QUALYS, INC. annual report, FY2014

QUALYS, INC. — Form 10-K Summary

Reporting period: Fiscal year ended December 31, 2014. The filing also reports unaudited fourth-quarter results. Unless stated otherwise, financial amounts are in U.S. dollars.

Business context

Qualys provides cloud-based security and compliance software on a subscription basis, generally through renewable annual contracts billed at the start of the term and recognized as revenue over the subscription period. Vulnerability Management remained the core offering, contributing 82% of 2014 revenue. The company reported more than 7,700 customers in over 100 countries; no customer represented more than 10% of annual revenue.

Key financial results

MetricFY 2014FY 2013Change or context
Revenue$133.6 million$108.0 millionUp 24%
Gross profit / margin$104.6 million / 78%$83.3 million / 77%Margin improved 1 percentage point
Operating income / margin$9.2 million / 7%$2.3 million / 2%Operating expenses rose 18%, slower than revenue
Net income$30.2 million$1.5 millionIncludes a $23.7 million deferred-tax-asset benefit
Diluted earnings per share$0.81$0.04Substantially affected by the tax benefit
Cash from operating activities$41.4 million$25.1 millionUp from the prior year
Free cash flow (non-GAAP)$27.4 million$11.4 millionAfter $13.9 million of property and equipment purchases and $0.1 million of capitalized software costs
Adjusted EBITDA (non-GAAP)$31.7 million / 24% of revenue$17.4 million / 16%Company-defined measure; not a GAAP substitute

Fourth-quarter revenue was $36.6 million, versus $29.0 million in Q4 2013. Q4 operating income was $4.2 million. Q4 net income of $25.9 million included a $22.3 million income-tax benefit; Q4 net income therefore substantially overstates earnings from operations for the quarter.

Liquidity, debt and balance sheet

  • Cash, cash equivalents and short-term investments were $127.2 million at year-end; long-term investments were $39.4 million, for total cash and investments of approximately $166.7 million.
  • Total assets were $260.0 million and stockholders’ equity was $151.8 million. Current deferred revenue was $81.1 million and noncurrent deferred revenue was $10.1 million.
  • No capital-lease obligations remained at December 31, 2014; the filing reports no material borrowing balance. Operating lease commitments totaled $10.0 million, including $4.4 million due within one year.
  • Management said existing cash, investments and operating cash flows should fund operations for at least the next 12 months.

Material changes and unusual items

  • Revenue growth accelerated to 24% in 2014 from 18% in 2013. Existing customers contributed $15.7 million of revenue growth, while customers added during 2014 contributed $9.9 million.
  • Operating margin improved as revenue grew faster than operating expenses. Research and development, sales and marketing, and general and administrative expenses nevertheless increased in dollars.
  • In Q4, Qualys recognized a $23.7 million tax benefit after concluding that certain U.S. federal and state deferred tax assets were more likely than not to be realized. It retained a $3.1 million valuation allowance for California deferred tax assets.
  • The company corrected an immaterial foreign-currency accounting error and revised 2012 and 2013 comparative figures. It said the correction did not materially affect prior periods or the trend of results.
  • Stock-based compensation increased to $10.5 million from $5.5 million in 2013.

Outlook, management commentary and risks

Management’s stated priorities include continued platform and product development, cross-selling additional solutions, adding customers, expanding internationally and investing in sales, marketing and infrastructure. Planned capital expenditures were approximately $17 million through December 31, 2015, primarily for infrastructure. The filing does not provide a specific numerical revenue or earnings forecast.

  • Revenue concentration in Vulnerability Management creates dependence on demand and renewals for that product; adoption of newer offerings was described as comparatively modest.
  • Subscription renewals, customer expansion, long sales cycles and channel partners are important to growth; channel partners generated 37% of 2014 revenue.
  • Service availability and reputation depend on third-party data centers. Qualys hosted substantially all services in four principal centers; the filing noted that the centers were not then redundant and customers could not be moved rapidly between them.
  • Other stated risks include cyber incidents or service interruptions, product defects or missed vulnerabilities, competition and pricing pressure, international and foreign-exchange exposure, privacy and regulatory changes, and reliance on third-party providers and a sole-source appliance manufacturer.
  • Management reported effective disclosure controls and internal control over financial reporting as of year-end. The independent auditor did not attest to internal-control effectiveness because Qualys qualified as an emerging growth company.
  • The company reported no legal proceedings expected to have a material adverse effect and no material contingency accruals at year-end. It had recorded a $0.5 million sales-tax liability and disclosed potential uncertainty in sales-tax obligations.

Important facts for investors to verify

  • How much of future earnings growth is supported by operations rather than the one-time $23.7 million tax benefit, and how sustainable are the deferred-tax-asset assumptions?
  • Whether revenue growth, renewals and customer expansion continue, and whether revenue becomes less dependent on Vulnerability Management and channel partners.
  • Whether infrastructure spending and planned data-center expansion improve resilience without materially weakening margins or cash generation.
  • How stock-based compensation, option dilution and the increase in outstanding shares affect per-share results.
  • Whether foreign-exchange, sales-tax, privacy and other disclosed contingencies create costs beyond current estimates.