QUALYS, INC. — Form 10-K Summary
Reporting period: Fiscal year ended December 31, 2019. The filing also reports unaudited fourth-quarter results. Amounts are in U.S. dollars.
Business context
Qualys provides cloud-based IT security, vulnerability management and compliance subscriptions through its Qualys Cloud Platform. It served more than 15,700 customers in over 133 countries. Revenue is primarily from renewable subscriptions, generally invoiced upfront and recognized over the service term. Vulnerability Management-related solutions represented 73% of 2019 revenue; channel partners generated 42%.
Financial performance and liquidity
| Metric | FY 2019 | FY 2018 |
|---|---|---|
| Revenue | $321.6 million | $278.9 million |
| Gross profit / gross margin | $252.1 million / 78% | $212.7 million / 76% |
| Operating income / margin | $72.3 million / 22% | $50.4 million / 18% |
| Net income / diluted EPS | $69.3 million / $1.68 | $57.3 million / $1.37 |
| Cash from operating activities | $160.6 million | $125.5 million |
| Capital expenditures | $27.6 million | $22.8 million |
Revenue rose 15%; operating income increased about 43%, while net income rose about 21%. Adjusted EBITDA, a non-GAAP measure, was $140.8 million (44% of revenue), versus $112.4 million (40%).
For Q4 2019, revenue was $84.7 million versus $74.2 million in Q4 2018; operating income was $19.5 million versus $12.9 million, and net income was $20.7 million versus $14.4 million.
At year-end, cash, cash equivalents and marketable securities totaled $418.4 million, including $298.9 million classified as cash and short-term securities. Current assets were $395.6 million and current liabilities $223.5 million. The filing reports no conventional borrowings; lease liabilities totaled $51.9 million, primarily operating leases. Cash provided by operations increased, supported in part by $28.1 million of growth in deferred revenue. Share repurchases used $86.4 million in 2019.
Material changes and unusual items
- Revenue growth came from both existing customers ($31.2 million increase) and new customers ($11.5 million contribution); international revenue grew 24% to $115.1 million.
- Gross margin improved to 78% from 76%. R&D increased 28% to $68.2 million, while sales and marketing was nearly flat at $70.8 million; operating expenses overall declined as a share of revenue.
- Income tax expense was $10.6 million, compared with a $1.8 million tax benefit in 2018. The change reflected higher pretax income and fewer excess stock-based compensation tax benefits.
- Qualys adopted lease accounting Topic 842 in 2019, recognizing right-of-use assets and lease liabilities. Topic 606 commission accounting also affects comparability: eligible new-business and upsell commissions are capitalized and amortized, unlike the prior immediate-expensing approach.
- The company acquired Adya’s software assets for $1.0 million. A $1.5 million Layered Insight revenue-milestone liability was reversed because the milestone was not met; additional acquisition-related payments were made.
- The board expanded the repurchase authorization by $100 million in October 2019. At year-end, approximately $128.5 million remained authorized. No cash dividends are planned.
Outlook, risks and contingencies
Management expects revenue growth from existing and new customers and plans continued investment in product development, sales and marketing, and data-center capacity. It forecast 2020 capital expenditures of $30–$35 million, including about $5 million for the Pune office. The 10-K does not provide a specific full-year 2020 revenue or earnings guidance range.
Key risks include dependence on Vulnerability Management subscriptions; competition and pricing pressure; customer renewal and cross-selling execution; cybersecurity incidents, service outages or data-center disruptions; privacy and regulatory changes; reliance on channel partners (42% of revenue); foreign-exchange exposure; and execution of international growth and acquisitions. Qualys stated that no legal proceedings were then expected to have a material adverse effect. The independent auditor issued unqualified opinions on the financial statements and internal control over financial reporting.
Investor verification priorities
- Track subscription renewals, bookings/deferred revenue and growth in non-VM products, given the 73% VM-related revenue concentration.
- Assess whether margin gains persist as R&D spending and planned sales, infrastructure and Pune-office investments increase.
- Review the tax-rate normalization and stock-based compensation effects when comparing reported earnings and cash generation.
- Monitor repurchases, equity compensation dilution, and lease commitments alongside cash and marketable securities.
- Check subsequent filings for realized revenue growth, foreign-exchange effects, security or service incidents, and material acquisition or regulatory developments.