Jfrog Ltd

NASDAQ:FROG

Earnings Call Transcript 2024-Q1

[Operator]

Ladies and gentlemen, thank you for joining us, and welcome to JFrog's First Quarter 2024 Financial Results Conference Call. I'll now hand the conference over to Jeffrey Schreiner, VP, Investor Relations. Jeffrey, please go ahead.

[Jeffrey Schreiner, executive]

Good afternoon, and thank you for joining us as we review JFrog's First Quarter 2024 financial results, which were announced following market close today via press release. Leading the call today will be JFrog's CEO and Co-Founder, Shlomi Ben Heim; and Ed Grabscheid, JFrog's CFO. During this call, we may make statements related to our business that are forward-looking under federal securities laws and are made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995. Including statements related to our future financial performance and including our outlook for Q2 and the full year of 2024. The words anticipate, believe, continue, estimate, expect, intend, will and similar expressions are intended to identify forward-looking statements or similar indications of future expectations. You are cautioned not to place undue reliance on these forward-looking statements, which reflect our views only as of today and not as of any subsequent date. Please keep in mind that we are not obligating ourselves to revise or publicly release the results of any revision to these forward-looking statements in light of new information or future events. These statements are subject to a variety of risks and uncertainties that could cause actual results to differ materially from expectations. For a discussion of material risks and other important factors that could affect our actual results, please refer to our Form 10-K for the year ended December 31, 2023, which is available on the Investor Relations section of our website and the earnings press release issued earlier today. Additional information will be made available in our Form 10-Q for the quarter ended March 31, 2024, and other filings and reports that we may file from time to time with the SEC. Additionally, non-GAAP financial measures will be discussed on this conference call. These non-GAAP financial measures, which are used as measures of JFrog's performance, should be considered in addition to, not as a substitute for or in isolation from GAAP measures. Please refer to the tables in our earnings release for a reconciliation of those measures to their most directly comparable GAAP financial measures. A replay of this call will be available on the JFrog Investor Relations website for a limited time. With that, I'd like to turn the call over to JFrog's CEO, Shlomi Ben Heim. Shlomi?

[Shlomi Haim, executive]

Thank you, Jeff. Good afternoon to you all, and thank you for joining our call. I'm pleased to report another strong quarter for JFrog, with all metrics exceeding the high end of our guidance range. Unification of DevOps, DevSecOPs, MLOps and MLSecOps in a single platform continues to resonate in the market, resulting in continued expansion across the portfolio. In the first quarter of 2024, JFrog delivered total revenue of $100.3 million, up 26% year-over-year. Our cloud revenue continued to show positive momentum in Q1, equaling $36.9 million, a growth of 47% year-over-year. Cloud growth above our guidance range of mid-40s was supported by increases in customer consumption. In Q1, JFrog customers with ARR greater than $100,000 grew to 911 compared to $785 in the prior year, increasing 16% year-over-year. Customers with ARR greater than $1 million increased by 3% in the quarter, now equaling a total of 40. This is up from 21 in the year ago period, growing 90% year-over-year, reflecting the continued success of our sales team top-down efforts and adoption of the complete software supply chain platform by the enterprise. Our customers continue to tell us that having a single system of record that allows the seamless secure flow of binaries for DevOps and security is mission-critical to their business. In addition, we see the practices of DevOps being implemented by organizations that wish to enable the next generation of applications already incorporating Gen-i and machine learning. In the past year, we expanded the JFrog software supply chain platform to include MLOps and MLSecOps solutions as mandatory requirements to support our users alongside DevOp and DevSecOps comprehensive solutions. This unified approach led to some of the things behind our first quarter successes that will be discussed today. On our call today, we will cover the continued adoption of the JFrog platform, including embedded holistic security solutions. Next, I will look at the cloud usage and migration trends. We will also share updates about our partners and channel go-to-market activity and game-changing technology integration. Finally, I would share how JFrog's AI and ML solutions support the emerging needs of our customers. Let me address the adoption of the JFrog platform by the world's largest companies. As the unified software supply chain platform with Artifactory at its core, the JFrog platform continues to be chosen as mission-critical partner by some of the world's most demanding and highly regulated enterprises who are increasingly looking to standardize on holistic solutions. One of the most recognizable financial services companies in the world Fidelity recently expanded their relationship with JFrog to drive DevOps scale alongside security while increasing SLA capabilities for the thousands of developers, supporting over 42 million customers with a stated got of over 90% of their applications in the cloud by 2026, Fidelity needed a partner with robust hybrid and multi-cloud capabilities to support their cloud-first and enterprise scale DevSecOps theme. Gerald McMahon, Head of ALM Tools and Platforms at Fidelity noted in the webcast with JFrog the whole development processes has become much more symbiotic. We have to shift left, shift middle and shift right. As we continue to use tools like JFrog Xray and JFrog Artifactory, security is much more ingrained into the full life cycle of software delivery. Fidelity is not alone. We see companies increasingly integrating DevOps and security strategies through tool consolidation, scalability planning and embracing cloud hybrid and multi-cloud environments. DevOPs stakeholders have already taken ownership of software supply and security in most companies. But enterprises failing to streamline security tools by minimizing point solutions will face higher expenses, wasted time in ability to automate security practices, also known as DevSecOps and possibly place the entire organization at risk. One of the strongest differentiators is the company's security research team that few tools with unique data, often before anyone else in the market, delivering crucial value into DevSecOps processes. Reflecting this reality, the JFrog security research team recently released a software supply chain state of the union report. The report reveals that many companies still have major security gaps with only about half of companies actively scanning and securing both code and binaries. It also revealed that despite sometimes using 10 or more security point solutions, companies are unable to detect that nearly 75% supposedly critical vulnerabilities are not even exploitable. Industry analyst Paul Nashawaty from Futurum Group noted regarding the report and its consequences. JFrog's analysis reveals an important finding, a sizable percentage of venerability that have been reported are not exploitable. This emphasizes how crucial it is for engineers to distinguish between theoretical vulnerabilities and those that pose real concerns. Our security research team's reports are closely tracked by the market as they often uncover groundbreaking insights. These findings serve as the cornerstone for enhancing our tool capabilities, ensuring JFrogXray, JFrog Advanced Security and JFrog Curation deliver our users unmatched detects protection. I would now like to address our cloud business, exiting the first quarter of 2024. We continue to see organizations looking for optimization for the cloud spend in tight budgetary environment. We are actively building the pipeline for cloud migration and anticipate enterprise efforts will accelerate throughout the year, similar to how they approach 2023. We are also seeing cloud customers looking to standardize on best-of-breed platforms to effectively manage the software delivery. For example, JFrog customer, Informatica, recently signed a new deal to grow the JFrog platform as the system of record for the software supply chain. Attractive to JFrog's universality, breadth solution and cloud development approach, Informatica, supercharge their platform experience. Their DevSecOps team noted, Informatica empower the customers to realize the transformative capabilities of their data, utilizing company's AI power data management platform. By partnering with JFrog and leveraging their solutions for our deep needs, we're able to take advantage of best practices across our software supply chain to improve efficiency. We expect JFrog Cloud growth in 2024, much like the previous year to continue to be driven by usage expansion. We anticipate that cloud migration projects will gradually emerge, carefully managed within budget constraints. Our guidance aligns with evolving market trends, and we remain committed to collaborating with our customers and partners to facilitate the adoption of our software supply chain platform. Now I want to address our partner and retailer network as part of our strategic channel growth. JFrog is constantly expanding our partner network across resellers, integrators and technology partners. As an investment in this area, we recently formalized a partnership with a leading governmental distributor, Carahsoft, to serve as a JFrog Public Sector Distributor. Natalie Gregory, Vice President of Open Source Solution at Carahsoft said, "Supply chain attacks in recent years have highlighted the importance of integrating security into each phase of software development." A single source of tools for our company binaries in a solution like JFrog Artifactory along with the integrated security as part of the holistic platform allows JFrog to provide agencies with nparalleled DevSecOps agility and peace of mind for their software supply chain. We anticipate further growth in JFrog's indirect and reseller sales for the enterprise as we continue to expand our partner programs across sectors and geographies. Finally, Allow me to discuss the expansion of our platform to support MLOps and Gen AI initiatives. In today's height, every DevOps tool is talking about how their solutions support or utilize AI-based practices. But beyond the bad words, there is a critical question. Can the solution deliver on its pharmacies, can the infrastructure use effectively guide ML-powered software security from development to production. ML models are like all other binaries that require management, security and governance. JFrog with this model as a package approach once again offers a top-tier solution to the industry, enabling freedom of choice for MLegineers and responsible AI adoption by the organization. With our commitment to universality, we have always focused on making the JFrog platform to integrate it to phase with Artifactory as the model registry of choice. We recently introduced the industry's first DevOps platform to seamlessly integrate with MLflow and Qwak platforms as we anticipate MLOps market needs. Driven by the organic growth of our platform and customer demand, we continue to actively integrate AI and machine learning into software supply chain practices. MLFlow, a data break-opens project, which has over 14 million monthly downloads gives users the ability to build, manage and deliver ML models in a streamlined workflow. Ali Ghodsi, CEO of Databricks, the data intelligence platform designed to help organizations harness the power of big data and artificial intelligence set. Originally developed by Databricks and MLflow streamlines the machine learning processes with the platform for experiment tracking, model packaging and model deployment. Through a JFrog platform integration, users can now seamlessly utilize JFrog Autifactory as a model registry with JFrog Xray to secure the ML model artifacts. This integration accelerates both the development and deployment phases of ML powered applications, helping companies to drive responsible AI practices. As noted, we also announced the JFrog and Qwak integration. Qwak is an MLOps platform designed to facilitate the construction, deployment, management and monitoring of AI workflows, allowing users to deliver AI applications at speed and scale. This integration further expands the JFrog platform catering to ML engineers by providing them with a single source of proof for their models. Alon Lev, CEO of Qwak noted, integrating with a proven artifactacto depository like JFrog Autifactory allowed Qwark to provide the automation capabilities that make data scientists and ML engineers more efficient while allowing DevOps and despace to manage ML models like any other software package in a holistic secure software supply chain. As JFrog continues to bring together DevOps, DevSecOps, MLops and MLSecOps into a single enterprise-grade platform, we look forward to supporting the emerging needs of our users and aim to further expand the platform to enable ongoing consolidation needs across their software supply chain. We are excited about the growth opportunity, the world of MLOps and MLSecOps introduced as part of the Gen AI revolution, and we will keep expanding our platform towards the direction as its natural leap forward for us and for our customers. With that, I will turn the call over to our CFO, Ed Grabsheid, who will provide in-depth recap of Q1 financial results and update you on our outlook for both Q2 and full fiscal year of 2024. Ed?

[Ed Grabscheid, executive]

Thank you, Shlomi, and good afternoon, everyone. During the first quarter of 2024, total revenues were $100.3 million, up 26% year-over-year. First quarter results exceeded the high end of our guidance range across all measures as a result of ongoing strength in our cloud revenues and growth in our Enterprise Plus subscriptions. We continue to see customers looking to consolidate their software supply chain tools towards a best-of-breed platform solution. Our results demonstrate strong execution during the first quarter. As noted by Shlomi, in the first quarter of 2024, we saw customers allocating efforts towards efficiency in their software development spend versus a focus on accelerating new projects. Cloud revenues in the quarter equaled $36.9 million, up 47% year-over-year, representing 37% of total revenues versus 31% in the prior year. The growth in the cloud revenues above our guidance in the mid-40s for 2024 was driven by customer usage levels above commitments. We reiterate fiscal 2024 baseline cloud growth around the mid-40s for the full year. Self-managed revenues are on-prem were $63.4 million, up 16% year-over-year during the first quarter. We anticipate self-hosted revenue growth trend in 2024 will be similar to 2023. Net dollar retention for the 4 trailing quarters was 118%, in line with our guidance for high teens during 2024. Our gross retention rate remained at 97%. Our first quarter results saw strong customer adoption of the complete JFrog platform driven by customers consolidating point solutions and securing their full software supply chain. In Q1, 49% of total revenue came from Enterprise Plus subscriptions, up from 44% in the prior year. Revenue contribution from Enterprise Plus subscriptions grew 39% year-over-year. Now I'll review the income statement in more detail. Gross profit in the quarter was $85.3 million, representing a gross margin of 85.1% compared to 82.9% in the year ago period. The increase in gross margin relative to the year ago period is attributable to the elimination of outsourced costs derived from the synergies related to the acquisition of Vdoo and ongoing cost discipline efforts. We reiterate expectation for annual targets remaining between 83% to 84% in the near future, then trend towards the low 80s aligned with our long-term model and cloud growth. Operating expenses for the first quarter were $71.3 million, up $5.2 million sequentially, equaling 71% of revenues, up from $63.5 million or 80% of revenues in the year ago period. We continue to remain focused on expense discipline while investing in scaling our enterprise sales team, channel partner ecosystem and strategic R&D spending. Our operating profit in Q1 was $14.1 million or 14% operating margin compared to an operating profit of $2.7 million or 3.4% operating margin in the year ago period, an improvement of 10.6 percentage points. Earnings per share equaled $0.16 based on approximately 114.6 million weighted average diluted shares compared to $0.06 per share in the prior year on 106.9 million weighted average diluted shares. Turning to the balance sheet and cash flow. We ended the first quarter of 2024 with $579.6 million in cash and short-term investments, up from $545 million as of December 31, 2023. Cash flow from operations was $17.5 million in the quarter. After taking into consideration our CapEx requirements, free cash flow was $16.6 million or 16.6% free cash flow margin. We remain committed to our free cash flow margin targets provided within our long-term model, implying an estimated midpoint of 28% over the coming years. As of March 31, 2024, our remaining performance obligation totaled $261.7 million. Now I would like to speak about our guidance for the second quarter and full year 2024. Our outlook for 2024 implies continued momentum within our cloud business, driven by expectations for increasing customer usage, adoption of our Enterprise Plus platform and contribution from new security products. We anticipate seasonality in 2024 to be consistent with 2023 as customer activity likely accelerates through the year, weighted more towards the second half as budgets and resources are allocated to key initiatives after focus on expense rationalization by customers during the first quarter. Given the expectation of our self-hosted and cloud businesses, we reiterate our guidance suggesting a net dollar retention rate in the high teens exiting the fiscal year 2024, implying stability through the remainder of the year. We will continue to expand operating expenses on a dollar basis during 2024 but see room for operating leverage as ongoing cost discipline and strategic investment remain balanced. For Q2, we expect revenue to be between $103 million and $104 million, equaling 23% year-over-year growth at the midpoint, with non-GAAP operating profit between $13 million and $14 million and non-GAAP earnings per diluted share of $0.13 to $0.15, assuming a share count of approximately 116 million shares. For the full year of 2024, we raised our revenue range between $425.5 million and $429.5 million. Non-GAAP operating income is expected to be between $56 million and $58 million and non-GAAP earnings per diluted share of $0.59 to $0.61, assuming a share count of approximately 116 million shares. Now I'll turn the call back to Shlomi for some closing remarks before we take your questions.

[Shlomi Haim, executive]

Thank you, Ed. In 1 week, Israel will observe its 76 Independence Day. This year, Israel can truly celebrate but only mark the day. The 132 civilian hostages still held by Hamas in Gaza since October 7 reminds us that until they are safely reunited with their families, an important milestone like Independence Day cannot be celebrated in full. Despite the ongoing challenges of the war in Israel and global macroeconomic uncertainties, the JFrog team remains dedicated to our goals and culture. Team JFrog, your unwavering commitment and consistent delivery are truly admirable. I'm saluting your resilience period, and thank you for your outlook. Q1 was a solid start for the year. We continue to believe that JFrog, as a system of record for the entire software supply chain is uniquely positioned for success in the expanding world of DevOps and security as well as seeing potential growth in the emerging market of GenAI. We also recently announced our annual user conference, swampUP, to be held in September in Austin, Texas. This year's key notes will change the DevOps, DevSecOps and MLOps landscape as we again prepare together with our partners and community to set the industry standards moving forward. With that, thanks for attending our call and made the Frog be with you. Operator, we are now open to take questions.

[Operator]

Thank you. We will now begin the question-and-answer session. [Operator Instructions] Your first question comes from the line of Sanjit Singh with Morgan Stanley.

[Sanjit Singh, analyst]

Shlomi, I just wanted to get your latest read on the spending environment and the macro environment. This time last year, the market and including JFrog customers were still in sort of cost optimization mode watching their cloud spend. At the same time, they're also hesitant to invest in data center. And so as 2024 has started, what trends sort of remain similar to back then? And to what extent are you seeing any sort of improvement in terms of your customers willing to invest?

[Shlomi Haim, executive]

Sanjit, thank you for the question. So what we see actually in the cloud environment is that our cloud keeps growing faster than the on-prem mainly because of user consumption and cloud migration project being included in our pipeline as we see the market coming back very slowly both that direction. On the sale costs, we see a bit of a growth on the adoption and the expansion, but it remains the same as it was in 2023. Overall, cloud and on-prem remind us a lot as we reported 2023. Q1 started with 47% year-over-year growth in the cloud. And more and more cloud customers are looking toward multiyear subscription when they speak about migration and betting more on migration from [indiscernible].

[Sanjit Singh, analyst]

Understood. And just a follow-up maybe for Ed on the cloud business. And if I back out the true-up from last quarter, I think, which was around $1.5 million. When I look at the sequential growth in cloud, it was lower than it has been in prior Q1s for the past couple of years. Any reason for the lower sequential growth this quarter once they do that normal normalization?

[Ed Grabscheid, executive]

Sanjit, this is Ed, and thank you for the question. What we saw in Q4 was a quarter of significant consumption. We see Q1 as more of a digestion quarter. Now when you look at it on a year-over-year basis, we grew 47%. On a dollar basis, we grew much more in Q1 than we did in the prior quarter. So what we're seeing is that customers expanded in terms of usage in Q4. In Q1, they took that opportunity to digest a little bit more and think about project spend and software development projects more towards later quarters.

[Operator]

Our next question comes from the line of Pinjalim Bora with JPMorgan.

[Pinjalim Bora, analyst]

Shlomi, I'll ask you on MLOps. MLOps is interesting, but maybe talk about how your conversations with customers are trending at this point. Are you seeing us considering JFrog as JFrog Autifactory as a proxy for kind of hugging phase or any kind of model repositories. And since a lot of the MLOps works kind of -- we use a lot of open-source library. Is it kind of even underscoring the security aspect of the JFrog platform that you have. So anything around MLOps, what are you hearing from customers would help?

[Shlomi Haim, executive]

MLOps obviously is the natural expansion of what we call the natural lease for JFrog as we treat all models as a package, it another binary. What we hear from our customers, what we hear from the market, by the way, what we get from the community as well is that they are looking to have a single source of record from others just as they have for the other packages. Autifactory obviously serves that Xray serves as the scanner for models and malicious model. And this is what we announced back in Q4 of the review. Now with the versality philosophy in mind, we are providing all data scientists and ML engineers with a freedom of choice, choose whatever platform works for you, whether it's MLflow, which is super popular, as we mentioned, with millions of balance a month or other like Qwak and other coming from AWS stage maker. So the universality around the oftefactory will make out the factory, the registry of choice for models as well as it is today for all the other binaries.

[Pinjalim Bora, analyst]

Yes. Understood. One question for you, Ed. On the cloud business, correct me if I heard this wrong, but it seems like you're seeing incremental efficiency efforts by customers optimization efforts by customers in Q1. Just wanted to make sure I heard that correctly. And maybe how are those customers kind of optimizing at this point because that's something different than what others are saying that optimization was already done mostly. And maybe help us understand the consumption trend going into April or so far in May.

[Ed Grabscheid, executive]

Thank you for the question, Pinjalim. What we're seeing, first off, is that, again, this being a quarter of digestion after a very strong Q4. We guided to the mid-40s, and we were -- we exceeded our guidance in terms of 47% on a year-over-year basis. What we're seeing in terms of the trends is that the customer today, the behavior is more towards and aligned with what we're seeing in 2023, that purchasing decisions as well as large projects will most likely come towards the second half of 2024. But what we are reiterating our guidance around mid-40s for the full year.

[Operator]

Our next question comes from the line of Koji Ikeda with Bank of America.

[Koji Ikeda, analyst]

I wanted to ask a question for maybe another question here on the SaaS side. I know there is a lot of focus on this revenue line item here. And so as we think about -- I wanted to ask you a question on the visibility in SaaS. When I look at the net new revenue in SaaS after normalizing for that onetime, it looks about the same as the fourth quarter. And so really trying to understand what your visibility looks like with your SaaS customers, say, for the rest of your business?

[Ed Grabscheid, executive]

Yes. So what we see and what we've commented before is that we guide towards mid-40s, it's on the commit anything above mid-40s would be usage, and we don't necessarily guide on usage. So if we see a percentage growth that is above the mid-40s. That is because additional consumption. What we see today and what we have visibility to is in the commitments, and we continue to reiterate at mid-40s for our cloud business.

[Koji Ikeda, analyst]

Got it. That makes sense. And just a follow-up here, if I may. JFrog, we definitely view you guys as an enterprise DevSecOps. I think there's no denying that. But you do have SMB and smaller mid markets as customers. And so I wanted to ask the question on how demand and resiliency is shaking out in the lower end of your customer base?

[Shlomi Haim, executive]

Yes. Thanks, Koji. Specifically on security, it's a known thing for all sizes of companies. Software supply and security has been changed, not only consolidated, but being changed because of the threat that is coming from the runtime environment in which you have binary stresses only. So JFrog Advanced Security, the JFrog Curation and Xray are covering these needs for the SMBs were now all types of customers, all profile of customers, and I'm not speaking about real small development shops, but the SMB for sure, are looking for solutions that provide a comprehensive coverage over the software supply chain, and this is what the JFrog Security solution is attracted by.

[Operator]

Our next question comes from the line of Mike Cikos with Needham.

[Michael Cikos, analyst]

And I'll jump on the bandwagon here since we're all asking about SaaS and cloud. Just to punctuate that point that we were speaking about with Koji. But I want to make sure one of the things we're getting from clients here is you delivered the 47% growth in Q1, we're reiterating the mid-40s for the full year. And I think what I'm getting from folks is the idea that, hey, it's a skinny upside to mid-40s, i.e., like it doesn't leave you a lot of limbo. And Ed, if I could just go back to your earlier comments, it sounds like the mid-40s that you've guided to for the year is based on commitments, right? So in the context of that visibility, that mid-40s is in hand, if you will. And then the consumption is really the go get to drive upside to that. Is that a fair characterization?

[Ed Grabscheid, executive]

Yes. Thanks for the question, Mike. So our -- first of all, our guidance suggests that our pipeline would support the mid-40s, and that is based on consumption. Secondly, based on the -- I'm sorry, commitments, the secondly, usage would be a driver of anything above that mid-40s growth. Any acceleration beyond that would be migrations, although we don't anticipate anything from a migration perspective to pick up from what we saw at the levels of 2023.

[Shlomi Haim, executive]

And if I may add to it, Mike. Sorry, just one more sentence about that utilization. We started 2023 with the same volatility and the same hesitation in the market people on the first quarter are far more cautious about their budgets. They are planning. They are not yet executing big migration projects are not even being discussed at this point. They want to stabilize their expenses and then to start there. And exactly as it's happening in 2023, and then we predicted and finished the year with a big eye on the Cloud go. This is what we will see here this year. The market is still not out of the wood and customers are looking at cloud expansion and cloud spending with the magnifier. So Q1 is pretty much in line. We even exceeded our guidance. It's very much aligned with our target. But also if you look at the dollar base, it's a big success among our portfolio.

[Michael Cikos, analyst]

Understood. And then just a follow-up here. I think transparently, a little bit of the head scratching outside of your purview is just on the comment around the digestion in response to Sanjit's earlier question. So I'd just like to get a sense that digestion, was that anticipated? And then the follow-up is, has that been more front-end loaded? Was it back-end loaded to Q1? Has there been any change in behavior in the interim, again, to give you some sort of confidence that those projects that people are looking at are going to start coming online in the second half of this year.

[Ed Grabscheid, executive]

Yes. This was not a head scratcher for us. This was something to be expected. The customer behavior and what we see in terms of seasonality, there's typically seasonably weaker in Q1 as budget decisions are being made. New software development projects are being determined and that typically will scale through and grow throughout the course of the year, and this is the trend that we're seeing.

[Operator]

Our next question comes from the line of Jason Ader with William Blair.

[Jason Ader, analyst]

I wanted to ask about security, Shlomi, maybe talk about pipeline build for security and what you guys are seeing out there on the ground with the sales reps. And then what are the biggest challenges you're seeing in terms of really just getting this thing out there and getting people onto the JFrog platform?

[Shlomi Haim, executive]

Yes. Jason, these are 2 great questions. First about the pipeline. We are free to see the pipeline growing with our enterprise portfolio. And we are very happy to see that they are not only considering JFrog Advanced Security versus Curation, or Curation versus JFrog Advanced Security, but both. And to remind you, this is also coming with a different model on top of our subscription compass. So we see the pipeline received growing. These are very promising enterprises that are looking at full adoption of software supplies and security. On the other side, on the flip side of the base, none of them is coming from the dock. They all have security solutions. They are all running a proof of concept. They are all looking to displace or to consolidate and pipeline building on the landscape of security is taking longer. So on one hand, we're very excited about the pipeline and the type of customers that are approaching us and running a book concept, a solid one, very organized one, consolidating 5 or more dime tools. On the other hand, the life cycle of a proof of concept for security is longer than the DevOps one.

[Jason Ader, analyst]

Got you. Okay. So it's -- how is that aligned some with your expectations, I guess, 6 months ago? I mean, is this sort of what you expected? Or is it taking -- is it a little bit slower than you expected and you still are as optimistic as ever in terms of the value proposition, but it's just going to take a little bit more time.

[Shlomi Haim, executive]

We are saying in confidence with our targets and what we guided you guys that this year's security will become a material piece of our performance in business.

[Operator]

Our next question comes from the line of Miller Jump with Truist Securities.

[William Miller Jump, analyst]

Great. I guess maybe I'll ask one on the self-managed side of the business. You actually had a modest reacceleration there this quarter. Just curious if there was anything onetime in nature or anything that made you indicate this might actually exceed your expectations for that part of the business this year?

[Ed Grabscheid, executive]

Miller, this is Ed. No one -- nothing onetime based, slight acceleration in our cell costed business. We would expect that the trend in self-hosted will be very similar in 2024 to what we saw in 2023.

[William Miller Jump, analyst]

Okay. And then maybe just one more. Obviously, this is a lumpy metric, but it also looks like 100 customers were the slowest on net adds than they've been in some time. Is there anything to indicate that, that digestion period that you talked about is indicating large customers more than the overall?

[Ed Grabscheid, executive]

But what we saw in Q4, and a lot of this, you're right, is lumpiness and seasonality. We had significant traction in our large customers really in the second half of 2023. So this quarter that we're saying somewhat digestion as customers are looking at their budgets and considering expansion opportunities we saw in Q1, although there was a nice growth, it wasn't at the same pace that we saw in previous quarters. We would expect that, that would start to trend more normalized in future quarters. And it will be similar to what we saw in 2023.

[Operator]

Our next question comes from the line of Jason Celino with KeyBanc Capital Markets.

[Jason Celino, analyst]

We actually saw some big news this week that's been a major player in Appsec would be spun out as a private stand-alone. Have you seen any changes in the competitive dynamics in security over the last, call it, 6 months? And then more importantly, do you see any incremental share gain opportunities on the horizon just on the competitive landscape?

[Shlomi Haim, executive]

Yes, that's a very good question. First of all, well, the last quarter was full of events that changed everything. And on one hand, we see the need for consolidation around best-of-breed platform and therefore, customers are mentioning the platform that they can consolidate around, especially around security and DevOps together. On the other hand, there were a lot of changes HashiCorp got acquired, Synopsys sold their entire stack. And Atlassian has some changes. So obviously, there are a lot of changes. Tectonic plates are moving. But one thing is saying the same. Customers are looking to consolidate and to have a comprehensive security solution. And then on that end, the security landscape and the competitive landscape didn't change from last quarter.

[Jason Celino, analyst]

Okay. And then maybe just a quick one for Ed. The digestion that we're all kind of discussing today, did you start seeing it very beginning in the quarter? Or was it towards the end or just pretty consistent throughout?

[Ed Grabscheid, executive]

It was consistent throughout the quarter.

[Operator]

Our next question comes from the line of Kingsley Crane with Canaccord.

[William Kingsley Crane, analyst]

Some in the spirit of RSA, I want to talk about security in Mandiant's threat report, 31 vendors were impacted by 0 day threats in the past year. That's up from 3 in 2018, not mentioning thousands of end customers impacted by those breaches. You cited some JFrog's security research in your prepared remarks. Can you talk about the value of having that security research team and then addition to your security capabilities, including things like JFrog Curation.

[Shlomi Haim, executive]

Yes. Well, thank you for noting that JFrog security research team is one of the largest in the industry, not only by the size of the team and how they will train but also by the amount of reports and finding that we are sharing with the customers and with the community. Recently, we released the state of the union for software supply chain security finding and then just after the Docker Hub scanning and malicious packages on Docker Hub together with Docker. This is an amazing differentiator because our customers can know before the rest of the market from breadth might become, and it's included in the database of our security solutions. So obviously, it's a great service for the community, but it's also boosting our tools to be able to detect some threats before other tools can get them.

[William Kingsley Crane, analyst]

That's really helpful. And then for Ed, really strong gross margins at 85%. Can you talk about the efficiencies you're finding there even as cloud generally increases as a percent of your overall revenue?

[Ed Grabscheid, executive]

Yes. Very strong gross margins, as you pointed out, 85.1%. One of the reasons that we had such strong gross margins in Q1 is that we removed eliminated a third-party outsourced database as we now standardized on the Vdoo database that we acquired 2, 3 years ago. So we saw some efficiency gain there. However, what we see in our model is that we'll continue to spend and invest in those databases and other costs associated with our gross margins. So our model indicates that we'll still -- and as it's in our guidance between 83% to 84% gross margins during 2024.

[Operator]

Our next question comes from the line of Yi Fu be with Cantor Fitzgerald.

[Yi Lee, analyst]

Questions could be for Shlomi. In terms of -- I want to focus on the consolidation opportunity. Maybe if Shlomi, you could comment on like the upsell to other products. I know in the prepared remarks, you talked about the security as an example. How about other products like CI/CD, distribute, IoT device finance? Any updates on that front as well?

[Shlomi Haim, executive]

Yes. So obviously, the consolidation of tools around one platform comes, we have to do all the capabilities of the factory, the center as the single source of real than the registrable packages on top of it, a security solution, but also what you mentioned, distribution, automation, the database that I just mentioned, these are coming in one platform, one package. And the expansion potential is around all of them. It's differently packaged in the self-cost offering versus the cloud. In the cloud, we are looking to see more consumption based on more usage and more adoption. And in the surpasses expansion by season by number of servers by location by project, by sizes of teams and so on. So that's the expansion motion that we see now with additional product on the platform.

[Yi Lee, analyst]

Got it. That's actually helpful. And then my last follow-up is on the MLOps opportunity. It's great that you've given customer, obviously, the freedom of charge to all they don't have to lock themselves up in anything like they could use housing pacemaker. I was wondering how mature is the MLOps opportunity? And where do you think it's going to be more significant to, I guess, the contribution to JFrog?

[Ed Grabscheid, executive]

Yes. MLOps is not mature. AI is not mature. But the practice is all being built now. And the nice thing about what we see is that the ML engineers, the python engineers, the data scientists, actually using the best practice to the fasting discos to practice of DevOps and DevSecOps to practice MLOps and MLSecOps. So it's not mature. This might be a tailwind, but it's not going to change our 2024 guidance. And we are going to invest more and expand more sending JFrog platform prepared to this big opportunity that is coming in the next year.

[Operator]

Our next question comes from the line of Brad Reback with Stifel.

[Brad Reback, analyst]

Ed, on the digestion commentary, I understand the mid-40% cloud growth for the year, but it sure feels like you're trying to point us towards less pronounced seasonality in the June quarter than we've seen in the last couple of years. So maybe we're towards the lower end of that mid-40s in 2Q?

[Ed Grabscheid, executive]

Yes, Brad, the way that we look at this is that it is a metric that has seasonality. What we're guiding to in the mid-40s is for the full year, that means it's around the mid-40s. It could be up a few points, it could be down a few points. What we know today and what we see is the commitments and that's around mid-40s. Anything above that would be usage -- anything below that, that could be because of monthlies. But what we see is around mid-40s and seasonality will play a factor in that quarter-to-quarter.

[Operator]

Our next question comes from the line of Nick Altmannn with Scotiabank.

[Nicholas Altmann, analyst]

Just given the channel efforts and how you guys have bulked up the sales force over the last year, can you maybe just talk to some of the productivity from some of the newly onboard partners, both last year and when you guys kind of held your first partner event. And then specifically on the direct go-to-market side, maybe just talk to overall sales productivity.

[Ed Grabscheid, executive]

Yes. I think the channel and partners as we keep updating you, it's one of the transition to the top-down enterprise indirect sales that we are running. The collaboration with the partners and with the channels is by geography, and it's by expertise. So it's different partners that you would see on security versus different partners that you will see on DevOps. It's different partners that you would see in France versus different partners that you will see in Japan. And the one last thing is that now we added and announced the Carahsoft partnership to also go after the public sector, the highly regulated environment, which they are super familiar with. So we are expanding more and more the relationship with our partners and with our channels to have more retailers in the field that can promote the JFrog platform offering.

[Nicholas Altmann, analyst]

Okay. And then I wanted to follow up on the digestion comment. I think it was Koji asking about whether it's more sort of geared towards the SMB side of the equation. But any other trends that you saw within the installed base around the digestion? Was it sort of broad-based? Was it geo-specific sector specific? Just any more granularity on that digestion comment that you made in Q1 and sort of any trends or patterns that you call out would be helpful.

[Ed Grabscheid, executive]

Yes, there was nothing that we saw in terms of trends. It was a broad base across the portfolio, nothing that we can point out specifically.

[Operator]

There are no further questions at this time. I turn the call back to Shlomi for closing remarks.

[Shlomi Haim, executive]

Thank you, everyone, for joining our call. We had a wonderful quarter. We are looking for more peaceful day in the region and may the Prague be with you. Thank you very much.

[Operator]

This concludes today's call. Thank you for attending. You may now disconnect.