QUALYS, INC. — FY2021 Form 10-K Summary
Reporting period: Fiscal year ended December 31, 2021. Although the request identifies 2021 Q4, this 10-K reports full-year results; the supplied filing text does not provide separate Q4 financial results.
Business context
Qualys provides cloud-based IT security, vulnerability management, compliance, asset management, web application, and cloud/container security subscriptions. It primarily sells renewable subscriptions, generally invoiced upfront and recognized ratably over the service term. The company reported more than 10,000 customers worldwide. The filing describes one reportable segment.
Financial performance and liquidity
| Metric | FY2021 | FY2020 |
|---|---|---|
| Revenue | $411.2 million | $363.0 million |
| Gross profit / gross margin | $321.7 million / 78% | $283.7 million / 78% |
| Operating income / operating margin | $87.7 million / 21% | $96.7 million / 27% |
| Net income / net margin | $71.0 million / 17% | $91.6 million / 25% |
| Diluted EPS | $1.77 | $2.25 |
| Adjusted EBITDA (non-GAAP) / margin | $191.2 million / 46% | $169.5 million / 47% |
| Cash provided by operating activities | $200.6 million | $180.1 million |
| Cash, cash equivalents and marketable securities at year-end | $516.5 million | Not stated here as a combined figure |
Revenue grew 13%, primarily from renewals and subscription expansions, with contributions across the company’s solution categories. FY2021 revenue was $250.8 million from U.S. customers and $160.4 million from foreign customers; 41% was generated through partners. The company reported no customer accounting for more than 10% of revenue.
Operating cash flow rose year over year. Investing activities used $29.5 million, including $24.4 million of capital expenditures; financing activities used $107.9 million, including $130.0 million of share repurchases. Management said existing liquidity and expected operating cash flow should fund operations for the next 12 months and beyond. No debt borrowing is reported in the presented balance sheet; reported liabilities include deferred revenue and operating lease obligations. Operating lease payments totaled $54.2 million, of which $14.5 million was expected within 12 months. Planned 2022 capital expenditures were $25–$30 million.
Material changes versus FY2020
- Revenue increased $48.2 million, or 13%; U.S. revenue increased $20.3 million and foreign revenue $27.9 million.
- Gross margin remained 78%, while operating margin fell from 27% to 21% and net margin from 25% to 17%.
- General and administrative expense rose 64% to $76.3 million, largely because stock-based compensation increased by $28.7 million. The filing attributes $27.3 million of additional stock compensation to accelerated vesting following former CEO Philippe Courtot’s resignation due to health issues in March 2021. Sumedh Thakar became CEO in April 2021.
- Net income declined to $71.0 million from $91.6 million. The income tax provision increased to $18.4 million from $10.5 million; the reported effective tax rate rose to 20.6% from 10.3%, reflecting, among other factors, lower excess tax benefits from stock-based compensation.
- Adjusted EBITDA increased to $191.2 million from $169.5 million, but its margin decreased to 46% from 47%. This is a non-GAAP measure and should be assessed alongside GAAP results.
- Qualys introduced SaaS Detection and Response, Secure Enterprise Mobility, and Cybersecurity Asset Management, and acquired TotalCloud technology assets for $1.2 million.
Outlook, risks and contingencies
- Management expects revenue growth from new and existing customers to continue and plans continued investment in research and development, sales and marketing, and cloud infrastructure. The filing provides no specific FY2022 revenue or earnings guidance.
- Management said it had not incurred significant business disruption from COVID-19 to date, but noted uncertainty about future effects on the company, customers, and partners.
- Key risks include intense competition and pricing pressure; retaining subscriptions, expanding customer adoption, and attracting new customers; reliance on channel partners (41% of FY2021 revenue); cyber incidents and service interruptions; and dependence on third-party shared cloud platforms and providers.
- International operations expose the company to foreign exchange, regulatory, tax, and geopolitical risks. The company uses currency forward contracts; management stated a hypothetical immediate 10% adverse exchange-rate change, after hedging, would not materially affect financial condition, results, or cash flows.
- The filing describes the December 2020 Accellion file-transfer server incident: attackers obtained certain information, affected customers were notified as deemed required or appropriate, and the company incurred response costs. The company warns that future security incidents could lead to costs, liability, reputational harm, or lost sales.
- As of December 31, 2021, the company stated there was no reasonable possibility of a material loss from ongoing legal proceedings, individually or in aggregate. The financial statements and internal control over financial reporting received unqualified audit opinions; management and the auditor reported effective internal controls.
- Other notable items include a $0.6 million advance payment written off in 2021 after the related technology was not developed, and $271.8 million remaining under the $700 million share repurchase authorization at year-end. The company does not expect to pay dividends in the foreseeable future.
Important facts for investors to verify
- Review the full-year results and any separately reported Q4 results; this 10-K excerpt does not give standalone Q4 performance.
- Assess whether subscription renewals, expansion sales, and new customer growth can sustain revenue growth, particularly given the company’s partner channel exposure.
- Examine the durability of operating margins and the recurring impact of stock-based compensation, including the CEO-related accelerated vesting charge.
- Review cash generation against planned capital spending, repurchases, lease commitments, and other contractual obligations.
- Monitor cybersecurity, cloud-platform availability, privacy and regulatory exposure, foreign exchange, and tax audit developments.