Image source: The Motley Fool.
CyberArk Software Ltd (CYBR -0.93%)
Q1 2019 Earnings Call
May 14, 2019, 8:32 a.m. ET
Contents:
- Prepared Remarks
- Questions and Answers
- Call Participants
Prepared Remarks:
Operator
Good morning, my name is Emily, and I will be your conference operator today. At this time, I would like to welcome everyone to the CyberArk Q1 2019 Conference Call. All lines have been placed on mute to prevent any background noise. After the speakers' remarks, there will be a question-and-answer session.
(Operator Instructions)
Thank you. Erica Smith, VP Investor Relations, you may begin your conference.
Erica Smith -- Investor Relations
Thank you, Emily. Good morning. Thank you for joining us today to review CyberArk's first quarter 2019 financial results. With me on the call today are Udi Mokady, Chairman and Chief Executive Officer; and Josh Siegel, Chief Financial Officer. After prepared remarks, we will open the call up to a question-and-answer session.
Before we begin, let me remind you that certain statements made on the call today may be considered forward-looking statements, which reflect management's best judgment based on currently available information. I refer specifically to the discussion of our expectations and beliefs regarding our projected results of operations for the second quarter and the full-year 2019. Our actual results might differ materially from those projected in these forward-looking statements.
I direct your attention to the risk factors contained in the Company's annual report on Form 20-F filed with the US Securities and Exchange Commission and those referenced in today's press release. CyberArk expressly disclaims any obligation or undertaking to release publicly any updates or revisions to any forward-looking statements made herein.
Additionally, non-GAAP financial measures will be discussed on this conference call. Reconciliations to the most directly comparable GAAP financial measures are also available in today's press release, or in the supplemental disclosure information, both of which can be found at www.cyberark.com in the Investor Relations section. Also a webcast of today's call will be available in the Investor Relations section of our website.
With that, I'd like to turn the call over to our Chairman and Chief Executive Officer, Udi Mokady. Udi?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thanks Erica, and thank you everyone for joining our first quarter earnings call. We were pleased to start the year with strong results exceeding guidance across all metrics. Revenue accelerated year-over-year to 34% reaching $96 million. Operating income was $25 million and our powerful business model generated a record $46 million in cash flow from operations.
Before we dive into the details of the quarter, I wanted to discuss the broader market. Since we founded CyberArk, security solutions have evolved to keep pace with the expanding attack surface and hacker innovation. Over the last few years, we have reached a level of unprecedented change. Digital transformation strategies, the migration to cloud, hybrid and modern architectures, and increasing connectivity among enterprise systems are accelerating business and at the same time creating massive security challenges. These trends have been driving progressive shift in our business. In our major markets, we no longer educate enterprise customers and prospects the importance of privileged access.
Today, we are recognized as a mission-critical solution that empowers and protects business operations by reducing risk across on-premise, cloud and hybrid environments and enabling organizations to move faster, more efficiently, and most importantly, securely as they execute digital transformation strategies. All of these trends have contributed to our results over the last few quarters, including record revenue in the Americas and APJ in Q1. Why we believe -- while we believe EMEA revenue, which grew 16% in the first quarter, was impacted by our strong Q4 2018, the pipeline across the region and globally, continues to be robust.
In addition, the business was well-diversified across industries. Banking, healthcare, insurance, media and IT software and services grew faster than 50%, while banking, healthcare and global government each represented more than 10% of the business in the first quarter.
I had the pleasure of meeting with Chief Information Security Officers from a number of customers and partners at the RSA Conference in March. These discussions were focused on expanding our solution to drive privileged access security programs enterprisewide. Existing customers continue to represent more than 60% of our revenue as they expanded deployments with CyberArk in the first quarter. A few examples include a large mutual fund is migrating all of its data centers to AWS, and we'll be expanding its core privilege access security deployment to secure this new environment, as well as an increasing number of SaaS administrators.
A leading European manufacturing company is rolling out CyberArk to secure a major Robotic Process Automation or RPA project, as part of its digital transformation strategy. And a financial services firm is standardizing on CyberArk enterprisewide and we'll be leveraging our Application Access Manager to protect and share mission-critical data to leverage other key security investments.
We also won nearly 150 new logos in the first quarter, bringing our total customer count to about 4,600. Notable additions include a large US retailer who'll be protecting Unix and Windows systems with core privileged access security and will be securing Jenkins, Pivotal Cloud Foundry, and other DevOps tools as part of its application development running in Google Cloud platform.
In a seven-figure deal with a Fortune 100 financial services firm, we were chosen for our scalability in AWS and Azure environments, and because we are the only vendor who could protect its extensive RPA project with UiPath. An entertainment company will secure access between more than 40 physical locations and gain visibility into privilege activity enterprisewide with CyberArk. This was a rip and replace of a niche vendor who could not scale to meet the long-term needs of this entertainment powerhouse.
We are also pleased with our progress to drive adoption of newer solutions. In Q1, we introduced Application Access Manager, which unifies Conjur and Application Identity Manager into a single solution for both dynamic and static application environments. In fact, the solution was included in eight of our Top 10 largest license deals in the first quarter. Software applications are the lifeblood of every organization today, and we still see ourselves in the early innings of the opportunity for our application solution.
In addition, Endpoint Privilege Manager continues to gain traction within customers of all sizes and across industries as an important component of security hygiene. We also took our first steps in formalizing the mid-market sales motion. The team is in place, we are establishing our channel relationships and the pipeline is building with both new and existing customers. We are just getting started in the mid-market and are excited about the early progress.
As we analyze our first quarter results, I am confident that we have a significant runway for growth across both new and existing enterprise customers, and our competitive advantage continues to be our unwavering commitment to strengthening customer security fabric through ongoing innovation, across on-premise, hybrid and cloud environments.
With the innovation we delivered in the first quarter, we are the only solution that automatically identifies and protects privileged accounts in AWS, such as unmanaged users including shadow administrators and instances. We also strengthened our response capabilities and our rotating credentials based on risk scores for potentially compromised sessions in the cloud.
Our advisory value-added reseller and technology partner ecosystem contributed to our results with more than 65% of revenue coming from indirect channel in the first quarter. Momentum continues to build within our C-cube Alliance Program as we become more tightly integrated across the business operations of our customers. With C-cube, we make it easier for customers to strengthen their overall security posture across technology investments, including RPA vendors like Automation Anywhere, UiPath and Blue Prism, in addition to partners like SailPoint, Ping, Okta, Proofpoint and Tenable.
As we position the Company for long-term growth and scale, we strengthened the team, adding Rich Wenning as VP of North American sales and Clarence Hinton as SVP of Strategy and Corporate Development. Rich brings deep domain expertise, having run enterprise sales most recently at Palo Alto Networks and previously at Cisco, where he helped scale the organization to more than $2 billion in enterprise sales. Clarence is leveraging his extensive experience from BMC Software and Nuance to help drive the long-term growth and scale of the organization. We are thrilled to have them join the CyberArk team.
We were pleased again to deliver strong results in the first quarter. The market for privilege access security is rapidly growing, and as we look ahead, we are well positioned to capitalize on that opportunity.
With that, let me turn it over to Josh to discuss our strong financial result. Josh?
Josh Siegel -- Chief Financial Officer
Thank you Udi. As you just heard from Udi, we were pleased to exceed our outlook across all guided metrics, including revenue, operating income and EPS. Total revenue increased by 34% year-on-year to $95.9 million. License revenue was $51.3 million, increasing 33% over the first quarter last year and representing 53% of total revenue, both new and add-on business contributed to our results in the first quarter.
On the product side, Application Access Manager represented about 10% of license revenue and Endpoint Privilege Manager represented about 7%. As we look more closely at the EPM, we were pleased to see the percentage of EPM bookings derived from SaaS deals increase in first quarter compared to the year-ago period.
Maintenance and professional services revenue was $44.7 million, increasing 34% over the prior year period and representing 47% of revenue. The professional services revenue associated with this line was $8.2 million or 8.6% of total revenue.
Geographically, as Udi mentioned, the Americas reached a record $62.1 million in revenue, increasing 41% year-on-year and representing 65% of total revenue. APJ also reached a record $8.5 million in revenue, increasing 45% compared to the first quarter of 2018 and representing a 9% total of revenue. EMEA revenue grew by 16% year-on-year to $25.3 million or 26% of total revenue. When we analyzed our first quarter EMEA business, we believe the year-end budget flush, which helped to drive our Q4 2018 record results, impacted our first quarter business. This was reflected in the higher dollar amount of deals over $500,000 in EMEA we saw in the fourth quarter compared to the first quarter this year.
Overall, demand trends remained healthy across all geographies with a growing pipeline of activity. As I move through the P&L, all line items will be discussed on a non-GAAP basis. Please see the full GAAP to non-GAAP reconciliation in the tables of our press release.
Our first quarter gross profit was $84.8 million or 88% gross margin compared to 87% gross margin in the same period last year. Our top priorities for this year continue to be investing in innovation, growth and scaling the operations. R&D expense grew by 22% year-on-year to $14 million or 15% of total revenue, as we continued to deliver innovation.
Sales and marketing increased 18% to $37.7 million or 39% of total revenue as we expanded our sales organization across all geographies to support direct and indirect sales. G&A expense increased 21% year-on-year to $7.6 million or 8% of total revenue to scale the business to support our growth.
In total, operating expenses for the first quarter increased 19% to $59.3 million compared with $49.7 million for the first quarter last year. Our revenue outperformance and disciplined investments drove strong leverage again, in the first quarter. We posted operating income ahead of our guidance at $25.5 million or 27% operating margin, more than doubling from $12.6 million representing an 18% operating margin in the year-ago period.
Our overall expense growth is primarily related to headcount and we ended the first quarter with 1,204 employees worldwide, up from 1,053 at the end of the first quarter last year, and we ended the quarter with 567 employees in sales and marketing compared to 502 at the end of the first quarter last year.
Net income was $25.5 million or $0.56 per diluted share for the first quarter of 2019 and increasing from $11.8 million or $0.32 per diluted share for the first quarter of 2018. In the first quarter, we were pleased to generate record cash flow from operations of $45.9 million or 48% cash flow margin. The strong cash flow was driven by our record results in the fourth quarter as well as better-than-anticipated collections from our maintenance renewals, which seasonally -- which is seasonally high in the first and fourth quarters of the year.
We ended the quarter with $510 million in cash deposits and marketable securities, and this compares to $451 million at year-end. Deferred revenue increased 43% year-on-year to $171 million at March 31. On January 20 -- on January 1, 2019, we implemented accounting standard ASC 842 related to long-term operating leases in the financial statements. As a result of the new standard, we capitalized these leases and recorded assets of $24.8 million and liabilities of $26.1 million as of March, 31 reflecting the value of the leases. The P&L-related impact of the adoption was not material.
Turning to our guidance. As a reminder, our guidance does not consider any potential impact with foreign exchange gains or losses, as we do not try to estimate future movements in foreign currency rates. For the second quarter of 2019, we expect total revenue of $96 million to $98 million, or 25% growth year-on-year at the midpoint. We expect non-GAAP operating income to range between $22 million to $23.5 million and non-GAAP net income per diluted share of $0.45 to $0.48. This assumes a 39.1 million weighted average diluted shares and an effective tax rate of 21% for the second quarter.
For the full-year 2019, we are increasing our guidance for total revenue to be in the range of $415 million to $419 million, a growth of approximately 22% at the midpoint. We are also increasing our guidance for non-GAAP operating income to be in the range of $100.5 million to $103.5 million and non-GAAP net income per diluted share of $2.10 to $2.16. This assumes 38.9 million weighted average diluted shares. Our guidance for the full year assumes an effective tax rate of approximately 21% for 2019.
For modeling purposes, as you see in our guidance, we plan to continue to invest in the business in the second quarter. Please note that we also expect to see a larger step-up in expenses between the second and third quarters related to marketing programs and seasonal employee expenses. While we delivered the exceptional cash flow from operations in the first quarter, we still expect our cash flow margin for the first half of 2019 to be at the midpoint of the range of 5 percentage points to 10 percentage points above the non-GAAP net income margin. And for the full year, we continue to expect our cash flow margin to run between 5 percentage points to 10 percentage points higher than our non-GAAP net income margin.
We recommend analysts to evaluate our cash flow on an annual basis, given that our cash flow from operations can vary quarterly based on seasonality of the business and taxes. We do not plan to provide quarterly updates on guidance for cash flow from operations.
We were pleased with our strong results in the first quarter. Our priority for the remainder of 2019 is to invest in the business to deliver profitable growth over the long term.
I will now turn the call over to the operator for Q&A. Operator?
Questions and Answers:
Operator
Thank you. (Operator Instructions) Our first question comes from the line of Shaul Eyal with Oppenheimer. Your line is open.
Shaul Eyal -- Oppenheimer -- Analyst
Thank you. Hi, good afternoon guys. Congrats on solid set of results, as well as the guidance. Udi, I want to start actually big picture. You mentioned in your opening remarks, cloud, digital transformation as driving or even accelerating from our perspective, the business. Can you specifically touch on the digital transformation trends you're seeing out there? And I have a follow-up.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Sure. Thanks Shaul. So definitely, first and foremost, we're seeing Privileged Access Security be a top priority for security and Chief Information Security Officers, but we're continuously excited to see that we are an enabler in a big part of organizations, adoption of digital transformation strategy, whether it's moving their application workloads into the cloud, and therefore the need to manage application secrets with our AIM, or previously we called it Conjur, supporting digitization like Robotic Process Automation more and more. Those robots are actually mega super administrators and users and we weave in and enable the use of RPA for these projects. And then increasingly also to bridge that gap of trust with the cloud providers and moving servers and the administration of workloads in the cloud, we provide that layer that enables trust for adopting this move.
Shaul Eyal -- Oppenheimer -- Analyst
Got it. Got it. And maybe a follow-up, either for you Udi or even for Josh, and it could be a little bit of a tricky one. When you look for example at, I don't know your Top 10, even Top 20 customers, especially those that have been with you for the past, let's say, 10, 15 years, do you have some sort of an LTV analysis or even maybe some sort of a magic number meaning to say though that started with you 10 years ago investing. What would that number be now? Is it 3x, is it 4x, is it 10x, anything along these lines that can assist us a little bit?
Josh Siegel -- Chief Financial Officer
Yeah. Hi Shaul. Thanks for calling in. I think when we look at the analysis and we've done a lot of cohort analysis going back, seven, eight, nine, 10 and plus years, and I would say that if we look at cohorts that are eight, nine years old, we're looking at 7 times their first year purchase.
Shaul Eyal -- Oppenheimer -- Analyst
Got it. Thank you, Josh.
Josh Siegel -- Chief Financial Officer
That would include obviously some -- some component maintenance obviously as part of it, but we see that, probably two-thirds of it coming from license and then a third coming from maintenance.
Operator
Our next question comes from the line of Melissa Franchi with Morgan Stanley. Your line is open.
Melissa Franchi -- Morgan Stanley -- Analyst
Okay. Good morning and congrats on the quarter. So it seems like it was sort of business as usual for CyberArk in Q1, but if I look across the security space, it was a little bit of mixed results, kind of across the board with your peers. So I'm just wondering from your perspective, Udi, did you see any change in the overall kind of spending environment for security? Is there any reason to believe that 2019 may be a little bit softer than what we saw in 2018, just from a high-level perspective?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, thanks, Melissa. I think if we would look from our prism, no, I would say, we started the year really being bullish on the -- on the opportunity in our space projects. The security has actually risen to the top in priority and hence, the results and hence our confidence in the pipeline. I also -- I wouldn't say that I've heard anecdotal comments from customers about other partners of ours or other security initiatives. I think in general, security spend is moving toward the assumption of zero trust, and therefore, you really have to strengthen your core and putting layers that are hacker resistant, a little bit beyond perimeter. And -- but other than that, I would say the same trends that we saw last year are continuing.
Melissa Franchi -- Morgan Stanley -- Analyst
Okay, great. And then just a follow-up for Josh, you noted better-than-expected SaaS adoption in EPM, and we did note that there was really good growth in your deferred revenues. I'm just wondering if you're seeing higher kind of term license adoption across the board in the portfolio, and how we should expect that for the rest of the year?
Josh Siegel -- Chief Financial Officer
Yeah, absolutely. We saw an EPM. We actually did see, certainly in the first quarter, some nice, compared to first quarter last year, an uptick in SaaS bookings relative to the perpetual bookings on EPM last year, but I would say still -- that on the deferred revenues, we're still kind of in the same category of the same percentage points. So the deferred is still the majority of our support contracts, but the SaaS and the term-based licenses is creeping up, but I would not say it's materially changed.
Melissa Franchi -- Morgan Stanley -- Analyst
Great. Thank you so much.
Josh Siegel -- Chief Financial Officer
Thank you.
Operator
Our next question comes from the line of Saket Kalia with Barclays. Your line is open.
Saket Kalia -- Barclays -- Analyst
Hey guys. Thanks for taking my questions here. Josh, maybe just to start with you, can you just talk a little bit about the average deal size in the quarter? It seemed like it has gone up, and so the question is, is that coming from really larger lands (ph) with customers -- starting with more products than you initially have in the past, or is CyberArk perhaps finding, just maybe, a little bit more pricing power given the competitive environment?
Josh Siegel -- Chief Financial Officer
No, I think when we look at -- overall, if we look at the entire license business, we would say that the -- it's pretty -- it's pretty the same, pretty stable. But if we were to break it down, we would see an increase on the new business deals on an average deal order, and we would see even maybe some slight decline on the add-on business. And I can say the new business increase is attributed to what you were commenting on, is that we actually, because of the simpler pricing and so forth, we are seeing customers coming in and taking bigger chunks on day one, because it's a much easier acquisition for them. But overall on a consolidated basis, we're seeing about the same.
Saket Kalia -- Barclays -- Analyst
Got it. Got it. Udi for my follow-up, maybe for you. Clearly, the competitive environment remains favorable based on these results and guidance. But I'm just kind of curious what you've seen out there from your competitors, whether there's any sign of them trying to get back on track with any sort of success or any signs of incremental improvement from maybe some of those ankle biters in the past? Anything that you would add.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, sure. Hi, Saket. First of all, I would say that we are stronger than ever. I think the competitive landscape has changed, I think, positively across and there's even the additional external third-party validation that we didn't have in previous years from the Gartner and Forrester reports that came in end of last year about our clear leadership. I would say that enterprises when they buy, they invite competitors, especially if it's -- especially in new deals. And when one is disrupted then others make way. So, I would say that the niche, our competitors are probably invited more often in place of companies like CA and Dell where they were in the past.
The disruptive type organizations like what we talked about, disruption from PE acquisition, we have not seen them regain foothold. Our working assumption is that we -- we have to work hard to always retain our leadership and break forward with innovation. So we assume that even if they have not regrouped, let's work as if they have regrouped and push further on all fronts, execution, but also innovation.
Operator
Our next question comes from the line of Sterling Auty with J.P. Morgan. Your line is open.
Sterling Auty -- J.P. Morgan -- Analyst
Yeah, thanks. Hi guys. I want to go back just to the -- to the demand environment and ask it this way. How was the linearity in the quarter and what have you seen -- obviously, you've given the guidance for the quarter and for the full year, but what are you seeing in terms of the start to the -- to the second quarter?
Josh Siegel -- Chief Financial Officer
Hi Sterling, it's Josh. I'll start with the -- on the linearity, we actually, after coming out of the strong Q4 of last year, we were a bit more back loaded in the first quarter of 2018, and -- but overall there, we didn't see -- we didn't see any other -- nothing that was different and -- within the marketplace. What was the second question?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
It was (multiple speakers) of Q2.
Josh Siegel -- Chief Financial Officer
Yeah, I think the beginning of Q2 is based -- that's where our guidance is. It's based on where we saw the pipeline going into Q2, and how it started and we feel very good about the Q2 growth guidance, as well as the full-year growth guidance.
Sterling Auty -- J.P. Morgan -- Analyst
Okay. And then in terms of the -- you mentioned I think the purchase from existing customers. How much of the demand you're seeing from existing customers, is it just same solutions in more use cases versus adding on more of the portfolio?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Sterling, Udi here. I'll take that. I think it's really the -- the continuous progression on moving from project to program. And I mentioned the RSA show. I just had the ability to meet so many of our customers at once, and of course, since -- and they're just taking this layer much more seriously. So with our simplified pricing, some of it really goes into Core PAS, but it's more like you said, like more use cases across more pieces of their -- of their infrastructure and not just to areas that were sales compliant in the past, but actually thinking risk and taking it -- taking it across. And then more advanced customers or -- are taking also some of our growth engines in our earlier or newer products, again, for -- starting with the most critical use cases as we walk them through the program.
Sterling Auty -- J.P. Morgan -- Analyst
Got it. Thank you.
Operator
Our next question comes from the line of Fatima Boolani with UBS. Your line is open.
Fatima Boolani -- UBS -- Analyst
Good morning. Thank you for taking the questions. I had a couple. Udi, I'll start with you. You've got a yield under your belt now, with respect to the bundled sales motion around (inaudible). I'm wondering if you can share a couple of fact patterns in terms of how customers are buying and deploying yield and to the extent, there is a change in how pervasively they're deploying it because it's a bundled package? That's the first question. and then I have a couple of others for Josh.
Josh Siegel -- Chief Financial Officer
Sure. So yeah, we're definitely -- hi, Fatima. We're definitely on a full year of the -- of the new pricing and it really enabled the Core PAS to continue to be the major driving force in our acceleration here of revenue and license where it's easier for customers to scope what they need and decide how they want to start with CyberArk. As you alluded, it's also leading to the right way to start an implementation. Because of this bundle, it's not just a simplified pricing, they are also getting all of the necessary components from day one that used to be broken down into smaller -- into modules. They get it from day one and then they start off right in the right way to deploy CyberArk, and then can expand easily down the road. So it's kind of as we alluded with this bundling and the pricing, along with the simplification of products, is a win-win because customers are putting this layer at the right way from the get-go.
Fatima Boolani -- UBS -- Analyst
Understood. And actually just quickly with Udi, on with mid-market efforts, in your prepared remarks, you did talk about taking the first step on building out that go-to-market motion, if you will. I'm curious if you can give us more details on what exactly is in play and in place and how we should assume the yield off those investments that you're now putting into the mid-market?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Sure. I think the beauty is, that one of the reasons we began on working on the mid-market muscle is that we wanted to optimize productivity for the enterprise team, where we still see the biggest opportunity, but wanted to start seeding the mid-market opportunity for the future. And so, our marketing focus continues to be on the enterprise, and hence I talk about it as a newer muscle, the mid-market. What we've done is, actually created a dedicated team that can focus on the mid-market, invest it in channel enablement, because we really expect that mostly, if not all of this business will be driven through channels and it's -- we're early -- we're early into it, but we're seeing -- we're seeing progress, and it's really an investment for the long term. And of course, all of that goes along with the continued simplification of products that we think the mid-market expects.
Fatima Boolani -- UBS -- Analyst
And, Josh two quick ones, if I can sneak them in for you. Long-term deferred revenue growth continues to kind of surpass how we thought about it. Just wanted to understand if there is any dynamics around maintenance contracts, spending, there is any incentive that you've put in place to maybe incent that type of behavior and then as it relates to sales hiring, how we should think about the linearity of full capacity additions over the course of the year, and then I'll jump back in queue? Thank you so much.
Josh Siegel -- Chief Financial Officer
Great, thank you. So with regard to long-term deferred, it's really a reflection of our long-term support and maintenance contracts for most of it, and we've always had some kind of a pricing incentive for customers in terms of a discounted rate, but nothing -- nothing has changed with that regard. We still see the overwhelming majority of our contracts be one-year contracts, but -- but we are seeing in terms of dollar amount some trend tick up to -- on the three-year contract dollar size. So it's -- there's nothing I think remarkable going on. There's nothing inside the Company that's trying to motivate that change. But I do believe it's just a reflection of our customers, seeing the importance of our product for the long term and coming in early on and particularly new customers frequently making a claim for three years. But it's not remarkably different than what we've seen in years past other than the slight trend up.
With regard to hiring, I think we'll be seeing hiring every quarter on the sales and marketing side. And we increased -- you saw the growth in our sales and marketing year-on-year specifically, and I expect it to be every quarter hiring.
Operator
Our next question comes from the line of Jonathan Hoe with William Blair. Your line is open.
Jonathan Ho -- William Blair -- Analyst
Hi, good morning and congratulations on the strong results. I just wanted to start with a question on the competitive environment. With all the disruption that's taking place, can you maybe give us a sense of what your win rate looks like now, maybe in comparison to before some of the disruption took place?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, I would say. Hey, Jonathan, Udi here. I would say the win rates are the same and -- because they've been increasingly strong as we talked about in 2018, because of past investments in simplification of products and of pricing. So I think we're at a very strong, very strong rate, especially when we talk on the enterprise side, which is our major focus.
Jonathan Ho -- William Blair -- Analyst
Got it. And then just in terms of the Application Access Manager. Can you talk a little bit about why combining the two products maybe makes a little bit more of a difference here? And maybe talk about how much of an upsell opportunity there is with the Application Access Manager?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, absolutely. Because the customers are going through this journey of a combination of on-prem applications and the migration of workloads into modern environments like containers whether they are keeping them on-premise or migrating to the cloud, we felt that the hard line of separation between static application dynamic is actually -- makes it harder for the customer to scope and also in the sales motion. So this was an optimization that we did for both the customers and for our selling motion where we're actually showing up as the trusted partner to solve this problem that exists both in static application and dynamic applications and actually in the same breadth, show the customers that, OK, this is what we're going to do with these applications that you have here running your (inaudible) application, your trading floor and your self-developed applications that are static and this is what we would be helping you with your CI/CD pipeline as you take on DevOps work flows.
And so we combined it into one solution case and we also integrated the two products as you recall from the acquisition to Conjur really integrating to the same platform. So it's a positive for the customer, but also helps perhaps simplify the sales motion. And as we look at it, it's one of our biggest opportunity because on top of everything everybody's so aware of you and privilege access and (inaudible) in every major attack. But the same thing happens with applications where they serve a credential or are given a pathway to strong access, and therefore, it's kind of the new frontier for us so far. It takes a slower pace than Core PAS, but we view it as a big part of our add-on business opportunity.
Operator
(Operator Instructions) Our next question comes from the line of Gary Powell with Deutsche Bank. Your line is open.
Gray Powell -- Deutsche Bank -- Analyst
Great. Thanks for taking the question. Yeah, so I don't think I've ever heard you mention the adoption of RPA as a growth driver before. Can you maybe talk about that dynamic and the impact on demand for your Application Access Manager products?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, absolutely. I give it as an example of digital transformation drivers. So it would be on the list of types of programs that the customers would do, that elevate the need to secure privilege access. I won't put it as -- as the one, but it's a growing one. And through the C3 Alliance, we partnered with the major players there and as they get scoped out -- and in their sales motion, one of the biggest things that highlight is, hey, we're giving this Robotic Process Administrative or very strong access to replace some human manual work, but to do that, they get very strong access.
So CyberArk has an integration that's very simple for our customers where we actually intercept the need for privilege access and broker and give the applications the access they need. We'll not give -- we're not leaving any for somebody to take that over and get to the data as a privilege user. And so a smooth integration and it's a hot topic now for many enterprises.
Gray Powell -- Deutsche Bank -- Analyst
Got it.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
And it's also interestingly another way for Chief Security Officers to bridge and bring value to the organization in digital transformation and be an enabler. And so, it's a hot topic.
Gray Powell -- Deutsche Bank -- Analyst
Understood. Thanks a lot.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thank you.
Operator
Our next question comes from the line of Gur Talpaz with Stifel. Your line is open.
Christopher Speros -- Stifel -- Analyst
Hi. This is actually Chris Speros on for Gur. Congrats on another impressive (inaudible). Can you speak to the degree to as the partnership with both Okta and SailPoint has contributed to growth in Q1 and how we can expect or how we should think about that as a growth driver through the rest of the year?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, sure. Thanks, Chris. I would say it's going to continue. I think we -- we see a lot of field partnership on a -- probably every couple of weeks, you can see us also in joint field events with SailPoint, Okta staying on the Identity -- on the Identity side. And so I wouldn't say it's an accelerated driver, but I would say it's an ongoing strong driver in addition to other partnerships that we have on the -- in the C3 Alliance that are in other spaces of security like vulnerability, management and RPA that we talked a lot about and others.
Operator
Your next question comes from the line of Catharine Trebnick with Dougherty. Your line is open.
Catharine Trebnick -- Dougherty & Company -- Analyst
Yeah, thank you for getting me in the queue. My quick question is, you talked about the vertical markets. They look pretty consistent. Are there any programs you're putting in place in 2019 to facilitate more growth, work with the channel to drive across 10 or 15 of them? Thank you.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, I think, really part of our strength is that diversity that we can sell the same software to whether you're a manufacturing company in the Philippines or a top-notch financial services firm in New York. And so it's really about the sales motion and we continuously train our team to be able to go in the -- about this horizontally and as we strengthen our channel and rep reach, we can also go after the different verticals. The one vertical that takes on special attention is, of course, the -- are the federal vertical, where we have a dedicated team and we continuously invest both in the team itself, but also in the certifications that helped the adoption in the federal market and through working with a lot of strong partners in that vertical.
Catharine Trebnick -- Dougherty & Company -- Analyst
All right. Thanks, Udi.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thank you.
Operator
Your next question comes from the line of Howard Smith with First Analysis. Your line is open.
Howard Smith -- First Analysis -- Analyst
Yes, good morning. Thank you for taking the questions. You've talked about how the simplified pricing and product enhancements has allowed customers to kind of scope and get easier implementations. And I'm curious how it has affected, that you have enough data yet. The follow-on purchases in terms of either timing of when they come back or scale larger smaller bite sizes, et cetera, any commentary around that?
Josh Siegel -- Chief Financial Officer
Yeah. Hi, Howard. This is Josh. Thanks for the question. It is a bit early for real data because we just introduced this pricing last year, and so the real follow-on -- I think, one of the earlier callers asked how many times do they come back and it's seven times their initial order. But it's -- we look at it over seven, eight, nine years. So I think it's still a bit early, I think in the next year or two, we'll be able to see better. Overall, with regard to average deal sizes though and that's some reflection of it, we're seeing -- on the new business -- we're in uptake and on the add-on, we're seeing more value in deals, but slightly down on the average size.
Howard Smith -- First Analysis -- Analyst
Okay. A follow-up. You mentioned a rip and replace on one of your new logos. I know that historically it has been the exception but are you seeing, as this industry matures, more displacements for your new logos or is it still primarily almost all greenfield?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Hi, Howard. I would say it's primarily all greenfield. And as we look in the pipe, we continue to see the -- that being the majority, but also some -- seasonal with some rip and replace, especially, the enterprises that do have something and are looking now at it as a -- as security layer. So I think we expect more displacement over time. It's still the minority of the deal.
Howard Smith -- First Analysis -- Analyst
Great. Thanks and congrats on a strong start to the year.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thank you. Thank you very much.
Operator
Your next question comes from the line of Andrew Nowinski with Piper Jaffray. Your line is open.
Andrew Nowinski -- Piper Jaffray -- Analyst
Hi, good morning. And thanks for taking the questions. Just one question, and then one follow-up. So your guidance for 2019 implies a fairly material slowdown in license growth in the back half of the year. I'm just wondering whether that is conservatism or if there are any other factors we should consider?
Josh Siegel -- Chief Financial Officer
Yeah. First of all, we have -- we haven't changed our guidance methodology. We've been public almost now five years and we continue to use our same guidance methodology. We have to reckon with our pipeline growth and -- but also at the same time with being an enterprise software company. So I think we're very happy with the strong growth we saw in the first quarter, with being able to raise the full-year guidance on the revenue and the growth that we see there. And I think we're continuing to guide in the same manner as we have in the past, giving the strongest number that we feel comfortable of achieving.
Andrew Nowinski -- Piper Jaffray -- Analyst
Okay, got it. And then, at your Analyst Day back in 2018, you talked about medium-term growth of 20%. Given the current demand trends and how under-penetrated both mid-market and enterprise is, would you consider fiscal '20 as within the medium term?
Josh Siegel -- Chief Financial Officer
Yeah. I mean, I think we haven't -- we certainly -- we've guided for this year and I still think that we haven't refreshed the last year's Investor Day. But I think we look at overall, the trends in the market that we look at the analyst reports and so forth, and we haven't changed any of our outlook for that.
Andrew Nowinski -- Piper Jaffray -- Analyst
All right, thank you.
Operator
Your next question comes from the line of Ken Talanian with Evercore. Your line is open.
Kenneth Talanian -- Evercore ISI -- Analyst
Hi, thanks for taking the question. I was curious, are you seeing seven-figure deals representing a higher percentage of your pipeline versus this time last year?
Josh Siegel -- Chief Financial Officer
I think it's -- there is not a dramatic change in -- we've always seen a very large amount and percentage of deals that are seven-figure. If we look at it year-on-year basis, we continue to see trending up on the number of deals, larger deals, whether it's over 100-K or over 500-K deals each quarter on a year-on-year basis. And in order to do that, we're seeing more of them in the pipeline as well.
Kenneth Talanian -- Evercore ISI -- Analyst
Okay. And as a follow-up, you have a nicely growing cash balance. Can you give us your updated thoughts on used cash in the M&A environment?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Absolutely. I think we've been very prudent in past M&As and -- to really look at how we horizontally secure privilege access for both -- for both humans and applications and make some strong moves in the past. We -- I alluded in the prepared remarks, we hired a very experienced Head of Corp Dev, but its mandate is very much to take it's time and figure out long-term opportunities for us. So I think the robust cash balance is very important, it's important to our customers to see that we have the financial strength and we will be very prudent on how we use it. Definitely, we feel that we've done well with past M&A.
Operator
Your next question comes from the line of Gregg Moskowitz with Mizuho. Your line is open.
Gregg Moskowitz -- Mizuho -- Analyst
Okay, thank you very much. And I'll add my congratulations on a good Q1 as well. Udi, you briefly alluded to Gartner and Forrester paying more attention to this space. And with respect to Gartner anyway, it's been a few months since the first Magic Quarter Report was published. Have you seen any change in the rate of inbound activity or closure rates or anything along those lines, or is it simply just too early to tell?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
I think we actually -- we actually look at that and I would say that it's more or less the same level of increased awareness, but -- over the last couple of years. So I think it helps in new educating markets and our expansion to some of the emerging geographies. It clearly enables us to get more attention and to sign up the leading channel partners, especially in a new region. But I will say it affects our pipeline base, it's really good for decision makers in competitive situations, and so it's overall another supportive tailwind, but not a mega tailwind.
Gregg Moskowitz -- Mizuho -- Analyst
Okay, that's helpful. Thanks, Udi.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thank you.
Operator
Your next question comes from the line of Erik Suppiger with JMP Securities. Your line is open.
Erik Suppiger -- JMP Securities -- Analyst
Yeah, thanks for taking the question. A couple of questions. First off, on the EPM front, you talked about the contribution from cloud driving it. Can you discuss what the split is within EPM, between the cloud and the on-premise version? And as the cloud component becomes larger, do you think EPM will become a larger driver of revenue? And then I have a follow-up.
Josh Siegel -- Chief Financial Officer
Yeah. Thanks, Erik. This is Josh. Yeah, in fact, I mean, we saw for the first quarter -- we did see our bookings on the EPM gravitate toward the SaaS. I think it was about two-thirds SaaS dollars versus one-third perpetual dollars or maybe 70% SaaS dollars. Just -- yeah.
Erik Suppiger -- JMP Securities -- Analyst
Okay. And then what do you --?
Josh Siegel -- Chief Financial Officer
(multiple speakers) last year.
Erik Suppiger -- JMP Securities -- Analyst
And the second question?
Josh Siegel -- Chief Financial Officer
That was -- compared to first quarter last year, it was significant growth on the SaaS dollars.
Erik Suppiger -- JMP Securities -- Analyst
And then, clearly it was a strong quarter. To the extent that there was surprise upside in the quarter, can you discuss whether you think that is a function of general demand, or do you think that's more of a function of the more favorable competitive environment?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Hi. Udi here. I would attribute it to the general demand. I think we -- we've been gradually -- and we pioneered this space. I think we started off with really a strong position in the market and through continuous innovation and some smart M&A moves, we evolved in that leadership. But the biggest shift has been the rise in this being a layer in priority.
In the past, we showed how it's been in the Top 10, Top 5 priorities for organizations similarly in our channel partners. It rises up and I can't enough about the importance of the value-added resellers and our advisory partners giving attention to this space. So the rise in priority and execution against that demand is the explanation for the result, and then we realized as we continue to innovate the mixture, we extend that leadership.
Erik Suppiger -- JMP Securities -- Analyst
Very good. Thank you very much.
Operator
Your next question comes from the line of Dan Ives with Wedbush Securities. Your line is open.
Dan Ives -- Wedbush Securities -- Analyst
Just one question. With Rich obviously joining, very experienced background, what were some things that he's brought to the sales team in North America? Maybe any changes or just maybe strategically, how he's really changing the organization? Thanks.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, I think -- thanks for that. I think we've been very -- we took our time and we are very selective in hiring a leader in the Americas that would come in and fit the culture and actually embrace a lot of things that were working so well for us, but bring us the experience of scale and somebody who has seen the scale before. So I think it's a -- first of all, he hit the ground running and he's well integrated into the team, but probably the first impression I would put out there is, the importance of consistency -- consistency of execution, like really looking at the things that are working and replicating them and driving them across the regions down to the last rep anywhere in the region. He also comes with a strong channel background, which is super strategic for us and just that continuously integrating our work with the channel. So I would say consistency of execution, the continuous partnering with channels, and I can probably add like putting systems in place that support scale, because that's the mandate, like we want to grow bigger and we want that scale experience.
Operator
Your next question comes from the line of Alex Henderson with Needham. Your line is open.
Alex Henderson -- Needham -- Analyst
Thank you very much. I was hoping you could talk through the issues around the sales force staffing levels. We've got expectations out there, 25% plus top line growth, but your staffing is increasing at a 12% clip. Can you help us bridge between the rate of growth in staffing and increase productivity, increase deal sizes, other metrics that give us some confidence that the rate of increase in sales and marketing capacity is keeping up with your targeted growth rate.
Josh Siegel -- Chief Financial Officer
Yeah, hi, Alex. Thanks. This is josh. First of all, with regard to our sales organizations, we're growing there pretty much every quarter. So a lot of what you see in this quarter is not necessarily reflective of -- it doesn't necessarily translate to exactly growth rate for this quarter and for next quarter, because we groom them over time and productivity increases dramatically when they get over six months to nine months in-house.
And so, really we look at it over the course of last four and eight quarters in terms of the real strength for how much productivity we need for each current period. And for -- I think we're happy with the increase that we have for the first quarter, we anticipate to continue growing that sales organization during the year. We see sales and marketing growing to be 40% of revenue this year and we are kind of farming so to speak, to ensure that we have the right productivity levels at the right tenure levels in order to achieve our guided growth rates.
Alex Henderson -- Needham -- Analyst
If I could follow up with a second question, you identified EMEA is negatively impacted by the strong fourth quarter, but obviously its growth rate was going to be less than the rest of the other two geographies. Can you give us anything forward-looking in terms of understanding the scale of what you have in your pipeline or other variables, data that would give us confidence that should reaccelerate to corporate average growth rates or better?
Josh Siegel -- Chief Financial Officer
Yeah. If we look at it from a pipeline perspective, then we're totally on track for the type of -- growing with the business. We looked at our diversification of our business over the last many years on an annual basis and you see EMEA growing with the business year in year out. The percentage of the pie has been very stable over the last many years and the pipeline today substantiates that as well. And that's actually one of the strengths that we have within our diversified model both geographically and vertically, is that we are able to kind of flow through the fluctuations from the quarter-to-quarter behavior. So from a pipeline perspective, which I think which you raised, is the key trigger for us to really determine that and give us the confidence that we see EMEA in a good place to grow with the business this quarter -- this year.
Operator
Your next question comes from the line of Shebly Seyrafi with FBN Securities. Your line is open.
Shebly Seyrafi -- FBN Securities, Inc. -- Analyst
Yes. Can you talk about your expense growth expectations in the second half? In my model, I'm getting over 30% year-to-year. You were, in the last several quarters, in the 20%s. Why are you picking it up so much?
Josh Siegel -- Chief Financial Officer
Well, we do see a step-up as we talked about in the call, a step-up on the expenses in the back half of the year compared to the first half. It's seasonal whether related to our marketing events and also to employee expense step-ups that we typically see in the second half. I think also we see multiple year growth opportunity for CyberArk. We want to ensure that we have still the ability today within our guidance to allow for us to continue investing for that growth in the second half of the year and -- both on the sales and marketing organization and also on the innovation side as it relates to our R&D investment.
Shebly Seyrafi -- FBN Securities, Inc. -- Analyst
Okay, and then second one from me is, related to Andrew's question, the embedded revenue growth in the second half of this year is something like 16% to 18%, which is below the medium-term target of 20%. And so, if you're sticking to that target in 20%, it would imply an acceleration in the growth rate next year. Is that something you're thinking about?
Josh Siegel -- Chief Financial Officer
I'm not sure -- I'm not sure I understood the second part -- the second part of your question about next year.
Shebly Seyrafi -- FBN Securities, Inc. -- Analyst
Well, the medium-term target is 20% growth. If that's what you're thinking about for next year, that would imply an acceleration from the 16% to 18% growth rate in the second half of this year?
Josh Siegel -- Chief Financial Officer
I think I'd prefer we stick to the guidance that we gave for 2019 on this call, which is -- which is the subject of this call and we are pleased with that and feel confident about the guidance that we gave. And I think on another occasion, we may choose to discuss medium-term again in a formal basis.
Shebly Seyrafi -- FBN Securities, Inc. -- Analyst
Right. Thank you.
Operator
Your next question comes from the line of Taz Koujalgi with Guggenheim Partners. Your line is open.
Imtiaz Koujalgi -- Guggenheim -- Analyst
Hey guys. Thanks for taking my question. Can you comment a bit on the customer growth this quarter and what you expect going forward for the rest of the year? Because you had a good inflection in customer as in 2018, it looks like the customer growth in this quarter was flat year-over-year.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
I think, we saw basically kind of a similar pace in the new -- in the new customer base. We still view it as a greenfield opportunity. So based on or looking into the pipe, and especially as we continue the motion downstream, we'll continue to add new logos in a good pace.
Imtiaz Koujalgi -- Guggenheim -- Analyst
Thanks, Udi. And then on something about Europe again, you said that you had budget flush in Q4 in Europe which hubbed Q4, but then impacted Q1 numbers. Why was Europe different than US? I would assume that you had budget flush both in US and EMEA. Why do you think the impact was higher in EMEA for Q4 which pulled down your Q1 EMEA revenues?
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Yeah, I think in general EMEA is more back-end loaded and very much channel-oriented as well. And we're running a global operation and you see sometimes the region behave a little differently in that respect. So, it's a Q4 versus the phenomenal and then we saw softer spend in Q1. But when we look at it, we actually said, OK. And this is a natural cadence of spend. Let's look at the pipeline, pipeline is healthy and we're benefiting from this diversification we have on a global perspective, because even with a slower EMEA, total revenue accelerated to 34% and license accelerated to 33% growth. So we're pleased with that. And like I said, the pipe is healthy in EMEA and in the rest of the world.
Operator
That concludes our question-and-answer session today. I would now like to turn the call back to Udi Mokady.
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Thank you. I want to thank our customers, partners and employees who continue to serve us strong results in the first quarter. And thank you everyone for joining us on the call today. Thank you.
Operator
That concludes today's conference call. You may now disconnect.
Duration: 64 minutes
Call participants:
Erica Smith -- Investor Relations
Udi Mokady -- Founder, Chairman and Chief Executive Officer
Josh Siegel -- Chief Financial Officer
Shaul Eyal -- Oppenheimer -- Analyst
Melissa Franchi -- Morgan Stanley -- Analyst
Saket Kalia -- Barclays -- Analyst
Sterling Auty -- J.P. Morgan -- Analyst
Fatima Boolani -- UBS -- Analyst
Jonathan Ho -- William Blair -- Analyst
Gray Powell -- Deutsche Bank -- Analyst
Christopher Speros -- Stifel -- Analyst
Catharine Trebnick -- Dougherty & Company -- Analyst
Howard Smith -- First Analysis -- Analyst
Andrew Nowinski -- Piper Jaffray -- Analyst
Kenneth Talanian -- Evercore ISI -- Analyst
Gregg Moskowitz -- Mizuho -- Analyst
Erik Suppiger -- JMP Securities -- Analyst
Dan Ives -- Wedbush Securities -- Analyst
Alex Henderson -- Needham -- Analyst
Shebly Seyrafi -- FBN Securities, Inc. -- Analyst
Imtiaz Koujalgi -- Guggenheim -- Analyst
