Qualys Announces Fourth Quarter and Full Year 2021 Financial Results

FOSTER CITY, Calif., -- February 10, 2022 -- Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of disruptive cloud-based IT, security and compliance solutions, today announced financial results for the fourth quarter and full year ended December 31, 2021. For the quarter, the Company reported revenues of $109.8 million, net income under United States Generally Accepted Accounting Principles ("GAAP") of $21.8 million, non-GAAP net income of $33.8 million, Adjusted EBITDA of $49.6 million, GAAP net income per diluted share of $0.55, and non-GAAP net income per diluted share of $0.84. For the full year ended December 31, 2021, the Company reported revenues of $411.2 million, GAAP net income of $71.0 million, non-GAAP net income of $129.3 million, Adjusted EBITDA of $191.2 million, GAAP net income per diluted share of $1.77, and non-GAAP net income per diluted share of $3.22.

"We delivered strong operating results for the fourth quarter, reflecting a year of early progress advancing our go-to-market initiatives, significant platform innovation, and strong momentum heading into 2022," said Sumedh Thakar, president and CEO of Qualys. "As we continue to invest and innovate, enterprises of all sizes are adopting the Qualys Cloud Platform to secure their environments, eliminate siloed solutions, and reduce legacy IT costs. This was again evidenced in the quarter by strong interest and adoption of our Vulnerability Management, Detection and Response (VMDR®) application with customer penetration now at 36%."

Fourth Quarter 2021 Financial Highlights

Revenues: Revenues for the fourth quarter of 2021 increased by 16% to $109.8 million compared to $94.8 million for the same quarter in 2020.

Gross Profit: GAAP gross profit for the fourth quarter of 2021 increased by 17% to $86.1 million compared to $73.6 million for the same quarter in 2020. GAAP gross margin was 78% for both the fourth quarter of 2021 and 2020. Non-GAAP gross profit for the fourth quarter of 2021 increased by 17% to $88.8 million compared to $76.0 million for the same quarter in 2020. Non-GAAP gross margin was 81% for the fourth quarter of 2021 compared to 80% for the fourth quarter of 2020.

Operating Income: GAAP operating income for the fourth quarter of 2021 increased by 19% to $29.0 million compared to $24.4 million for the same quarter in 2020. As a percentage of revenues, GAAP operating income was 26% for both the fourth quarter of 2021 and 2020. Non-GAAP operating income for the fourth quarter of 2021 increased by 16% to $42.1 million compared to $36.2 million for the same quarter in 2020. As a percentage of revenues, non-GAAP operating income was 38% for both the fourth quarter of 2021 and 2020.

Net Income: GAAP net income for the fourth quarter of 2021 was $21.8 million, or $0.55 per diluted share, compared to $23.8 million, or $0.59 per diluted share, for the same quarter in 2020. As a percentage of revenues, GAAP net income was 20% for the fourth quarter of 2021 compared to 25% for the same quarter in 2020. Non-GAAP net income for the fourth quarter of 2021 was $33.8 million, or $0.84 per diluted share, compared to $28.6 million, or $0.71 per diluted share, for the same quarter in 2020. As a percentage of revenues, non-GAAP net income was 31% for the fourth quarter of 2021 compared to 30% for the same quarter of 2020.

Adjusted EBITDA: Adjusted EBITDA (a non-GAAP financial measure) for the fourth quarter of 2021 increased by 14% to $49.6 million compared to $43.4 million for the same quarter in 2020. As a percentage of revenues, Adjusted EBITDA was 45% for the fourth quarter of 2021 compared to 46% for the same quarter in 2020.

Operating Cash Flow: Operating cash flow for the fourth quarter of 2021 increased by 3% to $39.9 million compared to $38.8 million for the same quarter in 2020. As a percentage of revenues, operating cash flow was 36% for the fourth quarter of 2021 compared to 41% for the same quarter in 2020.

Fourth Quarter 2021 Business Highlights

• Launched a free 30-day Log4Shell Service to help organizations reduce risk. Qualys' Web Application Scanning (WAS) solution was made available to help detect related vulnerabilities as its capabilities simulate the attack of Log4Shell exploits.

• Announced the availability of Qualys' Ransomware Risk Assessment Service to provide companies with visibility into their ransomware exposure and automate the patching and configuration changes needed to reduce risk immediately.

• Integrated Infrastructure as Code (IaC) into Qualys' CloudView solution, enabling detection and remediation early in the software development cycle to remove risk in the production environment.

• Partnered with TD SYNNEX, a leading distributor and solutions aggregator, to further expand Qualys' market opportunity throughout North America.

• Expanded Qualys' global presence with new cloud platform deployments in Australia and the United Kingdom to meet increased customer demand and allow regional customers the opportunity to adhere to local data sovereignty regulations.

• Showcased the Company's innovation and leadership to nearly 4,000 attendees at Qualys Security Conference.

• Announced the Qualys board appointment of Bill Berutti, a cloud industry veteran with extensive experience in cloud and enterprise software.

Full Year 2021 Financial Highlights

Revenues: Revenues for 2021 increased by 13% to $411.2 million compared to $363.0 million for 2020.

Gross Profit: GAAP gross profit for 2021 increased by 13% to $321.7 million compared to $283.7 million for 2020. GAAP gross margin was 78% for both 2021 and 2020. Non-GAAP gross profit increased by 13% to $332.0 million for 2021 compared to $292.7 million for 2020. Non-GAAP gross margin was 81% for both 2021 and 2020.

Operating Income: GAAP operating income for 2021 was $87.7 million compared to $96.7 million for 2020. As a percentage of revenues, GAAP operating income was 21% for 2021 compared to 27% for 2020. Non-GAAP operating income for 2021 was $161.9 million compared to $143.0 million for 2020. As a percentage of revenues, non-GAAP operating income was 39% for both 2021 and 2020.

Net Income: GAAP net income for 2021 was $71.0 million, or $1.77 per diluted share, compared to $91.6 million, or $2.25 per diluted share for 2020. As a percentage of revenues, GAAP net income was 17% for 2021 compared to 25% for 2020. Non-GAAP net income for 2021 was $129.3 million, or $3.22 per diluted share, compared to non-GAAP net income of $117.0 million, or $2.87 per diluted share for 2020. As a percentage of revenues, non-GAAP net income was 31% for 2021 compared to 32% for 2020.

Adjusted EBITDA: Adjusted EBITDA (a non-GAAP financial measure) for 2021 increased by 13% to $191.2 million compared to $169.5 million for 2020. As a percentage of revenues, Adjusted EBITDA was 46% for 2021 compared to 47% for 2020.

Operating Cash Flow: Operating cash flow for 2021 was $200.6 million compared to $180.1 million for 2020. As a percentage of revenues, operating cash flow was 49% for 2021 compared to 50% for 2020.

Full Year 2021 Business Highlights

Market Recognition

• The Qualys Research team was honored by the acclaimed Pwnie Awards at Black Hat USA 2021, receiving recognition for Best Privilege Escalation Bug and Most Under-Hyped Research.

• Leading analyst firm Omdia recognized Qualys' Cybersecurity Asset Management application for its ability to help organizations identify security risks based on actionable intelligence of potential security threats, and courses of action, rather than a flood of security alerts and notifications.

Products & Features

• Introduced Cybersecurity Asset Management, which leverages vital context from the Qualys Cloud Platform to help security teams inventory their complete IT ecosystem, detect security gaps, and respond to risks, all from a unified platform.

• Integrated new Zero-Touch Patch capabilities into Qualys' Patch Management application to help companies proactively update their endpoints and servers as soon as patches are available to reduce overall risk.

• Added real-time malware protection to Qualys' Multi-Vector EDR application to provide customers with the ability to detect and block advanced threats including ransomware.

• Extended Qualys' VMDR to support the patching of Linux systems within the same platform that supports patching of Windows and third-party apps.

• Extended the power of Qualys' VMDR to Android and iOS/iPadOS for mobile devices to continuously assess device, OS, application and network vulnerabilities.

• Introduced Qualys' SaaS Detection and Response (SaaSDR) application to provide continuous visibility, assessment and compliance for critical SaaS applications such as Microsoft Office 365, Google Workspace and Zoom through a single interface.

Business Developments

• Qualys' VMDR selected by deepwatch to power the Managed Security Service Provider's (MSSP) Managed Vulnerability Services offering and provide its customers with one click-access to additional Qualys solutions such as File Integrity Monitoring, Patch Management and Multi-Vector EDR.

• Expanded our partnership with HCL Technologies to embed Qualys' VMDR into its managed security services offering, the CyberSecurity Fusion Center.

• Collaborated with Red Hat to offer joint customers enhanced security for both the container and host operating systems for Red Hat OpenShift.

• Acquired TotalCloud to integrate its workflow management technology into the Qualys Cloud Platform to help customers build no-code, user-defined workflows and simplify security and compliance outputs.

Financial Performance Outlook

Based on information as of today, February 10, 2022, Qualys is issuing the following financial guidance for the first quarter and full year fiscal 2022. The Company emphasizes that the guidance is subject to various important cautionary factors referenced in the section entitled "Legal Notice Regarding Forward-Looking Statements" below.

First Quarter 2022 Guidance: Management expects revenues for the first quarter of 2022 to be in the range of $112.5 million to $113.1 million, representing 16% to 17% growth over the same quarter in 2021. GAAP net income per diluted share is expected to be in the range of $0.51 to $0.53, which assumes an effective income tax rate of 29%. Non-GAAP net income per diluted share is expected to be in the range of $0.80 to $0.82, which assumes a non-GAAP effective income tax rate of 24%. First quarter 2022 net income per diluted share estimates are based on approximately 40.2 million weighted average diluted shares outstanding for the quarter.

Full Year 2022 Guidance: Management expects revenues for the full year of 2022 to be in the range of $482.0 million to $485.0 million, representing 17% to 18% growth over 2021. GAAP net income per diluted share is expected to be in the range of $1.59 to $1.64. This assumes an effective income tax rate of 29%. Non-GAAP net income per diluted share is expected to be in the range of $2.87 to $2.92. This assumes a non-GAAP effective income tax rate of 24%. Full year 2022 net income per diluted share estimates are based on approximately 40.2 million weighted average diluted shares outstanding.

Investor Conference Call

Qualys will host a conference call and live webcast to discuss its fourth quarter and full year 2021 financial results at 5:00 p.m. Eastern Time (2:00 p.m. Pacific Time) on Thursday, February 10, 2022. To access the conference call, dial (877) 881-2609 in the U.S. or (970) 315-0463 for international participants with conference ID # 3545138. A live webcast of the earnings conference call, investor presentation and prepared remarks can be accessed at https://investor.qualys.com/events-presentations. A replay of the conference call will be available through the same webcast link following the end of the call.

Investor Contact

Blair King
Vice President, Investor Relations and Corporate Development
(650) 801-6299
ir@qualys.com

About Qualys

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based Security, Compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.

The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit www.qualys.com.

Qualys, Qualys VMDR*® *and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies.

Legal Notice Regarding Forward-Looking Statements

This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this press release include, but are not limited to, statements related to: our momentum heading into 2022; the benefits of our new and upcoming products, features, integrations, collaborations and joint solutions, and their impact upon our long-term growth; our guidance for revenues, GAAP EPS and non-GAAP EPS for the first quarter and full year 2022; and our expectations for the number of weighted average diluted shares outstanding and the GAAP and non-GAAP effective income tax rate for the first quarter and full year 2022. Our expectations and beliefs regarding these matters may not materialize, and actual results in future periods are subject to risks and uncertainties that could cause actual results to differ materially from those projected. These risks include our ability to continue to develop platform capabilities and solutions; the ability of our platform and solutions to perform as intended; customer acceptance and purchase of our existing solutions and new solutions; real or perceived defects, errors or vulnerabilities in our products or services; our ability to retain existing customers and generate new customers; the budgeting cycles and seasonal buying patterns of our customers; the length of our sales cycle; the impact of the ongoing COVID-19 pandemic and related public health measures on our business and the global economy; our ability to manage costs as we increase our customer base and the number of our platform solutions; the market for cloud solutions for IT security and compliance not increasing at the rate we expect; competition from other products and services; fluctuations in currency exchange rates; unexpected fluctuations in our effective income tax rate on a GAAP and non-GAAP basis; our ability to effectively manage our rapid growth and our ability to anticipate future market needs and opportunities; any unanticipated accounting charges; and general market, political, economic and business conditions in the United States as well as globally. The forward-looking statements contained in this press release are also subject to other risks and uncertainties, including those more fully described in our filings with the Securities and Exchange Commission, including our Quarterly Report on Form 10-Q for the quarter ended September 30, 2021, filed with the Securities and Exchange Commission on November 3, 2021.

The forward-looking statements in this press release are based on information available to Qualys as of the date hereof, and Qualys disclaims any obligation to update any forward-looking statements, except as required by law.

Non-GAAP Financial Measures

In addition to reporting financial results in accordance with GAAP, Qualys provides investors with certain non-GAAP financial measures, including non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA (defined as earnings before interest expense, interest income and other income (expense), net, income taxes, depreciation, amortization, and stock-based compensation) and non-GAAP free cash flows (defined as cash provided by operating activities less purchases of property and equipment (net of proceeds from disposal) and principal payments under finance lease obligations).

In computing non-GAAP financial measures, Qualys excludes the effects of stock-based compensation expense, amortization of intangible assets from acquisitions and non-recurring items. Qualys believes that these non-GAAP financial measures help illustrate underlying trends in its business that could otherwise be masked by the effect of the income or expenses, as well as the related tax effects, that are excluded in non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA and non-GAAP free cash flows.

Furthermore, Qualys uses some of these non-GAAP financial measures to establish budgets and operational goals for managing its business and evaluating its performance. Qualys believes that non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA and non-GAAP free cash flows provide additional tools for investors to use in comparing its recurring core business operating results over multiple periods with other companies in its industry.

Although Qualys does not focus on quarterly billings, Qualys provides calculated current billings (defined as total revenues recognized in a period plus the sequential change in current deferred revenue in the corresponding period) to assist investors and analysts in assessing its operating performance.

Qualys has not reconciled non-GAAP net income per diluted share guidance to GAAP net income per diluted share guidance because Qualys does not provide guidance on the various reconciling cash and non-cash items between GAAP net income and non-GAAP net income (i.e., stock-based compensation, amortization of intangible assets from acquisitions and non-recurring items). The actual dollar amount of reconciling items in the first quarter and full year 2022 is likely to have a significant impact on the Company's GAAP net income per diluted share in the first quarter and full year 2022. A reconciliation of the non-GAAP net income per diluted share guidance to the GAAP net income per diluted share guidance is not available without unreasonable effort.

In order to provide a more complete picture of recurring core operating business results, the Company's non-GAAP net income and non-GAAP net income per diluted share are adjusted for non-recurring income tax items and tax effect of non-GAAP adjustments to achieve the effective income tax rate on a non-GAAP basis. The Company's non-GAAP effective tax rate may differ from the GAAP effective income tax rate as a result of these income tax adjustments. The Company believes its estimated non-GAAP effective income tax rate of 24% in 2022 is a reasonable estimate under its current global operating structure and core business operations. The Company may adjust this rate during the year to take into account events or trends that it believes materially impact the estimated annual rate. The non-GAAP effective income tax rate could be subject to change for a number of reasons, including but not limited to, significant changes resulting from tax legislation, material changes in geographic mix of revenues and expenses and other significant events.

The presentation of this non-GAAP financial information is not intended to be considered in isolation or as a substitute for results prepared in accordance with GAAP. A reconciliation of the non-GAAP financial measures discussed in this press release to the most directly comparable GAAP financial measures is included with the financial statements contained in this press release. Management uses both GAAP and non-GAAP information in evaluating and operating its business internally and as such has determined that it is important to provide this information to investors.

Qualys, Inc.
CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS
(Unaudited)
(in thousands, except per share data)

Qualys, Inc.
CONDENSED CONSOLIDATED BALANCE SHEETS
(Unaudited)
(in thousands)

Qualys, Inc.
CONDENSED CONSOLIDATED STATEMENT OF CASH FLOWS
(Unaudited)
(in thousands)

Qualys, Inc.
RECONCILIATION OF NON-GAAP DISCLOSURES
ADJUSTED EBITDA
(Unaudited)
(in thousands)

Qualys, Inc.
RECONCILIATION OF NON-GAAP DISCLOSURES
(Unaudited)
(in thousands, except per share data)

Qualys, Inc.
RECONCILIATION OF NON-GAAP DISCLOSURES
FREE CASH FLOWS
(Unaudited)
(in thousands)

Qualys, Inc.
RECONCILIATION OF NON-GAAP DISCLOSURES
CALCULATED CURRENT BILLINGS
(Unaudited)
(in thousands)