CrowdStrike (CRWD) Q1 2024 Earnings Call Transcript

CrowdStrike (CRWD 3.63%)
Q1 2024 Earnings Call
May 31, 2023, 5:00 p.m. ET

Contents:

• Prepared Remarks
• Questions and Answers
• Call Participants

Prepared Remarks:

Operator

Good day and thank you for standing by. Welcome to the CrowdStrike Fiscal first-quarter 2024 results conference call. At this time, all participants are in a listen-only mode. After the speakers' presentation, there will be a question-and-answer session.

[Operator instructions] Please be advised that today's conference is being recorded. I would now like to hand the conference over to your speaker today, Maria Riley, vice president of investor relations.

Maria Riley -- Vice President, Investor Relations

Good afternoon and thank you for your participation today. With me on the call are George Kurtz, president and chief executive officer and co-founder of CrowdStrike; and Burt Podbere, chief financial officer. Before we get started, I would like to note that certain statements made during this conference call that are not historical facts, including those regarding our future plans, objectives, growth, and expected performance, including our outlook for the second quarter and fiscal year 2024 and any assumptions for fiscal periods beyond that, are forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements represent our outlook only as of the date of this call.

While we believe any forward-looking statements we make are reasonable, actual results could differ materially because the statements are based on current expectations and are subject to risks and uncertainties. We do not undertake and expressly disclaim any obligation to update or alter our forward-looking statements, whether as a result of new information, future events, or otherwise. Further information on these and other factors that could affect the company's financial results is included in the filings we make with SEC from time to time, including the section titled Risk Factors in the company's quarterly and annual reports. Additionally, unless otherwise stated, excluding revenue, all financial measures disclosed on this call will be non-GAAP.

A discussion of why we use non-GAAP financial measures and the reconciliation schedule showing GAAP versus non-GAAP results is currently available in our earnings press release, which may be found on our Investor Relations website at ir.crowdstrike.com or on our Form 8-K filed with the SEC today. I would like to note that we are conducting today's call from one of our European offices and ask for your patience in the event of technical difficulties. With that, I will now turn the call over to George.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Thank you, Maria, and thank you all for joining us. Our continued execution despite a challenging macro environment translated to strong growth and exceptional margins, which drove record non-GAAP profitability, record free cash flow, and GAAP profitability for the first time in company history. We exceeded our guidance across both top and bottom-line metrics. Increased gross margin, cost discipline, and moderated headcount growth contributed to our strong bottom-line results.

Reaching GAAP profitability so early in our life as a public company provides insight into the strength of the model we have built and what we can achieve over time. Burt will cover the financial results in more detail. I will focus my comments on why we believe CrowdStrike has a clear and sustainable advantage as three megatrends continue to unfold: AI, consolidation, and cloud. Let's start with AI.

Since inception, CrowdStrike has been and will continue to be at the forefront of leveraging AI to drive better customer outcomes and efficiencies within our own business. In addition to industry-leading detection and rapid remediation for customers, utilizing AI has benefited our business by lowering costs and yielding higher margins. One example of AI benefiting our financial model is Falcon Complete. For years, our use of AI has enabled us to rapidly scale that business to a leadership position with an exceptional product margin that exceeds our overall company gross margin.

The margin profile and scale we have achieved for our managed offering would not have been possible without our innovations in AI. While others are just now jumping on the AI bandwagon, we have transformed cybersecurity with an AI-powered cloud business from inception. Generative AI is transforming the world, and security is no exception. Large language models, or LLMs, are only as good as the data on which they are trained, and human-annotated content makes for the best training data.

Driving better customer outcomes relies on having a data advantage and the context derived from that data. While we expect that LLMs will become commoditized over time, the data on which they are trained will not. CrowdStrike is uniquely positioned to benefit from this new technology. Our dataset spans petabytes and captures trillions of new events daily from our global fleet of sensors.

Combine that with our over 10 years of attack data and threat graph that has been paired with high-quality human analysis from OverWatch complete intelligence and incident response services, and you get unrivaled telemetry. Simply put, we believe CrowdStrike has a sustainable data advantage, the most powerful and unique set of correlated human and machine-generated data across all of cyber. Our data advantage creates a unique competitive moat, yields better models, better automation, and better outcomes. We see the rapidly growing adoption of generative AI as a democratizing force within cybersecurity from both an adversarial and protection standpoint.

From an adversarial perspective, we expect that the adoption of LLMs will lower the barrier of entry for malicious actors to create sophisticated cyberattacks. Generative AI is expected to make it even easier for less-advanced attackers to craft nation-state-caliber campaigns. We believe this will catalyze even greater demand for modern cybersecurity technologies like Falcon. From a protection standpoint, we see generative AI as a democratizing force by dramatically lowering the learning curve for practitioners, transforming even a novice analyst into a power user.

With all of this in mind, we introduced Charlotte AI, an exciting new generative AI security analyst utilizing CrowdStrike's high-fidelity data advantage. We believe Charlotte AI will empower a newly minted Tier 1 analyst to yield the results of an advanced Tier 3 analyst. The net benefit to the customer: faster results, better security outcomes, and lower overall costs. Charlotte AI represents CrowdStrike's latest innovation in helping security teams worldwide contend with the cybersecurity skills gap, respond to threats faster, and reduce operational costs.

Charlotte AI will uniquely benefit from a continuous human feedback loop with our OverWatch, Falcon Complete, and Intel teams. This continuous feedback loop on human-validated content is critical. And because of this, no other vendor in cyber will be able to match CrowdStrike's approach to generative AI. Demonstrating our commitment to lead and protect the industry through this next wave of innovation, we teamed up with AWS to develop powerful, new generative AI applications that help customers accelerate their cloud, security, and AI journeys.

Through this initiative, CrowdStrike and AWS will bring together their solutions and teams to keep customers safe across a range of AI services while meeting stringent security requirements. CrowdStrike already has a leadership position in helping protect AI innovators. A perfect example of this is a recent expansion with a B2B generative AI research and development company. This customer leverages significant public cloud resources to support their solutions, all too aware of the dangers others have faced from adversaries compromising cloud environments.

This customer expanded to Falcon Cloud Security Complete to support their small team with fully managed coverage, provide both cloud runtime protection and posture monitoring across their multi-cloud environment, and scale seamlessly with their growth, all without having to deploy multiple products or hire more people. Another megatrend continuing to unfold in cybersecurity is consolidation. The macro backdrop has only accelerated the need for customers to reduce vendor sprawl, reduce agents, reduce costs, and protect their businesses with the best of SaaS platform. On average, enterprise customers can realize over 200% ROI with Falcon.

With ROI results like this, it's no surprise companies turn to CrowdStrike to protect, power, and drive efficiencies for their businesses. In Q1, net new ARR from our million-dollar-plus customers grew year over year even as these larger, more complex deals can have longer sales cycles. We delivered $174.2 million in net new ARR for the quarter, which exceeded our stated assumptions. Our momentum with large customers, record Q2 pipeline, and success-tracking deals to close gives us confidence in the back half of the year.

In Q1, we closed over 50% more deals involving eight or more modules compared to a year ago. We believe this speaks to increasing customer demand for consolidation using the Falcon platform. When we look at our pipeline for the remainder of the year, we expect this trend to continue, giving us confidence in our ability to deliver net new ARR growth in the back half of the year. Over the past few months, I have personally met with many of our customers, prospects, and partners.

These conversations all centered on the same topic: Customers want to consolidate their security stack with Falcon and drive greater cost efficiencies while unlocking new capabilities. Let me share a few recent customer wins highlighting ways companies use CrowdStrike to consolidate while improving their cybersecurity outcomes. First, our wins with two new Fortune 100 customers. These organizations are consolidating on Falcon, a single, modern XDR platform unifying their approach to security across their different business units.

Each of these new CrowdStrike customers purchased multiple modules with one adopting nine modules, displacing legacy and next-gen vendors in their environment and standardizing on CrowdStrike. One of my favorite customer wins this quarter was with a regional healthcare customer brought to us by our partner, Dell. This organization was frustrated by the volume of false positives generated by their legacy security product, which hampered their security team's efficiency and obscured critical incidents. Recognizing the increased value they could gain by modernizing their security stack and consolidating on CrowdStrike, this customer adopted eight Falcon modules, including Falcon Complete Identity Threat Protection and LogScale, in a seven-figure total value deal.

In addition, our managed services teams have catapulted CrowdStrike to a leader position in The Forrester Wave: Managed Detection and Response and the No. 1 market share position for the second consecutive year in Gartner's MDR for Managed Security Service Report. CrowdStrike's MDR leadership extends beyond our managed services and into our MDR partner ecosystem. Of the top 25 MDR vendors by market share defined by Gartner, 88% have built their MDR services on top of the Falcon platform, showcasing Falcon as their modern XDR platform of choice.

We are proud that the Falcon platform powers so many different partners, enabling them to build their businesses on top of CrowdStrike. Our industry-leading partner ecosystem continues to expand rapidly, contributing meaningfully to our growth. CrowdStrike recently entered into a strategic partnership with Pax8, the leading MSP cloud marketplace with over 30,000 MSP partners across North America, EMEA, and APJ that serve the SMB market. This partnership provides CrowdStrike a born-in-the-cloud route to market for MSP consumption and a prime opportunity to displace the legacy AV and next-gen product vendors Pax8 partners use today.

MSPs are increasingly turning to the Pax8 marketplace for ease of product purchase, rapid software deployment, and fully integrated billing to run their businesses including cybersecurity. Pax8 MSP partner base will now be enabled to protect their end customers with the same cutting-edge XDR technology selected by the world's leading and largest enterprises. Our momentum in the public sector continues to expand. Public sector wins in the quarter included a Falcon Complete win at a top 20 US government contractor and a win with a major US federal agency.

Today, we announced CrowdStrike was granted an Impact Level 5, or IL 5, provisional authorization from the Department of Defense. IL 5 certification positions us well to extend our reach into the massive defense IT and cybersecurity markets. The competitive environment has not changed since our deep dive in April where we disclosed that, eight out of 10 times when an enterprise customer tests, they choose CrowdStrike over Microsoft, and our win rates across all competitors remain strong in the quarter. Organizations today, more than ever before, need security partners with deep expertise that can stop breaches while driving efficiencies in their security programs.

However, from Microsoft, companies experience added complexity, less coverage, and higher costs. One enterprise customer with over 50,000 employees told us the upgrade cost of moving from Microsoft E3 to E5 would be at least 2.3 million more than their CrowdStrike subscription, and that's just for the upgrade. With Microsoft's excessive annual cost increases, this would grow to $4.7 million by year five, excluding the additional cost required for support or a SIEM solution or increased staff to manage the extra complexity. When customers map it all out, they quickly realize that using Microsoft E5 for security is more expensive, requires more headcount, and increases their cyber risk.

The cloud is the third megatrend representing a long and sustainable tailwind for our business. The cloud is rapidly emerging as the new adversary battleground. We have observed a 95% year-over-year increase in cloud service exploitation and a 288% increase in threat actors that know how to operate in cloud environments. Security in cloud assets is paramount today and will continue to grow in importance.

As a leader in protecting some of the largest and most critical cloud companies, we have seen strong net new ARR growth from models deployed in public clouds. Our Falcon Cloud security offering unifies our agent and agentless cloud-native security capabilities into a single offering that's easy to deploy from build to runtime across all major cloud environments and is driving incredible customer momentum as customers consolidate their cloud security, replacing multiple cloud point products with Falcon. Tying this all together, the rapidly evolving and expanding threat environment demonstrates why it is so critical to have your endpoint, cloud identity, and data protection on one unified, modern XDR platform, Falcon. We've covered a lot today, and you can see that our relentless innovation continues to widen the gap between CrowdStrike and the competition.

In closing, I will reiterate a few key points. First, CrowdStrike has a clear data advantage built over the past 12 years by combining our unmatched AI and human threat intelligence expertise. For customers, CrowdStrike advantage means better, faster, and more cost-effective cybersecurity. For our business, CrowdStrike AI excellence shines through our differentiated business model efficiencies.

Second, we ushered cybersecurity into a new era with the introduction of Charlotte AI. Third, companies must consolidate their security stack to reduce complexity, reduce agents, and reduce costs without sacrificing coverage or security. They need to protect their cloud environments from build to runtime with a single unified platform. To achieve this, customers choose CrowdStrike.

And fourth, we believe that, in addition to building a winning platform, we built a robust business model capable of generating rapid growth at scale, earnings, and durable free cash flow. With that, I will turn the call over to Burt to discuss our financial results.

Burt Podbere -- Chief Financial Officer

Thank you, George, and good afternoon, everyone. As a quick reminder, unless otherwise noted, all numbers, except revenue, mentioned during my remarks today are non-GAAP. We delivered a strong first quarter even with the continued challenging macro environment with revenue, subscription gross margin, operating income, net income, and free cash flow all exceeding our guidance and reaching new records. We believe our financial performance speaks to the strength of our business model and the operational excellence engrained in the fabric of CrowdStrike culture, which includes diligence and discipline when balancing growth and profitability.

The demand environment remained resilient. Although we continue to see increased scrutiny and longer-than-typical sales cycles, especially for larger consolidation deals, with our relentless focus on sales execution, we achieved Q1 net new ARR of $174.2 million, which was above-stated assumptions. We ended the quarter with ending ARR reaching $2.73 billion, up 42% over last year. The quarter was well balanced with the mix between new logos and expansion cross-sell net new ARR similar to Q4.

We continue to be very pleased with the success of our land and expand strategy with our dollar-based net retention rate once again above the 120% benchmark in Q1. Subscription customers with five or more, six or more, and seven or more modules now represent 62%, 40%, and 23% of subscription customers, respectively. Moving to the P&L. Total revenue grew 42% over Q1 of last year to reach $692.6 million.

Subscription revenue grew 42% over Q1 of last year to reach $651.2 million. Professional services revenue was $41.4 million, setting a new record for the 11th consecutive quarter and representing 48% year-over-year growth. During the quarter, we also saw strength in Europe, the Middle East, and Japan. International revenue grew 53% year over year.

Our first-quarter non-GAAP gross margin performance was outstanding with both total and subscription non-GAAP gross margins ascending to new heights. Total non-GAAP gross margin was 78%, and subscription gross margin crossed the 80% milestone for the first time. Our investments in data center and workload optimization drove our gross margin improvement in the quarter. As we have said in the past, we expect subscription gross margin to fluctuate by up to one point on a quarter-to-quarter basis as we balance optimization investments with capacity growth and new platform functionality.

We expect these investments to drive further margin enhancement in the future as we continue to execute on our long-term plan to drive subscription gross margin sustainably above 80%. Total non-GAAP operating expenses in the first quarter were approximately $424.6 million, or 61% of revenue, versus $291.0 million last year, or 60% of revenue. The sequential increase in sales and marketing reflects the timing of in-person events and marketing programs. In Q1, our magic number was 1.0, and we achieved a Rule of 75 on a free cash flow basis, both metrics reflecting the continued efficiency of our model.

First-quarter non-GAAP operating income grew 40% year over year to reach a record $115.9 million, and we reported operating margin of 17%. Non-GAAP net income attributable to CrowdStrike in Q1 grew to a record $136.4 million, or $0.57 on a diluted per share basis. Our weighted average common shares used to calculate first-quarter non-GAAP EPS attributable to CrowdStrike was on a diluted basis and totaled approximately 241 million shares. We also reached GAAP profitability for the first time in the company's history.

While we are very proud of this milestone, we have yet to reach sustained GAAP profitability. Q1 benefited significantly from fewer net new hires in Q1, which we expect to pick up throughout the remainder of the year, albeit at a much more moderated pace in comparison to FY '23. We believe reaching this milestone demonstrates that our financial model will deliver GAAP profitability in due time. We ended the first quarter with a strong balance sheet.

Cash, cash equivalents, and short-term investments increased to approximately $2.93 billion. Cash flow from operations grew 40% year over year to a record $300.9 million. Free cash flow grew 44% year over year to a record $227.4 million, or approximately 33% of revenue. Before I move to our guidance, I'd like to provide a few modeling notes.

We are raising our revenue guidance for the fiscal year and maintaining our net new ARR assumptions for the first half and fiscal year, which call for a 10% year-over-year headwind to net new ARR in the first half and in line to modestly up net new ARR for the full year. Our strong Q2 pipeline and momentum with large consolidation deals give us confidence in the remainder of the year, including the back half where we expect to return to year-over-year growth in net new ARR. Also, as a reminder, given the timing of expenses, billing seasonality, and the midyear ESPP purchase, the second quarter is generally our lowest cash flow generation quarter of the year. This year, we expect to see more pronounced seasonality and maintain our target of achieving 30% free cash flow margin for the fiscal year.

As we discussed during our investor briefing in April, this is inclusive of estimated full-year impacts from billings duration and cash taxes, balanced by the positive tailwinds of increased operating leverage, higher interest income, and lower capex. And lastly, our assumptions on interest income, cash outlay for income taxes, and capital expenditures are unchanged. For the second quarter of FY '24, we expect total revenue to be in the range of $717.2 million to $727.4 million, reflecting a year-over-year growth rate of 34% to 36%. We expect non-GAAP income from operations to be in the range of $116.4 million to $123.8 million, and non-GAAP net income attributable to CrowdStrike to be in the range of $129.5 million to $137.0 million.

We expect diluted non-GAAP net income per share attributable to CrowdStrike to be in the range of $0.54 to $0.57, utilizing a weighted average share count of 242 million shares on a diluted basis. We are raising our revenue and profitability guidance for the full fiscal year 2024. We currently expect total revenue to be in the range of $3,000.5 million to $3,036.7 million, reflecting a growth rate of 34% to 35% over the prior fiscal year. Non-GAAP income from operations is expected to be between $498.9 million and $526.2 million.

We expect fiscal 2024 non-GAAP net income attributable to CrowdStrike to be between $562.8 million and $590.1 million. Utilizing 243 million weighted average shares on a diluted basis, we expect non-GAAP net income per share attributable to CrowdStrike to be in the range of $2.32 to $2.43. George and I will now take your questions.

Questions & Answers:

Operator

Thank you. [Operator instructions] Again, participants will be limited to one question. Our first question comes from Saket Kalia with Barclays. You may proceed.

Saket Kalia -- Barclays -- Analyst

OK, great. Hey, guys. Thanks for taking my my question here and congrats on -- on the DOD authorization. Hey -- hey, Burt.

Hey, George. Thanks for taking my question here. George, maybe for you and I'll just stick to one here. Can -- can we just talk a little bit about what you're seeing in -- in legacy endpoint share -- share gains? I mean, clearly, CrowdStrike has a broader platform beyond just endpoint.

But I'm curious, just given the macro and everything happening, curious how you feel about that opportunity for continued share gain in endpoint specifically.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, I feel good about that opportunity. And if you look at our current market leadership and just market-leading leadership at 17.8% for modern endpoint security, it's still a very fragmented market, and we continue to take share from the legacy players that are in the market. Again, when you look at different geographies, obviously, we've got heavier penetration in North America, but there's many geographies in the rest of the world that still have to be penetrated deeper, particularly in converting those legacy players. So, I feel really good about it.

It's a fragmented market if you just look at the numbers. And the ongoing conversion of legacy technologies into next-gen players like CrowdStrike will continue for the foreseeable future.

Operator

Thank you. Our next question comes from Sterling Auty with SVB MoffettNathanson. You may proceed.

Sterling Auty -- MoffettNathanson -- Analyst

Yeah, thanks. Hi, guys. I wonder if you can give us a sense of what kind of impact you saw on the business from the disruption from the banking crisis in March, both on kind of ARR linearity and maybe even billings in the quarter.

Burt Podbere -- Chief Financial Officer

OK, Sterling, how are you? So, number one, let's talk about the impact -- number one, let's talk about the impact, you know, of the banking -- of the banking crisis. So, for us, there was not a material impact on ARR from the banks. I think the -- the impact of churn from the banking industry was really de minimis. And we continue to close deals with regional banks in the quarter.

Banks, in particular, need robust cyber defenses. Overall, gross retention remains high and best in class. So, we felt we felt pretty good in terms of that particular piece of the segment. In terms of, you know, overall billings, you know, billings is, of course for us, quite -- quite cyclical, and it is driven primarily through seasonality.

So, Q4 has our largest deals. And the renewals that came up have an impact, and then the impact, you know, falls into Q1, which we would see, you know, an overall decrease. So, that's how -- that's how we think about it. And as you know, the business is focused on ARR as opposed to billings, which can be -- which can have whipsaw effects.

And the focus on ARR just gives you an idea about the overall health of the business.

Operator

Thank you. Our next question comes from Joel Fishbein with Truist Securities. You may proceed.

Joel Fishbein -- Truist Securities -- Analyst

Thanks for taking the question. Hey, George, one for you. Thanks for the update on AI. I'm just curious, as it increases the attack surface, just curious if you've seen any threats recently that it may have been exploited new threats as a result, you know, of the proliferation of some of these new models that are out there.

And I have a quick follow-up.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, we continue to see and we have seen for some period of time adversarial AI. So, the use of AI, specifically by the adversary, to try to defeat the security system. So, that's been going on for some time. I think what we're seeing now with generative AI and LLMs is the fact that it becomes very easy for even a novice adversary to be able to have the same capabilities as a nation-state to create new exploits, new vulnerabilities to be able to deliver phished emails, etc.

So, that will be an ongoing effort. And again, we're really excited about Charlotte AI, which we announced this week. I think it's an absolute game changer for us in the company and what we're able to do and to really compress the -- the workloads for analysts and provide a lot of the intelligence that we have and our analysts have right through the Falcon platform. So, we'll continue to monitor that, but that's been an ongoing activity that we've seen for some time.

Joel Fishbein -- Truist Securities -- Analyst

Great. And just as a follow-up on this, CrowdStrike Falcon Complete XDR, can you just talk about how the new release may increase your -- your competitive advantage in that space? I think there's a lot of noise out there.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, there is a lot of noise, and when you look at, you know, XDR and what we've talked about with our use of AI in terms of really driving additional leverage in the business, it does help to automate a lot of what we do. And we can now provide that level of automation in a complete offering because XDR is still -- as an industry, still an immature technology. I think wrapping it with a complete service really allows customers to have peace of mind, they can allow us to take in that third-party data, leverage the models that we've already built to get better outcomes, faster response, and drive down their overall operational costs.

Operator

Thank you. Our next question comes from Hamza Fodderwala with Morgan Stanley. You may proceed.

Hamza Fodderwala -- Morgan Stanley -- Analyst

Hey, guys, good evening. Thank you for taking my question. George, an added question for you as well. So, I'm curious how are you thinking about monetizing some of the new AI services that you've released.

Is this something that's going to drive more sort of top-of-the-funnel conversion? Do you think it's going to drive more demand for log scale? Is there, like, an explicit SKU that you're offering? Just curious how you're thinking about that. I know it's pretty early days.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, it's something that's really foundationally built into the platform. And we believe it's going to drive a lot of additional adoption of -- of modules and platform usage throughout the -- the customer base. So, we'll start there. As it evolves over time, we'll look to see if we'll monetize it with specific SKUs.

But I think, first and foremost, let's get it to the customer base, let's iterate it, let's leverage the data advantage that we have because, as I've talked about in the earnings call, we've got 10 years of being able to train these algorithms. And I think, as most know, it really is the human interaction that allows us LLMs to shine. And we've got I think a real advantage because we've got 10 years of attack pairing, if you will, with data and how the attacks work that can be used for training. So, we're going to get it out to the customer base, continue to iterate it, and then I believe it'll drive more adoption of the platform modules.

And then, we'll see how we'll monetize it after that from a separate SKU perspective.

Operator

Thank you. Our next question comes from Matt Hedberg with RBC. You may proceed.

Matt Hedberg -- RBC Capital Markets -- Analystw

Great, guys. Thanks for taking my question. You're talking about a lot of confidence in second-half net new ARR acceleration. When you -- when you sit back and you look at it, there's a lot of things I think, to be excited about.

What do you think are the biggest drivers of that growth? And maybe I missed it, but are you still targeting a low 30% ARR growth for fiscal '24?

Burt Podbere -- Chief Financial Officer

Yeah, hey, great question. So, first, let's talk a little bit about the second half, obviously, the easier off in the back half, right? So, that's number one. And then, what really gives us confidence, you know, going into the second half is three things. One is pipeline.

We see momentum and deal activity rapidly building for the second half. It really started in the middle of, you know, Q1, and we saw that momentum to be able to build the pipe, you know, for the second half. So, that was number one. Number two, products.

We're excited about LogScale. George talked about it a lot. We've given some examples. So, we think that there's a great opportunity with LogScale.

We're also seeing momentum in cloud. I think that's something that we're really excited about and AI-powered XDR now with Charlotte, and, you know, George has already talked about that. And then, third, partnerships. You know, whether it's Dell, or Pax8, or others that are coming online, we think that -- you know, that can be, you know, something that will move the needle for us in the second half.

So, the key here is cybersecurity remains mission-critical, and I think customers want to consolidate and drive down TCO more than ever. And Falcon is designed to do exactly -- to do exactly like that. So, you know, I think that when you look at the overall module adoption, and we talk about, you know, we closed over 50% more deals involving eight or more modules this quarter compared to a year ago, that gives -- that speaks to the power of our -- of our platform. And so, all those things give us confidence about what we talked about in, you know, for the second half, and the stated assumptions remain -- remains the same.

Operator

Thank you. Our next question comes from Andrew Nowinski with Wells Fargo. You may proceed.

Andy Nowinski -- Evercore ISI -- Analyst

Great. Thank you. Thanks for taking the question. So, I was wondering if you could just expand on your partnerships with Dell that you talked about last quarter.

Just wondering, you know, how much it contributed into the quarter, whether you have enough visibility from that partnership yet to factor that into your -- your new -- your new revenue guidance for the year, and if that's actually driving any -- any traction in the SMB sector? Thanks.

Burt Podbere -- Chief Financial Officer

Yeah, it's a good question. So, you know, one, we're tracking plan. We're still early days obviously with Dell. We called out, one seven-figure deal with a regional healthcare company that was brought to -- through our partnership with Dell in the quarter.

And obviously, with any new alliance, it does take time to gain traction. So, the numbers that are coming from, you know, the Dell partnership, we anticipate to grow over time. But in terms of, you know, big piece of the quarter, not -- not yet, right. We -- we have great expectations, but like anything else, those things do take time and -- but we are still excited about it.

Operator

Thank you. Our next question comes from Tal Liani with Bank of America. You may proceed.

Tal Liani -- Bank of America Merrill Lynch -- Analyst

Hi, guys. Can you give us an update on -- two questions. Can you give us an update on going down market and your traction with Falcon Go, the SMB focus area? So, what's the -- what kind of competition do you see there given that Microsoft is stronger in the down market? And second question, we have seen many companies in the space having sales to existing customers much stronger than sales to new customers, and there is slowdown in sales to new customers. Can you give us kind of the data on where do you see the growth coming from in existing versus new customers? Thanks.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Sure. I'll start out, and then Burt can add anything if he -- if he needs to. So, Falcon Go has been a success for us. We continue to target the SMB market.

I think I called out in one of the prior earnings calls how we organized ourselves internally. We've got a specific focus and the leader on that. We've seen a lot of success there. And we'll also -- I need to call out the pairing to our success in the MSP market and a partnership like Pax8, which really allows us to get those lower-cost offerings out to -- to customers through managed service providers.

So, it's a -- it's a big market for us. SMB, it's a very highly fragmented market. You have some players there, but we've been successful because customers are looking for outcomes. You know, you talked about Microsoft.

Customers routinely come to us after they get hit with ransomware, after they have an issue and looking for a next-gen solution that doesn't depend on signatures. So, we see success there. We've got to ramp our channels up. We're working with Dell and others and managed service providers.

But I feel really good about that opportunity, and that will continue to grow over time.

Burt Podbere -- Chief Financial Officer

I'll take the second part of the question, Tal. So, we really haven't seen a material difference in terms of the mix between -- in terms of install base and net new logos versus last quarter. We do think that we will see, over time, as our install base gets larger, that we'll have more opportunities to sell to, you know, our install base. Having said that, we still think we have a lot of headroom in terms of net new logos.

We have a long way to go and we talked about that on earlier call. So, overall, we're really pleased with our opportunity on both net new logos from new logos that land from a cross-sell, upsell opportunity.

Operator

Thank you. Our next question comes from Shaul Eyal with TD Cowen. You may proceed.

Shaul Eyal -- Cowen and Company -- Analyst

Thank you. Hi. Good, afternoon guys. George, last quarter, I believe -- or maybe during the update, you talked a lot about some of the Microsoft displacements, and I know you've actually just kind of mentioned that.

In that context, maybe shifting to, you know, from a model perspective, any specific trends you can talk to us about this quarter versus prior quarters with respect to the leading -- the leading modules, the identity, some of the emerging ones versus everything that you're seeing from Microsoft in that respect? Thank you.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Sure. I think I'll start with consolidation, and I'll reference back to what I spoke about in the prepared remarks. Every customer that we spoke to, and I spoke to many, many customers at RSA, and even throughout the quarter, it was really about consolidation. I think we've done a good job of showing a very cost-compelling model for them where they're actually paying less than, say, in E5 for the security pieces, particularly CrowdStrike, and they're getting better outcomes.

So, there are many customers that have said, "We want to consolidate on CrowdStrike, we want to buy more." Obviously, these take -- these sort of bigger deals take time, they have more scrutiny, those sort of things. But that's what we're seeing, and that's I think reflective in what we saw this quarter and, certainly, what we've seen growing in the pipeline as customers want to do more with CrowdStrike.

Operator

Thank you. Our next question comes from John DiFucci with Guggenheim Securities. You may proceed.

John DiFucci -- Guggenheim Partners -- Analyst

Thank you. My question is for George. So, this is the first quarter ever that new ARR declined for you guys whereas most others' declines started quarters ago, like several quarters ago. Tal asked about competition in the SMB market, but what about demand? We've started to hear of some weakness in the SMB in the mid-market.

We realize that's largely greenfield for you, so it might be harder for you to tell, but are you seeing any changes in that market demand this quarter versus previously?

George Kurtz -- Co-Founder, President, and Chief Executive Officer

No, we actually saw a strong -- strong demand and results in SMB. I think we've got a great model. We've got the right technology for it. And we're solving outcomes, right? When you look at not only the technology itself, you know, obviously, you can buy Falcon Go as a customer, but you can also buy Falcon Complete.

We have many SMB customers, many many that are Falcon Complete customers. Why? Because it's a very compelling proposition from a price perspective. They couldn't even fill one -- one head for the cost of what we're charging them, and they're getting the best in the world in terms of security. So, we have not seen a slowdown in SMB.

We've got, I think, really good traction there. And at the end of the day, as you pointed out, it's still a fragmented market, and it's a smaller part of our overall revenue. So, we see great future opportunity with it and didn't see any -- any impact last quarter.

Operator

Thank you. Our next question comes from Brian Essex with J.P. Morgan. You may proceed.

Brian Essex -- JPMorgan Chase and Company -- Analyst

Hi, good afternoon, and thank you for taking the question. I guess, maybe for Burt, you know, nice milestone of hitting GAAP profitability. I guess I would love a little bit more color around your commitment to maintaining GAAP profitability. What should we expect? And you also had a really -- I think, for the first time, stock-based comp declined sequentially.

What is kind of the outlook there? And how should we kind of frame out your -- your view and your plans to drive GAAP profitability and balance growth and profitability going forward? Thank you.

Burt Podbere -- Chief Financial Officer

Thanks, Brian. Great question. So, one, overall, you know, we've had a very methodical approach in how we look at the various aspects of the model. So, first, we focused on gross margin, and you can see the progress that we've made there.

Second piece was focusing on non-GAAP profitability and free cash flow, and free cash flow, as you know, which is 30%. And that is something that's ongoing. Third, evolution of GAAP profit, which we will continue to focus on and drive toward achieving sustainability. Of course, SBC is the biggest piece of that.

We continue to manage SBC, and we're going to be mindful with the balance, with retaining the best and the brightest talent. That's paramount for us. We also look to dilution. Our dilution, we feel is -- is in a good place, less than 2% this year, strive to keep it under 3% in the years that are coming.

So, overall, we are very pleased with hitting the GAAP profitability and believe it demonstrates the power of the model, and that we are disciplined in our growth and we're disciplined in how we see the market today. Everything we do is -- is by design. It's not -- it's not a fluke. We think about it in terms of where we can extend and how we can extend.

But for us with SBC, we really focus on making sure we're able to get the best talent and retain the best talent and attract the best talent. That's how we really think about it. And for us, we're going to look forward to when we reach sustainability. But we have other things we're going after right now, including net retention and attraction.

Operator

Thank you. Our next question comes from Jonathan Ho with William Blair. You may proceed.

Jonathan Ho -- Wells Fargo Securities -- Analyst

Hi, there. Good afternoon. I just wanted to maybe ask a little bit about sort of the success that you've seen with these additional add-on modules. Can you help us understand maybe where that success is coming from, whether it's some of your newer products in areas like Cloud or ESM, or is this in sort of multiproduct sales from your more existing endpoint capabilities? Thank you.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Sure. Well, we've seen strengths in many different areas. We had some incredible wins with LogScale. I'm really seeing the momentum on that.

There's a real need in the industry for faster, better, cheaper logging, and customers are looking for a solution. So, that was -- that was great to see. I think when you look at identity, this is one of those areas where, just like EDR in the early days, it wasn't necessarily budgeted. And what we're starting to see now is that companies are actually budgeting in current and future budgets for identity, just like XDR -- sorry, EDR as an emerging product.

And the third area is cloud. We had some incredible cloud wins. We've packaged up our offering to include both agent and agentless on the cloud as basically one SKU. Customers can use it.

They love the fact that they're getting results from both agent and agentless technologies, and that is a true differentiator in the environment -- the competitive environment. So, overall, when you look at a lot of these areas that I've called out in the past, it's full speed ahead on them. And we continue to add more capabilities, and I'm really excited about the product lineup that we have for this fiscal year.

Operator

Thank you. Our next question comes from Gregg Moskowitz with Mizuho. You may proceed.

Gregg Moskowitz -- Mizuho Securities -- Analyst

OK, thank you for taking the question. First, a quick clarification from Burt, if you could just comment on average duration this quarter and if there was any change. And then, for George, so I know you've been incorporating AI into threat graph and the broader platform for years. But on Charlotte, you alluded to commoditizing LLMs, but might you leverage open source and develop your own LLM-based on your dataset to provide additional value there? Just curious to hear a little more on how you may augment existing LLMs and potentially drive a greater wedge, so to speak, based on your inherent data advantage there.

Thanks.

Burt Podbere -- Chief Financial Officer

Hey, Gregg. I'll take the first part of that question. So, as you know, we've called out that we expect to see, in the long term, the shift from multiyear deals to one-year deals. I think that's traditional in software.

But we do not see a material shift in the trend this quarter in comparison to the last quarter. So, let's just be very very clear on that point. Deal durations are getting shorter but are expected, and it remains within the parameters of how we've modeled out, you know, our overall business.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Yeah. And, Gregg, on -- on the question regarding LLMs, obviously, there are some great technology that's already out there, and I think our view is to -- to leverage LLMs. It's a very similar concept to being able to leverage different cloud providers, leverage the LLM that suit you for a particular purpose. It doesn't mean we couldn't build our own.

But I think what's important, and I call this out in the prepared remarks, is the fact that the training is one of the areas that really makes an LLM shine. And I think many people have seen that just with their understanding of ChatGPT. These things have to be trained or you get hallucinations in terms of the results, spurious results, if you will. So, from our standpoint, we believe the pairing of the threat graph with annotated threat data over the last 10 years is and will continue to be a sustainable advantage and a barrier to entry because we've already done a lot of that kind of human training.

And we can take advantage and interchange LLMs within our own dataset to provide the best outcome depending on what we're looking for. So, we'll leverage what's out there. We may build some of our own, but I think, more importantly, we've got the right dataset to get the training the way we need it.

Operator

Thank you. Our next question comes from Alex Henderson with Needham. You may proceed.

Alex Henderson -- Needham and Company -- Analyst

Great. Thank you so much. I was hoping you could talk a little bit about what your assumptions are in terms of your pipeline, in terms of deal sizes, duration, closure rates, and price relative to the conditions. Are you baking in a little bit more conservatism into your assumptions on some of those parameters? Are you expecting the deal sizes to continue to go up but then push out in the time to -- to close deals And what are you assuming around closure rates in this environment? And if you could feather in a little bit on the federal, I would -- I would love it.

Thanks.

Burt Podbere -- Chief Financial Officer

Thanks, Alex. A few things to unpack there. So, let's start -- let's start with -- in terms of larger deals, again, we close over 50% more deals involving eight or more modules this quarter compared to a year ago. I think this really speaks to the fact that customers really want to do the consolidation play.

They want to continue to leverage Falcon platform as a means to get the right outcomes at the right price. In terms of the overall environment, so, first, big picture in the macro, we -- we don't see the macro improving now and for the rest of the year. So, with that as a backdrop, when we think about deal durations, yeah, sure we think deal durations are going to be shorter. I think people are going to, in terms of their -- in terms of their size, are going to be longer to be able to consummate.

And that goes to the additional scrutiny that we're continuing to see from companies looking to do bigger deals takes more time. And so, when we think about that all in perspective, we know that there's going to be deals that are going to be more difficult to close within a particular quarter. And so, we've modeled that in. I think that, overall, with respect to some of the other metrics that you had mentioned, I think that, you know, for one, I think that, you know, for -- for our net new ARR, we are going to maintain the assumptions that we stated previously.

I think that's the right thing to do. With that, I'll pass it to George to talk about fed.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Sure. As I -- as I mentioned in prior comments, we're excited about IL 5. That does open up, I think, a much bigger federal opportunity. We had some really nice wins in the quarter, and that's one.

Again, it's slow and steady. You've just got to get in. It may take a while to get deals done, but they last a long time and they're big and meaty. So, we continue to drive forward on that, and I think this IL 5 certification opens up more doors for us.

Operator

Thank you. Our next question comes from Ittai Kidron with Oppenheimer. You may proceed.

Ittai Kidron -- Oppenheimer and Company -- Analyst

Thanks. George, thanks for the great review on AI. I guess the question for Burt, with the benefits of AI, as George described them, how soon can you raise your long-term margin target?

Burt Podbere -- Chief Financial Officer

Look, you know, for us, we're really pleased with where we're going with our margins. You know, start at gross margin, you saw the progress that we've made there. We've talked about the continued developments for optimization in our -- certainly in our -- in our data centers as well as our cloud workloads. And then, the progress that we're making in AI we build into everything we do, and we've been doing it for 10 years.

We do anticipate to continue to see those improvements and just remember -- this has to remind you that we've been doing AI from the beginning, just as we did cloud from the beginning. Those two were hand in hand. And the good news there is we've got, as George mentioned, you know, over 10 years of all of that AI and the training on the AI, and that's a massive head start over any one of our other competitors.

Operator

Thank you. Our next question comes from Patrick Colville with Scotiabank. You may proceed.

Patrick Colville -- Scotiabank -- Analyst

Hey, thank you so much for squeezing me in. In the prepared remarks, you mentioned that, in the quarter, you saw increased scrutiny and longer sales cycles time. Just double-click on that comment. I mean, was that increased deal scrutiny and longer sales cycles, was that like late in the quarter, in the kind of in March, April, or was that toward the beginning? And I guess any more color or clarity you give on those comments would be fascinating.

Thank you.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Sure. So, the comment was meant to be throughout the quarter. You know, we -- you know, as we go into deals, you know, we're seeing customers want to consolidate more. And that takes more time because they're adding more modules with us, so they're looking to spend more with us but then reduce other spends from other competitors.

And in a sense, they're actually thinking about better outcomes overall in the security space and beyond and how to get it at a cheaper price. And that's, again, things that we've talked about from day one, and we're seeing that happen today. So, it's throughout the quarter that we're seeing both additional scrutiny because of what I just mentioned. But also, they do take longer and that's throughout the entire quarter.

Operator

Thank you. Our next question comes from Jonathan Ruykhaver with Cantor Fitzgerald. You may proceed.

Jonathan Ruykhaver -- Cantor Fitzgerald -- Analyst

Yeah, hi, guys. So, I'm curious, when you look at data retention requirements, particularly XDR for active threat hunting, but I guess increasingly going forward for these large language models, can you just talk about the issue the industry is facing just around the increasing data retention requirements and the associated costs? And I know you've already talked positively on LogScale adoption, but those costs with LogScale versus other solutions, is there any way for you to quantify what that looks like, the advantage you have?

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, specifically, around LogScale, you see a massive increase in terms of our compression algorithms and our ability to store data. And I think one of the areas where you look at LogScale and, you know, just the simple view of it is better, faster, cheaper. And that's what we've seen. We've had some big customers that are using that really as their culture data lake, if you will.

They can store lots of data, you know, on-prem or many of them in the cloud for a very cost-efficient -- in a very cost-efficient manner, and they still get the performance. So, I think the architecture, which the modern architecture around LogScale, really does give us an advantage there. And that's being borne out by customers in their own testing.

Operator

Thank you. And our last question comes from Catharine Trebnick with Rosenblatt. You may proceed.

Catharine Trebnick -- Rosenblatt Securities -- Analyst

Hi. Thank you for the question. Last -- at the last Analyst Day or the one before, you talked about your coalition partnership. And can you talk to cyber insurance as a -- is that still a tailwind -- still a tailwind as it was last year that dissipated? Thank you.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Yeah. I think cyber insurance, for a lot of customers, is very difficult to get and it's actually gone up in costs. So, we have many customers that, as part of the CrowdStrike acquisition, are baking in their ability to get cyber insurance and be -- in many cases, being able to reduce the overall cost because many of the cyber insurance providers recognize, with CrowdStrike in place, overall risk is dramatically going to be reduced. So, that's what we've seen.

I don't know that there's any anomalies one way or another, but it's a continued problem in the industry to actually get cyber insurance. And it is part of our overall value proposition to a customer to be able to, A, help them get it; and B, reduce their overall cyber insurance costs.

Operator

Thank you. And this concludes the Q&A session. I now like to turn the call back over to George Kurtz for any closing remarks.

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Well, I just wanted to thank everyone for their time and attention. And we appreciate the questions, and we look forward to seeing you next quarter. Thank you so much.

Operator

[Operator signoff]

Duration: 0 minutes

Call participants:

Maria Riley -- Vice President, Investor Relations

George Kurtz -- Co-Founder, President, and Chief Executive Officer

Burt Podbere -- Chief Financial Officer

Saket Kalia -- Barclays -- Analyst

Sterling Auty -- MoffettNathanson -- Analyst

Joel Fishbein -- Truist Securities -- Analyst

Hamza Fodderwala -- Morgan Stanley -- Analyst

Matt Hedberg -- RBC Capital Markets -- Analystw

Andy Nowinski -- Evercore ISI -- Analyst

Tal Liani -- Bank of America Merrill Lynch -- Analyst

Shaul Eyal -- Cowen and Company -- Analyst

John DiFucci -- Guggenheim Partners -- Analyst

Brian Essex -- JPMorgan Chase and Company -- Analyst

Jonathan Ho -- Wells Fargo Securities -- Analyst

Gregg Moskowitz -- Mizuho Securities -- Analyst

Alex Henderson -- Needham and Company -- Analyst

Ittai Kidron -- Oppenheimer and Company -- Analyst

Patrick Colville -- Scotiabank -- Analyst

Jonathan Ruykhaver -- Cantor Fitzgerald -- Analyst

Catharine Trebnick -- Rosenblatt Securities -- Analyst

More CRWD analysis

All earnings call transcripts