QUALYS, INC. — Q2 2013 Form 10-Q Summary
Business context and reporting period
Qualys provides cloud-based security and compliance subscriptions through its QualysGuard platform. This unaudited filing covers the quarter and six months ended June 30, 2013, compared with the same 2012 periods. Subscriptions are generally renewable annually, invoiced upfront, and recognized as revenue over the subscription term.
Key financial metrics
| Metric | Q2 2013 | Q2 2012 | Six months 2013 | Six months 2012 |
|---|---|---|---|---|
| Revenue | $26.3M | $22.2M | $51.2M | $43.4M |
| Gross profit | $20.4M | $17.6M | $39.5M | $34.6M |
| Gross margin | 77% | 79% | 77% | 80% |
| Operating income (loss) | $0.9M | ($0.2M) | $0.6M | ($0.3M) |
| Net income (loss) | $0.9M | ($0.3M) | $0.3M | ($0.6M) |
| Diluted EPS | $0.02 | ($0.05) | $0.01 | ($0.10) |
| Operating cash flow | Not presented separately | Not presented separately | $12.9M | $10.0M |
- Revenue grew 18% in both the quarter and first half. Management attributed growth primarily to new customer subscriptions and increased purchases by existing customers.
- Adjusted EBITDA, a non-GAAP measure, was $4.5M (17% of revenue) in Q2 and $7.3M (14%) for the first half, compared with $2.5M (11%) and $4.8M (11%), respectively, in 2012.
- At June 30, cash and cash equivalents were $68.6M; short- and long-term investments totaled $57.8M. Cash, cash equivalents and investments together were $126.5M, including $1.8M held outside the U.S. Management said liquidity and operating cash flows should fund operations for at least 12 months.
- Capital lease obligations totaled $1.3M, including $1.1M current. Contractual obligations totaled $13.5M, comprising operating leases ($10.7M), capital leases ($1.4M), and maintenance obligations ($1.5M). The filing reports no off-balance-sheet arrangements.
- Current and noncurrent deferred revenue totaled $67.7M. Current liabilities were $73.8M; total liabilities were $84.1M.
Material changes versus the prior comparable period
- Profitability improved from losses in the 2012 comparison periods to modest net income in Q2 and the first half of 2013.
- Gross margin declined by 2 percentage points in Q2 and 3 points in the first half. Cost of revenue rose faster than revenue, mainly due to data-center and scanner depreciation, operations staffing, data-center costs, and software maintenance as the company expanded capacity.
- For the first half, R&D expense increased 3%, sales and marketing increased 7%, and G&A increased 41%. G&A growth reflected additional personnel and public-company infrastructure, insurance, director and other fees, and professional services.
- Cash and investments increased from $118.5M at December 31, 2012, to $126.5M at June 30, 2013. Investing cash flow included substantial investment purchases and maturities; it should not be interpreted as operating cash generation.
- Four-Quarter Bookings, a non-GAAP metric defined as trailing-four-quarter revenue plus the change in current deferred revenue, were $109.0M, up 16% year over year, versus $94.0M and 24% growth a year earlier.
Outlook, commentary, risks and unusual items
- No specific numeric forward guidance for future revenue or earnings is provided in the supplied filing text. Management expects absolute spending to rise in data-center capacity, R&D, sales and marketing, and G&A.
- Qualys derived 85% of first-half 2013 revenue from QualysGuard Vulnerability Management, versus 88% a year earlier. Channel partners generated approximately 39% of first-half revenue; Dell represented 5%.
- Management cited continued demand and revenue growth, while warning that profitability may not be sustained as the company invests in growth. The filing highlights subscription renewal dependence, long and variable sales cycles, competition, execution and scaling needs, and the possibility that cloud-security adoption may not meet expectations.
- Service delivery is concentrated in two third-party data centers, which were not then redundant; the company planned additional facilities in 2013 to add capacity and disaster-recovery capability. Cybersecurity incidents, outages, product defects, and data privacy or regulatory changes could affect operations and customer retention.
- Foreign exchange exposure includes euro, pound, and yen balances. The company used short-term forward contracts that were not designated as hedges; management said a 10% adverse currency move would not be material to financial condition, results, or cash flows.
- Other income in Q2 included $0.2M of proceeds from a negotiated settlement. The company recorded a $0.4M sales-tax liability and said it could not estimate potential exposure beyond accrued amounts. It reported $3.1M of unrecognized tax benefits.
- The company reported no material pending legal proceedings and no material contingency accruals other than sales and other taxes. Management considered disclosure controls effective as of June 30, 2013; the filing also describes a prior significant control deficiency related to a tax-provision restatement, while stating no material change in internal control during this quarter.
Important facts for investors to verify
- Whether revenue growth, renewal rates, bookings, and deferred revenue continue to support the subscription business, particularly given the high concentration in vulnerability management.
- Whether infrastructure investment stabilizes or further pressures gross margins, and whether growing operating expenses translate into durable operating profits and cash flow.
- Whether the planned data-center expansion and disaster-recovery capability were completed, and whether service availability and security risks are adequately managed.
- The extent of potential sales-tax and income-tax exposures beyond recorded liabilities, and progress in maintaining effective financial controls following the prior tax-related deficiency.
- Whether channel-partner dependence, foreign currency movements, competition, and customer adoption of cloud security solutions affect future growth or margins.