Yahoo Finance

Steve Vintz

Thank you, Erin.
We're excited to share our strong results for the quarter, discuss customer and end market dynamics, and provide our outlook for the remainder of the year. Before delving into these areas, I do want to acknowledge that Mark and I are honored to be named co-CEOs. We are committed to advancing our exposure management strategy and accelerating the expansion of our market opportunities.
I also would like to welcome Eric Doerr as our new Chief Product Officer and thank Shai Morag for leading the product organization over the past year and helping us at an important time. I'm very excited that Eric is joining us as he brings nearly three decades of experience at Microsoft and Google, building and scaling security products and in leadership and developing innovative security solutions aligned perfectly well with Tenable's mission.
With that, I'm pleased to say we're off to a great start to the year. This quarter, we beat all of our guided metrics on the top and bottom line. We delivered 11% growth year over year and a 36% unlevered free cash flow margin, which reflects our balanced growth approach and ability to drive continued operating leverage in the business.
Our performance in the quarter also reflects the continued momentum of our exposure management platform, which drove acceleration in new sales due to a high conversion rate with large deals. In fact, this was our best quarter ever for seven-figure wins, and Tenable One was certainly the catalyst for that success.
It's also worth mentioning that on our February call, we highlighted the potential for a more modest Fed contribution this quarter due to uncertainties related to the change in the administration, and that played out as expected. Clearly, enterprises are becoming more thoughtful and strategic in how they invest. These organizations are growing with us, adopting Tenable One to identify, prioritize, and remediate exposures across an expanding the tax surface and diverse asset types.
As a result, we're seeing increased opportunity, larger deal sizes, broader platform adoption, and greater asset coverage. What's clear is that few vendors can deliver solutions that address the needs of an enterprise operating in a complex multi-cloud hybrid work environment. This is becoming increasingly more important. Our platform addresses a rapidly evolving world where customers are constantly evaluating the right deployment model to fit their needs.
In fact, we're making great progress executing on our product roadmap as we continue to find ways to break down long-standing security silos and give organizations a more unified way to reduce risk. A top priority is expanding integrations with third-party tools and data sources, including new capabilities from our Vulcan Cyber acquisition. These integrations feed Tenable One's analytics engine with rich data from application security tools, code repos, and more, broadening the intact surface, visibility and sharpening privatization, so customers can focus on what matters most.
Now the same rich contextual data is also the foundation of our AI strategy. The power of AI lies in the quality, diversity, and history of the data it learns from, and this is where we see a decisive advantage. We believe no vendor in the market can match the depth and breadth of our exposure data we've assembled over the past two decades. This gives us a real competitive mode with a uniquely comprehensive view of risk, spanning assets, vulnerabilities, misconfigurations, identities, and more. And that's why we think we are positioned to lead an AI-powered exposure management.
We're working toward building the most intelligent, scalable, and complete exposure management solution on the market. With these advancements, Tenable One is evolving from a system of record to a system of action, closing the loop on exposure management by not just identifying risks but also by helping customers act on it in real time.
A great example of this is our recent research into the security posture of AI workloads. Our research team found that 70% of cloud workloads leveraging AI services contain unresolved vulnerabilities. This isn't just an interesting data point, it's actionable intelligence that we operationalize in Tenable One.
We're also seeing growing momentum in our AI aware discovery capabilities, with many of our customers using Tenable to help secure their expanding AI footprint. While the broader market for securing AI is in the early stages, Tenable is already delivering at scale.
In Q1 alone, Tenable One detected 22 million AI-related applications, up from 14 million in the prior quarter. We identified over 160 million instances of AI-embedded browser plug-ins. These are not just numbers, they're a testament to Tenable's ability to help customers stay ahead of the emerging threats tied to AI.
We're also investing heavily in remediation to tie exposures to fixes. We're expecting to roll out powerful new capabilities, including bidirectional ticketing and automated workflows to help customers close risk faster with greater accountability across fragmented environments.
In short, we're executing on our strategic initiatives that we outlined at the beginning of the year by accelerating innovation in our platform and expanding our footprint and cloud. We're also already seeing progress in both these areas. While there's a lot of uncertainty in this macro, we continue to be a very valuable partner to our customers by helping them reduce risks with greater efficiency across the enterprise.
I'd now like to turn the call over to Mark.

Mark Thurmond

Thanks, Steve.
Steve underscored a critical point. Our leadership and vulnerability management is not only holding strong, it's driving real acceleration and Tenable One adoption. Our customers are taking this journey with us. As the threat landscape has evolved, so has the mandate of exposure management. It's no longer just about finding vulnerabilities. It's about understanding how those risks connect across your entire environment.
That's why we made deliberate strategic investments to expand Tenable One into a comprehensive exposure management platform and our customers are responding. This quarter, that partnership was on full display with major Tenable One expansions across industries. We had strong win rates against major players in the VM, EM, and cloud space. This is a direct result, not just of extending our leadership, but reshaping what exposure management looks like.
In Q1, we secured a major federal win with the organization undertaking a global modernization effort. The organization is using Tenable to manage over 1 million assets globally hosted in a private cloud environment, our solution is providing them scalable, centralized visibility and consistent risk insights across their global footprint, an essential foundation for enhancing their overall security posture.
Beyond the public sector this quarter, we also secured a seven-figure expansion with a global financial institution. This institution was an existing Tenable customer, underscoring the value of delivering in a highly regulated industry. These organizations need a unified, comprehensive view of risk, particularly as they prepare for regulatory audits.
In this case, the customer upgraded to Tenable One to support both audit readiness and vendor consolidation across a complex attack surface. The deal includes hundreds of thousands of assets reflecting a broad market shift. Customers want to centralize control of their environments, and they're turning to Tenable to make that happen.
We believe this also opens up significant opportunities as customers are beginning integrating third-party security data into Tenable One., giving them a more complete picture of risk and fueling momentum for platform consolidation and upsell. By combining our first-party assessments with third-party inputs, we're making it even easier for organizations to manage their full exposure landscape through a single platform.
Another significant new customer win that underscores the momentum behind our unified platform strategy and the value of our Vulcan acquisition was with a Fortune 100 customer. This customer has selected Tenable as their North Star for exposure management as part of a broader cybersecurity consolidation effort. They're replacing multiple vendor solutions, choosing to standardize on Tenable One.
The ability to ingest third-party data combined with first-party assessments was the differentiator for this customer, as it allows us to deliver insights on holistic risk. We consider this multi-year commitment as a strong validation of our ability to deliver integrated high-impact solutions that align with enterprise needs for simplicity, consolidation, and clear ROI.
As we said many times now, we see cloud as a critical pillar of exposure management. And this quarter showed exactly why. We landed a seven-figure deal with a global software and services company operating in over 180 countries. With a massive multi-cloud environment spanning AWS, Azure, GCP, and OCI, they needed a smarter, more scalable way to manage risk across their cloud footprint.
With compliance pressure rising and thousands of assets to secure, they launched a competitive review of multiple vendors to replace their Microsoft deployment. Tenable came out on top for our fast deployment, seamless multi-cloud integrations, and real-time visibility and control across their cloud infrastructure.
And under two months, we proved our value. We are managing tens of thousands of cloud resources and thousands of identities, helping them strengthen their overall security posture while laying a foundation for more unified exposure management strategy.
The takeaway here is we're seeing exceptional momentum and exposure management and believe we are best positioned to help our customers evolve their solution stack as they implement modern technologies such as cloud, AI, interconnected IT/OT systems, and hybrid environments.
With that, I'll turn it back over to Steve to dive deeper into our results for the quarter.

Steve Vintz

Thanks, Mark.
I'll now turn to our results in the quarter, which, as a reminder, includes the impact from the acquisition of Vulcan. Calculated current billings to find as revenue recognized in the quarter plus the change in current deferred revenue grew 9% year over year to $215.4 million. As discussed earlier, this outperformance was largely driven by Tenable One, including cloud security.
Current RPO grew 13% year over year, 400 basis points ahead of CCB growth as backlog accelerated during the quarter. During the quarter, we added 361 new enterprise platform customers and our LTM net new six-figure count was 54. Our net dollar expansion rate was consistent this quarter at 108%, and our overall renewal rates remained strong.
Now on to the P&L for the quarter. Revenue was $239.1 million, which represents 11% year-over-year growth. Revenue in the quarter exceeded the midpoint of our guided range by $5.1 million. Our percentage of recurring revenue remains high at 96% this quarter.
Gross margin was 82% this quarter, flat relative to last quarter and in line with expectations. Going forward, we continue to expect gross margins to be in the high 70s to low 80% range. While we're investing to deliver enhanced functionality and analytics to customers, the scalability of our platform has enabled gross margins to remain constant.
Sales and marketing expense was $85.5 million, up from $80.1 million last quarter. And as a percentage of revenue, sales and marketing was 36% compared to 34% last quarter. Sales and marketing expense was higher sequentially on an absolute dollar basis and a percentage basis primarily due to the cost associated with our annual sales kickoff conference in February, partially offset by lower sales commissions from a seasonally lower renewal base in the quarter.
Looking ahead, we expect sales and marketing as a percentage of revenue to be modestly higher in Q2 due to the industry events and other investments we're making, including sales capacity, and trend lower in the second half of the year.
R&D expense was $39 million, which was up from $32.5 million last quarter. R&D expense was higher this quarter in comparison to last quarter, primarily due to increased personnel costs resulting from the Vulcan acquisition, as well as the foreign tax credits we received last quarter. As a result, R&D expenses as a percentage of revenue was 16% this quarter, up from 14% last quarter. We expect R&D expense as a percentage of revenue to increase in Q2 due to a full quarter of Vulcan cost with improved margins the second half of the year.
G&A expense was $22.7 million which was up from $20.5 million last quarter, primarily due to compensation expense associated with the passing of our former CEO and payroll taxes, which reset at the beginning of the year. G&A expense as a percentage of revenue was 9% this quarter, which was flat relative to last quarter.
Income from operations was $48.7 million and exceeded the midpoint of our guided range by $7.7 million. Operating margin for the quarter was 20%, which was approximately 300 basis points better than the midpoint of our guided range. We're very pleased with our ability to drive continued leverage in the business while investing for growth. EPS for the quarter was $0.36 a share, which was $0.095 better than the midpoint of our guided range.
Now let's turn to the balance sheet. We finished the quarter with $460 million in cash and short-term investments, reflecting $149 million of net cash used for the Vulcan acquisition. Accounts receivable was $168 million and total deferred revenue was $808 million. Current deferred revenue was $633 million, which gives us a lot of visibility into expected revenue over the next 12 months.
We generated a record $87 million of unlevered free cash flow during the quarter. While this quarter's result was influenced by seasonal timing of collections from Q4 sales, we feel confident that we can continue to expand our operating and free cash flow margins over the ensuing years as we have done so every year since our IPO.
During the quarter, we repurchased 1.6 million shares of our common stock for an aggregate purchase price of $60 million. In total, we're purchased almost 4.3 million shares for $175 million since November of 2023 and have $125 million of remaining authorization.
Now, with the results of the quarter behind us, I'd like to discuss our outlook for Q2 in the full year 2025. For the second quarter, we currently expect revenue to be in the range of $241 million to $243 million. Non-GAAP income from operations to be in the range of $43 million to $45 million. Non-GAAp net income to be in the range of $36 million to $38 million, assuming interest expense of $7.1 million, interest income of $4 million, and a provision for income taxes of $3.2 million. And non-GAAP diluted earnings per share to be in the range of $0.29 to $0.31 a share, assuming 123 million fully diluted weighted average shares outstanding.
For the full year, we currently expect calculated current billings to be in the range of $1.025 billion to $1.045 billion. Revenue to be in the range of $970 million to $980 million. Non-GAAP income from operations to be in the range of $205 million to $215 million. Non-GAAP net income to be in the range of $178 million to $188 million, assuming interest expense of $28.4 million, interest income of $16.8 million, and provision for income taxes of $13.1 million.
Non-GAAP diluted earnings per share would be in the range of $1.44 to $1.52 per share, assuming $123.5 million fully diluted weighted average shares outstanding, and unlevered free cash flow in the range of $265 million to $275 million.
While we're off to a great start for the year and see real momentum in our business, there's clearly more economic uncertainty in the market now than at the beginning of the year. As a result, we are taking an incrementally more cautious approach with our outlook today. Specifically, we extended the cautious first-half outlook we provided in February in the US public sector for the remainder of the year. We also acknowledge that recent US policy actions have the potential to reduce visibility in our enterprise business, which could lengthen sales cycles.
It's important to note that demand creation and top of the funnel remains strong. A revised guidance today simply reflects the fact that the world is more uncertain and visibility into when deals close has become murkier since we provided our initial guide in February. We believe our updated guidance appropriately balances these potential geopolitical and economic risks and sets us up for success the remainder of the year.
Our guidance for operating income remains unchanged and reflects our emphasis on profitable growth. We expect operating margins to generally increase throughout the year, resulting in an approximate 100 basis points improvement over 2024, even as we absorb the costs associated with the Vulcan acquisition. Notably, our discipline and approach to balanced growth has enabled us to manage the business in a way that allows us to continue to drive strong margins in multiple environments.
As a reminder, we typically update our leveraged free cash flow with our Q2 call, but we continue to expect to deliver $265 million to $275 million of unlevered free cash flow in 2025.
With that said, Mark and I would like to thank everyone for joining the call today. We're very excited about the opportunity ahead and look forward to updating you throughout the year. We hope to see you at the JPMorgan and D.A. Davison conferences in the coming weeks.
And we'd now like to open the call for questions.

Question and Answer Session

Operator

(Operator Instructions) Brian Essex, JPMorgan.

Brian Essex

Hi, good afternoon. Thank you for taking the question. Congrats to both of you on the CEO appointment. It's great to see. Maybe Steve, if you could maybe touch on the guidance and what you're seeing in the business that's driving that incremental caution? I mean, you mentioned that things from APRA perspective, a little bit more volatile perhaps than we saw at the end of the year.
But what specifically are you seeing in the business and what's the philosophy around the level of incremental conservatism that you're baking in the guide? Thank you.

Steve Vintz

Sure, Brian, good question. As we mentioned earlier, we did revise our CCB outlook for the year due to ongoing macro uncertainty, and that's most notably in our public sector business. We're off to a terrific start for the year. We're pleased with the print in the quarter and top of the funnel remains exceptionally strong.
And the one thing I want to be very clear about today is that demand gen in the quarter exceeded our own expectations. And there's certainly more appetite for a broader platform play and expansion with our own customer base. That said, we have to acknowledge what's playing out and potentially could come our way.
Subsequent to our last call, we've seen an acceleration in DOGE-related activities and disruption from a personnel perspective, a lot of disruption, and there's several notable open leadership roles in Fed, and all of that creates a confluence of activities and creates less visibility in our business short term.
We spent a lot of time analyzing and scrubbing our pipeline and taking a data-driven approach to provide our outlook today. We disaggregated our opportunities and looked at them by geo, industry, such as Fed and other sites of customer, and we're assuming longer lead times here for procurement decisions.
This is most notably in our public sector business, but we're also applying that level, some level of caution to our enterprise business which has the potential to be disrupted due to tariffs and geopolitical events. We think this is a prudent approach and we think this sets us up well for the rest of the year.

Brian Essex

Does that impact your free cash flow, because you pretty much reiterated your adjusting for Vulcan, which you said would hit another free cash flow about $20 million. You're pretty much reiterating your Vulcan adjusted free cash flow for the year?

Steve Vintz

Yes, that's a great point. We are a balance grower and we have a strong track record of success, expanding our operating margins, and so there's a lot of natural leverage in the business, and we are reiterating our outlook despite the visibility that comes with some of these recent policy actions, but we're reiterating our outlook for operating income and free cash flow.

Brian Essex

Excellent. Thank you so much.

Operator

Saket Kalia, Barclays.

Saket Kalia

Okay, great. Hey, guys, thanks for taking my question here. Very helpful answer earlier there, Steve, on why maybe the CCB guide is changing. But Mark, maybe for you, just to make sure the question is asked, can we just talk a little bit about the competitive environment here in VM? I think we all know your established players, but curious what you're seeing from other players here like Endpoint, for example, in VM?

Mark Thurmond

Sure, no, absolutely great question. When you take a look at Q1, it was actually an extremely strong quarter in regards to the competitive environment. If you kind of break this up and look at just the pure-play VM players, so take a look at Qualys and Rapid. We had historically high win rates.
A couple of the deals that I referenced in the beginning of the call were seven-figure replacements of traditional VM players. So our compete level is extremely high, and that is continuing from the end of last year and now we're seeing it again this year. So extremely strong, very historically high win rates.
In regard to the endpoint player, say a CrowdStrike end or a Microsoft, same type of trend in regard to no massive shifts or changes in regard to the competitive dynamics. We do see them. We don't see them a significant amount of times, though, compared to obviously the traditional VM players. So our win rates are high. Our compete level is very high in that space.
And so we're very optimistic, especially, based on those seven-figure wins and I think as you know, it takes a lot to rip and replace an incumbent and to be able to do that on seven-figure deals. We were pretty excited about what we did in Q1.

Saket Kalia

Very helpful. Thanks, guys.

Operator

Andrew Nowinski, Wells Fargo.

Andrew Nowinski

Great, thank you for taking the question and congrats on both of your appointments to a co-CEO. I want to ask a question on your cloud business. So you talked about how cloud is a critical pillar of exposure management. So I'm wondering, do customers understand that cloud security and exposure management go hand in hand?
And really, what I'm trying to get is, how are you thinking about the impact of Google's acquisition of Wiz in the cloud space and the customers want to buy exposure management and cloud together? Does that make sense?

Steve Vintz

Sure, I'll start, and Mark may provide additional color. In short, the acquisition of Wiz, we think, creates certainly a market opportunity for us. It's clear that Google views Wiz way more than just a security business as it's widely believed in talking to some of these customers that we see more innovation perhaps on the Google platform will be used as a means to sell more workloads there than perhaps on other platforms.
So we're actively talking to customers in that regard and we're seeing the outsized growth in cloud. We talked about the record number of large seven-figure deals this quarter. We're seeing a lot of expansion opportunities within our own VM customer base, customers that are stepping up buying the larger exposure management platform, and cloud is an important part of that in their ability to assess other asset types.
So if you look at kind of the underlying trends of the business between VM and cloud and specifically exposure solutions, we're seeing a continuation of those trends. Real, strong growth certainly and exposure solutions with outsized growth and cloud and certainly lots of opportunities in our VM business, but we think we're still very early on. We're continuing to take and win share here and cloud is an important part of the exposure management story.

Mark Thurmond

And I will just add on to Steve's comments. It is definitely a net positive for us, right, when you have an acquisition of that size to a very dominant player. It does create a bit of uncertainty and so we definitely have heard that from our prospects, and they are coming to us where in the beginning when Wiz was a standalone, they might not have even included certain players in regards to RFPs and to do proof of values and proof of concepts.
We have seen over the last 3.5 weeks an increase in the amount of activity and being invited to participate in RFPs. We have customers that are saying, hey, before this might have been a locked-in Wiz deal, we're now opening it up. We want to look at options. We have a multi-cloud environment using Azure, AWS, OCI, and they do not want to get locked in.
So this is definitely going to be a net positive for us. And one thing I will highlight is this hybrid environment of being able to look not just at your cloud environment but be able to look at holistically these other asset types is a massive differentiator and that's kind of what exposure management and the Tenable One platform is all about. So we view this as a net positive moving forward.

Andrew Nowinski

Superb. Thanks, guys.

Operator

Mike Cikos, Needham.

Matt Calitri

Hey, guys, this is Matt Calitri on for Mike Cikos over at Needham. Thanks for taking our questions and I'd like to echo my congratulations to Steve and Mark.
On the calendar '25 guidance cut, can you help us think about how to quantify how much of that impact is in the public versus private sector, and can the move up market help combat any of this weakness you're projecting?

Steve Vintz

Sure, well, if you look at kind of the revision to our guidance today specifically on CCB, we say about two-thirds, approximately two-thirds is in US public sector, and then obviously the remaining third is in our enterprise business. Now look, we had a strong print. We transacted a record number of seven-figure deals. We're seeing momentum in the enterprise market with some of our highest conversion rates than we've ever seen, and new business was strong.
But we do have to recognize what potentially could come our way. It just feels like there's more uncertainty now since our February call than there was early in the year, and we think this is certainly the right approach to take, and we're pleased to see top of the funnel remain strong.

Matt Calitri

Understood. That makes sense. And then just generally in the US federal business, are budgets on hold or are there any sort of clarity coming up now that we're a couple of months into the new administration? How is FedRAMP impacting any of this? Just any general color would be helpful.

Steve Vintz

Yeah, I think it's really a question of visibility. When we talked at the beginning of the year, we provided an incrementally more cautious approach to our outlook and specifically the US public sector and that was really due to the change in the administration and the budget uncertainty surrounding continuing resolution and we said we would get less contribution from PubSec the first half of the year, most notably in Q1, and that played out as expected despite this sizable seven-figure deal that we closed on the defense side in federal.
As we look at the rest of the year, I think just more generally, there's just more uncertainty. There's been a lot of disruptions from a personnel perspective, certainly more so on the civilian side than the defense side, and we're just taking more of a cautious approach for the remainder of the year and just assuming longer lead times here.

Mark Thurmond

Yeah, and let me just kind of piggyback on that too. So when you take a look at what has gone on in regards to some of the DOGE cuts and also some of the leadership changes, right, there have been pretty significant leadership positions within the federal government, especially on the cyber side of the House that have not been filled yet.
And so while we're seeing a positive top of the funnel buildout, we now are FedRAMP-authorized for Tenable One, which is new here coming into Q2. We actually see huge opportunity for the consolidation. The biggest theme that's coming out of the federal government right now is what vendors can save us money, what vendors can consolidate multiple products onto a single platform.
So we actually feel good in the top of the funnel. But it really is what Steve hit on. It is just a challenging environment determining how deals are going to happen, when they're going to actually close, who's going to be processing and doing the mechanics of getting the deal done, and then getting some of these leadership positions done. So it is just a bit gray right now. We are optimistic about the business and Fed and PubSec, but we just need to get a little more clarity to be able to call the business.

Matt Calitri

Very helpful. Thanks so much.

Operator

Rob Owens, Piper Sandler.

Ethan Weeks

Great, thanks for taking my question. This is Ethan on for Rob this afternoon. There's been a lot of commotional industry recently around the potential end of funding for the CVE program. It seems that the funding's been extended for the time being, but what do you think the implications would be for Tenable or the VM industry more broadly if we were to see the funding end for that program in the future?

Steve Vintz

Sure, well, the minor back CVE program, there are some questions about funding, and then we were pleased to see funding get extended for the remainder of the year. I think the big takeaway here is that collaboration is really important and that's a program that's used as a means to facilitate sharing of vulnerabilities and exploits.
I think there will always be a need for that. We're one of the few companies that's able to contribute and add CVEs to that national database and program, we recognize that's an important effort. So we're here to serve and help customers and we're actively working with members at the highest level, both within the public sector as well as the private sector to see if there's a better approach here.
And certainly, the CVE program has had its limitations, right? There's been a proliferation of vulnerabilities. A lot of those vulnerabilities are categorized as critical or very critical, and so we certainly think there's a better opportunity here, and this is where we like to see better collaboration.

Ethan Weeks

Appreciate the color.

Operator

Patrick Colville, Scotiabank.

Patrick Colville

Thank you so much for taking my question. I guess, can I just ask a cheeky two-parter. So Steve or Mark, what are your strategic priorities for the next 100 days as Tenable co-CEOs? And then the second part, if I may, is I think in 4Q results, you mentioned that PubSec, US PubSec was 15% of revenue, so the guidance cut for 2025 is being largely attributed to US PubSec. Do I have my numbers right and if not, would you mind correcting me?
Thank you so much.

Steve Vintz

Yes, with regard to the latter, US PubSec is approximately 15% of our total sales, and so the revision to the top line today, we said a majority of it, about two-thirds of the revision is for US public sector, and we said we're also taking a bit of a cautious approach to enterprise where we continue to see great momentum and traction there.
And with regard to our priorities here, first, let me just say the co-CEO structure is one that we're very familiar with and reflects how we've been operating as a company really for the past year. We're committed to certainly expanding our market opportunities and to our mandate. Our roots are in vulnerability management, but the outgrowth of that is exposure management.
And so with that, there's, I would say, several opportunities. Number one, we're delivering incremental value to customers and so we see a lot of momentum with our exposure management platform. Exposure management platform is a catalyst to higher deal sizes. The ESPs this quarter were very high in part of those seven-figure deals that we announced, and we're using that really as the tip of the spear to be able to consolidate spend in areas like cloud, like web applications, like OT and other areas.
So that's certainly one bigger opportunity is to use the platform as a means to assess other asset types and do more first-party assessments.
The second thing is we recognize that the security market is fragmented and there's a lot of players and there's been vendor sprawl and so -- and no security company can possibly assess all these different asset types. So we're bringing the market here a more expanded version of our exposure management platform. That will include not only our first-party assessment data but also our third-party data that we can ingest from other security providers whether it's cloud security, application security, whatever it may be. So combining third-party data with our first-party assessment data really provides a broader set of exposure data for customers and help them remediate or mobilize their efforts to reduce risk.
The last thing here I will say is AI. AI is a force multiplier on the types of insights that we can deliver to customers. We think in the years to come, the real competitive mode here for exposure management and AI is kind of central to exposure management. It is not so much features and functionality that will be important, but the insights that you can deliver to customers.
So aggregating all that data from all those different asset types, both first-party and third-party assessment data to be able to integrate it in a way and combine vulnerabilities with threats and identities, is really a powerful offering. And it means to help customers not only identify risk where we've historically been focused but help them actually reduce risk and tie balls to actual fixes.
So you look for more here investments from us in AI, but certainly it's a big opportunity here and really you'll create more competitive mode and a catalyst for growth going forward.

Mark Thurmond

No, very well said, Steve, totally agree, and I think when you look at it from a go to market to keep it really basic and simple, we're going to be focused on continuing to drive the T1 message and positioning. With Eric Doerr now joining us from Google, I think you'll see a lot of fantastic innovation on the points that Steve just hit on.
When we talk about Tenable One, it is truly a very strong consolidation story that is resonating in the market right now. The second big piece is going to continue to be cloud, right? So cloud is part of Tenable One, it's the two big areas that we're going to go for from a go-to-market perspective.

Patrick Colville

Terrific. Thank you so much and looking forward to this next chapter.

Operator

Rudy Kessinger, D.A. Davidson.

Rudy Kessinger

Congrats, both of you, on the co-CEO roles. Hopefully I'm your last question on public sector, but with the two-thirds of the cut that is being attributed to public sector, I guess I'm curious, is that mostly just from less visibility on new deals or if you actually had any contracts that have been canceled or downsized? And if the answer is yes, what kind of notice did you have that they were being canceled? Did you kind of have a sense or were they kind of cut out of the blue?
Thank you.

Steve Vintz

Yeah, so commentary around Fed applies both to new as well as renewal, but more so the former than the latter. We have a longstanding relationship with the federal government. We serve every three-letter federal agency from defense to civilian to intel, and so we know this is a foundational piece of their program. As you probably know, just from looking at the headlines, some of the disruption that we've talked about from a personnel perspective has been more on the civilian side.
And so we've seen, certainly, lower rental dollars coming out of some of those civilian agencies that are seeing more disruption from those related actions. But going forward, we just see longer times, longer lead times here and cycle times to be able to close the opportunities.
Mark talked about our two newer products, Tenable One and cloud security getting FedRAMP authorized. We're seeing certainly a lot of market pull there and the three themes that we're focused on is to better serve the federal government, is really modernization. That's a big area of emphasis for them, consolidation, and then certainly, more efficiency in the platform strategy and approach that we have here certainly creates a lot more utility for a lot of our federal customers.
We'll take the next question, please.

Operator

Joseph Gallo, Jefferies.

Unidentified Participant

Hi, this is (inaudible) on for Joseph Gallo. Appreciate you taking our questions. So my question is, I guess, can you give us an update on how things are progressing with the channel and where you are on a sales quota rep carrying capacity basis and how we should think about additional go-to-market investments going forward that you haven't touched upon yet?

Mark Thurmond

Sure. When you take a look at the Q1 performance, the channel performed extremely well. I mean, the beautiful part of the Tenable distribution models, we are 100% channel, so we do all our business through the channel. So we saw great momentum in the channel in Q1. We saw excellent channel in business coming in from the partner community, so that was excellent.
We did add some sales capacity in Q1 and we will continue to evaluate looking at certain regions, theaters, and countries that are showing signs of growth. And if we see significant growth patterns, those are going to be some geographies that we might take a look at adding sales capacity throughout the year.

Unidentified Participant

Okay. Thanks. Appreciate the color.

Operator

Joshua Tilton, Wolfe Rsearch.

Patrick O'Neill

Hi, this is Patrick O'Neill on for Josh. Just a quick one for me. Can you talk a little bit about the progress you're seeing with Vulcan and maybe some anecdotes from -- early anecdotes from customers there and adoption? And then are we still thinking about $5 million contributions from Vulcan for this year? Thanks.

Steve Vintz

Yes, this is Steve. So yes, we said beginning of the year to contribute roughly a half a point of growth. That's roughly $5 million. That's more weighted towards the latter part of the year. So just to be mindful of what we acquired here from an IP perspective and it's very complimentary to our Tenable One platform. We now have the ability to ingest third-party data and findings and metadata from other security providers.
It will be in market with a more expansive Tenable One offering sometime in Q2. So the plan here is to kind of build some of these capabilities natively into our platform and then be in market sometime over the ensuing months and then we expect the contribution that I just mentioned earlier to be more weighted in the back half of the year.
And then obviously, the remediation capabilities is another important part of the platform. So very complimentary to what we do and we're seeing good traction out of the gate here, but obviously it had little lower contribution in Q1. The one thing I will mention is one of the seven-figure deals that we talked about here was a VM displacement that we had been chasing for really a couple of years now, and Vulcan was the catalyst for that displacement.
So we actually displaced the incumbent VM provider who is using us for VM and now will be turning to us for third-party data certainly over the ensuing months and so certainly creates a lot of expansion opportunities for us.

Patrick O'Neill

Perfect. Thank you.

Operator

Oscar Saavedra, Morgan Stanley.

Oscar Saavedra

Hi, guys. Thank you for taking my question and congrats to Steve and Mark. I guess for me it's just a quick one on -- it's great to see Tenable On being a strong driver of those large deals that you noted. Last quarter, I believe it was 40% of new business, sales was attributed to Tenable One. Any update on how that was this quarter?
And on the cloud security side, I think the footprint expansion was like more than double in Q4. Maybe an update on that? Thank you.

Steve Vintz

Yeah, so yeah, Tenable One. So first of all, the tail of the tape this quarter and the outperformance was because of Tenable One with traction and cloud and other areas of our business. So it continues to represent a sizeable percentage of our new business. This quarter was notably over 30%.
I think in Q4, it tends to tick a little higher just to budget slosh and it just tends to be a seamlessly stronger quarter for us. So certainly, seeing a lot of pull for Tenable One, ASPs are higher, anywhere from 50% to 90%, and usually the catalyst for a customer to move to Tenable One is this desire to do VM plus cloud or OT or identity or other there.
So certainly pleased with the continued momentum that we're seeing with the platform and we'll continue to add capabilities I talked about earlier, specifically with regard to Vulcan short term, the focus on adding third-party data, the ability to ingest that, as well as add remediation capabilities, remediation automation capabilities and mobilization capabilities.

Mark Thurmond

Yeah, I mean, the only thing I'll add there too, it's a phenomenal summary, is three buckets you really want to think about with Tenable One, phenomenal positioning in regard to driving new licensed business. Also from a competitive displacement when we talk about those seven-figure deals, one of the main factors that's allowing us to beat the competition and get into those accounts is Tenable One.
So allowing us to do big rip and replaces. And then the third is obviously the expansion in the installed base. And so those are the big drivers when you take a look at the Tenable One activity and growth, and we're going to continue to drive that throughout the year.

Oscar Saavedra

Awesome, very clear. Thank you very much.

Operator

Kingsley Crane, Canaccord Genuity.

Kingsley Crane

Thank you and echo my congrats. Thinking about the shift to exposure management for many companies that includes OT, how should we think about that ongoing ramp and OT? Are you getting more excited about that opportunity versus maybe two or three years ago? And then I'm curious what you're hearing from customers. Thanks.

Mark Thurmond

Yeah, you bet. So Q1 actually was a strong OT quarter and we're still seeing momentum there. So year-over-year growth was strong, very happy with the performance we're seeing there, and it goes back to the theme that we talked a little bit about. Every quarter, you're starting to see more of a pickup where OT is being more centralized into the Chief Security Officer into the CIO, and they want to be able to have that full visibility of the attack surface, obviously including the OT asset.
And so this is a driver for us that we still think will be very strong for us throughout 2025, being able to go in, consolidate, get the OT assets into Tenable One and continue to be a driver for us.

Kingsley Crane

Really helpful. Thank you.

Operator

Adam Borg, Stifel.

Adam Borg

Awesome and thanks so much for taking the question and congrats on the co-CEO structure. Maybe for Steve, just on Vulcan Cyber, I'd love to hear a little bit more on just the R&D priorities and the sales and marketing priorities. It's great to hear that you can bring some new stuff to market, but love to go a step deeper there. That'll be great. Thanks so much.

Steve Vintz

Yeah, I'll talk about the R&D priorities. Mark can chime in on the go-to-market priorities. It's really pretty straightforward. Vulcan adds -- it's very complimentary to Tenable One, as I mentioned earlier. It'll add third-party data into the platform. We'll have the ability to ingest data from other security providers and not just the basic findings but also the metadata: a lot of the network info, who's responsible. So we talked about this bigger focus on AI. Certainly, that will be a means for us to expand our exposure data on top of the 40,000-plus customers, on top of the 3 million-plus users and downloads of our Nessus products.
So we believe certainly one of the big modes here going forward for cyber, the ability to deliver exposure management at scale and evolve us from a system of record to a system of action will be AI and Vulcan is an important part of that aggregating that data, combining third-party data with first-party assessment data.
And then the other piece is really tying involves really on the back end to actual fixes and driving and automating remediation ops, that's a really important part of the value chain. There's a lot we can do from that perspective, from everything from identifying unmanaged applications and devices to then integrating on the back end with ticketing systems to be able to drive remediation and updates and then closing the loop back into the platform.
So that's a big area of focus for us going forward. Vulcan certainly a means to do so, but it's complementary to our whole exposure management mandate and certainly will help enable a lot of the AI initiatives.

Mark Thurmond

Very well said. And when you take a look at it from a go-to-market perspective, and we touched on this in Q1. The beautiful thing about Vulcan is we've actually been talking and positioning third-party ingests and automated remediation with our customers for quite a bit of time, so our sales force and our channel understand this talk track. They understand how these types of third-party assets and automated remediation flows into the Tenable One consolidation story.
So we do not have specialized sellers and specialized SEs. This is mainstreamed into our core sales force and is a core sales play that we're out there talking to customers, prospects, and channel in regard to what we're doing with Vulcan. And so as I discussed earlier, those two big themes of driving Tenable One and driving cloud security, Vulcan fits perfectly into the Tenable One story.

Adam Borg

Super clear. Thanks again.

Operator

Trevor Rambo, BTIG.

Trevor Rambo

Great, thanks for taking my question. This is Trevor on for Gray Powell. So going back to Tenable One, it was good to hear the positive commentary again around adoption and that cloud security drove a lot of the outperformance. Could you give us some more color on how the rest of the portfolio performed in relation to cloud security in the quarter? And then, is cloud security is something that you see going forward that's going to continue to outperform within that segment?

Mark Thurmond

Yeah, listen, at the end of the day, when you look at Tenable One, it was a very strong quarter and drove a lot of those seven-figure deals, which is outstanding. We touched a little bit in regards to some of the OT asset, it was very strong also. Cloud security, because there was obviously a bunch of very sizable deals and a seven-figure deal that was in there, and we do continue to see that type of activity and be able to (technical difficulty) security as part of Tenable One.
As we discussed earlier in this call, we also are optimistic in regards to the cloud security business because of some of the M&A activity that we had on before with Wiz and Google. And so we're already starting to see decent pipeline build from a cloud superior perspective as part of T1, once that acquisition was announced. So yeah, we expect those two to be big drivers for us in 2025.

Operator

Shrenik Kothari, Baird.

Zach Schneider

Great, thanks. This is Zach Schneider on for Shrenik. Thanks for taking the question and wanted to echo our congrats to Steve and Mark. So I wanted to ask about pricing, one thing we've picked up sort of across the sector is just some more aggressive discounting and pricing. So just curious if this is something you're seeing in customer conversations or if there's been any changes to your pricing strategy? Thanks.

Mark Thurmond

Yeah, no, we've actually seen no significant changes in pricing. We haven't modified or done anything different in regards to our pricing strategies. Obviously, our margins are extremely stable, so we expect our pricing strategy and the way we're discussing and managing all these different opportunities remain extremely consistent the way they did in Q1.

Zach Schneider

Great. Thank you.

Operator

We have reached the end of our question-and-answer session. This concludes today's teleconference. You may disconnect your lines at this time. Thank you for your participation.