Earnings Labs

SentinelOne, Inc. (S)

Q1 2023 Earnings Call· Wed, Jun 1, 2022

$14.74

+0.75%

Key Takeaways · AI generated
AI summary not yet generated for this transcript. Generation in progress for older transcripts; check back soon, or browse the full transcript below.

Same-Day

+2.19%

1 Week

+4.26%

1 Month

+2.23%

vs S&P

+8.98%

Transcript

Operator

Operator

Good afternoon. Thank you for attending the SentinelOne Q1 Fiscal Year 2023 Earnings Call. My name is Matt, and I will be your moderator for today's call. [Operator Instructions] I would now like to pass the conference over to our host, Doug Clark, Head of Investor Relations. Doug, please go ahead.

Douglas Clark

Analyst

Good afternoon, everyone, and welcome to SentinelOne's earnings call for the first quarter of fiscal year 2023 ended April 30. With us today are Tomer Weingarten, CEO; Nicholas Warner, President of Security; and Dave Bernhardt, CFO. Our press release and the shareholder letter were issued earlier today and are posted on our website. This call is being broadcast live via webcast. And following the call, an audio replay will be available on the Investor Relations section of our website. Before we begin, I would like to remind you that during today's call, we will be making forward-looking statements regarding future events and financial performance, including our guidance for the second fiscal quarter and the full fiscal year 2023 as well as certain long-term financial targets. We caution you that such statements reflect our best judgment based on factors currently known to us, and the actual events or results could differ materially. Please refer to the documents we file from time to time with the SEC, in particular, our annual report on Form 10-K and our quarterly report on Form 10-Q that we will file for Q1. These documents contain and identify important risk factors and other information that may cause our actual results to differ materially from those contained in our forward-looking statements. Any forward-looking statements made during this call are being made as of today. If this call is replayed or reviewed after today, the information presented during the call may not contain current or accurate information. Except as required by law, we assume no obligation to update these forward-looking statements publicly or to update the reasons actual results could differ materially from those anticipated in the forward-looking statements even if new information becomes available in the future. During this call, unless otherwise stated, we will discuss non-GAAP financial measures. These non-GAAP financial measures are not prepared in accordance with Generally Accepted Accounting Principles. A reconciliation of the GAAP and non-GAAP results is provided in today's press release and in our shareholder letter. And with that, let me turn it over to Tomer Weingarten, CEO of SentinelOne.

Tomer Weingarten

Analyst

Good afternoon, everyone, and thank you for joining our fiscal first quarter earnings call. I'm pleased to announce we had another excellent quarter. The strength of our results reflect two important dynamics. First, the demand environment for cybersecurity remains incredibly strong, and we're executing well. Second, we continue to achieve significant margin expansion stemming from our platform-based land and expand strategy, high-quality revenue growth and operational efficiencies. Let me start with a few highlights from the quarter. Q1 marks our fifth consecutive quarter of triple-digit revenue and ARR growth, and we expect that to continue next quarter as well. The outlook for cybersecurity remains strong, and we're also raising our full year revenue growth guidance to 98% at the midpoint. Consistent with the power of our business model, we're delivering growth and significant margin improvement. Our gross margin reached a new high of 68%, a 15-percentage point year-over-year expansion, and our operating margin is expanding 54 percentage points year-over-year. We expect to achieve Rule of 40 for the full year. Our land and expand strategy is working extremely well. We added a record number of new customers in the quarter, even more than our seasonally strong fourth quarter. We're consistently winning with large enterprises from a major federal agency, another one of North America's largest telecom operators, to a global media conglomerate, among others. On top of that, our net retention rate was a record 131%. And finally, we continue to extend the breadth and diversity of our business, fueling growth and expansion opportunities. We closed the acquisition of Attivo Networks, marking an important milestone, which we believe establishes us as a leader in identity security. We're now covering essential attack services across endpoint, cloud and identity, all of which offer significant growth potential. Cloud security was once again our…

Nicholas Warner

Analyst

Thank you, Tomer, and welcome, everyone. We delivered an outstanding first quarter across every geography, driven by our go-to-market accelerating flywheel of sales, marketing, channel and technology partners. More enterprises are selecting SentinelOne than ever before because of our leading efficacy, automation, ease of use and differentiated XDR capabilities. In Q1, our ARR growth of 110% was driven by a healthy mix of new and existing customers. Demand was also strong among both large and medium-sized enterprises. We added about 750 new customers, setting a quarterly record, even more than our seasonally strong Q4. On top of that, we built our largest ever pipeline, a result of an excellent collaboration between sales, marketing and our channel partners. We delivered healthy growth across all geographies, including in EMEA, a testament to the resilience and durability of cybersecurity during a variety of economic conditions. Our momentum with large enterprises continue to build. Our customers with ARR over $100,000 grew 113%. In addition, our win rates in these large deals increased. Here are just a few examples of the broad-based strength we're seeing. We extended our success in state and local government into the federal arena by securing a major federal agency in partnership with CISA, our largest federal deal to date. We were selected based on our performance in a rigorous evaluation spanning over 100 requirements and because of our cost-effective extended data retention and multi-tenant capabilities. This showcases why we're winning against the competition time and time again. We continue to secure large enterprises from around the world across all verticals from major North American telecom operators to iconic media brands and multinational conglomerates. These wins demonstrate the global adoption of Singularity XDR and continue to elevate our position in the market. In addition to growing our enterprise footprint, we're seeing…

David Bernhardt

Analyst

Nick, Tomer, thank you. And I'd also like to thank call participants and listeners for joining us today. I'll discuss our quarterly financial highlights and provide additional context around our guidance for Q2 and full year fiscal '23. As a reminder, all margins discussed are non-GAAP unless otherwise stated. We delivered another strong quarter of revenue and ARR growth, both well into the triple digits. We achieved year-over-year revenue growth of 109%, reaching $78 million and ARR growth of 110% to $339 million. We added net new ARR of $47 million in the quarter, outperforming our seasonal historical averages. The demand environment remains incredibly strong. The strength of our performance was broad-based coming from a healthy mix of new customer additions, existing customer renewals and upsells. We set new records for both customer adds and our net retention rate. Demand was also balanced across geographies. Revenue from international markets grew 129% to 33% of revenue, including continued strength in EMEA despite current geopolitical conflicts. Turning to our costs and margins. Our non-GAAP gross margin in Q1 was 68%, reflecting a double-digit increase of 15 percentage points year-over-year. 68% represents a new high for our company and demonstrates the significant progress we've made in a short amount of time since our IPO. Our margin progression really showcases the benefits of our land and expand strategy and platform unit economics where we collect data once and enable more and more capabilities. We're seeing benefits from economies of scale, data processing efficiencies and module cross-sell. These tailwinds should pave the path towards our long-term gross margin target of 75% to 80% or higher. The impact of customer migrations to our DataSet back end was immaterial to our gross margin in the quarter. We've migrated all of our largest customers and remain on track…

Operator

Operator

[Operator Instructions] Our first question is from Tal Liani with Bank of America. Your line is now open.

Tal Liani

Analyst

Hi, guys. Great results. I would like to know -- sorry, I have clarification and a question. So the clarification part, what's your full year growth expectations ex-Attivo? And on the question, I want to focus on the margins. 2Q operating margin guide is 74%. 1Q was 73%, but the full year guidance was maintained at 57.5%. So what drives the expected margin expansion in the second half? Thanks.

Tomer Weingarten

Analyst

Yes. Excluding Attivo, we increased our guidance from 80% to mid-80s. So our organic was up about 5% for the year. And then in regards to the EBIT margin, we're making -- we're continuing to make significant investments during the year. One of the things I think we're proud of is that we're able to integrate Attivo and to build in all the integration costs this year and maintain our current guidance. Our plan is to spend between 1% and 2% of the actual purchase price integration cost to make sure we accelerate this and hit the ground running with Attivo. And we're doing all that while maintaining our current guidance. So obviously, our organic guidance sans Attivo would have been improved.

Tal Liani

Analyst

Right. But what drives the improvement? You're guiding for basically second half improvement over first half, right? It's quite a sharp improvement in the second half. What drives it? Is it economies of scale or finishing the integration of Attivo? Or do you expect --

David Bernhardt

Analyst

Yes, I think -- what I think what you're seeing is, obviously, our gross margins have improved. So we ended this quarter, we were 68%. We've put a lot of the dual cost behind us in terms of the integration for Attivo back end. We're also just seeing continued scale within the business. I think this is just another step in the right direction to show the scale we're going to have in our model as we continue to grow larger. So you're seeing that just continue into the second half.

Tal Liani

Analyst

Great. Thank you.

Operator

Operator

Thank you for your question. The next question is from the line of Brian Essex. Your line is now open.

Brian Essex

Analyst

Great. Thank you for taking the question and congrats on the results. It's nice to see the incremental progress here. I guess I have one question, and this is around margins as well and maybe best fielded by Dave. Could you dig in a little bit to expectations around gross margins? How much -- if I recall, Attivo was margin accretive. How much you anticipate will be contributed by Attivo, how much by better scale across DataSet and then how much by pricing increases or better attach rates on the platform? Just so we can get a sense of impact of drivers here for better unit economics going forward.

David Bernhardt

Analyst

Yes. I think it's really a balance of all three. We're continuing to just scale and business expansion. So obviously, the revenue outperformance and the revenue growth that we're expecting, the strong module attach is a big piece of it. The data processing efficiencies are a piece of it. And yes, Attivo is accretive from a gross margin standpoint. But obviously, they're not at the same revenue scale we are. So it's still mostly led from our organic work. They are accretive to us, but it's not a significant driver for a step-up in our gross margin.

Brian Essex

Analyst

Okay. Any way you can kind of grade them and maybe give us a sense of what Attivo's gross margins were? And if you were to rank them, most impact, the least impact, how should we anticipate the impact on the gross margin side?

David Bernhardt

Analyst

Yes. I think in terms of contribution to the overall company, Attivo would be number three. If I had to think about it, I would say the revenue outperformance and the efficiencies in our product are one and two.

Brian Essex

Analyst

Okay. All right. Thank you very much. Appreciate it.

Operator

Operator

Thank you for you question. The next question is from the line of Alex Henderson with Needham. Your line is now open.

Alexander Henderson

Analyst

Great. Thanks. So the question we've been asking almost every company we talk to is really around the correction in the stock prices that have happened. And how you adjust for stock compensation to your employees, particularly given the challenges of bringing on new employees, the stock compensation based on where the stock is and older employees potentially having stock that's significantly underwater. How do you balance that problem? And what are you share thought process around it? Thanks.

Tomer Weingarten

Analyst

Yes. Yes, it's a good question. And I think, obviously, for us, we feel relatively good about how we structured our entire stock-based compensation strategy. All in all, we encourage everybody to look at store brands, obviously, something that's over a four-year period. So we wouldn't want, I think, to really go into any specific adjustment. With that said, I mean, we're obviously constantly monitoring, and we're looking for ways to obviously offset any injustices. But generally speaking, we feel pretty good about it, and we don't feel like anything material will be changing in the way that we compensate, call it, in the next 12 months or so.

David Bernhardt

Analyst

Yes. I think stock-based comp is obviously something we're focused on. If we look at ourselves as a percent of the operating expense, we're in line with our peers. If you look at us in terms of percentage of revenue, it's something we expect to decline over time as we achieve scale. Obviously, we've been hiring into revenue, and we're seeing that start to dissipate over time where we'll fall within industry norms. So it's something we're very cognizant of. We pay attention to it. But yes, I think Tomer hit it right. Employees are coming here because we're a destination because we're going to offer a lot of value to employees over a four-year period. And this is unfortunate what's happened recently with the stock performance in the entire market, but we believe if we continue to execute, we'll ride out of this very strong.

Alexander Henderson

Analyst

So you do not expect to restate or recast existing stock compensation to employees would have been there for a year, two or 3 or year or longer?

David Bernhardt

Analyst

If you've been an employee here for a few years, you're still well up in your stock.

Alexander Henderson

Analyst

Okay. Thanks.

Operator

Operator

Thank you for your question. The next question is from the line of Trevor Walsh with JMP Securities. Your line is now open.

Trevor Walsh

Analyst

Great. Hi, team. Thanks for taking my question. Maybe for either Tomer or Nick, you mentioned in the prepared remarks around the fast pace at which the cloud module is growing. I wonder if you could just comment or provide a little color around the competitive landscape versus when it's maybe a cloud purchase within the context of a larger endpoint type deal or if the dynamics change when it's just a stand-alone purchase of that module without kind of the legacy endpoint products entering the play? And then kind of a additional question or part of that is, do you see those mostly as displacements of legacy or incumbent tools? Or are customers doing a kind of multi-vendor approach with respect to the cloud security piece? Thanks.

Tomer Weingarten

Analyst

I think you're seeing pretty much all of the above. When we go into kind of stand-alone opportunities or just cloud, we typically win on the strength of our platform. We get a disturbed solution for cloud or for protection. It's one of the biggest needs right now when you think about securing cloud footprint, and we have a superior approach. So it's something that goes hand-in-hand with endpoint security, but doesn't have to be deployed alongside the same vendor. So we're seeing a good number of opportunities, sizable opportunities were actually deployed side by side with maybe one of our competitors on the endpoint side, and we take over the cloud side. Needless to say, that opens up the opportunity to then cross-sell and upsell into the endpoint environment, and we really like that mode of operation. It allows us to unlock many more accounts. But otherwise, you would not have been able to go into just on our ability to secure the endpoint. But obviously, when you look at our installed base, there is plenty of opportunity go from that endpoint footprint and into the cloud. Cloud is a greenfield opportunity. There's no incumbent vendor in cloud that we're set to replace. It's always an expansion, at least in the vast majority of patients that we see. So to us, that represents not only a growth vector on the state side, but again, another piece of our strategy to unlock more and more accounts and long side end point. And again, it all comes on the back of technological superiority, the ability to sell just cloud workload is just something that we feel is the major strength of the business here, and we are continually investing in it.

Nicholas Warner

Analyst

And the results are there today. In Q1, we actually grew cloud sales 50% quarter-over-quarter off of a record Q4. And where that shows how far we've come in a year, that's literally 30x growth year-over-year from Q1 to Q1. So the -- we're at the early stages of what we feel like is going to be a very big market.

Trevor Walsh

Analyst

Great. Thank you, both. Congrats on the quarter.

Operator

Operator

The next question is from the line of Saket Kalia with Barclays. Your line is now open.

Saket Kalia

Analyst

Okay. Great. Hey, guys. Thanks for taking my questions. I'll just keep it to one and maybe direct it to you, Tomer. Can you just talk a little bit about how much customers are adopting the higher end endpoint bundles that include EDR? And maybe just illustratively or just anecdotally, I mean, how much of a lift is that higher-end bundle compared to some of the lower-end ones? Does that make sense?

Tomer Weingarten

Analyst

Of course. Yes. And I think we kind of talked about it in the past as well. For the vast majority of customer adds we've had this quarter, it's also to the past quarter, especially in the enterprise segment, you're talking only about the highest tier at the beginning point of any one of these deals. Then on top of that, you actually see very strong module attach in the form of Ranger, cloud security or Vigilance. These are our three top modules. Data retention is right there with them. So to us, really, the dynamic shifted away from these bundles into just selling complete and on top of complete, attaching our modules. I think you're also going to see us in all likelihood revamping the way that we design our platform in the next 12 months or so, again, to reflect that shift from the base packages around endpoint and really a more inclusive approach to an XDR platform with attachment modules.

Saket Kalia

Analyst

Got it. Very helpful. Thanks, Tomer.

Operator

Operator

Thank you for your question. The next question is from the line of Hamza Fodderwala with Morgan Stanley. Your line is now open.

Hamza Fodderwala

Analyst

All right. Thank you. for taking my question. I'll keep it to one, too. For Tomer and Nick, just -- you talked about some pretty strong growth in Europe. I'm wondering if you could give us a sense of, to what degree you're seeing displacement against Kaspersky given the [Indiscernible]. And do you expect to see more displacement versus Carbon Black in light of the VMware-Broadcom acquisition?

Nicholas Warner

Analyst

Yes, great question. Indeed, we are seeing an immense amount of demand around Kaspersky. Kaspersky traditionally had done well from a legacy vendor perspective in EMEA, Latin America, parts of Asia. And what we're seeing is really a wholesale movement away from Kaspersky, either by mandate or because folks want a better security platform. Typically, we're seeing really a combination of both. So that represents an amazing opportunity for us. I think with the recent news around Broadcom and VMware, we've seen that movie before with Symantec. And if you look at any market share report, the largest contributor of market share shift to next-gen vendors was from Symantec post Broadcom acquisition. So we have already begun in earnest to replace Carbon Black in a variety of accounts, very large, large and midsized businesses. We have a technology platform that can literally automate the transition away from Carbon Black, and we expect that to really accelerate in the quarters to come post Broadcom acquisition of VMware Carbon Black.

Tomer Weingarten

Analyst

Maybe just one small thing to add there. I mean, that's definitely the case on the endpoint side. I think on the cloud side, that's also true. I mean we feel like VMware represents pretty much a complete new greenfield to protecting workloads. And again, we feel that that's again something that works in our favor in this case.

Operator

Operator

Thank you for your question. The next question is from the line of Fatima Boolani with Citi. Your line is now open.

Fatima Boolani

Analyst

Thank you. Good afternoon. Thank you for taking my question. Nick, I'll direct this one to you. Just given some of your commentary on the channel partner traction and some of the voluminous deal registration that you saw in the quarter. So maybe taking a step back, can you talk about what proportion of the business today is being derived from the OEM and MSSP channel that you have more or less cornered? And then if you can share with us or give us a refresher on, if there are unit economics, when the OEM with some of these MSSPs is different from if you sell into a large enterprise?

Nicholas Warner

Analyst

Sure. And we're really proud of what we built from an MSP and MSSP perspective. And a lot of that also dovetails into our dominance with IR incident response partners because many of them are doing both. What they're realizing now is you go in, you help clean up and do incident response and remediation, and customers commonly want that new solution to be managed by experts, those experts being intimately aware of the environment that they were called in to help save and protect. And so I think from a contribution perspective, directly, it's over 20% coming from MSSPs. I think one important note is what we've recently done is unlock the ability of our MSSP partners to be cross-selling, upselling complete and other modules like data retention, like Ranger, into that MSSP base. So we expect that contribution from an overall macro perspective to grow. But also from a unit economics perspective, we expect that to continue to grow as well. And like I've said before, it's a fantastic way to consume a cloud-native platform is to have it managed by experts. And we think of no better way to do that than to partner with the best and brightest who all they do is provide managed services and give our customers an abundance of choice, so they can find the right MSSP partner for them and have them manage SentinelOne.

Fatima Boolani

Analyst

Thank you.

Operator

Operator

Thank you for your question. The next question is from the line of Patrick Colville with Deutsche Bank. Your line is now open.

Patrick Edwin Colville

Analyst

Thank you so much for taking my question and congrats on a very healthy set of numbers. Can I ask about the Attivo contribution to your fiscal '23 guidance? If I'm not mistaken, the guidance has increased from $3 million, $6 million, $8 million at the midpoint to $4 million or $5 million, which is a $37 million increase. If I've done the math correctly, you said that organically, the growth has gone from 80% to mid-80s, so it's about $10 million. So if my math is correct, the Attivo contribution, I should kind of bake into my numbers is roughly kind of like $27 million, So just understand whether that logic is correct in terms of how much you had baked in for Attivo for fiscal '23. Thank you so much.

David Bernhardt

Analyst

Yes. I think there's some rounding in there, but Attivo is directionally around $30 million for the year, about $8 million for Q2, if you're updating your models.

Patrick Edwin Colville

Analyst

Okay. That's great. Thank you so much for that.

Operator

Operator

Thank you for your question. The next question is from the line of Joseph Gallo with Jefferies. Your line is now open.

Joseph Gallo

Analyst

Hey, guys. Really appreciate the question. This one is for Tomer and Nick. You guys mentioned improved win rates among larger opportunities in your shareholder letter. Is that versus next-gen players or more legacy vendors? And then maybe what's driving that? Is that product-led with a larger number of modules? Or is that more of a refinement on the go-to-market side? Thanks.

Tomer Weingarten

Analyst

Yes. I mean it's both. But I think what we're seeing out there, especially as we engage with more and more incidence response partners, are just folks getting a dissolution with some of the next-gen offerings, I mean maybe even Microsoft specifically, where we're seeing this barrage of exploited vulnerabilities day in, day out. And I think that, again, customers are looking for ways to clean up their environment and deploy best-of-breed security. So we're seeing improved win rates in these scenarios. I think all in all, if you take the sum total of all of our components, a very strong cloud offering, an incredibly strong endpoint offering as reflected by MITRE, we're starting to see a platform that's quite hard to compete with. And I think that is again reflected in the way -- in the pace that we acquire customers.

Nicholas Warner

Analyst

Yes. And I think directly, we've talked before about having high win rates. They continue to be at or above 70%, and that is absolutely against our closest peer company, public competitors. And the vast majority of enterprise deals that we're closing, which is again outpacing our overall growth, the number of deals that we're closing over $1 million or over $100,000, it's safe to assume that in the vast majority of those, those are against other so-called next-gen competitors. And our win rates remain high and, in fact, are growing in that area as well.

Joseph Gallo

Analyst

Great to hear. Thank you.

Operator

Operator

Thank you for your question. The next question is from the line of Gray Powell with BTIG. Your line is now open.

Gray Powell

Analyst

Okay. Great. Thanks for taking the question and congratulations on the really strong results. So yes, maybe just a high-level question. My understanding is that EDR penetration is somewhere in the 45% range, give or take. I'm just curious, where do you think that peaks out over the next few years? And then how do you feel about your competitive positioning, just given that the next leg of adoption is probably going to be more mid-market-focused versus large enterprise?

Tomer Weingarten

Analyst

Yes. I'd really encourage you all to not think about this very linearly. I think that what we're seeing is transition from endpoint to EDR, from EDR to XDR. Each one of those represent a different set of opportunities, a different set of challenges and a different set of products and capabilities. So all in all, I don't know if the number is 45% or it's a different number. There's plenty of opportunity out there. Again, us generating record pipeline in Q1 in these macro conditions should tell you something. But again, all in all, when we look at our pipeline, when you look at the types of customers that are looking to augment EDR, to expand from EDR to XDR or changing the requirements or putting cloud into that mix, that just represents a massive opportunity across multiple TAMs. So I think it really depends on how you want to define it. The way that we look at it the broad-based XDR platform that plays across multiple TAMs and that even before touching on what we believe is going to be the next opportunity here, which is really data analytics, security, data analytics and security data lakes.

Nicholas Warner

Analyst

One thing I would also add is there's really only two XDR players in the market that have identity capabilities. And so I think if you're talking a point solution, either EPP or EDR vendors, those are all falling to the wayside. They themselves are getting replaced by XDR platforms. And what we feel like is we're really just at the beginning stages of growing massively into this identity security market, which, again, it's one thing we've definitely seen in the last several quarters from a threat research perspective is identity is becoming front and center of attacks. That has really become in a lot of attacks, the crown jewels of what malware actors are after. And so that really is opening up an enormous market, and it's really changing everything in terms of how customers are perceiving what they need from an EDR or XDR vendor.

Gray Powell

Analyst

That's really helpful. Okay. Thank you.

Operator

Operator

Thank you for your question. The next question is from the line of Andrew Nowinski with Wells Fargo. Your line is now open.

Andrew Nowinski

Analyst

Thanks. I want to ask about the large federal deal that you mentioned in the quarter. Can you give us any more color on the size of that deal, whether it's already reported in ARR or if that's going to be rolling into ARR in future quarters and which vendors you beat in that win? Thanks.

Nicholas Warner

Analyst

It was a large multimillion dollar deal. And I think for us, what it really points to is the federal opportunity is beginning now. Typically, in cybersecurity, federal and far organizations have moved slowly. But I think there's been a really good push and movement by CISA, pushing these agencies forward to begin evaluating and purchasing XDR solutions. I think our results in MITRE has really proven to a lot of federal prospects that we're the best choice from a technology perspective. And certainly, the work that we put in from a FedRAMP perspective over the last couple of years is really beginning to pay off.

Andrew Nowinski

Analyst

Thanks.

Operator

Operator

Thank you for your question. The next question is from the line of Joshua Tilton with Wolfe. Your line is now open.

Joshua Tilton

Analyst

Hey, guys. Thanks for taking my questions. Is there any way you can give maybe some more color on what led to more customer additions in 1Q over 4Q? Was it something in the marketplace? Or was it more about your execution in the quarter?

Tomer Weingarten

Analyst

I think a lot of it was our execution. I mean, we're doing, as Nick mentioned, a better job at enabling our MSSP partners, as an example. So some see that flywheel creating more and more opportunities for us. You see more traction with partners ramping up. You see that showing contribution back into the quarter. To us, it was, again, a very healthy mix of large customers and mid-market customers. $100,000 deals and above grew faster than the overall. $1 million deals and above grew faster than the overall. So to us, I mean, it really is a broad-based strength across everything we do. And again, we obviously wish for that to be the case every quarter, and we'll work hard to make sure that replicates itself in Q2 as well.

Nicholas Warner

Analyst

Yes. And one thing I would add, and I spoke to this in the prepared comments, was we recently just crossed over 10,000 channel partner accreditations. So if you think about enabling over 10,000 sellers in our various channel programs around the world, that flywheel is spinning fast and increasing in velocity. And so I think the result of that is that we're seeing material strength across all sizes and all geographies of our business. And I think what that underscores is what we've built is really a durable business model that provides technology to incident response partners, to MSPs, to MDRs and to channel partners. And we don't compete with them. We enable them. And what we found in business is if you treat your partner as well, they will put you very much at the center of their go-to-market. And we're going to continue to see that contribution accelerate in the quarters to come.

Joshua Tilton

Analyst

Makes a lot of sense. And then just one clarification question for me. In the shareholder letter, you characterized the net new ARR as being exceptionally strong on a seasonal basis. Is there anything about it that was unusually strong for 1Q that we should know about? Was anything kind of pulled in from 2Q or maybe closed from 4Q that should have closed last quarter but closed this quarter?

Tomer Weingarten

Analyst

No, no. I think it was mostly broad based. But once again, I think we're lapping one year in the public market, and we're just getting better at our ability to drive the business. So I think some of it might be that. But all in all, we're just very pleased to overachieve on Q1, which in our seasonality is typically the one that is the most difficult for us, and this was a pleasant surprise.

Joshua Tilton

Analyst

Thanks, guys. I really appreciate it.

Operator

Operator

Thank you for your question. The final question is from the line of Roger Boyd with UBS. Your line is now open.

Roger Boyd

Analyst

Great. Thanks for taking my question. Just on cloud security, some of your competitors have started to introduce manage cloud workload protection solutions. Can you just talk about the level of interest some of your MDR/MSSP partners have in in cloud security and how you see that opportunity playing out? Thanks.

Tomer Weingarten

Analyst

Yes. Again, it speaks to the same trends that we see with the MSSP ecosystem. Obviously, when they go back to their customers, they now look to really manage their entire footprint, not just the on-prem IT and endpoint footprint. So cloud, you know, kind of dovetails directly into that. And we're seeing them obviously, wanting to not only adopt cloud, but adopt Ranger and other modules that really help them look at the entire enterprise as one holistic footprint. So that trend is definitely out there. I do think it will take some time. I think that, again, cloud penetration right now, in terms of security is relatively, you know, in kind of a infancy level, and we're seeing a lot of demands. But at the same time, obviously, still, we're in that cycle of endpoint protection, replacement for incumbents. That's still the major focus for a lot of these MSSP providers out there. Cloud just represents a major adjacent opportunity that I think they're starting to get their hands around. And obviously, we'll be there to help them with that.

Nicholas Warner

Analyst

You know, I would add the prior question and comment around us dominating the MSSP space, that really well positioned us for, as Tomer talked about that, that movement to also having cloud protection as a managed service. We have the platform to do that and we also have the go-to-market and the existing partner relationships to deliver on that.

Roger Boyd

Analyst

Great color. Thank you both.

Operator

Operator

Thank you for your question. There are no additional questions waiting at this time, so I'll pass the conference back to Tomer Weingarten, for any closing remarks.

Tomer Weingarten

Analyst

Thank you, everybody. Really appreciate the time today on the call and see you next quarter.

Operator

Operator

That concludes the SentinelOne Q1 fiscal year 2023 earnings call. Thank you for your participation. You may now disconnect your lines.