Qualys, Inc. — Q2 2014 Form 10-Q
Reporting period: Three and six months ended June 30, 2014; year-over-year comparisons are with the corresponding 2013 periods. Qualys sells cloud-delivered security and compliance subscriptions, primarily on annual renewable terms, with revenue recognized over the subscription period. Vulnerability Management generated 82% of first-half revenue, down from 85% a year earlier.
Financial performance
| Metric | Q2 2014 | Q2 2013 | First half 2014 | First half 2013 |
|---|---|---|---|---|
| Revenue | $32.3 million | $26.3 million | $62.7 million | $51.2 million |
| Gross profit / margin | $25.1 million / 78% | $20.4 million / 77% | $48.6 million / 78% | $39.5 million / 77% |
| Operating income / margin | $1.8 million / 6% | $0.9 million / 3% | $1.5 million / 2% | $0.6 million / 1% |
| Net income | $1.7 million | $0.9 million | $1.3 million | $0.3 million |
| Adjusted EBITDA, non-GAAP | $7.2 million (22% margin) | $4.5 million (17%) | $11.9 million (19%) | $7.3 million (14%) |
| Operating cash flow | Not presented by quarter in the filing | $15.2 million | $12.9 million |
Q2 revenue grew 23% year over year; first-half revenue grew 22%. Management attributed growth to new customer subscriptions and increased purchases by existing customers. First-half growth included $8.1 million from U.S. customers and $3.4 million from customers outside the U.S. Operating expenses rose as the company expanded sales and marketing, research and development, and general and administrative staffing. Stock-based compensation was $4.6 million for the first half, versus $2.2 million a year earlier.
Liquidity, balance sheet and cash flow
- At June 30, cash, cash equivalents and investments totaled $143.8 million, including $41.7 million cash and equivalents, $67.7 million short-term investments and $34.4 million long-term investments. Total current assets were $142.9 million against current liabilities of $82.2 million.
- Operating cash flow was $15.2 million. Investing activities used $18.4 million, including $6.5 million of capital expenditures and net investment purchases; financing activities provided $2.6 million. Cash and equivalents decreased $0.7 million in the six months.
- Total liabilities were $92.5 million, including $80.6 million of deferred revenue. Capital lease obligations were $0.3 million current, with no noncurrent balance; the filing reports no material borrowing debt.
- Management said existing cash, investments and operating cash flow should fund operations for at least the next 12 months. Operating lease commitments totaled $8.7 million; total stated contractual obligations, including capital leases, were $9.0 million.
Changes, outlook and risks
- Gross margin improved about one percentage point year over year in both Q2 and the first half. Operating income and net income increased, although the company emphasized continued investment and warned that profitability is not assured.
- Management expects absolute spending on data-center operations, R&D, sales and marketing, and G&A to continue increasing. It released no specific financial guidance in the provided filing text; a clear numerical outlook is not provided.
- The company launched Continuous Security Monitoring in 2014 and said additional data-center facilities intended to support capacity and disaster recovery were expected to be fully operational by year-end 2014.
- Key risks include reliance on Vulnerability Management, customer renewals and channel partners; competition and uncertain adoption of cloud security; service availability and data-center concentration; cybersecurity or product failures; foreign-exchange exposure; and ability to scale while sustaining profitability. About 37% of first-half revenue came through channel partners, versus 39% in 2013.
- Sales and other tax exposure accrued was $0.5 million; the company said potential additional exposure could not be estimated, but did not expect a material adverse effect. Unrecognized tax benefits were $3.3 million. No material contingent liabilities or material adverse legal proceedings were reported. Q2 2013 other income included approximately $0.2 million from a negotiated settlement, a nonrecurring comparison item.
- Disclosure controls were considered effective as of June 30, 2014, and no material change in internal control over financial reporting was reported. The company was evaluating the impact of newly issued revenue-recognition guidance, effective for periods beginning after December 15, 2016.
Important facts for investors to verify
- Whether revenue growth continues and customers renew or expand subscriptions, particularly for Vulnerability Management.
- Whether operating-margin improvement persists as hiring, stock compensation and infrastructure investment increase.
- Progress toward making the additional data-center facilities operational by year-end 2014 and the resilience of service delivery.
- Trends in deferred revenue, operating cash flow, capital spending, channel-partner contribution and international currency exposure.
- Potential changes in tax exposure, unrecognized tax benefits and the adoption impact of the new revenue-recognition standard.