really knowing what the impact in our industry would be. The general line of thought always was that we believe that our industry is very resilient. We feared that it would impact consulting negatively as we see this happen. But we felt that most probably, the scalable software business is very resilient. But we didn't know. And because of that, on certain cost items, we were somewhat cautious not to place future growth driving investments as aggressively as we planned. And now as we see that there's no reason for us to fear about the resilience of the vast majority of F-Secure business, we are gradually starting to return to normalized cost levels in many areas, and many areas obviously exclude things like traveling. We're not going to be starting to travel, and we don't think that the saved money from traveling should now be invested into some other activity. So I think that is causing not only a short term, but perhaps a midterm profitability improvement. And I believe that the third area definitely is that everybody is more and more learning how to live with the pandemic and then you start to also normalize your marketing activities and stuff like that. So world is changing and the comparable EBITDA number from a year ago, it's very difficult to say precisely how much of that is because of pandemic changes versus how much is there to stay. I believe traveling is a good example. So I think it's not only us, but many other companies as well who believe that maybe the business can run quite nicely with less traveling.

Atte Riikola

analyst
#13

All right. And next question about the MDR sales. You have said that the pandemic is affecting them. So have you been able to develop the remote sales models during the peak...

Samu Konttinen;President, CEO & MD

executive
#14

Yes, so I think it's a good question, and it really is a mixed bag. So we are getting signals that the sales teams are struggling that how you establish and build new customer relationships as there's not old-fashioned ways of meeting and handshaking and building that relationship and report. You somehow have to do all of that remotely. So people are struggling and the customers are also a little bit like, I would say, trying to find their own new way of buying solutions like this. So everybody is like learning. But then on the other hand, on the positives that I mentioned. So in Q3, we landed more MDR deals volume-wise than ever before. So it's a big mix bag. I think we are learning. I think we are feeling that it's slowing us down, but at the same time, the business is improving as we wanted it to improve. Our outlook for MDR for this year was definitely that the growth would clearly accelerate. And we are -- the growth is accelerating, but we wanted it to accelerate more, and we believe that it is growing less because of pandemic, but it's growing.

Henri Kiili

executive
#15

All right. Next, we'll have questions from the portal. So first, we have Mr. Olli Eloranta from Danske Bank, and he has a question. Do you expect or have already seen any tailwind from the Vastaamo data bridge in your Finnish operations?

Samu Konttinen;President, CEO & MD

executive
#16

I think the Vastaamo case is a good example how critical cyber is becoming, and we are definitely seeing that the customers are more and more now looking into their systems and asking questions that could this be happening for us? So I think it will create positive momentum for us as well.

Henri Kiili

executive
#17

All right.

Samu Konttinen;President, CEO & MD

executive
#18

Difficult to say how quickly and at what magnitude that will materialize, say, short term. But it's a good example that the awareness for need for cyber capabilities is now becoming more and more talk of today for more and more organizations than ever before.

Henri Kiili

executive
#19

So definitely has raised awareness. Next one from Olli Eloranta also. You discussed that you will increase your marketing spending from Q4 onwards. Do you expect sales and marketing costs relative to revenues to return to pre-COVID-19 levels?

Samu Konttinen;President, CEO & MD

executive
#20

It little bit depends -- I think we are not quite sure yet what the right cost, what the rightsized cost level in the pandemic times would be. But I guess the main sentiment is that we are not looking the marketing spend and sales cost perhaps as cautiously going forward as we wanted to take a very cautious view when the pandemic starts. The other, I would say, a very relevant comment to this question is and which, a little bit, elaborates the profitability also is that when we started this year, no pandemic. If you look at the F-Secure market guidance, our plan was to clearly improve profitability. So that line of thought has not disappeared. We believe that our business has leveraged and vast majority of our business is scalable and through volume, the business should deliver better profitability.

Henri Kiili

executive
#21

All right. Next up, we have Jaakko Tyrväinen from SEB. Regarding the growth in noncurrent deferred revenue, should we take that as an indicator for the future MDR growth rate?

Samu Konttinen;President, CEO & MD

executive
#22

No, because that the deferred revenue and the noncurrent deferred revenue that I showed in the slide where growth in Q3 was 15%, that is a combination of MDR and endpoint protection. So that is not an MDR deferred revenue. That is a deferred revenue of MDR and EPP business predominantly. But I think you can get an idea on the scalable corporate security business. So that gives you an idea that the orders are growing faster than revenue.

Henri Kiili

executive
#23

Yes, definitely. What is your understanding of the market growth currently in corporate EPP and MDR markets?

Samu Konttinen;President, CEO & MD

executive
#24

We believe that the EPP market now looking at the EPP suite, which is the case for us, similarly as with most of the competitors where you combine EDR and some other components, we believe that the market growth perhaps being single digits, but perhaps not low single digit anymore. I think that the market growth has a little bit accelerated over the last few quarters. So maybe the market growth is in the 5% to 8% growth, definitely not double digits but not low single-digit either. MDR market growth is very hard to estimate, given that there are so many different actors who approach MDR definitely. You have MSSPs who somehow claim that they can include MDR in the MSSP service and many other variations like that. So it's very difficult to carve out an MDR market exactly how we operate it. But our best stab at that question perhaps is that the market growth should be around 20%.

Henri Kiili

executive
#25

Yes. I guess this one relates to EPP and MDR both. So new sales has been negatively impacted by COVID. Do you see pent-up demand once the situation eases and in which service areas?

Samu Konttinen;President, CEO & MD

executive
#26

We see probably that endpoint protection -- as we commented that we were quite happy with the sales momentum in EPP space, so we don't think that the COVID has impacted endpoint protection sales much. So on that front and also market-wise, it is a very mature market. There is very rarely kind of greenfield sales. It -- mostly it is a replacement game. So I don't believe that in that front, we have much at all pent-up demand. MDR space, we see that customers are sometimes now taking longer time to decide to figure out what sort of cybersecurity budgets they should have now in these new circumstances for them. So there are probably some pent-up demand, but in cybersecurity consulting, which was not part of the question, but we believe that on that front, there could be significant pent-up demand, but jury is still out there. It's difficult to say. We just see much more that our clients are postponing the projects and the sentiment. The discussions are much more about postponing the projects rather than we shouldn't do them ever. So we believe that in cyber security consulting, there easily could be quite some pent-up demand coming down.

Henri Kiili

executive
#27

Thanks for the thorough answer. I guess that's it for the questions this time. So finally, Samu, on behalf of all fellows, thank you, and all the best.

Samu Konttinen;President, CEO & MD

executive
#28

Thank you, Henri, and thanks, everybody. Bye-bye.

For developers and AI pipelines

Programmatic access to WithSecure Oyj earnings transcripts and 32,000+ others is available through the EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments, full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.