CyberArk Software Ltd (CYBR) Q2 2021 Earnings Call Transcript

CyberArk Software Ltd  (NASDAQ: CYBR) Q2 2021 earnings call dated Aug. 12, 2021.

Corporate Participants:

Erica Smith — Vice President of Investor Relations

Udi Mokady — Founder, Chairman and Chief Executive Officer

Josh Siegel — Chief Financial Officer

Analysts:

Saket Kalia — Barclays — Analyst

Sterling Auty — J.P. Morgan — Analyst

Jonathan Ho — William Blair — Analyst

Hamza Fodderwala — Morgan Stanley — Analyst

Rob Owens — Piper Sandler — Analyst

Adam Borg — Stifel — Analyst

Brian Essex — Goldman Sachs — Analyst

Jonathan Ruykhaver — Baird — Analyst

Roger Boyd — UBS — Analyst

Gregg Moskowitz — Mizuho — Analyst

Catharine Trebnick — Colliers — Analyst

Alex Henderson — Needham — Analyst

Presentation:

Operator

Good day. Thank you for standing by. Welcome to the CyberArk Software, Q2 2021 Earnings Conference Call. [Operator Instructions]. After the speakers’ presentation, there will be a question-and-answer session. [Operator Instructions].

I would now like to hand the conference over to your speaker today, Erica Smith, Vice President, Investor Relations. Please go ahead.

Erica Smith — Vice President of Investor Relations

Thanks Eve. Good morning. Thank you for joining us today to review CyberArk’s Second Quarter 2021 Financial Results. With me on the call today are Udi Mokady, Chairman and Chief Executive Officer; and Josh Siegel, Chief Financial Officer. After prepared remarks, we will open up the call up to a question-and-answer session.

Before we begin, let me remind you that certain statements made on the call today may be considered forward-looking statements, which reflects management’s best judgment based on currently available information. I refer specifically to the discussion of our expectations and beliefs regarding our projected results of operations for the third quarter and full year 2021. Our actual results might differ materially from those projected in these forward-looking statements. I direct your attention to the risk factors contained in the Company’s annual report on Form 20-F filed with the U.S. Securities and Exchange Commission, and those referenced in today’s press release that are posted to CyberArk’s website, as well as risks regarding our ability to actively transition the business to a subscription model, the duration and scope of the COVID-19 pandemic, its related impact on global economies and our ability to adjust in response to the COVID-19 pandemic. CyberArk expressly disclaims any obligation or undertaking to release publicly any state [Phonetic] updates or revisions to any forward-looking statements made herein.

Additionally, non-GAAP financial measures will be discussed on this conference call. Reconciliations to the most directly comparable GAAP financial measures are also available in today’s press release, as well as in an updated investor presentation that outlines the financial discussion in today’s call. A webcast can also be found on our website in the Investor Relations section.

With that, I’d like to turn the call over to our Chairman and Chief Executive Officer, Udi Mokady. Udi?

Udi Mokady — Founder, Chairman and Chief Executive Officer

Thanks, Erica, and thanks everyone for joining the call today. We hope you and your families are all well. We had an amazing second quarter, one of the best in the Company’s history. Our subscription transition raked out of the gates in the second quarter with the mix of subscription bookings reaching 65%. Despite the headwind created by the mix, we achieved total revenue of $117 million. This revenue level paired with the mix over-achievement [Phonetic] demonstrates that our bookings were considerably higher than anticipated in our guidance.

In fact, the underlying business significantly accelerated in the second quarter driven by record SaaS bookings and robust subscription demand. Due to our strong bookings, ARR grew by 35% to $315 million as of June 30. Even more importantly, our subscription ARR grew faster than 125% year-over-year. Recurring revenue reached $81 million, an increase of 32% compared to Q2 2020. Subscription mix, ARR and recurring revenue demonstrate the progress in the subscription transition, momentum in the business and the incredible demand trends we are seeing for our identity security platform, which is centered on PAM.

I plan to frame our discussion on the quarter around the pillars of growth, subscription transition, innovation and profitability. So firstly, on growth. Positive secular tailwinds and execution of our land and expand strategy are contributing to the acceleration in our business. Identity Security is at the center of digital transformation, Zero Trust and hacker innovation, three of the most important and intertwined trends in cyber security. With digital transformation and the move to the cloud, Privilege Access is everywhere and every identity across human users, applications and bots can be privileged under certain conditions. If you think about Zero Trust, organizations around the world are no longer just strategizing about frameworks. They are implementing programs and allocating budgets taking an assume-breach mindset that trusts nothing and verifies everything.

Attackers are exploiting the changing IT landscape. In landmark breaches like SolarWinds, Microsoft Exchange, Qualcomm and Colonial Pipeline, identity compromise and the abuse of Privilege Access is the common denominator. Weaponized software, targeting supply chains and sophisticated reservoir attacks are examples of the severity of the threat landscape and are pushing our very security to the top of CIO and CISO priority list. Our ability to deliver industrial strength security and power business agility and growth and provides fast time-to-value is an unique and in-demand, combination. This creates a strong market backdrop.

Our go-to-market teams are executing and taking full advantage of these tailwinds to drive growth. They have quickly learned the land and expand approach focused on the value of subscription delivery, the ability to leverage a robust and growing partner network, and the selling process more aligned with our customers’ needs, when it comes with our industry-leading SaaS solutions and focus on subscription sales.

One of the most important of the market focus areas was expanding our sales motion to include our Identity Security Vision. In January, we organized our sales team across the Identity Security pillars of PAM and our two speedboats: Access and DevSecOps. As evidenced by the acceleration in our business, the increased focus and specialized resources are working. Productivity levels have increased in all regions and our cross-sell activity has improved considerably.

At the heart of our business is our robust PAM portfolio, and in Q2, PAM and particularly Privilege Cloud was the biggest driver of growth. The majority of our customers land with PAM. We added more than a 185 new logos across verticals, geographies and customer size. In fact, Fortune 500 and Global 2000 companies in manufacturing professional services and critical infrastructure landed with Privilege Cloud in the second quarter, a clear demonstration that large enterprise customers are increasingly protecting the keys to the kingdom, leveraging the cloud, our cloud.

In fact, the success of PAM extended across all portfolio areas as we look across — as we look at strong close rates and a meaningful increase in deal sizes as new customers made longer-term strategic purchasing decisions with a broader set of our solutions. Customers are implementing comprehensive identity security programs including CyberArk Everywhere initiatives, relying on CyberArk across our portfolio of solutions. This is important because of the maturity of our solutions, but also the flight to trust. In today’s threat environment, customers increasingly want to work with partners who have real world experience solving critical cyber security challenges.

While there are multiple examples from Q2, one I will highlight demonstrates the increased velocity of our business and our improved expand motion. The financial services company went deep with Privileged Access in the first quarter, expanded quickly in Q2 to secure servers with endpoint Privilege Manager in a high six figure ACV deal. The increase in ransomware attacks like Colonial Pipeline is accelerating demand for Endpoint Privilege Manager, which has been proven in our lab to be a 100% effective in blocking more than 3 million types of ransomware and counting.

I want to highlight a few more customer examples from the second quarter that demonstrates the power of our identity security strategy. An existing hospital customer, who has been locking down endpoints with CyberArk since 2019 is now displacing their legacy PAM vendor to modernize their environment with Privilege Cloud. They are further expanding CyberArk footprint by implementing Conjur to secure the DevOps pipeline as well as our Access solutions including vendor access.

Our C-Cube integrations, such as SailPoint and ServiceNow as well as our ability to secure a broad set of cloud used cases were key contributors to this great expansion deal [Phonetic]. One of our PAM financial services customers in Europe was modernizing its identity stack and picked CyberArk MFA and SSO identity solutions in a highly competitive situation. They recognized the criticality of identities and wanted identity access from trusted partner who will empower the business, provide strong security controls and deliver value quickly.

In the seven-figure annual deal, the European professional services company embraced our identity security platform by nearly all of our SaaS solutions across the portfolio. This new logo will benefit from increased security and ease of use across all identities protecting humans and non-humans across privileged Access and DevSecOps. The breadth of our portfolio and our ability to secure modern and traditional applications were key to winning this new logo.

In a highly competitive win against a well-recognized DevOps solution, an existing Endpoint Privilege Manager customer is trusting Conjur Secrets Manager to secure its CI/CD pipeline. With CyberArk, this Fortune 500 transportation company, not only wanted the scalability and agility of Conjur, but also the peace of mind from knowing that the mission-critical applications running its business are truly secure. Attackers are increasingly targeting applications and developers which is contributing to the strong momentum for Conjur Secrets Manager.

We are typically the second call after an incident response front in a post-breach situation, and there are a number of examples every quarter. In Q2, a leading company who had just been hit by a ransomware, purchased Privilege Cloud through AWS and was up and running in a matter of hours, quickly getting their business operations.

Our partner ecosystem of advisory firms, VARs and C-Cube technology partners is further extending our reach and driving scale in our go-to market. Our advisory firm partners are investing in CyberArk practices in training and dedicated resources, another demonstration of the strong market demand trends in the industry.

C-Cube partners like Red Hat we collaborate with on automation and DevOps as well as AWS cloud base and UiPath differentiate our solutions in the field and allow our customers to maximize their IT investments. Moving on to the second strategic pillar, which is our subscription transition. We performed ahead of our expectations. Our transition strategy was set in motion in January, and since then, customers, partners and employees have embraced the new selling strategy. In just the second quarter of our active transition, we reached 65% subscription booking mix, much faster than we anticipated.

Our transition continues to be SaaS-heavy and we were thrilled to reach a new record for SaaS bookings across every one of our SaaS products with particular strength in Privilege Cloud and Endpoint Privilege Manager.

In fact, every geography and every SaaS product saw an increase in subscription mix compared to the first quarter of 2021 giving us confidence that the subscription pricing will be adopted across verticals and regions. While the active subscription transition is relatively new, we already have more than 675 customers with over $100,000 in ARR, an increase of 39% from June of last year. We also continue to see great progress in our customer success program, and we are well on our way toward delivering transformative value to our customers.

We are thrilled with the progression of our subscription transition, and after analyzing the path forward, we are confident we will reach our goal of 85% of bookings from subscription and exit the transition by the end of 2022. Said in another way, instead of an eight to ten quarter transition, we now expect to complete the transition in eight quarters. Moving on to our innovation pillar, which is the foundation of our strategy and strengthens our leadership position in the market. We were pleased to be named a leader in the July 2021 Gartner Magic Quadrant for Privileged Access Management, positioned both highest in the ability to execute and furthest in completeness of vision for the third time in a row.

The power and differentiation of our Identity Security strategy is demonstrated by Dynamic Privileged Access and Secure Web Sessions which we introduced at our Impact event in June. The response from our customers has been overwhelmingly positive. Dynamic Privileged Access extends our existing just in time capabilities to multi-cloud and hybrid workloads. Every enterprise IT environment has both standing and Dynamic Privileged Access, and customers require a solution that secures both.

Secure Web session is part of our Access speedboat and delivers continuous authentication and session protection including session recording for all types of web applications from business apps to cloud councils. This solution was described as a game changer for identity security by customers who attended our event. We are the only vendor offering this essential capability required to achieve zero trust. I will wrap up with some comments on the profitability pillar. Our go-to-market engine is firing on all cylinders and our innovation machine is extending our leadership position.

As we looked into the strong market fundamentals, acceleration of our business, and improved close rates and productivity, we made the decision to increase our investments in the second half of 2021, particularly in go-to-market to drive growth in 2022 and beyond. We have not changed our philosophy around investments. We critically evaluate our investments to ensure they deliver a strong return and long-term value. And as a result, we expect to return to the profitability levels that we were on before we entered the transition period.

To recap, before looking ahead, we had an incredible second quarter, one of the best in the Company’s history. The underlying business accelerated. Each of our SaaS solutions reached record bookings, identity security across PAM, Access and DevSecOps is becoming a security requirement pushed forward by major industry tailwinds, digital transformation, Zero Trust and hacker innovation and our subscription transition strategy is delivering results.

Our outperformance in the first half of the year gives us incredible confidence in our ability to execute and the strong demand environment supports our growth. As a result, we are raising the full-year bookings assumptions underlying our guidance, above and beyond our beat in Q2, which Josh will discuss in more detail. We are well on our way towards transforming the business into a fast growing, durable subscription company with our cloud solutions leading the way which will unlock tremendous value for our Company, our shareholders, our customers and our partners.

I will now turn the call over to Josh who will discuss our results and outlook for the third quarter and full year. Josh?

Josh Siegel — Chief Financial Officer

Thanks Udi. So before we discuss the details of the quarter, we wanted to remind you that we posted slides to the website that will be helpful as we walk through our results. As Udi mentioned, we had a great second quarter with an acceleration in the underlying business, particularly for PAM and all of our subscription transition metrics came in better than we expected. In terms of the headline P&L, we delivered total revenue of $117 million with a 65% mix of subscription bookings, that’s well ahead of our guidance framework of a 55% mix.

As Udi also mentioned, revenue above the midpoint with a higher subscription bookings mix was because of the stronger than anticipated total bookings for the quarter above what we guided for in May. Subscription revenue reached $27.1 million and represented 23% of total revenue in the second quarter, that’s increasing a 101% from $13.4 million in subscription revenue and only 13% of total revenue in the second quarter last year. Our combined maintenance and professional services revenue was $62.9 million with $53.5 million coming from recurring maintenance and $9.3 million in services revenue. Total recurring revenue in the second quarter reached $80.6 million or 69% of total revenue growing 32% from $60.8 million, and only 57% of total revenue in the second quarter last year.

The mix of subscription bookings as a percentage of new license bookings really demonstrates the pace and success of the transition. We are moving faster than we planned through the transition, as you can see by our 65% subscription booking mix. Economically, the headwind created by the mix was approximately $13 million in the second quarter, when we compare it like-for-like to the mix in the second quarter last year.

Normalizing for the mix shift, the license portion of our business, our SaaS, On-Prem subscription, and perpetual would have grown over 35% in the second quarter, which really supports the growth we are seeing in our business. Taking the headwind into consideration, total revenue growth would have grown 22% year-on-year. At June 30, 2021, our ARR was $315 million, growing 35% year on year and representing an acceleration from the organic growth rate in the first quarter of 2021.

We closely monitor the subscription portion which grew a 128% year-on-year to approximately $109 million and represented over 35% of total ARR at the end of June. Sequentially, we added nearly $22 million of SaaS and subscription ARR in the second quarter compared to the first quarter this year. On an organic basis, this was the strongest sequential increase in subscription ARR in the Company’s history. The maintenance ARR was $206 million at June 30, 2021. So we’re thrilled with the new business momentum in terms of number of new logos added and a healthy increase in new business deal sizes. A bit more detail, about 83% of our more than 185 new logos were subscription. That’s compared to about 50% in the second quarter of last year.

Geographically, the businesses — the business continues to be well diversified. The Americas generated $69.5 million in revenue, representing 59% of total revenue, the Americas again had the strongest percentage of subscription bookings during the quarter. EMEA had $36 million in revenue or 31% of total. APJ generated $12 million in revenue or 10% of total revenue with an increasing mix of SaaS and subscription.

All line items of the P&L will be discussed now on a non-GAAP basis. Please see the full GAAP to non-GAAP reconciliation in the tables of our press release. Our second quarter gross profit was $97.9 million or an 84% gross margin compared to 85% gross margin in the second quarter last year. We continued to make disciplined investments in the business, resulting in operating expenses of $95.9 million, a 30% year-on-year growth and operating income was $2 million in the quarter.

Three main items that impacted our operating income. First, a $30 million headwind lowered our operating margin by about 9 percentage points. Second, higher expenses from foreign exchange rates lowered our operating income by about 2%, and third, a full quarter of expenses from Idaptive this year versus last year.

On a like-for-like basis neutralizing the headwind, FX and Idaptive, our operating margin would have been approximately 15% in the second quarter of 2021. Over 70% of our operating expenses are related to headcount. We executed even better than we expected against our aggressive hiring plan to invest in the business and in the second quarter with 1,969 employees worldwide. And of our total employee count, 881 employees are in sales and marketing. Net income was $250,000 or $0.01 per diluted share for the second quarter.

In the first half of 2021, free cash flow was $45.2 million or 20% free cash flow margin. This cash flow contributed to our strong balance sheet, and we now ended the quarter with $1.2 billion in cash and investments. We also increased deferred revenue by 22% year-on-year to $275 million at June 30. Our SaaS deferred revenue grew by 136% to $63.6 million, and that’s compared to only $27 million at June 30, 2020.

Now turning to our guidance. For the third quarter of 2021, we expect total revenue of $116 million to $124 million. We expect a non-GAAP operating loss of about $6 million to non-GAAP operating income of $1 million for the third quarter. We expect our EPS to range from non-GAAP net loss of $0.19 to a loss of $0.02 per basic share. This guidance assumes about a 70% of subscription bookings and a revenue and profitability headwind of approximately $14 million for the third quarter of 2021.

Our normalized total revenue growth for the third quarter, taking the calculated headwind into account is over 25% at the midpoint of the range. And if you isolated our license lines of SaaS, on-prem subscription and perpetual, the normalized growth rate for the third quarter calculates to be 40% year-on-year.

Our guidance also assumes 40.2 million weighted average basic and diluted shares. Our guidance for the full year 2021 reflects the robust industry tailwinds and strong close rates. We expect total revenue in the range of $484 million to $496 million. And the mix assumption underlying our guidance for the full year is 64% from subscription bookings and our revenue headwind for the full year is now approximately $63 million. This represents a significant increase from our prior guidance which assumed a mix of 57% from subscription bookings and a $45 million headwind.

Given the transition, we wanted to provide more color on our growth rate taking the calculated headwind into account, which were approximately 19% at the midpoint of the range for total revenue. And if you isolate our license lines of SaaS, subscription and perpetual, the normalized growth rate would be over 25% for the full year. I want to emphasize that the combination of higher bookings mix and revenue headwind represents a significant increase in the booking assumptions underlying our guidance for the full year.

Now moving down the P&L, we expect the non-GAAP operating income to be between $7 million to $17 million. We expect our non-GAAP net income per diluted share to be in the range of $0.01 to $0.26 and for the full year, we expect 40.8 million weighted average diluted shares and about $12 million in taxes. We are increasing our investments in the second half of the year to ensure that we can capitalize on the growth opportunity, our leadership position and fundamental strength of the business.

We also want to provide a few updates on the timing of the transition and free cash flow guardrails for the full year. As Udi mentioned, on the timing of the transition, we now expect to complete the subscription transition in eight quarters, meaning we should crossover our targeted 85% threshold of bookings from subscription already by the fourth quarter of 2022.

Lastly, on cash flow. While we do not intend to guide for cash flow, we did want to provide more granularity, given that we’re already halfway through the year. Currently, we expect our free cash flow to be between 5% and 10% of the non-GAAP net income margin for the full year, with third quarter free cash flow lower than the expected quarter 20 — lower than the second quarter of 2021 because of typical seasonality.

Second quarter was great. Growth is accelerating, and our subscription transition is well underway. We are confident that our investments will drive growth and innovation in 2022 and beyond. With that, I’ll now turn the call over to the operator for Q&A. Operator?

Questions and Answers:

Operator

Thank you, sir. [Operator Instructions]. Your first question comes from the line of Saket Kalia of Barclays.

Saket Kalia — Barclays — Analyst

Okay, great. Hey guys, thanks for taking my questions here. Udi, maybe just to start with you. It’s great to see the overall revenue upside in the quarter. But I think what was really interesting was to see the revenue guide unchanged for the year despite the higher subscription mix, and sort of all the commentary on better bookings.

So I was wondering if you could just maybe double click into what you feel like is driving that underlying better bookings backdrop? Because I think we heard that last quarter as well. So could you just go one level deeper into whether this is coming from a change in the competitive environment or whether this is related to maybe some of the breach activity that we’ve seen. Curious what you feel like is driving that better bookings activity.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Absolutely, Saket, and good to talk to you here today. We talked about in the past a lot about building record pipeline. I would say we’re executing against this record pipeline. So it’s a combination of the demand environment, the market leadership and favorable competitive environment and strong execution and how we organized to execute around it. The transition is really happening strongly. The sales team really embraced us with the SaaS and subscription and with which we increased demand environment. We’re working on it and executing great.

I mentioned the speedboats really complementing our PAM core business and very pleased to see the demand for Privilege Cloud move up to up markets like the examples I’ve given where large enterprises are also adopting Privilege Cloud which gives us the opportunity also for quick time to value for them.

So I would say all of the above, the execution against a growing demand environment and I’d probably add that EPM specifically is getting strong demand driven by ransomware. But I will also say that the rest of the solutions are considered critical in this kind of threat environment and a strong pillar of zero trust.

Saket Kalia — Barclays — Analyst

Got it, got it. That’s super helpful. Josh maybe for my follow-up for you. I think we understand sort of the revised profitability, it feels like you’re investing really to — for continued growth, if you will, I think going into future years. Can you just go a little bit deeper into will all those investments sort of be in go-to-market? Is there anything in that sort of revised operating income guide that maybe has to do with the changing mix or just maybe one level deeper into sort of the revised operating income guide, because maybe for me, that was a little unexpected given the unchanged revenue guide. So just maybe one level deeper if you can.

Josh Siegel — Chief Financial Officer

Yeah. Thanks. And I’ll certainly go into that. So, first of all, we did extra hires in Q2, we were able to even overachieve on our — on our internal targets for hiring, because we were considering the very tight and competitive job market out there and with over 160 net additions, we started — we’re starting into the H2 in a strong position from the hiring perspective and will continue to be doing that as we go into the second half.

And it’s going to be really stepping on the gas on the go-to-market hires in the second half and it’s coming from — and the other part that I would dive into, the other part I would dive into is that we overachieved in Q2 bookings. Our guidance as you pointed out as well and as we pointed out several times this morning that is already, we believe we’re beating out our original internal forecast on bookings for H2, and that’s really going to drive up our variable amounts as well into H2.

So when we consider where we are on our position for hires, going into the second half, when we consider our targets for our go-to-market hires going into the second half and increased expenses related to the fact that we actually are booking more business in Q2 and are expected to do so more in the second half, we’re seeing a rise. And that’s what’s contributing to the kind of under the hood to that change in the operating expenses.

Udi Mokady — Founder, Chairman and Chief Executive Officer

And I will just add that nothing changed in our approach to run a highly efficient profitable business. But there — as Josh mentioned, exiting Q2 with such — such growth and the faster transition to subscription and adoption across SaaS by the enterprise and a favorable competitive landscape and market fundamentals, we believe that they really justify increased investment in go-to-market and scaling of the company so they [Phonetic] support the acceleration of the business and build the momentum that we’ve been talking about today.

Saket Kalia — Barclays — Analyst

Got it. Very helpful, guys, thanks. I’ll get back in queue.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Thank you.

Operator

Your next question comes from the line of Sterling Auty of J.P. Morgan.

Sterling Auty — J.P. Morgan — Analyst

Yeah, thanks. Hi guys. So I want to ask the subscription transition question this way. Obviously, the mix is much better than you originally expected, who is not choosing subscription, especially when you talk about the new customers coming on, who — what’s the profile of the company that says, you know what, subscription is just not for me.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Yeah. I think Sterling, I’ll start. I would say that we are primarily very pleasantly surprised by the adoption across regions and across verticals. And as I mentioned in my prepared remarks, we even have critical infrastructure companies and large global 2000 and 500 adopting it. And it’s happening across the board and across geographies. And as Josh mentioned, 83% of the new logos were SaaS and subscription. So it’s really happening. If I were to point to verticals that we expect them to be laggards in the adoption, it’s probably the global government vertical is where we expect them to be the later on the adoption and want to still kick off more in perpetual.

And again, under government, you can also put some highly regulated verticals, but it’s happening. And within the regions, APJ is adopting it, but will be slower in adopting SaaS and subscription.

Sterling Auty — J.P. Morgan — Analyst

Makes sense. And then, Josh, one follow up for you. I missed it if you said it, but you’ve given us kind of a great view on what revenue would it been if you didn’t do the transition, but what about free cash flow? I think first half year to date, you are down about $5 million. But in the perpetual maintenance, I would imagine you collect just a much bigger portion of the value when you do under subscription. Even if you don’t have an exact number, can you just give us a framework of how to think about that?

Josh Siegel — Chief Financial Officer

Yeah, I mean you’re right. On the SaaS and subscription model there is much more annual payments than in a classic perpetual maintenance model. And also, let’s remember that perpetual, the perpetual piece is getting more money for the license portion as compared to a typical annual contract. It’s usually an annual contract, so it could be two to three years break-even before you get to kind of the perpetual — the perpetual size.

So I know — the other piece that obviously as it correlates there, I can’t give you necessarily a framework. I mean, but there is some impact on cash flow relative to the mix of SaaS and subscription. I would probably, when we think about it, you know, correlate it to on the — we’ve always been talking about kind of cash flow being around 0% to 10% above Net Operating Margin, but what we’re seeing is still the same percentage over Net Operating Margin, but a lower Net Operating Margin. So that’s where I would correlate the difference.

Sterling Auty — J.P. Morgan — Analyst

Yeah, that makes sense. Thank you so much.

Operator

Your next question comes from the line of Jonathan Ho.

Jonathan Ho — William Blair — Analyst

Hi, good morning. Let me echo my congratulations as well. Can you give us a little bit more color on the multi-product deals that you’re seeing or platform purchases? And does SaaS make it easier for customers either to buy upfront or to add on sort of additional products over time?

Udi Mokady — Founder, Chairman and Chief Executive Officer

Yeah. Absolutely, Jonathan. I think we gave some examples on the call, customer that starts with the Privilege Cloud adds EPM faster, and we’ve seen it with the examples of customers going broad on the identity security solution. So with the combined packages we see everyone, every customer can land with third-party access, MFA and SSO, so they get a good buy on the offering, depending on how they land and from there we can show value and expand.

So it’s definitely the power of the Identity Security Platform in — taking place.

Jonathan Ho — William Blair — Analyst

Got it. Got it. And are you seeing any evidence of potentially pent-up demand from COVID-19 or maybe companies that are taking a little bit more of a strategic review one [Phonetic] with their portfolio, and then now looking for either your SaaS solutions or the add-on to some of the software solutions on the Privilege Cloud side? Thank you.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Absolutely, the latter. I would say companies are being more strategic. They’re in the new normal, and it’s time for them — Even with regards to SolarWinds and events of that probably, but first was kind of reactionary what do we do to patch and solve and we’re seeing customers across the board be very strategic across the how they’re going to secure their future and looking to be more programmatic, and definitely faster in adopting cloud.

And, we can see that also in the new logos where deal sizes have increased as they take a larger bite, because they’re being more strategic, they want to start a PAM or an identity security program.

Jonathan Ho — William Blair — Analyst

Great, thank you.

Operator

Your next question comes from the line of Hamza Fodderwala of Morgan Stanley.

Hamza Fodderwala — Morgan Stanley — Analyst

Hey guys, thanks for taking my question. So just one from my end for Josh, as well as Udi, so a lot of great color on the demand environment, larger deal sizes, it seems like there’s a lot more strategic conversations around the product portfolio. If I triangulate that to ARR, right, so this quarter you added $27 million net new ARR that was like almost double versus last year in Q1. If we think about the back half, given everything that you’re seeing about demand environment, should we expect if demand is improving that net new ARR should be growing into Q2 and Q3 and Q4? Does that make sense.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Yeah, Hamza I’ll start. Definitely, I mean, overall for the year we see ARR growing 35%. And so we had — we liked our accelerated organic ARR from — to the 35% level Q2, and we see for the year to continue growing ARR and having an annual growth of about 35%.

Hamza Fodderwala — Morgan Stanley — Analyst

And Josh, if I can just follow-up on that. So definitely growing 35%, that seems like to be a bit of an uptick versus what you guys were saying before 30% plus growth. Is that fair assessment?

Josh Siegel — Chief Financial Officer

Yeah, that’s correct. And we’re doing — we’re seeing that uptick, because of the acceleration that we had on an organic basis in Q2 and we’re glad to do that.

Hamza Fodderwala — Morgan Stanley — Analyst

Okay. Thank you so much.

Operator

Your next question comes from the line of Rob Owens of Piper Sandler.

Rob Owens — Piper Sandler — Analyst

Great. Good morning, everybody. Thanks for taking my question. I think Hamza beat me too, I was just going to try and pin Josh on the number for the year on ARRs. So 35% looks like a good number. I guess at a high level, Udi, what’s the transition mean either for customer acquisition? Is it — is subscription getting you into new areas or new segments of the market? And then how do you think longer-term about customer wallet share, and what their shift to SaaS is doing from that perspective? Any quantification would be great. Thanks.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Hi, Rob. I would say the subscription removes resistance in procurement cycles against those for the majority of the verticals that are adopting subscription. And we were really playing in broad markets both verticals and geography already. I would say that the SaaS element, the SaaS delivery [Phonetic] takes us further into mid-market, what we call the commercial sector — as an easy — as an easy landing point. And of course it is in line with the strategy we’re seeing across enterprise, we’re [Indecipherable] SaaS first solution for security. So I would say, it’s having the right solutions in the right timing right now where the market is ready to adopt PAM and identity security.

And of course the motion, as I mentioned earlier, really allows us to show quick time to value much — we honed a lot for the customer success mostly [Phonetic] that I talked about and get quicker into that add-on business with SaaS customers.

Rob Owens — Piper Sandler — Analyst

And I guess secondarily for Josh, you did see strong acceleration in that subscription ARR especially on a sequential basis. If you kind of unpack the different elements, the term was up just modestly on a quarter-over-quarter basis, especially relative to the growth in subscription ARR. Was there anything to do with duration? And I realize there’s a lot of moving parts on these numbers as we get two and three layers deep. But, was there a duration issue or anything else that we might be aware of there? Thanks.

Josh Siegel — Chief Financial Officer

Yes. Rob, it’s not about duration, just doing more bookings of SaaS and subscription deals, and also I think we mentioned this before we’re SaaS heavy on that. So more of the ARRs coming on the SaaS side. And — but it’s just doing more bookings.

Rob Owens — Piper Sandler — Analyst

All right, thanks guys.

Operator

Your next question comes from the line of Adam Borg of Stifel.

Adam Borg — Stifel — Analyst

Hey, thanks so much for taking the question. Udi, maybe this is for you, just obviously with the US Federal government taking cyber security a lot more seriously, with the EO and other actions, but I was just curious kind of what you’re seeing more in this vertical? And as you think about the fiscal year-ended 3Q, are we starting to see some type of acceleration in 3Q or do we think that any tailwind from the federal sector would be more of a ’22 event. Thanks.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Absolutely. So I think that we have a great long-term opportunity in global government including U.S. Federal. And we are exciting to see principles of PAM, principles of least privilege, of zero trust in both the executive order and in the proposed legislation. So we believe there will be a long-term returns on that. We’re not expecting outsized returns in Q3 because of the time it takes for these initiatives to seep in, but again, certainly a long-term opportunity for global government.

Adam Borg — Stifel — Analyst

Great. That’s really helpful. And maybe just a quick follow-up just on Endpoint Privilege Manager. It’s nice to hear the continued traction there. Can you just remind us of the mix that, that represents of total ARR? Thanks so much.

Udi Mokady — Founder, Chairman and Chief Executive Officer

I think I’m told — I have the mix of revenue, about 20% of total ARR of the Annual Recurring Revenue.

Adam Borg — Stifel — Analyst

Great. Thanks so much.

Operator

Your next question comes from the line of Brian Essex of Goldman Sachs.

Brian Essex — Goldman Sachs — Analyst

Hi, good morning and thank you for taking the question. Maybe Udi, if you can dig in a little bit, I think there was some commentary about the federal — favorable competitive landscape, what is driving that favorable shift, and I think in your prepared remarks you noted a nice win against the DevOps peer. Maybe if you could dig into that a little bit as well, and give us a better insight into what was the approach of the peer, what does that competitive environment look like and what drove the win there?

Udi Mokady — Founder, Chairman and Chief Executive Officer

Sure. So I’ll take a broader brush on the competitive environment, and then we can dive into DevOps. I think CyberArk has been consistently extending our market leadership position with the innovation arm. It coupled closely with extending and growing of go to market arm, and you can see it in our results for the third year in a row in the Gartner Magic Quadrant really having to top leader position. I think in the same time, we’ve seen the traditional PAM vendors kind of switch hands [Phonetic] on private equity and we’re seeing — we’re seeing disruption there. And so, we’re not waiting and pushing ahead on PAM. And then with our expansion into identity security, we have the broad offerings with PAM at the center of the ability to push the full identity management suite and DevOps. And in that realm, we obviously can’t counter the access players and the DevOps players, but we win on having a security first mindset with the customer and the fact that they trust us with PAM at the center.

The example that I alluded to and our win on the DevOps front is exactly where customers no longer especially after SolarWinds and the increased threat environment if they, I would say more control, kind of shifting back to security first mindset for the customer, and here they wanted a security vendor to be the one securing and have the ability to secure all types of applications and really differentiates us in the market with our secrets management that really could be agnostic to what would be the chosen developer platform, our partnership with Red Hat, and the ability to integrate all of that into their PAM.

And so, having the PAM platform, and being able to secure broad all types of applications has led us to this win and many wins on this front.

Brian Essex — Goldman Sachs — Analyst

Okay, that’s helpful. And I was going to ask you about Centrify, so I think you hit that. And then maybe just a quick, a quick follow-up. The deal you announced, or I guess the transaction you announced AWS purchase of Privilege Cloud or Privilege Cloud being purchased through AWS, how significant is AWS as a channel? Is that more down market and how does that kind of lead to follow-ons?

Do you have a lot of visibility to increase the cash after Privilege Cloud is purchased through that channel? Thanks.

Udi Mokady — Founder, Chairman and Chief Executive Officer

No, that’s a great question, and I would say that AWS is a new channel for us. But we’re very — we’re very excited about it, because it complements — it’s actually an inclusive channel that works on top of our other channel partners especially where our customers have existing AWS relationships, and are able to buy through the marketplace. So that was a great example we put out there, where the demand was for CyberArk we helped the customer recover from ransomware into our Privilege Cloud and the ability for them to buy that through AWS really accelerated the whole cycle. And we have multiple integrations with AWS, we’re moving up in the partnership with them and we’re going to invest more in this go to market to be able to replicate those wins, again, in complement to our existing channels.

Brian Essex — Goldman Sachs — Analyst

Very helpful. Thank you.

Operator

Your next question comes from the line of Jonathan Ruykhaver of Baird.

Jonathan Ruykhaver — Baird — Analyst

Hey guys, congrats on the strong performance. So it’s really great to hear how well Privilege Cloud is doing. But Udi, I’m curious if you can give us some color on Idaptive. You know,, it’s been about a year since the acquisition, it seems like you had some early traction here. Just curious how you feel about the positioning there, especially with the Security First messaging?

Udi Mokady — Founder, Chairman and Chief Executive Officer

Yeah, I think — I think it’s — we’re very excited about the speedboat and how they’re — how they’re performing. And I would say this is really a kind of a breakout — was a breakout quarter for them in the muscle of both landing new logos and also creating add on opportunities within our customer, within our customer base.

So I would say, it’s a newer part of the business, but the speedboat is well on its way with strong progress in the market. We invested a lot with integrating our solutions and ability for our customers to really see success from leveraging the connectivity to PAM, to vendor access, and the other things that we brought to the table. And the customers are very excited about what we announced at our Impact event with Secure Web Sessions and our ability to give them PAM like controls for all types of uses.

And so that this will be available in the second half of the year and we expect that to give us an increased competitive advantage and a good why on why adopt Identity Security as a strategy.

Jonathan Ruykhaver — Baird — Analyst

That’s great to hear, Udi. And then just — I think you touched on some of these dynamics earlier, but when you look at net new ARR in the quarter peeling back the layers, any seasonal impacts or dynamics or maintenance that we should be aware of in the quarter as we’re looking at 3Q?

Josh Siegel — Chief Financial Officer

Hey, Jonathan. Actually, I think there was nothing seasonal that I would point to. Everything on the maintenance side behaved according to plan, and just we exceeded plan in terms of the business coming from SaaS and subscription. I want to take this one opportunity though to the question earlier around the percentage of ARR for EPM, I said it was about 20%, it’s about 20% of the subscription ARR component that we have. So I just wanted to clarify that. Thanks.

Jonathan Ruykhaver — Baird — Analyst

Thanks Josh.

Operator

Your next question comes from the line of Roger Boyd of UBS.

Roger Boyd — UBS — Analyst

Hey. Thank you. Just a quick question on perpetual bond and your expectations for the back half year relative to the strong booking mix and 35% ARR growth. Can you talk about if there is anything changing from an incentive standpoint in first half and second half, or is it just more of a go to market taking [Phonetic] its stride, bundles are coming online and the customer demand is just organically going online.

Udi Mokady — Founder, Chairman and Chief Executive Officer

So I think like — as we talked about, we’re expecting again a growing mix in Q3 with a 70% mix. And then in Q4, we’re expecting more add-on business coming with perpetual. In terms of the teams, they’re all incented to sell SaaS and subscription, we kicked that off in January.

They’re all trained, all regions are running and pushing that. So the only nuance which is a positive one is we expect add-on business from existing customers in Q4, which will be an increase in perpetual into that mix.

Roger Boyd — UBS — Analyst

So that would be add-on business, not any sort of conversion of maintenance revenue?

Josh Siegel — Chief Financial Officer

It will be mostly add-on. There will be still even some new business, because let’s remember that the pipeline is still rolling out from a historical old pipeline going into the back half of this year, but it will be a combination, but mostly probably add on with some new business.

Roger Boyd — UBS — Analyst

Got it. Okay. Thank you very much.

Operator

Your next question comes from the line of Gregg Moskowitz of Mizuho.

Gregg Moskowitz — Mizuho — Analyst

All right. Thank you for taking the questions. Guys, I know you introduced some new subscription packages at the beginning of the year and I would love to hear some more about how that’s tracking so far.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Yeah, I would say that, all new pipeline is basically containing — and of course deals that closed within the cycle is on the new packages that combine for the strict analytics, multi-factor authentication, and an often vendor access into the mix. So there’s a higher value for our customer to adopt the new package of what they get from the get-go and we’re seeing an evolving pipeline and also in the first deals that were closed within a newly-created pipeline.

Gregg Moskowitz — Mizuho — Analyst

All right. That’s very helpful. Thanks, Udi. And then for Josh, so the acceleration of go-to-market investments in the second half, is this primarily greater sales capacity or will there be other aspects of go-to-market such as channel enablement, marketing, etc, that you might be significantly ramping as well?

Josh Siegel — Chief Financial Officer

Yeah. When we think about the incremental piece, it’s really across all of the functions in go-to-market. It’s heads, it’s quota carriers, but definitely also related to overlays and channel managers and the likes, but really around the go-to-market engine.

Gregg Moskowitz — Mizuho — Analyst

All right. Perfect. Thanks very much.

Operator

Your next question comes from the line of Catharine Trebnick of Colliers.

Catharine Trebnick — Colliers — Analyst

Thank you for taking my question, and good quarter. Could you just pull apart for me maybe the top five C3 players on your alliance that really help you drive revenue or cross-sell, up-sell within some of your accounts? Thanks.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Sure. So I mentioned a few. I will put up Red Hat and SailPoint, and UiPath, CloudBees, I’ll probably add Proofpoint in there as well, if I go for a top five. And with all of them there is this really great collaboration in the field and also integration. And on top of that, the C-Cube — the power of the C-Cube alliance is really strong because there’s variety [Phonetic] there. There are deals where customers want integration with their IoT devices, and we have partners to support that, like Forescout.

And so, it’s also the power of the variety and also the focus on the top. And like I mentioned earlier, we should add AWS in there as top partner. And I gave example on the call with ServiceNow, so I’m beyond the five, right, because there are multiple partners there.

Catharine Trebnick — Colliers — Analyst

No. Thank you very much.

Operator

Your next question comes from the line of Alex Henderson of Needham.

Alex Henderson — Needham — Analyst

Thank you. So your transition here has resulted in a pretty steep reduction in operating margins year-over-year from about 20% down to about 1%. Obviously, that process continues out into ’22, and I know you don’t give guidance for ’22. But, the Street has a significant increase in EPS model for ’22, yet, I think your slide deck from your Analyst Day showed a decline in operating margins from ’21 to ’22.

Is a decline in operating margin still in order given the accelerated pace that you’ve already achieved, or alternatively, will that moderate a little bit more because you’re already further into the process? If you could give us some directionality to margins for ’22 based on your expectations around the transition, achieving 85%, I assume, yeah — 85% by the end of the year, fourth quarter, that would be very helpful. Thanks.

Josh Siegel — Chief Financial Officer

So, thanks Alex. You know, I think nothing has changed in terms of the fundamental economics behind the transition or the — transition of — the model transition in the context that operating margin takes a hit as you transition through the model, and get to the other side of 85% to 90% coming from bookings, and it continues that way until you get to that point.

So what we talked about today is that we’re excited that we’re able to move that point up to more certainty to being by the fourth quarter of 2022. So we do anticipate the operating margin to follow through a transition model to potentially go down through the transition into 2022. What we liked though in terms of moving the transition table up is that we’ll be able to now come out of the transition faster. And typically, you will then see the rebound of operating margin going up post the last transitioning quarter. So when we get to the end of ’22, the way the model works on these transitions is then — would then be able to rebound and go and return to the profitability earlier rather than later.

And I would add, we’re still fundamentally sound on being able to achieve again, coming out of the transition, a couple of quarters on the other side of the transition to return to our Rule Of 40 targets after that. And so, basically moving it up to eight quarters is basically moving — is moving where we’re going to come out back to profitability sooner.

Alex Henderson — Needham — Analyst

Super. And the accelerated hiring I think also adds to that pressure in ’22 though, right?

Josh Siegel — Chief Financial Officer

Yeah. But it’s all part of a — if we think about even the guidance for this year economically, right, our guide is still talking about, if you consider the headwind coming into 20% revenue growth or 13% operating margin, and obviously whatever we hire in this year is going to go into next year, but fundamentally, we’re still focused on being able to hit the transition and then afterwards be able to rebound to a Rule of 40 Company going into the following year.

Alex Henderson — Needham — Analyst

Great transition. Thanks.

Josh Siegel — Chief Financial Officer

Thank you.

Operator

This concludes the Q&A session. I will now turn the call back over to CEO, Udi Mokady for closing remarks.

Udi Mokady — Founder, Chairman and Chief Executive Officer

Great. [Technical Issues]. I want to thank our customers, partners and employees for contributing to our strong second quarter and supporting our fast transition to a subscription Company. I’m confident that as we execute our strategy, we will build even deeper relationships with our customers and partners. Again, thanks everyone.

Operator

[Operator Closing Remarks].