Greetings. Welcome to Tenable’s Q4 2022 Earnings Conference Call. At this time, all participants are in listen-only mode. A question-and-answer session will follow the formal presentation. [Operator Instructions] Please note, that this conference is being recorded. I’ll now turn the conference over to your host, Erin Karney, Vice President of Investor Relations. You may now begin.

Thank you, operator and thank you all for joining us on today's conference call to discuss Tenable's fourth quarter and full year 2022 financial results. With me on the call today are Amit Yoran, our Chief Executive Officer; and Steve Vintz, our Chief Financial Officer. Prior to this call, we issued a press release announcing our financial results for the quarter and full year. You can find the press release on our IR website at tenable.com. Before we begin, let me remind you that we will make forward-looking statements during the course of this call, including statements relating to our guidance and expectations for the first quarter and full year 2023, growth and drivers in our business, changes in the threat landscape in the security industry and our competitive position in the market, growth in our customer demand for and adoption of our solutions; planned innovation and new products and services; and our expectations regarding long-term profitability and free cash flow. These forward-looking statements involve risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. You should not rely upon forward-looking statements as a prediction of future events. Forward-looking statements represent our management's beliefs and assumptions only as of today and should not be considered representative of our views as of any subsequent date. We disclaim any obligation to update any forward-looking statements or outlook. For a further discussion of the material risks and other important factors that could affect our actual results, please refer to those contained in our most recent annual report on Form 10-K and subsequent reports that we file with the SEC, which are available on the SEC website at sec.gov. In addition, during today's call, we will discuss non-GAAP financial measures. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. There are a number of limitations related to the use of these non-GAAP financial measures versus their closest GAAP equivalent. Our earnings release that we issued today includes GAAP to non-GAAP reconciliations for these measures and is also available on the Investor Relations section of our website. I will now turn the call over to Amit.

Thank you, Erin. Today, I'll discuss our financial performance, the strong traction we're seeing with Tenable One, and our growth beyond vulnerability management and exposure management. With that, let me first touch on our financial performance. In the fourth quarter, we delivered strong revenue growth at 24% year-over-year. In addition, non-GAAP income from operations was $19.9 million and unlevered free cash flow was $32.1 million, both above expectations. For the full year, our results were well above our initial expectations with full year CCB growth of 26% and $67.7 million in income from operations. Additionally, we had another strong quarter with large deals as we added 140 net new six-figure customers, which is a record for us and is up 40% year-over-year. Even more importantly, the number of six-figure deals accelerated throughout the year, further validating our corporate strategy and demonstration of the momentum we are building. As the market leader in vulnerability management, we're seeing great demand in the market, including new customer acquisition, renewals, and expansions. Our years of leadership in VM has put Tenable in a great position to target bigger, more strategic deals as customers continue to move beyond traditional VM to understand and reduce their cyber risk. We believe thesis driving the acceleration of six-figure deals. We had strong performance in OT, including a number of six-figure deals. This is an early stage market with tremendous opportunity, where we are now proving our ability to close larger transactions. We also saw particular strength in Tenable One, which I will discuss in more detail shortly. At Tenable, we continue to differentiate ourselves as a technology leader by continuing to prioritize investments in product innovation and go-to-market, including our partner ecosystem. Over the last several quarters, we have moved quickly to align our efforts where we see…

Thanks Amit. We are pleased with our results for the fourth quarter, highlighted by better than expected growth and profitability due to strong customer demand. I will provide more commentary momentarily, but first, please note that all financial results we discuss today are non-GAAP financial measures with the exception of revenue. As Erin mentioned at the start of this call, GAAP to non-GAAP reconciliations may be found in our earnings release issued earlier today, which is posted on our website. Now, on to the results for the quarter. Calculated current billings, defined as the change in current deferred revenue plus revenue recognized in the quarter grew 23% year-over-year to $238.9 million and benefited from strength in vulnerability management and continued momentum of Tenable One, our exposure management platform. Underpinning our better than expected topline results is strong customer demand. Specifically, we added 571 new enterprise platform customers and 140 net new six-figure customers in Q4. While both metrics are exceptional, large deals, in particular, grew 40% year-over-year. The takeaway here is the investments we've made over the years to build a vast ecosystem of partners and extend our global reach allow us to effectively serve customers of all sizes in most major markets for traditional VM or increasingly for unified risk and exposure management. Our Tenable One platform also creates a compelling upsell path for our customers and is benefiting our dollar-based net expansion rate, which remained strong and was 117% in the quarter. While this expansion rate may fluctuate on a quarterly basis, we generally expect it to be within a 110% to 120% range. Revenue was $184.6 million, which represents 24% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $3.6 million. Visibility remains strong as our percentage of recurring revenue was 95%,…

Thanks Steve. We're very confident in our differentiated technology, our future, and our ability to deliver exceptional results even in a tough market. We hope to see many of you at the Morgan Stanley Conference in the upcoming weeks. We'd now like to open the call up for questions.

Thank you and at this time, we will be conducting a question-and-answer session. [Operator Instructions] Our first question comes from the line of Hamza Fodderwala with Morgan Stanley. Please proceed with your question.

Hey guys. It's [indiscernible] on for Hamza. Thanks for taking the question. Just wanted to hit on pipeline for the year ahead. Obviously, you've had a difficult macro situation. There's been some unevenness over last year in terms of deals closing on time, deals getting pushed. I'm just curious what you guys are seeing kind of for the year ahead? And then also just any incremental commentary you guys can provide around the federal opportunity? Thanks.

Thanks. We're generally pleased with pipeline. I feel like we've gotten a pretty good rhythm, good understanding of customer buying behaviors over the last several quarters and able to invest where we see continued opportunities. So, prioritization of VM, especially in the enterprise market and candidly, our ability to move enterprise customers through the Tenable One machines as well. So, feel good about pipe. In terms of the federal space, I'd say it's -- very consistent with previous years in terms of seasonality. So, weighted in what's typically the third quarter, but we feel good about the momentum that we're building and the pipeline that we're building throughout the year, especially in the state and local markets as well.

Is that all Hamza?

Yes, thank you.

Our next question comes from the line of Joel Fishbein with Truist. Please proceed with your question.

Thanks for taking my question and great quarter. Amit, I just want to drill down a little bit on Tenable One, massive new product cycle. Love to understand how customers are thinking about the attack surface management? And also talk about the price uplift. You've mentioned previously, 30% plus. Love to just understand a little bit more detail about how that's-- the go-to-market structure. I know you're doing that sales kickoff this year. So, 2023 could be a really goodyear for that? But any color you can provide would be really helpful. Thanks.

Yes, I think directionally still looking at that 70%. So, we haven't updated that figure, but directionally consistent with what we've seen previously with Tenable One. And I'd say both the sales team and the customer base seems to be gravitating to it. It's a double-digit percentage of new sales and increasing high single-digit percentage of existing customers now on Tenable One. I think the message resonates. It makes sense. They can look at a more complete understanding of cyber exposure, a more complete perspective of risk, a much more compelling set of analytics, including attack path analytics and asset inventory types of things, which they haven't historically gotten with the vulnerability management program. The other piece is it allows us to do spend and vendor consolidation. So, by increasing their Tenable One spend to cover not only traditional VM, but also look at a cloud-based assets or also looking at their identity, we can offer them some volume-based pricing, which ends up being much more attractive than going to one vendor for VM, going to another vendor for external attack surface management, going to another vendor for cloud security. So, we're seeing great leverage in go-to-market function, and it really has been resonating with customers. We expect that trend to continue, if not accelerate.

And Joe, this is Steve. As a matter of clarity, the uplift we're getting on Tenable One, we said in the past is 70%, this quarter was no different. So, we're getting a substantial uplift. We're transacting larger deals. It's one of the reasons why we're having great success adding lots of large customers.

Great. And just one quick follow-up, Steve, just -- or Amit. OT is obviously a very big opportunity. I think -- I know we're early days, but -- and it feels to me to be greenfield. Can you just go through the competitive dynamics in some of these OT deals? And what inning are we in with regard to this OT opportunity?

Yes, I'd say we're probably still -- we're probably in the second inning at this point. If you rewind the clock a couple of years as questions would come up about OT, what we'd say is we've entered some small procurements. We've entered pilot or Phase I deployments where they're looking at a couple of factories, a couple of facilities, trying to operationalize the data and the workflows that come along with the OT product. And over the last a couple of quarters, what we've said is we're seeing some follow-on deals, global types of deployments, six and seven-figure types of transactions. So, we're seeing that momentum build. I think we're still early in the market, and it's a market that doesn't move as fast as the IT market, but it's very deliberate, and I think the spending is very real. In terms of competitive dynamics and competitive landscape, I'd say we're predominantly competing against just a small number, two or three private pure-play-focused vendors in the OT space. We feel like our technology is compelling and really leads the market when it comes to looking at the converged IT/OT environment. So, if you look at a factory floor today or if you look at pipeline operations or other OT environments, they are exclusively OT. They have a bunch of IT systems, IT control systems in those factory floors as well. And so we're, I think, unique in our ability to deliver incredible insight for overall risk of facility, which would include both OT and IT, and we think it's a significant competitive advantage for us.

Thank you so much.

Our next question comes from the line of Brian Essex with JPMorgan. Please proceed with your question.

Hi, good afternoon and thank you for taking the question. Maybe, Amit, just to kind of follow up on spending environment. Any incremental color you can -- or additional color you can provide in terms of maybe how you've seen customers react to macro headwinds in the past? And what's different now? Do they tend to maybe approach asset coverage a different way? And does that maybe impact your ability to expand on the asset coverage side? And maybe how is it -- are you seeing adoption of Tenable One and EP, does that insulate you somewhat from that kind of environment? Maybe if you could kind of touch on that a bit?

Yes, Brian, great question. We had a very successful quarter from an expansion business perspective from a net dollar expansion business perspective. So, we are seeing customers expand both the number of assets we're covering for them as well as through Tenable One, in particular, seeing the different types of assets where they're allocating licenses to more cloud security, identity or other areas where we get smaller presence in previous periods. I think the sales team has gotten into a pretty good rhythm in terms of identifying how to identify opportunities, how to hunt through the budget and identify the new workflows in customer environments that are required in order to transact business. If you rewind the clock three quarters or so, we said, hey, we're seeing elongation of sales cycles. We're implementing more rigorous inspection, nitpick processes across our sales forecasting. And I think those are paying off. I think the sales team feels more confident in transacting business in this environment, tougher macro, and it's just the reality we're operating in. But I think we feel pretty good about both pipe and our ability to close transactions.

Got it. That’s real helpful. Keep it to that one. Thank you.

Our next question comes from the line of Rob Owens with Piper Sandler. Please proceed with your question.

Great. Thanks for taking my question. Could you speak to just how the quarter progressed, I guess, from a linearity standpoint. And to that end, Steve, maybe anecdotes around the different puts and takes regarding conservatism on the 2023 numbers, just what you discounted, what you took into effect there?

Hi Rob, good questions there. First, I would say we had a strong finish to the quarter. We closed a lot of deals in December and especially the last couple of weeks. That's at our quarters continue to be very back-end loaded more so than what we typically see. I believe this is a consequence of the macro as customers continue to scrutinize budgets and evaluate spending priorities. We think cyber exposure fairs pretty well in this market, but increasingly, customers are waiting to see how their quarters play out before committing to a purchase. So, I think the takeaway here is that linearity is certainly a little more back-end loaded now than what we've seen in prior quarters. And in terms of our guide, our CCB guide, as we head into 2023, first, we have a much tougher compare, particularly in Q1 where we grew CCB 31% last year. We're assuming the macro will continue to be challenging and potentially even deteriorate further, and that's reflected in our guide. But overall, I think we're pleased with the progress on the quarter, adding lots of new customers, adding lots of large customers, pipeline levels are healthy. But I think we're trying to take a cautious approach here. As we said guidance initially out of the gate. And obviously, there's a lot of selling up in the year and -- we 'reencouraged with our progress to-date, and we'll have to see how the rest of the year plays out, but we feel very good about our business and have a lot of confidence in our ability to be successful in this dynamic environment.

Great. Just the one for me. Thanks.

Our next question comes from the line of Andrew Nowinski with Wells Fargo. Please proceed with your question.

Hi, this is Justin Donati on for Andrew. Thank you for taking our questions. So, congrats on a good quarter. When you were talking about the pipeline, you specifically spoke about strength with your enterprise customers. Just wondering if you're seeing any difference in terms of buying behavior between your mid-market customers versus your enterprise customers? Thank you.

No, I think we saw strength pretty much across the board, including in the in the mid-market customers as well. If anything, on the enterprise side, maybe just slightly smaller in the net new lands but continued health in the number of new lands and the expands and certainly strength in the mid-market as well.

Great. And then just as a quick follow-up. You talked about your continued investments in your go-to-market. Just wondering what your plans are for sales hires in the coming year. And if you're expecting that to be more front-end loaded or you're taking a slightly more conservative approach this year?

Well, first and foremost, we are planning to hire in 2023. And I think it's fair to say, adding more quota capacity. Our expectation is that we're going to add more quota capacity in 2023 than we did in 2022. We have a lot of confidence in our business. And investments are certainly a big part of that and obviously continue to double down on innovation and invest in product as well. We've been very active from a product perspective and bringing new products to market. We did talk a little bit about on the call the factors that kind of influenced the timing of those investments. First is hiring. We tend to front load are hiring early in the year. So, more of the hires will come online in the first half of the year and specifically with Q1. We also have a number of industry and other events in the first half of the year, such as our annual sales kickoff, which will be live in-person event this year, RSA and many others. So, clearly making a lot of investments. We're very pleased to be offering the guide in terms of operating margin and cash flow that we're providing today, and we have a lot of confidence in our ability to continue to drive further margin leverage.

I appreciate the color.

Our next question comes from the line of Mike Cikos with Needham & Company. Please proceed with your question.

Hi guys. Thanks for taking the questions here. I did want to touch on the customer behavior. I know you answered some earlier questions with respect to enterprise versus mid-market and obviously, the strong expansion we've spoken to. But for sales cycles, and that's really what I'm driving out here with the customer behavior. Have they been relatively stable versus what we spoke about in Q3? Or have we seen any elongation in any way on that front? And maybe it would be helpful, too, if you could kind of pepper in any color when thinking about geographic theater.

Mike, great to hear from you. We have not seen any elongation or any significant change in the sales cycle since what we spoke about in Q3 of last year. And I think that allows our sales team to just have continued confidence in their adjusted sales processes and forecasting methodology. In terms of geos, I think last year, we called out some any peculiar behaviors and geos. At this point, I think we're seeing fairly consistent performance across all major theaters in geos.

That's great. And one more, if I could. But I did just want to ask about Q1, just given the fact that we're almost halfway through it already. Can you provide any additional color for how customers have put together their cybersecurity budgets as we think about calendar 2023? Obviously, we're all talking about the increased scrutiny here. But curious since cyber is perceived as being this more insulated sector, what are those customer conversations been like? And just a real quick housekeeping to tap on to the end of that. But Steve, I know you spoke about the annual sales kickoff in Q1 as being in person. Is there any way to quantify how much of an expense that item is are we talking about an incremental $2 million to $3 million? Or any color on both those fronts would be beneficial. Thank you.

Yes, I'll provide a little bit of color here on both your questions and I think Amit will interject with maybe some color commentary on customer spending and budgets for 2023. First, with regard to -- I think your question was like how does it look here out of the gate. We're encouraged by what we saw in January. I'm very encouraged, but that's reflected in our outlook today, and obviously, March will be determinative given typical monthly flow for us. The other thing I'll say with regard to sales kickoff, the quantum of that investment is much larger than $2 million. We're talking north of $5 million. So it's a large discrete item. We're very pleased to be doing a live in-person sales kickoff this year for the first time since the pandemic and our sales team is really excited about it as well as our -- the rest of our company. Obviously, it's factored in our guidance and our guidance, we believe, is strong as a gate with regard to margins and cash flow and our expectation is that operating margins will improve throughout the year, consistent with what we've seen in prior years.

Yes, I think the only thing I would add to it is that the VM market remains very healthy. We see customers continuing to expand their VM coverage. And we're also seeing great traction, especially with Tenable One around cloud security. We called out strength in our OT sales during the course of the quarter. So, customer budgets are there. I think to the extent that we can become a cost-effective vendor consolidation platform play for them. There's a lot of interest, a lot of strategic dialogue around that. And I think customers are very excited about some of the newer analytics that we've introduced with Tenable One. So, we look forward to updating you during the course of the year, but I feel like Tenable One looks like it will continue to play a larger and larger factor throughout the year and going into next year.

That's great to hear. Good to see the profitability guide and the reiterated unlevered free cash flow guide when we think about calendar 2024 as well. I'll turn it over to my colleagues. Thank you.

Our next question comes from the line of Saket Kalia with Barclays. Please proceed with your question.

Okay. Great. Hey guys, thanks for taking my questions here. Amit, maybe just to start with you, and apologies if this has already been addressed. But I was wondering if you could just talk about how customers look at the ROI from a platform like Tenable One? It includes so much more kind of additional valuable product that lowers the risk profile, but I'm curious, when you talk to customers about Tenable One, how are they sort of thinking about ROI?

Hey Saket, great question. There's a couple of obvious and a couple of nonobvious answers to it. I think the most obvious is just from a vendor consolidation cost reduction standpoint. So, if you're using Tenable for VM, let's say, a random example, you have 30,000 assets and now you want to look -- also look at your cloud security requirements, your Active Directory requirements. If you're going to a separate vendor, for those solutions, you're spending -- you need one through 10,000 on cloud assets and one through 8,000 on Active Directory in addition to the one through 30,000 on VMwares. If you're consolidating your spend with Tenable and Tenable One, you can buy a volume discount, it's one through 50,000 on Tenable One. And so the -- the leverage in budget and spend through vendor consolidation is very meaningful, which in today's macro environment and what's happening with Scrutineer budget, we think is compelling differentiation for us. The second is in the analytics. We simply are able to bring more analytics and unified analytics to the table than going to disparate vendors. So, for instance, building an asset inventory everywhere a particular piece of software exists across your environment -- anywhere vulnerability exists across your environment, whether it's on-prem, in cloud or other places, we think, is very compelling. Prioritizing what needs to be addressed, we think, can be a compelling differentiation. Looking at a top-top analytics to say, hey, what is the path what are the various paths of systems and vulnerabilities and users and permissions that could get me to this sensitive internal asset from my external attack surface from Internet-facing assets is a pretty compelling differentiator compared to buying individual and stove type solutions. So, we think both from a value and analytics standpoint as well as a vendor and cost consolidation standpoint, the platform approach to understanding the exposure and risk just makes sense. And that's why we're seeing both the sales team and customers really gravitate toward it.

Got it. Got it. That makes a lot of sense. Steve, maybe for my follow-up for you. Again, apologies if this was talked about, but can we just talk a little bit about gross margins for 2023 that was down sequentially in Q4? I'm guessing that's from hosting costs, but curious how you think about that here in 2023 as Tenable One presumably becomes a bigger part of the business?

Sure. Great question, Saket. The gross margin in the fourth quarter came in as expected and is impacted by the recent launch of some new products for us. One is ASM, which is a new use case. The cost of domain attribution is something we can leverage over time as we see higher penetration rates. Also with Tenable One, we have a more robust cyber asset inventory which is critical to supporting functionality such as Attack Path Analysis and Lumin Exposure View. So, these are new areas of innovation come with some initial semi-fixed costs that we expect to fully absorb over time. and that's certainly impacting gross margins. Overall, very pleased with gross margins, and we've said on the call that we expect gross margins to kind of stay in the high 70% range for 2023, and we expect gross margins to improve during the course of the year.

Very helpful. Thanks guys.

[Operator Instructions] Our next question comes from the line of Mike Walkley with Canaccord Genuity. Please proceed with your question.

Great. Thanks. My congratulations also on the strong close to the year. Amit, when you study your customer base, what percent do you believe will ultimately upgrade to Tenable One, while it's high single-digits of the base currently, where could that penetration go over the next couple of years had that should be a strong source of sustained growth?

Yes, it's a great question. And I think, obviously, there's tremendous potential. We're putting a lot of focus on it as a company. The leading indicator for that would be our new sales. And what we're seeing is high teens percentage of new sales coming in on Tenable One. So, over time, as long as that continues to remain healthy, we would see a larger and larger percentage of customers moving to Tenable One, where it could go long-term remains to be seen, but we're pretty excited about the potential.

Okay, great. And just a quick follow-up question. Any changes in the competitive environment entering 2023, whether your competitors potentially putting themselves up for sale? And you guys certainly have a lot of momentum with Tenable One. Just any change in the competitive environment that seems more favorable as you enter 2023?

Yes, I mean, obviously, we wouldn't speculate about that, but I feel really good about the competitive environment. We are pretty consistent saying that we have exceptionally strong win rates especially in this market against our primary competitors. That remains -- those win rates remain exceptionally strong. And while we don't have a specific update to that, I'd say anecdotally, continues to climb in the sales team feels exceptionally confident going into any VM opportunity, but those are really ours to lose. And candidly, they feel like Tenable One gives them a very significant value differentiated capability to talk about as well.

Great. I hope your in-person event goes well and thanks for taking my questions.

Great. Thank you.

Our next question comes from the line of Jonathan Ho with William Blair. Please proceed with your question.

Hi, good afternoon and let me echo my congratulations as well. I wanted to maybe dig in a little bit into the Active Directory and identity products. Can you talk a little bit about what you're seeing in terms of demand there and maybe the potential for that to be a larger product set over time as well?

Well, we think it's -- there's tremendous market potential there. As you know, Jonathan, Active Directory is target number one for hackers, whether it's a nation state adversary as we saw on the Mandiant breach or whether it's ransomware, where over 90% of ransomware is going directly after domain controllers and Active Directory. Active Directory is a trick and mess to deploy in any large environment and almost impossible to keep clean when you look at the number of pieces of software and the complexity of Active Directory, the number of pieces of software we should modify as they get installed into an enterprise environments. So, having a solution -- and most organizations don't have a solution in this area. The security teams know it's a big problem. They maybe do a consultant and an annual audit or assessment of their Active Directory environments, which is clearly not enough. So, we feel like there's tremendous market opportunity. The sales team has a lot of confidence in the Active Directory product and bringing it into customers. We had a great quarter with Active Directory in Q4. So, excited about the potential, both in 2023 as well as Active Directory playing an increasingly large role in Tenable One and some of the analytics that we're unlocking with Active Directory and identities.

Great. And just as a follow-up for Steve. I think there was a small reduction in force. Can you maybe give us a little bit more detail on the risk and maybe what that means in terms of your margins, maybe where some of the cuts came from? Thank you.

Yes, it was fairly broad across many functional departments, really with an eye with the improving operational efficiency and better aligning our cost base with the market opportunity that's in front of us. And we feel like we're in a great position this year to make investments, as Amit talked about earlier. Making investments in terms of product and adding lots of quota capacity. And then one of the comments I made earlier was our expectation is that we're going to have more quota capacity in 2023 than we did in 2022. Obviously, the demand environment remains highly dynamic, but we've done a good job over the years, balancing growth with profitability, driving margin leverage and achieving sustainable levels of growth.

Thank you.

Our next question comes from the line of Joshua Tilton with Wolfe Research. Please proceed with your question.

Hey guys. Thanks for taking my question. My first one is kind of high level. But the feedback from the channel, I guess, throughout last year on VM, I would say, has gotten incrementally worse each quarter. But if we look at your guys results, it sounds like you guys have almost gotten incrementally better, especially in regards to your six-figure adds. Could you maybe kind of just help us reconcile those data points?

Yes, in terms of the channel checks, we don't -- I think this for you. We don't see it. Our channel partners remain very bullish on VM and very bullish about their ability to differentiate Tenable as the leading VM vendor and provider and feel bullish that their customers are looking to expand their VM capabilities and more -- as more and more executive questions are asked of security programs. Are we vulnerable, -- where are we vulnerable, are we exercising good standard of care? Are we patching our systems quickly enough? Are we being negligent, I think those -- answering those types of executive questions really comes from your VM program, not from your firewall, not from your endpoint or your logging solution. So, as more executives are asking questions of cyber, we feel like it bodes well for VM. We're seeing that in our results. We're seeing that in our conversations with customers. And Tenable One allows us to have even more strategic conversations across a broader set of asset types. So, we've remain committed to the VM and Cyber Exposure market. And I think given both our results and our confidence in what we're seeing in our own conversations with customers and channel partners, we will remain committed to and increasingly invest in that strategy.

Yes. And the one thing that I'll add is, keep in mind that we transact sales in 160 countries. We have hundreds of channel partners and -- so I can't speak to the channel checks, but sometimes if you're talking to a partner or a contact that may only have a very specific view into our business or maybe even to the VM market. And also, our exposure solutions collectively represent about 50% of our total sales. So, over the years, we've done a really good job becoming more strategically relevant to our customers, broadening the focus and we're having success selling a platform and playing in larger market opportunities such as cloud security and even identity and security analytics, which are top spending priorities and pain points for our customers this year.

Makes sense. And then just a quick follow-up. It sounds like you guys are definitely communicating that the initial CCB guidance for 2023 is in your opinion, de-risked I think you talked about that it assumes the macro actually gets worse. Is there anything else outside of that, that you can just quantify or take one level deeper in terms of what exactly inside the guide is more de-risked? Maybe expansion versus new business, where you expect NRR to kind of shake out? Anything else you can kind of talk to in the 2023 guide that should help us feel like those numbers are de-risked?

Yes, we think our CCB guide for the year is good, but we described it as cautious. And we think that's the right approach to have in a market like this, that’s highly dynamic, right? Each quarter is different in its own right. And our expectation going into 2023 is that the macro will remain challenged and perhaps will even worsen the first half of the year. So, we want to be prepared for whatever comes our way. We've done a good job over the past several quarters. Really identifying opportunities where we have success, larger closing larger deals and some verticals are stronger than others, as we've talked about earlier, and tech was particularly strong for us, financial services, all of those. So, we have a good sense of what's working really well for us. I think with regard to the guide, I think we're just taking a more cautious approach, and we're assuming that the macro could potentially impact close rates. And maybe even renewal rates. But what I will say is that our renewal rates continue remain strong. Upsell was very strong in the quarter. We did add lots of large deals. But our expectation is that new lands, for new logos could be tougher to transact in 2023.

Thanks guys. Appreciate the update.

Our next question comes from the line of Rudy Kessinger with D.A. Davidson. Please proceed with your question.

Hey, thanks for taking my questions guys. Certainly, a lot of talk about Tenable One and good traction there. I think it was last quarter, maybe the quarter before you guys started talking about the sales force, really leading with that product as opposed to leading with VM. Just where are we in that evolution? I don't know if you can speak to maybe the percent of deals or cycles where your reps are leading with Tenable One as opposed to VM. But just how has that changed over the last six months?

Yes, I think the sales team has a lot of confidence in the product, seeing the customer traction and the results that customers are experiencing with Tenable One gives them an increasing level of confidence. Today, it remains a teens percentage of new sales. But obviously, in the pipeline, pipeline is more heavily weighted towards Tenable One, and we expect that to continue to accelerate with sales kickoff and more training and more time and more differentiation.

Got it. And then secondly, you talked about vendor consolidation playing out as a positive for you guys. I guess I'm also curious, there are some other kind of larger, broader cyber platforms out there that have grown in a VM product in the mix over the last couple of years. I'm curious if you're seeing vendor consolidation maybe hurt you in some cycles with some of those larger platforms out there throwing in the VM product.

Yes, there's been a lot of vendors over the course of years, making a lot of noise about VM going back four, five-plus years, Tanium, CrowdStrike, Microsoft others. And what I would tell you is they make noise. We see them for a quarter or two and then very quickly their sales team understand that their products are inferior and they start gravitating to their core markets and candidly, where their companies are investing much more aggressively logging SIM and elsewhere. So, especially in a product like VMware independent audit is an important function and where we feel like we've got a quantitatively and qualitatively differentiated product and experience and understanding the enterprise. We almost never see those larger IT vendors participating and certainly never see them beyond a rule -- a first phase of competition. I guess the only other thing I would add to that is obviously, our footprint is broader than VM. So, if customers are really looking to understand Cyprus more broadly than even other solutions which offer VM capability are not really competitive. And our Cyber Exposure solutions now represent, as Steve said, 50% of our sales.

Got it. Thanks for squeezing me in.

And our next question comes from the line of Shebly Seyrafi with FBN Securities. Please proceed with your question.

Yes. Thank you very much. So, were there any call-outs on the geo side, EMEA, for example, growth here was decelerating in the last two quarters. You have a tough comp in Q1 in EMEA as well. Just any callouts on the geo side.

No, I think on the geo side, what we just said earlier is that all theaters performed pretty much to expectations in both enterprise and commercial segments. So, felt good about the international markets and the balance of our international performance.

Okay. And separately, you had a 2% headcount reduction in Q4, but -- and I think you said 1,900 employees for the end of the year. I think that's up 10% or so year-to-year. What's your expectation for A, headcount growth and B, quota-carrying salesperson growth in 2023?

Sure. Well, we provide headcount at year-end following our Q4 results. So -- this is not a number we provide for the upcoming year as part of our annual guidance. But as we discussed earlier, we are hiring, and we're planning to make investments, most notably in product and go-to-market. In terms of quota capacity, we expect to add more quota capacity in 2023 than we did in 2022. Unequivocally, we have a lot of confidence based on the results of not only this quarter but the past couple of quarters. So we're adding lots of customers transacting lots of large deals. The takeaway here is the business climate is pretty and so we're constantly reassessing the investment priorities. But as we discussed layer, we're going to add headcount. Look, we're in the fortunate position to make these investments in 2023 because we grew our workforce very thoughtfully since the pandemic. Our workforce grew in total, 28% over the last three years, which puts us in a great position to invest this year while still delivering margin improvement. So, we think we're doing a good job aligning our cost base with the investment opportunities that are in front of us.

Thank you.

And ladies and gentlemen, we have reached the end of the question-and-answer session. And this also concludes today's conference and you may disconnect your lines at this time. Thank you. have a good day.