XML 26 R9.htm IDEA: XBRL DOCUMENT v3.24.0.1
The Company and Summary of Significant Accounting Policies
12 Months Ended
Dec. 31, 2023
Accounting Policies [Abstract]  
The Company and Summary of Significant Accounting Policies The Company and Summary of Significant Accounting Policies
Description of Business
Qualys, Inc. (the “Company”, "we", "us", "our") was incorporated in the state of Delaware on December 30, 1999. The Company is headquartered in Foster City, California and has wholly-owned subsidiaries throughout the world. The Company is a leading provider of cloud-based IT, security and compliance solutions that enable organizations to identify security risks to their IT infrastructures, help protect their IT systems and applications from ever-evolving cyber-attacks and achieve compliance with internal policies and external regulations. The Company’s cloud solutions address the growing security and compliance complexities and risks that are amplified by the dissolving boundaries between internal and external IT infrastructures and web environments, the rapid adoption of cloud computing and the proliferation of geographically dispersed IT assets. Organizations can use the Company’s integrated suite of solutions delivered on Qualys' Enterprise TruRisk Platform to cost-effectively obtain a unified view of their security and compliance posture across globally-distributed IT infrastructures.
Basis of Presentation
The accompanying consolidated financial statements and footnotes have been prepared in accordance with U.S. GAAP as well as the instructions to Form 10-K and the rules and regulations of the SEC. Certain prior year amounts have been reclassified to conform with the current year presentation. In the opinion of management, the accompanying consolidated financial statements reflect all adjustments, which include only normal recurring adjustments, necessary for the fair presentation of the Company’s consolidated financial position, results of operations and cash flows for the periods presented. The accompanying consolidated financial statements include the accounts of the Company and its wholly-owned subsidiaries. All intercompany transactions and balances have been eliminated upon consolidation.
Use of Estimates
The preparation of the consolidated financial statements in conformity with U.S. GAAP requires management to make certain estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of assets and liabilities at the date of the consolidated financial statements and the reported results of operations during the reporting period. The Company’s management regularly assesses these estimates, which primarily affect revenue recognition, allowance for credit loss, the valuation of goodwill and intangible assets, leases, stock-based compensation and income tax provision. Actual results could differ from those estimates and such differences may be material to the accompanying consolidated financial statements.
Concentration of Credit Risk
The Company invests its cash and cash equivalents with major financial institutions. Cash balances with any one institution at times may be in excess of federally insured limits. Cash equivalents are invested in high-quality investment grade financial instruments and are diversified. The Company has not experienced any losses in such accounts and believes it is not exposed to any significant credit risk.
Credit risk with respect to accounts receivable is dispersed due to the large number of customers. Collateral is not required for accounts receivable. As of December 31, 2023 and 2022, no customer or channel partner accounted for more than 10% of the Company's revenues and accounts receivable balance.
Cash, Cash Equivalents, Restricted cash and Short-Term and Long-Term Marketable Securities
Cash and cash equivalents include cash held in banks, highly liquid money market funds, and fixed-income U.S. Treasury and government agencies, all with original maturities of three months or less when acquired. The Company’s short-term and long-term marketable securities consist of fixed-income U.S. and foreign government agency securities, corporate bonds, asset-backed securities and commercial paper. Management determines the appropriate classification of the Company's investments at the time of purchase and reevaluates such designation at each balance sheet date. The Company classifies its marketable securities as either short-term or long-term based on each instrument's underlying remaining contractual maturity date.
As of December 31, 2023 and 2022, the Company had a restricted cash balance of $2.7 million, of which $1.5 million is related to cash held in escrow as part of the Blue Hexagon acquisition and $1.2 million in the form of a letter of credit issued to the landlord of the Company's California headquarter office lease as security deposit.
Cash equivalents are stated at cost, which approximates fair market value. Short-term and long-term marketable securities are classified as available-for-sale debt securities (AFS debt securities) and are carried at fair value. Unrealized gains and losses in fair value of the AFS debt securities are reported in other comprehensive income (loss). When the AFS debt securities are sold, cost is based on the specific identification method, and the realized gains and losses are included in other income (expense), net in the consolidated statements of operations. AFS debt securities are reviewed quarterly for impairment. An investment is considered impaired when its fair value is below its amortized cost. Declines in fair value from amortized cost for AFS debt securities that the company intends to sell or will more likely than not be required to sell before the expected recovery of the amortized cost basis are charged to other income (expense), net in the period in which the loss occurs. Otherwise, the credit loss component of the impairment is recorded as allowance for credit losses with an offsetting entry charged to other income (expense), net, while the remaining loss is recognized in other comprehensive income (loss).
Accounts Receivable
Accounts receivable are recorded at the invoiced amount and do not bear interest. The allowance for credit losses is determined on a collective basis where similar risk characteristics exist and on an individual basis when the Company identifies significant customers or invoices with collectability issues. The estimate for credit losses considers historical write-offs by aging category, that are adjusted for current conditions and reasonable and supportable forecasts of future losses. Any change in the assumptions used in analyzing credit losses may result in additional allowances being recognized in the period in which the change occurs. When the Company ultimately concludes that a receivable is uncollectible, the balance is written off against the allowance for credit losses. Payments subsequently received on such receivables are recognized in the period received. The allowance for credit losses recognized and write-offs charged against the allowance were not significant for the years ended December 31, 2023 and 2022. The balance of accounts receivable, net of allowance for credit losses was $146.2 million, $121.8 million and $109.0 million as of December 31, 2023, December 31, 2022 and December 31, 2021, respectively.
Non-marketable securities
In 2018, the Company invested $2.5 million in preferred stock of a privately-held company (the “Investee”). The fair value of the investment is not readily available, and there are no quoted market prices for the investment. The Company elected the measurement alternative to account for the investment at cost less impairment and will measure the investment at fair value when the Company identifies observable price changes. The investment is assessed for impairment annually or whenever events or changes in circumstances indicate that the fair value of the investment is less than carrying value. The investment is included in other noncurrent assets in the consolidated balance sheets. The Company has not received any dividends from the investment. During the second quarter of 2023, the Company identified an observable price change in the investment and recognized an immaterial unrealized loss in other income (expense), net of the consolidated statement of operations.
In 2019, the Company made an advance payment of $0.6 million to the Investee for it to perform certain technology development work, which should either be settled in the form of royalty fee charges when the technology materializes and is licensed to the Company or, otherwise, should be repaid to the Company in cash. The advance payment was recorded in other non-current assets in the consolidated balance sheet. During the fourth quarter ended December 31, 2021, the technology has not been developed and the Company decided to no longer pursue the development of the technology or the collection of the advanced amount. Accordingly, the entire amount of the advance payment was written off and recorded in the general and administrative expense during the year ended December 31, 2021.
Property and Equipment, net
Property and equipment are stated at cost less accumulated depreciation and amortization. Depreciation is computed using the straight-line method over the estimated useful lives of the assets, which range from three to five years. Leasehold improvements are amortized on a straight-line basis over the lesser of the estimated useful life of the asset or the remaining lease term.
The Company purchases physical scanner appliances and other computer equipment that are provided to some customers on a subscription basis. This equipment is recorded within property and equipment and the depreciation is recorded in cost of revenues over an estimated useful life of three years.
Upon retirement or disposal, the cost of assets and the related accumulated depreciation are removed from the accounts and any resulting gain or loss is reflected in the consolidated statements of operations. Repairs and maintenance that do not extend the life of an asset are expensed as incurred and major improvements are capitalized as property and equipment.
Leases
The Company leases certain offices, computer equipment and its shared cloud platform facilities under finance leases and non-cancelable operating leases. For both operating and finance leases, the Company recognizes a right-of-use asset, which represents the Company's right to use the underlying asset for the lease term, and a lease liability, which represents the present value of the Company's obligation to make payments arising over the lease term. Many of the Company's leases include rental escalation clauses, renewal options and/or termination options that are factored into the Company's determination of lease payments and lease terms when appropriate. The present value of the lease payments is calculated using the incremental borrowing rate of the underlying leases determined at lease commencement. As most of the Company's leases do not provide a readily determinable implicit rate, the Company determines an incremental borrowing rate using a portfolio approach based on the rate of interest that the Company would have to pay to borrow an amount equal to the lease payments on a collateralized basis over a similar term as the leases.
Where the Company is the lessee, the Company elects to account for non-lease components associated with its leases (e.g., common area maintenance costs) and lease components separately for substantially all of its asset classes, except for shared cloud platforms, for which the Company elected to combine lease and non-lease components. For leases with a term of one year or less, the Company has elected not to record the right-of-use asset or liability.
In arrangements where the Company is the lessor, the Company elected to apply the practical expedient to account for lease components (e.g., customer premise equipment) and non-lease components (e.g., service revenue) as combined components as revenue under ASC 606 as service revenues are the predominant components in the arrangements.
Impairment of Long-Lived Assets
The Company evaluates its long-lived assets, which consist of property and equipment, and intangible assets subject to amortization, for indicators of possible impairment when events or changes in circumstances indicate the carrying amount of an asset may not be recoverable. Impairment exists if the carrying amounts of such assets exceed the estimates of future undiscounted cash flows expected to be generated by such assets. Should an impairment exist, the impairment loss would be measured based on the excess carrying value of the asset over the asset’s estimated fair value. For the years ended December 31, 2023, 2022 and 2021, there was no impairment of long-lived assets.
Goodwill and Intangible Assets
Goodwill represents the excess of the purchase price over the fair value of the net tangible and identifiable intangible assets acquired in a business combination. Goodwill and indefinite-lived intangible assets are not amortized but tested for impairment at least annually or more frequently if certain circumstances indicate a possible impairment may exist. The goodwill impairment tests are performed at the reporting unit level. The Company’s operations are organized as one reporting unit.
In testing for a potential impairment of goodwill and the indefinite-lived intangible assets, the Company first performs a qualitative assessment to determine if it is more likely than not (a more than 50% likelihood) that the fair value of the reporting unit or the indefinite-lived intangible assets is less than their carrying amount. If the fair value is not considered to be less than the carrying amount, no further evaluation is necessary. Otherwise, the Company will perform a quantitative test. Goodwill impairment is measured as the amount by which the carrying value of the reporting unit or the indefinite-lived intangible assets exceeds their fair value. The Company performed the annual assessments on December 1, 2023 and 2022 and concluded there was no impairment of goodwill or the indefinite-lived intangible assets.
Software Development Costs
The costs to develop software that is marketed externally have not been capitalized as the Company believes its current software development process is essentially completed concurrent with the establishment of technological feasibility. As such, all related software development costs are expensed as incurred and included in research and development expense on the Company's consolidated statements of operations.
Costs related to software developed, acquired or modified for internal use are capitalized and included in other noncurrent assets on the consolidated balance sheets. Costs incurred during the preliminary planning and evaluation stage of the project and during the post implementation stages of the project are expensed as incurred. Costs incurred during the application development stage of the project are capitalized. These capitalized costs consist of internal compensation related costs and external direct costs. Costs related to software developed for internal use are amortized over an estimated useful life of three years and recorded in cost of revenues. Management evaluates the useful lives of these assets on an annual basis and tests for impairment whenever events or changes in circumstances occur that could impact the recoverability of these assets. As of December 31, 2023 and 2022, unamortized balances related to the Company's internally developed software costs are immaterial.
Asset Acquisitions and Business Combinations
The Company applies the provisions of ASC 805, Business Combinations, in accounting for its acquisitions. To determine whether transactions should be accounted for as asset acquisition or business combination, the Company evaluates whether substantially all of the fair value of gross assets included in a transaction is concentrated in a single asset (or a group of similar assets), resulting in an asset acquisition, if not, resulting in a business combination. In an asset acquisition, the cost of acquiring the asset group, including transaction costs, is allocated to the acquired assets or assumed liabilities based on their relative fair values without giving rise to goodwill. In a business combination, the Company recognize separately from goodwill the assets acquired and the liabilities assumed at their acquisition date fair values. Goodwill as of the acquisition date is measured as the excess of consideration transferred over the net of the acquisition date fair values of the assets acquired and the liabilities assumed. While the Company uses its best estimates and assumptions to accurately value assets acquired and liabilities assumed at the acquisition date as well as any contingent consideration, where applicable, its estimates are inherently uncertain and subject to refinement. As a result, during the measurement period, which may be up to one year from the acquisition date, the Company records adjustments to the assets acquired and liabilities assumed with the corresponding offset to goodwill. Upon the conclusion of the measurement period or final determination of the values of assets acquired or liabilities assumed, whichever comes first, any subsequent adjustments are recorded to its consolidated statements of operations.
Derivative Financial Instruments
Derivative financial instruments are utilized by the Company to reduce foreign currency exchange risks. The Company uses foreign currency forward contracts, with maturities of 13 months or less, to mitigate the impact of foreign currency fluctuations of certain non-U.S. dollar denominated net asset positions, to date primarily cash, accounts receivable and operating lease liabilities, as well as to manage foreign currency fluctuation risk related to forecasted transactions. Open contracts are recorded within prepaid expenses and other current assets, other noncurrent assets, accrued liabilities or other noncurrent liabilities in the consolidated balance sheets. Gains and losses resulting from currency exchange rate movements on non-designated forward contracts are recognized in other income (expense), net. Any gains or losses from derivatives designated as cash flow hedges are first recorded within accumulated other comprehensive income (“AOCI”) and then reclassified into revenue or operating expenses when the hedged item impacts the consolidated statements of operations. Cash flows related to these forward contracts are classified in the Company's consolidated statements of cash flows in the same manner as the underlying hedged transaction within cash flows from operating activities.
Stock-Based Compensation
The Company recognizes the fair value of its stock options, restricted stock units (“RSUs”) and stock purchase rights under the ESPP on a straight-line basis over the requisite service periods. The fair value of each stock option or stock purchase right is estimated on the date of grant using the Black-Scholes-Merton option pricing model and the fair value of each RSU is based on the Company's common stock price on the date of grant. Compensation expenses for performance-based stock options (“PSOs”) and performance-based restricted stock units (“PSUs”) are recorded based on expected achievement of the performance metrics specified in the grant, which are assessed on a quarterly basis. Forfeitures are estimated on the date of grant and revised if actual or expected forfeiture materially differs from original estimates.
Revenue Recognition
The Company derives revenues from subscriptions that require customers to pay a fee in order to access the Company’s cloud solutions. Contract period with customers generally are one year with occasional contracts ranging up to five years. The subscription fee entitles the customer to an unlimited number of scans for a specified number of networked devices or web applications and, if requested by a customer as part of their subscription, a specified number of physical or virtual scanner appliances. The Company’s physical and virtual scanner appliances are requested by certain customers as part of their subscriptions in order to scan IT infrastructures within their firewalls and do not function without, and are not sold separately from, subscriptions for the Company’s solutions. In some limited cases, the Company also provides certain computer equipment used to extend Qualys' Enterprise TruRisk Platform into its customers’ private cloud environment. Customers are required to return physical scanner appliances and computer equipment if they do not renew their subscriptions.
The Company determines revenue recognition through the following steps:
Identification of the contract, or contracts, with a customer;
Identification of the performance obligations in the contract;
Determination of the transaction price;
Allocation of the transaction price to the performance obligations in the contract; and
Recognition of revenue when, or as, the Company satisfies a performance obligation.
At the inception of a customer contract, the Company makes an assessment as to that customer's ability to pay for the services provided. The Company assesses collectability based on several factors, including credit worthiness of the customer along with past transaction history. In addition, the Company performs periodic evaluations of its customers’ financial condition.
Most of the Company’s revenue contracts are subscription based and contain a single performance obligation. The subscription contracts typically do not offer to the customers any future rights that would constitute material rights. Contract prices are generally composed of fixed consideration for a specific period of time as the Company in general does not offer refunds, volume rebates, customer loyalty programs or other forms of customer incentive payments. In limited situations, contract prices are contingent on future events, such as actual usage during the contract terms, which are accounted for as variable consideration and estimated based on the most likely amount of consideration that the Company is expected to be entitled to. Estimates are included in the contract price to the extent that it is considered probable that a significant reversal in the amount of cumulative revenue recognized will not occur when the uncertainty associated with the variable consideration is subsequently resolved. Such estimates are made at contract inception and updated periodically when additional information becomes available. A cumulative catch-up adjustment is made when there is a change in the estimate of variable consideration.
As the Company's cloud-based subscription services are delivered to customers electronically and over time, revenue is generally recognized ratably over the contract terms. When physical equipment is provided to the customers as part of the subscription service contract, the Company applies the practical expedient allowed under ASC 842 Leases to combine lease and nonlease components as a combined component to be accounted for under ASC 606, as the Company determined that the software subscription is the predominant component of the combined components. Therefore, the Company recognizes revenue for the physical equipment ratably over the related subscription period.
Contract modifications happen when there is an upsell, where the customers subsequently enter into contract with the Company to purchase additional product offerings or additional scans for additional devices. Contract modifications related to upsells are accounted for prospectively.
Deferred revenues consist of customer contracts billed or cash received that will be recognized in the future under subscriptions existing at the balance sheet date. The current portion of deferred revenues represents amounts that are expected to be recognized within one year of the balance sheet date.
Costs of shipping and handling charges incurred by the Company associated with physical scanner appliances and other computer equipment are included in cost of revenues. Sales taxes and other taxes collected from customers to be remitted to government authorities are excluded from revenues.
Incremental direct costs of obtaining a contract, which consist of sales commissions primarily for new business and upsells, are deferred and amortized over the estimated life of the customer relationship if renewals are expected and the renewal commission is not commensurate with the initial commission. The Company elected the practical expedient to expense commissions on renewals where the specific anticipated contract term amortization period is one year or less. The Company amortizes the capitalized commission cost as a selling expense on a straight-line basis over a period of five years. The Company classifies deferred commissions as current or noncurrent based on the timing of when it expects to recognize the expense. The current and noncurrent portions of deferred commissions are included in prepaid expenses and other current assets and other noncurrent assets, respectively, in its consolidated balance sheets.
Advertising Expenses
Advertising costs are expensed as incurred and are included in sales and marketing expense in the consolidated statements of operations. The Company incurred advertising costs of $3.0 million, $3.3 million and $2.1 million for the years ended December 31, 2023, 2022 and 2021, respectively.
Income Taxes
The Company provides for the effect of income taxes in its consolidated financial statements using the asset and liability method which requires the recognition of deferred tax assets and liabilities for the expected future tax consequences of events that have been included in the consolidated financial statements. Under this method, deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying amounts of existing assets and liabilities and their respective tax bases, net operating loss carryovers, and tax credit carry forwards. The Company regularly reviews its deferred tax assets for recoverability and establishes a valuation allowance if it is more likely than not that some portion or all of the deferred tax assets will not be realized. To make this assessment, the Company takes into account predictions of the amount and category of taxable income from various sources and all available positive and negative evidence about these possible sources of taxable income. The weight given to the potential effect of negative and positive evidence is commensurate with the extent to which the strength of the evidence can be objectively verified. Deferred tax assets and liabilities are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in the period that includes the enactment date.
Income tax expense or benefit is recognized for the amount of taxes payable or refundable for the current year and for deferred tax assets and liabilities for the tax consequences of events that have been recognized in an entity’s financial statements or tax returns. The Company must make significant assumptions, judgments and estimates to determine its current income tax provision (benefit), its deferred tax assets and liabilities, and any valuation allowance to be recorded against its deferred tax assets. The Company's estimates and assumptions may differ from the actual results as reflected on its income tax returns and will record the required adjustments when they are identified or resolved.
The Company applies a two-step approach to determining the financial statement recognition and measurement of uncertain tax positions. The Company only recognizes an income tax expense or benefit with respect to uncertain tax positions in its financial statements that the Company judges is more likely than not to be sustained solely on its technical merits in a tax audit, including resolution of any related appeals or litigation processes. To make this judgment, the Company must interpret complex and sometimes ambiguous tax laws, regulations and administrative practices. If an income tax position meets the more likely than not recognition threshold, then the Company must measure the amount of the tax benefit to be recognized by determining the largest amount of tax benefit that has a greater than a 50% likelihood of being realized upon effective settlement with a taxing authority that has full knowledge of all of the relevant facts. It is inherently difficult and subjective to estimate such amounts, as this requires the Company to determine the probability of various possible settlement outcomes. To determine if a tax position is effectively settled after a tax examination has been completed, the Company must also estimate the likelihood that another taxing authority could review the respective tax position. The Company must also determine when it is reasonably possible that the amount of unrecognized tax benefits will significantly increase or decrease in the 12 months after each fiscal year-end. These judgments are difficult because a taxing authority may change its behavior as a result of the Company's disclosures in its financial statements. The Company must reevaluate its income tax positions on a quarterly basis to consider factors such as changes in facts or circumstances, changes in tax law, effectively settled issues under audit, and new audit activity. Such a change in recognition or measurement would result in recognition of a tax benefit or an additional charge to the tax provision. The Company's policy is to recognize interest and penalties related to unrecognized tax benefits as a component of the provision for income taxes.
Comprehensive Income (Loss)
Other comprehensive income (loss) consists of unrealized gains (losses) on marketable securities, net of tax, and derivative financial instruments designated as cash flow hedges, net of tax, which are not included in the Company’s net income. Total comprehensive income includes net income and other comprehensive income (loss) and is included in the consolidated statements of comprehensive income.
Foreign Currency Transactions
The Company’s operations are conducted in various countries around the world and the financial statements of its foreign subsidiaries are reported in the U.S. dollar as their respective functional currency. Monetary assets and liabilities denominated in foreign currencies have been re-measured into U.S. dollars using the exchange rates in effect at the balance sheet date, and income and expenses are re-measured at average exchange rates during the period. Foreign currency re-measurement gains and losses and foreign currency transaction gains and losses are recognized in other income (expense), net.
Net Income Per Share
Basic net income per share is computed by dividing net income by the weighted-average number of shares outstanding during the period. Diluted net income per share is computed by dividing net income by the weighted-average number of shares outstanding plus potentially dilutive shares outstanding during the period. The potentially dilutive shares are computed by applying the treasury stock method to the Company's stock options, RSUs and the stock purchase rights under the ESPP. Any potential shares that would be anti-dilutive are excluded from the computation of diluted net income per share.
Recently Adopted Accounting Pronouncements
None.
Recently Issued Accounting Pronouncements Not Yet Adopted
In November 2023, the Financial Accounting Standards Board ("FASB") issued Accounting Standards Update ("ASU") 2023-07 requiring enhanced segment disclosures. The ASU requires disclosure of significant segment expenses regularly provided to the chief operating decision maker ("CODM") included within segment operating profit or loss. Additionally, the ASU requires a description of how the CODM utilizes segment operating profit or loss to assess segment performance. The requirements of the ASU are effective for annual periods beginning after December 15, 2023, and interim periods within fiscal years beginning after December 15, 2024. The Company's annual reporting requirements will be effective for fiscal 2024 and interim reporting requirements will be effective beginning with the first quarter of fiscal 2025. Early adoption is permitted and retrospective application is required for all periods presented. The Company is in the process of analyzing the impact of the ASU on related disclosures.
In December 2023, the FASB issued ASU 2023-09 requiring enhanced income tax disclosures. The ASU requires disclosure of specific categories and disaggregation of information in the rate reconciliation table. The ASU also requires disclosure of disaggregated information related to income taxes paid, income or loss from continuing operations before income tax expense or benefit, and income tax expense or benefit from continuing operations. The requirements of the ASU are effective for annual periods beginning after December 15, 2024. Early adoption is permitted and the amendments should be applied on a prospective basis. Retrospective application is permitted. The Company is in the process of analyzing the impact of the ASU on related disclosures.
The Company does not believe any other new accounting pronouncements issued by the FASB that have not become effective will have a material impact on its consolidated financial statements.