Zscaler (ZS) Q3 2023 Earnings Call Transcript

Zscaler (ZS 0.30%)
Q3 2023 Earnings Call
Jun 01, 2023, 4:30 p.m. ET

Contents:

• Prepared Remarks
• Questions and Answers
• Call Participants

Prepared Remarks:

Operator

Thank you for standing by and welcome to the Zscaler third quarter fiscal year 2023 earnings conference call. [Operator instructions] After the speakers' presentation, there will be a question-and-answer session. [Operator instructions] As a reminder, today's program is being recorded. And now, I'd like to introduce your host for today's program, Mr.

Bill Choi, senior vice president of investor relations and strategic finance.

Bill Choi -- Senior Vice President, Investor Relations and Strategic Finance

Good afternoon, everyone, and welcome to the Zscaler third quarter fiscal year 2023 earnings conference call. On the call with me today are Jay Chaudhry, chairman and CEO; and Remo Canessa, CFO. Please note that we have posted our earnings release and a supplemental financial schedule to our investor relations website. Unless otherwise noted, all numbers we talk about today will be on an adjusted non-GAAP basis.

You will find the reconciliation of GAAP to the non-GAAP financial measures in our earnings release. I'd like to remind you that today's discussion will contain forward-looking statements, including but not limited to the company's anticipated future revenue, calculated billings, operating performance, gross margin, operating expenses, operating income, net income, free cash flow, dollar-based net retention rate, future hiring decisions, remaining performance obligations, income taxes, earnings per share, our objectives and outlook, our customer response to our products, and our market opportunity. These statements and other comments are not guarantees of future performance but rather are subject to risks and uncertainties, some of which are beyond our control. These forward-looking statements apply as of today, and you should not rely on them as representing our views in the future.

We undertake no obligation to update these statements after this call. For a more complete discussion of the risks and uncertainties, please see our filings with the SEC, as well as in today's earnings release. I would like to inform you that we'll be attending the following upcoming events in June: Bank of America Global Tech Conference in San Francisco on June 7th, Cantor's Security and Infrastructure Conference on June 9th. And we will also host an investor briefing focused on our latest innovations at our Zenith Live conference on June 15th.

Now, I'll turn the call over to Jay.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you, Bill. We delivered strong third quarter results, with all financial metrics above the high end of the guidance we provided last quarter. On a year-over-year basis, revenue grew by 46%, billings grew by 40%, and current billings grew by 44%. Our new business grew significantly across various industry verticals, and we had approximately half of our revenue come from outside the U.S.

We have a strong and loyal base of customers, with growth retention rates in the high 90s. We have a disciplined approach to growth. And once again, our operating income more than doubled on a year-over-year basis, with operating margins now exceeding 15%. While we continue to operate under tighter economic conditions, I believe the comprehensive functionality of our Zero Trust Exchange platform, our strong execution, and our customer-first approach will enable us to navigate this macro backdrop and deliver on our guidance.

Our consultative sales process enables our account teams to adapt to the changing business environment and stay close to our customers, especially at the C level. We are partnering earlier with CXOs to jointly create compelling CFO-ready business cases that have clear ROI and payback periods. As our Q3 results demonstrate, this high-touch engagement is helping get deals across the finish line. Our go-to-market engine enables us to close many large multiyear multiproduct deals.

We are providing increased guidance for the full year, which we believe balances our business optimism and macroeconomic uncertainties. A few quarters ago, we noted that customers were increasingly scrutinizing their projects and budgets due to macro conditions. We've seen this elevated level of scrutiny continue in Q3. Nevertheless, we see high-priority initiatives still moving forward.

In my conversation with hundreds of IT executives, cybersecurity remains their No. 1 IT priority. Traditional network security based on firewalls and VPNs cannot handle the complexity of safeguarding enterprises in what has become a work-from-anywhere world. Given the explosion in ransomware and high-profile data breaches, IT leaders are looking to phase out castle-and-moat security to adopt zero-trust architecture.

Moreover, C-level leaders from around the globe are telling me that the technical debt of the legacy network and security point products impedes progress and slows down business operations. Our business value message is resonating with customers. Our Zero Trust Exchange offers better security and user experience while substantially reducing cost and IT complexity compared to legacy networking and security. By consolidating point products and embracing zero trust with Zscaler, our customers are modernizing their security and increasing productivity, which gives them the competitive edge they need to succeed in today's rapidly evolving business environment.

We also partner with many tech leaders to deliver easy, jointly integrated solutions for customers, which increases our business value and creates go-to-market leverage for us. Our current marketing campaign called Beyond the Perimeter is a great example of the successful field collaboration with our tech partner CrowdStrike that is increasing our pipeline. In today's environment, our strategy is to double down on customer success. From pre-sales to deployment and customer success management, we have built our organization to deliver measurable outcomes at the CXO level.

We made a number of investments in customer success services, technical account managers, partner services, and certification of partners, which together will help our customers move faster toward realizing business value. We now have 400 customers with greater than $1 million in ARR, including over 35 customers exceeding $5 million in ARR. In Q3, our new logo business grew approximately 20% year over year. Our proven experience at scale makes us a partner of choice for customers pursuing their zero-trust security journey.

We have a blueprint for delivering greater value, which drives strong upsell. Approximately 60% of our new business came from existing customers, and our net retention rate has again exceeded 125%. Happy customers buy more. And our net promoter score of over 70 is a testament to our strong relationship with our customers.

As we have indicated before, we have a 6x upsell opportunity with our existing customers for protecting their users. Our engineering team is innovating at a rapid pace and has expanded our comprehensive platform, from securing users to securing workloads, as well as securing IoT and OT. As I mentioned before, customers are increasingly buying Zscaler for Users with bundles ZIA, ZPA, and ZDX together. Let me highlight one such platform deal in the quarter.

In an exciting upsell win, a fast-growing global bank in APJ upgraded to Zscaler for Users bundle for 150,000 users after deploying ZIA last year. With this upgrade, this customer is significantly reducing time to open new branches by 50% and eliminating the need for firewalls and MPLS network services. We are now a strategic partner to them as they continue to expand their footprint and transform into a cloud-centric organization. This customer said it is the first time they have seen a security vendor that understands their business needs and aligns its solution to address them.

With this latest purchase, this customer's ARR surpassed $10 million. This is also an example of the geographic diversity of our business outside the U.S. Today, we serve eight out of the 10 largest financial services and diversified insurance companies in the world outside of China. Over the past few quarters, I observed that analysts and investors often equate ZPA with VPN replacement.

This is simply not true. ZPA replaces the entire inbound DMZ, and ZPA is often purchased for all employees. In fact, over half of our ZPA customers have purchased ZPA services for all employees, hence delivering zero trust, whether they work in the office or at home. In Q3, ZPA was an area of strong growth, and we saw large new logo deals that landed with ZPA.

Let me highlight two such deals. A Fortune 100 logistics company made a four-year multimillion-dollar ACV purchase of ZPA and ZDX for 100,000 users. ZPA provides zero-trust application access architecture for their employees, partners, and suppliers as it consolidates multiple point products, including multiple VPNs, load balancers, VDIs, and dedicated private network services. As a result, ZPA is expected to generate a 300% ROI for this customer.

In another ZPA land deal, a Global 300 tech manufacturing company made a three-year seven-figure ACV commitment for ZPA and ZDX for all 30,000 employees. Cybersecurity was a top priority as their IP in software development and manufacturing was being actively targeted by nation-state actors and hackers. Another aspect of our market not well understood by investors is that scale and performance are paramount considerations to customers in the real world. When you are providing in-line inspection, you cannot have a trade-off between performance and security.

Given our large opportunity and our success in the market, it is not surprising to see a number of vendors claiming that they have the same capabilities as we do. They built their products using something known as service function chaining in order to reduce their time to market. The reality is service chaining for in-line traffic inspection using microservices results in poor performance. They are effectively trying to scale low performance.

Our unique architecture with our patented single scan, multiaction technology enables us to deliver comprehensive security at high performance and scale. We secured over 40 million users from some of the largest global brands, and we surpassed 300 billion transactions daily. We are the largest in-line security cloud, and no one comes close to us. Customers cannot afford to risk their mission-critical operations with immature offerings from unproven vendors.

Let me highlight a deal which showcases the scale of our platform. In a large SSE win, a Global 30 healthcare insurance company purchased ZPA and ZDX for 450,000 users and ZIA for 430,000 users. Their incumbent CASB provider could not scale to even 5% of the employees when T&S inspection was turned on. At this customer, we are consolidating dozens of point products from a handful of vendors, including DLP, CASB, web proxies, firewalls, and VPNs.

Our integration with Microsoft E5 suite across ZIA, ZPA, and ZDX was also an important decision factor for them. In addition, the customer will use the Zscaler to rapidly integrate new acquisitions in weeks rather than months that are required by legacy network security architecture. Next, let me highlight a deal that was led by data protection. In our largest win in the transportation vertical, a Global 50 company purchased the ZIA Transformation Bundle plus ZDX and advanced Data Protection suite for 165,000 users.

The Zscaler was chosen over carefully vendor because of our best-in-class capabilities in DLP, CASB, browser isolation, SSPM, and SaaS supply chain security. And of course, our proven cloud scale and resilience was a big factor. This deal started with Data Protection and quickly expanded to include web proxy, firewall, and Sandbox and to implement direct-to-cloud architecture across their 6,500 locations. We see more customers buying our Data Protection, along with ZIA, and replacing their existing CASB point products.

As these deals show, customers are embracing our expanded platform, including our two emerging product pillars: ZDX for digital user experience and Zscaler for Workloads. These emerging products are on track to meet our full year target of high-teens percentage of new business. This quarter, we had an upsell deal with a Global 200 bank headquartered in APJ that purchased Zscaler for Workloads for 70,000 workloads in a multicloud environment. As an existing ZIA customer, it was easy and seamless for them to roll out workload protection, which increased their annual spend with us by 35%.

We are also starting to close larger deals with our federal government customers as the zero-trust deployments move beyond the initial land deals. A cabinet-level agency purchased ZIA and ZPA for 110,000 users to cover all of its sub-agencies. After a thorough evaluation, they're standardizing on Zscaler to consolidate multiple point products across the agency and to comply with the president's executive order, which mandates federal agencies to adopt zero-trust principles. Our highly scalable and reliable platform and our highest FedRAMP authorizations for both ZIA and ZPA have been key differentiators in this win.

Having landed 12 of the 15 cabinet-level agencies, we have plenty of opportunity to expand further with these very large organizations. To take our customer-centric innovation to the next level, we welcomed Syam Nair as our new CTO, who will lead our R&D teams. Syam has extensive experience in leading and scaling engineering and product development teams that accelerated innovation cycles at Salesforce and Microsoft. He was a driving force in scaling the AI-powered customer engagement platform at Salesforce, which is critical to the next phase of our AI journey.

Let me highlight a few examples of how we are leveraging AI-ML to deliver better cyber protection today. Our first acquisition in 2018 was an AI-ML company. We leveraged the technology together with Zscaler data to deliver far better detection for zero-day attacks. This resulted in reducing the number of files being sent to our sandboxing engine by 80%, reducing time to detection and improving user experience.

ZDX, our digital experience service, was launched three years ago. It was built from the ground up to leverage AI-ML to not just show where performance is degraded, but what caused the issue. The data protection advancements we launched in October 2022 leveraged AI-ML to classify unstructured documents for policy enforcement. And after the launch of ChatGPT, Zscaler delivered policy-based access controls to ensure that customers can use AI applications safely.

If the employees submit sensitive data to ChatGPT-like applications, our DLP technology detects it and blocks it. While plenty of AI apps like ChatGPT, GPT-4, Bard, and Bedrock use public data, AI-powered cybersecurity for enterprises requires their own private data. Based on a proxy architecture, Zscaler Zero Trust Exchange is like a private switchboard for all communication for users, workloads, and devices that captures all communication logs. A whopping 300 billion logs per day.

These are not DNS logs that have little information beyond the domain. These are not firewall logs that cannot often see SSL traffic. These are complete logs that have structured and unstructured data, including the full URL, providing trillions of signals per day. Zscaler has AI experts and data scientists and the most valuable anonymized private data to customize and effectively train LLM models for the security domain.

Imagine a world where our customers will know that they're about to be breached before they are breached so they can proactively prevent the attack. Using AI, I believe Zscaler has the opportunity to predict most of today's ransomware and other sophisticated attacks on our customers. We plan to launch a number of innovations, including many for AI-ML at Zenith Live, our annual cloud summit, in mid-June in Las Vegas. I invite you to join us.

In closing, we believe that we are still in the early stages of a significant market opportunity to disrupt 30 years of traditional network security and capture a large share of our $72 billion addressable market. Our Zero Trust Exchange is built on a unique architecture that securely connects users, devices, and applications using business policies, regardless of their location. We believe our 10-plus-year track record of running a massive in-line cloud that has to be highly reliable and available makes Zscaler the go-to platform for vendor consolidation, cost savings, increased user productivity, and better cyber protection. We remain focused on creating shareholder value by driving customer-centric innovation, new business growth, and increased profitability.

Now, I like to turn over the call to Remo for our financial results.

Remo Canessa -- Chief Financial Officer

Thank you, Jay. Revenue in Q3 was $419 million, up 46% year over year and up 8% sequentially. ZPA product revenue was approximately 20% of total revenue, growing 66% year over year. From a geographic perspective, Americas represented 54% of revenue, EMEA was 31%, and APJ was 15%.

Our total calculated billings in Q3 grew 40% year over year to $482 million. Until we get more certainty around the macro environment, we believe looking at total billings on a sequential basis can be a relevant measure of our billings performance in the near term. On a sequential basis, billings declined 2% quarter over quarter, which was better than our normal seasonality. Our calculated current billings grew 44% year over year.

Our remaining performance obligations, or RPO, grew 36% from a year ago to $3.023 billion. The current RPO is approximately 50% of the total RPO. Our dollar-based net retention rate was once again above 125%. While good for our business, our increased success selling bigger bundles, selling multiple pillars from the start, and faster upsells within a year can reduce our dollar-based net retention rate in the future.

This is not a metric we try to optimize quarter to quarter, which could lead to variability on a quarterly basis. At the end of Q3, we had 400 customers with greater than $1 million in ARR, up 39% from a year ago. The continued strength of this metric speaks to the strategic role we play in our customers' digital transformation initiatives. We also ended the quarter with 2,432 customers with greater than $100,000 in ARR.

Turning to the rest of our Q3 financial performance. Total gross margin of 80.2% compares to 80.4% in the prior quarter and 80.6% in the year-ago quarter. Higher public cloud usage for emerging products drove the year-over-year change in gross margins. Our total operating expenses increased 3% sequentially and 33% year over year to $272 million, primarily due to higher compensation expenses.

Operating margin of 15.3% increased approximately 600 basis points year over year. Following our optimization efforts in Q2, we're seeing higher efficiency in supporting roles across the departments. Our free cash flow margin was 18%. We continue to expect our data center capex to be around the high single-digit percentage of revenue for the full year.

We ended the quarter with over $1.97 billion in cash, cash equivalents, and short-term investments. Next, let me share some observations about the macro environment and our framework for guidance. From our perspective, the global macro environment remains uncertain and customers continue to scrutinize large deals. We're seeing deals getting larger as customers are trying to consolidate more and accelerate their security transformation around our Zero Trust Exchange.

Customers are expanding their commitments with us, from a targeted use case to a much broader platform-centric approach. While good for our business, larger deals take longer to close as customers introduce more checks and reviews. In addition, in select instances, we enabled new strategic customers to ramp into larger subscription commitments. Typically, these ramp deals reduce our first-year billings but will grow into a higher annual run rate level in the second year.

We are entering Q4 with a record pipeline, and our customer engagements remain strong. However, predicting close rates in any 90-day period has become more challenging in this environment. Our guidance assumes that new business will take longer to close over the remainder of the fiscal year in view of the macro. As a result, we are assuming a slightly lower close rate in Q4 compared to Q3.

We will continue to balance growth and profitability. In our outlook for Q4, we intend to deliver operating margin expansion of more than 400 basis points year over year. With that in mind, let me provide our guidance for Q4 and fiscal '23. As a reminder, these numbers are all non-GAAP.

For the fourth quarter of fiscal 2023, we expect revenue in the range of $429 million to $431 million, reflecting a year-over-year growth of 35% to 36%, gross margins of approximately 80%. I would like to remind investors that a number of our emerging products, including ZDX and Zscaler for Workloads, will initially have lower gross margins than our core products. We are currently managing the emerging products for time to market and growth, not optimizing them for gross margins. In addition, we will continue to invest in our cloud infrastructure as we scale with the growing demand.

Operating profit in the range of $69 million to $70 million. Net other income of $13 million. Income taxes of $6 million. Earnings per share of approximately $0.49 assuming 157 million fully diluted shares.

Please note that starting in fiscal 2023, we adopted the new accounting standard, which requires the use of the if-converted method for calculating EPS. To account for our convertible notes, you will need to add back $360,000 in quarterly interest expense. For the full year fiscal 2023, we expect revenue in the range of $1.591 billion to $1.593 billion, or a year-over-year growth of approximately 46%; calculated billings in the range of $1.974 billion to $1.978 billion, or a year-over-year growth of 33% to 34%; operating profit in the range of $224 million to $225 million. Our guidance reflects approximately 400 basis points of operating margin improvement compared to last year.

Income taxes of $21 million. Earnings per share in the range of $1.63 to $1.64 assuming approximately 156 million fully diluted shares. As noted earlier, to account for our convertible notes in EPS, you will need to add back $1.4 million in annual interest expense. We remain confident in our ability to capture our large market opportunity while increasing profitability.

We'll balance growth and profitability based on how our business is growing. The recurring nature of our business model gives us good visibility on top-line revenue and allows us to adapt quickly to changes in market conditions to deliver on our operating profit and margin goals. With a large market opportunity and customers increasingly adopting the broader platform, we'll continue to make disciplined investments to position us for long-term growth. Operator, you may now open the call for questions.

Questions & Answers:

Operator

Certainly. [Operator instructions] Our first question comes from the line of Brad Zelnick from Deutsche Bank. Your question, please.

Brad Zelnick -- Deutsche Bank -- Analyst

Oh, excellent. Thank you so much, guys, for taking the question and congrats on a strong Q3, especially in light of all the craziness going on in this world. Jay, I wanted to ask you about the U.S. federal opportunity.

It really seems like you've got a number of good things happening there. You're now in 12 of 15 cabinet-level agencies. Can you double-click on the opportunity and pipeline ahead and maybe talk just more about your strategy in the public sector more generally, not just fed, but SLED, and maybe international government as well? Thank you.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you, Brad. As we have been saying for the last several years, we made early investments in federal certification, FedRAMP accounts from the highest level of certifications. In fact, we used the same certification to get what's known as StateRAMP certification that states require. So, we have a very strong presence in a number of states at statewide level.

We've done well there. On the federal front, as we said, we got early lands and got 12 of 15 agencies. But now, they're beginning to do full rollout. And that's what we are beginning to see.

And it's being also helped by White House guidelines, zero-trust implementation. And of course, certifications are helping. We created the public sector vertical some time ago that covers U.S. federal, as well as the SLED part of it.

So, very happy to see the performance of both. We have a strong pipeline for federal sector -- sorry, for public sector for Q4, and we feel good about it. It was natural for us to expand beyond U.S. And what we've done is looked at the West-friendly nations and NATO-friendly nations who depend upon FedRAMP certifications for protecting their federal governments.

And we have a pretty good degree of engagement with those countries, and we expect to share more success with you in next year and beyond.

Brad Zelnick -- Deutsche Bank -- Analyst

Excellent, Jay. Thank you so much for the color.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Matt Hedberg from RBC. Your question, please.

Matt Hedberg -- RBC Capital Markets -- Analyst

Great. Thanks for taking my questions, guys, and congrats on the strong results. Jay, for you, you spent some time talking about generative AI and the ability to monetize it with large data sets. I'm just curious, how do you think about a couple of years from now? Are we going to be able to see that generative AI was actually a tailwind to growth? And perhaps, could there be additional pricing, perhaps a consumption element that could support LLMs' expanded usage in the future?

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Yes, Matt. All of the above. First of all, AI is being kind of used in some of the current products to do better threat protection, better data protection, and the like. That's number one.

Number two, as AI-ML gets picked up, there will be bigger cyber risks. You know, it's a race with bad guys. They'll be able to do some of the more sophisticated attacks a lot more easily than they can do today. That means companies like Zscaler will need to step up to provide protection against such threats and data protection required.

So, to do good stuff with AI-ML, you need three things: good data scientists, you need large language models, and you need high-quality large volumes of data. While many companies can hire data scientists and large language models are becoming open source and will probably be available more easily, the data will become the new IP, the new barrier to entry. Zscaler, with 300 billion logs per day and trillions of signals, we have probably the most precious private data, and that we anonymize and feed it to large language models to give us an advantage that, I believe, other competitors would not have. Now, these things, while they enhance the functionality, but I expect us to have new SKUs, new products that'll give us plenty of upsell opportunity.

So, I expect AI-ML to expand our TAM.

Matt Hedberg -- RBC Capital Markets -- Analyst

Thanks a lot, Jay.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Andrew Nowinski from Wells Fargo. Your question, please.

Andy Nowinski -- Wells Fargo Securities -- Analyst

Great. Thank you and congrats on another amazing quarter. I wanted to ask about, I guess -- I mean, a number of questions. But I guess I'll go with the one question on the RAMP deals.

It's something you started talking about at the start of the year. And it seems, if I'm understanding this correctly, that, right now, what we're seeing is the headwind piece of those RAMP deals. And so, you're not getting any benefit really from those. And I guess when they'll start to anniversary after year one, that's when you start to see a tailwind from the RAMP deals when those customers move to more of a full price for their subscription.

If you could just walk us through sort of the timing of when you're seeing that shift from headwind to tailwind from these RAMP deals? Thanks.

Remo Canessa -- Chief Financial Officer

Yeah. I mean, it's a great question, Andy. I'll take it. So, you may take a look at RAMP deals in Q3 of last year and Q3 of this year, you know, the percentage amounts are the same.

So, there's really no headwind or tailwind related to the RAMP deals. RAMP deals started coming in, you know, a few years ago. And now, you know, that's basically pretty much the same on a year-over-year basis. I do expect RAMP deals to go forward, you know, as we go forward.

If you take a look at basically, you know, the duration, you know, the billings duration, you know, our growth rate was 44% short term. You know, that basically was related to duration. The duration that we had in Q3 of last year was at the high end of our 10- to 14-month range. And this year, the duration basically was slightly above the midpoint.

So, RAMPs did not create basically the positive impact to our billing -- short-term billings. It was really duration.

Andy Nowinski -- Wells Fargo Securities -- Analyst

Got it. Thanks, Remo. Thanks, guys.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Joel Fishbein from Truist Securities. Your question, please.

Joel Fishbein -- Truist Securities -- Analyst

Hi. Thanks for taking the question. And again, congrats on the margin outperformance here and expense discipline. So, I guess a question for Remo, and I know you addressed it a little bit on the call, but I'd love to take a little bit step further about the methodology considered in making sure that you're not sacrificing growth as you continue to expand margins at this pretty impressive level.

It's got to be a balancing act, and I know you have some levers there that you're pulling, but it looks like it's got to be pretty difficult. So, I'd love to just understand that or peel the onion back on that so.

Remo Canessa -- Chief Financial Officer

Yeah. You know, from our perspective, you know, when you take a look at the market size that we talked about at our Analysts Day a few years ago, it's a $72 billion market for our addressable market. It's much bigger than that. You take a look at sales, we're in the 1.5 billion or so basically revenue.

So, the penetration into this market, our ability to upsell also is 6x. That still remains. You know, we will balance, you know, profitability and top-line growth. Our focus is still top-line growth.

But if you take a look at -- you know, as you called out, the margin expansion, 600 basis points, you know, margin expansion in Q3; 400 basis points margin expansion, you know, for the full year, you know, that's outstanding. But that's the model that we talked about. You know, when your top line, you know, slows down, you're going to get that natural leverage. I want to make sure that our investors, you know, recognize, we feel that we are in a great position to move forward.

We're going to continue to invest, and we're going to, you know, balance, you know, basically top-line growth and operating profitability. Having said that, to give you more clarity related to fiscal '24, you know, the current Street consensus is about 15.5% operating profitability. You know, I think a good place for the Street to be, you know, fiscal '24, just to give you kind of a framework, you know, is in that 15.5% to 16% range. I do believe that gives us plenty of room to invest and really to continue to capture this market.

Joel Fishbein -- Truist Securities -- Analyst

Great. Thank you so much.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Saket Kalia from Barclays. Your question, please.

Saket Kalia -- Barclays -- Analyst

OK. Hey guys. Thanks for taking my question here. Jay, maybe this question is for you.

First of all, the numbers speak for themselves. I wondered if you could just address the competitive backdrop a little bit. Certainly, it doesn't appear in the numbers again, but I know that there were some noise out there with competitive quadrant stuff. I wanted to see if you just had any views on that, and more importantly, whether you've seen that maybe make its way into customer conversations at all.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you, Saket. So, regarding the Magic Quadrant, you know, I believe that customers are the real judge, and I'll give you three points why I believe they view Zscaler as a real leader. Number one, you -- as you said, they're voting us by spending on Zscaler, right? In fact, in Gartner's Peer Insights ratings, which is a customer survey done by Gartner, Zscaler is the only MQ leader who is in No. 1 in eight Gartner's categories.

So, they have eight categories. We are No. 1 in eight of them. That's wonderful.

And also, you know, we have expanded our vision far beyond just SSE for users. We do SSE for workloads, IoT, or ZB2B, and all the like. There have been a number of conversations that I had with customers -- as you know, I talked to hundreds and hundreds of customers. I can tell you, more than a dozen at least have asked me, hey, what is this MQ? How could this show up? I said, I don't know.

You are the judge. So, is it impacting our performance? No. Is it impacting our engagement? No. I think we're focused on building, delivering, keeping our customers happy.

Our NPS score sits north of 80. So, very happy with what we're doing, and we'll keep on executing.

Saket Kalia -- Barclays -- Analyst

Very helpful. Thanks, guys.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Sterling Auty from MoffettNathanson. Your question, please.

Sterling Auty -- MoffettNathanson -- Analyst

Yeah. Thanks. Hi, guys. Jay, you talked about the success in kind of the go-to-market function and customer success teams.

I wonder if you could just highlight for us or remind us the timing of when you did your big hires, where you are in the capacity of your sales force, and what the hiring might look like going forward to extend the durability of the growth that you're seeing currently.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Yeah. I had a broad go-to-market level. Our goal is to make sure we keep on hiring at the right pace in broad go-to-market team, as well as some of the takeoff teams that help us push forward some of the newer products. We did moderate some of the hiring as we saw the market come down quite a -- in the past couple of quarters.

Remo, do you want to give some more color to it?

Remo Canessa -- Chief Financial Officer

Yeah. From a capacity perspective, we're in good shape. You know, when we did the -- we reduced our workforce at the end of Q2, one of the things we talked about is we're still going to prioritize basically quota-carrying heads and R&D. That's still the case.

We are in a hiring mode. We'll continue to hire. You know, one of the things I mentioned, Sterling, is that, you know, not lost on us is that this is a huge market opportunity. We're going to invest, you know, continue to invest in hiring in R&D and throughout the company for that matter.

But, you know, really, what we did in Q2 was to better position ourselves to make the proper hires going forward, and that's what we're doing.

Sterling Auty -- MoffettNathanson -- Analyst

Makes sense. Thank you.

Operator

Thank you. One moment for our next question. And our next question comes from the line of John DiFucci from Guggenheim Securities. Your question, please.

John DiFucci -- Guggenheim Partners -- Analyst

Thank you. So, this quarter was, as people have said and you said, you pre-announced it, it was really a strong quarter. And looking at the numbers, it looks like real clean results. It's nice to see that.

But it's also odd to see that in this environment, and you guys have talked about, you know, things are -- the difficult environment has continued. So, I'm just trying to figure out like what changed for you guys this quarter relative to the past two quarters. Not that they were -- you know, they were -- you struggled more in the last two quarters, at least from our measures of new ACV signings. And this quarter was really strong.

I mean, was it -- I mean, you did talk about larger deals. Were there any like sort of anomalous large deals out there or is it just really just you guys buckled up and are executing better? What happened? What changed?

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

So, this quarter was strong across all areas. Americas and APJ were particularly strong on a year-over-year basis. And last quarter, we said some of the large new logo deals in Americas were taking longer to close. We also said those deals were not lost but just delayed, and we did close a good number of those deals.

From vertical perspective, it was very well diversified. Strong verticals were federal, financial services, healthcare, and transportation. Our large and major segment did well. We highlighted a number of 100,000-plus user deals.

So, the fundamentals of business are very strong. Customers are not going to delay cyber as a priority. It is a priority. Cost saving is a big priority as well.

And we do well in both areas, cyber, as well as cost savings. I can tell you, when it comes to cyber companies, we are probably the only company that delivers significant ROI because we are actually eliminating a bunch of point products. So, it is fitting well. It's a tougher market, there's more scrutiny, but our foundation is strong and our pipeline is strong.

Remo.

Remo Canessa -- Chief Financial Officer

Yeah. I'll go with Jay mentioned. Pipeline, maturity of pipeline, execution, strong across the board. Americas was strong.

APJ was strong. You know, federal was strong. You know, again, I think the key thing, it was really good execution on our sales organization on a worldwide basis. Related to large deals, mega deal, you know, we talked about mega deals when we first went public, it being, you know, deals of greater than $10 million.

You know, we've upped that now. Mega deals are, you know, deals of greater than $20 million. There were no deals of greater than 10 -- no deals greater than $20 million. We did have one deal of $10 million in the quarter.

John DiFucci -- Guggenheim Partners -- Analyst

Thank you very much, guys.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Roger Boyd from UBS. Your question, please.

Roger Boyd -- UBS -- Analyst

Great. Thanks for taking the question. Again, congrats on the very strong results. As we think about fiscal 4Q and fiscal '24, it sounds like you're broadly being pretty conservative around close rates.

But, Jay, you talked a little bit about some of the efforts you've made internally to get in front of budget scrutiny with some of these CFO-ready business cases. I guess I'm wondering relative to a few quarters ago, are you feeling incrementally better about controlling your own destiny, your ability to influence sales cycles? And just curious how material these internal efforts have been in practice. Thanks.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Yes. So, this tougher market has made us a lot more sophisticated than we were before. For example, for new logos, what have we done? We are now doing early engagement. Our sales team is getting good in engaging at C level early on in the cycle.

Number two, we had to refine our business value case, CFO-ready case studies a lot more. No longer annual numbers are good enough. Now, they want to go in the quarterly level to see when the ROI can be done. Our engagement in cloud marketplaces have gotten much better because we are leveraging the annual commit that's already spent -- annual spend that's already committed to the hyperscalers.

Now, we had to do RAMP deals more frequently, which is kind of to meet their timing of the budgets and the like. For upsell, we had done a number of things in the past few quarters. We are ensuring that customers are realizing the value more and more. Our customer success team, our TAMs are doing a great job.

And then the product specialist team we put in place for emerging products, that's working well. It's working very closely with our field sales team. So, having a great highly differentiated platform which were built on zero trust as a key platform. We are not a firewall company that's trying to pivot to zero trust.

We're not a CASB company that's pivoting. This is our core business and North Star from day one. And our sales execution is good, and we'll keep on improving it.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Mike Walkley from Canaccord Genuity. Your question, please.

Mike Walkley -- Canaccord Genuity -- Analyst

Great. Thanks. Remo, you talked a little bit about future lumpiness in dollar-based net retention, I guess, given some large deals that you'll grandfather in, but can you share with us kind of that mix you expect through maybe fiscal '24 of new logo sales versus upsells? Is it still around that 60-40 ratio given that six times upsell opportunity?

Remo Canessa -- Chief Financial Officer

Yeah. I mean, net retention rate is something we don't guide to or look at. You know, our mix this year, we're expecting 40-60, you know, new versus upsell. You know, what we look at really is we look at new and upsell as the driver in total.

And what we've talked about before is we believe the best measure for Zscaler is really billings. At 125%, it's outstanding.

Mike Walkley -- Canaccord Genuity -- Analyst

Thank you.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Joshua Tilton from Wolfe Research. Your question, please.

Unknown speaker

Hey, guys. This is Patrick on for Josh. First off, just wanted to congratulate you all on the great results in what's been a tough environment. Clearly, the mixed checks in the quarter were not exactly correct.

So, I was wondering, what do you think is sort of driving that disconnect between the strong numbers put up in the quarter and then the general feedback from the channel we've heard recently?

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

So, I think this is not new. We have said many, many times that we are not a typical security company selling boxes through [Inaudible] We are a transformation player. It's a high-touch sale and working closely with customers and sometimes large SIs, that's how we do business. These channel checks will always be misguided, OK? I mean, that's how I personally look at it.

When you are driving transformation at C level and whatnot, it is different. So, I would say, yeah, let's be more refined in channel checks, OK? Look, our business is strong. Our customer engagements are very strong. Our differentiation is very strong.

Yes, competitors are trying to create fun. They are trying to mislead the market. It's our job to make sure we educate them, we communicate them. But the best results we do is when customers deploy our technology than [Inaudible] We are able to turn on 20,000 users in seven days, and the results are amazing.

And then they say we -- if you really contrast, I've only seen a couple of cases where they say, yeah, we got a competitive solution. This thing is still struggling out there. We are trying to extend our network from our office to the cloud. It's old-school architecture.

So, I do believe that in spite of all that noise and thought that comes from out there, our engagement, our differentiation, the way we are executing in the market, the way we are innovating, and now the new area of AI-ML where we have a unique advantage of better data, better private logs, with structured and unstructured data, we will do better than any of the vendors out there. Maybe a comment on unstructured data. Every vendor has logs. Logs are simply structured data.

Where are you coming from? Where are you going? The most intelligent information that generative AI can use comes from the URL, which could be hundreds of bytes long. And that's where you figure out what all is going on. Most of the firewalls don't have any URLs. They generally sit at the domain-level stuff.

As we do some of this stuff, I believe we'll further increase our lead. And really, that will give us [Inaudible] TAM and further growth that we are striving for.

Unknown speaker

Got it. Thank you.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Adam Borg from Stifel. Your question, please.

Adam Borg -- Stifel Financial Corp. -- Analyst

Awesome. And thanks so much for taking the question. Maybe for Jay, you talked in the script about increasing traction with Zscaler for Users. And I'd love to get a sense, when a new customer comes in, any way to think about the mix of new customers that are taking Zscaler for Users from the start? And how should I think about the overall mix of Zscaler for Users within the installed base? Thanks so much.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Yeah. So, thank you. Zscaler for Users, this bundle was created about a little over a year ago, and we have seen very, very good growth of this combined bundle. And we have some customers who go with just ZIA or ZPA.

We actually had some customers interested and a large customer who actually started with ZPA and ZDX at the same time. But overall, a bigger bundle to eliminate a bunch of point products is the trend we are seeing. And as I had said, even two or three years ago, it's a matter of time when every customer buys ZIA, ZPA, ZDX for every employee. And that trend is happening more and more.

And as we said before, if we do so, our current customers are spending -- their spend with us could go to 5x or 6x kind of stuff. And I think we are tracking well, and we are tracking well for two reasons. One, customers are seeing value. They are realizing value from it.

Number two, we're actually able to remove a bunch of point products and show ROI, and that actually gives them more incentive to buy more from us. Remo.

Remo Canessa -- Chief Financial Officer

Yeah. And customers that have bought ZIA, ZPA, and ZDX is more than 25% of our total customers. So, it's definitely getting traction.

Adam Borg -- Stifel Financial Corp. -- Analyst

Awesome. Thanks again.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Shrenik Kothari from Baird. Your question, please.

Shrenik Kothari -- Robert W. Baird and Company -- Analyst

Hey. Thank you for taking my question and congrats on the strong execution despite the macro. So, for Jay, and, Remo, feel free to chime in. You mentioned on a sequential basis, you saw better-than-normal seasonality.

And of course, you guys touched upon some of your factors. You're starting to close larger deals with federal. You, of course, are seeing benefits from kind of strategic customers ramping into larger commitments. And then, of course, the execution, high-touch engagement is helping to get through finish line, international.

Can you help us unpack some of these drivers in terms of kind of maybe relative impacts on this better-than-normal seasonality? And then have a quick follow-up.

Remo Canessa -- Chief Financial Officer

You know, I think everything you mentioned is 100% correct. You know, I'm a traditionalist. I'll go back to what I feel. I think it's better execution on our sales organization.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Yeah, I mean, all the factors aligned, but we are still in that tougher environment where there's now more scrutiny. And it's doing better execution. But if you got good product offerings that are highly differentiated and there's a need for it because customers do want to save money and better cybersecurity, that's really what's positioning us well.

Remo Canessa -- Chief Financial Officer

Yeah. I mean, you know, just a follow on, you know, customers recognize the ROI. You know, it is significant. The ability to simplify your network is significant also.

Architecture, you know, related to, you know, in-line cloud, you know, multitenant architecture not only for users but workloads and IoT, OT, and B2B, you know, that's a vision basically, you know, Zscaler. The pioneer with all this is Zscaler, the leader if you take a look at, you know, our penetration into the Fortune 500, which is, you know, 40%; and Global 2000, 30%. I mean, CIOs, CXOs, they talk to each other. You know, we do -- I mean, customer advisory board meetings, Jay, we do one like, on average, like one a week I believe.

You know, I mean, companies typically do those once a year. We do it once a week. And so, what is the strength? You know, it's all the things I mentioned and your comments. It's pretty much across the board.

All those things.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

One point I'll make, which hasn't come across so far in this discussion, what we do being the switchboard is probably the most critical -- mission-critical business service, and it must work. And so, customers basically want to go with a proven vendor who knows how to operate and run and manage such a massive cloud. It is becoming a differentiator. When a new vendor comes and say, aha, I got that cloud, too.

And then the customer is saying, what's your track record? What's your experience that's helping us? One other area that's helping us with some of the new private companies and all customers are kind of wary of trying to go with someone who may be losing a lot of cash and who may not be around tomorrow. And that's helping us as well because customers are looking at vendors who will be around and who will be the leaders in this area.

Operator

Thank you. One moment for our next question. And our next question comes from the line of Peter Levine from Evercore. Your question, please.

Peter Levine -- Evercore ISI -- Analyst

Great. Thanks, guys, for squeezing me in. We've seen one of your competitors come out this quarter with a very specific campaign kind of targeting you guys or somewhat kind of reverse engineering your tech. So, Jay, is there any validity behind kind of what they're building? Explain to us the complexity to lift and shift customers overnight and if you're even seeing any attrition on that front.

And then just one quick one from Remo. Thanks for the color on the fiscal '24 margins, but to the extent you can, any color or high-level discussions you can share with us now on how you're thinking about the growth outlook and to what extent is macro playing into that thought process. Thank you, guys.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

So, you know, every vendor has a core competency, and they do very well in that competency. A firewall company will be a great firewall company. A CASB company will be a great CASB company. And someone who does CDN and DNS should be a good CDN and DNS company.

You can try to pivot, but that competency you build and create over years and years is very hard. If I came and told you that in one year I'm going to build the best firewall, well, it'll be hard for me to say that because I can't say -- make statements like that, OK? But when companies try to pivot, it takes a while, and especially pivoting do something that's in-line, multitenancy, figuring out all the cyber threats without slowing things down is hard. It's an architectural change. We believe the intellectual property, the IP needed to do so is very hard.

That's number one. Number two, the amount of traffic one has to handle to really deliver the service. Your gross margins are likely to be selling some of the 50s and 60s and not like 80% where we sit at. It's because we purpose-built our stuff.

So, it is not unnatural for us to see the competition trying to come and say, maybe I can get into this space. I have many times described Zscaler being the in-line business, almost like an ERP application. You know, there can be thousands of SaaS applications out there. They are point product.

They can be built. How many ERP vendors do you see out there doing SaaS? Very few. It's hard. Sitting in line is hard.

We think that gives us a big, big barrier to entry for others to compete. And we are not sitting, we are expanding our platform at a larger pace. So, do I kind of try to focus too much on some of the comparative campaigns that are kind of trying to spread lies on? I don't. We focus on innovation.

We focus on our customers. And we're doing well. And top-line growth, we'll talk about that on the next call for our year-end.

Peter Levine -- Evercore ISI -- Analyst

Thank you, guys.

Operator

Thank you. One moment for our next question. And our next question -- our final question for today comes from the line of Joseph Gallo from Jefferies. Your question, please.

Joe Gallo -- Jefferies -- Analyst

Hey, guys. Really appreciate the question and great job on the billings performance in a tough environment. I appreciate the commentary regarding the year-over-year mix of RAMP deals in F3Q. Is F4Q the same expected year-over-year mix based on the pipe you guys are seeing today? And then just any other colors or commentary on how to think about F4Q billings, which appears seasonally conservative? I know you mentioned lower close rates, but is there anything else, timing, renewals, or anything else we should think about? Thanks, guys.

Remo Canessa -- Chief Financial Officer

Yeah. RAMPs, I would consider the same, you know, quarter over quarter. Just remember, you know, it is a tough compare. Last year, our billings growth was approximately basically -- I think it was close to 60% billings growth in Q4.

Also, we had a strong Q3. So, basically, it's a tough compare.

Operator

Thank you.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

All right.

Operator

This does conclude the question-and-answer session. I'd now like to hand the program back to CEO, Jay Chaudhry, for any further remarks.

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Thank you for your interest in Zscaler. I hope to see you at Zenith Live in Vegas in a couple of weeks. I would also like to thank our shareholders, our customers, and our partners. Talk to you next quarter.

Remo Canessa -- Chief Financial Officer

Great. Thank you.

Operator

[Operator signoff]

Duration: 0 minutes

Call participants:

Bill Choi -- Senior Vice President, Investor Relations and Strategic Finance

Jay Chaudhry -- Founder, Chairman, and Chief Executive Officer

Remo Canessa -- Chief Financial Officer

Brad Zelnick -- Deutsche Bank -- Analyst

Matt Hedberg -- RBC Capital Markets -- Analyst

Andy Nowinski -- Wells Fargo Securities -- Analyst

Joel Fishbein -- Truist Securities -- Analyst

Saket Kalia -- Barclays -- Analyst

Sterling Auty -- MoffettNathanson -- Analyst

John DiFucci -- Guggenheim Partners -- Analyst

Roger Boyd -- UBS -- Analyst

Mike Walkley -- Canaccord Genuity -- Analyst

Unknown speaker

Adam Borg -- Stifel Financial Corp. -- Analyst

Shrenik Kothari -- Robert W. Baird and Company -- Analyst

Peter Levine -- Evercore ISI -- Analyst

Joe Gallo -- Jefferies -- Analyst

More ZS analysis

All earnings call transcripts