20-F: CyberArk Software Ltd. 20-F Filing: Subscription Growth Drives Financial Performance

CyberArk's 2023 annual report highlights a transition to subscription-based revenue, with significant growth in annual recurring revenue (ARR) and subscription revenues.

Summary

• CyberArk's 20-F filing details the company's performance and financial standing as of December 31, 2023.
• The company is a global leader in Identity Security, centered on intelligent privilege controls.
• A key focus is protecting organizations against identity-based cyberattacks.
• CyberArk transitioned to a subscription business model, with over 90% of revenue recurring in 2023.
• Annual Recurring Revenue (ARR) increased by 36% to $774 million as of December 31, 2023.
• Subscription revenues increased by 68% to $472.0 million in 2023.
• Recurring revenues increased by 36% to $679.6 million in 2023.
• The company incurred net losses of $130.4 million in 2022 and $66.5 million in 2023.
• The company had more than 8,800 customers as of December 31, 2023.
• The company generated 52.3% of its revenues from the United States, 30.0% from Europe, the Middle East and Africa, and 17.7% from the rest of the world in 2023.
• The company anticipates capital expenditures in 2024 to be less than 1.5% of revenues.
• The company expects to continue to operate as a subscription company throughout 2024.

Sentiment

Score: 6

Explanation: The document presents a mixed sentiment. While there's strong growth in subscription and recurring revenue, the company still reports a net loss. The emphasis on future growth strategies and market leadership is positive, but the presence of various risk factors tempers the overall outlook.

Positives

• Significant growth in ARR and subscription revenues indicates successful transition to a subscription-based model.
• Recurring revenue provides enhanced visibility and predictability of future revenues.
• A large and diverse customer base reduces dependence on any single client.
• Global presence mitigates risks associated with regional economic downturns.
• Continued investment in research and development ensures ongoing innovation and competitiveness.
• The company has a strong focus on attracting, developing and retaining a diverse and inclusive employee base.

Negatives

• The company incurred net losses of $130.4 million in 2022 and $66.5 million in 2023.
• The company faces intense competition from a wide variety of information security vendors operating in different market segments and across diverse IT environments.
• The company is exposed to fluctuations in currency exchange rates, which could negatively affect its financial condition and results of operations.
• The company is subject to a number of regulatory and geopolitical risks associated with global sales and operations, which could materially affect its business.
• The company may fail to fully execute, integrate, or realize the benefits expected from acquisitions, which may require significant management attention, disrupt its business, dilute shareholder value, and adversely affect its results of operations.

Risks

• The information security market is rapidly evolving, and failure to adapt could hinder growth.
• Intense competition from various information security vendors may challenge the company's competitive position.
• Security vulnerabilities in solutions could result in reputational and financial damage.
• Cyberattacks on IT systems could disrupt operations and compromise sensitive data.
• Stringent privacy and data protection laws may limit offerings and increase operational expenses.
• Fluctuations in quarterly results and failure to operate successfully as a subscription company could affect revenue and share price.
• Reliance on third-party cloud providers poses risks of service disruptions.
• Inability to attract and retain qualified personnel could hinder business growth.
• Economic uncertainties or downturns could decrease customer spending on cybersecurity software.
• Conditions in Israel, including the ongoing war between Israel and Hamas and other conflicts in the region, as well as political and economic instability, may adversely impact our business operations.

Future Outlook

The company expects to continue to build on its momentum and operate as a subscription company throughout 2024, focusing on strengthening its Identity Security leadership, extending its global go-to-market reach, growing its customer base, and expanding relationships with existing customers.

Management Comments

• CyberArk has taken steps to focus its GTM strategy on a solution-based framework that will enable CyberArk to evolve from product-focused sales to solution selling, which is expected to better align with our customers problems.
• CyberArk has reimagined what it means to secure workforce users by recognizing that privilege access is not limited to IT users but that the workforce must be able to do their job without security getting in their way.

Industry Context

The announcement reflects the broader industry trend of transitioning to subscription-based models in the software sector, particularly in cybersecurity, where recurring revenue provides more predictable income streams and fosters stronger customer relationships. The emphasis on Identity Security aligns with the increasing recognition of identity as the new security perimeter in the face of evolving cyber threats and the adoption of Zero Trust security models.

Comparison to Industry Standards

• CyberArk's transition to a subscription model aligns with industry leaders like Okta and CrowdStrike, who have successfully leveraged recurring revenue to drive growth and stability.
• Compared to competitors like Delinea and BeyondTrust in the PAM market, CyberArk's focus on a broader Identity Security Platform positions it to address a wider range of customer needs.
• The company's ARR growth of 36% is competitive with other high-growth cybersecurity companies, but it's important to consider the specific market segments and customer bases when making direct comparisons.
• CyberArk's investment in AI and machine learning capabilities mirrors the industry-wide trend of incorporating these technologies to enhance threat detection and automation.

Stakeholder Impact

• Shareholders: Potential for long-term growth and value creation, but also risk of short-term volatility and dilution.
• Employees: Opportunities for career growth and development in a growing company, but also potential for increased competition and pressure to perform.
• Customers: Access to innovative Identity Security solutions and services, but also potential for disruptions due to cyberattacks or service outages.
• Suppliers: Potential for increased business opportunities, but also risk of supply chain disruptions or changes in vendor relationships.
• Creditors: Increased financial stability due to recurring revenue streams, but also potential for increased risk due to economic downturns or other unforeseen events.

Next Steps

• Continue to strengthen Identity Security leadership through ongoing innovation.
• Extend global go-to-market reach through direct and indirect sales channels.
• Grow customer base in enterprise and corporate segments.
• Expand relationships with existing customers through cross-selling and increased user adoption.
• Drive strong adoption of solutions and retain customer base through high-quality service and support.
• Attract, develop, and retain a diverse and inclusive employee base.

Key Dates

Keywords

Identity Security, Privileged Access Management, Cybersecurity, Subscription Revenue, Annual Recurring Revenue, Cloud Security, Zero Trust, Data Protection, Risk Management, Financial Results