Okta, Inc. (NASDAQ:OKTA) Q3 2024 Earnings Call Transcript

Page 3 of 11

And everything else is prioritized after that. And the second most — the number two priority is after security is growth and profitable growth — profitably growing the business. And I think you see that reflected in the business strategy in terms of the direction we’re giving teams. We have a 90-day all hands on deck in terms of focusing on bottoms-up ideas and security efforts across the company, getting help from outside industry experts, tops down to bolster our own experts. We’ve done this in various degrees over the years, but we’re really aggressively doing more of this to get all the best minds and best input on these opportunities and problems for us. We’re making sure that it’s not just of one year or one quarter change. It’s really a continued accelerated evolution of our cultural change to really being — having the culture of one of the most secure companies in the world.

Remember, Okta started as a — it was — our focus was enabling technology and making it easy to adopt the cloud. It wasn’t necessarily started 15 years ago as a cyber company. Now that changed a few years into the company, and it’s very clear to us now that — and has been for the last few years that the bar is the most secure company in the world, full stop. And so that’s the number one priority, and that’s what we’re focused on. And then part of that, of course, is kind of the last pillar that we’re really focused on now, which is making sure the products themselves as customers use them, the actual security use cases on those products are prioritized incredibly highly. A great example of that is making sure that when we think about managing access to privileged resources, we — with our new privileged access management product, making sure we prioritize and make it work great with our own Okta administration console, because attackers are going after that because that’s such a valuable target.

So, it’s a wholesale clear communication to customers and to employees and to partners and investors that security is the top priority, full stop. And we will stop at nothing to make sure we become one of the most secure companies of the world because it’s kind of clear to everyone that we’re short of where we need to be now and we will fix that.

Brett Tighe: And I’ll just add a couple of comments there, Brian. Thanks for — one, nice to see you. Thanks for the question. But in terms of the guidance philosophy, really no difference from what we’ve done before. I think we all know, for years now, we give this early look. It’s a prudent look. We’ve got five quarters ago. We’ve got a big Q4 ahead of us. And so, we’re factoring in two major factors, like I said a few minutes ago, which is around the macro and then also around the security incident and making sure we’re being prudent about the guidance at this point given how far out we are from the end of FY ’25.

Todd McKinnon: No, you asked the question, too, Brian about the channel partners.

Brian Essex: Yes.

Todd McKinnon: I think that’s — I would say that’s continued thread and a continuation of what we’ve been doing this year with our enhanced partner program and clarifying the partners we’re working with and investing on the ones that are really moving the needles, the things you’ve heard us talk about in previous calls, that’s an ongoing thing, and we’re continuing to execute on that and seeing benefits from that in the business.

Brian Essex: Do you have the pipeline internally to hit that number without incremental improvement in partner contribution? Or how confident you’re with that 10%…

Todd McKinnon: We’re very happy with where the pipeline is.

Brett Tighe: Yeah, we’re confident in what we’ve given you guys today. Like I said, no change in the guidance philosophy.

Brian Essex: Okay. Thank you.

Brett Tighe: No problem.

Dave Gennarelli: Let’s go to Rob Owens at Piper.

Rob Owens: Great. Thanks for taking my question. I appreciate the transparency and disclosure around the breach and realizing these things can take on a life of their own as time passes. But I was curious more so what you’re doing for customers to assuage concerns around the breach itself aside from pushing out some launch dates here? And any proactive steps that you’re taking to help future retention? Thanks.

Todd McKinnon: Yeah. I’ve been — I’ve had many, many conversations with customers over the last few weeks, as you can imagine. And the reactions vary. Some are from, thanks for the update, we appreciate the communication, to the other extreme, which is a lot of frustration and concern. The common thread or the common theme is that we’re incredibly important to our customers, and they’re relying on us for their critical infrastructure of their customer identity or their workforce identity. So, it really matters. And the first thing they want to know is that do we know how important this is? And are we taking these things seriously? Do we have the right plan in place to react to these things and get better going forward? And when I talk to them, the themes that resonate are really clear priority, comprehensive look at all the threats and all the opportunities across product and infrastructure, making sure the cultural tone from the top is set appropriately, and I can do that in a way no one else in the company can do.

So, I’m very clear about that. And then the last thing I talked about before is how the products can help them be more secure because this all is about the foundation for their security. And once that foundation is solid, then they can use our products to be — to further enhance their own security. So, I think to your specific question about what we’re doing specifically, I think it’s — part of it is being open and transparent. One of the reasons why we thought this most recent disclosure to the one we did yesterday and then publicly this morning is that when we talk to customers, the number one thing they want is transparency. And they want to know as soon as possible, what is the risk increase? What are the threats? And our commitment as on our journey to be one of the most secure companies in the world is to make sure we fulfill that commitment and make sure we’re open and transparent and disclose all the information we have.

Page 3 of 11