KNBE (2021 - Q1)

Ladies and gentlemen, thank you for standing by and welcome to the KnowBe4 First Quarter 2021 Results Conference Call. Please be advised that today's conference is being recorded. All lines have been placed on mute to prevent any background noise. After the speaker's remarks, there will be a question-and-answer session. [Operator Instructions] Thank you. Now it is my pleasure to turn the call over to Ken Talanian, KnowBe4 Vice President of Investor Reporting. Ken Tala

As a reminder, our commentary today will include non-GAAP financial measures. Information regarding our non-GAAP financial results, the limitations and reconciliations of our GAAP and non-GAAP results can be found in our earnings release, which was furnished with our Form 8-K today with the SEC may also be found on our Investor Relations website at investors.knowbe4.com. In addition, some of our comments today, including those related to our guidance, may contain forward-looking statements that are subject to risks, uncertainties, and assumptions. Should any of these materialize or should our assumptions prove to be incorrect, actual company results could differ materially from those projected or implied during this call. These risks are described in the final prospectus from our recent IPO and our Form 10-Q that will be filed following this call. These documents can be found on the SEC's website sec.gov and on our Investor Relations website. During today's call, you will hear prepared remarks from our CEO, Stu Sjouwerman; and CFO and Co-President, Krish Venkataraman; Lars Letonoff, our Chief Revenue Officer and Co-President will join our question-and-answer session. And with that, I will turn the call over to Stu.

Thank you, Ken, and thank you all for joining us today. We're pleased to share our results with you this afternoon. We had a record quarter with 40 plus percent annual recurring revenue growth, improving gross margins and strong cash flow. As many of you know, I started KnowBe4 to help organizations manage the ongoing problem of social engineering. We define social engineering as manipulating an employee in an organization to do something against the benefits of that organization that could be fishing or replying to a CEO fraud attack, or sending an attachment with W2 information to cyber criminals. We're the only public company dedicated to securing the human layer. The emphasis in cybersecurity has traditionally been on legacy controls. However, the exponential growth in cyber attacks and our relative success proves that we cannot solely rely on security infrastructure. Ignoring the human element of this equation, leaves organizations of all sizes vulnerable, which is why we are dedicated to helping organizations transform their employees into a successful last line of defense against cyber attacks. Recent events, such as the coronavirus pandemic and the mass migration to a work from home environment has only made the problem worse, further evidenced by recent high profile breaches. The ransomware attack on colonial pipeline is the most recent example of an attack that made it into mainstream media. Although the root of the attack is still under investigation, most ransomware attacks begin with social engineering. This is a problem that is not going away. Just last week, Verizon released their 2021 data breach investigation report. It is no surprise that social engineering remains a top threat for the last five years running. The human layer needs to be strengthened every day. This is why we are focused on building a strong human name point. I will start by summarizing my key observations. We continue to see strong momentum in our new business and continued strong retention within our existing customer base. Customers in both the SMB and enterprise see our platform as a critical element of their security stack. Prospects have strong focus on enhancing their security and the ability to manage the ongoing problem of social engineering. We have established a market leading position in the human centric cybersecurity space, which is further enhanced by our focus on continuing to innovate, to meet the needs of our customers against an increasingly dangerous threat landscape. Our new customer growth has been robust as we capitalize on our mostly Greenfield opportunity. In addition, our current customers are investing in our KMSAT platform and adopting our additional PhishER and KCM products at record levels. First quarter results exceeded our expectations across the board with continued growth and strong free cash flow generation. Our inside sales motion continues to win both new SMB and enterprise customers across all industry verticals resulting $222 million in ARR ahead of our expectations and up almost 41% year-over-year. Our international revenue growth reached 88% year-over-year, which is our highest international quarter ever. Domestically, we also continue to see strong momentum with over 30% growth. Penetrating international markets remains one of the key pillars of our growth strategy. As you may recall, we made three tuck-in acquisitions during 2019 that have really started to contribute meaningfully to our international expansion. These acquisitions have been a key foundation to our expansion in EMEA. You can expect this to continue the strategy as we move into other geographies, such as APAC. We also continue to be opportunistic in our domestic M&A strategy. This quarter, we announced the acquisition of MediaPro Holdings for approximately $38 million. A portion was paid in cash and the remaining was paid in shares of our common stock. MediaPro will bring some important technology to the KnowBe4 platform to accelerate our expansion in the compliance markets. We are particularly excited about their advanced courseware editor. This terminology will serve as the foundation for an enhanced courseware editor that we intend to incorporate into the KnowBe4 platform. MediaPro comes with an exciting library of compliance content that we intend to incorporate into our launch of Compliance Plus, which I will cover in more detail shortly. That said we do not anticipate that this acquisition will be material to our 2021 financial results. Krish will provide more details on the financials. Organizations across all verticals and sizes continue to see value in our free tools and thought leadership webinars, which we utilize to generate leads for our inside sales team to sell KMSAT, PhishER and KCM GRC. Customer growth was strong across both SMB and enterprise. As in previous quarters, we saw new customers by both KMSAT and PhishER together to leverage the immediate risk reduction that PhishER brings to their organization. But we do not report the growth for PhishER and KCM GRC separately, the combined logo growth and revenue growth was triple digits for the quarter. The positive trends with our customer wins continue in Q1. Total number of customers grew to almost 39,000, including really strong momentum internationally. We saw a number of both Greenfield wins as well as competitive displacements. Greenfield wins continued to show the devalue of security awareness is resonating with customers and our platform stands out from the competition. Our competitive wins are further proof that our platform and customer support ranks well above our competition. Customers are drawn to the wide scope and breadth our platform has to offer. Our platform's ability to record email replies to see how fraud spoof domains, randomized phishing, and leverage real-life logos and data entry landing pages are all big selling points. Our reporting capabilities provide customers with the ability to produce weekly reports and select the best templates to keep up with the actual threats to their database. The combination of our Phish Alert button and to the PhishER product is typically a huge upgrade to a customer's ability to respond to threats. We continue to see success in our enterprise segment, which had several big wins. We displaced a competitor at one of the world's largest defense contractors with 200,000 seats that wanted to efficiently build out a global security awareness program. We had a 68,000 seat competitive win at an automotive manufacturing company. They recognized the strength of our platform as well being ahead of the competition. We had an 18,000 seat competitive displacement at a large Japanese conglomerate that favored our global capabilities. In the government segment, we had a Greenfield sale with 30,000 seats to a large U.S. city transportation organization. We also have seen good traction in the education sector with a 38,000 seat win, a large U.S. public school district. Social engineering remains the top vulnerability that organizations face because hacking humans remains the easiest way to access critical information. These threats are far reaching an impact everything from our global healthcare system to our schools. Regular training sessions coupled with frequent simulated social engineering attacks remains the most effective protection. Over the last decade, we have helped our customers across every vertical in the U.S. These problems are not specific to the U.S. and we're focused on selling our innovative products across the world. We have a vision for the security awareness market that we continue to use to define KnowBe4's product roadmap. This includes both exciting new features and new products. A recent new feature we released is AI-Driven Phishing, which allows our diamond KMSAT customers to automatically choose the best phishing templates for their users. AI-Driven Phishing is part of our larger strategy to drive our platform with artificial intelligence. This helps users learn to defend themselves against attacks that are increasingly going beyond the email threat vector. We also in the process of releasing a new PhishER feature called PhishFlip. PhishFlip will allow admins to flip actual live phishing attacks into defanged look-alike phishing tests. As for new products, we intend to release a new skew called Compliance Plus in a couple of weeks. Compliance Plus leverages the intellectual property from MediaPro as well as new in-house new school training modules to expand our region to the important compliance segment. This is a whole new town for KnowBe4, which shows the power of our platform to reach additional adjacencies. Given that we are one of the only security companies focused on managing the ongoing problem of social engineering, we see significant third-party recognition of our leadership. I would like to point out recent reports from Okta and Microsoft. Okta released its seventh business at work reports where KnowBe4 was recognized as one of the 15 most popular apps ranked by a number of customers. In that same report, we were recognized as a clear leader in people centric security tools. Similarly, Microsoft also released their list of top 15 apps by number of organizations within its Azure ADA ecosystem. KnowBe4 made considerable progress moving from number 12 in 2018 to number five in 2020. We're also very proud that we ranked number three among the top five most popular security apps just below Palo Alto Networks and Zscaler. We believe this third-party recognition provides ample proof of our scale and importance to our customers. Before I turn the call over to Krish, I would like to thank our employees and partners for their dedication, commitment, and customer focus that has brought KnowBe4 to its market leading position today. Our mission is to enable employees to make smarter security decisions. We had a strong close to the first quarter and are excited about the rest of the year. Now I would like Krish to discuss our financial trends.

Thanks, Stu, and good afternoon to everyone. As a quick reminder, unless otherwise noted all numbers except revenue mentioned during my remarks are non-GAAP. Before I discuss the quarter's results, I want to remind everyone of the principles that we used to run the business. Our first pillar of focus is driving long-term growth. We continue to focus our investments on international expansion, enhancing capabilities in our core products, driving channel initiatives both domestically and internationally, and finally investing in our people and its skills development. I will touch on a few of these initiatives. On the international expansion, we continue to focus our investments on hiding key talent in marketing, sales, content, and customer support. We have made several key hires in the U.K., Germany, Australia, and Japan, and laying the foundation of talent to scale across the globe. On the product side, we have a deep pipeline of new products, and the same time enhancing existing products with key feature releases. We work under a modern agile develop and framework to help drive speed of execution. This is evidence by the release of our AI-Driven Phishing feature and planned releases of PhishFlip and Compliance Plus that Stu covered a few moments ago. The other big focus for us is onboarding new channel partners to accelerate international expansion. We have invested in hiding a number of key resources in our channel team and building both marketing and distribution capabilities for our channel partners. On the people side, we continue to hire new employees in all departments and invest in training our existing employees to outperform. This includes key critical new hires in our management here, where other firms under the COVID crisis reduce headcount investments, we have expanded these efforts significantly to keep up with the ongoing demand for our products domestically and internationally. The second pillar is for us is capital efficiency. We are laser focused on maintaining our capital efficiency. We have used little of our investors' capital during a small primary rounds prior to the IPO, and remain just as focused on cash invasion and capital efficiency as a public company. The third pillar we follow is how to drive long-term development. We believe in balancing our organic development with select acquisition. They help expand our capabilities in both existing and new areas, focus on strengthening the human end point. This expansion will help us drive into adjacencies, which in turn helps us expand our tan. We believe that admitting must be done diligently with a high acceptable ROI. In fact, I know before we track every acquisition ROI and don't stop fracking this until be 100% sure that initial acquisition case has invalidated and exceeded. As you heard from Stu, our development teams continue to turn our compelling new products and features to fulfill a long-term roadmap, which is dedicated to the human endpoint. And with that let me actually provide some color on the quarter. Both new and existing customers have witnessed the ongoing problem of social engineering worsen over the last year. We continue to support our customers with our platform reach, which includes integrated capabilities around Security Awareness, Security Orchestration, Automation and Compliance. In addition to our internal efforts, we continue to engage new partners with a healthy level of joint sales engagement. Though be a still early in the channel development process, we have made considerable progress in signing on both domestic and international partners. We will continue to make strong investments in the channel of business to drive future growth, especially in international markets where we are a 100% channel enabled. Throughout the quarter, we saw the strength across most verticals. We did see some likenesses of specific industries like hospitality and airlines that are coming out of the COVID pandemic. In the first quarter, total annual recurring revenue or ARR reached $222 million, up 21% year-over-year. Our ARR growth, which is driven by another strong quarter of new logo additions and continued expansion of cross sell to existing logos. Our total customer count for the quarter grew to almost 39,000, up from close to 32,000 in Q1, 2020. Logo churn and close dollar tension for the quarter were both comparable with historical levels. Now also want to give you some color on the MediaPro, as it relates to our ARR and operating results. As Stu mentioned, the acquisitions thesis was driven by MediaPro’s technology and the ability to expand our tam into the compliance marketplace. The impact on full-year 2021 revenue for MediaPro acquisition is expected to be immaterial. We expect the ARR impact to be approximately $5 million by Q4 2021 based on the historical churn rate of a legacy MediaPro client base. In Q1, total GAAP revenue grew almost 37% year-over-year, reaching $53.5 million, which was well ahead of our expectations. We constantly execute at a high level and remain focused on our pillars of growth. A hallmark of our diversified sales approach has resulted in no concentration of clients or ARR in any industry or vertical. This helps us better macroeconomic shots like the world faced over the last year. No single customer accounted for more than 5% of revenue during the quarter. Geographically, the vast majority of our revenue is derived from North America. At the same time, we believe there is a sizeable addressable market for no before internationally. And we continue to invest both in EMEA and APAC in both no before relationships. Approximately 14% of our revenue now is derived from international markets, representing an 88% increase in international revenues year-over-year. We are still early in our international expansion, which represents a very large and executable Tam. Clearly, our strategy of investment in these markets its sound. Today, these investments have focused on further expansion of our product capabilities, diversified content and globalizing of sales and marketing teams. Since Q1 2020, we added approximately 44 new heads to the number four international team. Over the past two years, we have opened offices in Australia, Japan, Norway, Dubai, and then initial office in the U.K. through acquisition of the Twist and Shout Group. They're completed building our shed for the center in the Netherlands to help us drive long-term support for our clients and our sales teams. We've also accelerated our hiring plan to ensure we had the right resources in place to execute on a international expansion. Now on the product side. We launched PhishER in late December, 2018, and the results have continued to exceed expectations. PhishER is another example of our team's ability to launch new products, cross-sell and increase the overall ARR associated to the initial sale. As a reminder, our go-to-market motion is based on landing large with the customer's full seat count, which maximizes the initial deal size. We have seen a number of customers purchasing both KMSAT and PhishER together for the initial subscription. As a reminder, we don't bundle our products. We prefer to cross-sell the products as this results in premium pricing for additional products versus discounting. As a result, PhishER represents approximately a 45% increase in ARR for SMB, and 35 on enterprise clients versus a standalone KMSAT sale. A multiproduct strategy is seeing considerable traction with a combination of both PhishER and KCM GRC. Year-over-year, PhishER, and KCM GRC combined to have a triple-digit revenue and a triple-digit logo growth. At the same time, we still have a massive opportunity to cross-sell our products to our existing large customer base. As part of our philosophy of running the business, we remain focused on sustaining a high growth rate with strong margins. First quarter non-GAAP gross margins improved to 86.6% from 84.8% a year ago, as we gain efficiency with scale. As a reminder, we continue to scale our international businesses. We expect non-GAAP gross margins in the low-to-mid 80s long-term. Total non-GAAP operating expense for the quarter was approximately $40 million versus $34 million for the same quarter last year, this growth was mostly driven by additional G&A costs related to becoming a public company as well as increases in sales and marketing expenses. Sales and marketing costs were up due to increased headcount in channel, direct sales, and customer service teams to help manage new logos acquired both domestically and internationally. Sales and marketing as a percentage of revenue was lower year-over-year as we scaled the business. G&A costs increased reflect a continued effort to build out a support functions including legal, finance, internal audit and HR, as we prepare to become a public company over the last year. As you can see, we have made considerable investment in our technology platform. We are able to launch a number of new product features such as PhishRIP and PhishFlip, while continue to significant investment in products and content translations. Our investments are also aimed and continue to expand our AI and ML functionality throughout the platform. I intend to provide updates on our new areas of growth realize from these investments during future earning calls. To note, our unit cost of tech and dev is significantly lower than other tech firms in high cost regions. Our location helps us attract, retain and develop our tech and dev teams. Hence it is important to understand that we have, and we'll continue to invest in our product R&D and content teams. Non-GAAP operating income in the first quarter was approximately $5.9 million, and non-GAAP operating margin was approximately 11%, and non-GAAP net income was $1.6 million. Our non-GAAP net income excludes stock compensation expense, amortization of acquired intangibles and acquisition and integration related costs. Turning to cash flow and balance sheet items. We finished March with cash and cash equivalents of approximately $95 million, up about $36 million from Q1 2020, which represents a country focus on maintaining a high level of capital efficiency and use of cash. First quarter free cash flow was approximately $21 million, compared to $10 million a year ago, primary driven by strong tax collection as well as strong sales performance and efficient go-to-market model. To note, these metrics do not include the impact of IPO transaction, which closed in mid-April. From our results, you can see that we have a highly resilient and caffeinating SaaS model and strong balance sheet supporting a balance of top line growth and expanding profitability. We are continuing to expand our resourceful and maintaining sustainable growth as we leave this new category inside the security. And now on to guidance, we entered the second quarter of its strong customer and business momentum. This momentum is seen across all our segments and international markets. For the second quarter of 2021, we expect the total revenue in the range of $55.5 million to $56.5 million or approximately 34% to 36% year-over-year growth. For the full-year 2021, we expect total revenue in the range of $229 million to $231 million, but approximately 31% to 32% year-over-year growth. We expect free cash flow margin in the range of 12% to 15%. As a reminder, this seasonality in our free cash flow, which can cause results to vary quarter-to-quarter. For modeling purposes, you can assume a fully diluted weighted average share account of approximately $183 million for Q2. As we look forward to the rest of the year, we are seeing continued growth and momentum in the business, and we are laser focused on maintaining our market leadership in the most important layer insecurity dedicated to the human endpoint. With that, we'll like to open the call to Q&A.

[Operator Instructions] Thank you. Your first question comes from the line of Brian Essex with Goldman Sachs.

Great, thank you. Good afternoon and thank you for taking the question and congratulations on emerging as a public company. Maybe, Stu, if I could start or maybe Krish if you want to take this one as you focused on leveraging your platform strategy to penetrate your markets, we saw a nice - it was nice to see the acceleration, not only in logo ads, but ARR per logo. How much of that was better penetration into larger enterprise versus better attach rate with the percentages of accounts that have multiple products?

That one for Krish?

Yes, please, Krish.

Okay. Hi, Brian. Thanks for the question and thanks for your comment on becoming maybe as a public company. So I think the answer is both. What we have seen and this trend is not just Q1. This trend is we're seeing this across multiple quarters as we're seeing further expansion into, I would say, all the levels within the enterprise market and also in the megas. One thing to note that the mega expansion is not just a Q1 phenomenon, it's been happening month after month over the last almost year, year and a half. And your second point the cross product penetration has been extremely strong this quarter and last quarter. In fact, I talk about the Triple Crown, where we are seeing both PhishER and KCM GRC seeing considerable progress in terms of expansion. As I mentioned in my note also we almost saw a triple digit growth in logo as well as revenue. And if you look at the overall penetration of cross-sell both for PhishER and KCM combined, we almost doubled from Q1 of last year and remember that's on a large and substantially larger base of clients. Because last year we had Q1, we had about 32,000 customers, and now we have 39,000. So this is a win across both those key areas, i.e., lots more expansion into enterprise and significant traction in terms of cross-sell of our two key cross-sell products, which are GRC KCM as well as PhishER.

Right, that's helpful. Maybe just to follow-up with the housekeeping, do you - historically we have some data percentage of accounts with multiple products. I mean are you open to disclosing what that might be this quarter?

No, but what I can definitely state, Brian, it almost, as I said, almost doubled from Q1 of last year.

For the number of accounts…

The percentage as you requested.

Oh, got it. Got it. Okay, perfect. Very helpful. Thanks again. I appreciate it.

Thank you.

Absolutely.

Your next question comes from the line of Shaul Eyal with Cowen and Co.

Hi, Shaul.

Hi, guys. Good afternoon. Congrats on a very strong set of results right out the gate. Stu or Krish, maybe trying to focus on Brian's question, maybe from a little bit of a different direction. When we take those 2000 new logos you've just discussed, can you maybe qualitatively kind of break it down for us between the SMBs and the nice traction that you're seeing within the enterprise arena? And I have a follow-up.

Yes, I can sort of comment on that in a general sense that I created the KnowBe4 platform knowing full well that I was going to go large enterprise, but I decided to take the SMB market first. We own that there is very little competition there. And over the last five years, we have successfully executed into the enterprise and large enterprise space. And at the moment, if you look at the pie charts, it's about 50/50. So it gives you a bit of an indication where we're at today.

Understood, understood. And maybe from a bird's eye perspective, clearly with Proofpoint is being taken out of the public domain, really from a near-term perspective, Stu, what do you guys have in mind in terms of maybe displacing some of their accounts, maybe a good opportunity to go and revisit some of those, given some potential integration disruption that…

Sure.

…could potentially be seen.

Yes. We all know the private equity playbook, the cost-cutting and to some degree not really investing a lot in existing features is an opportunity for us. We're continuing to invest heavily in both new features in the existing platform and new products that are coming down the pike. So for us that was the only good news really.

Got it. Good job. Good luck. Well done.

Thank you very much, Shaul.

Your next question comes from the line of DJ Hynes with Canaccord.

Hi, thanks guys and congrats on the great start here. Stu, one of the questions I've been asked by investors, so I figure I'll ask you in this forum is whether the secure email gateway vendors, just by virtue of all the inbound email traffic that they handle, if they're better equipped in terms of staying on top of the latest phishing threats, which I guess in theory would enable them to put out more relevant training content, any comments or thoughts there.

Sure. You kind of have to look at the bigger picture in the sense of there is billions of emails that are being sent every day, tens of billions, but that guys sent about 3 billion malicious emails every day. The additional advantage that they have is they can test those secure email gateways and make sure that their attacks actually get through before they send them. So the attacker always has the advantage in these types of situations. For a while Proofpoint and Mimecast reported on each others' failure rates, they stopped that, but that was like single digit percentages, five, seven. There is press releases that you can dig into. So there is a massive amount of emails that make it through all the security layers. And that is one of the reasons why I decided this was truly required to have this eighth layer, the human layer, if you will, and make sure that you create that strong last line of defense. Does that answer your question, DJ?

Yes, it does. That's helpful color. And then if I think about the number of new skews that you have today and what you're playing in the future, how are you thinking about separating kind of the cross-sell motion from the renewal cycle? Like is that important, what's the means to that end? Any thoughts there would be helpful. And I don't know if that's better for you Stu or Lars.

Actually, Lars would be the best man to answer that one.

Yes, DJ. So, we have our - the minute we make a sale that sale gets passed over to our customer success team and their job is to onboard the customer, make sure they know how to use all the different features, keep them apprised of the new features that we come out with. And also get renewals at the end of their subscription. And then just ensure that they have the best possible customer experience they can, but built into that, all of that work is they're constantly looking at the customer wallet and determining where there's opportunity for an up-sell or a cross-sell. And we'll in some cases even partner with our direct team to get those cross-sells done. Does that answer your question?

It does. Yes. Thank you guys and again congrats on a good start.

Your next question comes from the line of Rob Owens with Piper Sandler.

Great and thanks for taking my question, I guess, first around MediaPro. Was there anything inorganic relative to either ARR contribution or to customer count in the quarter?

Actually, Krish has a few insights, as he is willing to share with us about MediaPro. The thing that I want to start with, as this was an opportunity that we could not pass by. Their library with compliance modules is the best way to put it, but something that helped us significantly to get faster to market with our compliance plus skew. And that was the main driving force to quickly get the transaction done. There are some financial details as Krish will share.

Great. Thank you.

Thanks Stu. Hi, Rob, how are you doing? So Rob, let me actually start off from the ARR story to actually provide some more color around MediaPro. So if you look at Q1 of last year versus this year, our ARR grew almost all in excess of 40%, and the vast majority of this growth was organic in nature. We did see some upliftment in terms for MediaPro’s acquisition. But as I discussed in my prepared remarks, I expect the existing ARR to actually have some level of deterioration to about - we believe about $5 million by the end of the year. And as Stu mentioned, the primary reason for this deal was not only the technology, also the resource quality who have really strong experience around our compliance capability. And more importantly, as Stu mentioned in his remarks, it really helped us accelerate the launch of a Compliance Plus product that we were working behind the scenes on for the last year or so. So this was really the biggest driver for the MediaPro acquisition versus customer acquisition story or ARR story.

Great. And then I guess secondarily for Lars, how are you thinking about capacity additions this year relative to Salesforce, especially given the Compliance Plus module, and then just the success you're seeing overall, will you lean into it a little bit more in terms of hiring plans?

Yes, we have our headcount models just modeled out into the future. We don't really talk about that, but I think with launching the PhishER product, we've kind of already done that. So as we add the Compliance Plus, we'll have a pretty much exact sales motion going forward. And I don't think it'll require much more addition to the head count.

Great. Thanks guys.

Yes. Thanks Rob.

Thanks Rob.

Your next question comes from a line of Fatima Boolani with UBS.

Good afternoon. Thank you for taking my questions. Stu or Lars either for other one of you. I wanted to start high level with respect to you, kind of the threat environment backdrops to in your prepared remarks you did allude to the Ransomware environment, and certainly it seems to be at some of the worst levels, but it has been in recent memory. And so because the vast majority of Ransomware is propagated by email, you're very close to that dynamic. And so I'm wondering if that has had any quantifiable impact and maybe specifically colonial if that has had any quantifiable impact on your business in terms of sales cycles, in terms of pipeline, in terms of conversion rates, any sort of quantifiable detail there would be very helpful. And then I have follow-up for Krish, please.

Fair enough. It's early days, these types of compromises take months to actually - there is a whole bunch of research that needs to be done to find what the true cause was. So there was no immediate uptake in a whole bunch of people are subtly buying awareness training because of the pipeline, however, having said that, Ransomware has been a massive contributor to the realization in over time, the larger and larger customers that training those end-users is an absolute must. And did they really cannot afford not to do it now. The Biden administration recently came out with increased security requirements for Federal organizations that is going to filter down. And so a very visible pipeline, critical infrastructure incident works well for us and the media are essentially our PR agency Fatima.

Fair enough. I appreciate that perspective. Krish, for you, as we anniversary the pandemics onset and think about the investments you have in place to continue to chip away at the new logo acquisition of velocity and activity we've seen, and taking into consideration this quarter's performance as well, what are some of the things that we should keep in mind vis-à-vis the new customer growth cadence, as we progress through the year, and we reflect on some of the compares from the prior year, again as we anniversary pandemic and that's it for me? Thank you.

Hi, thanks Fatima. I think it's fair to talk about last year versus this year, right? As said in Q2, we actually tend to actually sell to a layer in the organization, which is the data front lines of not only security vendors, but more importantly, those are the same people who we're bringing and taking all of us to work from home. Now, post that, in Q3 and Q4 last year, we were pretty much back to normal in terms of customer acquisition and logo addition. And we saw the same trend, I would say in the Q4 of last year and the Q1 of this year. And we're seeing the similar trend in terms of pipeline into Q2. So going back to your point in terms of how we think about customer logo, I think we are pretty much in business as usual for the last almost a year or so.

Fair enough. Thank you.

Your next question comes from the line of Mike Cikos with Needham & Company.

Hi, team. You have Mike Cikos on the line from Needham in place of Alex Henderson. How are you doing?

Great. Thanks.

Terrific. So I did have two questions for you. The first, your gross margins actually came in well ahead of our expectations. And I was hoping you can talk to the drivers for both the year on year as well as the quarter on quarter expansion as well as the sustainability of gross margins in this 85% range as we look to the rest of the calendar ‘21, and Krish, maybe for you, but how should we expect MediaPro to impact your gross margin outlook? Thanks.

Yes. Thanks a lot, Mike. So let me actually talk to you a little bit about overall gross margins. As we scale the business, we did see an improvement in terms of our gross margins from the mid-80s. Now to really understand gross margins, you want to actually break down the gross margins into really the components that drive that, the CSM teams, which our customer support teams are a big driver of the order cost associated with our gross margins. Now they are in two different phases of evolution. In the U.S., we are being driving significant lower additions as you know, and the CSM teams tend to be at a high utilization and capacity levels. Internationally, we're just building out our international expansion, given we seen the problem of social engineering really increased substantially around the world, and we are adding CSM teams around the world to help support new and existing customers as well as future customers, enhance it take some time before those CSM teams are fully utilized. That is why for 2021, we expect gross margins to be in the mid-80s as previously discussed. The second part of your question, hopefully that answered the gross margin question. The second part of your question is around on how MediaPro is going to affect gross margins. Right now, as I said before, MediaPro is not a massive client acquisition, right? It was largely the acquisition pieces was around us, actually expanding into a brand new category, which is compliance process. We don't expect MediaPro to create any compression in our gross margins.

Terrific. Thanks for that. And then just two other small items if I could. The first, I guess building on MediaPro on it. I know that you guys discussed the ARR by the end of calendar ‘21, we touched on the gross margins, but is there any associated impact to OpEx based on MediaPro? And then secondly, I know we were talking about Proofpoint or Mimecast or some of these other email secure gateways, but maybe you could talk to the technology here. My understanding is that your AI engine for the KMSAT platform is almost at a privileged position, again because you were learning on all these emails that have already gotten through the email secure gateways, which really puts you in an advantage position as far as showing efficacy and proving out your ROI. But can you validate that latter point on the technology as well as come back to the OpEx impact for MediaPro and thank you guys. I appreciate it.

Yes, there is two questions there. One is, more Krish question. I'll be happy to go into the AI parts, and it's basically the PhishER product. So Krish.

Yes, I'll be quick there. So we expect the OpEx impact of MediaPro to be anywhere between $5 million and $7 million for the full-year.

Very good. You were right. Mike, we have a unique data stream because those literally billions of malicious emails, they do get caught by employees who click on the facial or button. So we get in a stream of email that is either clean spam or its malicious. We are able to train PhishER with that data stream and create machine learning models that allow the very higher than 90% reliability score of these malicious emails. So what we're able to do with that, like I said, unique data stream is train our models to high levels and save the security operation center people enormous amounts of time because they can almost fully automate the process of handling emails that are reported by their users. The last thing that I would like to highlight for a second is the PhishFlip feature, because you can now fully automated, train the model to a point where it recognizes it's malicious, and then fully automatic change the malicious attachments and change any malicious links in the email to make it into a defanged training templates, which is a feature that has been extremely well received by our customer base.

Thank you for the color guys. Keep up the good work. That's all.

Thank you very much, Mike.

Your next question comes from a line of Hamza Fodderwala with Morgan Stanley.

Hi guys. Thank you for taking my question. Just two quick ones. First one for Stu and Lars. Just around the go-to-market, it seems like you're seeing strong attach rates between PhishER and KCM, and now sort of going after the compliance market in a more fully fledged way, I'm curious, are these buyers different relative to who you sell into for core KMSAT, and what type of go-to market investments either both from a direct sales perspective for a channel perspective, do you have to make to reach those different types of buyers?

I'm going to grab that one myself Hamza, good question. The buyer indeed is different in the case of Compliance Plus. The buyer for our security awareness platform is definitely the IT/director/CSO, the InfoSec team, because they get confronted with the pain of in fact it workstations and downtime and data breaches and Ransomware. But they are the same people that can help us refer to the correct people in the organization, which are senior executives compliance and risk officers, who are the actual first deciders on these compliance type training. HR is following that essentially decision-making unit. So - to begin with going after our existing 39,000 plus accounts and sell Compliance Plus in there. But certainly, we will grab our channel and help them get this sold as well. Maybe a large - tell us a little about the channel side of things and how we're going to approach that.

Yes, we'll approach the channel just like any of our other products. Here in the U.S. we have a hybrid model where we sell both direct and through the channel. And I think as we get into the larger and larger deals, more and more percentage here locally go through the channel. Internationally, we're actually 100% channel, but we have the exact same sales motion. We have full on direct sales teams and our marketing team generates the same leads, but the direct teams handle the entire sales process, but they never quote and they never accept a deal. And for the second part of your question with the go-to market investment, I think there is a little more investment when we're talking international markets and that's because of just specific localization and things we have to do and localized marketing to go after those different markets.

Makes sense. And this is a quick follow-up for Krish, if I may. Krish, I think, just to not to belabor this point, but just - so I'm clear the MediaPro ARR run rate, you mentioned 5 million by the end of the year. You're assuming some deterioration in that even. So it's safe to say it's above $5 million today. Any color you can give us as to what the ARR run rate is today?

Yes. We are not going to be providing that color in terms of what the ARR is today, but you're right it's about 5 million, but it's not a meaningful impact in terms of when you look at our Q1 last year's versus Q1 this year's, 40% growth in ARR. Majority of the 40% Hamza was driven by the organic efforts of the KnowBe4 platform.

Okay. But it's at least $5 million ARR today, just to make sure.

I'm sorry, Hamza, you broke up there.

I got to say it's at least $5 million in ARR today as well, right, or a little bit harder.

That's true.

Okay, okay. Thank you.

Thanks, Hamza.

Your next question comes from line of Tyler Radke with Citi.

Hi, good evening guys. Thanks for taking my question. I wanted to ask you about the domestic performance. I think you talked about 30% revenue growth there. I wasn't sure I talked this revenue ARR number. I think that might have come down a little bit from where that business grew in 2020. Maybe if you could just walk us through kind of the puts and takes there. And then just to follow up that somewhat related as you look out across your SMB base, kind of, where are we to return to kind of pre-COVID demand in renewal rates. Thank you.

So - yes, I can take that on. So if you look at - I think the phenomenal part of this business, and I use the word phenomenally rarely, but I will use this case is how stable are our gross dollar retention as well as our logo retention has been. Of course, many of you guys have seen that over the last two or three years and we're seeing the same trend continue even in the worst periods of the pandemic and even to now. You're right. We don't talk about net dollar retention, but it's fair to assume that with further expansion of our cross-sell efforts, then it would be some positive momentum associated with that. Now, so that's - hopefully that gives a little bit color on that first point. Now, the second point in the U.S., it's I think Stu mentioned this also. Historically - grew in the U.S. markets, in the North American markets. And we have built a substantial share in the U.S. markets. So we are starting from very large base in terms of clients as well as revenue. But if you look at the overall Tam associated with - of our products, the Tam is substantially large globally, and that is very much greenfield right now, both on the SMB side as well as on the enterprise side. So there is ample opportunity for us to grow both domestically and internationally into the future.

Okay. And your last question comes from the line of Joshua Tilton with Berenberg.

Yes. Hi, guys. Thanks for taking my question. Just the first one for me, I just wanted to touch on the net new ARR, which actually grew this quarter, which is kind of a solid turnaround from 2020. Can you just comment on this relative to the improving macro environment and also maybe what's baked into the full year guidance in regards to net new ARR growth?

That is definitely a numbers question for Krish.

Absolutely, thanks for your question. As from a guidance perspective, there are two areas we actually provide guidance, which is, of course, in our earnings recording. One is revenue, and the second one is SCF margin. We do not provide any guidance on overall ARR for the rest of the year. Now, your second - you first point was, you're right. We did see a strong growth in ARR year-over-year and that's really driven by I would say three key factors. One a continued expansion into new logos and we have seen that trend over the last year and year and a half. The second key, which has mentioned, is the continued focus for the sales and the marketing teams to drive for the cross-sell of our products, both into new customers, where the attachment rates are much higher and now further into cross-sell our existing 39,000 customers. And the third thing that we're actually seeing further driving our ARR is the threat metrics, right. As Stu mentioned, the threat metrics continued to be very challenging, especially in international. And we're seeing further traction in international markets as you saw that our international revenue grew almost 88% year-over-year. So all three key pillars of our growth are really driving that ARR story.

That was helpful. And then if I could just follow up with one more, it seems as if some newer vendors are offering managed services or they're differentiating with additional value added features outside of just more content. So maybe can you guys just comment a little bit on where are you focusing your investments to ensure that you can maintain your competitive moat and market leading position?

I can take that one. There are a bunch of - the traditional story is there - there were 40,000 VARs, value added resellers, mainly U.S. All these people are trying to literally add more value and become managed service providers or even managed security service providers. Those are the organizations that are adding this additional security awareness platform because it helps them both in OpEx and in their revenues. The KnowBe4 platform is very well designed especially for those kinds of MSPs. And we have many hundreds of those that are actually using our platform. And we have a special pricing model and a go-to-market for those types of partners as well. So we feel we're in a good position to benefit from that particular trend in the market.

Thanks. That's very helpful.

Very good. Thanks, Josh.

You have no further questions at this time.

Thank you very much.

Ladies and gentlemen, this concludes today's conference call. Thank you for participating and you may now disconnect. Good-bye.