Rapid7, Inc. - Quarter Report: 2016 June (Form 10-Q)

Table of Contents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, DC 20549

FORM 10-Q

(Mark One)

For the quarterly period ended June 30, 2016

OR

For the transition period from                      to                     

Commission File Number: 001-37496

RAPID7, INC.

(Exact Name of Registrant as Specified in its Charter)

Registrant’s telephone number, including area code: (617) 247-1717

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.    Yes  x    No  ¨

Indicate by check mark whether the registrant has submitted electronically and posted on its corporate Web site, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files).    Yes  x    No  ¨

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company. See the definitions of “large accelerated filer,” “accelerated filer” and “smaller reporting company” in Rule 12b-2 of the Exchange Act.

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).    Yes  ¨    No  x

As of August 1, 2016, there were 42,074,697 shares of the registrant’s common stock, $0.01 par value per share, outstanding.

Table of Contents

Table of Contents

i

Table of Contents

PART I—FINANCIAL INFORMATION

Item 1. Financial Statements.

RAPID7, INC.

Consolidated Balance Sheets (Unaudited)

(in thousands, except share and per share data)

The accompanying notes are an integral part of these unaudited consolidated financial statements.

1

Table of Contents

RAPID7, INC.

Consolidated Statements of Operations (Unaudited)

(in thousands, except share and per share data)

The accompanying notes are an integral part of these unaudited consolidated financial statements.

2

Table of Contents

RAPID7, INC.

Consolidated Statements of Cash Flows (Unaudited)

(in thousands)

The accompanying notes are an integral part of these unaudited consolidated financial statements.

3

Table of Contents

RAPID7, INC.

Notes to Consolidated Financial Statements (Unaudited)

Note 1. Description of Business and Basis of Presentation and Consolidation

Description of Business

Rapid7, Inc. and subsidiaries (“we,” “us” or “our”) is a leading provider of security data and analytics solutions that enable organizations to implement an active, analytics-driven approach to cyber security. Our solutions empower organizations to prevent cyber attacks by providing visibility into vulnerabilities and to rapidly detect compromises, respond to breaches and correct the underlying causes of cyber attacks.

Basis of Presentation and Consolidation

The accompanying unaudited consolidated financial statements have been prepared by us in accordance with accounting principles generally accepted in the United States of America (U.S. GAAP) as well as pursuant to the rules and regulations of the Securities and Exchange Commission (SEC) regarding interim financial reporting. Accordingly, certain information and note disclosures normally included in the financial statements prepared in accordance with GAAP have been condensed or omitted pursuant to such rules and regulations. These consolidated financial statements should be read in conjunction with the consolidated financial statements and related notes included in our Annual Report on Form 10-K for the year ended December 31, 2015 filed with the SEC on March 10, 2016.

The consolidated financial statements include our results of operations and those of our wholly-owned subsidiaries and reflect all adjustments (consisting solely of normal, recurring adjustments) which are, in the opinion of management, necessary for a fair statement of results for the interim periods presented. All intercompany transactions and balances have been eliminated in consolidation. The results of operations for the three and six months ended June 30, 2016 are not necessarily indicative of the results to be expected for any future period or the entire fiscal year.

Recent Accounting Pronouncements

In June 2016, the Financial Accounting Standards Board, or FASB, issued Accounting Standards Update, or ASU, 2016-13, Financial Instruments-Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments. The ASU requires measurement and recognition of expected credit losses for financial assets including trade receivables and capital lease receivables held at the reporting date based on historical experience, current conditions, and reasonable and supportable forecasts. This is different from the current guidance which requires a credit loss to not be recognized until the loss is probable. The guidance is effective January 1, 2020, with early adoption permitted on January 1, 2019. We are currently evaluating the impact this update will have on our consolidated financial statements.

In March 2016, the FASB issued ASU 2016-09, Compensation-Stock Compensation (Topic 718): Improvements to Employee Share-Based Payment Accounting. The ASU is intended to simplify several aspects of the accounting for share-based payment transactions, including the accounting for income taxes, forfeitures and statutory tax withholding requirements, as well as classification on the statement of cash flows. The ASU will be effective for us in the first quarter of 2017, with early adoption permitted. We are currently evaluating the impact that the adoption of the ASU will have on our consolidated financial statements.

In February 2016, the FASB issued ASU 2016-02, Leases (Topic 842). The ASU requires companies to recognize on the balance sheet the assets and liabilities for the rights and obligations created by leased assets. The ASU will be effective for us in the first quarter of 2019, with early adoption permitted. We are currently evaluating the impact that the adoption of this ASU will have on our consolidated financial statements.

In November 2015, the FASB issued ASU 2015-17, Income Taxes (Topic 740) – Balance Sheet Classification of Deferred Taxes. The ASU requires that deferred tax liabilities and assets be classified as noncurrent in a classified balance sheet simplifying current GAAP, which requires an entity to separate deferred tax liabilities and assets into current and noncurrent amounts in the balance sheet. The ASU will be effective for us in the first quarter of 2017, and may be applied prospectively or retrospectively at our election. We do not expect that the adoption of this ASU will have a material impact on our consolidated financial statements.

In September 2015, the FASB issued ASU 2015-16, Business Combinations (Topic 805) – Simplifying the Accounting for Measurement-Period Adjustments. The ASU requires that an acquirer recognize adjustments to provisional amounts that are identified during the measurement period in the reporting period in which the adjustment amounts are determined. The ASU requires that the acquirer record, in the same period’s financial statements, the effect on earnings of changes in depreciation, amortization, or other income effects, if any, as a result of the change to the provisional amounts, calculated as if the accounting had been completed at the acquisition date. The ASU requires an entity to present separately on the face of the income statement or disclose in the notes the

4

Table of Contents

portion of the amount recorded in current-period earnings by line item that would have been recorded in previous reporting periods if the adjustment to the provisional amounts had been recognized as of the acquisition date. This ASU was adopted on January 1, 2016 and did not have a material impact on our consolidated financial statements.

In April 2015, the FASB issued ASU 2015-05, Intangibles -Goodwill and Other – Internal Use Software (Subtopic 350-40): Customer’s Accounting for Fees Paid in a Cloud Computing Arrangement, which provides guidance on accounting for fees paid in a cloud computing arrangement. Under the ASU, if a cloud computing arrangement includes a software license which also grants the contractual rights and practical ability to take possession of the software, the software license element should be accounted for consistent with the purchase of other software licenses. If the cloud computing arrangement does not include a software license, as defined, it should be accounted for as a service contract. This ASU was adopted on January 1, 2016 and did not have a material impact on our consolidated financial statements.

In May 2014, the FASB issued ASU 2014-09, Revenue from Contracts with Customers (Topic 606). The ASU outlines a single, comprehensive model for accounting for revenue from contracts with customers and requires more detailed disclosure to enable users of financial statements to understand the nature, amount, timing and uncertainty of revenue and cash flows arising from such contracts. In August 2015, the FASB issued ASU 2015-14, which provides a one year deferral in the effective date of ASU 2014-09. ASU 2014-09 will now be effective for us beginning January 1, 2018; however, early adoption will be permitted as of the original effective date. The new standard may be applied retrospectively to each prior period presented or prospectively with the cumulative effect recognized on the date of adoption. We are currently evaluating the impact that the standard will have on our consolidated financial statements.

Note 2. Business Combinations

Prior Year Acquisitions

RevelOps, Inc.

On October 13, 2015, we acquired 100% of the outstanding equity of RevelOps, Inc. (d/b/a Logentries) for total consideration of $68.1 million. We made an initial payment of $36.2 million in cash, issued 1,252,627 shares of our common stock with an aggregate fair value of $27.4 million, inclusive of a discount from the quoted market price due to certain trading restrictions associated with the shares, and issued vested replacement options with respect to 221,759 shares of our common stock to certain continuing employees with an aggregate fair value of $4.5 million upon the closing of the acquisition. The fair value of the vested replacement options included in the purchase price was based on the fair value of the vested Logentries options on the acquisition date. The excess fair value when comparing the fair value of the new vested replacement options and the vested Logentries options of $0.3 million was expensed immediately in the post-combination financial statements of the combined entity.

Assets acquired and liabilities assumed were recorded at their estimated fair values as of the acquisition date. The excess of the purchase price over the assets acquired and liabilities assumed was recorded as goodwill. The preliminary fair values of goodwill, intangible assets and net assets were $59.2 million, $9.4 million and $(0.5) million, respectively. These preliminary amounts are subject to subsequent adjustment as we obtain additional information to finalize certain components of working capital.

Pro Forma Financial Information

The unaudited pro forma financial information in the table below summarizes the combined results of our operations and Logentries, on a pro forma basis, as though we had acquired Logentries on January 1, 2014. The unaudited pro forma financial information for all periods presented also includes the effects of business combination accounting resulting from the acquisition, including amortization expense from acquired intangibles assets, reversal of acquisition related expenses and the stock-compensation expense recorded to retain certain employees.

NT OBJECTives, Inc.

On April 30, 2015, we acquired 100% of the outstanding equity of NT OBJECTives, Inc. (NTO), a web application security testing company, expanding the web application testing capabilities of our threat exposure management offering. We acquired NTO for total consideration of $6.1 million. We made an initial payment of $3.4 million in cash and issued 9,091 shares of our common stock with an aggregate fair value of $0.1 million. We are obligated to pay $0.1 million in cash for the settlement of a working capital adjustment and are obligated to make two additional payments of $1.5 million each, less the amount of any indemnity claims. The net present value of these two additional payments, or $2.5 million, was included in the total purchase consideration paid.

5

Table of Contents

Assets acquired and liabilities assumed were recorded at their estimated fair values as of the acquisition date. The excess of the purchase price over the assets acquired and liabilities assumed was recorded as goodwill. The fair values of goodwill, intangible assets and net assets were $4.6 million, $2.1 million and $(0.6) million, respectively.

Pro forma results of operations have not been included, as the acquisition of NTO was not material to our results of operations for any periods presented.

In May 2015, we entered into loan agreements with certain retained employees of NTO. The terms of these agreements require the employees to pay us the total amount borrowed, with accrued interest at 1.7% per annum, within 18 months of the agreement date. The loan agreements are secured by restricted stock awards granted to the employees. The aggregate amount of these loans was $0.5 million and is currently classified as prepaid expenses and other current assets on our consolidated balance sheets.

Note 3. Goodwill and Intangible Assets

The change in the carrying amount of goodwill for the six months ended June 30, 2016 was as follows:

Identifiable intangible assets consist of the following:

Amortization expense was $0.6 million and $0.3 million for the three months ended June 30, 2016 and 2015, respectively, and $1.2 million and $0.5 million for the six months ended June 30, 2016 and 2015, respectively.

Estimated future amortization expense of the acquired identifiable intangible assets as of June 30, 2016 is as follows (in thousands):

6

Table of Contents

Note 4. Property and Equipment

Property and equipment are recorded at cost and consist of the following:

Depreciation expense was $1.1 million and $1.0 million for the three months ended June 30, 2016 and 2015, respectively, and $2.2 million and $1.9 million for the six months ended June 30, 2016 and 2015, respectively.

Note 5. Stock-Based Compensation Expense

Stock-based compensation expense for restricted stock, restricted stock units, stock options and issuances of common stock pursuant to our employee stock purchase plan was classified in the accompanying consolidated statements of operations as follows:

We recognize compensation cost of all awards on a straight-line basis over the applicable vesting period, which is generally four years.

Restricted stock and restricted stock unit activity during the six months ended June 30, 2016 was as follows:

As of June 30, 2016, the unrecognized compensation expense related to our unvested restricted stock and restricted stock units expected to vest was $16.6 million. This unrecognized compensation expense will be recognized over an estimated weighted-average amortization period of 2.7 years.

During the three months ended June 30, 2016, we repurchased 47,003 shares of our common stock in settlement of employee tax withholding obligations due upon the vesting of restricted stock.

7

Table of Contents

Stock option activity during the six months ended June 30, 2016 was as follows:

As of June 30, 2016, the unrecognized compensation expense related to our unvested stock options expected to vest was $7.7 million. This unrecognized compensation expense will be recognized over an estimated weighted-average amortization period of 2.8 years.

The total fair value of stock options vested in the six months ended June 30, 2016 was $1.6 million. The weighted-average grant date fair value of stock options granted in the six months ended June 30, 2016 was $6.19 per share.

Under the 2015 Employee Stock Purchase Plan (ESPP), employees may set aside up to 15% of their gross earnings, on an after-tax basis, to purchase our common shares at a discounted price, which is calculated at 85% of the lesser of: (i) the market value of our common stock at the beginning of each offering period and (ii) the market value of our common stock on the applicable purchase date.

On March 15, 2016, we issued 192,676 shares of common stock to employees for aggregate proceeds of $2.1 million. The purchase price of the shares of common stock was $10.88 per share, which was discounted in accordance with the terms of the ESPP from the closing price of our common stock on March 15, 2016 of $12.80.

Note 6. Net Loss per Share

The following table summarizes the computation of basic and diluted net loss per share of our common stock for the three and six months ended June 30, 2016 and 2015:

The following potentially dilutive securities outstanding, prior to the use of the treasury stock method or if-converted method, have been excluded from the computation of diluted weighted-average shares outstanding for the respective periods below because they would have been anti-dilutive:

8

Table of Contents

Note 7. Commitments and Contingencies

We provide limited product warranties. Historically, any payments made under these provisions have been immaterial.

From time to time, we are and may be a party to litigation and subject to claims incident to the ordinary course of business. Although the results of litigation and claims cannot be predicted with certainty, we currently believe that the final outcome of these ordinary course matters will not have a material adverse effect on our business. Regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources and other factors.

We agree to standard indemnification provisions in the ordinary course of business. Pursuant to these provisions, we agree to indemnify, hold harmless and reimburse the indemnified party for losses suffered or incurred by the indemnified party, generally our customers, in connection with any United States patent, copyright or other intellectual property infringement claim by any third party arising from the use of our products or services in accordance with the agreement or arising from our gross negligence, willful misconduct or violation of the law (provided that there is not gross or willful misconduct on the part of the other party) with respect to our products or services. The term of these indemnification provisions is generally perpetual from the time of execution of the agreement. We carry insurance that covers certain third-party claims relating to our services and limits our exposure. We have never incurred costs to defend lawsuits or settle claims related to these indemnification provisions.

Note 8. Segment Information and Information about Geographic Areas

We operate in one segment. Our chief operating decision maker is our Chief Executive Officer, who makes operating decisions, assesses performance and allocates resources on a consolidated basis.

Net revenues by geographic area presented based upon the location of the customer were as follows:

Of the total net revenues generated in North America, 97% of the revenues were generated in the United States for the three and six months ended June 30, 2016, and 96% of the revenues were generated in the United States for the three and six months ended June 30, 2015.

Property and equipment, net by geographic area was as follows:

Note 9. Subsequent Events

On August 8, 2016, we announced that Steven Gatoff, Chief Financial Officer, will be transitioning out of the company for personal family reasons effective January 2017. In connection with Mr. Gatoff’s departure, we entered into a transition and release agreement with Mr. Gatoff, which was filed as Exhibit 10.1 to our Current Report on Form 8-K on August 8, 2016.

9

Table of Contents

Item 2. Management’s Discussion and Analysis of Financial Condition and Results of Operations.

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with (1) our consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q and (2) the audited consolidated financial statements and the related notes and management’s discussion and analysis of financial condition and results of operations for the fiscal year ended December 31, 2015 included in our Annual Report on Form 10-K, as filed with the SEC on March 10, 2016.

This Quarterly Report on Form 10-Q contains “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, or the Securities Act, and Section 21E of the Securities Exchange Act of 1934, as amended, or the Exchange Act. These statements are often identified by the use of words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “project,” “will,” “would” or the negative or plural of these words or similar expressions or variations. Such forward-looking statements are subject to a number of risks, uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified herein, and those discussed in the section titled “Risk Factors,” set forth in Part II, Item 1A of this Quarterly Report on Form 10-Q and in our other SEC filings. You should not rely upon forward-looking statements as predictions of future events. Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

Overview

Rapid7 is a leading provider of security data and analytics solutions that enable organizations to implement an active, analytics-driven approach to cyber security. Our security data and analytics platform was purpose built for today’s increasingly complex and chaotic IT environment. We combine our extensive experience in security data and analytics and deep insight into attacker behaviors and techniques to make sense of the wealth of data available to organizations about their IT environments and users. There has been an explosion of increasingly sophisticated cyber attacks as the proliferation of mobile devices, cloud-based applications and solutions relying on user credentials has eliminated the boundaries that previously defined an organization’s network perimeter and expanded the threat surface that organizations must now defend. Our powerful and proprietary analytics enable organizations to contextualize and prioritize the threats facing their physical, virtual and cloud assets, including those posed by the behaviors of their users. Leveraging our security data and analytics platform, our solutions enable organizations to strategically and dynamically manage their cyber security exposure. Our solutions empower organizations to prevent attacks by providing visibility into vulnerabilities and to rapidly detect compromises, respond to breaches and correct the underlying causes of attacks. This balanced and analytics-focused approach ultimately better secures organizations’ environments and reduces the likelihood of, and risks associated with, cyber attacks. We believe our technology and solutions revolutionize the practice of cyber security and are central and critical to implementing a modern security program.

We primarily market and sell our products and professional services to global organizations of all sizes, including mid-market businesses, enterprises, non-profits, educational institutions and government agencies. Our customers span a wide variety of industries such as technology, energy, financial services, healthcare and life sciences, manufacturing, media and entertainment, retail, education, real estate, transportation, government and professional services. As of June 30, 2016, we had over 5,600 customers in more than 100 countries, including 37% of the Fortune 1000. Our revenue was not concentrated with any individual customer or group of customers, and no customer represented more than 2% of our revenue for the three or six months ended June 30, 2016 or 2015.

We sell our products and services through direct inside and field sales teams and indirect channel partner relationships. Our sales teams are organized by geography as well as by target organization size. Our global channel partner network complements our sales organization, working closely with our sales teams to extend our geographic reach and to close sales of our offerings as part of larger purchases, particularly in key markets such as Europe, the Middle East and Africa, Asia Pacific and Latin America.

10

Table of Contents

Recent Developments

In February 2016, we introduced InsightIDR, our new Insight Platform cloud-based offering that integrates our Logentries machine data search technology, and is designed to enable organizations to go from compromise to containment quickly and also meet their operational compliance needs. InsightIDR seeks to provide comprehensive incident detection and response and became available in the first quarter of 2016. Our InsightIDR offering combines behavior analytics and search with contextual data collection to help detect what we believe are some of the stealthiest attacks. InsightIDR directly addresses the gaps found in many of today’s detection technologies, including SIEMs and IPSs and is powered by our Insight Platform, which simplifies and combines data collection, analytics, and search technology. We believe the combination of these technologies can enable not only effective detection but also efficient investigation. InsightIDR puts the organization’s data at the IT security analyst’s fingertips so an organization can improve investigation times often at lower costs than with traditional solutions on the market.

Our Business Model

We have three offerings: (1) threat exposure management, which includes our Nexpose, Metasploit and AppSpider products, (2) incident detection and response, which includes our InsightUBA (formerly known as UserInsight), InsightIDR, Analytic Response, Logentries products and our incident response services and (3) security advisory services.

We offer our products through a variety of delivery models to meet the needs of our diverse customer base, including:

We also offer various professional services across all of our offerings, including deployment and training services related to our Nexpose, Metasploit, AppSpider, InsightUBA and InsightIDR software products, incident response services and security advisory services. Customers can purchase our professional services together with our product offerings or on a stand-alone basis pursuant to fixed fee or time-and-materials agreements.

An important component of our revenue growth strategy is to have our existing customers renew their agreements with us and purchase additional products from us. To assess our performance against this objective, we monitor the renewal rates of our existing customers. We calculate our renewal rate by dividing the dollar value of renewed customer agreements, including upsells and cross-sells of additional products, but excluding professional services, on a monthly basis in a trailing 12-month period by the dollar value of the corresponding expiring customer agreements, and then determining the average for the applicable period. We also calculate an expiring renewal rate that does not take into account any upsells or cross-sells. As a result of this methodology, we would not expect our expiring renewal rate to exceed 100%. Our renewal rate was 126% and 115% for the second quarter of 2016 and 2015, respectively, and our expiring revenue renewal rate was 89% and 87% for the second quarter of 2016 and 2015, respectively. Our goal is to maintain what we believe are strong renewal rates, and work to increase them over time. However, our renewal rates may decline or fluctuate as a result of a number of factors, including customers’ satisfaction or dissatisfaction with our products and professional services, pricing, economic conditions or overall reductions in our customers’ spending levels.

We generate revenue from selling products, maintenance and support, and professional services. For the three months ended June 30, 2016 and 2015, 82% and 81% of our revenue, respectively, was derived from sales of products and associated maintenance and support, while the remaining 18% and 19%, respectively, was derived from the sale of professional services. For the six months ended June 30, 2016 and 2015, 82% of our revenue was derived from sales of products and associated maintenance and support, while the remaining 18% was derived from the sale of professional services.

For the three and six months ended June 30, 2016, 62% of our total revenue was derived from sales of content subscriptions, managed services, cloud-based subscriptions and maintenance and support, which we refer to as recurring revenue. For the three and six months ended June 30, 2015, 61% of our total revenue was derived from recurring revenue. We generally bill customers and collect payment for both our products and services up front.

11

Table of Contents

For the three months ended June 30, 2016 and 2015, 87% and 83%, respectively, of our total revenue came from deferred revenue on the balance sheet at the beginning of the respective periods. For the six months ended June 30, 2016 and 2015, 75% of our total revenue came from deferred revenue on the balance sheet at the beginning of the respective periods.

Key Metrics

We monitor the following key metrics to help us measure and evaluate the effectiveness of our operations:

Total Revenue and Growth. We are focused on driving continued revenue growth through increased sales of our products and professional services to new and existing customers.

Operating Cash Flow. We monitor our operating cash flow as a measure of our overall business performance, which enables us to analyze our financial performance without the effects of certain non-cash items such as stock-based compensation expenses and depreciation and amortization. Additionally, operating cash flow takes into account the increase in deferred revenue as a result of increases in sales of products and services, which reflects the receipt of cash payment for products before they are recognized into revenue. Our operating cash flow is significantly impacted by changes in deferred revenue, timing of commission and bonus payments and collections of accounts receivable.

Deferred Revenue. We believe that deferred revenue is an important metric as it provides visibility into the revenue to be recognized in future periods. Our deferred revenue consists of amounts that have been invoiced to customers but that have not yet been recognized as revenue. Our deferred revenue balance primarily consists of the portion of products, maintenance and support and professional services revenue that will be recognized ratably over the applicable maintenance and support contract period. Revenue from professional services that are sold on a stand-alone basis is recognized as those services are rendered.

Number of Customers. We believe that the size of our customer base is an indicator of our global market penetration and that our net customer additions are an indicator of the growth of our business. We define a customer as any entity that has 1) an active Rapid7 contract or a contract that expired within 90 days or less of the applicable measurement date, 2) purchased Rapid7 professional services within the 12 months preceding the applicable measurement date or 3) an active subscription to our Logentries product with a contract value equal to or greater than $2,400 per year.

Non-GAAP Financial Results

To supplement our consolidated financial statements, which are prepared and presented in accordance with generally accepted accounting principles in the United States, or GAAP, we provide investors with certain non-GAAP financial measures, including non-GAAP gross profit, non-GAAP operating loss and non-GAAP net loss, which we collectively refer to as non-GAAP financial measures. These non-GAAP financial measures exclude all or a combination of the following (as reflected in the following reconciliation tables): stock-based compensation expense, amortization of acquired intangible assets and acquisition related expenses. The presentation of the non-GAAP financial measures is not intended to be considered in isolation or as a substitute for, or superior to, the financial information prepared and presented in accordance with GAAP. We use these non-GAAP financial measures for financial and operational decision-making purposes and as a means to evaluate period-to-period comparisons, and use certain non-GAAP financial measures as performance measures under our executive bonus plan. We believe that these non-GAAP financial measures provide useful information about our operating results, enhance the overall understanding of past financial performance and future prospects and allow for greater transparency with respect to metrics used by our management in its financial and operational decision

12

Table of Contents

making. While our non-GAAP financial measures are an important tool for financial and operational decision making and for evaluating our own operating results over different periods of time, you should consider our non-GAAP financial measures alongside our GAAP financial results.

We exclude stock-based compensation expense because of varying available valuation methodologies, subjective assumptions and the variety of equity instruments that can impact our non-cash expense. We believe that providing non-GAAP financial measures that exclude stock-based compensation expense allow for more meaningful comparisons between our operating results from period to period. We believe that excluding the impact of amortization of intangible assets allows for more meaningful comparisons between operating results from period to period as the intangibles are valued at the time of acquisition and are amortized over a period of several years after the acquisition. We also exclude the impact of costs directly related to acquisitions as these costs are unrelated to the current operations and neither comparable to the prior period nor predictive of future results, which we believe allows for a more meaningful comparison between the operating results from period to period. Accordingly, we believe that excluding these expenses provides investors and management with greater visibility of the underlying performance of our business operations, facilitates comparison of our results with other periods and may also facilitate comparison with the results of other companies in our industry.

There are limitations in using non-GAAP financial measures because the non-GAAP financial measures are not prepared in accordance with GAAP, may be different from non-GAAP financial measures used by other companies and exclude expenses that may have a material impact upon our reported financial results. Further, stock-based compensation expense has been and will continue to be for the foreseeable future a significant recurring expense in our business and an important part of the compensation provided to our employees.

The following tables reconcile GAAP gross profit to non-GAAP gross profit for the three and six months ended June 30, 2016 and 2015:

13

Table of Contents

The following table reconciles GAAP loss from operations to non-GAAP loss from operations for the three and six months ended June 30, 2016 and 2015:

The following table reconciles GAAP net loss attributable to common shareholders to non-GAAP net loss for the three and six months ended June 30, 2016 and 2015:

Components of Results of Operations

Revenue

We generate revenue primarily from selling products, maintenance and support and professional services through a variety of delivery models to meet the needs of our diverse customer base. We generally bill customers and collect payment for both our products and services up front.

Products

We generate products revenue from the sale of (1) perpetual or term software licenses and associated content subscriptions for our Nexpose, Metasploit and AppSpider products, (2) managed services for our Nexpose, AppSpider and Analytic Response products and (3) cloud-based subscriptions for our InsightUBA, InsightIDR, AppSpider and Logentries products. We also generate an immaterial amount of appliance revenue that is included in our products revenue and is associated with hardware sold as part of our Nexpose product to certain customers. Revenue for software licenses and any other products and services that are sold along with the software license is deferred on our balance sheet and recognized as revenue on the consolidated statements of operations ratably over the contractual period of the maintenance and support, which is typically one to three years.

Maintenance and Support

We generate maintenance and support revenue when customers purchase or renew agreements for maintenance and support of their Nexpose, Metasploit and AppSpider deployments. Substantially all customers purchase an agreement for maintenance and support in connection with their purchase of a Nexpose, Metasploit or AppSpider software license. Revenue from maintenance and support is typically recognized ratably over the term of the applicable agreement.

Professional Services

We generate professional service revenue from the sale of deployment and training services related to our products, incident response services and security advisory services. Revenue from professional services sold together with our other offerings is recognized ratably over the term of the applicable agreement. Revenue from professional services sold on a stand-alone basis is recognized as those services are rendered.

14

Table of Contents

Cost of Revenue

Our total cost of revenue consists of the costs of products, maintenance and support and professional services revenue.

Cost of Products

Cost of products consists of personnel and related costs for our content and cloud operations team, including salaries and other payroll related costs, bonuses, stock-based compensation and allocated overhead costs, which consist of IT, information security, recruiting, facilities and depreciation and are allocated based on relative headcount. Also included in cost of products are software license fees, hardware, Amazon Web Services (AWS) cloud computing costs and internet connectivity expenses directly related to delivering our products, as well as amortization of intangible assets.

Cost of Maintenance and Support

Cost of maintenance and support consists of personnel and related costs for our support team, including salaries and other payroll related costs, bonuses, stock-based compensation and allocated overhead.

Cost of Professional Services

Cost of professional services consists of personnel and related costs for our professional services team, including salaries and other payroll related costs, bonuses, stock-based compensation, costs of contracted third-party vendors, travel and entertainment expenses and allocated overhead.

We expect our cost of revenue to increase on an absolute dollar basis in the near term as we continue to grow our revenue.

Gross Margin

Gross margin, or gross profit as a percentage of revenue, has been and will continue to be affected by a variety of factors, including the average sales price of our products and services, transaction volume growth and the mix of revenue among products and services. We expect our gross margins to fluctuate over time depending on the factors described above.

Operating Expenses

Operating expenses consist of research and development, sales and marketing, and general and administrative expenses. Operating expenses include allocated overhead costs for depreciation, facilities, IT, information security and recruiting. Our allocated costs for IT include costs for compensation of IT personnel and costs associated with our IT infrastructure. All such costs are allocated based on relative headcount.

Research and Development Expense

Research and development expense consists of personnel costs for our research and development team, including salaries, bonuses, stock-based compensation and other related costs. Additional expenses include subcontracting, consulting and professional fees for third-party development resources as well as allocated overhead.

We expect research and development expense to increase on an absolute dollar basis in the near term as we continue to increase investments in our products and technology platform innovation, but to decrease as a percentage of total revenue.

Sales and Marketing Expense

Sales and marketing expense consists of personnel costs for our sales and marketing team, including salaries, commissions, bonuses, stock-based compensation and other related costs. Additional expenses include marketing activities and promotional events, travel and entertainment, training costs, amortization of certain intangible assets and allocated overhead.

We expect sales and marketing expense to increase on an absolute dollar basis in the near term as we continue to increase investments to drive our revenue growth, but to decrease as a percentage of total revenue.

General and Administrative Expense

General and administrative expense consists of personnel costs for our administrative, legal, human resources, and finance and accounting teams, including salaries, bonuses, stock-based compensation and other related costs. Additional expenses include travel and entertainment, subcontracting, professional fees, insurance, acquisition related expenses, amortization of certain intangible assets and allocated overhead.

15

Table of Contents

We expect general and administrative expense to increase on an absolute dollar basis in the near term as we continue to increase investments to support our growth and operations as a public company, but to decrease as a percentage of total revenue.

Interest Income (Expense), Net

Interest income (expense), net consists primarily of interest income on our cash balances, and in prior years, consisted primarily of interest incurred on our term loan obligation and related discount amortization.

Other Income (Expense), Net

Other income (expense), net consists primarily of unrealized and realized gains and losses related to changes in foreign currency exchange rates.

Provision for Income Taxes

Provision for income taxes relates primarily to U.S. federal and state, as well as certain foreign jurisdiction, income taxes. We have generated net losses in all periods to date and recorded a full valuation allowance against our U.S. and Ireland deferred tax assets. We expect to maintain a full valuation allowance on our U.S. and Ireland deferred tax assets in the near term. Realization of any of our deferred tax assets depends upon future earnings, the timing and amount of which are uncertain.

16

Table of Contents

Results of Operations

The following table sets forth our selected consolidated statements of operations data:

17

Table of Contents

The following table sets forth our selected consolidated statements of operations data expressed as a percentage of revenue:

Comparison of the Three Months Ended June 30, 2016 and 2015

Revenue