QUALYS, INC. — FY2013 Form 10-K
Reporting period: Fiscal year ended December 31, 2013. The filing also presents unaudited fourth-quarter results. Qualys provides cloud-based security and compliance software through renewable subscriptions; Vulnerability Management generated 84% of FY2013 revenue.
Financial performance and liquidity
| Metric | FY2013 | FY2012 |
|---|---|---|
| Revenue | $108.0 million | $91.4 million |
| Gross profit / margin | $83.3 million / 77% | $73.0 million / 80% |
| Operating income / margin | $2.3 million / 2% | $3.0 million / 3% |
| Net income | $1.6 million | $2.3 million |
| Operating cash flow | $25.1 million | $22.0 million |
| Cash, cash equivalents and investments | $132.8 million | $118.4 million |
| Current and noncurrent deferred revenue | $76.4 million | $65.1 million |
Revenue grew 18% year over year. Adjusted EBITDA, a non-GAAP measure, was $17.4 million (16% of revenue), compared with $13.8 million (15%) in 2012. Capital expenditures were $13.7 million. Capital lease obligations were $0.8 million at year-end; the filing reports no material conventional debt.
Q4 FY2013: Revenue was $29.0 million, up about 18% from $24.7 million in Q4 FY2012. Operating income fell to $0.2 million from $1.6 million, and net income to $45,000 from $1.2 million.
Changes and management commentary
- Despite solid revenue growth, annual net income declined 29%; gross margin fell about 3 percentage points as infrastructure, data-center and capacity costs rose.
- Sales and marketing expenses increased 13% and general and administrative expenses increased 39%, reflecting hiring, sales expansion, stock compensation and public-company costs.
- Deferred revenue increased, while operating cash flow benefited materially from advance subscription billings and noncash depreciation and stock compensation.
- Management expects to continue investing in infrastructure, research and development, and sales and marketing. It estimated approximately $12 million of capital expenditures through December 31, 2014, and stated available liquidity and operating cash flow should fund operations for at least 12 months. No specific revenue or earnings guidance is provided in this filing.
- Management discontinued reporting Four-Quarter Bookings after FY2013; the final reported figure was $119.0 million, up 18%. It identified deferred revenue as a more useful sales-trend measure.
Risks, contingencies and unusual items
- Revenue remains concentrated in Vulnerability Management; newer solutions had comparatively modest revenue. Channel partners generated 39% of FY2013 revenue, and Dell represented 5%.
- Substantially all services were hosted across four third-party data centers, which were not yet fully redundant. Additional disaster-recovery capacity was under development, with full operation anticipated by year-end 2014.
- Profitability is thin and historically variable; continued spending, slower growth, subscription nonrenewals, competition, service interruptions, cyber incidents and execution risks could adversely affect results.
- Foreign exchange losses contributed to other expense. The company uses short-term forward contracts to mitigate some currency exposure; management said a 10% adverse currency move would not have a material impact.
- The company accrued $0.5 million for potential sales and use taxes, but could not estimate all possible exposure. It reported no material pending litigation or material contingency liabilities.
- Management concluded disclosure controls and internal control over financial reporting were effective at December 31, 2013. The independent auditor audited the financial statements but was not engaged to opine on internal-control effectiveness.
Investor verification points
- Confirm whether revenue growth and customer renewals can offset declining gross and operating margins, particularly the weak Q4 earnings result.
- Track deferred revenue, collections and operating cash flow, and distinguish subscription cash receipts from recognized revenue.
- Assess progress in diversifying revenue beyond Vulnerability Management and reducing channel and data-center concentration.
- Verify the timing, cost and operational effectiveness of the planned data-center disaster-recovery expansion and 2014 capital spending.
- Review potential dilution: 7.0 million options were outstanding at year-end, alongside shares reserved for future grants.