The accompanying consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States of America (GAAP). The consolidated financial statements include our results of operations and those of our wholly-owned subsidiaries. All intercompany transactions and balances have been eliminated in consolidation.

The preparation of consolidated financial statements in conformity with GAAP requires management to make estimates, judgments and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. The management estimates include, but are not limited to the determination of the estimated economic life of perpetual licenses for revenue recognition, the determination of standalone selling prices in revenue transactions with multiple performance obligations, the estimated period of benefit for deferred contract acquisition and fulfillment costs, the useful lives and recoverability of long-lived assets, the valuation of allowance for doubtful accounts, the valuation of stock-based compensation, the fair value of assets acquired and liabilities assumed in business combinations, the incremental borrowing rate for operating leases, the fair value of the debt component of convertible senior notes and the valuation for deferred tax assets. We base our estimates on historical experience and on various other assumptions that we believe are reasonable. Actual results could differ from those estimates.

The COVID-19 pandemic is expected to result in a sustained global slowdown of economic activity that is likely to decrease demand for a broad variety of goods and services, including from our customers. Our operational and financial performance for the year ended December 31, 2020 was negatively impacted by the slowdown in activity associated with the COVID-19 pandemic and we expect that to continue going forward. Estimates and assumptions about future events and their effects cannot be determined with certainty and therefore require the exercise of judgment. As of the date of issuance of these financial statements, we are not aware of any specific event or circumstance that would require us to update our estimates, assumptions and judgments or revise the carrying value of our assets or liabilities. These estimates may change as new events occur and additional information is obtained and will be recognized in the consolidated financial statements as soon as they become known. Actual results could differ from those estimates and any such differences may be material to our financial statements.

Prior to the fiscal year beginning January 1, 2020, we have presented revenue on our consolidated statement of operations as products, maintenance and support and professional services revenue. For the year ended December 31, 2020, we have combined products and maintenance and support revenue as products revenue on our consolidated statement of operations as our customers continue to migrate from our on-premise products to our Insight Platform. Given this continued migration, we believe it is more relevant to categorize maintenance and support revenue together as products revenue. Prior periods have been adjusted to conform with this presentation.

We generate revenue primarily from: (1) subscription revenue from the sale of cloud-based subscriptions, managed services and content subscriptions associated with our software licenses, (2) term and perpetual software licenses, (3) maintenance and support associated with the purchase of software licenses and (4) professional services from the sale of our deployment and training services related to our solutions, incident response services, penetration testing and security advisory services.

We recognize revenue when a customer obtains control of promised products or services. The amount of revenue recognized reflects the consideration that we expect to be entitled to receive in exchange for these products or services. To achieve the core principle of this standard, we apply the following five steps:

We consider the terms and conditions of the contracts and our customary business practices in identifying our contracts. We determine we have a contract with a customer when the contract is approved, we can identify each party’s rights regarding the services to be transferred, we can identify the payment terms for the services, and we have determined the customer has the ability and intent to pay and the contract has commercial substance. We apply judgment in determining the customer’s ability and intent to pay, which is based on a variety of factors, including the customer’s historical payment experience or, in the case of a new customer, credit and financial information pertaining to the customer.

Performance obligations promised in a contract are identified based on the products and services that will be transferred to the customer that are both capable of being distinct, whereby the customer can benefit from the product or service either on its own or together with other resources that are readily available from third parties or from us, and are distinct in the context of the contract, whereby the transfer of the products or services is separately identifiable from other promises in the contract.

The transaction price is determined based on the consideration to which we expect to be entitled in exchange for transferring products or services to the customer. Variable consideration is included in the transaction price if, in our judgment, it is probable that no significant future reversal of cumulative revenue under the contract will occur.

In instances where the timing of revenue recognition differs from the timing of invoicing, we have determined our contracts generally do not include a significant financing component. The primary purpose of our invoicing terms is to provide customers with simplified and predictable ways of purchasing our products and services, not to receive financing from our customers or to provide customers with financing. Examples include invoicing at the beginning of a subscription term with revenue recognized ratably over the contract period.

If the contract contains a single performance obligation, the entire transaction price is allocated to the single performance obligation. Contracts that contain multiple performance obligations require an allocation of the transaction price to each performance obligation based on a relative standalone selling price (“SSP”).

Revenue is recognized at the time the related performance obligation is satisfied by transferring the promised product or service to a customer. Revenue is recognized when control of the products or services are transferred to our customers, in an amount that reflects the consideration that we expect to receive in exchange for those products or services.

•We generate cloud-based subscription revenue primarily from sales of subscriptions to access our cloud platform, together with related support services to our customers. These arrangements do not provide the customer with the right to take possession of our software operating on our cloud platform at any time. Instead, customers are granted continuous access to our cloud platform over the contractual period. Revenue is recognized over time on a ratable basis over the contract term beginning on the date that our service is made available to the customer. Our cloud-based subscription contracts generally have annual or multi-year contractual terms which are billed in advance of the annual subscription period and are non-cancellable.

•Managed services offerings consist of fees generated when we operate our software and provide our capabilities on behalf of our customers. Revenue is recognized on a ratable basis over the contract term beginning on the date that our service is made available to the customer. Our managed services offerings generally have annual or multi-year contractual terms which are billed in advance of the annual subscription period and are non-cancellable.

For our perpetual software licenses where the utility to the customer is dependent on the continued delivery of content subscriptions, the content subscription renewal options result in a material right with respect to the perpetual software license. As a result, the revenue attributable to the perpetual software license is recognized ratably over the customer’s estimated economic life of five years, which represents a longer period of time in comparison to the initial contractual period of maintenance and support. The estimated economic life of five years represents the period which the customer is expected to benefit from the material right. We estimated this period of benefit by taking into consideration several factors, including the terms and conditions of our customer contracts and renewals and the expected useful life of our technology.

Maintenance and support services are sold with our perpetual and term software licenses. As maintenance and support services are distinct from the perpetual and term software license, revenue attributable to maintenance and support services is recognized ratably over the contractual period.

All of our professional services are considered distinct performance obligations when sold stand alone or with other products. These contracts generally have terms of one year or less. For the majority of these arrangements, revenue is recognized over time based upon the proportion of work performed to date.

The majority of our contracts with customers contain multiple performance obligations. For these contracts, we account for individual performance obligations separately if they are distinct. The transaction price is allocated to the separate performance obligations on a relative standalone selling price (SSP) basis. We determine SSP of our products and services based on our overall pricing objectives using all information reasonably available to us, taking into consideration market conditions and other factors, including the geographic locations of our customers, negotiated discounts from price lists and selling method (i.e., partner or direct). When available, we use directly observable stand-alone transactions to determine SSP. When not regularly sold on a stand-alone basis, we estimate SSP for our products and services utilizing historical sales

data, including discounts from list price. The historical data is aggregated and analyzed by geographic location and selling method to establish a median or average price. Once SSP is established it is applied consistently to all transactions including that product or service utilizing a portfolio approach.

Contract liabilities consist of deferred revenue and include payments received in advance of performance under the contract. Such amounts are recognized as revenue over the contractual period consistent with the above methodology. For the year ended December 31, 2020, we recognized revenue of $225.7 million that was included in the corresponding contract liability balance at the beginning of the period presented. Deferred revenue that will be realized during the succeeding 12-month period is recorded as current, and the remaining deferred revenue is recorded as non-current.

We receive payments from customers based upon contractual billing schedules. Accounts receivable are recorded when the right to consideration becomes unconditional. Unbilled receivables include amounts related to our contractual right to consideration for both completed and partially completed performance obligations that have not been invoiced. If the right to consideration is based on satisfaction of another performance obligation in the contract other than the passage of time, we would record a contract asset. As of December 31, 2020 and 2019, unbilled receivables of $1.2 million and $0.8 million, respectively, are included in prepaid expenses and other current assets in our consolidated balance sheet. As of December 31, 2020 and 2019, we have no contract assets recorded on our consolidated balance sheet.

Our investments consist of commercial paper, corporate bonds, agency bonds, U.S. Government agencies and asset-backed securities. We classify our investments as available-for-sale and record these investments at fair value. When the fair value of an investment declines below its amortized cost basis, any portion of that decline attributable to credit losses, to the extent expected to be nonrecoverable before the sale of the security, is recognized in our consolidated statements of operations. When the fair value of the investment declines below its amortized cost basis due to changes in interest rates, such amounts are recorded in accumulated other comprehensive income (loss), and are recognized in our consolidated statement of operations only if we sell or intend to sell the security before recovery of its cost basis. Realized gains and losses are determined based on the specific identification method, and are reflected in our consolidated statements of operations.

Investments with an original maturity of greater than three months at the date of purchase and less than one year from the date of the balance sheet are classified as short-term and those with maturities of more than one year from the date of the balance sheet are classified as long-term in the consolidated balance sheet. We do not invest in any securities with contractual maturities greater than 24 months.

Accounts receivable are recorded at the invoiced amount, net of allowances for doubtful accounts for any potential uncollectible amounts. We maintain an allowance for doubtful accounts for estimated credit losses resulting from the inability of our customers to make required payments. Management regularly reviews the adequacy of the allowance based upon historical collection experience, the age of the receivable, an evaluation of each customer's expected ability to pay and current and future economic and market conditions. Accounts receivable are charged against the allowance for doubtful accounts after all means of collection have been exhausted and the potential for recovery is considered remote. Additions to the allowance for doubtful accounts are recorded in general and administrative expense in the consolidated statement of operations. We do not have any off-balance sheet credit exposure related to our customers. The following table displays the changes in our allowance for doubtful accounts:


	Amount
	(in thousands)
Balance at December 31, 2017	$	1,478
Additions, net of recoveries	740
Less write-offs	(594)
Balance at December 31, 2018	1,624
Additions, net of recoveries	2,241
Less write-offs	(2,036)
Balance at December 31, 2019	1,829
Additions, net of recoveries	1,997
Less write-offs	(575)
Balance at December 31, 2020	$	3,251

We provide credit to customers in the normal course of business. Collateral is not required for accounts receivable, but ongoing credit evaluations of customers’ financial condition are performed. We maintain reserves for potential credit losses. No single customer, including channel partners, accounted for 10% or more of our total revenues in 2020, 2019 or 2018 or accounts receivable as of December 31, 2020 or 2019.

We capitalize commission expenses paid to internal sales personnel and partner referral fees that are incremental costs to obtaining customer contracts. These costs are recorded as deferred contract acquisition costs on the consolidated balance sheets. Costs to obtain a contract for a new customer, up-sell or cross-sell are amortized on a straight-line basis over an estimated period of benefit of five years as sales commissions on initial sales are not commensurate with sales commissions on contract renewals. We determined the estimated period of benefit by taking into consideration the contractual term and expected renewals of customer contracts, our technology and other factors, including the fact that commissions paid on renewals are not commensurate with commissions paid on initial sales transactions. Commissions paid relating to contract renewals are deferred and amortized on a straight-line basis over the related renewal period. Costs to obtain a contract for professional services arrangements are expensed as incurred in accordance with the practical expedient as the contractual period of our professional services arrangements are one year or less. We periodically review the carrying amount of deferred contract acquisition costs to determine whether events or changes in circumstances have occurred that could impact the period of benefit.

We capitalize costs incurred to fulfill our contracts that relate directly to the contract, are expected to generate resources that will be used to satisfy our performance obligations and are expected to be recovered through revenue generated under the contract. Contract fulfillment costs are amortized on a straight-line basis over the estimated period of benefit and recorded as cost of products in our consolidated statement of operations.

Software development costs associated with the development of products for sale are recorded to research and development expense until technological feasibility has been established for the product. Once technological feasibility is established, all software costs are capitalized until the product is available for release to customers. To date, the software development costs have not been capitalized as the cost incurred and time between technological feasibility and product release was insignificant. As such, these costs are expensed as incurred and recognized in research and development expenses in our consolidated statements of operations.

Costs related to software developed, acquired or modified for internal use are capitalized. Costs incurred during the preliminary planning and evaluation stage of the project and during the post implementation stages of the project are expensed as incurred. Costs incurred during the application development stage of the project are capitalized. These capitalized costs consist of internal compensation related costs and external direct costs. Costs related to software developed for internal use are amortized over an useful life of 3 years. We capitalized $6.1 million, $6.1 million and $3.3 million of costs related to software developed for internal use in the years ended December 31, 2020, 2019 and 2018, respectively.

We determine whether an arrangement is or contains a lease at inception based on the unique facts and circumstances present. We evaluate the classification of a lease at inception and, as necessary, at modification. Operating leases are recognized on the consolidated balance sheet as right-of-use (ROU) assets, lease liabilities and, if applicable, long-term lease liabilities.

Operating lease ROU assets and liabilities are recognized at the present value of future lease payments at the lease commencement date. The implicit rate within our operating leases are generally not determinable and therefore we use the incremental borrowing rate at the lease commencement date to determine the present value of lease payments. The determination of our incremental borrowing rate requires judgment. We determine our incremental borrowing rate for each lease using our estimated borrowing rate, adjusted for various factors including level of collateralization, term and currency to align with the terms of the lease. The operating lease ROU asset also includes any lease prepayments and initial direct costs, offset by lease incentives. Certain of our leases include options to extend or terminate the lease. An option to extend the lease is considered in connection with determining the ROU asset and lease liability when it is reasonably certain we will exercise that option. An option to terminate is considered unless it is reasonably certain we will not exercise the option.

We have elected not to recognize on the balance sheet leases with terms of one year or less. For contracts with lease and non-lease components, we have elected not to allocate the contract consideration and to account for the lease and non-lease components as a single lease component.

We evaluate our long-lived assets for impairment whenever events or changes in circumstances indicate that the carrying value of these assets may not be recoverable. When such events or changes in circumstances occur, recoverability of these assets is measured by a comparison of the carrying value of the assets to the future net undiscounted cash flows directly associated with the assets. If such assets are considered to be impaired, the impairment recognized is the amount by which the carrying value exceeds the fair value of the assets. For the year ended December 31, 2020, there was no impairment of our long-lived assets.

We account for business combinations by recognizing the fair value of acquired assets and liabilities. The excess of the purchase price for acquisitions over the fair value of the net assets acquired, including other intangible assets, is recorded as goodwill. Determining the fair value of assets and liabilities assumed requires management to make significant estimates and assumptions, especially with respect to intangible assets. While we use our best estimates and assumptions as part of the purchase price allocation to accurately value assets acquired and liabilities assumed at the acquisition date, our estimates are inherently uncertain and subject to refinement. During the measurement period, which may be up to one year from the acquisition date, we may record adjustments to the fair value of these assets acquired and liabilities assumed with the corresponding offset to goodwill. Upon the conclusion of the final determination of the fair value of assets acquired or liabilities assumed any subsequent adjustments are recorded to the consolidated statements of operations. Acquisition-related transaction costs are expensed as incurred.

Goodwill is an asset representing the future economic benefits arising from other assets acquired in a business combination that are not individually identified and separately recognized. Goodwill is not amortized but is tested for impairment at least annually or more frequently when events or circumstances occur that indicate that it is more likely than not that an impairment has occurred.

We perform an annual goodwill impairment test on the last day of each fiscal year and whenever events or changes in circumstances indicate that the carrying amount of this asset may exceed its fair value. For our goodwill impairment analysis, we operate with a single reporting unit. To test goodwill impairment, we perform a single-step goodwill impairment test to identify potential goodwill impairment. The single-step impairment test begins with an estimation of the fair value of a reporting unit. Goodwill impairment exists when the net assets of a reporting unit exceed its fair value. In performing the single step of the goodwill impairment testing and measurement process, we estimated the fair value of our single reporting unit using our market capitalization. Based upon our assessment performed as of December 31, 2020, we concluded the fair value of our single reporting unit exceeded its' carrying value and there was no impairment of goodwill.

The functional currency of our foreign subsidiaries is the U.S. dollar. We translate all monetary assets and liabilities denominated in foreign currencies into U.S. dollars using the exchange rates in effect at the balance sheet dates and non-monetary assets and liabilities using historical exchange rates. Foreign currency denominated expenses are re-measured using the average exchange rates for the period. Foreign currency transaction and re-measurement gains and losses are included in other income (expense), net. In 2020, 2019 and 2018, foreign currency transactional gains (losses) and foreign currency re-measurement gains (losses) were not material.

As a global business, we are exposed to currency exchange rate risk. Although the majority of our revenue is denominated in U.S. dollars, a portion of our operating expenses are denominated in foreign currencies, making them subject to fluctuations in foreign currency exchange rates. We enter into foreign currency derivative contracts, which we designate as cash flow hedges, to manage the foreign currency exchange risk associated with these expenses.

Derivative financial instruments are recorded at fair value and reported as either an asset or liability on our consolidated balance sheets. Gains or losses related to our cash flow hedges are recorded as a component of accumulated other comprehensive income (loss) in our consolidated balance sheets and are reclassified into the financial statement line item associated with the underlying hedged transaction in our consolidated statement of operations when the underlying hedged transaction is recognized in our consolidated statement of operations. If it becomes probable that the hedged transaction will not occur, the cumulative unrealized gain or loss is reclassified immediately from accumulated other comprehensive income (loss) into the financial statement line item associated with the underlying hedged transaction in our consolidated statement of operations. Derivatives designated as cash flow hedges are classified in our consolidated statements of cash flow in the same manner as the underlying hedged transaction, primarily within cash flow from operating activities.

Stock-based compensation expense related to our stock options, restricted stock units (RSUs), performance-based restricted stock units (PSUs) and purchase rights issued under our 2015 Employee Stock Purchase Plan (ESPP) is calculated based on the estimated fair value of the award on the grant date.

The fair values of RSUs and PSUs are based on the value of our common stock on the date of grant. The fair values of stock options and ESPP purchase rights are estimated on the grant date using the Black-Scholes option pricing model which requires management to make a number of assumptions, including the expected life of the option, the volatility of the underlying stock, the risk-free interest rate and expected dividends. The assumptions used in our Black-Scholes option-pricing model represent management’s best estimates at the time of grant. These estimates involve a number of variables, uncertainties and assumptions and the application of management’s judgment, as they are inherently subjective. If any assumptions change, our stock-based compensation expense could be materially different in the future.

The fair value is recognized as expense on a straight-line basis over the requisite service period, which is generally the vesting period of the respective award. The actual number of PSUs earned and eligible to vest are determined based on the performance conditions defined when the awards are granted. We recognize share-based compensation expense for the PSUs on a straight-line basis over the requisite service period for each separately vesting portion of the award when it is probable that the performance conditions will be achieved. We reassess the probability of vesting at each reporting period for awards with performance conditions and adjust stock-based compensation cost based on its probability assessment. We recognize forfeitures as they occur and do not estimate a forfeiture rate when calculating the stock-based compensation expense.

Income taxes are accounted for using the asset and liability method. Under this method, deferred tax assets and liabilities are recognized for differences between the consolidated financial statements carrying amounts of assets and liabilities and their respective income tax bases, and operating loss and tax credit carryforwards using enacted tax rates expected to apply to taxable income in the years in which the differences are expected to reverse. Deferred tax assets are reduced by a valuation allowance if it is more likely than not that some or all of the deferred tax assets will not be realized. Significant judgment is required in determining any valuation allowance recorded against deferred tax assets. In assessing the need for a valuation allowance, we consider all available evidence, including past operating results, estimates of future taxable income, and the feasibility of tax planning strategies. In the event that we change our determination as to the amount of deferred tax assets that can be realized, we will adjust our valuation allowance with a corresponding impact to the provision for income taxes in the period in which such determination is made.

We recognize tax benefits from uncertain tax positions if it is more likely than not that the tax position will be sustained on examination by the taxing authorities based on the technical merits of the position. Interest and penalties associated with such uncertain tax positions are classified as a component of income tax expense.

We calculate basic net loss per share by dividing our net loss by the weighted-average number of common shares outstanding during the period. Diluted net loss per share is computed by giving effect to all potentially dilutive securities, including stock options, RSUs, PSUs, the impact of our ESPP and the impact of the conversion spread of our convertible senior notes (Notes). Basic and diluted net loss per share was the same for all periods presented as the inclusion of all potentially dilutive securities outstanding was anti-dilutive.

Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That is a Service Contract, which aligns the requirements for capitalizing implementation costs in cloud computing arrangements with the requirements for capitalizing implementation costs incurred to develop or obtain internal-use software. We adopted this standard on January 1, 2020 using the prospective adoption approach. The impact to our consolidated financial statements as a result of the adoption was not material.

In August 2018, the FASB issued ASU 2018-13, Fair Value Measurement (Topic 820): Disclosure Framework—Changes to the Disclosure Requirements for Fair Value Measurement, which eliminates, modifies and adds disclosure requirements for fair value measurements. We adopted this standard on January 1, 2020 and there was no impact to our consolidated financial statements as a result of the adoption.

In June 2016, the FASB issued ASU 2016-13, Measurement of Credit Losses on Financial Instruments, which introduced a new methodology for accounting for credit losses on financial instruments. The standard establishes a new forward looking expected loss model that requires entities to estimate current expected credit losses on accounts receivable and other financial instruments by using all practical and relevant information. We adopted this standard in the first quarter of 2020. The impact to our consolidated financial statements as a result of the adoption was not material.

In August 2020, the FASB issued ASU 2020-06, Debt—Debt with Conversion and Other Options (Subtopic 470-20) and Derivatives and Hedging—Contracts in Entity’s Own Equity (Subtopic 815-40): Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity, which simplify the accounting for certain financial instruments with characteristics of liabilities and equity, including convertible instruments and contracts on an entity’s own equity. The standard eliminates beneficial conversion feature and cash conversion models resulting in more convertible instruments being accounted for as a single unit; and simplifies classification of debt on the balance sheet and earnings per share calculation. The standard is effective for us in the first quarter of fiscal 2022 and can be adopted on a full or modified retrospective basis. We plan to adopt this standard in the first quarter of 2021 under the modified retrospective basis. Adopting this guidance will reduce non-cash interest expense, and thereby increase net income, in our consolidated financial statements. Additionally, the treasury stock method for calculating earnings per share will no longer be allowed for convertible debt instruments whose principal amount may be settled using shares. Rather, the if-converted method will be required. Application of the “if converted” method may reduce our reported diluted earnings per share.

In March 2020, the FASB issued ASU 2020-04, Reference Rate Reform (Topic 848): Facilitation of the Effects of Reference Rate Reform on Financial Reporting, which provides temporary optional expedients and exceptions to GAAP guidance on contract modifications to ease the financial reporting burdens related to the expected market transition from the London Interbank Offered Rate (LIBOR) to alternative reference rates. We may elect to apply the amendments prospectively through December 31, 2022. The impact to our consolidated financial statements from the adoption of this standard is expected to be immaterial.

In December 2019, the FASB issued ASU 2019-12, Income Taxes (Topic 740): Simplifying the Accounting for Income Taxes. This standard is intended to simplify various aspects related to accounting for income taxes by removing certain exceptions to the general principles in Topic 740 and clarifying certain aspects of the current guidance to promote consistency among reporting entities. The new standard will be effective for us in the first quarter of 2021. Most amendments within this ASU are required to be applied on a prospective basis, while certain amendments must be applied on a retrospective or modified retrospective basis. We do not expect the adoption of this guidance to have a material impact on our consolidated financial statements.