Tenable Holdings, Inc. (TENB)

Item 7.        Management's Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes included elsewhere in this Annual Report on Form 10-K, or this Form 10-K. This Form 10-K contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, or the Securities Act and Section 21E of the Securities Exchange Act of 1934, as amended, or the Exchange Act. These statements are often identified by the use of words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “project,” “will,” “would” or the negative or plural of these words or similar expressions or variations. Such forward-looking statements are subject to a number of risks, uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified herein, and those discussed in the section titled “Risk Factors,” set forth in Part I, Item 1A of this Form 10-K and in our other filings with the SEC. You should not rely upon forward-looking statements as predictions of future events. Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

Overview

We are a leading provider of exposure management solutions. Exposure management is the evolution of vulnerability management, advancing risk assessment and prioritization across the entire attack surface – from IT infrastructure to cloud environments to critical infrastructure. Tenable unifies security visibility, insight and action across this attack surface, equipping modern organizations to expose and close the cybersecurity gaps that erode business value, reputation and trust.

Tenable One is an AI-powered exposure management platform that gives enterprises a single, unified view of risk across all types of assets and attack pathways. The platform combines broad, industry-leading vulnerability coverage, spanning IT assets, cloud resources, containers, web apps and identity systems. Tenable One builds on the speed and breadth of vulnerability coverage from our research team of cybersecurity and data science experts, or Tenable Research, and adds aggregated exposure view analytics, guidance on mitigating attack pathways and a centralized asset inventory. It leverages AI, and machine learning, or ML, rapidly analyzing and interpreting vast data sets to pinpoint priority weaknesses and high-risk attack paths, deliver recommendations and automate routine tasks.

Tenable One integrates Tenable Vulnerability Management, Tenable Cloud Security, Tenable Identity Exposure, Tenable Web App Scanning, Tenable Lumin Exposure View, Tenable Attack Surface Management, Tenable Security Center and Tenable OT Security. Our products, including Nessus are also offered on a standalone basis.

Our platform offerings are primarily sold on a subscription basis with a one-year term. Our subscription terms are generally not longer than three years. These offerings are typically prepaid in advance.

We sell and market our products and services through our field sales force that works closely with our channel network of distributors, resellers and managed security service providers (MSSPs), in developing sales opportunities. We typically use a two-tiered channel model whereby we sell our enterprise platform offerings to our distributors, who in turn sell to our resellers, who then sell to end users, who we call customers.

49

Table of Contents

Financial Highlights

Below are our key financial results:

Recurring revenue, which includes revenue from subscription arrangements for software (both recognized ratably over the subscription term and upon delivery) and cloud-based solutions and maintenance associated with perpetual licenses, represented 96% of revenue in 2024 and 95% of revenue in 2023 and 2022.

Key Operating and Financial Metrics

To supplement our consolidated financial statements, which are prepared and presented in accordance with GAAP, we use and monitor the following operating and financial metrics, which include non-GAAP financial measures, to understand and evaluate our core operating and financial performance.

Calculated Current Billings

We use the non-GAAP measure of calculated current billings, which we believe is a key metric to measure our periodic performance. Given that most of our customers pay in advance, we typically recognize a majority of the related revenue ratably over time. We use calculated current billings to measure and monitor our ability to provide our business with the working capital generated by upfront payments from our customers.

Calculated current billings consists of revenue recognized in a period plus the change in current deferred revenue in the corresponding period. We believe that calculated current billings, which excludes deferred revenue for periods beyond twelve months in a customer’s contractual term, more closely correlates with annual contract value. Variability in total billings, depending on the timing of large multi-year contracts and the preference for annual billing versus multi-year upfront billing, may distort growth in one period over another.

Calculated current billings may vary from period-to-period for a number of reasons, and therefore has a number of limitations as a quarter-to-quarter or year-over-year comparative measure. Calculated current billings in any one period may be impacted by the timing and amount of new sales transactions, the timing and amount of renewal transactions, including early renewals, the mix of the amount of subscriptions and perpetual licenses and the timing of billing professional services, as well as the timing and amount of multi-year prepaid contracts, all of which could favorably or unfavorably impact quarter-to-quarter and year-over-year comparisons. For example, an increasing number of large sales transactions, for which the timing has and will continue to vary, may occur in quarters subsequent to or in advance of those that we anticipate. Additionally, our calculation of calculated current billings may be different from other companies that report similar financial measures. Because of these and other limitations, you should consider calculated current billings along with revenue and our other GAAP financial results.

50

Table of Contents

The following table presents a reconciliation of revenue, the most directly comparable financial measure calculated in accordance with GAAP, to calculated current billings:

_______________

(1)    Deferred revenue (current), beginning of period for 2024, 2023 and 2022 includes $0.1 million, $4.1 million and $0.9 million, respectively, related to acquired deferred revenue.

Free Cash Flow

We use the non-GAAP measure of free cash flow, which we define as GAAP net cash flows from operating activities reduced by purchases of property and equipment and capitalized software development costs. We believe free cash flow is an important liquidity measure of the cash (if any) that is available, after purchases of property and equipment and capitalized software development costs, for investment in our business and to make acquisitions. We believe that free cash flow is useful as a liquidity measure because it measures our ability to generate cash.

Our use of free cash flow has limitations as an analytical tool and you should not consider it in isolation or as a substitute for an analysis of our results under GAAP. First, free cash flow is not a substitute for net cash flows from operating activities. Second, other companies may calculate free cash flow or similarly titled non-GAAP financial measures differently or may use other measures to evaluate their performance, all of which could reduce the usefulness of free cash flow as a tool for comparison. Additionally, the utility of free cash flow is further limited as it does not reflect our future contractual commitments and does not represent the total increase or decrease in our cash balance for a given period. Because of these and other limitations, you should consider free cash flow along with net cash provided by operating activities and our other GAAP financial measures.

The following table presents a reconciliation of net cash provided by operating activities, the most directly comparable financial measure calculated in accordance with GAAP, to free cash flow:

Free cash flow for the periods presented was impacted by:

51

Table of Contents

_______________

(1)    The tax payment on intra-entity asset transfer in 2024 includes $0.3 million of interest that is included in cash paid for interest and other financing costs.

Free cash flow in 2022 was benefited by approximately $8 million from prepayments of software subscription costs, insurance and rent made in prior quarters.

Customer Metrics

We believe that our customer base provides a significant opportunity to expand sales of our enterprise platform offerings. We define an enterprise platform customer as a customer that has licensed Tenable One, Tenable Vulnerability Management, Tenable Cloud Security, Tenable Identity Exposure, Tenable OT Security or Tenable Security Center for an annual amount of $5,000 or greater. New enterprise platform customers represent new customer logos during the periods presented and do not include customer conversions from Tenable Nessus Expert to enterprise platforms. The following tables summarize key components of our customer base:

_______________

(1)    The number of new enterprise platform customers added in 2023 includes 104 legacy customers of Ermetic, Ltd. ("Ermetic").

Dollar-Based Net Expansion Rate

Our dollar-based net expansion rate reflects both our customer retention and ability to drive additional sales to our existing customers. Our dollar-based net expansion rate has historically fluctuated and is expected to continue to fluctuate on a quarterly basis as a result of a number of factors, including existing customers' satisfaction with our solutions, existing customer retention, the pricing of our solutions, the availability of competing solutions and the pricing thereof, and the timing of customer renewals. In addition, our sales pipeline opportunities vary from quarter to quarter between new customers and expansion from existing customers, and we do not prioritize one over the other to maximize the dollar-based net expansion rate.

Our dollar-based net expansion rate is evaluated on a last twelve months, or LTM, basis, and is calculated as follows:

•Denominator: To calculate our dollar-based net expansion rate as of the end of a reporting period, we first determine the annual recurring revenue, or ARR, from all active subscriptions (both revenue recognized ratably over the subscription term and upon delivery) and maintenance from perpetual licenses as of the last day of the same reporting period in the prior year. This represents recurring payments that we expect to receive in the next 12-month period from the cohort of customers that existed on the last day of the same reporting period in the prior year.

•Numerator: We measure the ARR for that same cohort of customers representing all subscriptions and maintenance from perpetual licenses based on customer orders as of the end of the reporting period.

We calculate dollar-based net expansion rate by dividing the numerator by the denominator.

The following table presents our dollar-based net expansion rate:

52

Table of Contents

Non-GAAP Income from Operations and Non-GAAP Operating Margin

We use non-GAAP income from operations along with non-GAAP operating margin as key indicators of our financial performance. We define these non-GAAP financial measures as their respective GAAP measures, excluding the effects of stock-based compensation, acquisition-related expenses, restructuring expenses, costs related to the intra-entity asset transfers resulting from the internal restructuring of legal entities and amortization of acquired intangible assets. Acquisition-related expenses include transaction and integration expenses, as well as costs related to the intercompany transfer of acquired intellectual property. Restructuring expenses include non-ordinary course severance, employee related benefits and other charges to reorganize business operations.

We believe that these non-GAAP financial measures provide useful information about our core operating results over multiple periods. There are a number of limitations related to the use of the non-GAAP financial measures as compared to GAAP loss from operations and operating margin, including that non-GAAP income from operations and non-GAAP operating margin exclude stock-based compensation expense, which has been, and will continue to be, a significant recurring expense in our business and an important part of our compensation strategy.

The following table presents a reconciliation of loss from operations, the most directly comparable financial measure calculated in accordance with GAAP, to non-GAAP income from operations, and operating margin, the most directly comparable financial measure calculated in accordance with GAAP, to non-GAAP operating margin:

________________

(1)    The costs related to the intra-entity asset transfer resulted from our internal restructuring of Cymptom.

Non-GAAP Net Income and Non-GAAP Earnings Per Share

We use non-GAAP net income, which excludes stock-based compensation, acquisition-related expenses, restructuring expenses and amortization of acquired intangible assets, as well as the related tax impacts, and the tax impact and related costs of intra-entity asset transfers resulting from the internal restructuring of legal entities as well as deferred income tax benefits recognized in connection with acquisitions, to calculate non-GAAP earnings per share. We believe that these non-GAAP measures provide important information because they facilitate comparisons of our core operating results over multiple periods.

53

Table of Contents

The following table presents a reconciliation of net loss and net loss per share, the most comparable financial measures calculated in accordance with GAAP, to non-GAAP net income and non-GAAP earnings per share:

________________

(1)    The tax impact of stock-based compensation is based on the tax treatment for the applicable tax jurisdictions.

(2)    The tax impact of acquisition-related expenses and restructuring expenses are not material.

(3)    The costs related to the intra-entity asset transfers resulted from our internal restructuring of Cymptom.

(4)    The tax impact of the amortization of acquired intangible assets is included in the tax impact of acquisitions.

(5)    The tax impact of acquisitions in 2024 includes the deferred tax benefits of the 2021 Alsid acquisition. The tax impact of acquisitions in 2023 includes the deferred tax benefits of the Alsid acquisition and a reversal of deferred tax expense related to indefinite-lived intangible assets. The tax impact of acquisitions in 2022 includes a deferred tax benefit of $1.2 million related to Alsid and reversal of the $2.5 million income tax benefit recognized for GAAP purposes related to the partial release of our valuation allowance associated with the Bit Discovery acquisition.

(6)    The tax impact of the intra-entity transfer in 2024 is additional tax incurred related to the 2021 internal restructuring of Indegy. The tax impact of the intra-entity transfer in 2022 is related to current tax expense based on the applicable Israeli tax rates resulting from our internal restructuring of Cymptom.

(7)    An adjustment to reconcile GAAP net loss per share, which excludes potentially dilutive shares, to non-GAAP earnings per share, which includes potentially dilutive shares.

54

Table of Contents

Components of Our Results of Operations

Revenue

We generate revenue from subscription arrangements for our software and cloud-based solutions, perpetual licenses, maintenance associated with perpetual licenses and professional services. We begin to recognize revenue when control of our software or services is transferred to the customer, which for sales made through our channel network is typically concurrent with the transfer to the end user.

Our subscription arrangements generally have annual or multi-year contractual terms to use our software or cloud-based solutions, including ongoing software updates during the contractual period. For software subscriptions that are dependent on ongoing software updates and the ability to identify the latest cybersecurity vulnerabilities, revenue is recognized ratably over the subscription term given the critical utility provided by the ongoing updates that are released through the contract period. When the critical utility of our software does not depend on ongoing updates, we recognize revenue attributable to the license at the time of delivery and the revenue attributable to the maintenance and support ratably over the contract period.

Our perpetual licenses are generally sold with one or more years of maintenance that include ongoing software updates to identify the latest cybersecurity vulnerabilities, which provide critical utility to the software. We recognize perpetual license revenue over a five-year estimated economic life of the expected customer contract.

Professional services and other revenue is primarily comprised of advisory services and training related to the deployment and optimization of our products. These services do not result in significant customization of our products. Professional services and other revenue is recognized as the services are performed.

We have historically experienced, and expect in the future to experience, seasonality in entering into agreements with customers. We typically enter into a significantly higher percentage of agreements with new customers, as well as renewal agreements with existing customers, in the third and fourth quarters of the year. The increase in customer agreements in the third quarter is primarily attributable to U.S. government and related agencies, and the increase in the fourth quarter is primarily attributable to large enterprise account buying patterns typical in the software industry. The ratable nature of our subscription revenue makes this seasonality less apparent in our overall financial results. We expect longer purchasing and approval phases of our sales cycle to continue in 2025.

Cost of Revenue, Gross Profit and Gross Margin

Cost of revenue includes personnel costs related to our technical support group that provides assistance to customers, including salaries, benefits, bonuses, payroll taxes, stock-based compensation and any ordinary course severance. Cost of revenue also includes cloud infrastructure costs, the costs related to professional services and training, depreciation, amortization of acquired and developed technology, hardware costs and allocated overhead costs, which consist of information technology, facilities and insurance.

We intend to continue to invest additional resources in our cloud-based platform and customer support team as we grow our business. The level and timing of investment in these areas could affect our cost of revenue in the future.

Gross profit, or revenue less cost of revenue, and gross margin, or gross profit as a percentage of revenue, have been and will continue to be affected by various factors, including the timing of our acquisition of new customers and our renewals of and follow-on sales to existing customers, the costs associated with operating our cloud-based platform, the extent to which we expand our customer support team and the extent to which we can increase the efficiency of our technology and infrastructure through technological improvements.

We expect our gross profit to increase in absolute dollars but our gross margin may fluctuate from period to period depending on the interplay of all of these factors, particularly as it relates to cloud infrastructure costs, as we expect revenue from our cloud-based subscriptions to increase as a percentage of revenue.

55

Table of Contents

Operating Expenses

Our operating expenses consist of sales and marketing, research and development, general and administrative and restructuring expenses. Personnel costs are the most significant component of operating expenses and consist of salaries, benefits, bonuses, payroll taxes, stock-based compensation and ordinary course severance. Operating expenses also include depreciation and amortization as well as allocated overhead costs, including IT and facilities costs.

Sales and Marketing

Sales and marketing expense consists of personnel costs, sales commissions, marketing programs, travel and entertainment, expenses for conferences, meetings and events and allocated overhead costs. We capitalize sales commissions, including related fringe benefit costs, and recognize the expense over an estimated period of benefit, which ranges between three and four years for subscription arrangements and five years for perpetual license arrangements. Sales commissions on contract renewals are capitalized and amortized ratably over the contract term, with the exception of contracts with renewal periods that are one year or less, in which case the incremental costs are expensed as incurred. Sales commissions on professional services arrangements are expensed as incurred as the contractual periods of these arrangements are generally less than one year.

We intend to continue to make investments in our sales and marketing teams to increase revenue, further penetrate the market and expand our global customer base. We expect our sales and marketing expense to increase in absolute dollars annually and to be our largest operating expense category for the foreseeable future. However, as our revenue increases, we expect our sales and marketing expense to decrease as a percentage of our revenue in 2025 and over the long term. Our sales and marketing expense may fluctuate from period to period due to the timing and extent of these expenses, including sales commissions, which may fluctuate depending on the mix of sales and related expense recognition.

Research and Development

Research and development expense consists of personnel costs, software used to develop our products, travel and entertainment, consulting and professional fees for third-party development resources as well as allocated overhead. Our research and development expense supports our efforts to continue to add capabilities to our existing products and enable the continued detection of new network vulnerabilities.

We expect our research and development expense to continue to increase annually in absolute dollars for the foreseeable future as we continue to invest in research and development efforts to enhance the functionality of our cloud-based platform. However, we expect our research and development expense to decrease as a percentage of our revenue over the long term, although our research and development expense may fluctuate from period to period due to the timing and extent of these expenses.

General and Administrative

General and administrative expense consists of personnel costs for our executive, finance, legal, human resources and administrative departments. Additional expenses include travel and entertainment, professional fees, insurance, allocated overhead and acquisition-related expenses.

We expect our general and administrative expense to continue to increase in absolute dollars and decrease as a percentage of our revenue over the long term, although our general and administrative expense may fluctuate from period to period due to the timing and extent of these expenses. We expect general and administrative expenses in Q1 2025 to increase sequentially, primarily due to termination benefits, including cash compensation and accelerated equity award vesting, related to the passing of our Chairman and Chief Executive Officer.

56

Table of Contents

Restructuring

Restructuring expenses consist of non-ordinary course severance, employee related benefits and other charges to reorganize business operations.

Interest Income, Interest Expense and Other Expense, Net

Interest income consists of income earned on cash and cash equivalents and short-term investments. Interest expense consists primarily of interest expense in connection with our Term Loan, unused commitment fees on our senior secured revolving credit facility, or Revolving Credit Facility, and letter of credit fees. Other expense, net consists primarily of foreign currency remeasurement and transaction gains and losses and any realized and unrealized gains and losses, including impairment losses and gains related to our non-marketable investments.

Provision for Income Taxes

Provision for income taxes consists of income taxes in all jurisdictions in which we conduct business and the related withholding taxes on sales with customers. We have recorded deferred tax assets for which a full valuation allowance has been provided, including net operating loss carryforwards and tax credits. We expect to maintain this full valuation allowance for the foreseeable future as it is more likely than not that some or all of those deferred tax assets may not be realized based on our history of losses.

57

Table of Contents

Results of Operations

The following tables set forth our consolidated results of operations for the periods presented:

_______________

(1)    Includes stock-based compensation expense as follows:

Comparison of 2024 and 2023

Revenue

The increase in revenue of $101.3 million included $101.1 million from existing customers as of January 1, 2024 and $0.2 million from new customers. U.S. revenue increased $44.0 million, or 10%. International revenue increased $57.3 million, or 16%.

58

Table of Contents

Cost of Revenue, Gross Profit and Gross Margin

The increase in cost of revenue of $16.1 million was primarily due to:

•a $5.6 million increase in amortization of acquired intangible assets;

•a $3.5 million increase in third-party cloud infrastructure costs;

•a $2.2 million increase in professional fees;

•a $1.7 million increase in personnel costs, including a $1.4 million increase in stock-based compensation;

•a $1.1 million increase in depreciation and amortization;

•a $0.8 million increase in allocated overhead expenses; and

•a $0.8 million increase in subscription costs.

Operating Expenses

Sales and Marketing

The increase in sales and marketing expense of $1.9 million was primarily due to:

•a $4.7 million increase in sales commissions;

•a $2.8 million increase in allocated overhead expenses;

•a $2.2 million increase in expenses for demand generation programs, including advertising, sponsorships, and brand awareness efforts; and

•a $0.2 million increase in selling expenses, including travel and meeting costs and software subscription costs; partially offset by

•a $7.6 million decrease in personnel costs, net of a $1.4 million increase in stock-based compensation; and

•a $0.4 million decrease in depreciation expense.

Research and Development

The increase in research and development expense of $28.5 million was primarily due to:

•a $21.3 million increase in personnel costs, largely associated with an increase in headcount, including a $10.4 million increase in stock-based compensation;

•a $2.9 million increase in allocated overhead expenses;

•a $1.7 million increase in third-party cloud infrastructure costs;

•a $0.8 million decrease in tax credits;

•a $0.6 million increase in travel and meeting costs; and

59

Table of Contents

•a $0.5 million increase in software subscriptions.

General and Administrative

The increase in general and administrative expense of $7.9 million was primarily due to:

•an $8.6 million increase in personnel costs, largely associated with an increase in headcount, including a $4.9 million increase in stock-based compensation;

•a $5.1 million increase in professional fees; and

•a $0.9 million increase in software subscriptions; partially offset by

•a $4.2 million decrease in acquisition-related expenses; and

•a $2.6 million decrease in allocated overhead expenses.

Restructuring

The increase in restructuring of $1.6 million was due to a $4.5 million non-cash impairment of leasehold improvements and furniture and fixtures that was recorded in connection with the sublease of a portion of our headquarters in 2024, net of a decrease of $2.9 million in non-ordinary course severance and employee-related benefits.

Interest Income, Interest Expense and Other Expense, Net

The $1.4 million decrease in interest income was primarily due to lower interest rates on our cash and cash equivalents and short-term investments. The $0.6 million increase in interest expense was primarily due to an increase in the variable rate of our Term Loan. The $5.2 million decrease in other expense, net was primarily due to $5.6 million of impairment losses on our simple agreements for future equity, or SAFE, investments in 2023 and a $1.5 million gain on the conversion of a SAFE investment to an investment in preferred stock in 2024, partially offset by a $1.9 million increase in foreign exchange losses.

Provision for Income Taxes

In 2024, the provision for income taxes included:

•$6.9 million of discrete expenses primarily related to withholding taxes on sales to customers;

60

Table of Contents

•$6.2 million of income taxes in foreign jurisdictions in which we conduct business;

•$3.3 million related to Base Erosion and Anti-Abuse Tax, or BEAT; and

•$1.2 million of additional tax incurred related to the 2021 restructuring of Indegy; partially offset by

•$0.2 million of deferred tax benefits related to the Alsid acquisition.

In 2023, the provision for income taxes included:

•$5.8 million of income taxes in foreign jurisdictions in which we conduct business; and

•$5.3 million of discrete expenses primarily related to withholding taxes on sales to customers; partially offset by

•$0.2 million of deferred tax benefits related to the Alsid acquisition.

Comparison of 2023 and 2022

For a discussion of our consolidated results for 2023 compared to 2022, see our Annual Report on Form 10-K filed with the SEC on February 28, 2024.

Liquidity and Capital Resources

At December 31, 2024, we had $328.6 million of cash and cash equivalents, which consisted of bank deposits and money market funds, and $248.5 million of short-term investments, which consisted of commercial paper, asset backed securities, U.S. Treasury and agency obligations and corporate and Yankee bonds.

Since our inception, we have primarily financed our operations through cash provided by operations, including payments received from customers using our software products and services. Prior to our IPO, we did not raise any primary institutional capital, and the proceeds of our Series A and Series B redeemable convertible preferred stock financings were used to repurchase shares of capital stock from former stockholders. We have generated significant operating losses as reflected by our accumulated deficit of $861.3 million at December 31, 2024.

We typically invoice our customers annually in advance and, to a lesser extent, multi-years in advance. Therefore, a substantial source of our cash is from such prepayments, which are included in deferred revenue on our consolidated balance sheets. Deferred revenue consists primarily of the unearned portion of billed fees for our subscriptions and perpetual licenses, which is subsequently recognized as revenue in accordance with our revenue recognition policy. At December 31, 2024, we had deferred revenue of $833.2 million, of which $650.4 million was recorded as a current liability and is expected to be recognized as revenue in the next 12 months, provided all other revenue recognition criteria are met.

Our principal uses of cash in recent periods have been funding our operations, expansion of our sales and marketing and research and development activities, investments in infrastructure, acquiring complementary businesses and technology and repurchasing shares of our common stock. We paid $29.2 million, $243.3 million and $66.8 million to acquire businesses in 2024, 2023 and 2022, respectively. In February 2025, we acquired Vulcan Cyber Ltd., or Vulcan Cyber, for approximately $148 million in cash and $2 million of restricted stock units (RSUs) that vest over a future period. We expect to enter into arrangements to acquire or invest in other complementary businesses, services and technologies, including intellectual property rights, in the future.

We expect to continue incurring operating losses in the near term. Even though we generated positive cash flows from operations and free cash flow in 2024, 2023 and 2022, we may not be able to sustain these cash flows. We believe that our existing cash and cash equivalents and short-term investments will be sufficient to fund our operating and capital needs for at least the next 12 months and for the foreseeable future. Our future capital requirements will depend on many factors, including our revenue growth rate, subscription renewal activity, the timing and extent of spending to support further infrastructure and research and development efforts, the timing and extent of additional capital expenditures to invest in new and existing office spaces, the expansion of sales and marketing and international operating activities, any acquisitions of complementary businesses and technologies, the timing of our introduction of new product capabilities and enhancements of our platform and the continuing market acceptance of our platform. It may be necessary to seek additional equity or debt financing to fund our operating and capital needs. In the event that financing is required from outside sources, we may not be able to raise it on terms acceptable to us or at all. If we are unable to raise additional

61

Table of Contents

capital when desired, or if we cannot expand our operations or otherwise capitalize on our business opportunities because we lack sufficient capital, our business, operating results and financial condition would be adversely affected.

Stock Repurchase Plan

In November 2023, our Board of Directors authorized the repurchase of up to $100 million of our common stock. In October 2024, our Board of Directors increased the repurchase authorization by $200 million. Since the inception of the repurchase program and through December 31, 2024, we have purchased a total of 2.7 million shares for $114.9 million.

Term Loan and Revolving Credit Facility

In July 2021, we entered into a credit agreement, or the Credit Agreement, which is comprised of a $375.0 million Term Loan and a $50.0 million Revolving Credit Facility, with a $15.0 million letter of credit sublimit. The Term Loan bears interest at a rate of 2.75% per annum over SOFR, subject to a 0.50% floor, plus a credit spread adjustment depending on the interest period.

From January to December 2024, interest rates on our Term Loan have been between 7.44% and 8.22%. The Term Loan is being amortized at 1% per annum in equal quarterly installments until the final payment of $350.6 million on the July 7, 2028 maturity date. We may be subject to mandatory Term Loan prepayments related to the excess cash provisions in the Credit Agreement if our first lien net leverage ratio (as defined in the Credit Agreement) exceeds 3.5. At December 31, 2024, our first lien net leverage ratio was 0.86.

The Revolving Credit Facility bears interest at a rate, depending on first lien net leverage, ranging from 2.00% to 2.50% over SOFR and matures on July 7, 2026. We pay a commitment fee during the term ranging from 0.25% to 0.375% per annum of the average daily undrawn portion of our Revolving Credit Facility. At December 31, 2024, we were in compliance with the covenants and had $0.2 million of standby letters of credit outstanding under the Revolving Credit Facility.

Cash Flows

The following table summarizes our cash flows for the periods presented:

Operating Activities

Our largest source of cash provided by operating activities is cash collections from sales of our products and services, as we typically invoice our customers in advance. Our primary uses of cash are employee compensation costs, third-party cloud infrastructure and other software subscription costs, demand generation expenditures and general corporate costs.

Investing Activities

From 2023 to 2024, net cash used in investing activities decreased by $171.2 million, primarily due to a decrease in cash paid for acquisitions of $214.1 million, a $3.5 million increase in proceeds from our investments in private companies and a $0.6 million decrease in capitalized software development costs, partially offset by a $43.3 million net decrease in sales of short-term investments, a $2.5 million increase in purchases of property and equipment, and a $1.3 million increase in cash paid for other investments.

62

Table of Contents

From 2022 to 2023, net cash used in investing activities increased by $84.6 million, primarily due to an increase in cash paid for acquisitions of $176.5 million, partially offset by a $71.6 million net increase in sales of short-term investments, $10.0 million in cash paid for other investments in 2022, a $7.7 million decrease in purchases of property and equipment and a $2.7 million decrease in capitalized software development costs.

Financing Activities

From 2023 to 2024, net cash used in financing activities increased by $80.7 million, primarily due to an $85.0 million increase in the repurchase of common stock under our stock repurchase program partially offset by a $4.6 million increase in proceeds from the exercise of stock options.

From 2022 to 2023, net cash provided by financing activities decreased by $22.1 million, primarily due to the repurchase of common stock under our stock repurchase program of $14.9 million and an $8.2 million decrease in proceeds from the exercise of stock options, partially offset by a $1.4 million increase in proceeds from stock issued in connection with our employee stock purchase program.

Contractual Obligations

We have certain contractual obligations for future payments. See Note 7 to our consolidated financial statements for our required operating lease payments and Note 9 for our required payments to Microsoft and AWS for cloud services.

At December 31, 2024, we had other non-cancellable purchase obligations of $24.5 million due in the next twelve months and $10.5 million due thereafter. Additionally, we had $8.5 million of unrecognized tax benefits and $1.4 million of asset retirement obligations, the timing of payments for which is uncertain.

Critical Accounting Policies and Estimates

Our financial statements are prepared in accordance with U.S. GAAP. The preparation of these financial statements requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue and expenses, as well as related disclosures. We evaluate our estimates and assumptions on an ongoing basis. Our estimates are based on historical experience and various other assumptions that we believe to be reasonable under the circumstances. Our actual results could differ from these estimates.

The critical accounting estimates, assumptions and judgments that we believe have the most significant impact on our consolidated financial statements are described below.

Revenue Recognition

We recognize revenue to depict the transfer of promised goods or services to customers in an amount that reflects the consideration to which we expect to be entitled to in exchange for those goods or services. In recognizing revenue, we apply the following steps:

•Identify the contract with a customer

•Identify the performance obligations in the contract

•Determine the transaction price

•Allocate the transaction price to the performance obligations in the contract

•Recognize revenue when or as performance obligations are satisfied

In situations where we enter into a contractual arrangement that includes non-standard terms and conditions, such as acceptance provisions and options to purchase additional products and services, as well as contract modifications, we apply judgment in identifying and assessing the impact on revenue recognition.

We generate revenue from subscription arrangements for our software and cloud-based solutions, perpetual licenses, maintenance associated with perpetual licenses and professional services and other revenue.

63

Table of Contents

Subscription Revenue

Our subscription arrangements generally have annual or multi-year contractual terms and allow customers to use our software or cloud solutions. For our software subscriptions that are dependent on ongoing software updates and the ability to identify the latest cybersecurity vulnerabilities, revenue is recognized ratably over the subscription term given the critical utility provided by the ongoing updates that are released throughout the contract period. When the critical utility of our software does not depend on ongoing updates, we recognize revenue attributable to the license at the time of delivery and the revenue attributable to the maintenance and support ratably over the contract period.

Perpetual License and Maintenance Revenue

Our perpetual licenses are generally sold with one or more years of maintenance that include ongoing software updates to identify the latest cybersecurity vulnerabilities, which provide critical utility to the software. We recognize perpetual license revenue over a five-year estimated economic life of the expected customer contract.

We have estimated the five-year economic life of perpetual license contracts based on historical contract attrition, expected renewal periods, the lifecycle of the our technology and other factors. While we believe that the estimates we have made are reasonable and appropriate, different assumptions and estimates could impact our financial results.

Professional Services and Other Revenue

Professional services and other revenue is primarily comprised of advisory services and training related to the deployment and optimization of our products. These services do not result in significant customization of our products. Professional services and other revenue is recognized as the services are performed.

Contracts with Multiple Performance Obligations

In cases where our contracts with customers contain multiple performance obligations, the contract transaction price is allocated on a relative standalone selling price basis. We typically determine standalone selling price based on observable selling prices of our products and services.

Variable Consideration

We record revenue from sales at the net sales price, which is the transaction price, including estimates of variable consideration when applicable. Certain of our customers may be entitled to receive credits and in certain circumstances, refunds, if service level commitments are not met. We have not historically experienced significant incidents affecting the ability to meet these service level commitments and any estimated refunds related to these agreements have not been material.

Sales through our channel partner network of distributors and resellers are generally discounted as compared to the price that we would sell to an end user. Revenue for sales through our channel network, which is fixed, is recorded net of any distributor or reseller margin.

Deferred Commissions

Sales commissions, including related incremental fringe benefit costs, are considered to be incremental costs of obtaining a contract, and therefore are deferred over an estimated period of benefit, which ranges between three and four years for subscription arrangements and five years for perpetual license arrangements. We have estimated the period of benefit based on the expected contract term including renewal periods, the lifecycle of our technology and other factors. Sales commissions on contract renewals are capitalized and amortized ratably over the contract term, with the exception of contracts with renewal periods that are one year or less, in which case the incremental costs are expensed as incurred. While we believe that the estimates we have made are reasonable and appropriate, different assumptions and estimates could materially impact our reported financial results.

64

Table of Contents

Stock-Based Compensation

Stock-based compensation expense related to stock options, restricted stock, restricted stock units, or RSUs, and purchase rights issued under our 2018 Employee Stock Purchase Plan, or the 2018 ESPP, is calculated based on the fair value of the awards granted and is recognized on a straight-line basis over the requisite service period, which is generally two to four years. Our performance stock units, or PSUs, vest over a period of 4 years and are subject to defined performance and service conditions. Our PSUs and RSUs that include performance-based vesting conditions are expensed using the accelerated attribution method. We account for forfeitures as they occur.

The fair value of our RSUs, PSUs and restricted stock is based on the market price of our common stock on the date of grant. Estimating the fair value of purchase rights under the 2018 ESPP using the Black-Scholes option-pricing model requires assumptions as to the fair value of our underlying common stock, the estimated term of the option, the risk free interest rates, the expected volatility of the price of our common stock and the expected dividend yield. The assumptions used to estimate the fair value of the option awards reflect our best estimates. If any of the assumptions change significantly, stock-based compensation for future awards may differ significantly compared with the awards granted previously.

The assumptions and estimates are as follows:

•Fair Value of Common Stock. See Valuations below.

•Expected Term. We use the actual purchase periods as the expected term in the 2018 ESPP.

•Volatility. This is a measure of the amount by which a financial variable, such as a share price, has fluctuated (historical volatility) or is expected to fluctuate (expected volatility) during a period. We use the volatility of our common stock to calculate expected volatility for the 2018 ESPP.

•Risk-Free Interest Rate. This is the U.S. Treasury rate, having a term that most closely resembles the expected remaining term of each offering of the 2018 ESPP.

•Dividend Yield. We have not and do not expect to pay dividends on our common stock.

Valuations

We use the market price of our common stock at the date of grant as the fair value.

The fair value of the 2018 ESPP purchase rights were estimated on the offering or modification dates based on the following assumptions:

Business Combinations

We account for business combinations by recognizing the fair value of acquired assets and liabilities. The excess purchase consideration over the fair value of acquired assets and liabilities is recorded as goodwill. When determining the fair value of assets acquired and liabilities assumed, a non-recurring Level 3 fair value measurement, we make estimates and assumptions, especially with respect to intangible assets such as identified acquired technology and trade names. We generally determine the fair value of acquired technology using the multi-period excess earnings method, a form of the income approach. However, in certain situations we may use the cost approach. Estimates in valuing identifiable intangible assets include, but are not limited to, projected revenue growth rates, obsolescence projections and an appropriate discount rate. Our estimate of fair value is based upon assumptions we believe to be reasonable, but which are inherently uncertain and, as a result, actual results may differ from estimates. During the measurement period, we may make adjustments to the fair value of assets acquired and liabilities assumed, with offsetting adjustments to goodwill.

65

Table of Contents

Any adjustments made after the measurement period will be reflected in the consolidated statements of operations. Acquisition-related costs are expensed as incurred.

Goodwill

The excess purchase consideration over the fair value of acquired assets and liabilities is recorded as goodwill. We perform our annual impairment assessment on October 1, or more frequently, when events or circumstances indicate impairment may have occurred. We operate as one reporting unit and have elected to first assess qualitative factors to determine whether it is more likely than not that the fair value of the Company as a whole is less than its carrying amount, including goodwill. The qualitative assessment includes an evaluation of relevant events and circumstances, including macroeconomic, industry and market conditions, our overall financial performance, and trends in the value of our common stock. During the periods presented, there were no indications of impairment and it was not more likely than not that goodwill was impaired.

Income Taxes

We are subject to federal, state and local taxes in the United States as well as numerous international jurisdictions. These foreign jurisdictions have different statutory tax rates than the United States. Earnings generated by our international entities are related to transfer pricing requirements as applicable under local jurisdiction tax laws.

We record a provision for income taxes under the asset and liability method, which requires recognition of deferred tax assets and liabilities for the expected future tax consequences of temporary differences between the financial statement carrying amounts and the tax basis of existing assets and liabilities, net operating loss carryforwards and tax credit carryforwards. We have elected to treat taxes related to Global Intangible Low Taxed Income, or GILTI, as a period cost. Deferred tax assets and liabilities are measured using the tax rates that are expected to apply to taxable income for the years in which those tax assets and liabilities are expected to be realized or settled. A valuation allowance is provided if it is more likely than not that some or all of the deferred tax assets will not be realized. We have valuation allowances in all jurisdictions against deferred tax assets net of deferred tax liabilities that will reverse and provide a source of taxable income. Our evaluation of valuation allowances could change in the future and the impact could have a material impact on our financial statements.

We recognize tax benefits from an uncertain tax position if it is more likely than not to be sustained upon audit by the relevant taxing authority. Interest and penalties associated with such uncertain tax positions are classified as a component of income tax expense.

Depending on the jurisdiction, distributions of earnings could be subject to withholding taxes at rates applicable to the distributing jurisdiction. As we intend to continue to reinvest the earnings of foreign subsidiaries indefinitely, we have not provided for a U.S. income tax liability and foreign withholding taxes on undistributed foreign earnings of foreign subsidiaries.

Recently Issued Accounting Pronouncements

See Note 1 to our consolidated financial statements for more information regarding recently issued accounting pronouncements.

Item 7.        Management's Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes included elsewhere in this Annual Report on Form 10-K, or this Form 10-K. This Form 10-K contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, or the Securities Act and Section 21E of the Securities Exchange Act of 1934, as amended, or the Exchange Act. These statements are often identified by the use of words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “project,” “will,” “would” or the negative or plural of these words or similar expressions or variations. Such forward-looking statements are subject to a number of risks, uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified herein, and those discussed in the section titled “Risk Factors,” set forth in Part I, Item 1A of this Form 10-K and in our other filings with the SEC. You should not rely upon forward-looking statements as predictions of future events. Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

Overview

We are a leading provider of exposure management solutions. Exposure management is an effective discipline for managing, measuring and comparing cybersecurity risk in today's complex IT environments.

Our Tenable One Exposure Management Platform, or Tenable One, unifies a variety of data sources into a single exposure view to help organizations gain visibility, prioritize efforts and communicate cyber risks. Building on our existing products, Tenable One is designed to take advantage of the integrations that already exist with our partners and form the foundation of an exposure management program, alongside the other tools, such as endpoint detection and response and firewalls, and required business processes.

With Tenable One, organizations can translate technical data about assets, vulnerabilities and threats into clear business insights and actionable intelligence for security executives and practitioners. The platform combines broad, industry-leading vulnerability coverage in the industry, spanning IT assets, cloud resources, containers, web apps and identity systems. Tenable One builds on the speed and breadth of vulnerability coverage from Tenable Research and adds aggregated exposure view analytics, guidance on mitigating attack pathways and a centralized asset inventory.

Tenable One incorporates Tenable Vulnerability Management, Tenable Web App Scanning, Tenable Lumin, Tenable Cloud Security, Tenable Identity Exposure, Tenable Attack Surface Management, Tenable Security Center and Tenable OT Security. All of these products are also offered as standalone solutions, alongside Nessus.

Our platform offerings are primarily sold on a subscription basis with a one-year term. Our subscription terms are generally not longer than three years. These offerings are typically prepaid in advance. To a lesser extent, we recognize revenue ratably from perpetual licenses and from the related ongoing maintenance.

We sell and market our products and services through our field sales force that works closely with our channel partners, which includes a network of distributors and resellers, in developing sales opportunities. We use a two-tiered channel model whereby we sell our enterprise platform offerings to our distributors, which in turn sell to our resellers, which then sell to end users, which we call customers.

Revenue in 2023, 2022 and 2021 was $798.7 million, $683.2 million and $541.1 million, representing year-over-year growth of 17% and 26%, respectively. Our recurring revenue, which includes revenue from subscription arrangements for software (both revenue recognized ratably over the subscription term and upon delivery) and cloud-based solutions and maintenance associated with perpetual licenses, represented 95% of revenue in 2023, 2022 and 2021. Our net loss in 2023, 2022 and 2021 was $78.3 million, $92.2 million and $46.7 million, respectively. Our cash flows from operating activities were $149.9 million, $131.2 million and $96.8 million in 2023, 2022 and 2021, respectively.

49

Table of Contents

Financial Highlights

Below are our key financial results:

Key Operating and Financial Metrics

To supplement our consolidated financial statements, which are prepared and presented in accordance with GAAP, we use and monitor the following operating and financial metrics, which include non-GAAP financial measures, to understand and evaluate our core operating and financial performance.

Calculated Current Billings

We use the non-GAAP measure of calculated current billings, which we believe is a key metric to measure our periodic performance. Given that most of our customers pay in advance, we typically recognize a majority of the related revenue ratably over time. We use calculated current billings to measure and monitor our ability to provide our business with the working capital generated by upfront payments from our customers.

Calculated current billings consists of revenue recognized in a period plus the change in current deferred revenue in the corresponding period. We believe that calculated current billings, which excludes deferred revenue for periods beyond twelve months in a customer’s contractual term, more closely correlates with annual contract value. Variability in total billings, depending on the timing of large multi-year contracts and the preference for annual billing versus multi-year upfront billing, may distort growth in one period over another.

Calculated current billings may vary from period-to-period for a number of reasons, and therefore has a number of limitations as a quarter-to-quarter or year-over-year comparative measure. Calculated current billings in any one period may be impacted by the timing and amount of new sales transactions, the timing and amount of renewal transactions, including early renewals, the mix of the amount of subscriptions and perpetual licenses, the timing of billing professional services, as well as the timing and amount of multi-year prepaid contracts, all of which could favorably or unfavorably impact quarter-to-quarter and year-over-year comparisons. For example, an increasing number of large sales transactions, for which the timing has and will continue to vary, may occur in quarters subsequent to or in advance of those that we anticipate. Additionally, our calculation of calculated current billings may be different from other companies that report similar financial measures. Because of these and other limitations, you should consider calculated current billings along with revenue and our other GAAP financial results.

50

Table of Contents

The following table presents a reconciliation of revenue, the most directly comparable financial measure calculated in accordance with GAAP, to calculated current billings:

_______________

(1)    Deferred revenue (current), beginning of period for 2023, 2022 and 2021 includes $4.1 million, $0.9 million and $2.6 million, respectively, related to acquired deferred revenue.

Free Cash Flow

We use the non-GAAP measure of free cash flow, which we define as GAAP net cash flows from operating activities reduced by purchases of property and equipment and capitalized software development costs. We believe free cash flow is an important liquidity measure of the cash (if any) that is available, after purchases of property and equipment and capitalized software development costs, for investment in our business and to make acquisitions. We believe that free cash flow is useful as a liquidity measure because it measures our ability to generate or use cash.

Our use of free cash flow has limitations as an analytical tool and you should not consider it in isolation or as a substitute for an analysis of our results under GAAP. First, free cash flow is not a substitute for net cash flows from operating activities. Second, other companies may calculate free cash flow or similarly titled non-GAAP financial measures differently or may use other measures to evaluate their performance, all of which could reduce the usefulness of free cash flow as a tool for comparison. Additionally, the utility of free cash flow is further limited as it does not reflect our future contractual commitments and does not represent the total increase or decrease in our cash balance for a given period. Because of these and other limitations, you should consider free cash flow along with net cash provided by operating activities and our other GAAP financial measures.

The following table presents a reconciliation of net cash provided by operating activities, the most directly comparable financial measure calculated in accordance with GAAP, to free cash flow:

_______________

(1)    Free cash flow for the periods presented was impacted by:

Free cash flow in 2022 was benefited by approximately $8 million from prepayments of software subscription costs, insurance and rent made in prior quarters.

51

Table of Contents

Customer Metrics

We believe that our customer base provides a significant opportunity to expand sales of our enterprise platform offerings. The following tables summarize key components of our customer base:

_______________

(1)    We define an enterprise platform customer as a customer that has licensed Tenable One, Tenable Venerability Management, Tenable Cloud Security, Tenable Identity Exposure, Tenable OT Security or Tenable Security Center for an annual amount of $5,000 or greater. New enterprise platform customers represent new customer logos during the periods presented and do not include customer conversions from Tenable Nessus Expert to enterprise platforms.

(2)    The number of new enterprise platform customers added in 2023 and 2021 include 104 and 95 legacy customers, respectively, of companies we acquired.

Dollar-Based Net Expansion Rate

Our dollar-based net expansion rate reflects both our customer retention and ability to drive additional sales to our existing customers. Our dollar-based net expansion rate has historically fluctuated and is expected to continue to fluctuate on a quarterly basis as a result of a number of factors, including existing customers' satisfaction with our solutions, existing customer retention, the pricing of our solutions, the availability of competing solutions and the pricing thereof, and the timing of customer renewals. In addition, our sales pipeline opportunities vary from quarter to quarter between new customers and expansion from existing customers, and we do not prioritize one over the other to maximize the dollar-based net expansion rate.

Our dollar-based net expansion rate is evaluated on a last twelve months, or LTM, basis, and is calculated as follows:

•Denominator: To calculate our dollar-based net expansion rate as of the end of a reporting period, we first determine the annual recurring revenue, or ARR, from all active subscriptions (both revenue recognized ratably over the subscription term and upon delivery) and maintenance from perpetual licenses as of the last day of the same reporting period in the prior year. This represents recurring payments that we expect to receive in the next 12-month period from the cohort of customers that existed on the last day of the same reporting period in the prior year.

•Numerator: We measure the ARR for that same cohort of customers representing all subscriptions and maintenance from perpetual licenses based on customer orders as of the end of the reporting period.

We calculate dollar-based net expansion rate by dividing the numerator by the denominator.

The following table presents our dollar-based net expansion rate:

52

Table of Contents

Non-GAAP Income from Operations and Non-GAAP Operating Margin

We use non-GAAP income from operations along with non-GAAP operating margin as key indicators of our financial performance. We define these non-GAAP financial measures as their respective GAAP measures, excluding the effects of stock-based compensation, acquisition-related expenses, restructuring expenses, costs related to the intra-entity asset transfers resulting from the internal restructuring of legal entities and amortization of acquired intangible assets. Acquisition-related expenses include transaction and integration expenses, as well as costs related to the intercompany transfer of acquired intellectual property. Restructuring expenses include non-ordinary course severance, employee related benefits and other charges to reorganize business operations.

We believe that these non-GAAP financial measures provide useful information about our core operating results over multiple periods. There are a number of limitations related to the use of the non-GAAP financial measures as compared to GAAP loss from operations and operating margin, including that non-GAAP income from operations and non-GAAP operating margin exclude stock-based compensation expense, which has been, and will continue to be, a significant recurring expense in our business and an important part of our compensation strategy.

The following table presents a reconciliation of loss from operations, the most directly comparable financial measure calculated in accordance with GAAP, to non-GAAP income from operations, and operating margin, the most directly comparable financial measure calculated in accordance with GAAP, to non-GAAP operating margin:

________________

(1)    The costs related to the intra-entity asset transfer resulted from our internal restructuring of Cymptom.

Non-GAAP Net Income and Non-GAAP Earnings Per Share

We use non-GAAP net income, which excludes stock-based compensation, acquisition-related expenses, restructuring expenses and amortization of acquired intangible assets, as well as the related tax impacts, and the tax impact and related costs of intra-entity asset transfers resulting from the internal restructuring of legal entities as well as deferred income tax benefits recognized in connection with acquisitions, to calculate non-GAAP earnings per share. We believe that these non-GAAP measures provide important information because they facilitate comparisons of our core operating results over multiple periods.

53

Table of Contents

The following table presents a reconciliation of net loss and net loss per share, the most comparable financial measures calculated in accordance with GAAP, to non-GAAP net income and non-GAAP earnings per share:

________________

(1)    The tax impact of stock-based compensation is based on the tax treatment for the applicable tax jurisdictions.

(2)    The tax impact of acquisition-related expenses and restructuring expenses are not material.

(3)    The costs related to the intra-entity asset transfers resulted from our internal restructuring of Cymptom.

(4)    The tax impact of the amortization of acquired intangible assets is included in the tax impact of acquisitions.

(5)    The tax impact of acquisitions in 2023 includes the deferred tax benefits of the Alsid acquisition and a reversal of deferred tax expense related to indefinite-lived intangible assets. The tax impact of acquisitions in 2022 includes a deferred tax benefit of $1.2 million related to Alsid and reversal of the $2.5 million income tax benefit recognized for GAAP purposes related to the partial release of our valuation allowance associated with the Bit Discovery acquisition. The tax impact of acquisitions in 2021 includes a reversal of the $7.9 million income tax benefit recognized for GAAP purposes related to the partial release of our valuation allowance and a $2.6 million benefit related to Alsid.

(6)    The tax impact of the intra-entity transfers is related to current tax expense based on the applicable Israeli tax rates resulting from our internal restructuring of Cymptom in 2022 and Indegy in 2021.

(7)    An adjustment to reconcile GAAP net loss per share, which excludes potentially dilutive shares, to non-GAAP earnings per share, which includes potentially dilutive shares.

54

Table of Contents

Components of Our Results of Operations

Revenue

We generate revenue from subscription arrangements for our software and cloud-based solutions, perpetual licenses, maintenance associated with perpetual licenses and professional services.

Our subscription arrangements generally have annual or multi-year contractual terms to use our software or cloud-based solutions, including ongoing software updates during the contractual period. For software subscriptions that are dependent on ongoing software updates and the ability to identify the latest cybersecurity vulnerabilities, revenue is recognized ratably over the subscription term given the critical utility provided by the ongoing updates that are released through the contract period. When the critical utility of our software does not depend on ongoing updates, we recognize revenue attributable to the license at the time of delivery and the revenue attributable to the maintenance and support ratably over the contract period.

Our perpetual licenses are generally sold with one or more years of maintenance, which includes ongoing software updates. Given the critical utility provided by the ongoing software updates and updated ability to identify network vulnerabilities included in maintenance, we combine the perpetual license and the maintenance into a single performance obligation. Perpetual license arrangements generally contain a material right related to the customer’s ability to renew maintenance at a price that is less than the initial license fee. We apply a practical alternative to allocating a portion of the transaction price to the material right performance obligation and estimate a hypothetical transaction price which includes fees for expected maintenance renewals based on the estimated economic life of perpetual license contracts. We allocate the transaction price between the cybersecurity subscription provided in the initial contract and the material right related to expected contract renewals based on the hypothetical transaction price. We recognize the amount allocated to the combined license and maintenance performance obligation over the initial contractual period, which is generally one year. We recognize the amount allocated to the material right over the expected maintenance renewal period, which begins at the end of the initial contractual term and is generally four years. We have estimated the five-year economic life of perpetual license contracts based on historical contract attrition, expected renewal periods, the lifecycle of our technology and other factors. This estimate may change over time.

Professional services and other revenue is primarily comprised of advisory services and training related to the deployment and optimization of our products. These services do not result in significant customization of our products. Professional services and other revenue is recognized as the services are performed.

We have historically experienced, and expect in the future to experience, seasonality in entering into agreements with customers. We typically enter into a significantly higher percentage of agreements with new customers, as well as renewal agreements with existing customers, in the third and fourth quarters of the year. The increase in customer agreements in the third quarter is primarily attributable to U.S. government and related agencies, and the increase in the fourth quarter is primarily attributable to large enterprise account buying patterns typical in the software industry. The ratable nature of our subscription revenue makes this seasonality less apparent in our overall financial results. In 2023, we experienced longer sales cycle times in the purchasing and approval phases of our sales cycle, and this trend is expected to continue in 2024.

Cost of Revenue, Gross Profit and Gross Margin

Cost of revenue includes personnel costs related to our technical support group that provides assistance to customers, including salaries, benefits, bonuses, payroll taxes, stock-based compensation and any severance. Cost of revenue also includes cloud infrastructure costs, the costs related to professional services and training, depreciation, amortization of acquired and developed technology, hardware costs and allocated overhead costs, which consist of information technology, facilities and insurance.

We intend to continue to invest additional resources in our cloud-based platform and customer support team as we grow our business. The level and timing of investment in these areas could affect our cost of revenue in the future.

Gross profit, or revenue less cost of revenue, and gross margin, or gross profit as a percentage of revenue, have been and will continue to be affected by various factors, including the timing of our acquisition of new customers and our

55

Table of Contents

renewals of and follow-on sales to existing customers, the costs associated with operating our cloud-based platform, the extent to which we expand our customer support team and the extent to which we can increase the efficiency of our technology and infrastructure through technological improvements.

We expect our gross profit to increase in absolute dollars but our gross margin may fluctuate from period to period depending on the interplay of all of these factors, particularly as it relates to cloud infrastructure costs, as we expect revenue from our cloud-based subscriptions to increase as a percentage of revenue.

Operating Expenses

Our operating expenses consist of sales and marketing, research and development, general and administrative expenses and restructuring expenses. Personnel costs are the most significant component of operating expenses and consist of salaries, benefits, bonuses, payroll taxes, stock-based compensation and ordinary course severance. Operating expenses also include depreciation and amortization as well as allocated overhead costs, including IT and facilities costs.

Sales and Marketing

Sales and marketing expense consists of personnel costs, sales commissions, marketing programs, travel and entertainment, expenses for conferences, meetings and events and allocated overhead costs. We capitalize sales commissions, including related fringe benefit costs, and recognize the expense over an estimated period of benefit, which ranges between three and four years for subscription arrangements and five years for perpetual license arrangements. Sales commissions on contract renewals are capitalized and amortized ratably over the contract term, with the exception of contracts with renewal periods that are one year or less, in which case the incremental costs are expensed as incurred. Sales commissions on professional services arrangements are expensed as incurred as the contractual periods of these arrangements are generally less than one year.

We intend to continue to make investments in our sales and marketing teams to increase revenue, further penetrate the market and expand our global customer base. We expect our sales and marketing expense to increase in absolute dollars annually and to be our largest operating expense category for the foreseeable future. However, as our revenue increases, we expect our sales and marketing expense to decrease as a percentage of our revenue over the long term. Our sales and marketing expense may fluctuate from period to period due to the timing and extent of these expenses, including sales commissions, which may fluctuate depending on the mix of sales and related expense recognition.

Research and Development

Research and development expense consists of personnel costs, software used to develop our products, travel and entertainment, consulting and professional fees for third-party development resources as well as allocated overhead. Our research and development expense supports our efforts to continue to add capabilities to our existing products and enable the continued detection of new network vulnerabilities.

We expect our research and development expense to continue to increase annually in absolute dollars for the foreseeable future as we continue to invest in research and development efforts to enhance the functionality of our cloud-based platform. However, we expect our research and development expense to decrease as a percentage of our revenue over the long term, although our research and development expense may fluctuate from period to period due to the timing and extent of these expenses.

General and Administrative

General and administrative expense consists of personnel costs for our executive, finance, legal, human resources and administrative departments. Additional expenses include travel and entertainment, professional fees, insurance, allocated overhead, and acquisition-related expenses.

We expect our general and administrative expense to continue to increase in absolute dollars and decrease as a percentage of our revenue over the long term, although our general and administrative expense may fluctuate from period to period due to the timing and extent of these expenses.

56

Table of Contents

Restructuring

Restructuring expenses consist of non-ordinary course severance, employee related benefits and other charges to reorganize business operations.

Interest Income, Interest Expense and Other Expense, Net

Interest income consists of income earned on cash and cash equivalents and short-term investments. Interest expense consists primarily of interest expense in connection with our senior secured term loan facility, or Term Loan, unused commitment fees on our senior secured revolving credit facility, or Revolving Credit Facility, and letter of credit fees. Other expense, net consists primarily of foreign currency remeasurement and transaction gains and losses and impairment losses related to our non-marketable simple agreements for future equity ("SAFE") investments.

Provision (Benefit) for Income Taxes

Provision (benefit) for income taxes consists of income taxes in all foreign jurisdictions in which we conduct business and the related withholding taxes on sales with customers. We have recorded deferred tax assets for which a full valuation allowance has been provided, including net operating loss carryforwards and tax credits. We expect to maintain this full valuation allowance for the foreseeable future as it is more likely than not that some or all of those deferred tax assets may not be realized based on our history of losses.

57

Table of Contents

Results of Operations

The following tables set forth our consolidated results of operations for the periods presented:

_______________

(1)    Includes stock-based compensation expense as follows:

Comparison of 2023 and 2022

Revenue

The increase in revenue of $115.5 million included $125.9 million from existing customers as of January 1, 2023 net of a decrease from new customers of $10.4 million as compared to the prior year. U.S. revenue increased $55.6 million, or 14%. International revenue increased $59.9 million, or 20%.

58

Table of Contents

Cost of Revenue, Gross Profit and Gross Margin

The increase in cost of revenue of $28.8 million was primarily due to:

•a $12.2 million increase in personnel costs, primarily due to support for cloud-based products and an increase in headcount, including a $2.9 million increase in stock-based compensation;

•a $10.3 million increase in third-party cloud infrastructure costs;

•a $2.5 million increase in the amortization of acquired intangible assets;

•a $1.8 million increase in depreciation and amortization;

•a $0.7 million increase in allocated overhead expenses;

•a $0.5 million increase in subscription costs; and

•a $0.3 million increase in professional fees.

Operating Expenses

Sales and Marketing

The increase in sales and marketing expense of $44.0 million was primarily due to:

•a $22.9 million increase in personnel costs, related to an increase in headcount, including an $11.9 million increase in stock-based compensation;

•a $9.8 million increase in expenses for demand generation programs, including advertising, sponsorships, and brand awareness efforts;

•a $9.3 million increase in selling expenses, including travel and meeting costs and software subscription costs;

•a $1.6 million increase in allocated overhead expenses; and

•a $0.3 million increase in depreciation expense.

Research and Development

The increase in research and development expense of $9.6 million was primarily due to:

•a $9.6 million increase in personnel costs, largely associated with an increase in headcount, including a $5.7 million increase in stock-based compensation and a $1.4 million decrease in capitalized software development costs;

•a $4.8 million increase in third-party cloud infrastructure costs;

•a $1.0 million increase in allocated overhead expenses;

•a $0.5 million increase in travel and meeting costs; and

59

Table of Contents

•a $0.4 million increase in depreciation expense; partially offset by

•a $4.3 million decrease in costs for independent contractors; and

•a $2.3 million increase in tax credits.

General and Administrative

The increase in general and administrative expense of $13.0 million was primarily due to:

•a $5.6 million increase in personnel costs, largely associated with an increase in headcount, including a $4.2 million increase in stock-based compensation;

•a $3.5 million increase in acquisition-related expenses;

•a $2.1 million increase in professional fees;

•a $1.1 million increase in indirect taxes such as VAT, GST and other;

•a $0.9 million increase in bank charges; and

•a $0.5 million increase in travel and meeting costs; partially offset by

•a $0.8 million decrease in costs related to intra-entity asset transfers.

Restructuring

The $4.5 million in restructuring includes non-ordinary course severance and employee related benefits related to the optimization of our go-to-market efforts, including reducing our reliance on sales specialists and streamlining layers of management. These changes to our go-to-market and supporting functions resulted in a 5% reduction in our work force. We expect to recognize an additional $2 million to $3 million in the three months ended March 31, 2024 related to the reduction in our work force that took place in January 2024. Additionally, we are currently in negotiations to sublease a portion of our real estate, which could result in a non-cash impairment charge of $6 million to $7 million in 2024.

Interest Income, Interest Expense and Other Expense, Net

The $18.4 million increase in interest income was due to a higher interest rate on an increased average amount of cash and cash equivalents and short-term investments. The $12.3 million increase in interest expense was primarily due

60

Table of Contents

to an increase in the variable rate of our Term Loan. The $3.8 million increase in other expense, net was primarily due to $5.6 million of impairment losses on our SAFE investments partially offset by a decrease in foreign exchange losses.

Provision for Income Taxes

In 2023, the provision for income taxes included:

•$5.8 million of income taxes in foreign jurisdictions in which we conduct business;

•$5.3 million of discrete expenses primarily related to withholding taxes on sales to customers; partially offset by

•$0.2 million of deferred tax benefits related to the Alsid acquisition.

In 2022, the provision for income taxes included:

•$4.8 million of income taxes in foreign jurisdictions in which we conduct business;

•$3.9 million of discrete expenses primarily related to withholding taxes on sales to customers; and

•$2.7 million of current expense from the restructuring of our research and development operations in Israel; partially offset by

•a $2.5 million benefit from releasing a valuation allowance related to the Bit Discovery acquisition;

•$1.2 million of deferred tax benefits related to the Alsid acquisition; and

•$0.8 million of discrete benefits.

Comparison of 2022 and 2021

Revenue

The increase in revenue of $142.1 million included $132.8 million from existing customers at January 1, 2022 and $9.3 million from new customers. U.S. revenue increased $71.2 million, or 23%. International revenue increased $70.9 million, or 31%.

Cost of Revenue, Gross Profit and Gross Margin

The increase in cost of revenue of $48.4 million was primarily due to:

•a $24.1 million increase in third-party cloud infrastructure costs;

61

Table of Contents

•a $13.8 million increase in personnel costs, primarily due to support for cloud-based products and an increase in headcount, including a $3.9 million increase in stock-based compensation;

•a $4.9 million increase in the amortization of acquired intangible assets;

•a $2.8 million increase in professional fees;

•a $0.7 million increase in the cost of goods;

•a $0.7 million increase in depreciation and amortization;

•a $0.6 million increase in subscription costs; and

•a $0.6 million increase in allocated overhead expenses.

The amounts above are net of $0.7 million in savings due to the impact of foreign exchange rates.

Operating Expenses

Sales and Marketing

The increase in sales and marketing expense of $79.3 million was primarily due to:

•a $52.5 million increase in personnel costs, related to an increase in headcount, including a $20.0 million increase in stock-based compensation;

•a $14.2 million increase in sales commissions;

•a $5.8 million increase in expenses for demand generation programs, including advertising, sponsorships, and brand awareness efforts;

•a $5.4 million increase in selling expenses, including travel and meeting costs and software subscription costs; and

•a $1.5 million increase in allocated overhead expenses.

The amounts above are net of $3.9 million in savings due to the impact of foreign exchange rates.

Research and Development

The increase in research and development expense of $27.1 million was primarily due to:

•a $19.8 million increase in personnel costs, largely associated with an increase in headcount, including a $10.9 million increase in stock-based compensation and is net of a $7.7 million increase in capitalized software development costs;

•a $3.1 million increase in third-party cloud infrastructure costs;

•a $2.0 million increase in software subscriptions;

•a $1.1 million increase in allocated overhead expenses; and

•a $0.5 million increase in travel and meeting costs.

The amounts above are net of $2.4 million in savings due to the impact of foreign exchange rates.

62

Table of Contents

General and Administrative

The increase in general and administrative expense of $13.3 million was primarily due to:

•an $11.5 million increase in personnel costs, largely associated with an increase in headcount, including a $6.4 million increase in stock-based compensation;

•a $1.9 million increase in professional fees;

•a $0.9 million increase in software subscription costs;

•a $0.9 million increase in indirect taxes such as VAT or GST;

•a $0.8 million increase in costs related to intra-entity asset transfers; and

•a $0.3 million increase in travel and meeting costs; partially offset by

•a $4.1 million decrease in acquisition-related expenses; and

•a $0.7 million decrease in allocated overhead expenses.

The amounts above are net of $0.7 million in savings due to the impact of foreign exchange rates.

Interest Income, Interest Expense and Other Expense, Net

The $5.7 million increase in interest income was due to lower returns on our short-term investments in 2021. The $11.5 million increase in interest expense was primarily related to interest expense for our Term Loan entered into in July 2021. The $2.8 million increase in other expense, net was primarily due to an increase in foreign exchange losses.

Provision (Benefit) for Income Taxes

In 2022, the provision for income taxes included:

•$4.8 million of income taxes in foreign jurisdictions in which we conduct business;

•$3.9 million of discrete expenses primarily related to withholding taxes on sales to customers; and

•$2.7 million of current expense from the restructuring of our research and development operations in Israel; partially offset by

•a $2.5 million benefit from releasing a valuation allowance related to the Bit Discovery acquisition;

•$1.2 million of deferred tax benefits related to the Alsid acquisition; and

•$0.8 million of discrete benefits.

In 2021, the benefit for income taxes included:

63

Table of Contents

•$7.9 million of income tax benefits related to the partial release of our valuation allowance associated with the Accurics acquisition;

•$2.9 million of discrete benefits primarily related to a Supreme Court decision in India on the taxability of software license payments to nonresidents and the associated withholding taxes; and

•a $2.6 million deferred tax benefit related to the Alsid acquisition; partially offset by

•$3.8 million of income taxes in foreign jurisdictions in which we conduct business;

•$2.8 million of discrete expenses primarily related to withholding taxes on sales to customers; and

•$2.8 million of current expense from the restructuring of our research and development operations in Israel.

Liquidity and Capital Resources

At December 31, 2023, we had $237.1 million of cash and cash equivalents, which consisted of bank deposits and money market funds, and $236.8 million of short-term investments, which consisted of commercial paper, asset backed securities, certificates of deposit, U.S. Treasury and agency obligations, and corporate and supranational bonds.

Since our inception, we have primarily financed our operations through cash provided by operations, including payments received from customers using our software products and services. Prior to our IPO, we did not raise any primary institutional capital, and the proceeds of our Series A and Series B redeemable convertible preferred stock financings were used to repurchase shares of capital stock from former stockholders. We have generated significant operating losses, as reflected by our accumulated deficit of $825.0 million at December 31, 2023.

We typically invoice our customers annually in advance and, to a lesser extent, multi-years in advance. Therefore, a substantial source of our cash is from such prepayments, which are included in deferred revenue on our consolidated balance sheets. Deferred revenue consists primarily of the unearned portion of billed fees for our subscriptions and perpetual licenses, which is subsequently recognized as revenue in accordance with our revenue recognition policy. At December 31, 2023, we had deferred revenue of $750.5 million, of which $580.8 million was recorded as a current liability and is expected to be recognized as revenue in the next 12 months, provided all other revenue recognition criteria are met.

Our principal uses of cash in recent periods have been funding our operations, expansion of our sales and marketing and research and development activities, investments in infrastructure, including the build-out of our new headquarters, and acquiring complementary businesses and technology. We paid $243.3 million and $66.8 million to acquire businesses in 2023 and 2022, respectively. We may in the future enter into arrangements to acquire or invest in other complementary businesses, services and technologies, including intellectual property rights.

We expect to continue incurring operating losses in the near term. Even though we generated positive cash flows from operations and free cash flow in 2023, 2022 and 2021, we may not be able to sustain these cash flows. We believe that our existing cash and cash equivalents and short-term investments will be sufficient to fund our operating and capital needs for at least the next 12 months and for the foreseeable future. Our future capital requirements will depend on many factors, including our revenue growth rate, subscription renewal activity, the timing and extent of spending to support further infrastructure and research and development efforts, the timing and extent of additional capital expenditures to invest in new and existing office spaces, the expansion of sales and marketing and international operating activities, any acquisitions of complementary businesses and technologies, the timing of our introduction of new product capabilities and enhancements of our platform and the continuing market acceptance of our platform. It may be necessary to seek additional equity or debt financing to fund our operating and capital needs. In the event that financing is required from outside sources, we may not be able to raise it on terms acceptable to us or at all. If we are unable to raise additional capital when desired, or if we cannot expand our operations or otherwise capitalize on our business opportunities because we lack sufficient capital, our business, operating results and financial condition would be adversely affected.

64

Table of Contents

Stock Repurchase Plan

In November 2023, our Board of Directors authorized the repurchase of up to $100 million of our common stock. In 2023, we purchased 356,240 shares for $14.9 million. The remaining amount available to purchase stock under the stock repurchase program was $85.1 million at December 31, 2023.

Term Loan and Revolving Credit Facility

In July 2021, we entered into a credit agreement, or the Credit Agreement, which is comprised of a $375.0 million Term Loan and a $50.0 million Revolving Credit Facility, with a $15.0 million letter of credit sublimit. On June 1, 2023, we began using SOFR for the base interest rate instead of LIBOR. The Term Loan bears interest at a rate of 2.75% per annum over SOFR, subject to a 0.50% floor, plus a credit spread adjustment depending on the interest period.

From January to December 2023, interest rates on our Term Loan have been between 7.16% and 8.21%. The Term Loan is being amortized at 1% per annum in equal quarterly installments until the final payment of $350.6 million on the July 7, 2028 maturity date. We may be subject to mandatory Term Loan prepayments related to the excess cash provisions in the Credit Agreement if our first lien net leverage ratio (as defined in the Credit Agreement) exceeds 3.5, and at December 31, 2023, our first lien net leverage ratio was 1.28.

The Revolving Credit Facility bears interest at a rate, depending on first lien net leverage, ranging from 2.00% to 2.50% over SOFR and matures on July 7, 2026. We pay a commitment fee during the term ranging from 0.25% to 0.375% per annum of the average daily undrawn portion of the revolving commitments based on the first lien net leverage ratio. The Credit Agreement contains customary representations and warranties and affirmative and negative covenants. Additionally, if at least 35% of the Revolving Credit Facility is drawn on the last day of the quarter, the total net leverage ratio cannot be greater than 5.50 to 1.00. At December 31, 2023, we were in compliance with the covenants and at December 31, 2023, we had $0.2 million of standby letters of credit outstanding under the Revolving Credit Facility.

Cash Flows

The following table summarizes our cash flows for the periods presented:

Operating Activities

Our largest source of cash provided by operating activities is cash collections from sales of our products and services, as we typically invoice our customers in advance. Our primary uses of cash are employee compensation costs, third-party cloud infrastructure and other software subscription costs, demand generation expenditures and general corporate costs.

Investing Activities

From 2022 to 2023, net cash used in investing activities increased by $84.6 million, primarily due to an increase in cash paid for acquisitions of $176.5 million, partially offset by a $71.6 million net increase in sales of short-term investments, $10.0 million in cash paid for other investments in 2022, a $7.7 million decrease in purchases of property and equipment and a $2.7 million decrease in capitalized software development costs.

65

Table of Contents

From 2021 to 2022, net cash used in investing activities decreased by $263.6 million, primarily due to a decrease in cash paid for acquisitions of $191.7 million and a net decrease in cash paid for short-term investments of $89.4 million in 2022, partially offset by an increase in capitalized software development costs of $7.1 million, an increase in purchases of property and equipment of $5.5 million and an increase in cash paid for other investments of $5.0 million.

Financing Activities

From 2022 to 2023, net cash provided by financing activities decreased by $22.1 million, primarily due to the repurchase of common stock under our stock repurchase program of $14.9 million and an $8.2 million decrease in proceeds from the exercise of stock options, partially offset by a $1.4 million increase in proceeds from stock issued in connection with our employee stock purchase program.

From 2021 to 2022, net cash provided by financing activities decreased by $374.3 million, primarily due to the net proceeds from the issuance of our Credit Facility in 2021 of $365.7 million, a decrease of $6.5 million in the proceeds from the exercise of stock options and $3.8 million of principal payments made on our Term Loan in 2022, partially offset by a $1.1 million increase in proceeds from stock issued in connection with our employee stock purchase plan.

Contractual Obligations

We have certain contractual obligations for future payments. See Note 7 to our Consolidated Financial Statements in this Annual Report on Form 10-K for our required operating lease payments and Note 9 for our required payments to Microsoft and Amazon Web Services for cloud services.

At December 31, 2023, we had other non-cancellable purchase obligations of $26.1 million due in the next twelve months and $22.1 million due thereafter. Additionally, we had $8.3 million of unrecognized tax benefits and $1.4 million of asset retirement obligations, the timing of payments for which is uncertain.

Critical Accounting Policies and Estimates

Our financial statements are prepared in accordance with U.S. GAAP. The preparation of these financial statements requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue and expenses, as well as related disclosures. We evaluate our estimates and assumptions on an ongoing basis. Our estimates are based on historical experience and various other assumptions that we believe to be reasonable under the circumstances. Our actual results could differ from these estimates.

The critical accounting estimates, assumptions and judgments that we believe have the most significant impact on our consolidated financial statements are described below.

Revenue Recognition

We recognize revenue to depict the transfer of promised goods or services to customers in an amount that reflects the consideration to which we expect to be entitled to in exchange for those goods or services. In recognizing revenue, we apply the following steps:

•Identify the contract with a customer

•Identify the performance obligations in the contract

•Determine the transaction price

•Allocate the transaction price to the performance obligations in the contract

•Recognize revenue when or as performance obligations are satisfied

In situations where we enter into a contractual arrangement that includes non-standard terms and conditions, such as acceptance provisions and options to purchase additional products and services, as well as contract modifications, we apply judgment in identifying and assessing the impact on revenue recognition.

66

Table of Contents

We generate revenue from subscription arrangements for our software and cloud-based solutions, perpetual licenses, maintenance associated with perpetual licenses and professional services and other revenue.

Subscription Revenue

Our subscription arrangements generally have annual or multi-year contractual terms and allow customers to use our software or cloud solutions. For our software subscriptions that are dependent on ongoing software updates and the ability to identify the latest cybersecurity vulnerabilities, revenue is recognized ratably over the subscription term given the critical utility provided by the ongoing updates that are released throughout the contract period. When the critical utility of our software does not depend on ongoing updates, we recognize revenue attributable to the license at the time of delivery and the revenue attributable to the maintenance and support ratably over the contract period.

Perpetual License and Maintenance Revenue

Our perpetual licenses are generally sold with one or more years of maintenance, which include ongoing software updates and the ongoing ability to identify the latest cybersecurity vulnerabilities. Given the critical utility provided by the ongoing software updates and updated ability to identify network vulnerabilities included in maintenance, we combine the perpetual license and the maintenance into a single performance obligation. Perpetual license arrangements generally contain a material right related to the customer’s ability to renew maintenance at a price that is less than the initial license fee. We apply a practical alternative to allocating a portion of the transaction price to the material right performance obligation and estimate a hypothetical transaction price which includes fees for expected maintenance renewals based on the estimated economic life of the perpetual license contracts. We allocate the transaction price between the cybersecurity subscription provided in the initial contract and the material right related to expected contract renewals based on the hypothetical transaction price. We recognize the amount allocated to the combined license and maintenance performance obligation over the initial contractual period, which is generally one year. We recognize the amount allocated to the material right over the expected maintenance renewal period, which begins at the end of the initial contractual term and is generally four years. We have estimated the five-year economic life of perpetual license contracts based on historical contract attrition, expected renewal periods, the lifecycle of the our technology and other factors. While we believe that the estimates we have made are reasonable and appropriate, different assumptions and estimates could materially impact our reported financial results.

Professional Services and Other Revenue

Professional services and other revenue is primarily comprised of advisory services and training related to the deployment and optimization of our products. These services do not result in significant customization of our products. Professional services and other revenue is recognized as the services are performed.

Contracts with Multiple Performance Obligations

In cases where our contracts with customers contain multiple performance obligations, the contract transaction price is allocated on a relative standalone selling price basis. We typically determine standalone selling price based on observable selling prices of our products and services.

Variable Consideration

We record revenue from sales at the net sales price, which is the transaction price, including estimates of variable consideration when applicable. Certain of our customers may be entitled to receive credits and in certain circumstances, refunds, if service level commitments are not met. We have not historically experienced significant incidents affecting the ability to meet these service level commitments and any estimated refunds related to these agreements have not been material.

Sales through our channel partner network of distributors and resellers are generally discounted as compared to the price that we would sell to an end user. Revenue for sales through our channel network, which is fixed, is recorded net of any distributor or reseller margin.

67

Table of Contents

Deferred Commissions

Sales commissions, including related incremental fringe benefit costs, are considered to be incremental costs of obtaining a contract, and therefore are deferred over an estimated period of benefit, which ranges between three and four years for subscription arrangements and five years for perpetual license arrangements. We have estimated the period of benefit based on the expected contract term including renewal periods, the lifecycle of our technology and other factors. Sales commissions on contract renewals are capitalized and amortized ratably over the contract term, with the exception of contracts with renewal periods that are one year or less, in which case the incremental costs are expensed as incurred. While we believe that the estimates we have made are reasonable and appropriate, different assumptions and estimates could materially impact our reported financial results.

Stock-Based Compensation

Stock-based compensation expense related to stock options, restricted stock, restricted stock units, or RSUs, and purchase rights issued under our 2018 Employee Stock Purchase Plan, or the 2018 ESPP, is calculated based on the fair value of the awards granted and is recognized on a straight-line basis over the requisite service period, which is generally two to four years. Our performance stock units, or PSUs, vest over a period of 4 years and are subject to defined performance and service conditions. Our PSUs and RSUs that include performance-based vesting conditions are expensed using the accelerated attribution method. We account for forfeitures as they occur.

The fair value of our RSUs, PSUs and restricted stock is based on the market price of our common stock on the date of grant. Estimating the fair value of purchase rights under the 2018 ESPP using the Black-Scholes option-pricing model requires assumptions as to the fair value of our underlying common stock, the estimated term of the option, the risk free interest rates, the expected volatility of the price of our common stock and the expected dividend yield. The assumptions used to estimate the fair value of the option awards reflect our best estimates. If any of the assumptions change significantly, stock-based compensation for future awards may differ significantly compared with the awards granted previously.

The assumptions and estimates are as follows:

•Fair Value of Common Stock. See “Valuations” discussion below.

•Expected Term. We use the actual purchase periods as the expected term in the 2018 ESPP.

•Volatility. This is a measure of the amount by which a financial variable, such as a share price, has fluctuated (historical volatility) or is expected to fluctuate (expected volatility) during a period. We use the volatility of our common stock to calculate expected volatility for the 2018 ESPP.

•Risk-Free Interest Rate. This is the U.S. Treasury rate, having a term that most closely resembles the expected remaining term of each offering of the 2018 ESPP.

•Dividend Yield. We have not and do not expect to pay dividends on our common stock.

Valuations

We use the market price of our common stock at the date of grant as the fair value.

The fair value of the 2018 ESPP purchase rights were estimated on the offering or modification dates based on the following assumptions:

68

Table of Contents

Business Combinations

We account for business combinations by recognizing the fair value of acquired assets and liabilities. The excess purchase consideration over the fair value of acquired assets and liabilities is recorded as goodwill. When determining the fair value of assets acquired and liabilities assumed, a non-recurring Level 3 fair value measurement, we make estimates and assumptions, especially with respect to intangible assets such as identified acquired technology and trade names. We generally determine the fair value of acquired technology using the multi-period excess earnings method, a form of the income approach. Estimates in valuing identifiable intangible assets include, but are not limited to, projected revenue growth rates, obsolescence projections and an appropriate discount rate. Our estimate of fair value is based upon assumptions we believe to be reasonable, but which are inherently uncertain and, as a result, actual results may differ from estimates. During the measurement period, we may make adjustments to the fair value of assets acquired and liabilities assumed, with offsetting adjustments to goodwill. Any adjustments made after the measurement period will be reflected in the consolidated statements of operations. Acquisition-related costs are expensed as incurred.

Goodwill

The excess purchase consideration over the fair value of acquired assets and liabilities is recorded as goodwill. We perform our annual impairment assessment on October 1, or more frequently, when events or circumstances indicate impairment may have occurred. We operate as one reporting unit and have elected to first assess qualitative factors to determine whether it is more likely than not that the fair value of the Company as a whole is less than its carrying amount, including goodwill. The qualitative assessment includes an evaluation of relevant events and circumstances, including macroeconomic, industry and market conditions, our overall financial performance, and trends in the value of our common stock. During the periods presented, there were no indications of impairment and it was not more likely than not that goodwill was impaired.

Income Taxes

We are subject to federal, state and local taxes in the United States as well as numerous international jurisdictions. These foreign jurisdictions have different statutory tax rates than the United States. Earnings generated by our international entities are related to transfer pricing requirements as applicable under local jurisdiction tax laws.

We record a provision for income taxes under the asset and liability method, which requires recognition of deferred tax assets and liabilities for the expected future tax consequences of temporary differences between the financial statement carrying amounts and the tax basis of existing assets and liabilities, net operating loss carryforwards and tax credit carryforwards. Deferred tax assets and liabilities are measured using the tax rates that are expected to apply to taxable income for the years in which those tax assets and liabilities are expected to be realized or settled. A valuation allowance is provided if it is more likely than not that some or all of the deferred tax assets will not be realized. We have valuation allowances in all jurisdictions against deferred tax assets net of deferred tax liabilities that will reverse and provide a source of taxable income. Our evaluation of valuation allowances could change in the future and the impact could have a material impact on our financial statements.

We recognize tax benefits from an uncertain tax position if it is more likely than not to be sustained upon audit by the relevant taxing authority. Interest and penalties associated with such uncertain tax positions are classified as a component of income tax expense.

Depending on the jurisdiction, distributions of earnings could be subject to withholding taxes at rates applicable to the distributing jurisdiction. As we intend to continue to reinvest the earnings of foreign subsidiaries indefinitely, we have not provided for a U.S. income tax liability and foreign withholding taxes on undistributed foreign earnings of foreign subsidiaries.

Recently Issued Accounting Pronouncements

See Note 1 to our Consolidated Financial Statements in this Annual Report on Form 10-K for more information regarding recently issued accounting pronouncements.

69

Table of Contents

Item 7.        Management's Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes included elsewhere in this Annual Report on Form 10-K, or this Form 10-K. This Form 10-K contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, or the Securities Act and Section 21E of the Securities Exchange Act of 1934, as amended, or the Exchange Act. These statements are often identified by the use of words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “project,” “will,” “would” or the negative or plural of these words or similar expressions or variations. Such forward-looking statements are subject to a number of risks, uncertainties, assumptions and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified herein, and those discussed in the section titled “Risk Factors,” set forth in Part I, Item 1A of this Form 10-K and in our other filings with the SEC. You should not rely upon forward-looking statements as predictions of future events. Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

Overview

We are a leading provider of exposure management solutions. Exposure management is an effective discipline for managing, measuring and comparing cybersecurity risk in today's complex IT environments.

In October 2022, we launched our Tenable One Exposure Management Platform (Tenable One), which unifies a variety of data sources into a single exposure view to help organizations gain visibility, prioritize efforts and communicate cyber risks. Building on our existing products, Tenable One is designed to take advantage of the integrations that already exist with our partners and form the foundation of an exposure management program, alongside the other tools, such as endpoint detection and response (EDR) and firewalls, and required business processes.

With Tenable One, organizations can translate technical data about assets, vulnerabilities and threats into clear business insights and actionable intelligence for security executives and practitioners. The platform combines the broadest vulnerability coverage in the industry, spanning IT assets, cloud resources, containers, web apps and identity systems. Tenable One builds on the speed and breadth of vulnerability coverage from Tenable Research and adds aggregated exposure view analytics, guidance on mitigating attack pathways and a centralized asset inventory.

Tenable One incorporates Tenable.io, Tenable.io Web Application Scanning, Tenable Lumin Exposure View, Tenable.cs, Tenable.ad and Tenable.asm. All of these products are also offered as standalone solutions, alongside Tenable.sc, Tenable.ot and Nessus.

Our platform offerings are primarily sold on a subscription basis with a one-year term. Our subscription terms are generally not longer than three years. These offerings are typically prepaid in advance. To a lesser extent, we recognize revenue ratably from perpetual licenses and from the related ongoing maintenance.

We sell and market our products and services through our field sales force that works closely with our channel partners, which includes a network of distributors and resellers, in developing sales opportunities. We use a two-tiered channel model whereby we sell our enterprise platform offerings to our distributors, which in turn sell to our resellers, which then sell to end users, which we call customers.

Revenue in 2022, 2021 and 2020 was $683.2 million, $541.1 million and $440.2 million, representing year-over-year growth of 26% and 23%, respectively. Our recurring revenue, which includes revenue from subscription arrangements for software (both revenue recognized ratably over the subscription term and upon delivery) and cloud-based solutions and maintenance associated with perpetual licenses, represented 95% of revenue in 2022 and 2021 and 94% of revenue in 2020. Our net loss in 2022, 2021 and 2020 was $92.2 million, $46.7 million and $42.7 million, respectively, as we continue to invest in our business and market opportunity. Our cash flows from operating activities were $131.2 million, $96.8 million and $64.2 million in 2022, 2021 and 2020, respectively.

45

Table of Contents

Financial Highlights

Below are our key financial results:

Key Operating and Financial Metrics

To supplement our consolidated financial statements, which are prepared and presented in accordance with GAAP, we use and monitor the following operating and financial metrics, which include non-GAAP financial measures, to understand and evaluate our core operating and financial performance.

Calculated Current Billings

We use the non-GAAP measure of calculated current billings, which we believe is a key metric to measure our periodic performance. Given that most of our customers pay in advance, we typically recognize a majority of the related revenue ratably over time. We use calculated current billings to measure and monitor our ability to provide our business with the working capital generated by upfront payments from our customers.

Calculated current billings consists of revenue recognized in a period plus the change in current deferred revenue in the corresponding period. We believe that calculated current billings, which excludes deferred revenue for periods beyond twelve months in a customer’s contractual term, more closely correlates with annual contract value. Variability in total billings, depending on the timing of large multi-year contracts and the preference for annual billing versus multi-year upfront billing, may distort growth in one period over another.

Calculated current billings may vary from period-to-period for a number of reasons, and therefore has a number of limitations as a quarter-to-quarter or year-over-year comparative measure. Calculated current billings in any one period may be impacted by the timing and amount of new sales transactions, the timing and amount of renewal transactions, including early renewals, as well as the timing and amount of multi-year prepaid contracts, all of which could favorably or unfavorably impact quarter-to-quarter and year-over-year comparisons. For example, an increasing number of large sales transactions, for which the timing has and will continue to vary, may occur in quarters subsequent to or in advance of those that we anticipate. Additionally, our calculation of calculated current billings may be different from other companies that report similar financial measures. Because of these and other limitations, you should consider calculated current billings along with revenue and our other GAAP financial results.

46

Table of Contents

The following table presents a reconciliation of revenue, the most directly comparable financial measure calculated in accordance with GAAP, to calculated current billings:

_______________

(1)    Deferred revenue (current), beginning of period for 2022 and 2021 includes $0.9 million and $2.6 million, respectively, related to acquired deferred revenue.

Free Cash Flow

We use the non-GAAP measure of free cash flow, which we define as GAAP net cash flows from operating activities reduced by purchases of property and equipment and capitalized software development costs. We believe free cash flow is an important liquidity measure of the cash (if any) that is available, after purchases of property and equipment and capitalized software development costs, for investment in our business and to make acquisitions. We believe that free cash flow is useful as a liquidity measure because it measures our ability to generate or use cash.

Our use of free cash flow has limitations as an analytical tool and you should not consider it in isolation or as a substitute for an analysis of our results under GAAP. First, free cash flow is not a substitute for net cash flows from operating activities. Second, other companies may calculate free cash flow or similarly titled non-GAAP financial measures differently or may use other measures to evaluate their performance, all of which could reduce the usefulness of free cash flow as a tool for comparison. Additionally, the utility of free cash flow is further limited as it does not reflect our future contractual commitments and does not represent the total increase or decrease in our cash balance for a given period. Because of these and other limitations, you should consider free cash flow along with net cash provided by operating activities and our other GAAP financial measures.

The following table presents a reconciliation of net cash provided by operating activities, the most directly comparable financial measure calculated in accordance with GAAP, to free cash flow:

_______________

(1)    Capitalized software development costs were previously included in purchases of property and equipment.

(2)    Free cash flow for the periods presented was impacted by:

47

Table of Contents

Free cash flow in 2022 was benefited by approximately $10 million due to prepayments of software subscription costs, insurance and rent in 2021 and 2020. The 2021 prepayments reduced free cash flow by $8 million and were offset by a benefit of approximately $15 million from similar prepayments made in 2020. The 2020 prepayments reduced free cash flow by approximately $17 million.

Customer Metrics

We believe that our customer base provides a significant opportunity to expand sales of our enterprise platform offerings. The following tables summarize key components of our customer base:

_______________

(1)    We define an enterprise platform customer as a customer that has licensed Tenable One, Tenable.io, Tenable.cs, Tenable.ad, Tenable.ot or Tenable.sc for an annual amount of $5,000 or greater. New enterprise platform customers represent new customer logos during the periods presented and do not include customer conversions from Nessus Expert to enterprise platforms.

(2)    The number of new enterprise platform customers added in 2021 includes 95 legacy customers of companies we acquired.