Rapid7, Inc. (RPD) Q4 2022 Earnings Call Transcript

Rapid7, Inc. (NASDAQ:RPD) Q4 2022 Earnings Conference Call February 8, 2023 4:30 PM ET

Company Participants

Sunil Shah – Vice President, Investor Relations

Corey Thomas – Chief Executive Officer

Tim Adams – Chief Financial Officer

Conference Call Participants

Saket Kalia – Barclays

Rob Owens – Piper Sandler

Hamza Fodderwala – Morgan Stanley

Fatima Boolani – Citi

Joel Fishbein – Truist Securities

Adam Tindle – Raymond James

Gregg Moskowitz – Mizuho

Jonathan Ho – William Blair

Brian Essex – JPMorgan

Gray Powell – BTIG

Rudy Kessinger – D.A. Davidson

Robert Galvin – Stifle

Matt Hedberg – RBC Capital Markets

Joshua Tilton – Wolfe Research

Operator

Welcome everyone to the Rapid7 Q4 2022 Earnings Call. Today’s conference is being recorded. All lines have been placed on mute to prevent any background noise. After the speakers’ remarks, there will be a question-and-answer session. [Operator Instructions]

Sunil Shah, Vice President, Investor Relations, you may begin your conference.

Sunil Shah

Thank you, operator, and good afternoon, everyone. We appreciate you joining us today to discuss Rapid7’s fourth quarter and full year 2022 financial and operating results in addition to our financial outlook for the first quarter and full fiscal year 2023. With me on the call today are Corey Thomas, our CEO; and Tim Adams, our CFO. We have distributed our earnings press release over the wire and is now posted on our website at investors.rapid7.com, along with the updated company presentation and financial metrics file. This call is being broadcast live via webcast, and following the call, an audio replay will be available at investors.rapid7.com.

During this call, we may make statements related to our business that are considered forward-looking under federal securities laws. These statements are made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995 and include statements related to the company’s positioning, strategy, business plans and financial guidance for the first quarter and full year 2023 and the assumptions underlying such goals and guidance.

These forward-looking statements are based on our current expectations and beliefs and on information currently available to us. Actual outcomes and results may differ materially from the future results expressed or implied in these statements due to a number of risks and uncertainties, including those contained in our most recent quarterly report on Form 10-Q filed on November 3, 2022, and in the subsequent reports that we filed with the SEC. The information provided on this conference call should be considered in light of such risks. Actual results and the timing of certain events may differ materially from the results or timing predicted or implied by such forward-looking statements, and reported results should not be considered as an indication of future performance.

Rapid7 does not assume any obligation to update the information presented on this conference call, except to the extent required by applicable law. Our commentary today will be primarily in non-GAAP terms and reconciliations between our historical GAAP and non-GAAP results and guidance can be found in today’s earnings press release and on our website at investors.rapid7.com. At times in our prepared remarks or in response to your questions, we may offer incremental metrics to provide greater insight into the dynamics of our business or quarterly results. Please be advised that this additional detail may be one-time in nature, and we may or may not update these metrics in the future.

With that, I’d like to turn the call over to our CEO, Corey Thomas. Corey?

Corey Thomas

Thank you, Sunil, and good afternoon, everyone, on today’s call. Thank you for joining us. Rapid7 finished 2022 with $714 million in ARR, consistent with our expectations, or 19% over the prior year. Revenue exceeded our expectations, and we delivered better-than-expected operating profit and free cash flow as we continue to drive operational efficiencies in our business. ASP and ARR per customer continued to rise during Q4 as customers are using more of the Insight platform, reflecting Rapid7’s growing value as a platform consolidator. And while it’s still early days for our new platform consolidation offerings, the early results are positive. Over 10% of new ARR in the fourth quarter was generated either by threat complete or cloud risk complete consolidation offering. We are pleased with the early traction we’re seeing in key areas of our business as we look to improve execution, even as certain economic headwinds escalated during the fourth quarter.

Consistent with the range of scenarios embedded in our outlook, we saw greater economic pressure during the fourth quarter in our mid-market segment, which represents roughly half of our total ARR. The net result was that positive traction in key parts of our business was offset by macro dynamics bringing us to the midpoint of our ARR outlook to end the year. A few comments on the current spending environment. Customers continue to face an evolving and complex threat landscape and there remains broad-based executive and board level support for cybersecurity projects. Despite this fundamental demand, the ability to obtain incremental budgets for these projects has gotten more difficult in the current environment.

As a result, CISOs are being forced to scrutinize and prioritize our budgets, driving longer deal cycles and more uncertainty around deal timing as contracts take longer to push through procurement. This dynamic is exacerbated by the increasing size of our deal opportunities as we gain traction as a platform consolidator. Despite a challenge budget environment, we’re seeing certain tailwinds gain traction. Constrained security budgets are accelerating customers’ focus on security vendor consolidation with greater value being placed on the efficiency and impact of integrated platform technology in a fragmented IT landscape.

We are seeing solid engagement with enterprise customers as they look to consolidate vendors and gain better security outcomes from their budget dollars. Our Insight platform is positioned to benefit from this shift while empowering security teams to more effectively and efficiently manage the expanding scope of their security operations. Rapid7 is resonating with security teams looking to manage and consolidate their vendors. As CISOs and security practitioners evaluate our SecOps stack, Rapid7’s platform stands out for a few important reasons.

We have built the breadth of critical capabilities on our platform that customers require to run a best-in-class security operations program. These capabilities are deeply integrated to deliver a highly productive automation-centric platform and experience. And our platform is built for security practitioners by security practitioners, further enabling us to offer on-demand security expertise as part of our direct and partner managed offerings to help customers scale their security operations efficiently and effectively. The breadth and value of our Insight platform is illustrated by an $800,000 deal during the fourth quarter with a high-growth software company. This existing customer had a small VM footprint, and was going through an RFP to replace their existing detection and response solution, with a mandate to gain visibility into their expansive cloud environment.

Rapid7 stood out during the technical evaluation as one of a few partners who could address their comprehensive set of use cases. As part of the deal, the customer standardized on Rapid7 SecOps platform by consolidating VM and D&R through our threat complete offering while adding cloud security, automation and threat intelligence. In addition to offering a compelling platform technology, Rapid7’s new threat complete and cloud risk complete consolidation offerings are refining how our sales force goes to market. These solutions lean into vendor consolidation as well as the prioritization of security budgets around critical spending areas that include detection and response and cloud security.

As a reminder, our threat complete enables customers to consolidate our best-of-breed expert-driven threat detection and response solution, along with unlimited coverage of our market-leading VM through a single subscription offering. And cloud risk complete is our cloud-centered risk visibility offering, which consolidates unlimited visibility across customers, on-prem, cloud and external environment at various stages of transition to the cloud. It enables use of cloud and application security with unlimited VM coverage together in one platform subscription. These solutions are part of the realignment of our sales strategy and an important step in advancing our platform selling motion.

The strong value proposition of Rapid7’s leading platform technology and compelling new go-to-market offering are evident in a multiyear seven-figure deal with a Fortune 500 manufacturing company in the fourth quarter. As an existing vulnerability management customer, we knew their security team was looking for a better way to manage, detect and respond to threats across the organization. After a robust and competitive process, our managed threat complete offering was chosen to replace their existing SIEM solution and managed service provider based on the quality of both our technology and the support that we can offer around it.

Their decision was reinforced by the compelling economic value of consolidating multiple features across our platform and speaks to the early traction we’re seeing in the market for our new consolidation offers. As we look to build upon this early traction, we’re cognizant of the need to balance our execution optimism with the current macroeconomic and budgetary headwinds as we frame our forward outlook for 2023. Tim will discuss these dynamics in greater detail. But at a high level, I will point to three critical areas of focus that I expect will have the largest impact on our performance this year.

The first two are under our control and related to the executional challenges we spoke about on the last call. The introduction of our risk and threat complete consolidation offerings and the training enablement of our sales force as they master a platform selling motion. We see positive early traction in these areas exiting 2022 and we believe we remain on track to see improvements to support growth in the second half of 2023. The third key area is the broader macroeconomic environment. Looking ahead, we expect a continuation of the customer budget pressure we saw in the fourth quarter and are incrementally more cautious in the near term on the mid-market customer segment, which slowed as we exited 2022.

We assume moderate ongoing deterioration in this segment as we entered the year and have accounted for elongated sales cycles and large deal timing uncertainty, particularly as we begin to drive more growth from our platform consolidation offerings. All in all, we’re taking a prudent view of our full year outlook to account for a more uncertain economic backdrop. With that said, we remain confident in the mid to long term sustainable growth profile of our business while acknowledging the time line for reacceleration will depend on the severity and duration of the macroeconomic pressure we’re currently seeing.

And lastly, I want to reinforce our commitment to scaling profitably by executing against our margin expansion targets for this year. This is a dedicated focus area for me as we look to drive continued operational efficiency and increased rigor around how we invest for growth. The work we’re doing to make our business more efficient will support our commitment to profitability, both in the current environment and as the economy recovers. Our strong focus on cost optimization across the business gives us confidence in meeting a 300 basis point operating margin expansion target while doubling free cash flow this year.

With that, thank you for joining us on the call today. I will now turn the call over to our CFO, Tim Adams, to share additional detail on our financial results and outlook. Tim?

Tim Adams

Thank you, Corey, and good afternoon, everyone, and thank you for joining us on the call today. Before I turn to the results, a quick reminder that except for revenue, all financial results we will discuss today are non-GAAP financial measures, unless otherwise stated. Additionally, reconciliations between our GAAP and non-GAAP results can be found in our earnings press release. Rapid7 ended the year with ARR of $714 million, growing 19% year-over-year. Growth was led by our detection and response in cloud security solutions, areas where customers continue to prioritize projects despite navigating a more difficult budget environment.

As Corey mentioned earlier, we saw growth moderate within our mid-market customer segment in the fourth quarter as these customers navigate more on certain macroeconomic picture. This drove a moderation in new ARR bookings in this segment alongside a modest headwind to retention rates in international markets. We continue to see a mix of growth coming from both new and existing customers with a growing bias towards existing customers in this environment. Our customer base grew 6% year-over-year to end 2022 with over 10,900 customers globally.

ARR per customer grew 12% over the prior year to $65,400 at year-end as customers continue to expand and use more of our Insight platform. Full year revenue of $685 million grew 28% over the prior year and exceeded the high end of our guidance range. Product revenue grew 29% over the prior year to $648 million. Our commitment to profitable growth was evident in our results, which exceeded our outlook on all of our profitability metrics. In 2022, we made a number of critical company-wide improvements on how we manage spending decisions, including more robust ROI analysis and shared financial accountability throughout the organization. These actions and process improvements were priorities when I joined the company a year ago, and we increased this focus as the macroeconomic environment shifted in the second half of the year. All in all, we drove $30 million of operating income in 2022, which represents margin expansion of 300 basis points and is consistent with our stated profitability framework and we generated $41 million of free cash flow.

Now turning to our fourth quarter results. Total Q4 revenue of $184 million was up 22% over the prior year and above the high end of our guidance. Product revenue grew 22% year-over-year to $173 million. Our international revenue grew 25% and represented 21% of total revenue for the fourth quarter, while North America revenue grew 21% over the prior year and represented 79% of total revenue. Product gross margin was 77% in the quarter, higher than the prior year as we continue to drive scale efficiencies. Total gross margin for the quarter was 74% near the high end of our range of expectations. We continue to expect product gross margin to trend in the mid-70s and overall gross margin to be in the low 70s.

We managed operating expenses closely in the fourth quarter as we executed against our profitability framework. Sales and marketing expense grew 4% year-over-year and represented 38% of revenue, down from 44% in the prior year. R&D expense was slightly lower than the prior year and represented 18% of revenue, down from 22% while G&A represented 8% of revenue, roughly in line with the prior year. Fourth quarter operating income of $19 million was better than our guidance. Our adjusted EBITDA was $25 million in the quarter and net income per share was $0.35.

Moving to our balance sheet and cash flow. We ended the year with cash, cash equivalents and investments of $301 million compared to $268 million at the end of Q3 2022. We delivered better-than-expected fourth quarter cash from operations on higher operating profitability, which drove $28 million of free cash flow for the quarter. This brings us to our guidance for this year. As Corey shared, the three largest drivers of our ARR growth performance this year will be related to traction on executional improvement, both in terms of better sales enablement and success around consolidation offerings as well as how the broader macroeconomic environment impacts customer buying behavior.

Our guidance range reflects a modest level of deterioration from current levels, particularly in the mid-market, and we are not assuming any macroeconomic improvement in the back half of this year, although we do expect to see continued executional improvements by then. Given the dynamic macroeconomic backdrop this year, we don’t anticipate updating our ARR outlook until we see stabilizing trends in the spending environment.

With that in mind, for the full year 2023 we expect ending total ARR of $815 million to $825 million, which represents growth of 14% to 16%. This range implies a net new ARR decline for the year, which we believe is appropriately cautious given the current macroeconomic trends and the limited visibility into 2023 customer budget dynamics at this stage in the year.

As part of the macroeconomic deterioration embedded in our full year ARR outlook, we continue to see customers going through a Q1 budget setting process that is more tentative than in prior years. As such, while we do not typically guide to quarterly ARR targets in this unique environment, we believe it’s appropriate to share directional context for Q1. Specifically, as customers reconcile their spending plans, we anticipate a more muted net new ARR in Q1, driving ARR growth in the range of approximately 16% year-over-year, with the expectation that we will begin to see stabilization in our net new ARR performance in Q2 as customer budgets settle with steady improvement through the second half of the year as our execution improvements take hold.

We expect total revenue for the full year to be in the range of $771 million to $778 million, representing growth of 13% to 14% with high single-digit growth contribution from professional services revenue. On profitability measures, we anticipate operating income to be in the range of $57 million to $62 million for the full year, which implies operating margin expansion of 300 basis points or greater. We expect net income per share in the range of $0.81 to $0.88 based on an estimated 67.4 million diluted weighted average shares outstanding.

For full year 2023, we expect to double free cash flow generating approximately $80 million from expanding operating cash flow as well as lower capital expenditures. This represents at least 400 basis points of free cash flow margin expansion. In terms of free cash flow seasonality, we expect negative cash flow in the first quarter as the number of cash expenses are concentrated early in the year, including FY 2022 bonus payments and timing of tax payments and capital expenditures. We would then anticipate a notable ramp in free cash flow in the second quarter with continued improvement through the balance of the year.

Moving to quarterly guidance. For the first quarter of 2023, we expect total revenue in the range of $180 million to $182 million, representing year-over-year growth of 14% to 16%. We expect non-GAAP operating income in the first quarter in the range of $5 million to $7 million and non-GAAP net income per share of $0.07 to $0.10, which is based on 66.4 million diluted weighted average shares outstanding.

We are firmly focused on driving growth as the vendor of choice for security operations and enterprise-wide risk visibility and analytics supporting both on-prem and cloud environments. As we navigate uncertainty around the current spending environment, our strategy is supported by our commitment to providing a strong value proposition for customers as a platform consolidator, refining our go-to-market motion and improving sales productivity and driving durable growth and margin expansion consistent with our profitability framework.

Thank you for taking the time to join us on the call today. And with that, we will open the call for questions. Operator?

Question-and-Answer Session

Operator

Thank you. [Operator Instructions] We’ll take our first question from Saket Kalia with Barclays. Your line is open.

Saket Kalia

Okay. Great. Hey guys. Thanks for taking my question here. Corey, maybe just to get a housekeeping question out of the way, just given it’s topical, and I expect it’s a tough question to answer, but I want to make sure it’s asked in an open forum. Is there any comment that you’d like to make just in the reports that Rapid7 has hired advisers to explore sort of options down the road?

Corey Thomas

Well, thanks, Saket. Well, first and foremost, we have a pretty massive opportunity in front of us, and we’re executing well against this. In that context, it’s not a shocker that people will talk about us, because we have both a good opportunity, and we’re well positioned to actually capture that opportunity in the broader market. That said, we just have a policy [Audio Gap] on numerous speculation and we’re going to continue that.

Saket Kalia

Absolutely. If you’ll allow me a business question here, Corey, for you. I’d love, if you could talk about the couple of bundles that you mentioned in the call, threat complete and threat risk complete, particularly how the pricing there for the vulnerability management part works, and how that might be a differentiator?

Corey Thomas

Yes. Look, what we found is that, especially in this environment, customers are really looking to how they actually do two things, one, how they improve their security and secure not just their past environment, but their increasingly strategic cloud assets. And that’s two core components. One, they have to manage the risk profile and visibility of that environment, and they actually have to be able to monitor and stop and detect attacks in their environment. Our strategy is pretty straightforward. As we are taking a cloud-first because that’s what strategic assets are as we go forward, and a holistic risk view and a holistic threat view of the environment.

In that context, vulnerability management is strategic. We have people working on that. We have teams who are dedicated to it. But it is a feature and component of our platform. We are a SecOps cloud-first company that actually offer vulnerability management as a part of our platform that allows people to have the visibility that they need to manage our overall security. As part of that overall strategy, it is just a part of our offering is included in the price point. By the way, as you saw from the early deal momentum, the price points are larger, the deals are larger, and we’re succeeding in our consolidation strategy.

Operator

Next, we’ll go to Rob Owens with Piper Sandler. Your line is now open.

Rob Owens

Saket [indiscernible] sneaking two questions in. So, I’ll see what I can do to ask one, but really ask two. Wanted to touch on churn in the current environment. And I guess, what you guys are seeing from both the customer perspective, and you talked about some weakness in the mid-market. But I guess also within your own employee base, if you will, kind of where you’re at? What your thought process is moving forward in terms of hiring? Thanks.

Corey Thomas

Yes. I’ll take that. First on the employees, we’re actually seeing very good – after a couple of years of a very tight market. The labor market is still tight, but we’re seeing our employees double down and focus on our customers, and we retain very healthy employee retention rates. As it relates to broader – I think customers sort of like retention overall, Tim commented on his script. What I would say is that if you look North America, we see very consistent retention of customers. And the performance is actually quite healthy and quite good. We are seeing some incremental pressure in Europe, and we are focused on that, and that’s primarily tied to budget pressures, and we think we’re addressing that by being proactive and going out to those international, specifically mid-market customers with consolidation offers that allow them to save money. So again, overall, North America, fairly healthy international market, we’ve seen a little bit of incremental pressure there.

Operator

Next, we’ll go to Hamza Fodderwala with Morgan Stanley. Your line is open.

Hamza Fodderwala

Thanks for taking my question. On the – sort of the more clear sales motion that you guys have around the two product categories. I’m curious if you’ve seen any improvements around the ability to enable your sales force to sell that broader platform? And are you assuming any improvement in sales productivity throughout the year in your guidance? Thank you.

Corey Thomas

No, it’s a great question. And so one, we are seeing improvements in our overall sales force efforts there. That’s part of what actually gave us the confidence. We just rolled that out more broadly. So the way to think about it is that when you introduce something new, which we introduced exiting the year, you actually rolled it out sort of like in ways – as you would expect.

And as we start rolling it out as we actually kicked off, we actually saw good momentum on both the pipe build side and it’s just also just the sales receptivity. Part of it you actually just get used to doing and say, like, what’s the feedback you get from your sales team. And our sales team have incredible confidence in the consolidation offers that we’re actually rolling out executing.

Now as far as our assumptions actually go, consistent with the feedback that we actually gave you last time, we expect the sort of productivity to improve over the course the year, and we’re seeing us tracking well towards that progress. Now the productivity goals are not sort of like aspirational. It’s actually steady productivity increases in line with what we think about as a more pressured economic environment.

Tim Adams

Yes. Hamza, it’s Tim. I would just say that, look, when we – we had many discussions about the guidance for this year, and there certainly is this macroeconomic environment that is challenging for everyone. And you clearly see that in the mid-market. So, we’re not assuming that, that really improves for us. And Corey talked a lot in the prepared comments and just now about the consolidation packages that we are bringing to market that we’re very optimistic about. We think it solves a lot of challenges for customers who are budget constrained, who had too many vendors. And our sales team is really getting behind this with a lot of enthusiasm. So, we think that coupled is going to help us in the second half of the year.

Operator

Next, we’ll go to Fatima Boolani with Citi. Your line is now open.

Fatima Boolani

Hi good afternoon. Thank you for taking my questions. Corey, this one’s for you. Just going back to the pricing and packaging reconstitution that you’ve now formally undertaken and now completed in the form of making more digestible and more intuitive bundles that will resonate in this environment. Can you talk to us about what type of uplift you’re seeing relative to maybe

predecessor configurations of the solutions that you’re now newly bundling? I’d love to get a better sense of that, if you’re seeing better yield, whether it’s in terms of price or being able to cover a larger environment, which means it would give you a higher TCV or ACV [ph].

And then just as a sneaky follow-up for Tim, just on the guidance, where should we see most of the leverage from a long item basis coming next year, just kind of given the strength of the operating profitability outlook? And that’s it for me. Thank you.

Corey Thomas

Yes, I’ll start off and then Tim will pick up on the guidance question. So as far as the pricing strategy, one, we are seeing sort of both larger deal sizes, I think I talked about sort of like for the 10% – which was actually exceeded our expectations of the momentum that we saw in the – over 10%, to be clear that we saw in the quarter of our consolidation offerings. The size of the deals was actually much larger, I think I represent my script up with the 4X. That said as I wouldn’t apply that as an average because, again, we did see a little bit more traction in those areas in our enterprise space in general. But what I would say is, we’re seeing uplift on ASPs, we’re seeing more covers in general, and we’re seeing more share of wallet. I think that the specific like multiple of the uplift will actually come in a little bit later as we continue to grow our adoption, but we’re trading quite well.

Tim Adams

Yes. Fatima, on the leverage, we’re really looking at everything. When you look across the P&L, it’s everything that we’re investing our dollars in. And our focus has been – and this started early in 2022, and it really continues and the team is really engaged to assist on this journey that we just want to be more efficient at everything we do. We look at cost to sale, we look at cost to serve, we look at gross margins, all the E to R ratios, and it is across the board that we’re just trying to really optimize our cost structure and drive more efficiencies. So, I think you’ll see pretty broad strokes of leverage.

Operator

Next, we’ll go to Joel Fishbein with Truist Securities. Your line is open.

Joel Fishbein

Thanks for taking the question. I’m going to ask a follow-up to Fatima’s question about the goals around free cash flow and margin expansion, which are pretty impressive. So thanks for that. Just in terms of how you’re going to continue to hire or what’s the hiring plans in that environment? Or what does that contemplate? So as you come out and get more traction from the sales force that you can reaccelerate the growth when the macro improves, just to understand how that’s going to flow? Thanks Tim.

Tim Adams

Yes. Joe, one of the opportunities we have. As you know, we have locations across the globe. And we do have some lower cost locations, and we’re seeing that particularly in the R&D area, where we saw a little leverage recently, where you can still attract the right type of talent that you want and you can find some of these lower-cost [Audio Gap]. So that’s going to be one piece of how we try to drive more of the leverage.

Joel Fishbein

All right. And the plans regarding hiring, if you could, just in terms of sales capacity?

Tim Adams

Yes. We are hiring this year. We don’t disclose the exact numbers, but we are still focused on driving growth overall with the company, and we are going to add to the headcount overall this year. it will be more modest, but we are still hiring.

Corey Thomas

Yes. Just to follow up on that, it’s a more modest headcount. But because we actually have a pretty strong employee base coming into the year with a good setup in terms of their ability to contribute. We hope very strongly that with a targeted hiring model, we can actually keep our performance start.

Operator

Next, we’ll go to Adam Tindle with Raymond James. Your line is now open.

Adam Tindle

Okay. Tim, I want to continue the conversation on operational improvement. Just ask if there’s any way we could think about a ceiling on that? And I ask it in light of you’ve got a competitor in the core VM space that has probability margin on EBITDA line, 30%, 40%. I know you do a lot more outsourcing to low-cost countries. It sounds like you’re starting to do that as well. So –

maybe you could just tackle how you think about the ceiling longer term, any structural differences between you and that main competitor? How we can think about this runway to profitability longer term? Thanks.

Tim Adams

Yes. Adam, we feel very confident, as you can see in the guidance for this year and the improvements we made in 2022 that we can continue to drive attractive profitability. And you have to look at everything across the board. It is the type of labor, the sourcing of labor. We use AWS as part of the platform. We’ve renegotiated that contract. We have a team that really focuses on how we optimize the efficiency of utilizing that platform. So it really is very broad across the company. We have an opportunity to continue to focus and drive gross margins. We’ve made some improvement there, and we will continue on that effort. But it really does go, I think it’s very broad across the company where our focus is.

Corey Thomas

Yes. And the thing I would reiterate is that one; we had a plan that started last year on really driving efficiencies. We – the customer feedback that we’ve gotten is that we’ve brought the platform in a way that we think is relevant to customers over the next five years.

And so we are sitting in, I think a pretty good situation where we’re into. I would still say the early days of our efficiency curve. And so we actually have gains to doing profitability. But we actually have a platform that actually has strategic relevance for a modern cloud world that’s actually focused on all the aspects of security operations.

And that allows us to actually as the and again half of our business is mid-market so that’s a little bit more pressure this year. But what it allows us to do is to have an increasing profit profile even as we have sort of like mid and long-term global growth outside of the economics sort of like pressure in the global economy right now.

Operator

Next we’ll go to Gregg Moskowitz with Mizuho. Your line is now open.

Gregg Moskowitz

Thank you for taking the question. Good afternoon guys. Corey, it may just speak too early, and obviously, sales cycles are longer for pretty much everyone these days, but have you seen any progress with regard to the frequency with which you’re getting in front of C-level executives?

And then maybe a quick one for Tim last quarter, I think the comment was that the approach behind the initial preliminary guidance of slightly below 20% ARR growth for 2023 was to derisk the macro. Today’s ARR guidance is obviously quite a bit lower than that. And so I’m wondering if you could speak to the latest assumptions, and specifically, if it’s solely due to a tougher-than-expected mid-market business in terms of the delta or if you’re assuming a weaker enterprise business as well? Thank you.

Corey Thomas

Yes. It might be quick yes, we actually do see, again, as we look at more of the Southeast Asian [ph] offers, we see sort of both larger deals that are in front of the CISOs more, especially in this budgetary environment. And part of that is just the CISOs are having to do more work with their procurement and finance partners. But yes, we actually are selling more to CISOs because now we’re a strategic partner for them.

Tim Adams

Yes. And Gregg, I would just reiterate some of the comments that both Corey and I made earlier. We are seeing a challenging environment out there, certainly in the mid-market and we do not expect that is going to improve through the course of 2023. In fact, we think it probably gets modestly a little bit worse than where we are today. And so, that is really the driver of, what we said three months ago to where we are right now.

And again, I think we’re taking an appropriately cautious view to the year when we give guidance. But we are seeing economic challenges that are out there in the customer base in that mid-market segment.

Operator

Next, we’ll go to Jonathan Ho with William Blair. Your line is now open.

Jonathan Ho

Hi, good afternoon. Just one quick one for me. I guess, relative to your 2023 ARR guide, how should we maybe think about the breakdown between new customer acquisition and ARR per customer? Are the ratio – it’s going to remain somewhat consistent with prior periods or any sort of shift here in terms of the makeup of that incremental ARR? Thank you.

Corey Thomas

Yes, thanks Jonathan. Look, we have an increased focus with our consolidation offerings on our installed base across the company one, as you can actually imagine. But also in our sales team, so we would expect and we do expect internally to see a much heavier weighting towards ARR per customer versus new customer adds because we have a pretty good installed base is actually looking to actually consolidate that we have great relationships with, and is looking to be oriented towards the future that’s actually more cloud-based. And so that’s our focus for this year. It’s not necessarily a primary focus. We’ll add customer in the future. But right now, we’re heavily focused on ARR per customer.

Operator

Next, we’ll go to Brian Essex with JPMorgan. Your line is now open.

Brian Essex

Yes. Thank you. Good afternoon. Thank you for taking the question. I guess more of a topic, but my one question, kind of around Corey, what you’re seeing from the spending side within your customers and specifically in regards to how you see them kind of pivoting spend. I think I saw one survey that indicated less 39% of security budgets are staff and compensation.

So I guess on that side, vendor consolidation obviously makes a lot of sense. Anything on the automation front, are you starting to see it any kind of draw in from budgets outside the CISO level? And kind of maybe a little color, what you’re seeing and there, could there be levers with the way your portfolio is positioned to kind of gain some incremental upside when those or if those budgets pivot?

Corey Thomas

Yes. So – one, yes, I do think that there is upside. Again, we have to actually just respond and make our assumptions about what we see today. And as Tim indicated with the mid-market and others, we’re a bit more thoughtful about how we approach it. Let me just give a breakdown of sort of like the – how we see the overall spend environment.

The first thing is I think we’re in a short-term period where people are trying to figure out what the right budgets are. And that was exiting the year. And I think going into a little bit of Q1, one of the dominate themes that we hear from a lot of our customers, it’s security – especially in the midsize market, even a little bit in the enterprise, especially in the mid-market, is that security is a big priority, but they’re trying to figure out the overall health of their business, what their budgets are and what’s the shape of their budgets.

And so you see not a budget freeze, but I would just say a budget rationalization of what people are trying to determine what the budgets are. We expect security projects to be green coming out of that, which is why we’re not pessimistic, but we are cautious and actually doubtful about it. So that’s just one overall dynamic that we just see lots of security teams in their finance counterparts actually just going through a budget planning process, that’s a little bit more intensive because they’re trying to figure out their own assumptions for their own business.

The second thing, that I would say that we actually see is though, every organization is trying to figure out how to get a handle on spending. It really comes down to sort of like two big things. As you said, security is one of the bigger wage inflationary areas. So they’re actually trying to figure out how to actually think about managing the fact that they got a lot of overheads and an expensive talent market, so how to manage that.

And there’s lots of actually security tools that require a lot of manual interaction. We actually tackle both of those which is why we believe that we actually have lots of leverage over the mid and the long-term is from a core platform perspective, we built a broad platform, but we have the core capabilities that mostly we have a heavy automation focus that’s really focused on driving the productivity of our customers and security operations across vulnerability management, across cloud security and a cost detection and response.

The second thing is that we actually focus heavily on expertise, both directly and through our partners to execute customers manage their security costs more leanly. And what I mean by that is customers can actually deploy the resource they need and us and our partner ecosystem to actually provide core securities customer resource to them cost effectively.

Those two things together, the automation focus, the consolidation enabled budget and pricing, plus the expertise for us in our ecosystem are things that we actually think give us both durability and give us upside.

Operator

Next, we’ll go to Mike Walkley with Canaccord Genuity. Your line is now open.

Unidentified Analyst

Hey guys, good afternoon. This is Daniel on for Mike. Thanks for taking my question. So you spoke about some of the weakness of the mid-market. Just curious if you could just provide some color on how the traction has been within your larger enterprise accounts. Are the macro headwinds still impacting this segment of your business as well? Or has it been a bit more steady?

Corey Thomas

Yes. The large enterprise has been a bit more steady. We have better visibility. We have healthy pipeline there. We are seeing some deal delays but they’re episodic. And so I’d say the impact has been larger in the midsized enterprise.

Lots of the consolidation stuff that we actually talked about and the momentum is happening in the larger accounts. I think they’ll apply to the midsize enterprise. We’re very optimistic about the midsize enterprise. It’s just that the economy focus is going to impact those organizations differently. And we anticipate long-term that there’ll be a core strategic healthy part of business. But right now, you see actually more budget and more spend in the larger enterprise space. And we think our teams are executing well against that

Operator

Next, we’ll go to Gray Powell with BTIG. Your line is now open.

Gray Powell

Great. Thanks for taking the question. Yes, I may have missed it in the prepared remarks, but did you guys call out growth in the security transformation line? And is that something you’re still going to disclosed? And then just how should we think about the split there this year between translation and that VMand other category that you used to give?

Corey Thomas

Yes. As we actually execute our platform consolidation offers, it just doesn’t make sense to break it out, mostly because it will just be an allocation of some like backroom allocation. Because, again, VM is part of the core offerings are both the risk complete and threat complete going forward. And as that has gotten more momentum than we expected out of the gate. We’re not going to be breaking that out going forward. And again, VM will be a core capability of all of our solutions, but it’s actually sold on a less stand-alone basis.

Tim Adams

Yes. Corey, the metric, I think that we pay attention to and I think investors will as well as the ARR per customer because these packages are driving more wallet share from customers than you’ll see in the ARR per customer. But we just won’t have that exact breakout.

Operator

Next, we’ll go to Rudy Kessinger with D.A. Davidson. Your line is now open.

Rudy Kessinger

Great. Thanks for taking my questions guys. Some of your competitors have called out pricing pressure in the space recently. I guess I’m just curious, in this product package, it’s good to see 10% of new ARR coming from those two packages. But just what’s the level of discounting you’re throwing in there versus list price for the products individually?

And then is there anything more tangible you could share around the improvement you’ve seen thus far in sales force productivity. I don’t know if you track the percentage of reps selling the full portfolio or those packages in the quarter. But anything more tangible there would be great, too.

Corey Thomas

Yes. Look, we’ll talk about some of that later. Right now, we’re rolling it out. So we have good momentum, but it’s a week-by-week increase. And I would say our goal is sort of by the end of Q1, all of our reps are actually selling it. I proficient and I think they’re tracking quite well towards that.

And so as far as the rep onboarding part of why we’re excited for the momentum is that one, we actually had higher sales attainment of the packages and the platform consolidation offers than we expected. And two, both the rep feedbacking and ramping is actually going ahead of schedule. So that’s what we can actually say there. The other part of the question – what was the other part of the question?

Rudy Kessinger

On pricing.

Corey Thomas

On pricing. Look, it’s too premature. Look, it’s very compelling in general, but it’s too premature to do it because, again, it was only 10% of the sales in the quarter. What I would say from a core pricing strategy is that we’re at over $60,000 ARR per customer, but our total potential is sort of like $520,000-ish roughly. And the way that I look at it is that, look, what’s the velocity that we actually get to a $120,000 ARR per customer and then $180,000 ARR per customer.

And then, yes, I’ll share that upside with the customers. So if it turns out that actually change our total ARR per customer on average from $520,000 to $350,000, but we accelerate our velocity to get a $180,000 per customer, I would actually make that trade all day long in consolidating. So we have lots of room to play there. And again, what we’re focused on is share of wallet and customer economics, which drives total profitability. It’s how do we actually have more profitable customers that are building their security operations and help us. And we think we have momentum in the strategy to do that. And that’s what we’re focused on.

Operator

Next, we’ll go to Robert Galvin with Stifle. Your line is now open.

Robert Galvin

Hi, this is Rob Galvin on for Brad Reback. Thanks for taking the question. A couple of quarters ago, you had mentioned that you were oversubscribed for the backlog of partners to get onboarded on Rapid7 for MDR. I want to know how Rapid7 has worked through the backlog of partners. Have you seen an inflection in MDR growth or if there’s been some delays in customer deployments? Thank you.

Corey Thomas

Yes, it’s a good question. I would say we’re still working through that. I mean, last time it had to do with – as you can imagine, we’ve built a very good brand around our detection and response and our security operations offerings. And so the partners want to use our brand, and so we have to put some – we’ll continuing to have their infrastructure in place to make sure that those partners are certified and available and they have the right quality level. And so we’re continuing that effort. So it will be a steadily expanding number of partners in our ecosystem. And we think that, that is a mid-term sort of like tailwind to the overall business.

Operator

Next, we’ll go to Matt Hedberg with RBC Capital Markets. Your line is open.

Matt Hedberg

Great. Thanks for taking my questions guys. I’ll just bundle two together here. First of all, Corey, can you talk – you mentioned some of the mid-market weakness, but how did the quarter progress in terms of like linearity? Did things sort of deteriorate? Did you see maybe a little bit of budget flush? And maybe how has that trended into 1Q? And then maybe secondarily, any thoughts on your CRO position?

Corey Thomas

Yes, great question. So as the quarter progressed, things did actually – again, one, not a lot of budget flush. And I think when I talked on the last call, we didn’t anticipate lots of it. But I would say if quarters progressed and especially in the mid-markets people heard more economic needs, part of you just have the economic buzz, it’s an economic buzz and some economic pessimism. But there were also concerns about their own business. You saw things start to slow down as we exited the quarter, which is why it look and that was in our range of outcomes. I would say that basically that got progressively more challenging over the course of the quarter, and that was factored into our assumptions about 2023, that continues to, frankly, get a little bit more deteriorating from that perspective.

Now, I do think that customers or going to come to some conclusion about what the overall budget profile is. And we think a little bit of that will lighten but we are expecting a more pressured environment, especially in the mid-market, entering this year based on the exit rate as we exit last year.

Matt Hedberg

And then just on the CRO search.

Corey Thomas

CRO search, listen we’re seeing great candidates. We’re a good platform for folks, and I’m very optimistic about it, and we’ll update you when it’s time to update you.

Operator

And our final question comes from Joshua Tilton with Wolfe Research. Your line is now open.

Joshua Tilton

Hey guys, thanks for sneaking me in here. Just a simple one for me. It sounds like the guidance assumes that things get worse for your mid-market customers. Is there any reason why you guys wouldn’t assume that it gets worse for the enterprise customers as well?

Corey Thomas

Yes. So it’s a great point. So yes, we actually are presuming that the macroeconomic environment is slightly worse. It’s just that the degrees of impact are just different between them. So it’s not that we’re actually saying that like enterprise is completely unaffected. It’s just that it’s not impacting the same degree as the midsized enterprise.

So I just want to be clear about that. We did make some presumptions there. And we did our outlook, we factored in, frankly, higher coverage ratios across the board. And so that’s just one of our outlooks. This is like, A, the pipeline looks very healthy, but we have to actually look at higher coverage ratios because you have things like deal pushes, delays and other things. So that’s – we did factor that in.

Operator

And that does conclude today’s question-and-answer session. I’ll now turn the call back over to Corey Thomas, CEO, for any additional or closing remarks.

Corey Thomas

Well, I just want to thank everyone for joining us this evening, and we appreciate it. Have a good night.

Operator

This concludes today’s conference call. You may now disconnect.