QUALYS, INC. — 2012 Form 10-K Summary
Business context and reporting period
Annual report for the fiscal year ended December 31, 2012; the filing also presents unaudited quarterly results, including Q4. Qualys provides cloud-based security and compliance subscriptions, primarily renewable annual plans. Vulnerability Management generated 87% of 2012 revenue. The company reported more than 6,150 customers in over 100 countries and completed its IPO in October 2012.
Financial performance and position
| Metric | 2012 | 2011 |
|---|---|---|
| Revenue | $91.4 million | $76.2 million |
| Gross profit / gross margin | $73.0 million / 80% | $63.0 million / 83% |
| Operating income / margin | $3.0 million / 3% | $2.9 million / 4% |
| Net income | $2.3 million | $2.0 million |
| Operating cash flow | $22.0 million | $17.2 million |
| Cash, cash equivalents and short-term investments at year-end | $118.4 million | $24.5 million |
| Current and noncurrent deferred revenue at year-end | $65.1 million | $51.4 million |
Revenue rose 20%. Four-quarter bookings, a company-defined non-GAAP measure, increased 19% to $101.2 million; Adjusted EBITDA increased to $13.8 million, or 15% of revenue, from $10.4 million, or 14%. These non-GAAP measures are supplements, not substitutes for GAAP results.
Q4 2012: Revenue was $24.7 million, versus $20.7 million in Q4 2011. Operating income was $1.6 million, versus an operating loss of $43,000; net income was $1.2 million, versus a net loss of $651,000. Quarterly figures are unaudited.
Year-end current assets were $147.4 million and current liabilities $67.5 million. Capital lease obligations totaled approximately $2.0 million; the equipment credit line had expired and had no outstanding borrowings at year-end. Capital expenditures were $11.2 million. The company reported no cash dividends.
Material changes versus prior period
- Revenue growth accelerated to 20% from 16% in 2011. Existing customers contributed $7.8 million of 2012 revenue growth and new customers $7.4 million.
- Gross margin declined three percentage points to 80%, primarily reflecting higher data-center capacity and related infrastructure costs. Cost of revenue increased 39%.
- Operating expenses increased 17% overall, led by sales and marketing (+20%) and general and administrative (+36%); operating margin decreased from 4% to 3%.
- Operating cash flow increased by $4.8 million, with deferred revenue growth a significant source of cash. Investing cash outflow included $83.5 million invested in short-term securities, largely from IPO proceeds.
- The IPO raised approximately $84.5 million net of offering costs as reported in the cash-flow statement; convertible preferred stock converted to common stock, and year-end stockholders’ equity became positive at $91.6 million.
Outlook, risks, contingencies and unusual items
- Management gave no quantified revenue or earnings guidance. It expected to spend approximately $12 million on capital expenditures through 2013, mainly for infrastructure, and stated existing liquidity and operating cash flow should fund operations for at least 12 months.
- Management expected continued investment in research and development, sales and marketing, data-center capacity, and public-company compliance costs. It cited expansion of the platform, cross-selling additional solutions, new-customer acquisition and international reach as growth priorities.
- Key risks include dependence on Vulnerability Management, competition, customer renewals and channel partners, execution in newer products, foreign-exchange exposure, and service disruption. Substantially all services were hosted at two third-party data centers that were not redundant; Qualys planned additional facilities in 2013 for capacity and disaster recovery.
- Sales-tax exposure of $0.4 million was accrued at year-end; the company said potential additional exposure could not be assessed clearly, though management did not expect it to be material. No material contingency liabilities or material adverse legal proceedings were reported.
- The company restated prior financial statements to correct a 2010 income-tax provision error related to a French subsidiary. Management characterized the underlying control issue as a significant deficiency, not a material weakness. Management concluded disclosure controls were effective at the reasonable-assurance level; its Section 404 internal-control assessment was still in process.
- The company reported net income for each of 2010–2012 but losses in Q4 2011 and Q1–Q2 2012, citing elevated sales and marketing investment. Management cautioned profitability may not be sustained.
Important facts for investors to verify
- Whether deferred revenue, bookings growth and customer renewals support continued revenue growth, and whether revenue concentration in Vulnerability Management can decline.
- Whether infrastructure investment restores gross margin and whether planned data-center additions improve resilience on schedule.
- Cash-flow quality: the contribution of deferred revenue and the distinction between operating cash flow, capital spending and IPO-funded investment purchases.
- Progress on remediating the tax-related control deficiency and results of subsequent internal-control testing.
- Potential dilution from outstanding options and future equity awards; the filing reported 6.5 million options outstanding at year-end.