UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

_____________________

FORM 10-K

_____________________

(Mark One)

x
ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(D)15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

for the Fiscal Year Ended December 31, 2017

2021

or

¨
TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(D)15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

for the transition period from                      to                     

Commission file number: 001-36324

________________________

VARONIS SYSTEMS, INC.

(Exact name of registrant as specified in its charter)

_____________________________
Delaware57-1222280
Delaware57-1222280
(State or other jurisdiction of incorporation)incorporation or organization)(I.R.S. Employer Identification Number)No.)

1250 Broadway, 29th Floor

New York, NY 10001

(Address of principal executive offices including zipoffices) (zip code)

Registrant’s telephone number, including area code: (877) 292-8767

Securities registered pursuant to Section 12(b) of the Act:

Title of each classTrading Symbol(s)Name of each exchange on which registered
Common Stock, par value $0.001 per shareVRNSThe NASDAQ Stock Market LLC
(Title of class)(Name of exchange on which registered)

Securities registered pursuant to Section 12(g) of the Act: None

_____________________________

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.    Yes  x    No  ¨

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act.    Yes  ¨    No  x





Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.    Yes  x    No  ¨

Indicate by check mark whether the registrant has submitted electronically and posted on its corporate Website, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files).    Yes  x    No   ¨

Indicate by check mark if disclosure of delinquent filers pursuant to Item 405 of Regulation S-K (§229.405 of this chapter) is not contained herein and will not be contained, to the best of the registrant’s knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K.  ¨

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company”company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large Accelerated FilerxAccelerated Filer¨
Non-accelerated Filer¨  (Do not check if a smaller reporting company)Smaller reporting company¨
Emerging growth company¨

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ¨


Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report.

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).   Yes  ¨   No   x

The

As of June 30, 2021, the aggregate market value of the registrant's voting stockand non-voting common equity held by non-affiliates of the registrant as of June 30, 2017 at a closing sale price of $37.20 as reported by the NASDAQ Global Select Market was approximately $977.1 million. Shares of common stock held by each officer and director and by each person who owns or may be deemed to own 10% or more of the outstanding common stock have been excluded since such persons may be deemed to be affiliates. This determination of affiliate status is not necessarily a conclusive determination for other purposes.

$6.08 billion.

As of February 9, 2018,4, 2022, the registrant had 28,157,995107,514,424 shares of common stock, par value $0.001 per share, outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the Registrant’s Proxy Statement relating to be used in connection with the solicitation of proxies for the Registrant’s 20182021 Annual Meeting of Stockholders are incorporated by reference ininto Part III of this Annual Report on Form 10-K.




Special Note Regarding Forward-Looking Statements

and Summary Risk Factors

This report contains, forward-looking statements that involve risks and uncertainties. Our actual results could differ materially from those discussed in the forward-looking statements. The statements contained in this report that are not purely historical aremanagement may make, certain forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”). All statements, other than statements of historical facts, may be forward-looking statements. Forward-looking statements are often identified by the use of words such as but not limited to, “anticipate,” “believe,” “can,” “continue,” “could,” “estimate,” “expect,” “intend,” “likely,” “may,” “plan,” “project,” “seek,” “should,” “strategy,” “target,” “will,” “would” and similar expressions or variations intended to identify forward-looking statements. These statements are based on the beliefs and assumptions of our management based on information currently available to management. Such forward-looking statements are subject to risks, uncertainties and other important factors, many of which are difficult to predict and generally beyond our control, that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by such forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified in the “Summary Risk Factors” below and those discussed in the section titled “Risk“Item 1A-Risk Factors” included under Part I, Item 1A below.and “Item 7-Management's Discussion and Analysis of Financial Condition and Results of Operations.” Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

i

A summary of the risks that might cause actual results to differ from our expectations include, but are not limited to, the following:

•    Risks Related to the Industry in which we Operate, including (i) potential limited growth ability of the market for enterprise software; (ii) prolonged economic uncertainties or downturns; (iii) increased competition in our market; and (iv) a failure to comply with legal requirements, contractual obligations and industry standards regarding security, data protection and privacy to which we are subject.

•    Risks Related to our Operations, including (i) security breaches, cyberattacks or other cyber-risks of our IT systems; (ii) fluctuation in our quarterly results of operations due to variability in our revenues; (iii) a failure of our subscription-based business model to yield the benefits that we expect; (iv) the effects of COVID-19 on our business and our customers; (v) a decline or fluctuation in our customer renewal rates; (vi) a failure to manage our business growth effectively; (vii) difficulties in evaluating and predicting our future prospects and our ability to forecast our future operating results; (viii) our inability to attract new customers and expand sales to existing customers, both domestically and internationally; (ix) our inability to be profitable in the future; (x) our inability to maintain successful relationships with our channel partners; (xi) collection and credit risks; (xii) substantial currency exchange rates fluctuations; (xiii) a failure to maintain or enhance our brand recognition or reputation; (xiv) a failure to maintain and increase our sales to customers in the public sector; (xv) a failure to meet applicable export and import controls which could subject us to liability or impair our ability to compete in international markets; (xvi) an increase in risks associated with our international activities in countries with a history of corruption and where we have transactions with foreign governments; and (xvii) risks associated with acquisitions of other entities or business.

•    Risks Related to Human Capital, including (i) a failure to maintain sales and marketing personnel productivity and a failure to hire and integrate additional sales and marketing personnel; (ii) a failure to retain, attract and recruit highly qualified personnel; and (iii) cessation of our co-founder, Chief Executive Officer and President’s services.

•    Risks Related to our Technology, Products, Services and Intellectual Property, including (i) a failure to continually enhance and improve our technology; (ii) our customers' decision not to renew their subscription licenses or maintenance and support agreements or not buy additional products in the future; (iii) a failure of the products in our platform to achieve increased market acceptance; (iv) interruptions or performance problems, including to our website or support website; (v) security breach of our software; (vi) our use of open source software, which could negatively affect our ability to sell our software and subject us to possible litigation; (vii) false detection of security breaches, false identification of malicious sources or misidentification of sensitive or regulated information; and (viii) a failure to protect our proprietary technology and intellectual property rights.

•    Risks Related to our Tax Regime, including (i) a significant change in our effective tax rate; (ii) our ability to fully utilize our net operating loss carryforwards; (iii) our provision for income taxes or adverse outcomes resulting from examination of our income tax returns; and (iv) the enactment of tax legislation changes.

•    Risks Related to our 2025 Notes and Credit Facility, including (i) a decrease in our business flexibility and access to capital and increase of our borrowing costs; (ii) our ability to raise additional capital and burden on our future cash resources, particularly if we elect to settle our debt obligations in cash upon conversion or upon maturity or required repurchase; (iii) dilution of our existing stockholders and a potentially adverse impact to the market price of our
i


common stock due to the issuance of shares in connection with conversion of the 2025 Notes; (iv) a delay or preventing of takeover attempt of the Company due to certain provisions under the 2025 Notes; (v) the accounting method applicable to our 2025 Notes; (vi) an adverse effect on the value of the 2025 Notes and our common stock due to the capped call transactions; and (vii) the default of all or some of the financial institutions which are counterparties to the capped call transactions, which may cause the protection under the capped call transactions to be unavailable.

•    Risks Related to our International Operations, including (i) international conflicts and business conditions, which may limit our ability to develop and sell our products and (ii) unavailability of or failure to meet certain conditions to receive certain tax benefits which were available to our Israeli subsidiary.

•    Risks Related to the Ownership of our Common Stock, including (i) substantial future sales of shares of our common stock; (ii) volatility in the price of our common stock; (iii) our intention to not pay dividends on our common stock; and (iv) anti-takeover provisions in our charter documents and under Delaware law and provisions in the indenture for our 2025 Notes and Credit Facility, which may discourage the acquisition of our Company and attempts by our stockholders to replace or remove our current management.

•    General Risk Factors, including (i) real or perceived errors, failures or bugs in our software; (ii) the lack of available capital on acceptable terms to support our business growth; (iii) risks of fire, power outages, floods, earthquakes, pandemics and other catastrophic events, and interruption by manmade problems such as terrorism; (iv) changes in financial accounting standards which may adversely impact our reported results of operations; (v) publishing of negative reports about our business; (vi) internal controls over financial reporting which might be determined to be ineffective; and (vii) dilution of the percentage ownership of our stockholders which could cause our stock price to decline, due to future sales and issuances of our capital stock or rights to purchase capital stock.

ii


VARONIS SYSTEMS, INC.

ANNUAL REPORT ON FORM 10-K

For The Fiscal Year Ended December 31, 2017

2021

TABLE OF CONTENTS

Page
PART IPage
PART I
PART II
Item 6Selected Financial Data27
PART III
PART IV

ii

iii


PART I

Item  1.Business

We were incorporated under the laws of the State of Delaware on November 3, 2004 and commenced operations on January 1, 2005. Our principal executive offices are located at 1250 Broadway, 29th Floor, New York, NY 10001. For convenience in this report, the terms “Company,” “Varonis,” “we” and “us” may be used to refer to Varonis Systems, Inc. and/or its subsidiaries, except where indicated otherwise. Our telephone number is (877) 292-8767.

Overview

Varonis is a pioneer in data security and analytics, fighting a different battle than conventional cybersecurity companies. We are pioneers because over a decademore than 15 years ago we recognized that enterprise capacity to create and share data far exceeded its capacity to protect it. We believed the vast movement of information from analog to digital mediumsthat rapid data growth combined with increasing information dependence would change both the global economy and the risk profiles of corporations and governments. This conviction has only strengthened over time. Since thenour founding, our focus has been on using innovation to address the cyber-implications of this movement,these trends, creating software that provides new ways to track, alert and protect data wherever it is stored.


Data continues to grow in new and existing data stores both on-premises and in the cloud, a trend we have seen accelerate as companies around the world undergo a wave of digital transformation initiatives which have significantly impacted how they must approach data security. These data stores facilitate rapid collaboration from a hybrid workforce, but as these data stores grow in size and criticality, the relationships between the data they hold and the users that collaborate with it grow more complex, making those relationships difficult to visualize, understand and control without automation.

In addition to data growth, companies face an environment where threat actors continue to refine their strategies to monetize sensitive data, as well as the risk of substantial fines for noncompliance with data-centric regulations. At the same time, organizations are seeing a global scarcity of in-house technical expertise, as the demand for cybersecurity professionals significantly outpaces supply, and IT and security experts are under pressure to solve growing problems with fewer resources. We believe that these trends provide us a long-term opportunity to fulfill our mission of protecting sensitive data for customers, regardless of size, industry or region.

Because enterprises now use many different combinations of data stores and require varying levels of automated protection, our offering provides coverage flexibility through software licensing. We aim to keep pace with the relentless growth and complexity of data, starting in 2005 with a single license, offering ten licenses at the time of our initial public offering in 2014, and today offering more than 35 licenses across the most common on-premises and cloud data stores and applications. In 2021, we launched our DatAdvantage Cloud solution that centrally monitors and protects data across multiple Software-as-a-Service ("SaaS") applications, as well as Data Classification Cloud to help automatically identify sensitive information. We plan to continue investing in product development to deliver new products and to enhance our existing products.

1


vrns-20211231_g1.jpg

Our software allowsspecializes in data protection, threat detection and response, data privacy and compliance. Varonis software enables enterprises to protect data stored on premiseson-premises and in the cloud:cloud including: sensitive files and emails; confidential customer, patientpersonal data belonging to customers, patients and employee data;employees; financial records; strategic and product plans; and other intellectual property. Recognizing the complexities of securing data, we have built a singlean integrated platform for security and analytics to simplify and streamline security and data management.

The Varonis Data Security Platform, built on patented technology, allowshelps enterprises to protect data against insider threatscyberattacks from both internal and cyberattacks.external threats. Our products enable enterprises to analyze data, account activity and user behavior to detect and prevent attacks. Our Data Security Platform prevents or limits unauthorized use of sensitive information, detects and prevents potential cyberattacks and limits otherspotential damage by automatically locking down sensitivedata, allowing access to only those who need it and automating the removal of stale data.data when it is no longer useful. Our productproducts efficiently sustainssustain a secure state with automation and addressesaddress additional important use cases including data protection, data governance, Zero Trust, compliance, data privacy, classification and threat analytics.detection and response. Our Data Security Platform is driven by a proprietary technology, theour Metadata Framework, that extracts critical metadata, or data about data, from an enterprise’s ITinformation technology ("IT") infrastructure. Our Data Security Platform uses this contextual information to map functional relationships among employees, data objects, systems, content and usage.

The revolution in internet search occurred when search engines began to mine internet metadata, such as the links between pages, in addition to page content, thereby making the internet’s content more usable and consequently more valuable. Similarly, In doing so, our Data Security Platform creates advanced searchable data structures out of available content and metadata, providingplatform provides real-time intelligence about an enterprise’s massive volumes of data, making it more secure, accessible manageable and secured.

manageable.

We believe that the technology underlying our Data Security Platform, along with the technical experts within the Company who continue to expand and improve our platform, is our primary competitive advantage. The strength of our solution is driven by several proprietary technologies and methodologies that we have developed, coupled with how we have combined them into our highly versatile platform. Our belief in our technological advantage stems from us having developed a way to do each of the following:

analyze the relationships between users and data with sophisticated algorithms, including cluster analyses and machine learning;
visualize and depict the analyses in an intuitive manner, including simulating contemplated changes and automatically executing tasks that are becoming increasingly more complex for IT and business personnel;
identify and automatically classify data as sensitive, critical, private or regulated, to help organizations ensure compliance with regulations, including the General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA");
2


automate remediation to directory service objects and access controls on large file systems to safely ensure a Zero Trust or least privilege model;
profile users, devices and data to detect suspicious account behavior and unusual file and email activity using deep analysis of metadata, machine learning and user behavior analytics;
profile cloud configuration and interconnectivity to identify potential exposure and abuse;
generate meaningful, actionable alerts when security-related incidents are detected;
enable security teams to investigate and respond to cyber threats more quickly and conclusively;
automatically respond to severe incidents like ransomware to limit potential impact and reduce recovery times;
determine relevant metadata and security information to capture;

capture that metadata without imposing any strains or latencies onimpacting the enterprise’senterprise's computing and network infrastructure;

modify and enrich that metadata in a way that makes it comparable and analyzable despite it having originated from disparate IT systems;

systems, and create supplemental metadata, as needed, when the existing IT infrastructure’s activity logs are not sufficient;insufficient;

decipher the key functional relationships of metadata, the underlying data, and its creators; and

use those functional relationships to create a graphical depiction, or map, of the data that will endure as enterprises continuously add large volumes of data to their network and storage resources on a daily basis;

analyze the data and related metadata utilizing sophisticated algorithms, including cluster analyses and machine learning;

visualize and depict the analyses in an intuitive manner, including simulating contemplated changes and automatically execute tasks that are normally manually intensive for IT and business personnel;

identify and classify the data as sensitive, critical, private or regulated;

automate changes to directory service objects and access controls on large file systems;

detect suspicious user behavior and unusual file and email activity using deep analysis of metadata, machine learning and user behavior analytics; and

generate meaningful, actionable alerts when security-related incidents are detected.

1
resources.

The broad applicability of our technology has resulted in our customers deploying our platform for numerous use cases. These use cases include: automatic discovery and classification of high-risk, sensitive data; automated remediation of over-exposed data; centralized visibility intoand risk analysis of enterprise data and monitoring of user behavior and file activity; security monitoring and risk reduction; data breach, insider threat, malware and ransomware detection; automatic response to ransomware and other severe incidents to limit exposure and reduce recovery times; data ownership identification;identification, assignment, and automatic involvement; forensics, reporting and auditing with searchable logs; meeting security policy and compliance regulation; automatic data migration; cloud migration; automation of retention and disposition policies; automatic data quarantine; intelligent archiving.

archiving; and automated indexing for data subject requests related to privacy and compliance requirements.


We sell substantially all of our products and services to channel partners, including distributors and resellers, which sell to end-user customers, which we refer to in this report as our customers. We believe that our sales model, which combines the leverage of a channel sales model with our highly trained and professional sales force, has played and will continue to play a major role in our ability to grow and to successfully deliver our unique value proposition for securing enterprise data. While our products serve customers of all sizes, in all industries and all geographies, the marketing focus and majority of our sales focus is on targeting organizations with 1,000 users or more who can make larger initial purchases with us and, over time, and have a greater potential lifetime value. As of December 31, 2017, we had approximately 6,250Our customers spanningspan leading firms in the financial services, public, healthcare, public, industrial, insurance, energy and utilities, technology, consumer and retail, education, media and entertainment and technologyeducation sectors.

We believe our existing customer base serves as a strong source of incremental revenues given our broad platform of products, the growing volumes and complexity of their enterprise data and the associated security concerns.


In the first quarter of 2019, to deliver on the customer demand to purchase a greater number of our software licenses, we announced our transition to a subscription-based business model, whereby the customer has the right to use our software over a designated period of time. As we have completed this transition, our subscription revenues now account for substantially all of our total license revenues.

Size of Our Market Opportunity


The International Data Corporation’s Data Age 2025: The Evolution of Data to Life-Critical study estimatesGlobal DataSphere Forecast, 2021-2025 (the "study") predicts that the amount ofglobal data created in the worldcreation and replication will grow to 163181 Zettabytes (or 151181 trillion gigabytes)Gigabytes) in 2025, representing2025. This is up from its earlier forecast of 175 Zettabytes in the prior year and compared to 45 Zettabytes in 2019. We expect this growth to continue further creating a nearly tenfold increase from the amount created in 2016. They estimateneed for technologies that nearly 20% of that data will be critical to our daily lives (and nearly 10% hypercritical). The study also suggests that by 2025, almost 90% of all data will require a meaningful level of security, but less than half will be secured. Every enterprise and government will almost certainly require new technologiesuse automation to protect and manage data.


We believe that the diverse functionalities offered by our platform position us at the intersection of several powerful trends in the digital enterprise data universe. We further believe that the business intelligence and functionalities delivered by our platform
3


define a new market, andmarket. Although we are not aware of any third party studies that accurately define our addressable market.  Themarket, the functionality of our software platform, including our expansion to support cloud applications and data stores, overlaps with portions of several established and growing enterprise software markets as defined in 2021 by Gartner, Inc. in 2017,, including application software ($50.1 billion), security software ($23.649.7 billion), IT operations management ($33.9 billion), infrastructure software ($23.3 billion), storage management ($15.215.5 billion), infrastructure softwarecontent services ($10.07.0 billion) and, data integration ($4.55.8 billion) and cloud access and cloud workload protection software ($2.2 billion). We believe that our comprehensive product offering will attract a meaningful portion of this overall spend, estimatingand we estimate that our total addressable market is approximately 20% of these combined markets, or $15 billion dollars.

markets. We have also attempted to measure our total addressable market by utilizing estimates from Forrester regarding the number of companies in North America and Europe that fit our target criteria, and then assuming that each customer purchases the double-digit number of licenses that we aim to sell to all of our customers. In both the “top-down” approach utilizing Gartner industry spend estimates, and the “bottoms-up” approach utilizing Forrester customer estimates, we estimate a total addressable market of more than $37.0 billion.

Our Technology

Our proprietary technology extracts critical information about an enterprise’s data and its supporting infrastructure, and uses this contextual information, or metadata, to create a functional map of an enterprise’s data and underlying file systems. Our Metadata Framework technology has been architected to process large volumes of enterprise data and the related metadata at a massive scale with minimal demands on the existing IT infrastructure. All of our products, except DatAnywhere, utilize our Data Security Platform and a core single codebase, thereby streamlining our product development initiatives.

Key Benefits of Our Technology

Data Protection

Comprehensive Solution for Managing and Protecting Enterprise Data. Our products enable a broad range of functionality, including data governance, least privilege and Zero Trust, as well as intelligent retention. Moreover, our solution is applicable across most major enterprise data stores and SaaS applications (Windows, UNIX/Linux, Intranets, email systems, Microsoft 365, including SharePoint Online and OneDrive for Business, Salesforce, AWS, Google Drive and Box).
Actionable Insight and Automation. Our products help customers identify and prioritize risks to their data and automatically remediate exposures so that they are less vulnerable to internal and external threats, more compliant and consistently follow a least privilege model. Because of the complexity present in even modest enterprises, we believe that effective remediation is impossible at scale without intelligent automation.

Visibility and Data Monitoring Capabilities All in One Place. Our solution combines analysis from disparate on-premises and cloud stores and infrastructure and presents them in a single view, even as data storage and user access become more dispersed and complex in hybrid environments.
Fast Time to Value and Low Total Cost of Ownership. Our solutions do not require custom implementations or long deployment cycles. Our Data Security Platform can be installed within hours and allows customers to realize real value once used. We designed our platform to operate on commodity hardware on-premises or in the cloud, with standard operating systems, further reducing the cost of ownership of our product.
Ease of Use. While we utilize complex data structures and algorithms in our data engine, we abstract that complexity to provide a sleek, intuitive interface. Our software is accessible through either a local client or a standard web browser and requires limited training, saving time and cost and making it accessible to a broader set of users.

Highly Scalable and Flexible Data Engine. Our metadata analysis technology is built to be highly scalable and flexible, allowing our customers to analyze vast amounts of enterprise data. Moreover, our proprietary platform is built with a modular architecture, allowing customers to grow into the full capabilities of our solutions over time.

Threat Detection and Response

Threat Detection and Response with User, Data and System Context. Our solutions combine classification and data access governance with User and Entity Behavior Analytics (UEBA) on data stores, cloud applications, directory services and perimeter devices, including Domain Name System ("DNS"), VPN and web proxy, for accurate detection and risk reduction. Our solutions reduce risk relating to unauthorized use and cyberattacks and reduce incident time to detection (TTD) and time to resolution (TTR).

4


Protect Data from Insider Threats, Data Breaches, Malware and Cyberattacks.Our solutions analyze how employee accounts, service accounts and admin accounts use and access data, profile employees’ roles and file contents, baseline “normal” behavior patterns, and alert on significant deviations from profiled behaviors. Our customers are able to detect advanced persistent threats (APTs), cybercriminals, rogue insiders, attackers that have compromised internal systems and employee accounts, malware, ransomware and other significant threats.

Comprehensive Solution for Managing


Compliance

Discover and Protecting EnterpriseIdentify Regulated Data. Our products enable a broad range of functionality, including data governance, secure search and remote collaboration and intelligent retention—all from one core technology platform. Moreover, our platform is applicable across all major enterprise data stores (Windows, UNIX/Linux, Intranets, email systems and Office365).

Security Analytics with User, Data and System Context. Our solutions combine classification and data access governance with User and Entity Behavior Analytics (UBA) for accurate detection and risk reduction. Our solutionsautomatically discover, identify and classify sensitive, critical and regulated data to help meet regulatoryprivacy and compliance requirements.


Monitor and sustainably reduce risk relating to unauthorized use and cyberattacks.

Fast Time to Value and Low Total Cost of Ownership.Detect Security Vulnerabilities. Our solutions do not require custom implementations or long deployment cycles.analyze, monitor, detect and report on potential security vulnerabilities: helping companies achieve compliance by creating full audit trails, achieving a least privilege model and locking down sensitive data to only those who need it, and facilitate breach notification and security investigations. By ensuring least privilege, monitoring all access and alerting on potential misuse, Varonis enables privacy-by-design on data stores containing sensitive and regulated information.


Fulfill Data Subject Access Requests (DSARs) and Protect Consumer Data. Our Data Security Platformsolutions help fulfill data subject access requests from file systems on-premises and in the cloud. Customers can be installedeasily find relevant files, pinpoint who has access and ready for use within hoursenforce policies to move and allows customers to realize real value within days of implementation. We designed our platform to operate on commodity hardware with standard operating systems, further reducing the cost of ownership of our product.

Ease of Use. While we utilize complex data structures and algorithms in our data engine, we abstract that complexity to provide a sleek, intuitive interface. Our software is accessible through either the local client or a standard web browser and requires limited training, saving on time and cost and making it accessible to the broader set of non-technical users.

2
quarantine regulated data.


Highly Scalable and Flexible Data Engine. Our metadata analysis technology is built to be highly scalable and flexible, allowing our customers to analyze vast amounts of enterprise data. Moreover, our proprietary Metadata Framework is built with a modular architecture, allowing customers to grow into the full capabilities of our solution over time.

Our Growth Strategy

Our objective is to be the primary vendor to which enterprises turn to analyze and protect their data. The following are key elements of our growth strategy.


Extend Our Technological Capabilities Through Innovation.Innovation and Strategic Transactions. We intend to increase, in absolute dollars, our current level of investment in product development in order to enhance existing products to address new use cases and continue to deliver new products. We believe that the flexibility, sophistication and broad applicability of our Metadata Frameworkplatform will allow us to use this framework as the core of numerous future products built on our same core technology. Our ability to leverage our research and development resources has enabled us to create a new product development engine that we believe can proactively identify and solve enterprise needs.

needs and help us further penetrate and grow our addressable markets. Additionally, we recently introduced new licenses into our platform to cover additional cloud applications and infrastructure that were further developed by us after acquiring a provider of software that maps and analyzes relationships between users and data across a number of cloud applications and services. We will continue to seek additional opportunities to extend our technological capabilities and grow our business, from continued organic investments in our research and development efforts to technological tuck-in acquisitions.

Grow Our Customer Base. The unabated rise in enterprise data, ubiquitous reliance on digital collaboration and increased cybersecurity concerns will continue to drive demand for data collaboration, governance, retentionprotection, compliance and protectionthreat detection and response solutions. We intend to capitalize on this demand by targeting new customers, verticalunderpenetrated markets and use cases for our solutions. Our solutions address the needs of customers of all sizes, ranging from small and medium businesses to large multinational companies with hundreds of thousands of employees and petabytes of data. Although our solutions are applicable to organizations of all sizes, we will continue our focus on targeting larger organizations who can make larger purchases with us initially and over time.

Increase Sales to Existing Customers. We believe significant opportunities exist to further expand relationships with existing customers. Data growth (and subsequentand related security concerns) continuesconcerns continue across all the data stores, and enterprises wishwant to standardize on solutions that help them manage, protect and extract more value from their data, wherever it is stored. We willexpect to continue to cultivatedrive incremental sales from our existing customers by drivingthrough the increased use of our software within our installed base by expanding footprint and usage. WeThe Varonis Data Security Platform currently have six product families, and, ashas over thirty-five licenses. As of December 31, 2017, approximately 52%2021, 73% of our customers with 500 employees or more had purchased twofour or more product families.licenses and 41% purchased six or more licenses. We believe our existing customer base serves as a strong source of incremental revenues given theour broad platform of products, we have and thetheir growing volumesvolume and complexity of enterprise data that our customers have.and the associated security concerns. As we continue to innovate and expand our product offering, we expect to have an even broader suite of products to offer our customers.

Our perpetual license maintenance renewal rate ("maintenance renewal rate") for the year ended December 31, 2021 continued to be over 90%. Our key strategies to ensure a high renewal rate for our products include focusing on the quality and reliability of our customer service and support teams and providing software upgrades and enhancements when available.


5


Grow Sales Fromfrom Our Newer Licenses. During the past year, we have introducedLicenses and Functionality. We continue to introduce additional licenses and enhancements to existing products to support new functionalities such as new threat models to detect suspicious mailbox, Exchange and Exchange Online behaviors. We released GDPR Patterns, part of the Data Classification Engine family, to help enterprises identify data that falls under the EU General Data Protection Regulation (GDPR) and expand our offerings that help enterprises meet compliance and regulation requirements. We released the Automation Engine to allow customers to automatically repair and maintain file systems so that organizations are less vulnerable to attacks and security breaches, more compliant and consistently meeting a least privilege model. We have enhanced our products to provide even more value to our customers, including additional data store support, enhanced threat detection and security monitoring and new threat models to protect against security breaches, malware, ransomware and insider threats. We believe these new additions to our product offering can also be a meaningful contributor to our growth.

These include:

In 2021, we introduced an update to our platform to help customers combat insider and collaboration risks related to Microsoft 365. The update increases insight into organization-wide exposures in Microsoft 365, adds new threat detection capabilities in Azure AD, adds support for additional Network Attached Storage ("NAS") solutions and versions, and enhances search granularity for locating sensitive and personal data. We also launched DatAdvantage Cloud, introducing licenses and support for additional cloud applications and infrastructure, including AWS, Box, GitHub, Google Drive, Jira, Okta, Salesforce, Slack and Zoom. DatAdvantage Cloud will help customers visualize and prioritize their biggest cloud risks, proactively reduce their blast radius, and conduct faster cross-cloud investigations. Additionally, we introduced Data Classification Cloud for Google Drive and Box to help automatically identify sensitive information in these mission-critical SaaS applications. While these products did not meaningfully contribute to our 2021 revenues, we believe they offer significant potential in extending the Varonis Data Security Platform to cloud applications where our customers continue to move sensitive data.

In October 2020, we announced the acquisition of Polyrize Security Ltd. ("Polyrize"), whose technology led to the launch of the DatAdvantage Cloud and Data Classification Cloud licenses described above. Additionally, in the second quarter of 2020, we introduced a Remote Work Update to our platform to increase visibility into potential security issues related to remote work, including dashboards for unusual VPN, DNS and Web usage; comprehensive Microsoft Teams visibility; out-of-the-box reports for pinpointing exposed cloud data; and more threat models for Microsoft 365.

In 2019, we announced Version 7 of our Data Security Platform, which included new dashboards to assess compliance and Active Directory riskand GDPR security risks so that customers can more easily identify critical risk in their hybrid environments, including vulnerable user accounts, at-risk cloud data and potential compliance violations, as well as performance enhancements, such as the usage of SOLR, for faster, more scalable event retrieval and investigation. We also added classification functionality to help enterprises automatically discover and classify data that falls under data covered by the CCPA. We added threat intelligence to our security insights, built incident response playbooks directly into the User Interface ("UI") and made usability and performance improvements.

In 2018, we introduced Varonis Edge, which analyzes perimeter devices like DNS, VPN and web proxy to detect attacks like malware, APT intrusion and data exfiltration, and enable enterprises to correlate events and alerts to track potential data leaks and spot vulnerabilities at the point of entry. We also released Data Classification Labels, integrating with Microsoft Information Protection ("MIP") to help enterprises better classify, track and secure files across enterprise data storesand to address additional compliance requirements from new data privacy laws and standards.
Expand Our Sales Force.Continuing to expand our salesforcesales force will be essential to achieving our customer base expansion goals. The salesforcesales force and our approach to introducing products to the market hashave been key to our successful growth in the past and will be central to our growth plan in the future. While our products serve customers of all sizes, in all industries and all geographies, the marketing focus and majority of our sales focus is on targeting organizations with 1,000 users or more who can make larger initial purchases with us and, over time, and havegenerate a greater potential lifetime value. The ability ofOur customers span leading firms in the financial services, public, healthcare, industrial, insurance, energy and utilities, technology, consumer and retail, media and entertainment and education sectors. We also believe our existing customers represent significant future revenue opportunities for us. We believe that our sales teams to supportmodel, which combines the leverage of a channel sales model with our channel partnershighly trained and professional sales force to efficiently identify leads, generate evaluationsperform risk assessments and convert them to satisfied customers, has and will continue to impactplay a major role in our ability to grow.grow and to successfully deliver our unique value proposition for enterprise data. We intend to expand our sales capacity by adding headcount throughout our sales and marketing department.

Establish Our Data Security Platform as the Industry Standard. We have worked with several of the leading providers of network attached storage, or NAS and hybrid cloud storage, including Dell/EMC, IBM, NetApp, HP, Hitachi and Nasuni in order to expand our market reach and deliver enhanced functionality to our customers. We have worked with these vendors to assure compatibility with their product lines. Through the use of application programming interfaces or APIs,("APIs"), and other integration work, our solutions also integrate with many providers of solutions in the ecosystem. We will continue to pursue such collaborations wherever they advance theour strategic goals, of the company, thereby expanding our reach and establishing our product user interface as the de facto industry standard when it comes to enterprise data.

Continue International Expansion. We believe there is a significant opportunity for our platform in international markets to comply with regulations such as GDPR.address the need for data protection and threat detection and response. Revenues from EMEAEurope, the Middle East and Africa
6


(“EMEA") accounted for approximately a third26% and revenues from Rest of World (“ROW”) accounted for approximately 2% of our revenues, respectively, in 2017. Europe represented the substantial majority of revenues outside the United States. Although we have experienced inconsistent quarterly growth rates over the last few years in our European market, we2021. We believe that international expansion will be a key component of our growth strategy, and we will continue to invest and market our products and services overseas.

3


Our Products

We have six product families, most

Our integrated platform of which utilizeproducts currently contains more than 35 licenses. Each license utilizes our core Metadata Framework technology to deliver features and functionality that allow enterprises to fully understand, secure and benefit from the value of their data. This architecture easily extends through modular functionalities givinggives our clients the flexibilityability to select the features they require for their business needs and the flexibility to expand their usage simply by adding a license.

DatAdvantage. DatAdvantage, our flagship product, launched in 2006, builds on our Metadata Framework and captures, aggregates, normalizes and analyzes every data access event for every user on Windows and UNIX/Linux servers, storage devices, email systems and Intranet servers, without requiring native operating system auditing functionalities or impacting performance or storage on file systems. Through an intuitive graphical interface, DatAdvantage presents insights from massive volumes of data using normal computing infrastructure. It is also our presentation layer for IT departments, which provides an interactive map of relevant user, group, and data objects, usage and content, facilitating analysis from multiple vectors. IT departments can pinpoint areas of interest starting with any metadata object, simulate changes measuring potential impact against historical access patterns, and easily execute changes on all data stores through a unified interface. DatAdvantage identifies where users have unneeded access based on user behavior.

·The Automation Engine, a module introduced in 2017, helps customers accelerate the enforcement of least privilege by limiting broad access without all the manual legwork. It automatically repairs and maintains file systems, helping reduce customers’ risk profiles and decreasing their overhead and resources required to get to a least privilege model.

·DatAlert, a module introduced in 2013, profiles users and their behaviors with respect to systems and data, detects and alerts on meaningful deviations to established baselines, and provides a web-based dashboard and investigative interface. DatAlert allows detection of suspicious activity and prevent data breaches and cyberattacks, perform security forensics, visualize risk and prioritize investigation.

·Varonis Edge, a module announced in 2017 and introduced in early 2018, analyzes perimeter devices like DNS, VPN and Web Proxy to detect attacks like malware, APT intrusion and exfiltration and enables enterprises to correlate events and alerts at the perimeter with alerts and events concerning data to better spot attacks at the point of entry and egress.

DataPrivilege. DataPrivilege, launched in 2006 and designed for use by business unit personnel, provides a self-service web portal that allows users to request access to data necessary for their business functions, and owners to grant access without IT intervention. DataPrivilege also enables IT and business users to make access decisions based on queries, user requests and metadata analytics information, rather than static IT policies. DataPrivilege provides a presentation layer for business users to review accessibility and usage of their data assets, and grant and revoke access.

Data Classification Engine (formerly IDU Classification Framework). As the volume of an enterprise’s information grows, enterprises struggle to find and tag different types of sensitive data, such as intellectual property, regulated content, including Personally Identifiable Information, and medical records. Furthermore, content by itself does not provide adequate context to determine ownership, relevance, or protection requirements. Our Data Classification Engine, introduced in 2009 as the IDU Classification Framework, identifies and tags data based on criteria set in multiple metadata dimensions and provides business and IT personnel with actionable intelligence about this data, including a prioritized list of folders and files containing the most sensitive data and with the most inadequate permissions. For the identified folders and files, it also identifies who has access to that data, who is using it, who owns it, and recommendations for how to restrict access without disrupting workflow. Our Data Classification Engine provides visibility into the content of data across file systems and Intranets sites and combining it with other metadata, including usage and accessibility.

·GDPR Patterns, introduced in 2017, uses the Data Classification Engine as a foundation to identify and classify regulated data in the European Union (“EU”) that falls under the GDPR, with over 250 unique patterns that cover all 28 EU countries.

Data Transport Engine. We introduced our Data Transport Engine software in 2012 to provide an execution engine that unifies the manipulation of data and metadata, translating business decisions and instructions into technical commands such as data migration or archiving. Data Transport Engine allows both IT and business personnel to standardize and streamline activities for data management and retention, from day-to-day maintenance to complex data store and domain migrations and archiving. Our Data Transport Engine ensures that data migrations automatically synchronize source and destination data with incremental copying even if the source data is still in use, translates access permissions across data stores and domains and provides reporting capabilities for data migration status. Moreover, it also provides IT personnel the flexibility to schedule recurring migrations to automatically find and move certain types of data such as sensitive or stale data and to perform active migrations, dispositions and archiving safely and efficiently.

4
license, and the fully-integrated nature of our products allows individual products to enhance the functionality of the others. At the same time, the ease of consumption under a subscription-based model has allowed us to deliver on customer demand for a greater number of our licenses, providing our customers more value quicker while leading to substantial future license upsell and cross-sell opportunities.

DatAnswers. As employees continue to generate and store data in numerous enterprise data stores, relevant files they and their coworkers and predecessors create become harder to find. Unlike the internet, where powerful search engines make relevant web information easy to find despite rapid growth, enterprise file systems are frequently not searchable by employees or IT. Though enterprise search technologies exist, many enterprises do not own or use them to index data, for several reasons, including performance (the index must be up to date to be useful, requiring continual scanning for new and changed content), security (sensitive files that are not adequately restricted become far easier for the wrong people to find), relevance (when many files contain the term or terms a searcher is looking for they are not ranked or presented in a way that they are likely to find the right files), and cost (enterprise search technologies require significant, ongoing investments in hardware and software). DatAnswers was introduced in 2014 to provide secure, relevant and timely search functionality for enterprise data. Capitalizing on the Metadata Framework infrastructure and its analysis of data access events, file system and directory services metadata, DatAnswers indexes files as they are created and changed without requiring continual scanning, filters out results users should not see based on the patented recommendations engine in DatAdvantage and classification results found by the Data Classification Engine, and ranks results using analysis of data usage. DatAnswers is used primarily for end user search and ediscovery projects.

DatAnywhere. We introduced DatAnywhere in 2012 in response to the need by enterprises for a secure and easy-to-use alternative to consumer cloud-based file sharing solutions. DatAnywhere provides our customers’ employees a modern collaboration, hybrid-cloud experience using their existing storage infrastructure. As of February 1, 2018, in order to focus our resources on our data security portfolio, we are no longer selling DatAnywhere to new customers although we will continue to provide maintenance and support to our existing DatAnywhere customers for the near future.

DatAdvantage. DatAdvantage, our flagship product, launched in 2006, captures, aggregates, normalizes and analyzes every data access event for every user on Windows and UNIX/Linux servers, storage devices, email systems, Intranet servers, cloud applications and data stores, without requiring native operating system auditing functionalities or impacting performance or storage on file systems. Through an intuitive graphical interface, DatAdvantage presents insights from massive volumes of data using normal computing infrastructure. It is also our presentation layer for IT departments, which provides an interactive map of relevant users, groups and data objects, usage and content, facilitating analysis from multiple vectors. IT departments can pinpoint areas of interest starting with any metadata object, simulate changes measuring potential impact against historical access patterns, and easily execute changes on all data stores through a unified interface. DatAdvantage identifies where users have unnecessary access based on user behavior and machine learning. DatAdvantage currently contains 20 licenses, including:

Individual DatAdvantage licenses for on-premises data stores and infrastructure (Windows, Directory Services, SharePoint, Unix/Linux and Exchange) and cloud data stores and applications (OneDrive, SharePoint Online, Exchange Online, Azure Active Directory, Box, Google Drive, Salesforce.com, Slack, GitHub, Jira, AWS, S3, Zoom and Okta).
Automation Engine, introduced in 2017, which automatically repairs broken file systems and safely remediates exposures, helps customers accelerate the enforcement of a least privilege model by limiting broad access without substantial manual effort or resources.
DatAlert. Introduced in 2013, DatAlert profiles users and devices and their associated behaviors with respect to systems and data, detects and alerts on meaningful deviations that indicate compromise, provides a web-based dashboard and investigative interface and seamlessly integrates with security information and event management systems (SIEM). DatAlert helps enterprises quickly detect suspicious activity, prevents data breaches and cyberattacks, performs security forensics, visualizes risk and prioritizes and accelerates investigation. In addition, DatAlert contains Varonis Edge, which analyzes perimeter telemetry and enables enterprises to correlate events and alerts at the perimeter with alerts and events concerning data to better spot attacks at the point of entry and egress, reducing time to detection and time to resolution for security incidents. Lastly, with the addition of DatAdvantage Cloud, we are providing alerting capabilities for cloud applications and infrastructures.

Data Classification Engine. As the volume of an enterprise’s information grows, enterprises struggle to find and tag different types of sensitive data, such as intellectual property, regulated content, including Personal Identifiable Information (“PII”), and medical records. Furthermore, content by itself does not provide adequate context to determine ownership, relevance, or protection requirements. Introduced in 2009, Data Classification Engine identifies and tags data based on criteria set in multiple metadata dimensions and provides business and IT personnel with actionable intelligence about this data, including a prioritized list of folders and files containing the most sensitive data and with the most inadequate permissions. For the identified folders and files, it also identifies who has access to that data, who is using it, who owns it, and recommendations for how to restrict access without disrupting workflow. Data Classification Engine provides visibility into the content of data across file systems and intranet sites and combines it with other metadata, including usage and accessibility. Data Classification Engine currently contains eight licenses, including:

Individual Data Classification Engine licenses for on-premises data stores and infrastructure (Windows/SharePoint and Unix) and cloud data stores (OneDrive, SharePoint Online, Google Drive and Box).

7


Data Classification Policy Pack, introduced as GDPR Patterns in 2017, builds upon the Data Classification Engine with over 400 patterns for identifying and classifying personal information specific to GDPR and CCPA.

Data Classification Labels, introduced in 2018, integrates with MIP to protect sensitive data across customer environments regardless of where it lives or how it is shared. Data Classification Labels allows users to automatically apply classification labels and encrypt files that it has identified as sensitive.

DataPrivilege. Introduced in 2006, DataPrivilege was designed for use by business unit personnel and provides a self-service web portal that allows users to request access to data necessary for their business functions, and allows owners to grant access without IT intervention. DataPrivilege enhances data protection and compliance by enabling business users to make access decisions based on queries, user requests and metadata analytics information, rather than static IT policies. DataPrivilege provides a presentation layer for business users to review accessibility, sensitivity and usage of their data assets and grant and revoke access. We currently offer DataPrivilege licenses for Windows and SharePoint.

Data Transport Engine. Introduced in 2012, Data Transport Engine provides an execution engine that unifies the manipulation of data and metadata, translating business decisions and instructions into technical commands such as data migration or archiving. Data Transport Engine allows both IT and business personnel to standardize and streamline activities for data management and retention, from day-to-day maintenance to complex data store and domain migrations and archiving. Data Transport Engine ensures that data migrations automatically synchronize source and destination data with incremental copying even if the source data is still in use, translates access permissions across data stores and domains and provides reporting capabilities for data migration status. Moreover, it also provides IT personnel the flexibility to schedule recurring migrations to automatically find and move certain types of data such as sensitive or stale data and to perform active migrations, dispositions and archiving safely and efficiently. We currently offer Data Transport Engine licenses for Windows and SharePoint.

DatAnswers. DatAnswers was introduced in 2014 to provide secure, relevant and timely search functionality for enterprise data. In 2018, we enhanced DatAnswers to help meet growing demands to comply with data privacy regulations and eDiscovery requests, and to facilitate data subject access requests. As data privacy laws are becoming more prevalent across the globe, meeting subject access requests is a primary requirement in data regulation. Compliance officers, controllers, and administrators need to identify and locate relevant content related to a data subject, a task which is becoming increasingly harder to complete, due to the growth of data, where it’s stored and how it’s accessed. DatAnswers provides elevated search for compliance and e-discovery, helping solve the growing problem of being able to fulfill subject access requests to meet data privacy laws. We currently offer DatAnswers licenses for Windows, SharePoint, OneDrive and SharePoint Online.

Our Customers

Our customer base has grown from approximately 550 customers at December 31, 2009 to approximately 6,250

We currently have customers in more than 75 countries as of December 31, 2017.over 85 countries. Our customers span numerous industries and vary greatly in size, ranging from small and medium businesses to large multinational enterprises and government agencies. Our customers include leading firms in the financial services, public, healthcare, industrial, insurance, energy and utilities, technology, consumer and retail, media and entertainment and education sectors, with hundreds of thousands of employees and hundredspetabytes of terabytes of data. Moreover, we have customers across numerous industries and geographies.

Services

Maintenance and Support

Our customers typically purchase one year of software maintenanceSubscription and Perpetual Licenses

Maintenance and support as partassociated with a subscription contract is included in the Subscriptions revenue line of their initial purchasethe statement of our products,operations. Maintenance and support associated with an option to renew.perpetual licenses is included in the Maintenance and services line of the statement of operations. These maintenance agreements provide customers the right to receive support and unspecified upgrades and enhancements when and if they become available during the maintenance period and access to our technical support services.

We maintain a customer support organization that provides all levels of support to our customers. Our customers that purchase maintenance and support services receive guaranteed response times, direct telephonic support and access to online support portals. Our customer support organization has global capabilities with expertise in both our software and complex IT environments and associated third-party infrastructure.

8


Professional Services

While users can easily download, install and deploy our software on their own, certain enterprises use our professional service team to provide fee-based services, which include training our customers in the use of our products, providing advice on deployment planning, network design, product configuration and implementation, automating and customizing reports and tuning policies and configuration of our products for the particular characteristics of the customer’s environment.

Although professional services have always been a small percentage of our total revenues, we have recently seen, and expect to continue to see, that percentage decline as many of our newer licenses can provide remediation in more automated ways.

Sales and Marketing

Sales

We sell the vast majority of our products and services to a global network of hundreds of resellers and distributors that we refer to as our channel partners. Our channel partners, in turn, sell the products they purchase from us to customers globally.customers. In addition, we maintain a highly trained professional sales force that is responsible for overall market development, including the management of the relationships with our channel partners and supporting channel partners in winning customers through operating demonstrations and risk assessments. Our channel partners identify potential sales targets, maintain relationships with customers and introduce new products to existing customers. Sales to our channel partners are generally subject to our standard, non-exclusive channel partner agreement, meaning our channel partners may offer customers the products of several different companies.agreement. These agreements are generally for a term of one year with a one yearone-year renewal term and can be terminated by us or the channel partner for any reason upon 30 days’ notice. A termination of the agreement has no effect on orders already placed. Payment to us from the channel partner is typically due within 30 – 90to 60 calendar days of the date we issue an invoice for such sales.

5
date.


Marketing

Our marketing strategy focuses on building our brand and product awareness, increasing customer adoption and demand, communicating advantages and business benefits andas well as generating leads for our channel partners and sales force. We market our software as athe Varonis Data Security Platform, a solution for securing and managing file systems and enterprise data and transforming that data into actionable intelligence.data. We execute our marketing strategy by leveraging a combination of internal marketing professionals, external marketing partners and a network of regional and global channel partners. Our internal marketing organization is responsible for branding, content generation, demand generation, field marketing and product marketing, and works with our business operations team to support channel marketing and sales support programs. We provide one on oneone-on-one and community education and awareness and promote the expanded use of our software. We host in-person or virtual Varonis Connect! customer events annually across sales regions, as well as free, online monthly or bi-weekly technical webinars in multiple regions. We focus our efforts on highly relevant content creation, events, campaigns tools and activities that can be leveraged by our channel partners worldwide to extend our marketing reach, such as sales tools, information regarding product awards and technical certifications, security training, regional seminars and conferences, webinars, podcasts and various other demand-generation activities. Our marketing efforts also include public relations in multiple regions, industry analyst relations, customer marketing, account-based marketing, targeted advertising, extensive content development available through our web sitewebsite and content syndication, and our active blog, “The Inside Out Security Blog.”

Seasonality

See Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations — Seasonality and Quarterly Trends.”

blog.

Research and Development

Our research and development efforts are focused primarily on improving and enhancing our existing products, and services, as well as developing new products, features and functionality. Use of our products has expanded from data governance into new areas such as data security, threat detection and response, privacy, accessibility and retention, and we anticipate that customerscustomer demand and innovation will drive functionality into additional areas. We regularly release new versions of our products which incorporate new features and enhancements to existing ones. We conduct substantially allthe majority of our research and development activities in Israel, and we believe this provides us with access to world classworld-class engineering talent.

In addition, we continue to seek opportunities to extend our technological capabilities and grow our business from strategic technological tuck-in acquisitions.

Our research and development expense was $47.4$137.9 million, $36.7$99.4 million and $31.8$80.8 million in 2017, 20162021, 2020 and 2015,2019, respectively.

Intellectual Property

We rely onattempt to protect our technology and the related intellectual property under patent, trademark, copyright and trade secret laws, confidentiality procedures and contractual provisions to protectprovisions. No single intellectual property right is solely responsible for protecting our technology and the related intellectual property.products. The nature and extent of legal protection of our intellectual property rights depends on, among other
9


things, its type and the jurisdiction in which it arises. As of January 31, 2018,28, 2022, we had 5279 issued patents and 3315 pending patent applications in the United States. Our issued U.S. patents expire between 2025 and 2038.2039. We also had 1852 patents issued and 6758 applications pending for examination in non-U.S. jurisdictions, and 10no pending Patent Cooperation Treaty (“PCT”) patent applications, all of which are counterparts of our U.S. patent applications. Certain of our patents are owned by our Israeli subsidiary. The claims for which we have sought patent protection relate primarily to inventions we have developed for incorporation into our products. We also license software from third parties for use in developing
In addition to patented technology, we rely on our productsunpatented proprietary technology and for integration into our products, including open source software.

Despite our efforts to protect our proprietary technologies and intellectual property rights, unauthorized parties may attempt to copy aspects of our products or obtain and use our trade secrets or other confidential information.secrets. We generally enter into confidentiality agreements with our employees, consultants, service providers, vendors and customers and generally limit internal and external access to, and distribution of, our proprietary information and proprietary technology through certain procedural safeguards. TheseWe also rely on invention assignment agreements may not effectively prevent unauthorized use or disclosure ofwith our intellectual property or technologyemployees, consultants and may not provide an adequate remedyothers, to assign to the Company all inventions developed by such individuals in the eventcourse of unauthorized use or disclosure of our intellectual property or technology. We cannot assure you thattheir engagement with the steps taken by us will prevent misappropriation of our trade secrets or technology or infringement of our intellectual property. In addition,Company.


Moreover, we have registered the laws of some foreign countries do not protect our proprietary rights to as great an extent as the laws of“Varonis” name and logo and “DatAdvantage,” “DataPrivilege,” “DatAlert,” “DatAnywhere” and other names in the United States and, many foreign countries do not enforceas related to some of these laws as diligently as government agenciesnames, certain other countries.

In addition to Company-owned intellectual property, we license software from third parties for integration into our solution, including open source software and private partiesother software available on commercially reasonable terms. It may be necessary in the United States.

6

Our industry is characterized by the existencefuture to seek or renew licenses relating to various aspects of a large number of relevant patents and frequent claims and related litigation regarding patents and other intellectual property rights. From time to time, third-parties have asserted and may assert their patent, copyright, trademark and other intellectual property rights against us, our channel partners or customers. Successful claims of infringement or misappropriation by a third party could prevent us from distributing certain products or performing certain services or could require us to pay substantial damages (including, for example, treble damages if we are found to have willfully infringed patents and increased statutory damages if we are found to have willfully infringed copyrights), royalties or other fees. Such claims also could require us to cease making, licensing or using solutions that are alleged to infringe or misappropriate the intellectual property of others, or to expend additional development resources to attempt to redesign our products, or services or otherwiseprocesses and services. While we have generally been able to develop non-infringing technology. Even ifobtain such licenses on commercially reasonable terms in the past, such third parties may offer a licensenot continue to their technology, the termsmaintain such software or continue to make it available to us.

Seasonality
See Item 7, “Management’s Discussion and Analysis of any offered license may not be acceptable,Financial Condition and the failure to obtain a license or the costs associated with any license could cause our business, resultsResults of operations or financial condition to be materiallyOperations — Seasonality and adversely affected. In some cases, we indemnify our channel partners and customers against claims that our products infringe the intellectual property of third parties.

Quarterly Trends.”


Competition

While there are some companies which offer certain features similar to those embedded in our solutions, as well as others with which we compete in certain use cases, we believe that we do not currently compete with a company that offers the same breadth of functionalities that we offer in a single integrated solution. Nevertheless, we do compete against a select group of software vendors such as Veritas Technologies LLC and Quest Software, that provide standalone solutions, similar to those found in our comprehensive software suite, in the specific markets in which we operate. We also face direct competition with respect to certain of our products, specifically Data Transport Engine, DatAnswers and DatAdvantage for Directory Services. As we continue to augment our functionality with insider threat detection and user behavior analytics and as we expand our classification capabilities to better serve compliance needs with new regulations, like GDPR, CCPA and other data privacy laws, and as these functionalities continue to be recognized as critical to protect enterprise data, we may face increased perceived and real competition from other security and classification technologies. In the future, as customer requirements evolve and new technologies are introduced, we may experience increased competition if established or emerging companies develop solutions that address the enterprise data market. Furthermore, because we operate in a relatively new andan evolving area,market, we anticipate that competition will increase based on customer demand for these types of products.

A number of factors influence our ability to compete in the markets in which we operate, including, without limitation: the continued reliability and effectiveness of our products’ functionalities; the breadth and completeness of our solutions’ features; the scalability of our solutions; and the ease of deployment and use of our products. We believe that we generally compete favorably in each of these categories. We also believe that we distinguish ourselves from others by delivering a single, integrated solution and sophisticated automation to address our customers’ needs regarding security access, governance, collaborationprivacy and retention with respect to their enterprise data. There can, however,However, we may not be no assurance that we willable to remain unique in this capacity or that we willcontinue to be able to compete favorably with other providers in the future.

If a more established company were to target our market, we may face significant competition. They may have competitive advantages, such as greater name recognition, larger sales, marketing, research and acquisition resources, access to larger customer bases and channel partners, a longer operating history and lower labor and development costs, all of which may enable them to respond more quickly to new or emerging technologies and changes in customer requirements or to devote greater resources to the development, promotion and sale of their products than we do. Increased competition could result in us failing to attract customers or maintain renewals and licenses at the same rate. It could also lead to price cuts, alternative pricing structures or the introduction of products available for free or a nominal price, reduced gross margins, longer sales cycles and loss of market share.

10


In addition, our current or prospective channel partners may establish cooperative relationships with any future competitors. These relationships may allow future competitors to rapidly gain significant market share. These developments could also limit our ability to generate revenues from existing and new customers. If we are unable to compete successfully against current and future competitors our business, results of operations and financial condition may be harmed.

Employees

and Human Capital Resources

As of December 31, 2017,2021, we had 1,2512,065 employees and independent contractors who developed, marketed, sold and supported our technology solutions, of which 547911 were in the United States, 409704 were in Israel and 295450 were in other countries. None

We understand that our innovation leadership is ultimately rooted in our people. Competition for qualified personnel in the technology space is intense, and our success depends in large part on our ability to recruit, develop and retain a productive and engaged workforce. Accordingly, investing in our employees and their well-being, offering competitive compensation and benefits, promoting diversity and inclusion, adopting progressive human capital management practices and community outreach constitute core elements of our corporate strategy.

Offer Competitive Compensation and Benefits. We strive to ensure that our employees receive competitive and fair compensation and innovative benefit offerings, tying incentive compensation to both business and individual performance, offering competitive maternal and paternal leave policies, providing meaningful retirement and health benefits and maintaining an employee stock purchase plan. In 2021, all employees received a special allowance for home office equipment in order to allow them to continue effectively working remotely.

Support Employee Well-being and Engagement. We support the overall well-being of our employees from a physical, emotional, financial and social perspective. We also regularly seek input from employees, including through broad employee satisfaction and pulse surveys on specific issues, intended to assess our degree of success in promoting an environment where employees are engaged, satisfied, productive and possess a strong understanding of our business goals. Our global well-being programs include a long-standing practice of remote working arrangements, flexible paid time off, life planning benefits, wellness platforms and employee assistance. In addition, we ensure ongoing check-ins with employees by HR and managers to provide additional channels of support.

Promote Sense of Belonging through Diversity and Inclusion Initiatives. We conduct diversity and code of conduct trainings with employees and managers to share our views on the importance of diversity and the promotion of an inclusive and diverse workplace, where all individuals are respected and feel they belong regardless of their age, race, national origin, gender, religion, disability, sexual orientation or gender identity. We also require all employees to participate in unconscious bias training to improve awareness. We work with diversity focused candidate application platforms to increase access to diverse talent. Our customers are located in over 85 countries and our global workforce operates across cultures, functions, language barriers and time zones to provide them dedicated and ongoing support.

Provide Programs for Employee Recognition. We offer rewards and recognition programs to our employees, including awards to recognize employees who best exemplify our values and spot awards to recognize employee contributions. We believe that these recognition programs help drive strong employee performance. We conduct semi-annual employee performance reviews, where each employee is representedevaluated by their personal manager and also conducts a labor union with respectself-assessment, a process which empowers our employees. Employee performance is assessed based on a variety of key performance metrics, including the achievement of objectives specific to histhe employee’s department or her employment with us.role. Employees have access to an internal platform to recognize their peers based on their professional and socially responsible contributions to the Company.

Create Opportunities for Growth and Development. We focus on creating opportunities for employee growth, development, training and education, including opportunities to cultivate talent and identify candidates for new roles from within the company, as well as management and leadership development programs. Employee training and education includes online certification, in certain European countries have the benefits of collective bargaining arrangements at the national level.person certification and new hire training bootcamps. We also conduct manager training programs on an annual basis, which include in-depth managerial and coaching skills, as well as tailored feedback. We have not experienced anyestablished an internal mentoring program in which seasoned employees mentor new managers based on defined goals.

Promote Community Outreach and Support. We believe it is important to give back and promote community outreach and support through corporate giving and employee volunteerism in the communities in which we live and work. We also provide corporate matching of employee charitable donations and flexible volunteering during work stoppages, and we consider our relations withtime, letting our employees know that we support the charitable efforts that matter to be good.

7
them.


11


Continued response to the COVID-19 Pandemic. We have prioritized the safety of our employees and business partners, continued to support the needs of our customers and communities, and continued to comply with state and local requirements, guidelines and recommendations. We operate in flexible and hybrid working arrangements, using digital platforms and virtual collaboration tools to maintain productivity and to remain in contact with one another and our business partners and customers. We continue to enhance and promote programs to support our employees' mental and physical well-being.

Available Information

Our website is located at www.varonis.com, and our investor relations website is located at http:https://ir.varonis.com/.ir.varonis.com. The information posted on our website is not incorporated into this Annual Report on Form 10-K. Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to reports filed or furnished pursuant to Sections 13(a) and 15(d) of the Exchange Act are available free of charge on our investor relations website as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC.Securities and Exchange Commission (the “SEC"). You may also access all of our public filings through the SEC’s website at www.sec.gov. Further, a copy of this Annual Report on Form 10-K is located at the SEC’s Public Reference Room at 100 F Street, NE, Washington, D.C. 20549. Information on the operation of the Public Reference Room can be obtained by calling the SEC at 1-800-SEC-0330.

Investors and other interested parties should note that we use our media and investor relations website and our social media channels to publish important information about us, including information that may be deemed material to investors. We encourage investors and other interested parties to review the information we may publish through our media and investor relations website and the social media channels listed on our media and investor relations website, in addition to our SEC filings, press releases, conference calls and webcasts.


Item  1A.Risk Factors

Investing in our common stock involves a high degree of risk.


You should carefully consider the following risks and all other information contained herein,in this report, including without limitation our consolidated financial statements and the related notes thereto before investing in our common stock.and "Item 7—Management's Discussion and Analysis of Financial Condition and Results of Operations-Critical Accounting Policies and Estimates." The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unawareoccurrence of or that we currently believe are not material, also may become important factors that affect us. If any of the following risks materialize,could materially adversely affect our business, financial condition, and results of operations, cash flows and future prospects, which could bein turn materially harmed. In that case,affect the trading price of our common stock could decline, and youstock. The following risk factors have been organized by category for ease of use; however, many of the risks may lose some or all of your investment.

have impacts in more than one category.


Risks Related to Our Business andthe Industry

in which we Operate


The market for software that analyzes, secures, governs, manages and migrates enterprise data is new and unproven and may not grow.

continue to grow at the same pace.


We believe our future success depends in large part on the continued growth of the market for software that enables enterprises to analyze, secure, govern, manage and migrate their data. In order for us to market and sell our products, we must successfully demonstrate to enterprise IT, security and business personnel the potential value of their data and the risk of that data getting compromised or stolen. WeDespite a number of recent high-profile cyberattacks around the world, we must still persuade them to devote a portion of their budgets to a unified platform that we offer to analyze, secure, govern, manage protect, secure and extract value from this resource. We cannot provide any assurance that enterprises will recognize the need for our products or, if they do, that they will decide that they need a solution that offers the range of functionalities that we offer. Software solutions focused on enterprise data may not yet be viewed as a necessity, and accordingly, our sales effort is and will continue to be focused in large part on explaining the need for, and value offered by, our solution. We can provide no assurance that the market for our solution will continue to grow at its current rate or at all. The failure of the market to continue to develop would materially adversely impact our results of operations.


Prolonged economic uncertainties or downturns could materially adversely affect our business.

Our business depends on our current and prospective customers’ ability and willingness to invest in IT services, including cybersecurity projects, which in turn is dependent upon their overall economic health. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from COVID-19, changes in gross domestic product growth, potential future government shutdowns, the federal government's failure to raise the debt ceiling, financial and credit market fluctuations, inflationary pressure, the imposition of trade barriers and restrictions such as tariffs, political deadlock, restrictions on travel, natural catastrophes, warfare and terrorist attacks, could cause a decrease in business investments, including corporate spending on enterprise software in general and negatively affect the rate of growth of our business.

12


Uncertainty in the global economy makes it extremely difficult for our customers and us to forecast and plan future business activities accurately. This could cause our customers to reevaluate decisions to purchase our product or to delay their purchasing decisions, which could lengthen our sales cycles.

Our customers span a variety of verticals, some of which have been and may continue to be impacted significantly by the economic turmoil caused by the COVID-19 pandemic. A downturn in any of our leading industries, or a reduction in any revenue-generating vertical, may cause enterprises to react to worsening conditions by reducing their spending on IT. Customers may delay or cancel IT projects, choose to focus on in-house development efforts or seek to lower their costs by renegotiating maintenance and support agreements. To the extent purchases of licenses for our software are perceived by customers and potential customers to be discretionary, our revenues may be disproportionately affected by delays or reductions in general IT spending. In addition, consolidation in certain industries may result in reduced overall spending on our software. If the economic conditions of the general economy or industries in which we operate worsen from present levels, our business, results of operations and financial condition could be adversely affected.

We may face increased competition in our market.

While there are some companies which offer certain features similar to those embedded in our solutions, as well as others with whom we compete in certain tactical use cases, we believe that we do not currently compete with a company that offers the same breadth of functionalities that we offer. Nevertheless, we do compete against a select group of software vendors that provide standalone solutions, similar to those found in our comprehensive software suite, in the specific markets in which we operate. We also face direct competition with respect to certain of our products, specifically Data Transport Engine, DatAnswers and DatAdvantage for Directory Services. As we continue to augment our functionality with insider threat detection and user behavior analytics and as we expand our classification capabilities to better serve compliance needs, such as GDPR, CCPA and other data privacy laws, we may face increased perceived and real competition from other security and classification technologies. As we expand our coverage and penetration in the cloud, we may face increased perceived and real competition from other cloud-focused technologies. In the future, as customer requirements evolve and new technologies are introduced, we may experience increased competition if established or emerging companies develop solutions that address the enterprise data market. Furthermore, because we operate in an evolving area, we anticipate that competition will increase based on customer demand for these types of products.

In particular, if a more established company were to target our market, we may face significant competition. They may have competitive advantages, such as greater name recognition, larger sales, marketing, research and acquisition resources, access to larger customer bases and channel partners, a longer operating history and lower labor and development costs, which may enable them to respond more quickly to new or emerging technologies and changes in customer requirements or devote greater resources to the development, promotion and sale of their products than we do. Increased competition could result in us failing to attract customers or maintain licenses at the same rate. It could also lead to price cuts, alternative pricing structures or the introduction of products available for free or a nominal price, reduced gross margins, longer sales cycles, lower renewal rates and loss of market share.

In addition, our current or prospective channel partners may establish cooperative relationships with future competitors. These relationships may allow future competitors to rapidly gain significant market share. These developments could also limit our ability to obtain revenues from existing and new customers.

Our ability to compete successfully in our market will also depend on a number of factors, including ease and speed of product deployment and use, the quality and reliability of our customer service and support, total cost of ownership, return on investment and brand recognition. Any failure by us to successfully address current or future competition in any one of these or other areas may reduce the demand for our products and adversely affect our business, results of operations and financial condition.

We are subject to a number of legal requirements, contractual obligations and industry standards regarding security, data protection and privacy, and any failure to comply with these requirements, obligations or standards could have an adverse effect on our reputation, business, financial condition and operating results.

Privacy and data information security have become a significant issue in the United States and in many other countries where we have employees and operations and where we offer licenses to our products. The regulatory framework for privacy and personal information security issues worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. The U.S. federal and various state and foreign government bodies and agencies have adopted or are considering adopting laws and regulations limiting, or laws and regulations regarding, the collection, distribution, use, disclosure, storage and security of personal information. For example, the CCPA, which went into effect on January 1, 2020, requires, among other things,
13


covered companies to provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information. Notably, the CCPA was expanded by the California Privacy Rights Act on November 3, 2020, and will impose additional obligations on businesses relating to personal information beginning on January 1, 2023, with enforcement beginning on July 1, 2023. In addition, Virginia recently enacted the Virginia Consumer Data Protection Act and Colorado recently enacted the Colorado Privacy Rights Act that take effect on January 1, 2023 and July 1, 2023, respectively.

Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework with which we or our customers must comply. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of data that identifies or may be used to identify or locate an individual, such as names, email addresses and, in some jurisdictions, Internet Protocol addresses. These laws and regulations often are more restrictive than those in the United States and are rapidly evolving. For example, the European Union's ("EU") data protection regime, the GDPR, became enforceable on May 25, 2018. Additionally, the United Kingdom enacted legislation in May 2018 that substantially implements the GDPR, but the United Kingdom’s exit from the EU (which formally occurred on January 31, 2020), commonly referred to as “Brexit," has created uncertainty with regard to the regulation of data protection in the United Kingdom. In particular, the United Kingdom’s government has announced that it is considering revising some aspects of its domestic data protection regime to move further away from the EU approach, and it is unclear how the two regimes will interact after that. In addition, the United Kingdom is reviewing its data transfer rules with respect to transfers to the United States and other jurisdictions. This may result in substantively different compliance obligations with respect to transfers of personal data out of the United Kingdom and the EU, respectively. Complying with the GDPR or other laws, regulations or other obligations relating to privacy, data protection or information security may cause us to incur substantial operational costs or require us to modify our data handling practices. Non-compliance could result in proceedings against us by governmental entities or others, could result in substantial fines or other liability and may otherwise adversely impact our business, financial condition and operating results.

Some statutory requirements, both in the United States and abroad, include obligations of companies to notify individuals of security breaches involving particular personal information, which could result from breaches experienced by us or our service providers. Even though we may have contractual protections with our service providers, a security breach could impact our reputation, harm our customer confidence, hurt our sales or cause us to lose existing customers and could expose us to potential liability or require us to expend significant resources on data security and in responding to such breach.

In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us. We also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection and information security, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, contractual obligations and other obligations may require us to incur additional costs and restrict our business operations. Because the interpretation and application of laws and other obligations relating to privacy and data protection are still uncertain, it is possible that these laws and other obligations may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our software. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could have an adverse effect on our business. We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to develop new features could be limited. Any inability to adequately address privacy concerns, even if unfounded, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and adversely affect our business.

Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our products. Privacy and personal information security concerns, whether valid or not valid, may inhibit market adoption of our products particularly in certain industries and foreign countries.

Risks Related to Our Operations

Security breaches, cyberattacks or other cyber-risks of our IT and production systems could expose us to significant liability and cause our business and reputation to suffer and harm our competitive position.

Our corporate infrastructure stores and processes our sensitive, proprietary and other confidential information (including as related to financial, technology, employees, marketing, sales, etc.) which is used on a daily basis in our operations. In addition, our software involves transmission and processing of our customers' confidential, proprietary and sensitive information. We
14


have legal and contractual obligations to protect the confidentiality and appropriate use of customer data. Being a leading pioneer in the cyber industry, we may be an attractive target for cyber attackers or other data thieves.

High-profile cyberattacks and security breaches have increased in recent years, with the potential for such acts heightened as a result of the number of employees working remotely due to COVID-19. Security industry experts and government officials have warned about the risks of hackers and cyberattacks targeting IT products and enterprise infrastructure. Because techniques used to obtain unauthorized access or to sabotage systems change frequently and often are not recognized until launched against a specific target, we may be unable to anticipate these techniques or to implement adequate preventative measures. As we continue to increase our client base and expand our brand, we may become more of a target for third parties seeking to compromise our security systems and we anticipate that hacking attempts and cyberattacks will increase in the future. We cannot give assurance that we will always be successful in preventing or repelling unauthorized access to our systems. We also may face delays in our ability to identify or otherwise respond to any cybersecurity incident or any other breach. Additionally, we use third-party service providers to provide some services to us that involve the storage or transmission of data, such as SaaS, cloud computing, and internet infrastructure and bandwidth, and they face various cybersecurity threats and also may suffer cybersecurity incidents or other security breaches. Despite our security measures, our IT and infrastructure may be vulnerable to attacks. Threats to IT security can take a variety of forms. Individual and groups of hackers and sophisticated organizations, including state-sponsored organizations or nation-states, continuously undertake attacks that pose threats to our customers and our IT. These actors may use a wide variety of methods, which may include developing and deploying malicious software or exploiting vulnerabilities in hardware, software, or other infrastructure in order to attack our products and services or gain access to our networks, using social engineering techniques to induce our employees, users, partners, or customers to disclose passwords or other sensitive information or take other actions to gain access to our data or our users’ or customers’ data, or acting in a coordinated manner to launch distributed denial of service or other coordinated attacks. Inadequate account security practices may also result in unauthorized access to confidential and/or sensitive data.

Security risks, including, but not limited to, unauthorized use or disclosure of customer data, theft of proprietary information, theft of intellectual property, theft of internal employee’s PII/PHI information, theft of financial data and financial reports, loss or corruption of customer data and computer hacking attacks or other cyberattacks, could require us to expend significant capital and other resources to alleviate the problem and to improve technologies, may impair our ability to provide services to our customers and protect the privacy of their data, may result in product development delays, may compromise confidential or technical business information, may harm our competitive position, may result in theft or misuse of our intellectual property or other assets and could expose us to substantial litigation expenses and damages, indemnity and other contractual obligations, government fines and penalties, mitigation expenses, costs for remediation and incentives offered to affected parties, including customers, other business partners and employees, in an effort to maintain business relationships after a breach or other incident, and other liabilities. We are continuously working to improve our IT systems, together with creating security boundaries around our critical and sensitive assets. We provide advanced security awareness training to our employees and contractors that focuses on various aspects of the cybersecurity world. All of these steps are taken in order to mitigate the risk of attack and to ensure our readiness to responsibly handle any security violation or attack. However, because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until successfully launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. If an actual or perceived breach of our security occurs, the market perception of the effectiveness of our security measures and our products could be harmed, we could lose potential sales and existing customers, our ability to operate our business could be impaired, we may incur significant liabilities, we could suffer harm to our reputation and competitive position, and our operating results could be negatively impacted.

Our quarterly results of operations have fluctuated and may fluctuate significantly due to variability in our revenues which could adversely impact our stock price.


Our revenues and other results of operations have fluctuated from quarter to quarter in the past and could continue to fluctuate in the future.future partially due to the front-loaded revenue recognition nature of our business. Additionally, we have a limited operating history under our subscription model, which makes it difficult to forecast our results. As a result, comparing our revenues and results of operations on a period-to-period basis may not be meaningful, and you should not relybe relied on for any particular past quarter or other period results. Our revenues depend in part on the conversion of enterprises that have installed an evaluation license for our softwareundergone risk assessments, which can be and are frequently performed remotely, into paying customers. In this regard, mostcustomers; however, given the spread of COVID-19 and the impact on our prospects, these risk assessments may not be converted at the same historical rates. At the same time, the majority of our sales are typically made during the last three weeks of every quarter. We may fail to meet market expectations for that quarter if we are unable to close the number of transactions that we expect during this short period and closings are deferred to a subsequent quarter.quarter or not closed at all. In addition, our sales cycle from initial contact to delivery of and payment for the software license generally becomes longer and less predictable with respect to large transactions and often involves multiple meetings or consultations at a substantial cost and time commitment to us. Although we try to minimize the potential impact of large transactions on our quarterly results of operations, theThe closing of a large transaction
15


in a particular quarter may raise our revenues in that quarter and thereby make it more difficult for us to meet market expectations in subsequent quarters and our failure to close a large transaction in a particular quarter or any renewals may adversely impact our revenues in that quarter. In addition,Moreover, we base our current and future expense levels on our revenue forecasts and operating plans, and our expenses are relatively fixed in the short term.short-term. Accordingly, we would likely not be able to reduce our costs sufficiently to compensate for an unexpected shortfall in revenues and even a relatively small decrease in revenues could disproportionately and adversely affect our financial results for that quarter.


The variability and unpredictability of these and other factors, many of which are outside of our control, could result in our failing to meet or exceed financial expectations for a given period. If our revenues or results of operations fall below the expectations of investors or any securities analysts that cover our stock,period and may cause the price of our common stock couldto decline substantially.

8


A failure

If our subscription-based business model fails to hire and integrate additional sales and marketing personnel or maintain their productivity could adversely affectcontinue yielding the benefits that we have achieved to date, our results of operations could be negatively impacted.

We have completed our transition to a subscription-based business model, but it is uncertain whether the benefits we have achieved will continue. Market acceptance of our products is dependent on our ability to include functionality and growth prospects.

usability that address certain customer requirements. Additionally, we must optimally price our products in light of marketplace conditions, our costs and customer demand. At the start of the transition, we suffered a negative revenue and earnings impact, including on our quarterly results of operations. Such negative implications might return if we are unable to achieve the renewals we anticipate, either at all or on a timely basis.


This subscription strategy may give rise to a number of risks, including the following:

•    our revenues and cash flows may fluctuate more than anticipated over the short-term as a result of this strategy;
•    if our customers do not renew their subscriptions or do not renew them on a timely basis (including due to the economic turmoil caused by the COVID-19 pandemic), our revenues may decline and our business may suffer;
•    the shift to a subscription strategy may raise, and has raised, concerns among our customer base, including concerns regarding changes to pricing over time;
•    we may be unsuccessful in maintaining or implementing our target pricing or new pricing models, product adoption and projected renewal rates, or we may select a target price or new pricing model that is not optimal and could negatively affect our sales or earnings; and
•    our sales force may struggle with the additional requirements of selling subscription renewals which may lead to increased turnover rates and lower headcount.

The global COVID-19 pandemic could have harmful effects on our business and results of operations.

The COVID-19 pandemic and efforts to control its spread have significantly curtailed the movement of people, goods and services worldwide, including in most or all of the regions in which we sell our products and services and conduct our business operations. Many jurisdictions have required mandatory business closures, or imposed capacity limitations and other restrictions affecting our operations. Extended restrictions or closures may adversely affect economies and financial markets globally. Our operations, and the operations of our customers and partners, have been disrupted and may continue to be so for a period of time that cannot currently be predicted.

The move to remote working has not to date materially impacted our business requires intensiveoperations and research and development activity; however, if our employees are not able to continue working effectively as a result of the COVID-19 pandemic, including because of illness, quarantines, office closures, ineffective remote work arrangements or technology failures or limitations, our operations would be adversely impacted. Further, as recently seen in many places around the world, remote and hybrid work arrangements increase the risk of cybersecurity incidents, data breaches or cyberattacks, which could have a material adverse effect on our business and results of operations if it were to happen to us, due to, among other things, the loss of proprietary data, interruptions or delays in the operation of our business, damage to our reputation and any government imposed penalty. While the move to remote working and virtual-only customer experience has not to date adversely impacted our sales, we have had to postpone or cancel customer and industry events or conduct them virtually, and we cannot predict with certainty the impact these changes may have on our sales.

Additionally, concerns over the economic impact of COVID-19 could cause extreme volatility in financial and other capital markets which have temporarily adversely impacted, and may in the future adversely impact, our stock price.

Overall, the COVID-19 pandemic gives rise to a number of risks, including, but not limited to, the following:

16


•    our ability to expand within our existing customer base, including through the adoption of additional licenses;
•    reduced economic activity which could lead to a prolonged recession, which could negatively impact consumer discretionary spending and in return could severely impact our business operations, financial condition and liquidity;
•    our ability to continue to show the positive trends at the levels we have shown in the last several quarters for certain key performance metrics, such as renewal rates and annual recurring revenues;
•    negatively affect our customer success efforts, our ability to enter into new markets and our ability to acquire new customers, in part due to potentially lower conversion rates on risk assessments and delay and lengthen our sales cycles due to virtual meetings;
•    a reduction in the number of users as customers terminate and furlough employees;
•    an increase in bad debt reserves as customers face economic hardship and collectability becomes more uncertain, including the risk of bankruptcies;
•    our ability to timely retain, attract and recruit employees and effectively train our existing employees;
•    a reduction in our operating effectiveness, employee productivity, sales and marketing activities. Our salesefforts, as our employees work from home;
•    variability with forward-looking guidance and marketingfinancial results, including management's accounting estimates and assumptions;
•    potential negative impact on the health of our personnel and staff, particularly if a significant number of them are essentialimpacted, which could result in a deterioration in our ability to attractingensure business continuity during this disruption;
•    our ability to remotely develop new products and enhance existing products; and
•    our ability to raise capital.

These factors may make it more difficult for us to gain new customers and to expand within our existing customer base. While our revenues increased for the year ended December 31, 2021 compared to the year ended December 31, 2020, we may face future difficulties in gaining new customers and expanding sales towithin our existing customers, bothcustomer base.

The full impact of which are key toCOVID-19 on our business and our future growth. performance is difficult to predict and there is some level of risk that any guidance we provide to the market may turn out to be incorrect. The challenges posed by COVID-19 on our business are uncertain and we will continue to evaluate our financial position in light of future developments, particularly those relating to COVID-19.

We face amay not be able to predict subscription renewal rates and their impact on our future revenues and operating results.

Although our subscription solutions are designed to increase the number of challenges in successfully expandingcustomers that purchase our sales force. We must locatesolutions and hire a significantthe number of qualified individuals,products purchased by existing and competitionnew customers to create a recurring revenue stream that increases and is more predictable over time, our customers are not required to renew their subscriptions for such individuals is intense. In addition,our solutions and they may elect not to renew when, or as we expand into new markets with which we have less familiarity, we will needexpect, or they may elect to recruit individuals who are multilingualreduce the scope of their original purchases or who have skills particular to a certain geography,delay their purchase. We cannot accurately predict renewal rates given our varied customer base of enterprise and itsmall and medium size business customers and the number of multiyear subscription contracts. Customer renewal rates may be difficult to find candidates with those qualifications. We may be unable to achieve our hiringdecline or integration goalsfluctuate due to a number of factors, including offering pricing, competitive offerings, customer satisfaction and reductions in customer spending levels or customer activity due to economic downturns including, but not limited to, the numberCOVID-19 pandemic, the adverse impact of individuals we hire, challenges in finding individuals with the correct background due to increased competition for such hires and increased attrition rates among new hires and existing personnel. Furthermore, based onimport tariffs, inflation or other market uncertainty. If our past experience, it often can take up to 12 months before a new sales force member is trained and operating at a level that meets our expectations. We invest significant time and resources in training new members of our sales force, and we may be unable to achieve our target performance levels with new sales personnel as rapidlycustomers do not renew their subscriptions when or as we expect, or if they choose to renew for fewer subscriptions (in quantity or products) or renew for shorter contract lengths or if they renew on less favorable terms, our revenues and earnings may decline, and our business may suffer.

We have done in the past due to larger numbers of hires or lack of experience training sales personnel to operate in new jurisdictions. Our failure to hire a sufficient number of qualified individuals, to integrate new sales force members within the time periods we have achieved historically or to keep our attrition rates at levels comparable to others in our industry may materially impact our projected growth rate.

Failure to attract, recruitbeen growing and retain highly qualified engineers could adversely affect our results of operations and growth prospects.

Our future success and growth depends, in part, on our abilityexpect to continue to recruit and retain highly skilled personnel, particularly engineers. Any ofinvest in our employees may terminate their employment at any time and competitiongrowth for highly skilled engineering personnel is frequently intense, especially in Israel, where we have a substantial presence and need for qualified engineers. Moreover, to the extent we hire personnel from other companies, we may be subject to allegations that they have been improperly solicited or may have divulged proprietary or other confidential information to us. If we are unable to attract or retain qualified engineers, our ability to innovate, introduce new products and compete would be adversely impacted, and our financial condition and results of operations may suffer.

foreseeable future. If we fail to manage our rapidthis growth effectively, our business and results of operations will be adversely affected.

We have experienced rapid growth in a relatively short period of time. Our revenues grew from $53.4 million in 2012 to $217.4 million in 2017. Our number of employees and independent contractors increased from 399 as of December 31, 2012 to 1,251 as of December 31, 2017. During this period, we also established and expanded our operations in a number of countries outside the United States.


We intend to continue to grow our business and plan to continue to hire new sales employees particularly in oureither for expansion or replacement of existing sales and marketing and research and development groups.personnel. If we cannot adequately and timely hire new employees and if we fail to adequately train these new employees, including our sales force, software engineers and customer support staff, which processes have become more challenging during the COVID-19 period, our sales may not grow at the rates we project and/or our sales productivity might suffer, our customers might decide not to renew or reduce the scope of their original purchases, or our customers may lose confidence in the knowledge and capability of our employees. In addition, we are expanding our current operations, and we intend to make investments to continue our expansion efforts.employees or products. We must successfully manage our growth to achieve our objectives. Although our business has experienced significant growth in the past, we cannot provide any assurance that our business will continue to grow at the same rate, or at all.


Our ability to effectively manage any significant growth of our business will depend on a number of factors, including our ability to do the following:

effectively
17


•    adequately and timely recruit, integrate, train, motivate and motivate a large number ofintegrate new employees, including our sales force and engineers, while retaining existing employees, maintaining the beneficial aspects of our corporate culture and effectively executing our business plan;plan, especially during this challenging period of the COVID-19 pandemic;

•    satisfy existing customers and attract new customers;

•    successfully manage and integrate any future acquisitions of businesses, including without limitation, the amount and timing of expenses and potential future charges for impairment of goodwill from acquired companies;
•    successfully introduce new products and enhancements;
•    effectively manage existing channel partnerships and expand to new ones;

successfully introduce new products and enhancements;

•    improve our key business applications and processes to support our business needs;

•    enhance information and communication systems to ensure that our employees and offices around the world are well-coordinated and can effectively communicate with each other and our growing customer base;

•    enhance our internal controls to ensure timely and accurate reporting of all of our operations and financial results;

•    protect and further develop our strategic assets, including our intellectual property rights; and

make sound•    continue to capitalize on the transition to a subscription-based business decisions in light of the scrutiny associated with operating as a public company.

9
model.


These activities will require significant investments and allocation of valuable management and employee resources, and our growth will continue to place significant demands on our management and our operational and financial infrastructure. There are no guarantees we will be able to grow our business in an efficient or timely manner, or at all. Moreover, if we do not effectively manage the growth of our business and operations, the quality of our software could suffer, which could negatively affect our brand, results of operations and overall business.

Our failure to continually enhance and improve our technology could adversely affect sales of our products.

The market is characterized by the exponential growth in enterprise data, rapid technological advances, changes in customer requirements, including customer requirements driven by changes to legal, regulatory and self-regulatory compliance mandates, frequent new product introductions and enhancements and evolving industry standards in computer hardware and software technology. As a result, we must continually change and improve our products in response to changes in operating systems, application software, computer and communications hardware, networking software, data center architectures, programming tools and computer language technology. Moreover, the technology in our products is especially complex because it needs to effectively identify and respond to a user’s data retention, security and governance needs, while minimizing the impact on database and file system performance. Our products must also successfully interoperate with products from other vendors.


We cannot guarantee that we will be able to anticipate future market needs and opportunities or be able to extend our technological expertise and develop new products or expand the functionality of our current products in a timely manner or at all. Even if we are able to anticipate, develop and introduce new products and expand the functionality of our current products, there can be no assurance that enhancements or new products will achieve widespread market acceptance.

Our product enhancements or new products could fail to attain sufficient market acceptance for many reasons, including:

failure to accurately predict market demand in terms of product functionality and to supply products that meet this demand in a timely fashion;

inability to interoperate effectively with the database technologies and file systems of prospective customers;

defects, errors or failures;

negative publicity or customer complaints about performance or effectiveness; and

poor business conditions, causing customers to delay IT purchases.

If we fail to anticipate market requirements or stay abreast of technological changes, we may be unable to successfully introduce new products, expand the functionality of our current products or convince our customers and potential customers of the value of our solutions in light of new technologies. Accordingly, our business, results of operations and financial condition could be materially and adversely affected.

We are dependent on the continued services and performance of our co-founder, Yakov Faitelson, the loss of whom could adversely affect our business.

Our future performance depends in large part on the continued services and continuing contributions of our co-founder, our Chief Executive Officer and President, Yakov Faitelson, to successfully manage our company, to execute on our business plan and to identify and pursue new opportunities and product innovations. The loss of services of Mr. Faitelson could significantly delay or prevent the achievement of our development and strategic objectives and adversely affect our business.

Due to our rapid growth, we have a limited operating history at our current scale, which makes it difficult to evaluate and predict our future prospects and may increase the risk that we will not be successful.


We have been growing rapidly in recent periods and, as a result, have a relatively short history operating our business at its current scale. For example, we have significantly increased the number of our employees and have expanded our operations and product offerings. This limits our ability to forecast our future operating results and subjects us to a number of uncertainties, including our ability to plan for and model future growth. We have encountered and will continue to encounter risks and uncertainties frequently experienced by growing companies in new markets that may not develop as expected. Because we depend in part on the market’s acceptance of our products, it is difficult to evaluate trends that may affect our business. If our assumptions regarding these trends and uncertainties, which we use to plan our business, are incorrect or change in reaction to changes in our markets, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer. Moreover, although we have experienced significant growth historically, we may not continue to grow as quickly in the future.

10


Our future success will depend in large part on our ability to, among other things:


•    continue to reap the benefits from the transition to a subscription-based model;
•    maintain and expand our business, including our customer base and operations, to support our growth, both domestically and internationally;

hire,•    our ability to successfully manage and integrate train and retain skilled talent, including membersany acquisitions of our sales force and software engineers;businesses;

•    develop new products and services and bring products and services in beta to market;

•    renew subscription and maintenance and support agreements with, and sell additional products to, existing customers;

•    maintain high customer satisfaction and ensure quality and timely releases of our products and product enhancements;
•    increase market awareness of our products and enhance our brand; and

•    maintain compliance with applicable governmental regulations and other legal obligations, including those related to intellectual property, international sales and taxation.taxation; and

•    hire, integrate, train and retain skilled talent, including members of our sales force and engineers.

If we fail to address the risks and difficulties that we face, including those associated with the challenges listed above as well as those described elsewhere in this “Risk Factors” section, our business will be adversely affected, and our results of operations will suffer.


If we are unable to attract new customers and expand sales to existing customers, both domestically and internationally, our growth could be slower than we expect, and our business may be harmed.


Our future growth depends in part upon increasing our customer base. Our ability to achieve significant growth in revenues in the futuresuccess will depend, in large part, upon the effectiveness ofon our ability to support new and existing customer growth and maintain customer satisfaction. Due to COVID-19, our sales and marketing efforts, both domesticallyteams have avoided in-person meetings and internationally,are increasingly engaging with customers online and through other communications channels, including virtual meetings. While our abilityrevenues increased for the year ended December 31, 2021 compared to attract new customers.the year ended December 31, 2020, there is no guarantee that in the future
18


our sales and marketing teams will be as successful or effective using these other communications channels as they try to build relationships. If we failcannot provide the tools and training to attract new customersour teams to efficiently do their jobs and maintain and expand thosesatisfy customer relationships, our revenues will grow more slowly than expected, and our business willdemands, we may not be harmed.

able to achieve anticipated revenue growth as quickly as expected.


Our future growth also depends upon expanding sales of our products to existing customers and their organizations.organizations and receiving subscription and maintenance renewals. If our customers do not purchase additional licenses or capabilities, our revenues may grow more slowly than expected, may not grow at all or may decline. There can be no assurance that our efforts would result in increased sales to existing customers ("upsells") and additional revenues. If our efforts to upsell to our customers are not successful, our business would suffer.

We may face increased competition


Our future growth also depends in part upon increasing our market.

While there are some companies which offer certain features similarcustomer base, particularly those customers with potentially high customer lifetime values. Our ability to those embeddedachieve significant growth in our solutions, as well as others with whom we compete in certain tactical use cases, we believe that we do not currently compete with a company that offers the same breadth of functionalities that we offer in a single integrated solution. Nevertheless, we do compete against a select group of software vendors, such as Veritas Technologies LLC and Quest Software, that provide standalone solutions, similar to those found in our comprehensive software suite,revenues in the specific marketsfuture will depend, in which we operate. We also face direct competition with respect to certainlarge part, upon the effectiveness of our products, specifically DatAnywhere, Data Transport Engine, DatAnswerssales and DatAdvantage for Directory Services. As we continue to augment our functionality with insider threat detectionmarketing efforts, both domestically and user behavior analyticsinternationally, and as we expand our classification capabilities to better serve compliance needs with new regulations, like GDPR, we may face increased perceived and real competition from other security and classification technologies. As we expand our coverage and penetration in the cloud, we may face increased perceived and real competition from other cloud-focused technologies. In the future, as customer requirements evolve and new technologies are introduced, we may experience increased competition if established or emerging companies develop solutions that address the enterprise data market. Furthermore, because we operate in a relatively new and evolving area, we anticipate that competition will increase based on customer demand for these types of products.

In particular, if a more established company were to target our market, we may face significant competition. They may have competitive advantages, such as greater name recognition, larger sales, marketing, research and acquisition resources, access to larger customer bases and channel partners, a longer operating history and lower labor and development costs, which may enable them to respond more quickly to new or emerging technologies and changes in customer requirements or devote greater resources to the development, promotion and sale of their products than we do. Increased competition could result in us failing to attract customers or maintain licenses at the same rate. It could also lead to price cuts, alternative pricing structures or the introduction of products available for free or a nominal price, reduced gross margins, longer sales cycles and loss of market share.

In addition, our current or prospective channel partners may establish cooperative relationships with any future competitors. These relationships may allow future competitors to rapidly gain significant market share. These developments could also limit our ability to obtain revenues from existing andattract new customers.

11

Our ability to compete successfullyattract new customers may be adversely affected by newly enacted laws that may prohibit certain sales and marketing activities, such as recent legislation passed in the State of New York, pursuant to which, due to the declared disaster state of emergency attributed to COVID-19, unsolicited telemarketing sales calls are prohibited. If we fail to attract new customers and maintain and expand those customer relationships, our market will also depend on a number of factors, including easerevenues may be adversely affected, and speed of product deployment and use, the quality and reliability of our customer service and support, total cost of ownership, return on investment and brand recognition. Any failure by us to successfully address current or future competition in any one of these or other areas may reduce the demand for our products and adversely affect our business results of operations and financial condition.

will be harmed.


We have a history of losses, and we may not be profitable in the future.


We have incurred net losses in each year since our inception, including a net loss of $13.7$116.9 million, $17.7$94.0 million and $21.3$78.8 million in each of the years ended December 31, 2017, 20162021, 2020 and 2015,2019, respectively. Due to our continued investment in the growth of our business, in 2021 our operating expenses increased to $429.4 million compared to $326.8 million and $295.0 million in 2020 and 2019, respectively. Because the market for our software is rapidly evolving and has still not yet reached widespread adoption, it is difficult for us to predict our future results of operations. We expect our operating expenses to increase over the next several years as we hire additional personnel, particularly in our sales and marketing and research and development groups, expand and improve the effectiveness of our distribution channels, and continue to develop features and applications for our software.

Prolonged economic uncertainties or downturns could materially adversely affect our business.

Our business depends on our current and prospective customers’ ability and willingness to invest money in information technology services, which in turn is dependent upon their overall economic health. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from financial and credit market fluctuations and terrorist attacks on the United States, Europe, Asia Pacific or elsewhere, could cause a decrease in corporate spending on enterprise software in general.

Continuing uncertainty in the global economy, particularly in EMEA, which accounted for approximately one-third of our revenues in 2017 and where we have experienced inconsistent quarterly growth rates over the last few years, makes it extremely difficult for our customers and us to forecast and plan future business activities accurately. This could cause our customers to reevaluate decisions to purchase our product or to delay their purchasing decisions, which could lengthen our sales cycles.

We have a significant number of customers in the financial services, healthcare, public sector and industrial industries. A substantial downturn in any of these industries, or a reduction in public sector spending, may cause enterprises to react to worsening conditions by reducing their capital expenditures in general or by specifically reducing their spending on information technology. Customers may delay or cancel information technology projects, choose to focus on in-house development efforts or seek to lower their costs by renegotiating maintenance and support agreements. To the extent purchases of licenses for our software are perceived by customers and potential customers to be discretionary, our revenues may be disproportionately affected by delays or reductions in general information technology spending. In addition, the increased pace of consolidation in certain industries may result in reduced overall spending on our software. If the economic conditions of the general economy or industries in which we operate worsen from present levels, our business, results of operations and financial condition could be adversely affected.


If we are unable to maintain successful relationships with our channel partners, our business could be adversely affected.


We rely on channel partners, such as distribution partners and resellers, to sell licenses and support and maintenance agreements for our software.software and to perform some of our professional services. In 2017,2021, our channel partners fulfilled substantially all of our sales, and we expect that sales to channel partners will continue to account for substantially all of our revenues for the foreseeable future. Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our channel partners.


Our agreements with our channel partners are generally non-exclusive, meaning our channel partners may offer customers the products of several different companies. If our channel partners do not effectively market and sell our software, choose to use greater efforts to market and sell their own products or those of others, or fail to meet the needs of our customers, including through the provision of professional services for our software, our ability to grow our business, sell our software and maintain our reputation may be adversely affected. Our contracts with our channel partners generally allow them to terminate their agreements for any reason upon 30 days’ notice. A termination of the agreement has no effect on orders already placed. The loss of a substantial number of our channel partners, our possible inability to replace them, or the failure to recruit additional channel partners could materially and adversely affect our results of operations. If we are unable to maintain our relationships with these channel partners, our business, results of operations, financial condition or cash flows could be adversely affected.


Finally, even if we are successful, our relationships with channel partners may not result in greater customer usage of our products and professional services or increased revenue.

Our long-term growth depends, in part, on being able to continue to expand internationally on a profitable basis, which subjects us to risks associated with conducting international operations.

Historically, we have generated the majority of our revenues from customers in North America. For the year ended December 31, 2021, approximately 72% of our total revenues were derived from sales in North America. Nevertheless, we have operations across the globe, and we plan to continue to expand our international operations as part of our long-term growth strategy. The further expansion of our international operations will subject us to a variety of risks and challenges, including:

•    sales and customer service challenges associated with operating in different countries;
19


•    increased management travel, a lack of travel due to pandemics, infrastructure and legal compliance costs associated with having multiple international operations;
•    difficulties in receiving payments from different geographies, including difficulties associated with currency fluctuations, payment cycles, transfer of funds or collecting accounts receivable, especially in emerging markets;
•    variations in economic or political conditions between each country or region;
•    economic uncertainty around the world and adverse effects arising from economic interdependencies across countries and regions;
•    the uncertainty around the effects of global pandemics, including the COVID-19 outbreak, on our business and results of operations;
•    uncertainty around a potential reverse or renegotiation of international trade agreements and partnerships;
•    compliance with foreign laws and regulations and the risks and costs of non-compliance with such laws and regulations;
•    ability to hire, retain and train local employees and the ability to comply with foreign labor laws and local labor requirements, such as representations by an internal labor committee in France which is affiliated with an external trade union and the applicability of collective bargaining arrangements at the national level in certain European countries;
•    compliance with laws and regulations for foreign operations, including the U.S. Foreign Corrupt Practices Act of 1977, as amended (the "FCPA"), the U.K. Bribery Act of 2010 (the "UK Bribery Act"), import and export control laws, tariffs, trade barriers, economic sanctions and other regulatory or contractual limitations on our ability to sell our software in certain foreign markets, and the risks and costs of non-compliance;
•    heightened risks of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of financial statements and irregularities in financial statements;
•    reduced protection for intellectual property rights in certain countries and practical difficulties and costs of enforcing rights abroad; and
•    compliance with the laws of numerous foreign taxing jurisdictions and overlapping of different tax regimes and digital tax imposed on our operations in foreign taxing jurisdictions.

Any of these risks could adversely affect our international operations, reduce our revenues from outside the United States or increase our operating costs, adversely affecting our business, results of operations and financial condition and growth prospects. There can be no assurance that all of our employees, independent contractors and channel partners will comply with the formal policies we have and will implement, or applicable laws and regulations. Violations of laws or key control policies by our employees, independent contractors and channel partners could result in delays in revenue recognition, financial reporting misstatements, fines, penalties or the prohibition of the importation or exportation of our software and services and could have a material adverse effect on our business and results of operations.

We are exposed to collection and credit risks, which could impact our operating results.

Our accounts receivable and contract assets are subject to collection and credit risks. These agreements may include purchase commitments for multiple years of subscription-based software licenses and maintenance services, which may be invoiced over multiple reporting periods increasing these risks. For example, our operating results may be impacted by significant bankruptcies among customers and resellers, which could negatively impact our revenues and cash flows. Although we have processes in place that are designed to monitor and mitigate these risks, we cannot guarantee these programs will be effective. If we are unable to adequately control these risks, our business, operating results and financial condition could be harmed. Furthermore, as a result of the COVID-19 pandemic, existing customers may attempt to renegotiate contracts and obtain material concessions or fail to make payments on existing contracts, which may materially and negatively impact our operating results and financial condition.

If currency exchange rates fluctuate substantially in the future, our results of operations, which are reported in U.S. dollars, could be adversely affected.

Our functional and reporting currency is the U.S. dollar, and we generate the majority of our revenues and incur the majority of our expenses in U.S. dollars. Revenues and expenses are also incurred in other currencies, primarily Euros, Pounds Sterling, Canadian dollars, Australian dollars and the Israeli New Shekel ("NIS"). Accordingly, changes in exchange rates may have a material adverse effect on our business, results of operations and financial condition. The exchange rates between the U.S. dollar and foreign currencies have fluctuated substantially in recent years and may continue to fluctuate substantially in the future. Furthermore, a strengthening of the U.S. dollar could increase the cost in local currency of our software and our subscription licenses and maintenance renewals to customers outside the United States, which could adversely affect our
20


business, results of operations, financial condition and cash flows. Volatility in exchange rates may continue in the short-term after the United Kingdom's exit from the EU.

We incur expenses for employee compensation and other operating expenses at our non-U.S. locations in local currencies. The weakening of the U.S. dollar against such currencies would cause the U.S. dollar equivalent of such expenses to increase which could have a negative impact on our reported results of operations and our ability to attract employees in such non-U.S. locations due to the actual increase in the compensation to be paid to such employees. We use forward foreign exchange contracts to hedge or mitigate the effect of changes in foreign exchange rates on our operating expenses denominated in certain foreign currencies. However, this strategy might not eliminate our exposure to foreign exchange rate fluctuations and involves costs and risks of its own, such as cash expenditures, ongoing management time and expertise, external costs to implement the strategy and potential accounting implications. Additionally, our hedging activities may contribute to increased losses as a result of volatility in foreign currency markets and the difference between the interest rates of the currencies being hedged.

Our business is highly dependent upon our brand recognition and reputation, and the failure to maintain or enhance our brand recognition or reputation may adversely affect our business.

We believe that enhancing the “Varonis” brand identity and maintaining our reputation in the IT industry is critical to our relationships with our customers and to our ability to attract new customers. Our brand recognition and reputation are dependent upon:

•    our ability to continue to offer high quality, innovative and error- and bug-free products;
•    our ability to maintain customer satisfaction with our products;
•    our ability to be responsive to customer concerns and provide high quality customer support, training and professional services;
•    our marketing efforts;
•    any misuse or perceived misuse of our products;
•    positive or negative publicity;
•    our ability to prevent or quickly react to any cyberattack on our IT systems or security breach of or related to our software;
•    interruptions, delays or attacks on our website; and
•    litigation or regulatory-related developments.

We may not be able to successfully promote our brand or maintain our reputation. In addition, independent industry analysts often provide reviews of our products, as well as other products available in the market, and perception of our product in the marketplace may be significantly influenced by these reviews. If these reviews are negative, or less positive than reviews about other products available in the market, our brand may be adversely affected. Furthermore, negative publicity relating to events or activities attributed to us, our employees, our channel partners or others associated with any of these parties, may tarnish our reputation and reduce the value of our brand. If we do not successfully enhance our brand and maintain our reputation, our business may not grow, we may have reduced pricing power relative to competitors with stronger brands, and we could lose customers or renewals, all of which would adversely affect our business, operations and financial results. Moreover, damage to our reputation and loss of brand equity may reduce demand for our products and have an adverse effect on our business, results of operations and financial condition. Any attempts to rebuild our reputation and restore the value of our brand may be costly and time consuming, and such efforts may not ultimately be successful.

Moreover, it may be difficult to enhance our brand and maintain our reputation in connection with sales to channel partners. Promoting our brand requires us to make significant expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive, as we expand into new markets and geographies and as more sales are generated to our channel partners. To the extent that these activities yield increased revenues, these revenues may not offset the increased expenses we incur.

Our success depends in part on maintaining and increasing our sales to customers in the public sector.

We derive a portion of our revenues from contracts with federal, state, local and foreign governments and government-owned or -controlled entities (such as public health care bodies, educational institutions and utilities), which we refer to as the public sector herein. We believe that the success and growth of our business will continue to depend on our successful procurement of public sector contracts. Selling to public sector entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that our efforts will produce any sales. Government demand and payment for our products and services may be impacted by public sector budgetary cycles, or lack of, and funding authorizations, including in connection with an extended government shutdown, with funding reductions or delays adversely
21


affecting public sector demand for our products and services. Factors that could impede our ability to maintain or increase the amount of revenues derived from public sector contracts include:

•    changes in public sector fiscal or contracting policies;
•    decreases or elimination of available public sector funding;
•    changes in public sector programs or applicable requirements;
•    the adoption of new laws or regulations or changes to existing laws or regulations;
•    potential delays or changes in the public sector appropriations or other funding authorization processes;
•    the requirement of contractual terms that are unfavorable to us, such as most-favored-nation pricing provisions; and
•    delays in the payment of our invoices by public sector payment offices.

Furthermore, we must comply with laws and regulations relating to public sector contracting, which affect how we and our channel partners do business in both the United States and abroad. These laws and regulations may impose added costs on our business, and failure to comply with these or other applicable regulations and requirements, including non-compliance in the past, could lead to claims for damages from our channel partners, penalties, termination of contracts, and temporary suspension or permanent debarment from public sector contracting. Moreover, governments routinely investigate and audit government contractors’ administrative processes, and any unfavorable audit could result in the government refusing to continue buying our products, which would adversely impact our revenue and results of operations, or institute fines or civil or criminal liability if the audit uncovers improper or illegal activities.

The occurrence of any of the foregoing could cause public sector customers to delay or refrain from purchasing licenses of our software in the future or otherwise have an adverse effect on our business, operations and financial results.

We are subject to governmental export and import controls that could subject us to liability or impair our ability to compete in international markets.

We incorporate encryption technology into certain of our products and these products are subject to U.S. export control. We are also subject to Israeli export controls on encryption technology since our product development initiatives are primarily conducted by our wholly-owned Israeli subsidiary. We have obtained the required licenses to export our products outside of the United States. In addition, the current encryption means used in our products are listed in the “free means encryption items” published by the Israeli Ministry of Defense, which means we are exempt from obtaining an encryption control license. If the applicable U.S. or Israeli legal requirements regarding the export of encryption technology were to change or if we change the encryption means in our products, we may need to apply for new licenses in the United States and may no longer be able to rely on our licensing exception in Israel. There can be no assurance that we will be able to obtain the required licenses under these circumstances. Furthermore, various other countries regulate the import of certain encryption technology, including import permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our customers’ ability to implement our products in those countries.

We are also subject to U.S. and Israeli export control and economic sanctions laws, which prohibit the shipment of certain products to embargoed or sanctioned countries, governments and persons. Our products could be exported to these sanctioned targets by our channel partners despite the contractual undertakings they have given us and any such export could have negative consequences, including government investigations, penalties and reputational harm. Any change in export or import regulations, economic sanctions or related legislation, shift in the enforcement or scope of existing regulations, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Moreover, any new export or import restrictions, new legislation or shifting approaches in the enforcement or scope of existing regulations, or in the countries, persons or technologies targeted by such regulations, could result in decreased use of our products. Any decreased use of our products or limitation on our ability to export or sell our products would likely adversely affect our business, financial condition and results of operations.

Our business in countries with a history of corruption and transactions with foreign governments increase the risks associated with our international activities.

As we operate and sell internationally, we are subject to the FCPA, the UK Bribery Act and other laws that prohibit improper payments or offers of payments to foreign governments and their officials and political parties for the purpose of obtaining or retaining business. We have operations, deal with and make sales to governmental customers in countries known to experience corruption, particularly certain emerging countries in Eastern Europe, South and Central America, East Asia, Africa and the Middle East. Our activities in these countries create the risk of unauthorized payments or offers of payments by one of our employees, consultants, channel partners or sales agents that could be in violation of various anti-corruption laws, even though
22


these parties may not be under our control. While we have implemented safeguards to prevent these practices by our employees, consultants, channel partners and sales agents, our existing safeguards and any future improvements may prove to be less than effective, and our employees, consultants, channel partners or sales agents may engage in conduct for which we might be held responsible. Violations of the FCPA or other anti-corruption laws may result in severe criminal or civil sanctions, including suspension or debarment from government contracting, and we may be subject to other liabilities, which could negatively affect our business, operating results and financial condition.

Acquisitions could disrupt our business and adversely affect our results of operations, financial condition and cash flows.

As we continue to pursue business opportunities, we may make acquisitions that could be material to our business, results of operations, financial condition and cash flows. Acquisitions involve many risks, including the following:

•    an acquisition may negatively affect our results of operations, financial condition or cash flows because it may require us to incur charges or assume substantial debt or other liabilities, may cause adverse tax consequences or unfavorable accounting treatment, including potential write-downs of deferred revenues, may expose us to claims and disputes by third parties, including intellectual property claims and disputes, or may not generate sufficient financial return to offset additional costs and expenses related to the acquisition;
•    we may encounter difficulties or unforeseen expenditures in integrating the business, technologies, products, personnel or operations of any company that we acquire, particularly if key personnel of the acquired company decide not to work for us;
•    an acquisition may disrupt our ongoing business, divert resources, increase our expenses and distract our management;
•    an acquisition may result in a delay or reduction of customer purchases for both us and the company we acquired due to customer uncertainty about continuity and effectiveness of service from either company;
•    we may encounter difficulties in, or may be unable to, successfully sell any acquired products;
•    an acquisition may involve the entry into geographic or business markets in which we have little or no prior experience or where competitors have stronger market positions;
•    challenges inherent in effectively managing an increased number of employees in diverse locations;
•    the potential strain on our financial and managerial controls and reporting systems and procedures;
•    potential known and unknown liabilities or deficiencies associated with an acquired company that were not identified in advance;
•    our use of cash to pay for acquisitions would limit other potential uses for our cash and affect our liquidity;
•    if we incur debt to fund such acquisitions, such debt may subject us to material restrictions on our ability to conduct our business as well as financial maintenance covenants;
•    the risk of impairment charges related to potential write-downs of acquired assets or goodwill in future acquisitions;
•    to the extent that we issue a significant amount of equity or convertible debt securities in connection with future acquisitions, existing stockholders may be diluted and earnings per share may decrease; and
•    managing the varying intellectual property protection strategies and other activities of an acquired company.

We may not succeed in addressing these or other risks or any other problems encountered in connection with the integration of any acquired business. Our ability as an organization to successfully acquire and integrate technologies or businesses is unproven. The inability to integrate successfully the business, technologies, products, personnel or operations of any acquired business, or any significant delay in achieving integration, could have a material adverse effect on our business, results of operations, financial condition and cash flows.

Risks Related to Human Capital

A failure to maintain sales and marketing personnel productivity or hire and integrate additional sales and marketing personnel could adversely affect our results of operations and growth prospects.

Our business requires intensive sales and marketing activities. Our sales and marketing personnel are essential to attracting new customers and expanding sales to existing customers, both of which are key to our future growth. We face a number of challenges in successfully expanding our sales force. Our transition to a subscription-based model, and the additional demands involved in selling multiple products as well as new product offerings, has increased the complexity and to some extent imposed new challenges in finding, hiring and retaining qualified sales force members. We must locate and hire a significant number of qualified individuals, and competition for such individuals is intense. In addition, as we expand into new markets with which we have less familiarity and develop existing territories, we will need to recruit individuals who have skills particular to a certain geography or territory, and it may be difficult to find candidates with those qualifications. We may be unable to achieve our hiring or integration goals due to a number of factors, including, but not limited to, the challenge in remotely recruiting employees and adequately training them due to COVID-19, the number of individuals we hire, challenges
23


in finding individuals with the correct background due to increased competition for such hires, increased attrition rates among new hires and existing personnel as well as the necessary experience to sell our Data Security Platform rather than individual software products. Furthermore, based on our past experience in mature territories, it can take up to 12 months before a new sales force member is trained and operating at a level that meets our expectations, and during the COVID-19 pandemic such training may take even longer. We invest significant time and resources in training new members of our sales force, and we may be unable to achieve our target performance levels with new sales personnel as rapidly as we have done in the past, or at all, due to larger numbers of hires or lack of experience training sales personnel to operate in new jurisdictions or because of the remote hiring and training process. Our failure to hire a sufficient number of qualified individuals, to integrate new sales force members within the time periods we have achieved historically or to keep our attrition rates at levels comparable to others in our industry may materially impact our projected growth rate.

Failure to retain, attract and recruit highly qualified personnel could adversely affect our business, operating results, financial condition and growth prospects.

Our future success and growth depend, in part, on our ability to continue to recruit and retain highly skilled personnel and to preserve the key aspects of our corporate culture. Because our future success is dependent on our ability to continue to enhance and introduce new products, we are particularly dependent on our ability to hire and retain engineers. Any of our employees may terminate their employment at any time, and we face intense competition for highly skilled employees. Competition for qualified employees, particularly in Israel, where we have a substantial presence and need for qualified engineers, from numerous other companies, including other software and technology companies, many of whom have greater financial and other resources than we do, is intense. Moreover, to the extent we hire personnel from other companies, we may be subject to allegations that they have been improperly solicited or may have divulged proprietary or other confidential information to us. In addition, during the COVID-19 pandemic, which is characterized as an unstable period, to some extent it may be more difficult to timely attract and train new employees. If we are unable to timely attract, retain or train qualified employees, particularly our engineers, salespeople and key managers, our ability to innovate, introduce new products and compete would be adversely impacted, and our financial condition and results of operations may suffer. Lastly, equity grants are a critical component of our current compensation programs. If we reduce, modify or eliminate our equity compensation programs or if there is a decline in our stock price, the result of which the value of our equity compensation shall be lower, we may have difficulty attracting and retaining employees.

We are dependent on the continued services and performance of our co-founder, Chief Executive Officer and President, the loss of whom could adversely affect our business.

Much of our future performance depends on the continued services and continuing contributions of our co-founder, Chief Executive Officer and President, Yakov Faitelson, to successfully manage our company, to execute on our business plan and to identify and pursue new opportunities and product innovations. The loss of Mr. Faitelson's services could significantly delay or prevent the achievement of our development and strategic objectives and adversely affect our business.

Risks Related to our Technology, Products, Services and Intellectual Property

Our failure to continually enhance and improve our technology could adversely affect sales of our products.

The market is characterized by the exponential growth in enterprise data, rapid technological advances, changes in customer requirements, including customer requirements driven by changes to legal, regulatory and self-regulatory compliance mandates, frequent new product introductions and enhancements and evolving industry standards in computer hardware and software technology. As a result, we must continually change and improve our products in response to changes in operating systems, application software, computer and communications hardware, networking software, data center architectures, programming tools, computer language technology and various regulations. Moreover, the technology in our products is especially complex because it needs to effectively identify and respond to a user’s data retention, security and governance needs, while minimizing the impact on database and file system performance. Our products must also successfully interoperate with products from other vendors.

While we extend our technological capabilities though innovation and strategic transactions, we cannot guarantee that we will be able to anticipate future market needs and opportunities or be able to extend our technological expertise and develop new products or expand the functionality of our current products in a timely manner or at all. Even if we are able to anticipate, develop and introduce new products and expand the functionality of our current products, there can be no assurance that enhancements or new products will achieve widespread market acceptance.

Our product enhancements or new products could fail to attain sufficient market acceptance for many reasons, including:
24



•    failure to accurately predict market demand in terms of product functionality and to supply products that meet this demand in a timely fashion;
•    inability to interoperate effectively with the database technologies and file systems of prospective customers;
•    defects, errors or failures;
•    negative publicity or customer complaints about performance or effectiveness; and
•    poor business conditions, causing customers to delay IT purchases.

If we fail to anticipate market requirements or stay abreast of technological changes, we may be unable to successfully introduce new products, expand the functionality of our current products or convince our customers and potential customers of the value of our solutions in light of new technologies. Accordingly, our business, results of operations and financial condition could be materially and adversely affected.

If our technical support, customer success or professional services are not satisfactory to our customers, they may not renew their subscription licenses or maintenance and support agreements or not buy additional products in the future, products, which could adversely affect our future results of operations.


Our business relies on our customers’ satisfaction with the technical support and professional services we provide to support our products. While substantially all of our software is sold under perpetual license agreements, all of ourOur customers have no obligation to renew their subscription licenses or maintenance and support agreements are sold on a term basis.with us after the initial terms have expired. Our customers typically purchase one year of software maintenance and support as part of their initial purchase of our products, withwho had originally purchased perpetual licenses have an option to renew their maintenance agreements. In order forFor us to maintain and improve our results of operations, it is important that our existing customers renew their subscription licenses and maintenance and support agreements, and term licenses, if applicable, when the existing contract term expires. For example, our maintenance renewal rate for each of the years ended December 31, 2015, 20162021, 2020 and 2017 was2019 continued to be over 90%.

12
Customer satisfaction will become even more important as almost all of our licensing has shifted to subscription license agreements.


If we fail to provide technical support services that are responsive, satisfy our customers’ expectations and resolve issues that they encounter with our products and services, then they may elect not to purchase or renew subscription licenses or annual maintenance and support contracts and they may choose not to purchase additional products and services from us. Accordingly, our failure to provide satisfactory technical support or professional services could lead our customers not to renew their agreements with us or renew on terms less favorable to us, and therefore have a material and adverse effect on our business and results of operations.


Because we derive substantially all of our revenues and cash flows from sales of licenses from a single platform of products, failure of the products in the platform to satisfy customers or to achieve increased market acceptance would adversely affect our business.


In 2017,2021, we generated substantially all of our revenues from sales of licenses from four of our current product families, DatAdvantage, DataPrivilege,DatAlert, Data Classification Engine, DataPrivilege and Data Transport Engine. We expect to continue to derive athe majority of our revenues from license sales relating to this platformthese products in the future. As such, market acceptance of this platform ofthese products is critical to our continued success. Demand for licenses for our platform of products is affected by a number of factors, some of which are outside of our control, including continued market acceptance of our software by referenceable accounts for existing and new use cases, technological change and growth or contraction in our market. We expect the proliferation of enterprise data to lead to an increase in the data analysis demands, and data security and retention concerns, of our customers, and our software, including the software underlying our Data Security Platform, may not be able to scale and perform to meet those demands. If we are unable to continue to meet customer demands or to achieve more widespread market acceptance of our software, our business, operations, financial results and growth prospects will be materially and adversely affected.

Breaches


Interruptions or performance problems, including associated with our website or support website or any caused by cyberattacks, may adversely affect our business.

Our continued growth depends in part on the ability of our security, cyber-attacksexisting and potential customers to quickly access our website and support website. Access to our support website is also imperative to our daily operations and interaction with customers, as it allows customers to download our software, fixes and patches, as well as open and respond to support tickets and register license keys for evaluation or production purposes. We have experienced, and may in the future experience, website disruptions, outages and other cyber-risksperformance problems due to a variety of factors, including technical failures, cyberattacks, natural disasters, infrastructure changes, human or software errors, capacity constraints due to an overwhelming number of users accessing our website simultaneously and denial of service or fraud. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. System failures or outages, including any
25


potential disruptions due to significantly increased global demand on certain cloud-based systems during the COVID-19 pandemic, could expose uscompromise our ability to significant liability and causeperform our day-to-day operations in a timely manner, which could negatively impact our business or delay our financial reporting. It may become increasingly difficult to maintain and reputation to suffer.

Our operations involve transmission and processingimprove the performance of our customers' confidential, proprietarywebsites, especially during peak usage times and sensitive information.as our software becomes more complex and our user traffic increases. If our websites are unavailable or if our users are unable to download our software, patches or fixes within a reasonable amount of time or at all, we may suffer reputational harm and our business would be negatively affected.


If our software is perceived as not being secure, customers may reduce the use of or stop using our software, and we may incur significant liabilities.

Our software involves the transmission of data between data stores, and between data stores and desktop and mobile computers, and may in the future involve the storage of data. We have a legal and contractual obligationsobligation to protect the confidentiality and appropriate use of customer data. DespiteAny security breaches with respect to such data could result in the loss of this information, litigation, indemnity obligations and other liabilities. The security of our securityproducts and accompanied services is important in our customers’ decisions to purchase or use our products or services. Security threats are a significant challenge to companies like us whose business is providing technology products and services to others. While we have taken steps to protect the confidential information that we have access to, including confidential information we may obtain through our customer support services or customer usage of our products, we have no direct control over the substance of the content. Security measures our information technology and infrastructure maymight be vulnerable to attacksbreached as a result of third partythird-party action, employee error, malfeasance or misconduct. Security risks, including, but not limited to, unauthorized use or disclosure of customer data, theft of proprietary information, loss or corruption of customer data and computer hacking attacks or other cyber-attacks, could expose us to substantial litigation expenses and damages, indemnityotherwise. We also incorporate open source software and other contractual obligations, government finesthird-party software into our products. There may be vulnerabilities in open source software and penalties, mitigation expensesthird-party software that may make our products likely to be harmed by cyberattacks. Moreover, our products operate in conjunction with and other liabilities. We are continuously working to improvedependent on products and components across a broad ecosystem of third parties. If there is a security vulnerability in one of these components, and if there is a security exploit targeting it, such security vulnerability may adversely impact our information technology systems, together with creating security boundaries around our criticalproduct vulnerability and sensitive assets. We provide advance security awareness trainingwe could face increased costs, liability claims, reduced revenue, or harm to our employees and contractors that focuses on various aspects of the cyber security world. All of these steps are taken in order to mitigate the risk of attack and to ensure our readiness to responsibly handle any security violationreputation or attack. However, becausecompetitive position. Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognizedidentified until successfullythey are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. If an actual

There can be no assurance that the limitations of liability in our contracts would be enforceable or perceived breach of our security occurs, the market perceptionadequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. While we maintain insurance coverage for some of the effectivenessabove events, the potential liabilities associated with these security breach events could exceed the insurance coverage we maintain.

Any or all of these issues could tarnish our security measures and our products could be harmed, we could lose potential sales and existing customers,reputation, negatively impact our ability to operateattract new customers or sell additional products to our existing customers, cause existing customers to elect not to renew their maintenance and support agreements or subject us to third-party lawsuits, regulatory fines or other action or liability, thereby adversely affecting our results of operations.

Our use of open source software could negatively affect our ability to sell our software and subject us to possible litigation.

We use open source software and expect to continue to use open source software in the future. Some open source software licenses require users who distribute open source software as part of their own software product to publicly disclose all or part of the source code to such software product or to make available any derivative works of the open source code on unfavorable terms or at no cost. We may face ownership claims of third parties over, or seeking to enforce the license terms applicable to, such open source software, including by demanding the release of the open source software, derivative works or our proprietary source code that was developed using such software. These claims could also result in litigation, require us to purchase a costly license or require us to devote additional research and development resources to change our software, any of which would have a negative effect on our business and results of operations. In addition, if the license terms for the open source code change, we may be forced to re-engineer our software or incur additional costs. Finally, while we implement policies and procedures, we cannot provide assurance that we have incorporated open source software into our own software in a manner that conforms with our current policies and procedures and we cannot assure that all open source software is reviewed prior to use in our solution, that our programmers have not incorporated open source software into our solution, or that they will not do so in the future.

In addition, our solution may incorporate third-party software under commercial licenses. We cannot be certain whether such third-party software incorporates open source software without our knowledge. In the past, companies that incorporate open source software into their products have faced claims alleging noncompliance with open source license terms or infringement or misappropriation of proprietary software. Therefore, we could be impaired,subject to suits by parties claiming noncompliance with open source licensing terms or infringement or misappropriation of proprietary software. Because few courts have interpreted open source licenses, the manner in which these licenses may be interpreted and enforced is subject to some uncertainty. There is a
26


risk that open source software licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to market or provide our solution. As a result of using open source software subject to such licenses, we could be required to release proprietary source code, pay damages, re-engineer our solution, limit or discontinue sales or take other remedial action, any of which could adversely affect our business.

False detection of security breaches, false identification of malicious sources or misidentification of sensitive or regulated information could adversely affect our business.

Our cybersecurity products may incur significant liabilities.

falsely detect threats that do not actually exist. For example, our DatAlert product may enrich metadata collected by our products with information from external sources and third-party data providers. If the information from these data providers is inaccurate, the potential for false positives increases. These false positives, while typical in the industry, may affect the perceived reliability of our products and solutions and may therefore adversely impact market acceptance of our products. As definitions and instantiations of personal identifiers and other sensitive content change, automated classification technologies may falsely identify or fail to identify data as sensitive. If our products and solutions fail to detect exposures or restrict access to important systems, files or applications based on falsely identifying legitimate use as an attack or otherwise unauthorized, then our customers’ businesses could be adversely affected. Any such false identification of use and subsequent restriction could result in negative publicity, loss of customers and sales, increased costs to remedy any problem and costly litigation.


Failure to protect our proprietary technology and intellectual property rights could substantially harm our business.


The success of our business and competitive position depends on our ability to obtain, protect and enforce our trade secrets, trademarks, copyrights, patents and other intellectual property rights. We attempt to protect our intellectual property under patent, trademark, copyrights and trade secret laws, and through a combination of confidentiality procedures, contractual provisions and other methods, all of which offer only limited protection.

protection and may not now or in the future provide us with a competitive advantage.


As of January 31, 2018,28, 2022, we had 5279 issued patents in the United States and 3315 pending U.S. patent applications. We also had 1852 patents issued and 6758 applications pending for examination in non-U.S. jurisdictions, and 10no pending PCT patent applications, all of which are counterparts of our U.S. patent applications. We may file additional patent applications in the future. The process of obtaining patent protection is expensive and time-consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner all the way through to the successful issuance of a patent. We may choose not to seek patent protection for certain innovations and may choose not to pursue patent protection in certain jurisdictions. Furthermore, it is possible that our patent applications may not issue as granted patents, that the scope of our issued patents will be insufficient or not have the coverage originally sought, that our issued patents will not provide us with any competitive advantages, and that our patents and other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. In addition, issuance of a patent does not guarantee that we have an absolute right to practice the patented invention. Our policy is to require our employees (and our consultants and service providers that develop intellectual property included in our products) to execute written agreements in which they assign to us their rights in potential inventions and other intellectual property created within the scope of their employment (or, with respect to consultants and service providers, their engagement to develop such intellectual property), but we cannot assure youprovide assurance that we have adequately protected our rights in every such agreement or that we have executed an agreement with every such party. Finally, in order to benefit from patent and other intellectual property protection, we must monitor, detect and pursue infringement claims in certain circumstances in relevant jurisdictions, all of which is costly and time-consuming. As a result, we may not be able to obtain adequate protection or to enforce our issued patents or other intellectual property effectively.

13


In addition to patented technology, we rely on our unpatented proprietary technology and trade secrets. Despite our efforts to protect our proprietary technologies and our intellectual property rights, unauthorized parties, including our employees, consultants, service providers or customers, may attempt to copy aspects of our products or obtain and use our trade secrets or other confidential information. We generally enter into confidentiality agreements with our employees, consultants, service providers, vendors, channel partners and customers, and generally limit access to and distribution of our proprietary information and proprietary technology through certain procedural safeguards. These agreements may not effectively prevent unauthorized use or disclosure of our intellectual property or technology and may not provide an adequate remedy in the event of unauthorized use or disclosure of our intellectual property or technology. We cannot assure youprovide assurance that the steps taken by us will prevent misappropriation of our trade secrets or technology or infringement of our intellectual property. In addition, the laws of some foreign countries where we operate do not protect our proprietary rights to as great an extent as the laws of the United States, and many foreign countries do not enforce these laws as diligently as government agencies and private parties in the United States.


27


Moreover, industries in which we operate, such as data security, cyber security,cybersecurity, compliance, data retention and data governance are characterized by the existence of a large number of relevant patents and frequent claims and related litigation regarding patent and other intellectual property rights. From time to time, third parties have asserted and may assert their patent, copyright, trademark and other intellectual property rights against us, our channel partners or our customers. Successful claims of infringement or misappropriation by a third party could prevent us from distributing certain products, or performing certain services or could require us to pay substantial damages (including, for example, treble damages if we are found to have willfully infringed patents and increased statutory damages if we are found to have willfully infringed copyrights), royalties or other fees. Such claims also could require us to cease making, licensing or using solutions that are alleged to infringe or misappropriate the intellectual property of others or to expend additional development resources to attempt to redesign our products or services or otherwise to develop non-infringing technology. Even if third parties may offer a license to their technology, the terms of any offered license may not be acceptable, and the failure to obtain a license or the costs associated with any license could cause our business, results of operations or financial condition to be materially and adversely affected. In some cases, we indemnify our channel partners and customers against claims that our products infringe the intellectual property of third parties. Defending against claims of infringement or being deemed to be infringing the intellectual property rights of others could impair our ability to innovate, develop, distribute and sell our current and planned products and services. If we are unable to protect our intellectual property rights and ensure that we are not violating the intellectual property rights of others, we may find ourselves at a competitive disadvantage to others who need not incur the additional expense, time and effort required to create the innovative products that have enabled us to be successful to date.

Interruptions


We have registered the “Varonis” name and logo and “DatAdvantage,” “DataPrivilege,” “DatAlert,” “DatAnywhere” and other names in the United States and, as related to some of these names, certain other countries. However, we cannot provide assurance that any future trademark registrations will be issued for pending or performance problems,future applications or that any registered trademarks will be enforceable or provide adequate protection of our proprietary rights.

We also license software from third parties for integration into our solution, including associatedopen source software and other software available on commercially reasonable terms. We cannot provide assurance that such third parties will maintain such software or continue to make it available. We also rely on confidentiality agreements, consulting agreements, work-for-hire agreements and invention assignment agreements with our websiteemployees, consultants and others.

Despite our efforts to protect our proprietary technology and trade secrets, unauthorized parties may attempt to misappropriate, reverse engineer or support websiteotherwise obtain and use them. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights or develop similar technologies and processes. Further, the contractual provisions that we enter into may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property rights and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or intellectual property rights. Moreover, policing unauthorized use of our technologies, trade secrets and intellectual property is difficult, expensive and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the United States and where mechanisms for enforcement of intellectual property rights may be weak. We may be unable to determine the extent of any caused by cyber-attacks,unauthorized use or infringement of our solution, technologies or intellectual property rights.

Risks Related to our Tax Regime

Our tax rate may vary significantly depending on our stock price.

The tax effects of the accounting for stock-based compensation may significantly impact our effective tax rate from period to period. In periods in which our stock price is higher than the grant price of the stock-based compensation vesting in that period, we will recognize excess tax benefits that will decrease our effective tax rate, while in periods in which our stock price is lower than the grant price of the stock-based compensation vesting in that period, our effective tax rate may increase. The amount and value of stock-based compensation issued relative to our earnings in a particular period will also affect the magnitude of the impact of stock-based compensation on our effective tax rate. These tax effects are dependent on our stock price, which we do not control, and a decline in our stock price could significantly increase our effective tax rate and adversely affect our financial results.

Multiple factors may adversely affect our business.

ability to fully utilize our net operating loss carryforwards.


A U.S. corporation's ability to utilize its federal net operating loss (“NOL”) carryforwards is limited under Section 382 of the Internal Revenue Code of 1986, as amended (the “Code”), if the corporation undergoes an ownership change.

28


We have accumulated a $318.3 million federal NOL since inception. Future changes in our stock ownership, including future offerings, as well as changes that may be outside of our control, could result in a subsequent ownership change under Section 382, that would impose an annual limitation on NOLs. In addition, the cash tax benefit from our NOLs is dependent upon our ability to generate sufficient taxable income. Accordingly, we may be unable to earn enough taxable income in order to fully utilize our current NOLs.

Changes in our provision for income taxes or adverse outcomes resulting from examination of our income tax returns could adversely affect our results.

We are subject to income taxation in the United States, Israel and numerous other jurisdictions. Determining our provision for income taxes requires significant management judgment. In addition, our provision for income taxes could be adversely affected by many factors, including, among other things, changes to our operating structure including a review of our intellectual property ("IP") structure, changes in the amounts of earnings in jurisdictions with different statutory tax rates, changes in the valuation of deferred tax assets and liabilities and changes in tax laws. Significant judgment is required to determine the recognition and measurement attributes prescribed in Accounting Standards Codification 740-10-25 (“ASC 740-10-25”). ASC 740-10-25 applies to all income tax positions, including the potential recovery of previously paid taxes, which if settled unfavorably could adversely impact our provision for income taxes. Our continued growthincome in certain countries is subject to reduced tax rates provided we meet certain employment criteria. Failure to meet these commitments could adversely impact our provision for income taxes.

We are also subject to the regular examination of our income tax returns by the U.S. Internal Revenue Services and other tax authorities in various jurisdictions. Tax authorities may disagree with our intercompany charges, cross-jurisdictional transfer pricing, IP structure or other matters and assess additional taxes. While we regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes, there can be no assurance that the outcomes from these regular examinations will not have a material adverse effect on our results of operations and cash flows. Further, we may be audited in various jurisdictions, and such jurisdictions may assess additional taxes against us. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have a material adverse effect on our results of operations or cash flows in the period or periods for which a determination is made.

The adoption of the U.S. tax reform and the enactment of additional legislation changes could materially impact our financial position and results of operations.

On December 22, 2017, the Tax Cuts and Jobs Act (the "TCJA") that significantly reforms the Code was enacted. The TCJA, among other things, includes changes to U.S. federal tax rates, imposes significant additional limitations on the deductibility of certain expenses and restricts the use of net operating loss carryforwards arising after December 31, 2017. Due to the expansion of our international business activities, any changes in the U.S. taxation of such activities may increase our worldwide effective tax rate and adversely affect our financial position and results of operations. Further, foreign governments may enact tax laws in response to the TCJA that could result in further changes to global taxation and materially affect our financial position and results of operations.

We conduct our operations in a number of jurisdictions worldwide and report our taxable income based on our business operations in those jurisdictions. Therefore, our intercompany relationships are subject to transfer pricing regulations administered by taxing authorities in various jurisdictions. While we believe that we are currently in material compliance with our obligations under applicable taxing regimes, the relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions and may seek to impose additional taxes on us, including for past sales. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations.

The Organization for Economic Cooperation and Development (“OECD”) introduced the base erosion and profit shifting project which sets out a plan to address international taxation principles in a globalized, digitized business world (the “BEPS Plan”). During 2018, as part of the BEPS Plan, more than 80 countries chose to implement the Multilateral Convention to Implement Tax Treaty Related Measures to Prevent BEPS (“MLI”). The MLI significantly changes the bilateral tax treaties signed by any country that chose to implement the MLI. In addition, during 2019 the OECD, the EU and individual countries (e.g., France, Austria and Italy) each published an initiative to tax digital transactions executed by a non-resident entity and a local end-user or local end-consumer. Under each initiative, the local payer is obligated to withhold a fixed percentage from the gross proceeds paid to the non-resident entity as a tax on executing a digital transaction in that territory, provided the entity’s sales in that territory exceeds a certain threshold (“Digital Service Tax”). As a result of participating countries adopting the
29


international tax policies set under the BEPS Plan, MLI and Digital Service Tax, changes have been and continue to be made to numerous international tax principles and local tax regimes. Due to the expansion of our international business activities, those modifications may increase our worldwide effective tax rate, create tax and compliance obligations in jurisdictions in which we previously had none and adversely affect our financial position.

Risks Related to the 2025 Notes and Credit Facility

We have incurred substantial indebtedness that may decrease our business flexibility, access to capital, and/or increase our borrowing costs, and we may still incur substantially more debt, which may adversely affect our operations and financial results.

In May 2020 we issued $253.0 million aggregate principal amount of 1.25% convertible senior notes due in 2025 (the "2025 Notes"). As of December 31, 2021, we had $253.0 million outstanding aggregate principal amount of 2025 Notes. In addition, on August 21, 2020 we entered into a credit and security agreement with KeyBank National Association and other parties thereto (the “Credit and Security Agreement") for a three-year secured revolving credit facility of $70.0 million, with a letter of credit sublimit of $15.0 million and an accordion feature under which the Company can increase the credit facility to up to $90.0 million (the “Credit Facility”). Our Credit Facility contains customary restrictive, negative and financial covenants and is secured by a first priority security interest. If we are unable to comply with the restrictive and financial covenants in our Credit Facility, there would be a default under the terms of that Credit and Security Agreement, and this could result in an acceleration of payment of funds that have been borrowed. As of December 31, 2021, we had no outstanding obligations under our Credit Facility. Our indebtedness may limit our ability to borrow additional funds for working capital, capital expenditures, acquisitions or other general business purposes, limit our ability to use our cash flow or obtain additional financing for future working capital, capital expenditures, acquisitions or other general business purposes, require us to use a substantial portion of our cash flow from operations to make debt service payments, limit our flexibility to plan for, or react to, changes in our business and industry, place us at a competitive disadvantage compared to our less leveraged competitors and increase our vulnerability to the impact of adverse economic and industry conditions.

Our debt obligations may adversely affect our ability to raise additional capital and will be a burden on our future cash resources, particularly if we elect to settle these obligations in cash upon conversion or upon maturity or required repurchase.

Our ability to meet our payment obligations under the 2025 Notes and any outstanding indebtedness under our Credit Facility, depends on our future cash flow performance. This, to some extent, is subject to general economic, financial, competitive, legislative and regulatory factors, as well as other factors that may be beyond our control. There can be no assurance that our business will generate positive cash flow from operations, or that additional capital will be available to us, in an amount sufficient to enable us to meet our debt payment obligations and to fund other liquidity needs. If we are unable to generate sufficient cash flow to service our debt obligations, we may need to refinance or restructure our debt, sell assets, reduce or delay capital investments, or seek to raise additional capital. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. As a result, we may be more vulnerable to economic downturns, less able to withstand competitive pressures and less flexible in responding to changing business and economic conditions. In addition, our Credit Facility limits our ability to incur additional indebtedness under certain circumstances. If we are unable to obtain capital on favorable terms or at all, we may have to reduce our operations or forego opportunities, and this may have a material adverse effect on our business, financial condition and results of operations.

We may issue additional shares of our common stock in connection with conversions of the 2025 Notes, and thereby dilute our existing stockholders and potentially adversely affect the market price of our common stock.

In the event that the 2025 Notes are converted and we elect to deliver shares of common stock, the ownership interests of existing stockholders will be diluted, and any sales in the public market of any shares of our common stock issuable upon such conversion could adversely affect the prevailing market price of our common stock. In addition, the anticipated conversion of the 2025 Notes could depress the market price of our common stock.

The fundamental change provisions of the 2025 Notes may delay or prevent an otherwise beneficial takeover attempt of us.

If the Company undergoes a “fundamental change,” subject to certain conditions, holders may require the Company to repurchase for cash all or part of their 2025 Notes at a fundamental change repurchase price equal to 100% of the principal amount of the 2025 Notes to be repurchased, plus accrued and unpaid interest to, but excluding, the fundamental change repurchase date. In addition, if such fundamental change also constitutes a “make-whole fundamental change,” the conversion
30


rate for the 2025 Notes may be increased upon conversion of the 2025 Notes in connection with such “make-whole fundamental change.” Any increase in the conversion rate will be determined based on the date on which the “make-whole fundamental change” occurs or becomes effective and the price paid (or deemed paid) per share of our common stock in such transaction. Any such increase will be dilutive to our existing stockholders. Our obligation to repurchase the 2025 Notes or increase the conversion rate upon the occurrence of a make-whole fundamental change may, in certain circumstances, delay or prevent a takeover of us that might otherwise be beneficial to our stockholders.

The accounting method for convertible debt securities that may be settled in cash, such as the 2025 Notes, could have a material effect on our reported financial results.

Under Accounting Standards Codification 470-20, “Debt with Conversion and Other Options” (ASC 470-20), an entity must separately account for the liability and equity components of the convertible debt instruments (such as the 2025 Notes) that may be settled entirely or partially in cash upon conversion in a manner that reflects the issuer’s economic interest cost. The effect of ASC 470-20 on the accounting for the 2025 Notes is that the equity component is required to be included in the additional paid-in capital section of stockholders’ equity on our consolidated balance sheet at the issuance date and the value of the equity component is treated as debt discount for purposes of accounting for the debt component of the 2025 Notes. As a result, we are required to record non-cash interest expense through the amortization of the excess of the face amount over the carrying amount of the expected life of the 2025 Notes. We also report larger net losses (or lower net income) in our financial results because ASC 470-20 requires interest to include both the amortization of the debt discount and the instrument’s cash coupon interest rate, which could adversely affect our reported or future financial results, the trading price of our common stock and the trading price of the 2025 Notes.

In addition, under certain circumstances, convertible debt instruments (such as the 2025 Notes) that may be settled entirely or partly in cash may be accounted for utilizing the treasury stock method, the effect of which is that the shares issuable upon conversion of such 2025 Notes are not included in the calculation of diluted earnings per share except to the extent that the conversion value of such 2025 Notes exceeds their principal amount. Under the treasury stock method, for diluted earnings per share purposes, the transaction is accounted for as if the number of shares of common stock that would be necessary to settle such excess, if we elected to settle such excess in shares, are included in the denominator for purposes of calculating diluted earnings per share.

In August 2020, the FASB issued ASU 2020-06, ASC Subtopic 470-20 “Debt—Debt with Conversion and Other Options” and ASC subtopic 815-40 “Hedging—Contracts in Entity’s Own Equity” that changes the accounting for the convertible debt instruments described above. Under the new standard, an entity may no longer separately account for the liability and equity components of convertible debt instruments. Additionally, the treasury stock method for calculating earnings per share will no longer be allowed for convertible debt instruments whose principal amount may be settled using shares. Rather, the "if-converted" method may be required. Application of the “if converted” method may reduce our reported diluted earnings per share. The standard is effective for fiscal years beginning after December 15, 2021, including interim periods within those fiscal years and early adoption is permitted. We cannot be sure whether other changes may be made to the accounting standards related to the 2025 Notes, or otherwise, that could have an adverse impact on our financial statements.

The Capped Call Transactions may affect the value of the 2025 Notes and our common stock.

In connection with the issuance of the 2025 Notes, we entered into Capped Call Transactions with certain financial institutions. The Capped Call Transactions are expected generally to reduce or offset the potential dilution upon conversion of the 2025 Notes and/or offset any cash payments we are required to make in excess of the principal amount of converted 2025 Notes, as the case may be, with such reduction and/or offset subject to the Cap Price, subject to certain adjustments under the terms of the Capped Call Transactions.

From time to time, certain financial institutions (with which we entered into the Capped Call Transactions) or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our common stock and/or purchasing or selling our common stock or other securities of ours in secondary market transactions prior to the maturity of the 2025 Notes. This activity could also cause or avoid an increase or a decrease in the market price of our common stock.

The potential effect, if any, of these transactions and activities on the price of our common stock or 2025 Notes will depend in part on market conditions and cannot be ascertained at this time. Any of these activities could adversely affect the abilityvalue of our existingcommon stock.

31


As of December 31, 2021, our stock price was higher than the Cap Price under the Capped Call Transactions, hence, as of December 31, 2021, and potential customersas long as our common stock price shall be higher than $47.24, the incremental amount by which the stock price exceeds the Cap Price is not protected under the Capped Call Transactions.

We are subject to quickly access our website and support website. Accesscounterparty risk with respect to the Capped Call Transactions.

All or some of the financial institutions (which are counterparties to the capped call transactions) might default under the Capped Call Transactions. Our exposure to the credit risk of the counterparties will not be secured by any collateral. Past global economic conditions have resulted in the actual or perceived failure or financial difficulties of many financial institutions. If an option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our support website is also imperativeexposure at the time under the capped call transactions with such option counterparty. Our exposure will depend on many factors but, generally, an increase in our exposure will be correlated to an increase in the market price and in the volatility of our common stock. In addition, upon a default by an option counterparty, we may suffer adverse tax consequences and more dilution than we currently anticipate with respect to our dailycommon stock. We can provide no assurance as to the financial stability or viability of the option counterparties.

Risks Related to our International Operations

We face risks associated with operating in international markets that may limit our ability to develop and sell our products, which could result in a decrease of our revenues.

We operate on a global basis and political, economic and security conditions in countries in which we operate may limit our ability to develop and sell our products. Specifically, we have operations in Ukraine, which is currently experiencing tensions with Russia. Political instability and interaction with customers, as it allows customers to downloadconflict in Ukraine, and any other areas in the world where we have operations, may affect our software, fixesbusiness and patches,operations in those regions.

Our principal research and development facility, which also houses a portion of our support and general and administrative teams, is located in Israel. Since the establishment of the State of Israel in 1948, a number of armed conflicts have taken place between Israel and its neighboring countries, as well as openincidents of terror activities and respondother hostilities, and a number of state and non-state actors have publicly committed to support ticketsits destruction. Political, economic and register license keys for evaluationsecurity conditions in Israel could directly affect our operations. We could be adversely affected by hostilities involving Israel, including acts of terrorism or production purposes. Weany other hostilities involving or threatening Israel, the interruption or curtailment of trade between Israel and its trading partners, a significant increase in inflation or a significant downturn in the economic or financial condition of Israel. Any on-going or future armed conflicts, terrorist activities, tension along the Israeli borders or with other countries in the region, including Iran, or political instability in the region could disrupt international trading activities in Israel and may materially and negatively affect our business and could harm our results of operations.

Certain countries, as well as certain companies and organizations, continue to participate in a boycott of Israeli companies, companies with large Israeli operations and others doing business with Israel and Israeli companies. The boycott, restrictive laws, policies or practices directed towards Israel, Israeli businesses or Israeli citizens could, individually or in the aggregate, have experienced,a material adverse effect on our business in the future.

Some of our officers and employees in Israel are obligated to perform routine military reserve duty in the Israel Defense Forces, depending on their age and position in the armed forces. Furthermore, they have been and may in the future experience, website disruptions, outagesbe called to active reserve duty at any time under emergency circumstances for extended periods of time. Our operations could be disrupted by the absence, for a significant period, of one or more of our officers or key employees due to military service, and any significant disruption in our operations could harm our business.

Our insurance does not cover losses that may occur as a result of an event associated with the security situation in the Middle East or for any resulting disruption in our operations. Although the Israeli government has in the past covered the reinstatement value of direct damages that were caused by terrorist attacks or acts of war, we cannot be assured that this government coverage will be maintained or, if maintained, will be sufficient to compensate us fully for damages incurred and the government may cease providing such coverage or the coverage might not suffice to cover potential damages. Any losses or damages incurred by us could have a material adverse effect on our business.

32


The tax benefits available to our Israeli subsidiary terminated in 2020 and we expect our Israeli subsidiary to become subject to an increase in taxes.

Our Israeli subsidiary has benefited from a status of a “Beneficiary Enterprise” under the Israeli Law for the Encouragement of Capital Investments, 5719-1959, or the Investment Law, since its incorporation. As of December 31, 2020, the tax benefit that we have been utilizing for our Israeli subsidiary terminated. A tax rate of 16% should be paid by our Israeli subsidiary under the Investment Law effective as of January 1, 2021, subject to meeting various conditions. To the extent we do not meet these conditions, our Israeli operations will be subject to a corporate tax at the standard rate, which, as of January 1, 2021, was set at 23%. If the Israeli subsidiary is subject to a corporate tax at the standard rate, it may adversely affect our tax expenses and effective tax rates. Additionally, if our Israeli subsidiary increases its activities outside of Israel, for example, through acquisitions, these activities may not be eligible for inclusion in Israeli tax benefit programs. The tax benefit derived from the Investment Law is dependent upon the ability to generate sufficient taxable income. Accordingly, our Israeli subsidiary may be unable to earn enough taxable income in order to fully utilize its tax benefits.

Risks Related to the Ownership of our Common Stock

Substantial future sales of shares of our common stock could cause the market price of our common stock to decline.

Sales of a substantial number of shares of our common stock into the public market, or the perception that these sales might occur, for whatever reason, including as a result of the conversion of the outstanding 2025 Notes or future public equity offerings, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that such sales may have on the prevailing market price of our common stock.

As of December 31, 2021, we had options, restricted stock units (“RSUs”) and performance stock units ("PSUs") outstanding that, if fully vested and exercised, would result in the issuance of approximately 8.6 million shares of our common stock. All of the shares of our common stock issuable upon exercise of options and vesting of RSUs and PSUs have been registered for public resale under the Securities Act. Accordingly, these shares will be able to be freely sold in the public market upon issuance as permitted by any applicable vesting requirements.

Our stock price has been and will likely continue to be volatile.

The market price for our common stock has been, and is likely to continue to be, volatile for the foreseeable future, and is subject to wide fluctuations in response to various factors, some of which are beyond our control. These factors, as well as the volatility of our common stock, could affect the price at which our convertible noteholders could sell the common stock received upon conversion of the 2025 Notes and could also impact the trading price of the 2025 Notes. The market price of our common stock may fluctuate significantly in response to a number of factors, many of which we cannot predict or control, including the factors listed below and other factors described in this “Risk Factors” section:

•    actual or anticipated fluctuations in our results or those of our competitors;
•    the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections;
•    failure of securities analysts to maintain coverage of our company, changes in financial estimates by any securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;
•    ratings changes by any securities analysts who follow our company;
•    announcements of new products, services or technologies, commercial relationships, acquisitions or other events by us or our competitors;
•    new announcements that affect investor perception of our industry, including reports related to the discovery of significant cyberattacks;
•    changes in operating performance problems dueand stock market valuations of other technology companies generally, or those in our industry in particular;
•    price and volume fluctuations in certain categories of companies or the overall stock market, including as a result of trends in the global economy;
•    the trading volume of our common stock;
•    changes in accounting principles;
•    sales of large blocks of our common stock, including sales by our executive officers, directors and significant stockholders;
•    additions or departures of any of our key personnel;
•    lawsuits threatened or filed against us;
33


•    short sales, hedging and other derivative transactions involving our capital stock;
•    general economic conditions in the United States and abroad, including inflationary pressures and higher interest rates;
•    changing legal or regulatory developments in the United States and other countries;
•    conversion of the 2025 Notes; and
•    other events or factors, including those resulting from war, incidents of terrorism, pandemic (such as COVID-19) or responses to these events.

In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a varietymanner unrelated or disproportionate to the operating performance of those companies. In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business and adversely affect our business, results of operations, financial condition and cash flows and may cause a significant increase in the premium paid for our directors and officers insurance.

We do not intend to pay dividends on our common stock, so any returns will be limited to the value of our stock.

We have never declared or paid cash dividends on our common stock. We currently anticipate that we will retain any future earnings and do not expect to pay any dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors and will be dependent on a number of factors, including technical failures, cyber-attacks, natural disasters, infrastructure changes, humanour financial condition, results of operations, capital requirements, general business conditions and other factors that our board of directors may deem relevant. In addition, the Credit and Security Agreement for our Credit Facility contains a prohibition on the payment of cash dividends. Until such time that we pay a dividend, stockholders, including holders of our 2025 Notes who receive shares of our common stock upon conversion of the 2025 Notes, must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

Anti-takeover provisions in our charter documents and under Delaware law and provisions in the indenture for our 2025 Notes and Credit Facility could make an acquisition of us, which may be beneficial to our stockholders, more difficult and may prevent attempts by our stockholders to replace or software errors, capacity constraints dueremove our current management, thereby depressing the trading price of our common stock and 2025 Notes.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may delay, discourage or prevent an acquisition of us or a change in our management, including transactions in which stockholders might otherwise receive a premium for their shares, or transactions that our stockholders might otherwise deem to an overwhelmingbe in their best interests. These provisions include:

•    authorizing “blank check” preferred stock, which could be issued by the board without stockholder approval and may contain voting, liquidation, dividend and other rights superior to our common stock, which would increase the number of users accessing our website simultaneouslyoutstanding shares and denialcould thwart a takeover attempt;
•    a classified board of service or fraud. In some instances, we may notdirectors whose members can only be able to identifydismissed for cause;
    the cause or causes of these website performance problems within an acceptable period of time. It may become increasingly difficult to maintain and improve the performanceprohibition on actions by written consent of our websites, especially during peak usage timesstockholders;
•    the limitation on who may call a special meeting of stockholders;
•    the establishment of advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon at stockholder meetings; and as
•    the requirement of at least 75% of the outstanding capital stock to amend any of the foregoing second through fifth provisions.

In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which limits the ability of stockholders owning in excess of 15% of our software becomesoutstanding voting stock to merge or combine with us, unless the merger or combination is approved in a prescribed manner. Although we believe these provisions collectively provide for an opportunity to obtain greater value for stockholders by requiring potential acquirers to negotiate with our board of directors, they would apply even if an offer rejected by our board were considered beneficial by some stockholders. In addition, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more complex anddifficult for stockholders to replace members of our user traffic increases.board of directors, which is responsible for appointing the members of our management.

34


In addition, if a “fundamental change” occurs prior to the maturity date of the 2025 Notes, holders of the 2025 Notes will have the right, at their option, to require us to repurchase all or a portion of their Convertible Notes. If a “make-whole fundamental change” (as defined in the Indenture) occurs prior the maturity date, we will in some cases be required to increase the conversion rate of the 2025 Notes for a holder that elects to convert its 2025 Notes in connection with such “make-whole fundamental change.” These features of the 2025 Notes may make a potential acquisition more expensive for a potential acquiror, which may in turn make it less likely for a potential acquiror to offer to purchase our websites are unavailablecompany, or if our users are unable to download our software, patches or fixes within a reasonablereduce the amount of timeconsideration offered for each share of our common stock in a potential acquisition. Furthermore, the Indenture prohibits us from engaging in certain mergers or at all,acquisitions unless, among other things, the surviving entity assumes our obligations under the 2025 Notes. Last, under our Credit Facility we may suffer reputational harmcannot sell or transfer or otherwise dispose of any assets of the Company to any person or entity subject to certain exceptions and our business would be negatively affected.

we cannot merge, amalgamate or consolidate with any other entity.


General Risks Factors

Real or perceived errors, failures or bugs in our software could adversely affect our growth prospects.


Because our software uses complex technology, undetected errors, failures or bugs may occur. Our software is often installed and used in a variety of computing environments with different operating system management software, and equipment and networking configurations, which may cause errors or failures of our software or other aspects of the computing environment into which it is deployed. In addition, deployment of our software into computing environments may expose undetected errors, compatibility issues, failures or bugs in our software. Despite testing by us, errors, failures or bugs may not be found in our software until it is released to our customers. Moreover, our customers could incorrectly implement or inadvertently misuse our software, which could result in customer dissatisfaction and adversely impact the perceived utility of our products as well as our brand. Any of these real or perceived errors, compatibility issues, failures or bugs in our software could result in negative publicity, reputational harm, loss of or delay in market acceptance of our software, loss of competitive position or claims by customers for losses sustained by them. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend additional resources in order to help correct the problem.

14

If Alleviating any of these problems could require significant expenditures of our software is perceived as not being secure, customers may reducecapital and other resources and could cause interruptions or delays in the use of or stop using our software, and we may incur significant liabilities.

Our software involves the transmission of data between data stores, and between data stores and desktop and mobile computers, and may in the future involve the storage of data. Any security breaches with respect to such datasolutions, which could result in the loss of this information, litigation, indemnity obligations and other liabilities. While we have taken steps to protect the confidential information that we have access to, including confidential information we may obtain through our customer support services or customer usage of our products, we have no direct control over the substance of the content. Therefore, if customers use our software for the transmission of personally identifiable information and our security measures are breached as a result of third-party action, employee error, malfeasance or otherwise, our reputation could be damaged, our business may suffer and we could incur significant liability. Because techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. While we maintain insurance coverage for some of the above events, the potential liabilities associated with these events could exceed the insurance coverage we maintain. Any or all of these issues could tarnish our reputation, negatively impact our ability to attract new customers or sell additional products to our existing customers, cause existing customers to elect not to renew their maintenance and support agreements or subject us to third-party lawsuits, regulatory fineslose existing or other action or liability, thereby adversely affecting our results of operations.

We are subject to federal, state and industry privacy and data security regulations, which could result in additional costs and liabilities to us or inhibit sales of our software.

Although our current software products do not transmit our customers’ data to us, we collect and utilize demographic and other information, including personally identifiable information, from and about users (such as customers, potential customers and others) as they interact with us over the internet and otherwise provide us with information whether via our website or blog or through email or other means. Users may provide personal information to us in many contexts, including through our direct telephonic support service, blog alert sign-up, product purchase, survey registration, or when accessing our online support portals or using other community or social networking features. Because we may collect and utilize this information, we are subject to laws and regulations regarding the collection, use and disclosure of personal information. In the United States, these include rules and regulations promulgated under the authority of the Federal Trade Commission, the Health Insurance Portability and Accountability Act of 1996, and state breach notification laws. Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework with which we or our customers must comply, including the GDPR adopted in the EU and which will become enforceable on May 25, 2018.

Further, the regulatory framework for privacy issues worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. Many federal, state and foreign government bodies and agencies have adopted or are considering adopting laws and regulations. In addition, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us. Because the interpretation and application of privacy and data protection laws are still uncertain, it is possible that these laws may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our software. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could have an adverse effect on our business. Any inability to adequately address privacy concerns, even if unfounded, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and adversely affect our business.

15

Our long-term growth depends, in part, on being able to continue to expand internationally on a profitable basis, which subjects us to risks associated with conducting international operations.

Historically, we have generated a majority of our revenues from customers in the United States. For the year ended December 31, 2017, approximately 62% of our total revenues were derived from sales in the United States. Nevertheless, we have operations across the globe, and we plan to continue to expand our international operations as part of our long-term growth strategy. The further expansion of our international operations will subject us to a variety of risks and challenges, including:

sales and customer service challenges associated with operating in different countries;

increased management travel, infrastructure and legal compliance costs associated with having multiple international operations;

difficulties in receiving payments from different geographies, including difficulties associated with currency fluctuations, payment cycles, transfer of funds or collecting accounts receivable, especially in emerging markets;

variations in economic or political conditions between each country or region;

economic uncertainty around the world and adverse effects arising from economic interdependencies across countries and regions;

uncertainty around how the United Kingdom’s decision to exit the European Union (“Brexit”) will impact its access to the European Union Single Market, the related regulatory environment, the global economy and the resulting impact on our business;

compliance with foreign laws and regulations and the risks and costs of non-compliance with such laws and regulations;

compliance with laws and regulations for foreign operations, including the U.S. Foreign Corrupt Practices Act of 1977, or the FCPA, the U.K. Bribery Act of 2010, import and export control laws, tariffs, trade barriers, economic sanctions and other regulatory or contractual limitations on our ability to sell our software in certain foreign markets, and the risks and costs of non-compliance;

heightened risks of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of financial statements and irregularities in financial statements;

reduced protection for intellectual property rights in certain countries and practical difficulties and costs of enforcing rights abroad;

compliance with the laws of numerous foreign taxing jurisdictions and overlapping of different tax regimes; and

uncertainty around a potential reverse or renegotiation of international trade agreements and partnerships under the administration of U.S. President Donald J. Trump.

Any of these risks could adversely affect our international operations, reduce our revenues from outside the United States or increase our operating costs, adversely affecting our business, results of operations and financial condition and growth prospects. There can be no assurance that all of our employees, independent contractors and channel partners will comply with the formal policies we have and will implement, or applicable laws and regulations. Violations of laws or key control policies by our employees, independent contractors and channel partners could result in delays in revenue recognition, financial reporting misstatements, fines, penalties or the prohibition of the importation or exportation of our software and services and could have a material adverse effect on our business and results of operations.

If currency exchange rates fluctuate substantially in the future, our results of operations, which are reported in U.S. dollars, could be adversely affected.

Our functional and reporting currency is the U.S. dollar, and we generate a majority of our revenues and incur a majority of our expenses in U.S. dollars. Revenues and expenses are also incurred in other currencies,primarily Euros, Pounds Sterling, Canadian dollars, Australian dollars and New Israeli Shekels (“NIS”). Accordingly, changes in exchange rates may have a material adverse effect on our business, results of operations and financial condition. The exchange rates between the U.S. dollar and foreign currencies have fluctuated substantially in recent years and may continue to fluctuate substantially in the future. For example, due to the recent appreciation of the NIS against the U.S. Dollar, we expect our operating expenses, mainly those related to research and development, to be negatively impacted by this foreign currency movement compared to 2017. For both the first quarter and full year 2018, we expect this impact to be approximately 300 basis points to our operating margin. Furthermore, a strengthening of the U.S. dollar could increase the cost in local currency of our software and our maintenance renewals to customers outside the United States, which could adversely affect our business, results of operations, financial condition and cash flows. Volatility in exchange rates may continue in the short term as the United Kingdom negotiates its exit from the European Union which is scheduled to occur by the end of March 2019. Brexit and the withdrawal of the United Kingdom from the European Union, as well as other member countries public discussions about the possibility of withdrawing from the European Union, may also create global economic uncertainty, which may impact, among other things, the demand for our products.

16

We incur expenses for employee compensation and other operating expenses at our non-U.S. locations in local currencies. The weakening of the U.S. dollar against such currencies would cause the U.S. dollar equivalent of such expenses to increase which could have a negative impact on our reported results of operations. We use forward foreign exchange contracts to hedge or mitigate the effect of changes in foreign exchange rates on our operating expenses denominated in certain foreign currencies. However, this strategy might not eliminate our exposure to foreign exchange rate fluctuations and involves costs and risks of its own, such as cash expenditures, ongoing management time and expertise, external costs to implement the strategy and potential accounting implications. Additionally, our hedging activities may contribute to increased losses as a result of volatility in foreign currency markets.

Our use of open source software could negatively affect our ability to sell our software and subject us to possible litigation.

We use open source software and expect to continue to use open source software in the future. Some open source software licenses require users who distribute open source software as part of their own software product to publicly disclose all or part of the source code to such software product or to make available any derivative works of the open source code on unfavorable terms or at no cost. We may face ownership claims of third parties over, or seeking to enforce the license terms applicable to, such open source software, including by demanding the release of the open source software, derivative works or our proprietary source code that was developed using such software. These claims could also result in litigation, require us to purchase a costly license or require us to devote additional research and development resources to change our software, any of which would have a negative effect on our business and results of operations. In addition, if the license terms for the open source code change, we may be forced to re-engineer our software or incur additional costs. Finally, we cannot assure you that we have incorporated open source software into our own software in a manner that conforms with our current policies and procedures.

Our business is highly dependent upon our brand recognition and reputation, and the failure to maintain or enhance our brand recognition or reputation may adversely affect our business.

We believe that enhancing the “Varonis” brand identity and maintaining our reputation in the information technology industry is critical to our relationships with our customers and to our ability to attract new customers. Our brand recognition and reputation is dependent upon:

our ability to continue to offer high-quality, innovative and error- and bug-free products;

our ability to maintain customer satisfaction with our products;

our ability to be responsive to customer concerns and provide high quality customer support, training and professional services;

our marketing efforts;

any misuse or perceived misuse of our products;

positive or negative publicity;

interruptions, delays or attacks on our website; and

litigation or regulatory-related developments.

We may not be able to successfully promote our brand or maintain our reputation. In addition, independent industry analysts often provide reviews of our products, as well as other products available in the market, and perception of our product in the marketplace may be significantly influenced by these reviews. If these reviews are negative, or less positive than reviews about other products available in the market, our brand may be adversely affected. Furthermore, negative publicity relating to events or activities attributed to us, our employees, our channel partners or others associated with any of these parties, may tarnish our reputation and reduce the value of our brand. Damage to our reputation and loss of brand equity may reduce demand for our products and have an adverse effect on our business, results of operations and financial condition. Any attempts to rebuild our reputation and restore the value of our brand may be costly and time consuming, and such efforts may not ultimately be successful.

Moreover, it may be difficult to enhance our brand and maintain our reputation in connection with sales to channel partners. Promoting our brand requires us to make significant expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive, as we expand into new markets and geographies and as more sales are generated to our channel partners. To the extent that these activities yield increased revenues, these revenues may not offset the increased expenses we incur. If we do not successfully enhance our brand and maintain our reputation, our business may not grow, we may have reduced pricing power relative to competitors with stronger brands, and we could lose customers, all of which would adversely affect our business, operations and financial results.

17

False detection of security breaches, false identification of malicious sources or misidentification of sensitive or regulated information could adversely affect our business.

Our cyber-security products may falsely detect threats that do not actually exist. For example, our DatAlert solution may enrich metadata collected by our products with information from external sources and third-party data providers. If the information from these data providers is inaccurate, the potential for false positives increases. These false positives, while typical in the industry, may affect the perceived reliability of our products and solutions and may therefore adversely impact market acceptance of our products. As definitions and instantiations of personal identifiers and other sensitive content change, automated classification technologies may falsely identify or fail to identify data as sensitive. If our products and solutions fail to detect exposures or restrict access to important systems, files or applications based on falsely identifying legitimate use as an attack or otherwise unauthorized, then our customers’ businesses could be adversely affected. Any such false identification of use and subsequent restriction could result in negative publicity, loss of customers and sales, increased costs to remedy any problem and costly litigation.

Our success depends in part on maintaining and increasing our sales to customers in the public sector.

We derive a portion of our revenues from contracts with federal, state, local and foreign governments and government-owned or -controlled entities (such as public health care bodies, educational institutions and utilities), which we refer to as the public sector herein. We believe that the success and growth of our business will continue to depend on our successful procurement of public sector contracts. Selling to public sector entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that our efforts will produce any sales. Factors that could impede our ability to maintain or increase the amount of revenues derived from public sector contracts include:

changes in public sector fiscal or contracting policies;

decreases in available public sector funding;

changes in public sector programs or applicable requirements;

the adoption of new laws or regulations or changes to existing laws or regulations;

potential delays or changes in the public sector appropriations or other funding authorization processes;

the requirement of contractual terms that are unfavorable to us, such as most-favored-nation pricing provisions; and

delays in the payment of our invoices by public sector payment offices.

Furthermore, we must comply with laws and regulations relating to public sector contracting, which affect how we and our channel partners do business in both the United States and abroad. These laws and regulations may impose added costs on our business, and failure to comply with these or other applicable regulations and requirements, including non-compliance in the past, could lead to claims for damages from our channel partners, penalties, termination of contracts, and temporary suspension or permanent debarment from public sector contracting.

The occurrence of any of the foregoing could cause public sector customers to delay or refrain from purchasing licenses of our software in the future or otherwise have an adverse effect on our business, operations and financial results.

We are subject to governmental export and import controls that could subject us to liability or impair our ability to compete in international markets.

We incorporate encryption technology into certain of our products and these products are subject to U.S. export control. We are also subject to Israeli export controls on encryption technology since our product development initiatives are primarily conducted by our wholly-owned Israeli subsidiary. We have obtained the required licenses to export our products outside of the United States. In addition, the current encryption means used in our products are listed in the “free means encryption items” published by the Israeli Ministry of Defense, which means we are exempt from obtaining an encryption control license. If the applicable U.S. or Israeli legal requirements regarding the export of encryption technology were to change or if we change the encryption means in our products, we may need to apply for new licenses in the United States and may no longer be able to rely on our licensing exception in Israel. There can be no assurance that we will be able to obtain the required licenses under these circumstances. Furthermore, various other countries regulate the import of certain encryption technology, including import permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our customers’ ability to implement our products in those countries.

We are also subject to U.S. and Israeli export control and economic sanctions laws, which prohibit the shipment of certain products to embargoed or sanctioned countries, governments and persons. Our products could be exported to these sanctioned targets by our channel partners despite the contractual undertakings they have given us and any such export could have negative consequences, including government investigations, penalties and reputational harm. Moreover, the Trump Administration may create further uncertainty regarding export or import regulations, economic sanctions or related legislation. It remains unclear what specifically President Trump would or would not do with respect to the initiatives he has raised and what support he would have to implement any such potential changes. Any change in export or import regulations, economic sanctions or related legislation, shift in the enforcement or scope of existing regulations, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Any decreased use of our products or limitation on our ability to export or sell our products would likely adversely affect our business, financial condition and results of operations.

18

Our business in countries with a history of corruption and transactions with foreign governments increase the risks associated with our international activities.

As we operate and sell internationally, we are subject to the FCPA and other laws that prohibit improper payments or offers of payments to foreign governments and their officials and political parties for the purpose of obtaining or retaining business. We have operations, deal with and make sales to governmental customers in countries known to experience corruption, particularly certain emerging countries in Eastern Europe, South and Central America, East Asia, Africa and the Middle East. Our activities in these countries create the risk of unauthorized payments or offers of payments by one of our employees, consultants, channel partners or sales agents that could be in violation of various anti-corruption laws, even though these parties may not be under our control. While we have implemented safeguards to prevent these practices by our employees, consultants, channel partners and sales agents, our existing safeguards and any future improvements may prove to be less than effective, and our employees, consultants, channel partners or sales agents may engage in conduct for which we might be held responsible. Violations of the FCPA or other anti-corruption laws may result in severe criminal or civil sanctions, including suspension or debarment from government contracting, and we may be subject to other liabilities, which could negatively affect our business, operating results and financial condition.

Our ability to use our net operating loss carryforwards and other tax attributes may be limited if we undergo an “ownership change.”

Our ability to utilize our net operating loss carryforwards (“NOLs”) and other tax attributes could be limited if we undergo an “ownership change” within the meaning of Section 382 of the Internal Revenue Code of 1986, as amended (the “Code”). An ownership change is generally defined as a greater than 50 percentage point increase in equity ownership by 5% stockholders in any three-year period. If an ownership change occurred as a result of the sale of future equity issuances, we may not be able to fully realize the benefits of these NOLs. Also, the cash tax benefit from our NOLs is dependent upon our ability to generate sufficient taxable income. Accordingly, we may be unable to earn enough taxable income in order to fully utilize our current NOLs.

Changes in our provision for income taxes or adverse outcomes resulting from examination of our income tax returns could adversely affect our results.

We are subject to income taxation in the United States, Israel and numerous other jurisdictions. Determining our provision for income taxes requires significant management judgment. In addition, our provision for income taxes could be adversely affected by many factors, including, among other things, changes to our operating structure, changes in the amounts of earnings in jurisdictions with different statutory tax rates, changes in the valuation of deferred tax assets and liabilities and changes in tax laws. We are subject to ongoing tax examinations in various jurisdictions. Tax authorities may disagree with our intercompany charges, cross-jurisdictional transfer pricing or other matters and assess additional taxes. While we regularly evaluate the likely outcomes of these examinations to determine the adequacy of our provision for income taxes, there can be no assurance that the outcomes of such examinations will not have a material impact on our results of operations and cash flows. In addition, we may be audited in various jurisdictions, and such jurisdictions may assess additional taxes against us. For example, we are currently subject to a tax audit in Israel. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have a material adverse effect on our results of operations or cash flows in the period or periods for which a determination is made.

Significant judgment is required to determine the recognition and measurement attributes prescribed in Accounting Standards Codification (“ASC 740-10-25”). In addition, ASC 740-10-25 applies to all income tax positions, including the potential recovery of previously paid taxes, which if settled unfavorably could adversely impact our provision for income taxes. Further, as a result of certain of our ongoing employment and capital investment actions and commitments, our income in certain countries is subject to reduced tax rates. Our failure to meet these commitments could adversely impact our provision for income taxes. In addition, we are subject to the continuous examination of our income tax returns by the U.S. Internal Revenue Service and other tax authorities. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes. There can be no assurance that the outcomes from these continuous examinations will not have an adverse effect on our results of operations.

19

The adoption of the recent tax reform and the enactment of additional legislation changing the United States taxation of international business activities could materially impact our financial position and results of operations.

On December 22, 2017, President Trump signed into law the “Tax Cuts and Jobs Act” (TCJA) that significantly reforms the Code. The TCJA, among other things, includes changes to U.S. federal tax rates, imposes significant additional limitations on the deductibility of interest and restricts the use of net operating loss carryforwards arising after December 31, 2017, allows for the expensing of capital expenditures, and puts into effect the migration from a “worldwide” system of taxation to a territorial system. We do not expect tax reform to have a material impact to our net operating losses. We continue to examine the impact this tax reform legislation may have on our business. Due to the expansion of our international business activities, any changes in the U.S. taxation of such activities may increase our worldwide effective tax rate and adversely affect our financial position and results of operations. Further, foreign governments may enact tax laws in response to the TCJA that could result in further changes to global taxation and materially affect our financial position and results of operations. The impact of the TCJA on holders of our securities is uncertain. We urge our stockholders to consult with their legal and tax advisors with respect to such legislation and the potential tax consequences.

We conduct our operations in a number of jurisdictions worldwide and report our taxable income based on our business operations in those jurisdictions. Our intercompany relationships are subject to transfer pricing regulations administered by taxing authorities in various jurisdictions. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations.

Changes in financial accounting standards may cause adverse and unexpected revenue fluctuations and impact our reported results of operations.

A change in accounting standards or practices could harm our operating results and may even affect our reporting of transactions completed before the change is effective. New accounting pronouncements, such as Accounting Standards Update 2014-09 related to revenue recognition, and varying interpretations of accounting pronouncements have occurred and may occur in the future. Changes to existing rules or the questioning of current practices may harm our operating results or the way we conduct our business. Additionally, the adoption of new or revised accounting principles may require that we make significant changes to our systems process and controls.

Acquisitions could disrupt our business and adversely affect our results of operations, financial condition and cash flows.

We may make acquisitions that could be material to our business, results of operations, financial condition and cash flows. Our ability as an organization to successfully acquire and integrate technologies or businesses is unproven. Acquisitions involve many risks, including the following:

an acquisition may negatively affect our results of operations, financial condition or cash flows because it may require us to incur charges or assume substantial debt or other liabilities, may cause adverse tax consequences or unfavorable accounting treatment, including potential write-downs of deferred revenues, may expose us to claims and disputes by third parties, including intellectual property claims and disputes, or may not generate sufficient financial return to offset additional costs and expenses related to the acquisition;
we may encounter difficulties or unforeseen expenditures in integrating the business, technologies, products, personnel or operations of any company that we acquire, particularly if key personnel of the acquired company decide not to work for us;
an acquisition may disrupt our ongoing business, divert resources, increase our expenses and distract our management;
an acquisition may result in a delay or reduction of customer purchases for both us and the company we acquired due to customer uncertainty about continuity and effectiveness of service from either company;
we may encounter difficulties in, or may be unable to, successfully sell any acquired products;
an acquisition may involve the entry into geographic or business markets in which we have little or no prior experience or where competitors have stronger market positions;
challenges inherent in effectively managing an increased number of employees in diverse locations;
the potential strain on our financial and managerial controls and reporting systems and procedures;
potential known and unknown liabilities or deficiencies associated with an acquired company that were not identified in advance;
our use of cash to pay for acquisitions would limit other potential uses for our cash and affect our liquidity;
if we incur debt to fund such acquisitions, such debt may subject us to material restrictions on our ability to conduct our business as well as financial maintenance covenants;
the risk of impairment charges related to potential write-downs of acquired assets or goodwill in future acquisitions;

20

to the extent that we issue a significant amount of equity or convertible debt securities in connection with future acquisitions, existing stockholders may be diluted and earnings per share may decrease; and
managing the varying intellectual property protection strategies and other activities of an acquired company.

We may not succeed in addressing these or other risks or any other problems encountered in connection with the integration of any acquired business. The inability to integrate successfully the business, technologies, products, personnel or operations of any acquired business, or any significant delay in achieving integration, could have a material adverse effect on our business, results of operations, financial condition and cash flows.

We may require additional capital to support our business growth, and this capital might not be available on acceptable terms, or at all.


We continue to make investments to support our business growth and may require additional funds to respond to business challenges, including the need to develop new features or enhance our software, improve our operating infrastructure or acquire complementary businesses and technologies. Accordingly, we may need to engage in equity or debt financing to secure additional funds. If we raise additional funds through future issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our common stock. Any debt financing that we may secure in the future could involve restrictive covenants relating to our capital raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. We may not be able to obtain additional financing on terms favorable to us, if at all. If we are unable to obtain adequate financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired, and our business may be adversely affected.


Our business is subject to the risks of fire, power outages, floods, earthquakes, pandemics and other catastrophic events, and to interruption by manmade problems such as terrorism.


A significant natural disaster, such as a fire, flood or an earthquake, an outbreak of a pandemic disease (such as COVID-19) or a significant power outage could have a material adverse impact on our business, results of operations and financial condition. In the event our customers’ information technologyIT systems or our channel partners’ selling or distribution abilities are hindered by any of these events, we may miss financial targets, such as revenues and sales targets, for a particular quarter. Further, if a natural disaster occurs in a region from which we derive a significant portion of our revenue, customers in that region may delay or forego purchases of our products, which may materially and adversely impact our results of operations for a particular period. In addition, acts of terrorism could cause disruptions in our business or the business of channel partners, customers or the economy as a whole. Given our typical concentration of sales at each quarter end, any disruption in the business of our channel partners or customers that impacts sales at the end of our quarter could have a significant adverse impact on our quarterly results. All of the aforementioned risks may be augmented if the disaster recovery plans for us and our channel partners prove to be inadequate. To the extent that any of the above results in delays or cancellations of customer orders, or the delay in the manufacture,
35


development, deployment or shipment of our products, our business, financial condition and results of operations would be adversely affected.

Risks Related to


Changes in financial accounting standards may adversely impact our Operations in Israel

Conditions in Israelreported results of operations.


New accounting pronouncements and varying interpretations of accounting pronouncements have occurred and may limit our ability to develop and sell our products, which could result in a decrease of our revenues.

Our principal research and development facility, which also houses a portion of our support and general and administrative teams, is located in Israel. Since the establishment of the State of Israel in 1948, a number of armed conflicts have taken place between Israel and its neighboring countries, as well as incidents of terror activities and other hostilities, and a number of state and non-state actors have publicly committed to its destruction. Political, economic and security conditions in Israel could directly affect our operations. We could be adversely affected by hostilities involving Israel, including acts of terrorism or any other hostilities involving or threatening Israel, the interruption or curtailment of trade between Israel and its trading partners, a significant increase in inflation or a significant downturnoccur in the economic or financial condition of Israel. Any on-going or future armed conflicts, terrorist activities, tension along the Israeli borders or with other countries in the region, including Iran, or political instability in the region could disrupt international trading activities in Israel and may materially and negatively affect our business and could harm our results of operations.

Certain countries, as well as certain companies and organizations, continuefuture. Changes to participate in a boycott of Israeli companies, companies with large Israeli operations and others doing business with Israel and Israeli companies. The boycott, restrictive laws, policies or practices directed towards Israel, Israeli businesses or Israeli citizens could, individually or in the aggregate, have a material adverse effect on our business in the future.

21

Some of our officers and employees in Israel are obligated to perform routine military reserve duty in the Israel Defense Forces, depending on their age and position in the armed forces. Furthermore, they have been and may in the future be called to active reserve duty at any time under emergency circumstances for extended periods of time. Our operations could be disrupted by the absence, for a significant period, of one or more of our officers or key employees due to military service, and any significant disruption in our operations could harm our business.

The tax benefits that are available to our Israeli subsidiary require it to continue to meet various conditions and may be terminated or reduced in the future, which could increase its taxes.

Our Israeli subsidiary benefits from a status of a “Beneficiary Enterprise” under the Israeli Law for the Encouragement of Capital Investments, 5719-1959,existing rules or the Investment Law. Based on an evaluationquestioning of the relevant factors under the Investment Law, including the level of foreign (i.e., non-Israeli) investment in our company, we have determined that the effective tax rate to be paid by our Israeli subsidiary as a “Beneficiary Enterprise” has historically been approximately 10%. If our Israeli subsidiary does not meet the requirements for maintaining this status, for example, if the Israeli subsidiary materially changes the nature of its business or, if the level of foreign investment in our company decreases, itcurrent practices may no longer be eligible to enjoy this reduced tax rate. As a result, our Israeli subsidiary would be subject to Israeli corporate tax at the standard rate, which, as of January 1, 2018, was set at 23%. Even if our Israeli subsidiary continues to meet the relevant requirements, the tax benefits that the status of “Beneficiary Enterprise” provides may not be continued in the future at their current levels or at all. If these tax benefits were reduced or eliminated, the amount of taxes that our Israeli subsidiary would pay would likely increase, as all of our Israeli operations would consequently be subject to corporate tax at the standard rate, which could adversely affect our results of operations. Additionally, if our Israeli subsidiary increases its activities outside of Israel, for example, through acquisitions, these activities may not be eligible for inclusion in Israeli tax benefit programs. The tax benefits derived from the status of “Beneficiary Enterprise” is dependent upon the ability to generate sufficient taxable income. Accordingly, our Israeli subsidiary may be unable to earn enough taxable income in order to fully utilize its tax benefits.

Risks Related to the Ownership of our Common Stock

Our stock price has been and will likely continue to be volatile.

The market price for our common stock has been, and is likely to continue to be, volatile for the foreseeable future. For example, since shares of our common stock were sold in our initial public offering (“IPO”) in March 2014 at a price of $22.00 per share, our common stock’s price on The Nasdaq Global Select Market has ranged from $13.25 to $56.80 through February 9, 2018. On February 9, 2018, the closing price of our common stock was $52.40. The market price of our common stock may fluctuate significantly in response to a number of factors, many of which we cannot predict or control, including the factors listed below and other factors described in this “Risk Factors” section:

actual or anticipated fluctuations in ouroperating results or those ofthe way we conduct our competitors;

the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections;

failure of securities analysts to initiate or maintain coverage of our company, changes in financial estimates by any securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

ratings changes by any securities analysts who follow our company;

announcements of new products, services or technologies, commercial relationships, acquisitions or other events by us or our competitors;

changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

price and volume fluctuations in in certain categories of companies or the overall stock market, including as a result of trends in the global economy;

changes in accounting principles;

sales of large blocks of our common stock, including sales by our executive officers, directors and significant stockholders;

additions or departures of any of our key personnel;

lawsuits threatened or filed against us;

short sales, hedging and other derivative transactions involving our capital stock;

general economic conditions in the United States and abroad;

22
business.


changing legal or regulatory developments in the United States and other countries; and

other events or factors, including those resulting from war, incidents of terrorism or responses to these events.

In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business and adversely affect our business, results of operations, financial condition and cash flows.

If securities or industry analysts do not publish research or reports about our business, or publish negative reports about our business, our stock price and trading volume could decline.


The trading market for our common stock depends in part on the research and reports that securities or industry analysts publish about us or our business, our market and our competitors. We do not have any control over these analysts or their expectations regarding our performance on a quarterly or annual basis. If one or more of the analysts who cover us downgrade our stock or change their opinion of our stock, our stock price would likely decline. If we fail to meet one or more of these analysts' published expectations regarding our performance on a quarterly basis, our stock price or trading volume could decline. If one or more of these analysts cease coverage of our company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our stock price or trading volume to decline.

Substantial future sales of shares of our common stock could cause the market price of our common stock to decline.

Sales of a substantial number of shares of our common stock into the public market, or the perception that these sales might occur, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that such sales may have on the prevailing market price of our common stock.

As of December 31, 2017, we had options and restricted stock units (“RSUs”) outstanding that, if fully vested and exercised, would result in the issuance of approximately 3.5 million shares of our common stock. All of the shares of our common stock issuable upon exercise of options and vesting of RSUs have been registered for public resale under the Securities Act. Accordingly, these shares will be able to be freely sold in the public market upon issuance as permitted by any applicable vesting requirements.

The requirements of being a public company may strain our resources, divert management’s attention and affect our ability to attract and retain executive management and qualified board members.

As a public company, we are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the listing requirements of The Nasdaq Global Select Market and other applicable securities rules and regulations. Compliance with these rules and regulations have increased our legal and financial compliance costs, make some activities more difficult, time-consuming or costly and increase demand on our systems and resources.

The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and results of operations. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight is required. As a result, management’s attention may be diverted from other business concerns, which could adversely affect our business and results of operations. We may need to hire more employees in the future or engage outside consultants, which will increase our costs and expenses. In addition, changing laws, regulations and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs and making some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices.

Being a public company, these rules and regulations have made it more expensive for us to obtain director and officer liability insurance, and in the future we may be required to accept reduced coverage or incur substantially higher costs to obtain coverage. These factors could also make it more difficult for us to attract and retain qualified members of our board of directors, particularly to serve on our audit and compensation committees, and qualified executive officers.

23


As a result of disclosure of information in our filings with the SEC, our business and financial condition have become more visible, which we believe may result in threatened or actual litigation, including by competitors and other third parties. If such claims are successful, our business and results of operations could be adversely affected, and even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and adversely affect our business and results of operations.

We are obligated to develop and maintain proper and effective internal control over financial reporting. These internal controls may not be determined to be effective, which may adversely affect investor confidence in our company and, as a result, the value of our common stock.


We are required, pursuant to Section 404 of the Sarbanes–Oxley Act, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting on an annual basis. This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting. We are also required to have our independent registered public accounting firm issue an opinion on the effectiveness of our internal control over financial reporting on an annual basis. During the evaluation and testing process, if we identify one or more material weaknesses in our internal control over financial reporting, we will be unable to assert that our internal control over financial reporting is effective.


If we are unable to assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm is unable to express an opinion on the effectiveness of our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, which could cause the price of our common stock to decline, and we may be subject to investigation or sanctions by the SEC.


Future sales and issuances of our capital stock or rights to purchase capital stock could result in additional dilution of the percentage ownership of our stockholders and could cause our stock price to decline.


Future sales and issuances of our capital stock or rights to purchase our capital stock could result in substantial dilution to our existing stockholders. We may sell common stock, convertible securities and other equity securities in one or more transactions at prices and in a manner as we may determine from time to time. If we sell any such securities in subsequent transactions, investors may be materially diluted. New investors in such subsequent transactions could gain rights, preferences and privileges senior to those of holders of our common stock.

We do not intend to pay dividends on our common stock, so any returns will be limited to the value of our stock.

We have never declared or paid cash dividends on our common stock. We currently anticipate that we will retain any future earnings and do not expect to pay any dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors and will be dependent on a number of factors, including our financial condition, results of operations, capital requirements, general business conditions and other factors that our board of directors may deem relevant. In addition, the loan agreement for our credit facility contains a prohibition on the payment of cash dividends. Until such time that we pay a dividend, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of us, which may be beneficial to our stockholders, more difficult and may prevent attempts by our stockholders to replace or remove our current management.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may delay or prevent an acquisition of us or a change in our management. These provisions include:

authorizing “blank check” preferred stock, which could be issued by the board without stockholder approval and may contain voting, liquidation, dividend and other rights superior to our common stock, which would increase the number of outstanding shares and could thwart a takeover attempt;

a classified board of directors whose members can only be dismissed for cause;

the prohibition on actions by written consent of our stockholders;

the limitation on who may call a special meeting of stockholders;

the establishment of advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon at stockholder meetings; and

the requirement of at least 75% of the outstanding capital stock to amend any of the foregoing second through fifth provisions.

24


In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which limits the ability of stockholders owning in excess of 15% of our outstanding voting stock to merge or combine with us. Although we believe these provisions collectively provide for an opportunity to obtain greater value for stockholders by requiring potential acquirers to negotiate with our board of directors, they would apply even if an offer rejected by our board were considered beneficial by some stockholders. In addition, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management.

Item 1B.Unresolved Staff Comments

We do not have any unresolved comments from the SEC staff.


Item 2.Properties

Our corporate headquarters are located in New York City in an office consisting of approximately 31,000 square feet. This lease expires in February 2026, although we


We have the option to both terminate the lease in February 2023 and extend the lease for an additional five years. Additionally, we currently lease an office locatedoffices in Herzliya, Israel consisting of approximately 76,000 square feet, where we employ the majority our research and development team and a portion of our support and general and administrative teams. The lease for this office expires in December 2019, although we have the option to extend the lease for an additional five years. We also lease smallerhave offices in North Carolina and Cork, Ireland which serve as our primary U.S. and EMEA customer support and inside sales center, respectively. Additionally, we have an office in New York City and smaller offices in France, the United Kingdom, Ireland, Oregon, Virginia, Australia, Germany, the Netherlands, Luxembourg and Germany (whichBelgium which serve as regional sales offices and some of which are customer support centers) and a second office in Herzliya, Israel (which houses a portioncenters. Substantially all of our general and administrative team).
36


office space is leased under long-term leases with varying expiration dates. We planbelieve that our facilities are adequate to investmeet our needs in additional space as needed to accommodate our growth.

the near future.

Item 3.Legal Proceedings

We are not currently a party to any material litigation.


Item 4.Mine Safety Disclosures

Not applicable.

37


PART II


Item 5.Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Market for Registrant’s Common Equity

Our common stock has been listed on The NASDAQ Global Select Market under the symbol “VRNS” since February 28, 2014, the date of our initial public offering. The following table sets forth, for the periods indicated, the range of high and low sales prices for our common stock as reported by The NASDAQ Global Select Market:

  2017 2016
  High Low High Low
First Quarter $31.80  $25.20  $19.87  $13.25 
Second Quarter  37.90   26.35   26.14   17.09 
Third Quarter  43.05   35.45   30.63   22.07 
Fourth Quarter  53.60   41.50   32.05   24.45 

Dividend Policy

We have never declared or paid cash dividends on our common stock. We currently intend to retain any future earnings for use in the operation of our business and do not intend to declare or pay any cash dividends in the foreseeable future. Any further determination to pay dividends on our common stock will be at the discretion of our board of directors, subject to applicable laws, and will depend on our financial condition, results of operations, capital requirements, general business conditions and other factors that our board of directors considers relevant.

Stockholders

As of February 1, 2018,January 27, 2022, there were nineseven stockholders of record of our common stock, including The Depository Trust Company, which holds shares of our common stock on behalf of an indeterminate number of beneficial owners.

25


Issuance of Unregistered Securities

On October 29, 2021, we issued 43,439 shares of our Common Stock to the two founders of Polyrize. Such issuance was a portion of the consideration paid to the two founders in connection with the acquisition, and it was in lieu of a cash payment that otherwise would have been paid to them. Such shares were issued in reliance upon the exemption from registration available under Regulation S as the issuance of our securities was to individuals that were non-U.S. persons.

38


STOCK PERFORMANCE GRAPH

The following shall not be deemed “filed” for purposes of Section 18 of the Exchange Act, or incorporated by reference into any of our other filings under the Exchange Act or the Securities Act, except to the extent we specifically incorporate it by reference into such filing.

This chart compares the cumulative total return on our common stock with that of the NASDAQ Composite Index and the NASDAQ Computer Index. The chart assumes $100 was invested at the close of market on February 28, 2014December 31, 2016 in our common stock, the NASDAQ Composite Index and the NASDAQ Computer Index, and assumes the reinvestment of any dividends. The stock price performance on the following graph is not necessarily indicative of future stock price performance.

The closing price of our common stock on December 29, 2017,31, 2021, the last trading day of our 20172021 fiscal year, was $48.55$48.78 per share.

 

Company/Index 2/28/2014 12/31/2014 12/31/2015 12/31/2016 12/31/2017
VRNS $100.00  $74.61  $42.73  $60.91  $110.34 
NASDAQ Composite $100.00  $109.66  $115.94  $124.64  $159.84 
NASDAQ Computer $100.00  $116.57  $123.85  $139.05  $192.95 

Sales of Unregistered Securities

None.

26

Use of Proceeds from Public Offerings of Common Stock

On March 5, 2014, we closed our initial public offering of 5,520,000 million shares of common stock, including 5,300,436 shares of common stock sold by us (inclusive of 500,436 shares of common stock from the full exercise of the overallotment option of shares granted to the underwriters) and 219,564 shares of common stock sold by the selling stockholder at a price to the public of $22.00 per share. The offer and sale of all of the shares in the IPO were registered under the Securities Act pursuant to a registration statement on Form S-1 (Registration No. 333-191840), which was declared effective by the SEC on February 27, 2014. The offering commenced on February 28, 2014, closed on March 5, 2014 and did not terminate before all of the shares in the IPO that were registered in the registration statement were sold. Morgan Stanley & Co. LLC, Barclays Capital Inc., Jefferies LLC, RBC Capital Markets, LLC and Needham & Company, LLC acted as the underwriters. The aggregate offering price for shares sold in the offering was approximately $121.4 million. We did not receive any proceeds from the sale of shares by the selling stockholder. We raised approximately $106.1 million in net proceeds from the offering, after deducting underwriter discounts and commissions of approximately $8.2 million and other offering expenses of approximately $2.4 million.

No payments were made by us to directors, officers or persons owning ten percent or more of our common stock or to their associates, or to our affiliates, other than payments in the ordinary course of business to our officers for salaries and bonuses and to our non-employee directors as compensation for serving on our board of directors and the various committees thereof. There has been no material change in the planned use of proceeds from our IPO as described in our final prospectus filed with the SEC pursuant to Rule 424(b) under the Securities Act on March 3, 2014. Pending the uses described, we have invested the net proceeds in short-term securities such as certificates of deposit and money market funds.

vrns-20211231_g2.jpg

Company/Index12/31/201612/31/201712/31/201812/31/201912/31/202012/31/2021
Varonis Systems, Inc.$100.00 $181.16 $197.39 $289.96 $610.49 $546.04 
NASDAQ Composite$100.00 $128.24 $123.26 $166.68 $239.42 $290.63 
NASDAQ Computer$100.00 $138.77 $133.66 $200.94 $301.37 $415.46 
Purchase of Equity Securities by Issuer and Affiliated Purchasers

None.

Item 6.Selected Financial Data

The following selected consolidated historical financial data are derived from our audited financial statements. The consolidated balance sheet data as of December 31, 2017 and 2016 and the consolidated statement of operations data for the years ended December 31, 2017, 2016 and 2015 are derived from our audited consolidated financial statements and related notes that are included elsewhere in this Annual Report on Form 10-K. The consolidated balance sheet data as of December 31, 2015, 2014 and 2013 and the consolidated statement of operations for the years ended December 31, 2014 and 2013 are derived from our audited consolidated financial statements and related notes which are not included in this Annual Report. The information set forth below should be read in conjunction with our historical financial statements, including the notes thereto, and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” included elsewhere in this Annual Report.

  Year Ended December 31,
  2017 2016 2015 2014 2013
  (in thousands, except share and per share data)
Consolidated Statement of Operations Data:                    
Revenues:                    
Licenses $123,610  $92,873  $71,273  $58,420  $43,488 
Maintenance and services  93,754   71,583   55,937   42,928   31,128 
Total revenues  217,364   164,456   127,210   101,348   74,616 
Cost of revenues(1)  20,873   15,843   12,019   9,911   6,476 
Gross profit  196,491   148,613   115,191   91,437   68,140 
Operating costs and expenses:                    
Research and development(1)  47,369   36,660   31,792   28,086   20,973 
Sales and marketing(1)  135,896   107,825   86,367   68,787   44,131 
General and administrative(1)  26,823   19,822   16,106   11,872   8,881 
Total operating expenses  210,088   164,307   134,265   108,745   73,985 
Operating loss  (13,597)  (15,694)  (19,074)  (17,308)  (5,845)
Financial income (expenses), net  2,362   (885)  (1,523)  (1,714)  (1,274)
Loss before income taxes  (11,235)  (16,579)  (20,597)  (19,022)  (7,119)
Income taxes  (2,459)  (1,131)  (686)  (376)  (356)
Net loss $(13,694) $(17,710) $(21,283) $(19,398) $(7,475)
Net loss per share of common stock, basic and diluted(2) $(0.50) $(0.67) $(0.84) $(0.91) $(1.93)
Weighted average shares used to compute net loss per share attributable to common stockholders, basic and diluted  27,467,440   26,406,312   25,198,546   21,242,313   3,880,761 

(1)       Includes non-cash stock-based compensation as follows:

27

  Year Ended December 31,
  2017 2016 2015 2014 2013
  (in thousands)
Cost of revenues $1,078  $699  $419  $192  $39 
Research and development  5,209   3,052   1,954   1,198   551 
Sales and marketing  8,542   6,104   3,041   2,478   841 
General and administrative  5,006   3,083   2,380   796   357 
Total $19,835  $12,938  $7,794  $4,664  $1,788 

(2)Basic and diluted net loss per share of common stock is computed based on the weighted average number of shares of common stock outstanding during each period. For additional information, see Note 2.s to our consolidated financial statements included elsewhere in this Annual Report.

  As of December 31,
  2017 2016 2015 2014 2013
  (in thousands)
Consolidated Balance Sheet Data:                    
Cash, cash equivalents and short-term investments $136,557  $113,808  $106,344  $111,695  $13,977 
Working capital  102,304   83,074   85,086   99,316   3,376 
Total assets  232,152   181,838   165,144   156,847   47,254 
Deferred revenues, current and long-term  80,925   62,040   48,771   37,217   28,700 
Warrants to purchase convertible preferred stock              2,866 
Convertible preferred stock              43,775 
Total stockholders’ equity (deficiency)  101,578   82,739   83,587   95,026   (43,008)

None.

Item 7.Management’s Discussion and Analysis of Financial Condition and Results of Operations

39


The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes appearing elsewhere in this Annual Report on Form 10-K. This discussion contains forward-looking statements that reflect our plans, estimates and beliefs, and involve risks and uncertainties. Our actual results and the timing of certain events could differ materially from those anticipated in these forward-looking statements as a result of several factors, including those discussed in the section titled “Risk Factors” included under Part I, Item 1A and elsewhere in this Annual Report. See “Special Note Regarding Forward-Looking Statements”Statements and Summary Risk Factors” in this Annual Report.


COVID-19 and the Digital Transformation

In December 2019, COVID-19 was first reported in China; in January 2020, the World Health Organization (”WHO”) declared it a Public Health Emergency of International Concern; and in March 2020, the WHO declared it a pandemic. The ongoing measures taken by many governments around the world in response to the pandemic together with its unpredictability and duration, have meaningfully impacted businesses and changed the threat landscape of company data.
We believe that COVID-19 accelerated the global digital transformation, which, as it continues to gain traction across almost all industries, changes the way we live and work, and impacts how data is stored, managed and accessed. This transformation has fueled, and we expect will continue to fuel, the secular trends that drive demand for our products, including the shift to the cloud; increase in cybercrime; and compliance with data-driven regulations. These trends impact the way organizations operate and have increased our long-term opportunity to help our customers protect their data, detect threats and achieve regulatory compliance.

Companies around the world are focused on the elevated risks associated with having a highly distributed workforce collaborating on multiple platforms and we believe this trend will continue in the long-term and that we are well positioned to capitalize on the opportunity ahead. As companies of all sizes and industries are increasingly facing cyberattacks, they understand that a data-centric approach to security is critical and that the aforementioned elevated risks are here for the long-term. This has caused significant customer engagement which has converted into new business and expansion of existing business.

Overview

Varonis is a pioneer in data security and analytics, fighting a different battle than conventional cybersecurity companies. We are pioneers because over a decademore than 15 years ago we recognized that enterprise capacity to create and share data far exceeded its capacity to protect it. We believed the vast movement of information from analog to digital mediumsthat rapid data growth combined with increasing information dependence would change both the global economy and the risk profiles of corporations and government.governments. This conviction has only strengthened over time. Since thenour founding, our focus has been on using innovation to address the cyber-implications of this movement,these trends, creating software that provides new ways to track, alert and protect data wherever it is stored.

Our software allows enterprises

In 2021, we introduced an update to protect data stored on premisesour platform to help customers combat insider and collaboration risks in the cloud:Microsoft 365. The update increases insight into organization-wide exposures related to Microsoft 365, adds new threat detection capabilities in Azure AD, adds support for additional NAS solutions and versions, and enhances search granularity for locating sensitive files and emails; confidential customer, patientpersonal data. We also launched DatAdvantage Cloud, introducing licenses and employee data; financial records; strategicsupport for additional cloud applications and product plans;infrastructure, including AWS, Box, GitHub, Google Drive, Jira, Okta, Salesforce, Slack and other intellectual property. RecognizingZoom. DatAdvantage Cloud will help customers visualize and prioritize their biggest cloud risks, proactively reduce their blast radius, and conduct faster cross-cloud investigations. Additionally, we introduced Data Classification Cloud for Google Drive and Box to help automatically identify sensitive information in these mission-critical SaaS applications. While we do not expect these products to meaningfully contribute to our 2022 revenues, we believe they offer significant potential in extending the complexities of securing data, we have built a single integrated platform for security and analytics to simplify and streamline security and data management.

28

The Varonis Data Security Platform built on patented technology,to cloud applications where our customers continue to move sensitive data. For a full business and product overview, see "Part I, Item 1. Business."


In the first quarter of 2019, we announced our strategic shift to a subscription-based business model, which allows enterprises to protect data against insider threats and cyberattacks. Our products enable enterprises to analyze data, account activity and user behavior to detect attacks. Our Data Security Platform prevents or limits unauthorized use of sensitive information, prevents potential cyberattacks and limits others by locking down sensitive and stale data. Our product efficiently sustains a secure state with automation and addresses additional important use cases including governance, compliance, classification and threat analytics. Our Data Security Platform is driven by a proprietary technology, our Metadata Framework, that extracts critical metadata, or data about data, from an enterprise’s IT infrastructure. Our Data Security Platform uses this contextual information to map functional relationships among employees, data objects, content and usage.

We started operations in 2005 with a vision to make enterprise data more accessible, manageable, secure and actionable. We began offering our flagship product, DatAdvantage, which provides centralized visibility for enterprise data, in 2006. Since then we have continued to invest in innovation and have consistently introduced new products to our customers. In 2006, we introduced DataPrivilege as our self-service web portal for business users. In 2008, we enhanced our DatAdvantage offering with DatAdvantage for UNIX/Linux. In 2009, we introduced the IDU Classification Framework (later renamed the Data Classification Engine) for sensitive data classification and DatAdvantage for SharePoint. We further enhanced our DatAdvantage offering by releasing DatAdvantage for Exchange in 2010, enabling our customers to exercise control overbetter unleash the information transferredpower of our platform through corporate e-mails. In 2011,faster adoption of our integrated products. The transition, which we introduced DatAdvantage for Directory Services for increased visibility into Active Directory.

In 2012, we released the Data Transport Engine for intelligent data migration and archiving and DatAnywhere for secure hybrid cloud collaboration. In 2013, we introduced DatAlert to monitor and alert on sensitive data and file activity. In 2014, we introduced DatAnswers, a secure enterprise search solution for enterprise data that delivers highly relevant and secure search results to enterprise employees, greatly improving their productivity. In 2015, we enhanced our DatAdvantage, DataPrivilege and Data Classification Engine offerings; with DatAdvantage supportcompleted in 2020, has positioned us well for the following Microsoft Office 365 data stores: Exchange Online, SharePoint Online, OneDrivefuture, and, Active Directory hostedalthough revenues are still primarily front-end loaded, they are more predictable and recurring in Azure; with DataPrivilege for SharePoint; and with Data Classification Engine for UNIX, SharePoint Online and OneDrive. In 2016, we enhanced our DatAdvantage offerings with additional Office 365 support; DatAnswers support for SharePoint Online and OneDrive; and introduced a new web UI for DatAlert for comprehensive security management and threat detection. In thatnature. For the year we also added additional user behavior analytics driven threat models to DatAlert to significantly enhance our detection of insider threats, including potential disgruntled employees, rogue administrators, hijacked accounts and malware, such as ransomware. We also established a behavioral research laboratory where a dedicated team of security experts and data scientists from Varonis continually research the latest threats and emerging security vulnerabilities and introduce new behavior-based threat models to DatAlert.

In 2017, we introduced the Automation Engine to allow customers to automatically repair and maintain file systems so that organizations are less vulnerable to attacks and security breaches, more compliant and consistently meeting a least privilege model. We enhanced DatAlert with DatAlert Analytics Rewind to allow customers to analyze past user and data activity to identify security breaches that may have occurred in the past and pre-emptively tune out false positives. We have continued to update our web UI for DatAlert and added new threat models to detect suspicious mailbox, Exchange and Exchange Online behaviors, password resets, unusual activity from personal devices and more. We introduced a new security dashboard in DatAlert, along with enhanced behavioral analytics, geolocation and more to make it easier than ever to perform security investigations and forensics. In 2017, we also released GDPR Patterns, part of the Data Classification Engine family, to help enterprises identify data that falls under the GDPR and expanded our offerings that can help enterprises meet compliance and regulation requirements. Finally, in early 2018, we introduced Varonis Edge to extend our proactive security approach to the perimeter enabling customers to spot signs of attack at the perimeter with telemetry from DNS, VPN and Web Proxies.

At the coreended December 31, 2021, 99% of our technology is our ability to intelligently extractlicenses revenues are subscriptions and analyze metadata from an enterprise’s vast, distributed data stores. The broad applicability99% of our technology has resulted in our customers deploying our platform for numerous use cases for security, IT, operations and business personnel.total revenues are recurring. We currently have six product families, and, asover thirty-five licenses. As of December 31, 2017, approximately 52%2021, 73% of our customers with 500 employees or more had purchased products in twofour or more families, one of which was DatAdvantage for all of these customers. We believe our existing customer base serves aslicenses, compared to 63% a strong source of incremental revenues given our broad platform of products, their growing volumesyear ago, and complexity of enterprise data and associated security concerns.41% purchased six or more licenses, compared to 30% a year ago. Our maintenance renewal rate for each of the years ended December 31, 2017, 20162021, 2020 and 2015 was2019 continued to be over 90%. Our key strategies to ensure and maintain oura high subscription and maintenance renewal rate include focusing on the quality and reliability of our customer service and support to

40


ensure our customers receive value from our products and providing consistent software upgrades and having sufficient dedicated renewal sales personnel.

29
enhancements when and if they are available.


We sell substantially all of our products and services to channel partners, including distributors and resellers, which sell to end-user customers, which we refer to in this report as our customers. We believe that our sales model, which combines the leverage of a channel sales model with our highly trained and professional sales force, has and will continue to play a major role in our ability to grow and to successfully deliver our unique value proposition for enterprise data. While our products serve customers of all sizes, in allacross industries and allacross geographies, the marketing focus and majority of our sales focus is on targeting organizations with 1,000 users or more who can make larger initial purchases with us and, over time, and have a greater potential lifetime value. As of December 31, 2017, we had approximately 6,250Our customers spanningspan leading firms in the financial services, public, healthcare, public, industrial, insurance, energy and utilities, technology, consumer and retail, education, media and entertainment and technologyeducation sectors. We believe our existing customer count isbase serves as a key indicatorstrong source of incremental future revenues given our market penetrationbroad platform of products, their growing volumes and the value that our products bring to our customer base. We also believe our existing customers represent significant future revenue opportunities for us.complexity of enterprise data and related security concerns. We will continue our focus on targeting organizations with 1,000 users or more who can make larger purchases with us initially and over time. The average spending per customer for each of the years ended December 31, 2017, 2016 and 2015 was approximately $83,000, $65,000 and $59,000, respectively.


We believe there is a significant long termlong-term growth opportunity in both domestic and foreign markets, which could include any organization that uses file shares, SaaS applications, intranets and email for collaboration, regardless of region.collaboration. For the year ended December 31, 2017, approximately 62%2021, 72% of our revenues were derived from the United States,North America, while Europe, the Middle East and Africa accounted for approximately 32%26% of our revenues were derived from EMEA and Rest of World (“ROW”) accounted for approximately 6% of our revenues. Growth in the US was strong, increasing 28% and 34%, respectively,2% from ROW. Additionally, total revenues grew approximately 33% for the three months and year ended December 31, 2017 as compared2021. We continue to the comparable periods in the prior year. In EMEA, growth for the three months and year ended December 31, 2017 was 52% and 34%, respectively, as compared to the comparable periods in the prior year. We expect both continued sales growth in the United StatesNorth America and international expansion to be key components of our long-term growth strategy, and we will continue to market our products and services in international markets.

strategy.


We plan to continue to expand our domestic and international operations as part of our long-term growth strategy. TheWhile the expansion of our domestic operations is focused primarily on our underpenetrated territories, the expansion of our international operations depends in particular on our ability to hire, integrate and retain local sales and marketing personnel in these international markets, acquire new channel partners and implement an effective marketing strategy. Given the nominal amount of our ROW revenues, our ROW revenue growth rates have fluctuated in the past and may fluctuate in the future based on the timing of deal closures. In addition, the further expansion of our international operations will increase our sales and marketing and general and administrative expenses and will subject us to a variety of risks and challenges, including those related to economic and political conditions in each region, compliance with foreign laws and regulations, and compliance with domestic laws and regulations applicable to our international operations.

We derive revenues from license sales of


Since inception, we have continued to scale our products, services, including initial maintenance contractsbusiness and professional services, and renewals. Substantially all of our license sales are derived from a platform of products, consisting of DatAdvantage, Data Classification Engine, DataPrivilege and Data Transport Engine. As of December 31, 2017, 2016 and 2015, 93.6%, 92.8% and 92.5% of our customers, respectively, had purchased DatAdvantage; 41.2%, 35.2% and 30.5% of our customers, respectively, had purchased Data Classification Engine; 15.1%, 16.0% and 17.2% of our customers, respectively, had purchased DataPrivilege and 6.3%, 5.5% and 4.5% of our customers, respectively, had purchased Data Transport Engine. As of December 31, 2017, 2016 and 2015, 41.1%, 44.7% and 47.4% of our customers, respectively, made standalone purchases of DatAdvantage, and less than 0.4% of our customers made standalone purchases of DataPrivilege. As of December 31, 2017, our customers made no standalone purchases of Data Classification Engine or Data Transport Engine. Licenses sales accountedexecute on strategic initiatives which we believe have positioned us for 56.9%, 56.5% and 56.0% of our total revenues fordurable long-term growth. For the years ended December 31, 2017, 20162021, 2020 and 2015,2019, subscription revenues were $268.9 million, $161.2 million, and $76.7 million, respectively, representing year-over-year growth of 67% and 110%. For the years ended December 31, 2021, 2020 and 2019, our total revenues were $390.1 million, $292.7 million and $254.2 million, respectively.

We have achieved significant This represents year-over-year growth of 33% for the year ended December 31, 2021 and scale in recent periods utilizing our15% for the year ended December 31, 2020, the year we transitioned to a subscription-based business model. For the years ended December 31, 2017, 20162021, 2020 and 2015, our revenues were $217.4 million, $164.5 million and $127.2 million, respectively, representing year-over-year growth of 32% and 29%. For the years ended December 31, 2017, 2016 and 2015,2019, we had operating losses of $13.6$98.7 million, $15.7$78.4 million and $19.1$76.0 million and net losses of $13.7$116.9 million, $17.7$94.0 million and $21.3$78.8 million, respectively.


Key Performance Indicators and Recent Business Highlights
Annual Recurring Revenues

Annual recurring revenues is a key performance indicator defined as the annualized value of active term-based subscription license contracts and maintenance contracts related to perpetual licenses in effect at the end of that period. Subscription license contracts and maintenance for perpetual license contracts are annualized by dividing the total contract value by the number of days in the term and multiplying the result by 365.

As of December 31, 2021, 2020 and 2019, ARR was $387.1 million, $287.3 million and $210.5 million, respectively, an increase of 35% and 37% period over period. The annualized value of contracts is a legal and contractual determination made by assessing the contractual terms with our customers. The annualized value of maintenance contracts is not determined by reference to historical revenues, deferred revenues or any other GAAP financial measure over any period. ARR is not a forecast of future revenues and can be impacted by contract start and end dates and renewal rates. We expect ARR to continue to increase in absolute dollars.

Components of Operating Results


41


Revenues

Our revenues consist of licenses and maintenance and services revenues.

License

Subscription Revenues. License Subscription revenues reflectare sold on-premises and are recognized at the revenues recognized from salespoint of time when the software licenses to new customerslicense has been delivered and sales of additional licenses to existing customers who can purchase additional users for existing licenses or purchase new licenses. Substantially all of our license revenues consist of revenues from perpetual licenses, under which we generally recognize the license fee portionbenefit of the arrangement upon delivery, assuming all revenue recognition criteria are satisfied. Customers may also purchase term license agreements, under which we recognize the license feeasset has transferred. Maintenance associated with subscription licenses is recognized ratably on a straight-line basis, over the term of the underlying maintenanceagreement. In 2021, we launched our cloud offering that allow customers to use hosted software and its revenue is recognized ratably over the associated contract whichperiod. As we only introduced these licenses in the second half of 2021, the contribution to total revenues has not yet been significant, nor is typically upit expected to one year.be significant in 2022. Subscription licenses have become the largest component of our revenues and are expected to be an even more significant portion of our total revenues in the future. Due to the timing of the renewals and the subscription renewal rates, we could produce significant variation in the revenues we recognize in a given period. We are focused on acquiring new subscription customers and increasing subscription revenues from our existing customers.

30

Maintenance and Services Revenues. Maintenance and services revenues consist of revenues from maintenance agreements of perpetual license sales and, to a lesser extent, professional services. Typically, when purchasing a perpetual license, a customer also purchases a one year maintenance contract for which we charge a percentage of the license fee. Customers may renew, and generally have renewed, their maintenance agreements for a fee that is based upon a percentage of the initial license fee paid. Customers with maintenance agreements are entitled to receive support and unspecified upgrades and enhancements when and if they become available during the maintenance period. We have experienced growth in maintenance revenues primarily due to increased license sales to new and existing customers and high annual retention of existing customers.available. We recognize the revenues associated with maintenance ratably on a straight-line basis, over the associated maintenancecontract period. We measure the perpetual license maintenance renewal rate for our customers over a 12-month period, based on a dollar maintenance renewal rate for contracts expiring during that time period. Our maintenance renewal rate for each of the years ended December 31, 2017, 20162021, 2020 and 2015 has been2019 continued to be over 90%. We have seen and expect to continue to see insignificant perpetual license revenues in the future and, therefore, we expect maintenance and support of perpetual licenses to continue to decline despite the strong renewal rates. We also offer professional services, generally provided on a time and materials basis, focused on both deployment and training our customers to fully leveragein the use of our products. We recognize the revenues associated with these professional services which are generally provided on a time and materials basis, as we deliver the services, provide the training or when the service term has expired.

Although professional services have always been a small percentage of our total revenues, we have recently seen, and expect to continue to see, that percentage decline as many of our newer licenses can provide remediation in more automated ways. As such, our overall maintenance and services revenues is also expected to continue to decline.


Perpetual License Revenues. Perpetual license revenues are generally recognized with the license fee portion of the arrangement upon delivery as the benefit of the asset has transferred. Due to the successful completion of our transition to a subscription-based business model, perpetual license revenues have meaningfully decreased and now represent an immaterial percentage of our total revenues.

The following table sets forth the percentage of our revenues that have been derived from licenses and maintenance and services revenues for the periods presented.

  Year Ended December 31,
  2017 2016 2015
  (as a percentage of total revenues)
Revenues:            
Licenses  56.9%  56.5%  56.0%
Maintenance and services  43.1%  43.5%  44.0%
Total revenues  100.0%  100.0%  100.0%

 Year Ended December 31,
 202120202019
 (as a percentage of total revenues)
Revenues:   
Subscriptions68.9 %55.1 %30.1 %
Maintenance and services30.6 %44.4 %53.3 %
Perpetual licenses0.5 %0.5 %16.6 %
Total revenues100.0 %100.0 %100.0 %
Our products are used by a wide range of enterprises, including Fortune 500 corporations and small and medium-sized businesses. As of December 31, 2017, we had approximately 6,250Our customers acrossspan a broad array of company sizesindustries and industriesare located in over 7585 countries.

Cost of Revenues, Gross Profit and Gross Margin


Our cost of revenues consists of cost of maintenance and services revenues. Cost of maintenance and services revenues consist primarily of salaries (including payroll tax expense related to stock-based compensation), employee benefits (including commissions and bonuses) and stock-based compensation for our maintenance and services employees; amortization of acquired intangible assets; travel expenses; and allocated overhead costs for facilities, IT and depreciation of equipment.depreciation. We recognize expenses related to maintenance and services as they are incurred. We expect that our cost of maintenance and services
42


revenues will increase in absolute dollars as we increasecontinue to invest in our headcount tocustomer success and support revenue growth.

teams and programs that play a critical role in our subscription-based business model and our overall renewals.


Gross profit is total revenues less total cost of revenues. Gross margin is gross profit expressed as a percentage of total revenues. Our gross margin has historically fluctuated slightly from period to period as a resultAs the majority of changes in the mix of licenseour expenses are relatively fixed quarter over quarter and maintenance and services revenues. Duedue to the seasonality of our business, the first quarter typically results in the lowest gross margin as our first quarter revenues have historically been the lowest for the year and the majority of our expenses are relatively fixed quarter over quarter.year. Conversely, the fourth quarter typically results in the highest gross margin as our fourth quarter revenues have historically been the highest for the year.

Operating Costs and Expenses

Our operating costs and expenses are classified into three categories: research and development, sales and marketing and general and administrative. For each category, the largest component is personnel costs, which consists of salaries (including payroll tax expense related to stock-based compensation), employee benefits (including commissions and bonuses) and stock-based compensation. Operating costs and expenses also include allocated overhead costs for depreciation of equipment.facilities, IT and depreciation. Allocated costs for facilities primarily consist of rent and office maintenance. Operating costs and expenses are generally recognized as incurred. As a company, we have always aimed to tie our level of investment in the business to the revenues we expect to achieve and we actively manage expenses across the business. We expect personnel costs to continue to increase in absolute dollars as we hire new employees to continue to grow our business.

31


Research and Development. Research and development expenses primarily consist of personnel costs attributable to our research and development personnel, as well as allocated overhead costs. We expense research and development costs as incurred. We expect that our research and development expenses will continue to increase in absolute dollars as we increase our research and development headcount to further strengthen our technology platform and invest in the development of both existing and new products.

products through the hiring of talented and capable employees.

Sales and Marketing. Sales and marketing expenses are the largest component of our operating costs and expenses and consist primarily of personnel costs, as well as marketing and business development costs, travel expenses, training and education and allocated overhead costs. We expect that sales and marketing expenses will continue to increase in absolute dollars as we plan to expand our sales and marketing efforts, both domestically and internationally. We also expect sales and marketing expenses to continue to be our largest category of operating costs and expenses as we continue to expand our business worldwide.

expenses.


General and Administrative.Administrative. General and administrative expenses mostly consist of personnel and facility-related costs for our executive, finance, legal, human resources and administrative personnel. Other expenses are comprised of legal, accounting and other consultant fees and other corporate expenses and allocated overhead. We expect that general and administrative expenseexpenses will increase in absolute dollars as we grow and expand our operations, including higher legal, corporate insurance and accounting expenses, and the additional costs of achieving and maintaining compliance with the Sarbanes-Oxley Act and related regulations.

operations.


Financial Income (Expenses), Net

Financial income (expenses), net consist primarily of foreign exchange gains or losses, amortization of debt discount and net interest.issuance costs, interest expense and interest income. Foreign exchange gains or losses relate to our business activities in foreign countries with different operational reporting currencies. As a result of our business activities in foreign countries, we expect that foreign exchange gains or losses will continue to occur due to fluctuations in exchange rates in the countries where we do business. Brexit,Other factors such as well as other member countries public discussions about the possibility of withdrawing from the European Union,economic instability could also contribute to instability and volatility in the global financial and foreign exchange markets, including volatility in the value of Pounds Sterling, Euros and other currencies. NetAmortization of debt discount and issuance costs relate to the 2025 Notes we issued in May 2020 and the Credit Facility we entered into in August 2020. Interest expense consists of the contractual interest expenses associated with the 2025 Notes. Interest income represents interest income received on our cash, cash equivalents, marketable securities and short-term investments.

deposits.

Income Taxes

We operate in several tax jurisdictions and are subject to taxes in each country or jurisdiction in which we conduct business. Earnings from our non-U.S. activities are subject to local country income tax and may be subject to U.S. income tax. To date, on a consolidated basis, we have incurred accumulated net losses and have not recorded any U.S. federal tax provisions.

provision. 


43


Because of our history of U.S. and Israel net operating losses, we have established a full valuation allowance against potential future benefits for deferred tax assets, including loss carryforwards, in those jurisdictions; however, we have recorded a deferred tax asset of $0.2 million as of December 31, 2017 for other foreign jurisdictions.that jurisdiction. Our income tax provision could be significantly impacted by estimates surrounding our uncertain tax positions and changes to our valuation allowance in future periods. We reevaluate the judgments surrounding our estimates and make adjustments as appropriate each reporting period.

Our Israeli subsidiary currently qualifies as a “Beneficiary Enterprise” which, upon fulfillment of certain conditions, allows it to qualify for a reduced tax rate based on the beneficiary program guidelines.

In addition, we are subject to the continuousregular examinations of our income tax returns by different tax authorities. For example, we are currently subject to a withholding tax audit in Israel and state tax audits in the United States. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes.

On December 22, 2017, the TCJA was signed into law making significant changes to the Code. These changes include, but are not limited to:

·A corporate tax rate decrease from 35% to 21% effective for tax years beginning after December 31, 2017;

·The transition of U.S international taxation from a worldwide tax system to a territorial system;

32

·A one-time transition tax on the mandatory deemed repatriation of cumulative foreign earnings as of December 31, 2017 (“Deemed Repatriation Transition Tax”);

·Taxation of global intangible low-taxed income (“GILTI”) earned by foreign subsidiaries beginning after December 31, 2017. The GILTI tax imposes a tax on foreign income in excess of a deemed return on tangible assets of foreign corporations; and

·Taxation of base erosion and anti-abuse (“BEAT”) payments made by U.S. corporations to foreign related parties. The BEAT tax applies only to corporation with average gross domestic sales of $500 million over three successive years.

We have calculated our best estimate of the impact of the TCJA in our year end income tax provision in accordance with our understanding of the TCJA and guidance available as of the date of this filing. As a result:

·While we are able to make reasonable estimates of the impact of the reduction in corporate rate and the deemed repatriation transition tax, the final impact of the TCJA may differ from these estimates, due to, among other things, changes in our interpretations and assumptions, additional guidance that may be issued by the IRS, and actions we may take. We are continuing to gather additional information to determine the final impact of the TCJA.

·Due to the aggregated accumulated deficits of our foreign subsidiaries, we should not be subject to any transition tax under this provision of the TCJA.

·Because of the complexity of the new GILTI tax rules, we have not yet completed our analysis of the GILTI tax rules and are not yet able to reasonably estimate the effect of this provision of the TCJA or make an accounting policy election for the ASC 740 treatment of the GILTI tax.

We should not be subject to BEAT during 2018 due to the gross domestic sales threshold.

33

Results of Operations

The following tables are a summary of our consolidated statements of operations in dollars and as a percentage of our total revenues.

  Year Ended December 31
  2017 2016 2015
  (in thousands)
Statement of Operations Data:            
Revenues:            
Licenses $123,610  $92,873  $71,273 
Maintenance and services  93,754   71,583   55,937 
Total revenues  217,364   164,456   127,210 
Cost of revenues  20,873   15,843   12,019 
Gross profit  196,491   148,613   115,191 
Operating costs and expenses:            
Research and development  47,369   36,660   31,792 
Sales and marketing  135,896   107,825   86,367 
General and administrative  26,823   19,822   16,106 
Total operating expenses  210,088   164,307   134,265 
Operating loss  (13,597)  (15,694)  (19,074)
Financial income (expenses), net  2,362   (885)  (1,523)
Loss before income taxes, net  (11,235)  (16,579)  (20,597)
Income taxes  (2,459)  (1,131)  (686)
Net loss $(13,694) $(17,710) $(21,283)

  Year Ended December 31,
  2017 2016 2015
  (as a percentage of total revenues)
Statement of Operations Data:            
Revenues:            
Licenses  56.9%  56.5%  56.0%
Maintenance and services  43.1   43.5   44.0 
Total revenues  100.0   100.0   100.0 
Cost of revenues  9.6   9.6   9.4 
Gross profit  90.4   90.4   90.6 
Operating costs and expenses:            
Research and development  21.8   22.3   25.0 
Sales and marketing  62.6   65.6   67.9 
General and administrative  12.3   12.1   12.7 
Total operating expenses  96.7   100.0   105.6 
Operating loss  (6.3)  (9.6)  (15.0)
Financial income (expenses), net  1.1   (0.5)  (1.2)
Loss before income taxes, net  (5.2)  (10.1)  (16.2)
Income taxes  (1.1)  (0.7)  (0.5)
Net loss  (6.3)%  (10.8)%  (16.7)%

34

 Year Ended December 31,
 202120202019
 (in thousands)
Statement of Operations Data:   
Revenues:   
Subscriptions$268,942 $161,188 $76,730 
Maintenance and services119,302 130,028 135,367 
Perpetual licenses1,890 1,473 42,093 
Total revenues390,134 292,689 254,190 
Cost of revenues59,399 44,261 35,144 
Gross profit330,735 248,428 219,046 
Operating expenses:   
Research and development137,882 99,363 80,764 
Sales and marketing230,314 179,902 169,898 
General and administrative61,233 47,578 44,371 
Total operating expenses429,429 326,843 295,033 
Operating loss(98,694)(78,415)(75,987)
Financial expenses, net(12,145)(7,483)(389)
Loss before income taxes(110,839)(85,898)(76,376)
Income taxes(6,022)(8,112)(2,388)
Net loss$(116,861)$(94,010)$(78,764)

44


 Year Ended December 31,
 202120202019
 (as a percentage of total revenues)
Statement of Operations Data:   
Revenues:   
Subscriptions68.9 %55.1 %30.1 %
Maintenance and services30.6 44.4 53.3 
Perpetual licenses0.5 0.5 16.6 
Total revenues100.0 100.0 100.0 
Cost of revenues15.2 15.1 13.8 
Gross profit84.8 84.9 86.2 
Operating expenses: 
Research and development35.4 33.9 31.8 
Sales and marketing59.0 61.5 66.8 
General and administrative15.7 16.3 17.5 
Total operating expenses110.1 111.7 116.1 
Operating loss(25.3)(26.8)(29.9)
Financial expenses, net(3.1)(2.5)(0.1)
Loss before income taxes(28.4)(29.3)(30.0)
Income taxes(1.6)(2.8)(1.0)
Net loss(30.0)%(32.1)%(31.0)%
Comparison of Years Ended December 31, 20172021 and 2016

2020

Revenues

  Year Ended
December 31,
  
  2017 2016 % Change
  (in thousands)  
Revenues:            
Licenses $123,610  $92,873   33.1%
Maintenance and services  93,754   71,583   31.0%
Total revenues $217,364  $164,456   32.2%

  Year Ended December 31,
  2017 2016
  (as a percentage of total revenues)
Revenues:        
Licenses  56.9%  56.5%
Maintenance and services  43.1%  43.5%
Total revenues  100.0%  100.0%

Total revenue growth was achieved due

 Year Ended December 31, 
 20212020% Change
 (in thousands) 
Revenues:   
Subscriptions$268,942 $161,188 66.8 %
Maintenance and services119,302 130,028 (8.2)%
Perpetual licenses1,890 1,473 28.3 %
Total revenues$390,134 $292,689 33.3 %
 Year Ended December 31,
 20212020
 (as a percentage of total revenues)
Revenues:  
Subscriptions68.9 %55.1 %
Maintenance and services30.6 %44.4 %
Perpetual licenses0.5 %0.5 %
Total revenues100.0 %100.0 %
45


Subscription revenues increased 67% from $161.2 million for the year ended December 31, 2020 to increased demand$268.9 million for our products and services from existing and new customers, mostly in the domestic market, as well as in international markets.year ended December 31, 2021. The increase in licensesubscription revenues was driven by sales to existing customers larger aggregate sales to 987expanding their licenses, new customers in 2017customer acquisitions and our high subscription renewal rate. Total revenues increased approximately 33% for the year ended December 31, 2021 as compared to the aggregate sales to 1,098 new customers in 2016year ended December 31, 2020. ARR was $387.1 million and sales of new products. As$287.3 million as of December 31, 20172021 and 2016, we had approximately 6,250 and approximately 5,350 customers, respectively. Almost all2020, respectively, representing an increase of our license revenues was attributable to sales of perpetual licenses.35%. The increaseanticipated decrease in maintenance and services revenues was primarily due to an increase in the sale of maintenance agreements resulting from the growth of our installed customer base. In each of 2017 and 2016,insignificant new perpetual licenses revenue despite our maintenance renewal rate wascontinuing to be over 90%. Of for each of the licenseyears ended December 31, 2021 and first year2020, as well as, newer licenses providing remediation in more automated ways, requiring less professional services time. As a result, we expected, and continue to expect less associated maintenance and services revenues recognized in the year ended December 31, 2017, 54% was attributable to revenues from new customers, and 46% was attributable to revenues from existing customers. Of the license and first year maintenance and services revenues recognized in the year ended December 31, 2016, 58% was attributable to revenues from new customers, and 42% was attributable to revenues from existing customers.future. As of December 31, 2017 and 2016, 52% and 48%2021, 73% of our customers respectively,with 500 employees or more had purchased twofour or more product families.

licenses, compared to 63% a year ago, and 41% purchased six or more licenses, compared to 30% a year ago.


Cost of Revenues and Gross Margin

  Year Ended
December 31,
  
  2017 2016 % Change
  (in thousands)     
Cost of revenues $20,873  $15,843   31.7%

  Year Ended December 31,
  2017 2016
  (as a percentage of total revenues)
Total gross margin  90.4%  90.4%

 Year Ended December 31, 
 20212020% Change
 (in thousands) 
Cost of revenues$59,399 $44,261 34.2 %
 Year Ended December 31,
 20212020
 (as a percentage of total revenues)
Total gross margin84.8 %84.9 %
The increase in cost of revenues was primarily related to an increase of $3.7$13.4 million in salaries and benefits and stock basedstock-based compensation expense due to increased headcount for customer success and support personnel to supportensure high customer satisfaction and maintain our greater revenues and highstrong renewal rate andrates. The increase was also due to a $0.9$1.5 million increase in amortization of acquired intangible assets and facilities and allocated overhead costs.

35


Operating Costs and Expenses

  Year Ended
December 31,
  
  2017 2016 % Change
  (in thousands)  
Operating costs and expenses:            
Research and development $47,369  $36,660   29.2%
Sales and marketing  135,896   107,825   26.0%
General and administrative  26,823   19,822   35.3%
Total operating expenses $210,088  $164,307   27.9%

  Year Ended December 31,
  2017 201
  (as a percentage of total revenues)
Operating costs and expenses:        
Research and development  21.8%  22.3%
Sales and marketing  62.6%  65.6%
General and administrative  12.3%  12.1%
Total operating expenses  96.7%  100.0%

 Year Ended December 31, 
 20212020% Change
 (in thousands) 
Operating costs and expenses:   
Research and development$137,882 $99,363 38.8 %
Sales and marketing230,314 179,902 28.0 %
General and administrative61,233 47,578 28.7 %
Total operating expenses$429,429 $326,843 31.4 %
 Year Ended December 31,
 20212020
 (as a percentage of total revenues)
Operating costs and expenses:  
Research and development35.4 %33.9 %
Sales and marketing59.0 %61.5 %
General and administrative15.7 %16.3 %
Total operating expenses110.1 %111.7 %
The increase in research and development expenses was primarily related to an increase of $8.7$36.7 million in salaries and stock basedbenefits and stock-based compensation expense resulting from increased headcount as part of our focus on enhancing and developing our existing and new products. The remainderproducts, including personnel costs related to our acquisition in the fourth quarter of the increase was attributable to a $1.6 million increase in facilities and allocated overhead costs.

2020.

46


The increase in sales and marketing expenses was primarily related to a $23.4$49.3 million increase in salaries and benefits and stock basedstock-based compensation expense due to increased headcount to expand our sales force and commissions on increased customer orders. The remainder of the increase was attributable to a $3.3 million increase in facilities and allocated overhead costs and a $0.6 million increase in marketing related expenses.


The increase in general and administrative expenses was primarily related to an increase of $5.0$13.0 million in salaries and benefits and stock basedstock-based compensation expense primarily due to increased headcount to support the overall growth of our businessbusiness.

Financial Expenses, Net
 Year Ended December 31, 
 20212020% Change
 (in thousands) 
Financial expenses, net$(12,145)$(7,483)62.3 %
The increase in financial expenses, net was primarily due to the amortization of debt discount and an increase of $1.6 million of other expenses predominately relating to IT.

Financial issuance costs and interest expense on our convertible senior notes and revolving credit facility.

Income (Expenses), Net

  Year Ended
December 31,
  
  2017 2016 % Change
  (in thousands)  
Financial income (expenses), net $2,362  $(885)  366.9%

Financial income (expense), netTaxes

 Year Ended December 31, 
 20212020% Change
 (in thousands) 
Income taxes$(6,022)$(8,112)(25.8)%
Income taxes for the year ended December 31, 2017 was primarily comprised of foreign currency gains compared to foreign currency losses for the year ended December 31, 2016.

Income Taxes

  Year Ended
December 31,
  
  2017 2016 % Change
  (in thousands)  
Income taxes $(2,459) $(1,131)  (117.4)%

Income taxes for the years ended December 31, 2017 and 20162021 were comprised primarily of foreign income taxes and state taxes.

36
Income taxes for the year ended December 31, 2020 were comprised primarily of a one-time tax expense related to our acquisition, foreign income taxes and state taxes.


Inflation
We do not believe that inflation rates have had a material effect on our business, financial condition or results of operations in the last three fiscal years. If our costs were to become subject to significant inflationary pressures, we may not be able to fully offset such higher costs through price increases. Our inability or failure to do so could harm our business, financial condition and results of operations.

Comparison of Years Ended December 31, 20162020 and 2015

Revenues

  Year Ended
December 31,
  
  2016 2015 % Change
  (in thousands)  
Revenues:            
Licenses $92,873  $71,273   30.3%
Maintenance and services  71,583   55,937   28.0%
Total revenues $164,456  $127,210   29.3%

  Year Ended December 31,
  2016 2015
  (as a percentage of total revenues)
Revenues:        
Licenses  56.5%  56.0%
Maintenance and services  43.5%  44.0%
Total revenues  100.0%  100.0%

Total revenue growth was achieved due to increased demand for our products and services from existing and new customers, mostly in the domestic market, as well as in international markets. The increase in license revenues was driven by sales to 1,098 new customers in 2016 compared to 1,065 new customers in 2015, sales to existing customers and sales of new products. As of December 31, 2016 and 2015, we had approximately 5,350 and approximately 4,350 customers, respectively. Almost all2019


For a comparison of our license revenues was attributable to salesresults of perpetual licenses. The increase in maintenance and services revenues was primarily due to an increase in the sale of maintenance agreements resulting from the growth of our installed customer base. In each of 2016 and 2015, our maintenance renewal rate was over 90%. Of the license and first year maintenance and services revenues recognized in the year ended December 31, 2016, 58% was attributable to revenues from new customers, and 42% was attributable to revenues from existing customers. Of the license and first year maintenance and services revenues recognized in the year ended December 31, 2015, 63% was attributable to revenues from new customers, and 37% was attributable to revenues from existing customers. As of December 31, 2016 and 2015, 48% and 45% of our customers, respectively, had purchased two or more product families.

Cost of Revenues and Gross Margin

  Year Ended
December 31,
  
  2016 2015 % Change
  (in thousands)  
Cost of revenues $15,843  $12,019   31.8%

  Year Ended December 31,
  201 2015
  (as a percentage of total revenues)
Total gross margin  90.4%  90.6%

The increase in cost of revenues was primarily related to an increase of $3.7 million in salaries and benefits and stock based compensation expense due to increased headcount for support.

37

Operating Costs and Expenses

  Year Ended
December 31,
  
  2016 2015 % Change
  (in thousands)  
Operating costs and expenses:            
Research and development $36,660  $31,792   15.3%
Sales and marketing  107,825   86,367   24.8%
General and administrative  19,822   16,106   23.1%
Total operating expenses $164,307  $134,265 �� 22.4%

  Year Ended December 31,
  2016 2015
  (as a percentage of total revenues)
Operating costs and expenses:        
Research and development  22.3%  25.0%
Sales and marketing  65.6%  67.9%
General and administrative  12.1%  12.7%
Total operating expenses  100.0%  105.6%

The increase in research and development expenses was primarily related to an increase of $4.7 million in salaries and stock based compensation expense resulting from increased headcount as part of our focus on enhancing and developing our existing and new products.

The increase in sales and marketing expenses was primarily related to a $19.6 million increase in salaries and benefits and stock based compensation expense due to increased headcount to expand our sales force, and commissions on increased customer orders. The remainder of the increase was attributable to a $1.3 million increase in marketing related expenses.

The increase in general and administrative expenses was primarily related to an increase of $3.3 million in salaries and benefits and stock based compensation expense due to increased headcount to support the overall growth of our business and an increase of $0.4 million of other expenses predominately relating to IT.

Financial Expenses, Net

  Year Ended
December 31,
  
  2016 2015 % Change
  (in thousands)  
Financial expenses, net $(885) $(1,523)  41.9%

For the years ended December 31, 2016 and 2015, financial expenses, net were primarily comprised of foreign exchange losses.

Income Taxes

  Year Ended
December 31,
  
  2016 2015 % Change
  (in thousands)  
Income taxes $(1,131) $(686)  (64.9)%

Income taxesoperations for the years ended December 31, 20162020 and 2015 were comprised primarily2019, see “Part II, Item 7. Management’s Discussion and Analysis of foreign income taxesFinancial Condition and state taxes.

38

Quarterly Results of Operations

The following table sets forth” of our unaudited quarterly consolidated statement of operations dataAnnual Report on Form 10-K for each of the eight quartersyear ended December 31, 2017. The data presented below has been prepared2020, filed with the SEC on the same basis as the audited consolidated financial statements included elsewhere in this Annual Report and, in the opinion of management, reflects all adjustments, consisting only of normal recurring adjustments, necessary for a fair presentation of this data. ThisFebruary 9, 2021, which comparative information should be read in conjunction with our consolidated financial statements and related notes included elsewhere in this Annual Report. The results of historical periods are not necessarily indicative of the results of operations for a full year or any future period.

  Three Months Ended
  Dec. 31,
2017
 Sept. 30,
2017
 June 30,
2017
 March 31,
2017
 Dec. 31,
2016
 Sept. 30,
2016
 June 30,
2016
 March 31,
2016
  (in thousands)
Revenues:                                
Licenses $46,626  $29,409  $28,420  $19,155  $34,696  $22,591  $21,742  $13,844 
Maintenance and services  26,583   24,192   21,754   21,225   19,713   18,346   16,899   16,626 
Total revenues  73,209   53,601   50,174   40,380   54,409   40,937   38,641   30,470 
Cost of revenues (1)  5,887   5,436   4,878   4,672   4,510   4,116   3,721   3,496 
Gross profit  67,322   48,165   45,296   35,708   49,899   36,821   34,920   26,974 
Operating costs and expenses:                                
Research and development (1)  13,559   11,903   11,498   10,409   9,627   9,290   8,905   8,837 
Sales and marketing (1)  39,723   32,802   32,560   30,811   30,212   26,410   26,840   24,364 
General and administrative  (1)  8,017   6,711   6,582   5,513   5,449   5,051   4,760   4,562 
Total operating expenses  61,299   51,416   50,640   46,733   45,288   40,751   40,505   37,763 
Operating income (loss)  6,023   (3,251)  (5,344)  (11,025)  4,611   (3,930)  (5,585)  (10,789)
Financial income (expenses), net  321   622   950   469   (739)  (187)  (605)  645 
Income (loss) before income taxes  6,344   (2,629)  (4,394)  (10,556)  3,872   (4,117)  (6,190)  (10,144)
Provision for income taxes  (810)  (685)  (641)  (323)  (350)  (272)  (303)  (206)
Net income (loss) $5,534  $(3,314) $(5,035) $(10,879) $3,522  $(4,389) $(6,493) $(10,350)

39
is herein incorporated by reference.

  Three Months Ended
  Dec. 31,
2017
 Sept. 30,
2017
 June 30,
2017
 March 31,
2017
 Dec. 31,
2016
 Sept. 30,
2016
 June 30,
2016
 March 31,
2016
  (as a percentage of total revenues)
Revenues:                                
Licenses  63.7%  54.9%  56.6%  47.4%  63.8%  55.2%  56.3%  45.4%
Maintenance and services  36.3   45.1   43.4   52.6   36.2   44.8   43.7   54.6 
Total revenues  100.0   100.0   100.0   100.0   100.0   100.0   100.0   100.0 
Cost of revenues  8.0   10.1   9.7   11.6   8.3   10.1   9.6   11.5 
Gross profit  92.0   89.9   90.3   88.4   91.7   89.9   90.4   88.5 
Operating costs and expenses:                                
Research and development  18.5   22.2   22.9   25.8   17.7   22.7   23.1   29.0 
Sales and marketing  54.3   61.2   64.9   76.2   55.5   64.5   69.5   79.9 
General and administrative  11.0   12.6   13.1   13.7   10.0   12.3   12.3   15.0 
Total operating expenses  83.8   96.0   100.9   115.7   83.2   99.5   104.9   123.9 
Operating income (loss)  8.2   (6.1)  (10.6)  (27.3)  8.5   (9.6)  (14.5)  (35.4)
Financial income (expenses), net  0.5   1.2   1.9   1.2   (1.4)  (0.5)  (1.5)  2.1 
Income (loss) before income taxes  8.7   (4.9)  (8.7)  (26.1)  7.1   (10.1)  (16.0)  (33.3)
Provision for income taxes  (1.1)  (1.3)  (1.3)  (0.8)  (0.6)  (0.6)  (0.8)  (0.7)
Net income (loss)  7.6%  (6.2)%  (10.0)%  (26.9)%  6.5%  (10.7)%  (16.8)%  (34.0)%

(1)Includes non-cash stock-based compensation expense and payroll tax expense related to stock-based compensation as follows:

  Three Months Ended
  Dec. 31,
2017
 Sept. 30,
2017
 June 30,
2017
 March 31,
2017
 Dec. 31,
2016
 Sept. 30,
2016
 June 30,
2016
 March 31,
2016
  (in thousands)
Cost of revenues $295  $283  $273  $227  $195  $186  $172  $146 
Research and development  1,404   1,374   1,301   1,130   789   805   793   665 
Sales and marketing  2,265   1,856   2,362   2,059   1,688   1,613   1,628   1,175 
General and administrative  1,426   1,269   1,323   988   811   854   780   638 
Total non-cash stock-based compensation expense related to employees and consultants $5,390  $4,782  $5,259  $4,404  $3,483  $3,458  $3,373  $2,624 

                 
  Three Months Ended
  Dec. 31,
2017
 Sept. 30,
2017
 June 30,
2017
 March 31,
2017
 Dec. 31,
2016
 Sept. 30,
2016
 June 30,
2016
 March 31,
2016
  (in thousands)
Cost of revenues $21  $25  $12  $33  $2  $2  $9  $13 
Research and development  12   27   13   15   9   9   2   8 
Sales and marketing  243   213   166   319   15   40   60   63 
General and administrative  8   8   8   35   2   3   8   14 
Total payroll tax expense related to stock-based compensation $284  $273  $199  $402  $28  $54  $79  $98 

40

Seasonality and Quarterly Trends

Our quarterly results reflect seasonality in the sale of our products and services. Historically, we have experienced a pattern of increased license sales in the fourth quarter. This trend makes it difficult to achieve sequential revenue growth in the first quarter of the following year. Because of customer budget and purchasing trends, demand for our products and services is typically slowest in the first quarter, resulting in a decrease in quarterly revenues from the fourth quarter to the first quarter of the subsequent fiscal year. We expect these seasonal patterns to continue in the future. Our gross margins and operating lossmargins have been affected by these historical trends because the majority of our expenses are relatively fixed quarter over quarter. The timing of revenues in relation to ourOur expenses, much of which doesdo not vary directly with revenues, hasand the seasonal pattern described above have an impact on the cost of revenues, research and development expenses, sales and marketing expenses and general and administrative expenses as a percentage of revenues in each calendar quarter during the year. The majority of our expenses isare personnel-related costs, which consists of salaries (including payroll tax expense related to stock-based compensation), employee benefits (including commissions and bonuses) and stock-based compensation. As a result, we have not experienced significant seasonal fluctuations in the timing of expenses
47


from period to period. Although these seasonal factors are common in the technology industry, historical patterns should not be considered a reliable indicator of our future sales activity or performance.

Our revenues increased in each quarter as compared with the same quarter in the prior year due to an increase in sales of our licenses to new customers as well as incremental sales to existing customers and due to increases in our maintenance and services revenues primarily resulting from increases in our installed base of customers.

Cost of revenues has increased in each quarter as compared with the same quarter in the prior year primarily due to the increased cost of providing maintenance and services to our expanding customer base.

Total operating costs and expenses increased in each quarter as compared with the same quarter in the prior year, primarily due to the addition of personnel in connection with the expansion of our business. Furthermore, our commission expense has historically been the greatest towards the end of the year due to increased commissions earned on customer orders entered at year end.

Liquidity and Capital Resources

The following table shows our liquidity and capital resources as of and our cash flows from operating activities, investing activities and financing activities for the stated periods:

  Year Ended December 31,
  2017 2016 2015
  (in thousands)
Net cash provided by (used in) operating activities $16,351  $7,347  $(2,729)
Net cash used in investing activities  (20,001)  (12,324)  (26,522)
Net cash provided by financing activities  12,083   4,072   2,055 
Increase (decrease) in cash, cash equivalents and restricted cash $8,433  $(905) $(27,196)

years ended December 31, 2021 and 2020. For a discussion of our liquidity and capital resources as of and our cash flow activities for the fiscal year ended December 31, 2019, see “Part II, Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” of our Annual Report on Form 10-K for the year ended December 31, 2020, filed with the SEC on February 9, 2021, which discussion is herein incorporated by reference.

 Year Ended December 31,
 20212020
 (in thousands)
Net cash provided by (used in) operating activities$7,178 $(5,842)
Net cash provided by (used in) investing activities54,379 (54,748)
Net cash provided by financing activities510,112 225,753 
Increase in cash and cash equivalents$571,669 $165,163 
On December 31, 2017,2021, our cash and cash equivalents and short-term investmentsdeposits of $136.6$807.6 million were held for working capital purposes and were investedheld primarily in short-term investments.cash and money market funds. We intendhave proactively taken steps to increase our investment in capital expenditures in 2018available cash, including, but not limited to, supportissuing a follow-on equity offering and the growth in our business2025 Notes, and operations. Wewe believe that our existing cash and cash equivalents, short-term investmentsdeposits and cash flow from operations will be sufficient to fund our operations and capital expenditures for at least the next 12 months. Our future capital requirements will depend on many factors, including our rate of revenue growth, timing of renewals and subscription renewal rates, the expansion of our sales and marketing activities, the timing and extent of spending to support product development efforts and expansion into new geographic locations, the timing of introductions of new software products and enhancements to existing software products, the continuing market acceptance of our software offerings and our use of cash to pay for acquisitions, if any.

41


Operating Activities

Net cash provided by

Our operating activities isare driven by sales of our products less costs and expenses, primarily payroll and related expenses, and adjusted for certain non-cash items, mainly depreciation and amortization, stock-based compensation, amortization of deferred commissions, noncash operating lease costs and amortization of debt discount and issuance costs, and changes in operating assets and liabilities. Changes in operating assets and liabilities are driven mainly by collection of accounts receivable from the sales of our software products and deferred revenues which represents unearned amounts billed to our channel partners, related to these sales.


For 2017,2021, cash inflows from ourprovided by operating activities were $16.4 million, compared to$7.2 million. We have observed two seasonal patterns that impact our net cash provided by operating activities. First, a majority of our sales are made during the last three weeks of the quarter. Second, the highest dollar amount of sales of our products and services occurs in the fourth quarter. Consequently, we end the fourth quarter with our highest accounts receivable balance of any quarter which in turn generates the greatest amount of collections in the following quarter. In addition, there is negative sequential revenue in the first quarter, which results in a relatively lower amount collected during the second quarter. These seasonal trends also impact our operating loss because the majority of our expenses are relatively fixed in the short-term. For 2021, sources of cash inflows of $7.3were $33.0 million, for the prior year. Our $13.7 millionwhich included our net loss includedof $116.9 million, offset by non-cash charges of $23.1 million driven primarily by increased headcount$149.9 million. Additional sources of our sales force and R&D personnel. Net loss was further offset bycash inflows were from changes in our working capital, including an $18.9 million increase in deferred revenues and a $14.5$5.9 million increase in accrued expenses and other short term liabilities, which werea $5.4 million increase in deferred revenues, a $4.5 million increase in trade payables, a $1.6 million increase in other long-term liabilities and a $1.4 million decrease in other long-term assets. This was partially offset by a $21.7$23.0 million increase in accounts receivable. This increase in working capital was impacted by the increased sales for the year ended December 31, 2017 and consistent with the seasonal pattern discussed above. Other changes in our working capital included an increase of $3.3 million in prepaid expenses and other current assets, a decrease of $0.7 million in accounts payable due to timing of payments and a decrease of $0.7 million in other long term liabilities. Our days’ sales outstanding (“DSO”) for the three months and year ended December 31, 20172021 was 7774 and 72 days,69, respectively.

For 2016, cash inflows from our operating activities were $7.3 million, compared to Other sources of cash outflows of $2.7were from a $21.7 million for the prior year. Our $17.7 million net loss included non-cash charges of $15.1 million driven primarily by increased headcount of our sales force and R&D personnel. Net loss was further offset by changes in our working capital, including a $13.3 million increase in deferred revenues and a $5.3 million increase in accrued expenses and other short term liabilities which were partially offset by a $6.4 million increase in accounts receivable. This increase in working capital was impacted by the increased sales for the year ended December 31, 2016 and consistent with the seasonal pattern discussed above. Other changes in our working capital included a decrease of $1.3 million in accounts payable due to timing of payments and a decrease of $1.0 million in prepaid expenses and other current assets.assets (including deferred commissions).


For 2020, cash used in operating activities were $5.8 million.  For 2020, sources of cash outflows were from changes in working capital, including a $19.7 million increase in prepaid expenses and other current assets (including deferred commissions) and a $19.1 million increase in accounts receivable. Our DSO for the three months and year ended December 31, 20162020 was 74 days.

For 2015,77 and 76, respectively. Additional sources of cash outflows were from a $0.3 million decrease in trade payables and

48


a $0.2 million decrease in deferred revenues. This was partially offset by $10.4 million from our operating activities were $2.7 million, compared to cash outflows of $7.1 million for the prior year, mainly related to an increase innet loss excluding non-cash charges, which exceeded the increase in net loss year over year. Our $21.3 million net loss included non-cash charges of $9.4 million driven primarily by increased headcount of our sales force and R&D personnel. Net loss was further offset by changes in our working capital, including an $11.6 million increase in deferred revenues and a $6.3$16.1 million increase in accrued expenses and other short term liabilities, which were partially offset by a $9.6$5.5 million increase in accounts receivable. This increase in working capital was impacted by the increased sales for the year ended December 31, 2015other long-term liabilities and consistent with the seasonal pattern discussed above. Other changes in our working capital included a decrease of $0.8$1.4 million in prepaid expenses and other current assets and an increase of $0.1 milliondecrease in other long term liabilities. Our DSO for the three months and year ended December 31, 2015 was 80 and 84 days, respectively.

long-term assets.

Investing Activities

Our investing activities consist primarily of capital expenditures to purchase property and equipment, including leasehold improvements, salespurchase and purchasessale of short-term investmentsdeposits and changes in our restricted cash.marketable securities. In the future, we expect to continue to incur capital expenditures to support our expanding operations.


During 2017,2021, net cash used inprovided by investing activities of $20.0$54.4 million was primarily attributable to an increase$34.1 million of $14.7net proceeds from marketable securities and $30.8 million of net proceeds from short-term and long-term deposits. This was partially offset by $10.5 million in short-term investments and capital expenditures of $5.3 million to support our growth during the period including hardware, software, office equipment and leasehold improvements.

improvements mainly in connection with existing office space.


During 2016,2020, net cash used in investing activities of $12.3$54.7 million was attributable to $29.4 million of cash paid for an acquisition, a $22.7 million increase of $8.5in short-term and long-term deposits and $10.1 million in short-term investments and capital expenditures of $3.8 million to support our growth during the period including hardware, software, office equipment and leasehold improvements.

During 2015, net cash usedimprovements mainly in investing activitiesconnection with new office space that we entered into prior to the outbreak of $26.5the pandemic. This was partially offset by a $7.4 million was primarily attributable to an increase of $22.0 milliondecrease in short-term investments and capital expenditures of $4.5 million to support our growth during the period including hardware, software, office equipment and leasehold improvements.

42
marketable securities.


Financing Activities

In 2017, 2016 and 2015,2021, net cash provided by financing activities of $12.1$510.1 million $4.1 million and $2.1 million, respectively, was attributable to $500.0 million of net proceeds from a public follow-on offering of equity and $10.1 million of net proceeds from employee stock plans.

Promissory Note


In 2020, net cash provided by financing activities of $225.8 million was attributable to $245.3 million of net proceeds from the issuance of convertible senior notes and $9.8 million of net proceeds from employee stock plans. This was partially offset by $29.3 million related to purchases of capped calls associated with the convertible senior notes.

Revolving Credit Facility

On March 31, 2014,August 21, 2020, we entered into the Credit and Security Agreement, for a promissory notethree-year secured revolving credit facility of $70.0 million, with a letter of credit sublimit of $15.0 million and related security documents with Bank Leumi USA. We may borrowan accordion feature under which we can increase the credit facility to up to $7.0 million against certain$90.0 million. For information regarding the revolving credit facility, refer to Note 2 of our accounts receivable outstanding amount, based on several conditions, at an annual interest rate of the Wall Street Journal Prime Rate less 0.15%, provided that the annual interest rate applicable to advances will not be lower than 4.10%. consolidated financial statements.

As of December 31, 2017, that rate amounted to 4.35%. This promissory note enables us, among other things, to engage in foreign currency hedging transactions with Bank Leumi USA to manage our exposure to foreign currency risk without restricted cash requirements. We may borrow under the promissory note until August 15, 2018 at which time the principal sum of each such loan, together with accrued and unpaid interest payable, will become due and payable. As of December 31, 2017,2021, we had no balance outstanding underon the promissory note. As partCredit Facility and we were in compliance with all financial covenants and non-financial covenants.

Convertible Notes

On May 11, 2020, we issued $253.0 million aggregate principal amount of the transaction,2025 Notes. The net proceeds from the offering, after deducting initial purchaser discount and issuance costs, were approximately $245.2 million. In connection with the issuance of the 2025 Notes, we grantedentered into the lenderCapped Call Transactions. We used $29.3 million of the net proceeds from the 2025 Notes to purchase the Capped Call Transactions, as further discussed in Note 7 of our consolidated financial statements.

Common Stock Split
On February 8, 2021, we announced a security interestthree-for-one split of our common stock to stockholders of record as of the close of business on March 12, 2021. Trading of our common stock began on a split-adjusted basis on March 15, 2021. Common stock and per share data in our personal property, excluding intellectual property and other intangible assets. The promissory note also contains customary eventsthis Annual Report on Form 10-K have been adjusted for the impact of default.

the split.

Contractual Payment Obligations

Our principal commitments primarily consist of obligations under leases for office space and motor vehicles. Aggregate minimum rental commitments under non-cancelable leases as of December 31, 20172021 for the upcoming years were as follows:

      Payments Due by Period 
  2018 2019 2020 2021 2022 Thereafter Total
          (in thousands)  
Operating lease obligations $6,418  $5,561  $4,335  $4,561  $4,587  $21,063  $46,525 

49


 Payments Due by Period
 20222023202420252026ThereafterTotal
 (in thousands)
Operating lease obligations$10,932 $11,347 $9,845 $9,884 $9,998 $34,583 $86,589 
We have obligations related to unrecognized tax benefit liabilities totaling $3.4$9.3 million and others related to severance pay, which have been excluded from the table above as we do not believe it is practicable to make reliable estimates of the periods in which payments for these obligations will be made.

Off-Balance Sheet Arrangements

As of December 31, 2017,2021, we did not have any off-balance sheet arrangements.

Critical Accounting Policies and Estimates

We prepare our consolidated financial statements in accordance with generally accepted accounting principles in the United States. The preparation of consolidated financial statements also requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenues, costs and expenses and related disclosures. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. Actual results could differ significantly from the estimates made by our management. To the extent that there are differences between our estimates and actual results, our future financial statement presentation, financial condition, results of operations and cash flows will be affected. We believe that the accounting policies discussed below are critical to understanding our historical and future performance, as these policies relate to the more significant areas involving management’s judgments and estimates. Critical accounting policies and estimates are those that we consider the most important to the portrayal of our financial condition and results of operations because they require our most difficult, subjective or complex judgments, often as a result of the need to make estimates about the effect of the matters that are inherently uncertain.

Revenue Recognition:

We generate revenues in the form of software license fees and related maintenance and services fees. Subscription revenues are sold on-premises and are comprised of time-based licenses whereby customers use our software (including support and unspecified upgrades and enhancements when and if they are available) for a specified period. Perpetual licenses have the same functionality as subscriptions. Maintenance and services primarily consist of fees for maintenance and services of perpetual license sales (including support and unspecified upgrades and enhancements when and if they are available) and to a lesser extent professional services, (including training)which focus on both operationalizing the software and training our customers to fully leverage the use of our products, although the user can benefit from the software without our assistance. In 2021, we launched our cloud offering that are not essentialallows customers to functionality of ouruse hosted software. We sell our products worldwide directly to a network of distributors and Value Added Resellers (VARs).

value-added resellers, and payment is typically due within 30 to 60 calendar days of the invoice date.

We account for the sale of perpetual softwarerecognize revenues in accordance with ASC No. 985-605, “Software Revenue Recognition.606, “Revenue from Contracts with Customers.” As required by ASC 985-605,such, we identify a contract with a customer, identify the performance obligations in the contract, determine the value oftransaction price, allocate the transaction price to each performance obligation in the contract and recognize revenues when (or as) we satisfy a performance obligation.

Subscription software component of its multiple-element arrangements using the residual method when vendor specific objective evidence (VSOE) of fair value exists for the undelivered elements of maintenance and professional services agreements. VSOE is based on the price charged when an element is sold separately or renewed. Under the residual method, the fair value of the undelivered elements is deferred, and the remaining portion of the arrangement fee is allocated to the delivered elements and is recognized as revenue, when all ASC 985-605 criteria for revenue recognition are met.

43

We determine the fair value based on the stand alone sales price charged for maintenance and professional services. We have defined classes of transactions based on the value of licensed software products purchased from us. We price renewals for each class of transaction as a fixed percentage of the total gross value of licensed software products the customer purchased.

Softwareperpetual license revenues are recognized when persuasive evidenceat the point of an arrangement exists,time when the software license has been delivered there are no uncertainties surrounding product acceptance, there are no significant future performance obligations,and the license fees are fixed or determinable and collectionbenefit of the license feeasset has transferred. Maintenance associated with subscription licenses is considered probable. Fees for arrangements with payment terms extending beyond customary payment terms are considered not to be fixed or determinable, in which case revenue is deferred and recognized when payments become due from the customer provided that all other revenue recognition criteria have been met.

We recognize revenues from the sale of term license arrangements, ratably on a straight-line basis, over the term of the underlyingagreement. In 2021, we launched our cloud offering that allows customers to use hosted software and its revenue is recognized ratably over the associated contract and is typically up to one year.

period. As we only introduced these licenses in the second half of 2021, the total revenues have not yet been significant.


We recognize revenues from maintenance of perpetual license sales ratably over the term of the underlying maintenance contract term.contract. The term of the maintenance contract is usually one year.

Renewals of maintenance contracts create new performance obligations that are satisfied over the new term with the revenues recognized ratably over the period.

Revenues from professional services consist mostly of time and material servicesservices. The performance obligations are satisfied, and accordingly,revenues are generally recognized, aswhen the services are performedprovided or whenonce the service term has expired.

Professional

50


We enter into contracts that can include combinations of products and services, bundled with licensedwhich are generally capable of being distinct and accounted for as separate performance obligations.  The license is distinct upon delivery as the customer can derive the economic benefit of the software and otherwithout any professional services, updates or technical support. We allocate the transaction price to each performance obligation based on our relative standalone selling price out of the total consideration of the contract. For maintenance, we determine the standalone selling prices based on the price at which we separately sell a renewal contract. For professional services, we determine the standalone selling prices based on the price at which we separately sell those services. For software related elements are not essentiallicenses, we use the residual approach to determine the standalone selling prices due to the functionalitylack of history of selling software license on a standalone basis and the other elementshighly variable sales price.
Trade receivables are generally recorded at the invoice amount mostly for a one year period, net of the arrangement. Revenues allocable to the services are recognized as the services are performed or when the service term has expired, using VSOEan allowance for such services.

credit losses.


Deferred revenues represent mostly unrecognized fees billed or collected for maintenance and professional services.

Deferred revenues are recognized as (or when) we perform under the contract. Pursuant to these contracts, customers are not invoiced for subsequent years until the annual renewal occurs. The amount of revenues recognized in the period that was included in the opening deferred revenues balance was $98.1 million for the year ended December 31, 2021.


We do not grant a right of return to our customers, except for one of our resellers. During the years ended December 31, 2017, 20162021, 2020 and 2015,2019, there were no returns from this reseller.


For information regarding disaggregated revenues, please refer to Note 14 to our consolidated financial statements.

Contract Costs:

We pay sales commissions to sales and marketing and certain management personnel based on their attainment of certain predetermined sales goals. Sales commissions earned by employees are considered incremental and recoverable costs of obtaining a contract with a customer. Sales commissions paid for initial contracts, which are not commensurate with sales commissions paid for renewal contracts, are capitalized and amortized over an expected period of benefit. Based on our technology, customer contracts and other factors, we have determined the expected period of benefit to be approximately four years. Sales commissions for renewal contracts are capitalized and then amortized on a straight-line basis. Amortization expenses related to these costs are included in sales and marketing expenses in the accompanying consolidated statements of operations.

Accounting for Stock-Based Compensation:

We account for stock-based compensation in accordance with ASC No. 718, “Compensation-Stock Compensation.” ASC No. 718 requires companies to estimate the fair value of equity-based payment awards on the date of grant using an Option-Pricing Model (“OPM”). The value of the portion of the award that is ultimately expected to vest is recognized as an expense over the requisite service periods in our consolidated statements of operations.

Model. We recognize compensation expenses for the value of our equity awards granted based on the straight-line method over the requisite service period of each of the awards. Upon adoption of ASU 2016-09, we elected to change our accounting policy to


Business Combinations:

We account for forfeituresour business combinations using the acquisition method of accounting, which requires, among other things, allocation of the fair value of purchase consideration to the tangible and intangible assets acquired and liabilities assumed at their estimated fair values on the acquisition date. The excess of the fair value of purchase consideration over the values of these identifiable assets and liabilities is recorded as they occur.

We applied ASC 718goodwill. When determining the fair value of assets acquired and ASC 505-50, “Equity-Based Payments to Non-Employees”liabilities assumed, we make estimates and assumptions, especially with respect to options issuedintangible assets. Our estimates of fair value are based upon assumptions believed to non-employee consultants. Accordingly,be reasonable, but which are inherently uncertain and unpredictable and, as a result, actual results may differ from estimates. During the measurement period, not to exceed one year from the date of acquisition, we usemay record adjustments to the assets acquired and liabilities assumed, with a corresponding offset to goodwill if new information is obtained related to facts and circumstances that existed as of the acquisition date. After the measurement period, any subsequent adjustments are reflected in the consolidated statements of operations. Acquisition costs, such as legal and consulting fees, are expensed as incurred.


Convertible Senior Notes:

We account for our convertible senior notes in accordance with ASC 470-20 "Debt with Conversion and Other Options" and separated the Notes into liability and equity components. The carrying amounts of the liability component of the Notes were calculated by measuring the fair value of similar debt instruments that do not have an associated convertible feature. The
51


carrying amounts of the equity components, representing the conversion option, valuation models to measurewere determined by deducting the fair value of the options atliability components from the measurement date as defined in ASC 505-50.

We selected the Black-Scholes-Merton option pricing model as the most appropriate fair value method for our stock options awards, whereas the fair value of restricted stock units is based on the marketpar value of the underlying shares at2025 Notes. This difference represents the date of grant.

Recently Issued Accounting Pronouncements

In May 2014,debt discount that is amortized to interest expense over the FASB issued ASU No. 2014-09, “Revenue from Contracts with Customers”, an updated standard on revenue recognition and issued subsequent amendments to the initial guidance in March 2016, April 2016, May 2016 and December 2016 within ASU 2016-08, 2016-10, 2016-12 and 2016-20, respectively. The new standards provide enhancements to the quality and consistency of how revenue is reported while also improving comparability in the financial statements of companies reporting using IFRS and US GAAP. The core principleterms of the new standard is for companies to recognize revenue to depict2025 Notes using the transfer of goods or services to customers in amounts that reflect the consideration (that is, payment) to which the company expects to be entitled in exchange for those goods or services.effective interest rate method. The new standard also will result in enhanced disclosures about revenue, provide guidance for transactions that were not previously addressed comprehensively (for example, service revenue and contract modifications) and improve guidance for multiple-element arrangements. ASU 2014-09 was initially scheduled to be effective for annual and interim reporting periods beginning after December 15, 2016 and may be adopted either on a full retrospective or modified retrospective approach. However, on July 9, 2015, the FASB approved a one year deferralcarrying amount of the effective date of ASU 2014-09. equity components representing the conversion option was approximately $31.8 million for the 2025 Notes and is recorded in additional paid-in capital and are not remeasured as long as they continue to meet the conditions for equity classification.


The revised effective date is for annual reporting periods beginning after December 15, 2017 and interim periods thereafter, with an early adoption permitted as of the original effective date. We have decided to adopt this standard effective January 1, 2018 using the full retrospective method which will require each prior reporting period presented to be recast in future issuances of our financial statements. In preparation for adoption of the standard, we have implemented internal controls and key system functionality to enable the preparation of financial information and have reached conclusions on key accounting assessmentsCompany allocates transaction costs related to the standard, including our assessmentissuance of the impact.

44

The most significant impact2025 Notes to the liability and equity components using the same proportions as the initial carrying value of the new standard relatesNotes. Transaction costs attributable to the way we account for term agreementsliability component were approximately $6.9 million and commission expense. Specifically, under the current revenue standard, we recognize both the term license and maintenance revenues ratably over the contract period whereas under the new revenue standard we would recognize term license revenues upfront and the associated maintenance revenues over the contract period. We have also considered the impact of the guidance in ASC 340-40, “Other Assets and Deferred Costs” under the new standard. Under ASC 340-40, we may be requiredare being amortized to capitalize and amortize certain incremental costs of obtaining a contract such as the maintenance portion of sales commissions over the life of the license. Under our current accounting policy, we do not capitalize sales commission costs but rather recognize these costs when the purchase order is received.

Adoption of the standard will result in a reduction of revenues of $2.0 million for the year ended December 31, 2017 and recognition of additional revenues of $1.4 million for the year ended December 31, 2016, primarily due to the net change in term license revenue recognition. In addition, adoption of the standard will result in an increase in prepaid expenses and other current assets and a decrease in deferred revenues of $9.9 and $0.1 million, respectively, as of December 31, 2017, driven by the capitalization of sales commission costs and the upfront recognition of license revenues from term licenses. The cumulative impact to our accumulated deficit as of January 1, 2016 is a reduction of $5.6 million.

Adoption of the standard related to revenue recognition had no impact to cash from or used in operating, financing or investing activities on our consolidated statements of cash flows.

Select recast financial statement information, which reflects the preliminary effect of the adoption of this standard, is set forth below.

  Year ended
December 31, 2017
  As Reported Adjustments Recast for Adoption
of ASC 606
Total revenues $217,364  $(1,974) $215,390 
Operating loss $(13,597) $178  $(13,419)
Income taxes $(2,459) $(328) $(2,787)
Net loss $(13,694) $(151) $(13,845)

  Year ended
December 31, 2016
  As Reported Adjustments Recast for Adoption
of ASC 606
Total revenues $164,456  $1,407  $165,863 
Operating loss $(15,694) $3,699  $(11,995)
Income taxes $(1,131) $(182) $(1,313)
Net loss $(17,710) $3,517  $(14,193)

  December 31, 2017
Balance Sheet Data
  As Reported Adjustments Recast for Adoption
of ASC 606
Assets            
Current assets:            
Prepaid expenses and other current assets $7,130  $9,865  $16,995 
Liabilities and stockholders’ equity            
Current liabilities:            
Accrued expenses and other short term liabilities $42,453  $1,014  $43,467 
Deferred revenues $73,891  $(227) $73,664 
Long-term liabilities:            
Deferred revenues $7,034  $130  $7,164 

45

In January 2016, the FASB issued ASU 2016-13, “Financial Instruments – Credit Losses on Financial Instruments”, which requires that expected credit losses relating to financial assets measured on an amortized cost basis and available for sale debt securities be recorded through an allowance for credit losses. ASU 2016-13 limits the amount of credit losses to be recognized for available for sale debt securities to the amount by which carrying value exceeds fair value and also requires the reversal of previously recognized credit losses if fair value increases. The new standard will be effective for interim and annual periods beginning after January 1, 2020, and early adoption is permitted. We are currently evaluating whether to early adopt this standard and the potential effect on our consolidated financial statements.

In February 2016, the FASB issued ASU 2016-02, “Leases”, on the recognition, measurement, presentation and disclosure of leases for both parties to a contract (i.e., lessees and lessors). The new standard requires lessees to apply a dual approach, classifying leases as either finance or operating leases based on the principle of whether or not the lease is effectively a financed purchase by the lessee. This classification will determine whether leaseinterest expense is recognized based onat an effective interest method or on a straight line basisrate of 4.51% over the term of the lease, respectively. A lessee is also required to record a right-of-use asset and a lease liability for all leases with a term of greater than 12 months regardless of their classification. Leases with a term of 12 months or less will be accounted for in a manner similar2025 Notes. Transaction costs attributable to the accounting under existing guidance for operating leases today. The new standard requires lessors to account for leases using an approach that is substantially equivalent to existing guidance for sales-type leases, direct financing leasesequity component were approximately $1.0 million and operating leases. ASC 842 supersedesare netted with the previous leases standard, ASC 840, "Leases". The guidance is effective for the interim and annual periods beginning on or after December 15, 2018, and early adoption is permitted. We are currently evaluating whether to early adopt this standard and the potential effectequity component of the guidance on our consolidated financial statements.

2025 Notes in additional paid-in capital.


Recently Adopted Accounting Pronouncements

We did not adopt any new accounting standards in the period ended December 31, 2021.

Recently Issued Accounting Pronouncements Not Yet Adopted
In November 2016,August 2020, the FASB issued ASU 2016-18, “Statement2020-06, ASC Subtopic 470-20 “Debt—Debt with “Conversion and Other Options” and ASC subtopic 815-40 “Hedging—Contracts in Entity’s Own Equity.” The standard reduced the number of Cash Flows (Topic 230): Restricted Cash”,accounting models for convertible debt instruments and convertible preferred stock. Convertible instruments that continue to be subject to separation models are (1) those with embedded conversion features that are not clearly and closely related to the host contract, that meet the definition of a derivative, and that do not qualify for a scope exception from derivative accounting and (2) convertible debt instruments issued with substantial premiums for which the premiums are recorded as paid-in capital. Among other potential impacts, ASU 2020-06 will reduce reported interest expense, and thereby decrease reported net loss, and result in a reclassification of certain conversion feature balance sheet amounts from stockholder’s equity to liabilities as it relates to the Company’s 2025 Notes. Additionally, ASU 2020-06 requires companiesthe application of the if-converted method to include amounts generally described as restricted cash and restricted cash equivalentscalculate the impact of convertible instruments on earnings per share. The amendments in cash and cash equivalents when reconciling beginning-of-period and end-of-period total amounts shown on the statement of cash flows. This ASU isthis update are effective for annual and interim periodsfiscal years beginning after December 15, 2017.2021, including interim periods within those fiscal years, and can be adopted on either a fully retrospective or modified retrospective basis. We have decided to adoptadopted this standard effective December 31, 2017on January 1, 2022 using thea modified retrospective transition method, as required by the new standard. The adoptionbasis which resulted in a decrease to accumulated deficit of this standard has$8.6 million, a decrease in additional paid-in capital of $30.8 million and an immaterial impactincrease in liabilities of $22.1 million on our consolidated statements of cash flows.

The following table provides a reconciliation of cash and cash equivalents, and long term restricted cash reported within the consolidated balance sheets that sum to the total of such amounts in the consolidated statements of cash flows:

  December 31,
2017
 December 31,
2016
 December 31,
2015
Cash and cash equivalents $56,689  $48,315  $49,241 
Long term restricted cash included in other assets  547   488   467 
Cash, cash equivalents and long term restricted cash shown in the consolidated statement of cash flows $57,236  $48,803  $49,708 

In January 2018, the FASB released guidance on the accounting for tax on the global intangible low-taxed income provisions of the TCJA. The GILTI provisions impose a tax on foreign income in excess of a deemed return on tangible assets of foreign corporations. The guidance indicates that either (i) accounting for deferred taxes related to GILTI inclusions, or (ii) to treat any taxes on GILTI inclusions as period cost, are both acceptable methods subject to an accounting policy election. In accordance with SEC Staff Accounting Bulletin No. 118, and as we are not yet able to reasonably estimate the effect of the GILTI tax, as described in note 9 to our consolidated financial statements, we have not yet adopted an accounting policy with respect to the GILTI tax.

sheets.

Item 7A.Quantitative and Qualitative Disclosures About Market Risk

Market risk represents the risk of loss that may impact our financial position due to adverse changes in financial market prices and rates. Our market risk exposure is primarily a result of fluctuations in foreign currency exchange rates. We do not hold financial instruments for trading purposes.

46
or speculative purposes


Market Risk

We are exposed to certain financial risks, including fluctuations in foreign currency exchange rates and interest rates. We manage our exposure to these market risks through internally established policies and procedures. Our policies do not allow speculation in derivative instruments for profit or execution of derivative instrument contracts for which there are no underlying exposures. We do not use financial instruments for trading or speculative purposes, and we are not a party to any leveraged derivatives. We monitor our underlying market risk exposures on an ongoing basis and, where appropriate, may use hedging strategies to mitigate these risks.

Foreign Currency Exchange Risk

Approximately 30%one quarter of our revenues for the years ended December 31, 20172021 and 20162020 were earned in non-U.S. dollar denominated currencies, mainly in the Euro and Pound Sterling. Our expenses are generally denominated in the currencies in which our operations are located, primarily the U.S. dollar and NIS, and to a lesser extent the Euro, Pound Sterling, Canadian dollar and CanadianAustralian dollar. Our NIS-denominatedforeign currency expenses consist primarily of personnel and overhead costs from our operations in Israel.international operations. Our consolidated results of operations and cash flow are, therefore, subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign exchange rates. TheWe enter into financial hedging strategies to reduce our exposure to foreign currency rate changes.
52


During 2021, the effect of a hypothetical 10% change in foreign currency exchange rates applicable to our business, after considering foreign currency hedges, would not have had a material impact on our historical consolidated financial statements.

For purposes of our consolidated financial statements, local currency assets and liabilities are translated at the rate of exchange to the U.S. dollar on the balance sheet date and local currency revenues and expenses are translated at the exchange rate at the date of the transaction or the average exchange rate dollar during the reporting period to the United States.

To date,period.

Historically, we have used derivative financial instruments, specifically foreign currency forward contracts, to manage exposure to foreign currency risks, by hedging a portion of our forecasted expenses denominated in NIS generally expected to occur within 12 months. The effect of exchange rate changes on foreign currency forward contracts is expected to offset the effect of exchange rate changes on the underlying hedged item. We also enter into forward contracts to hedge a portion of our monetary items in the balance sheet, such as trade receivables and payables, denominated in Pound Sterling and Euro for short-term periods to protect the fair value of the monetary assets and liabilities from foreign exchange rate fluctuations. The effect of exchange rate changes on foreign currency forward contracts is expected to offset the effect of exchange rate changes which impacts financial income (expenses), net. We do not use derivative financial instruments for trading or speculative or trading purposes.

Interest Rate Risk

We had cash and cash equivalents and short-term investmentsdeposits of $136.6$807.6 million as of December 31, 2017.2021. We hold our cash and cash equivalents and short-term investmentsdeposits for working capital purposes. Our cash and cash equivalents are held in cash deposits and money market funds. Due to the short-term nature of these instruments, we believe that we do not have any material exposure to changes in the fair value of our investment portfolio as a result of changes in interest rates. Declines in interest rates, however, would reduce our future interest income.

The effect of a hypothetical 10% change in interest rates would not have a material impact on our consolidated financial statements.


In May 2020, we issued $253.0 million aggregate principal amount of 1.25% convertible senior notes due in 2025. The 2025 Notes have fixed annual interest rates at 1.25% and, therefore, we do not have economic interest rate exposure on our 2025 Notes. However, the values of the 2025 Notes are exposed to interest rate risk. Generally, the fair market value of our fixed interest rate 2025 Notes will increase as interest rates fall and decrease as interest rates rise. In addition, the fair values of the 2025 Notes are affected by our stock price. The fair value of the 2025 Notes will generally increase as our common stock price increases and will generally decrease as our common stock price declines in value. Additionally, we carry the 2025 Notes at face value less unamortized discount and issuance costs on our balance sheet, and we present the fair value for required disclosure purposes only.

As of December 31, 2017,2021, we had no outstanding obligations under our promissory note.credit facility. To the extent we enter into other long-term debt arrangements in the future, we would be subject to fluctuations in interest rates which could have a material impact on our future financial condition and results of operation.

Inflation

We do not believe that inflation had a material effect on our business, financial condition or results of operations in the last three fiscal years. If our costs were to become subject to significant inflationary pressures, we may not be able to fully offset such higher costs through price increases. Our inability or failure to do so could harm our business, financial condition and results of operations.


53


Item 8.Financial Statements and Supplementary Data

INDEX TO CONSOLIDATED FINANCIAL STATEMENTS

Page
Page

47


54


vrns-20211231_g3.jpg
Kost Forer Gabbay & Kasierer
144 Menachem Begin Road, Building A
Tel-Aviv 6492102, Israel
Tel: +972-3-6232525

Fax: +972-3-5622555

ey.com


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM

To the Stockholders and the Board of Directors and Stockholders of

VARONIS SYSTEMS, INC.


Opinion on the Financial Statements


We have audited the accompanying consolidated balance sheets of Varonis Systems, Inc. and its subsidiaries (the "Company") as of December 31, 20172021, and 20162020 and the related consolidated statements of operations, statements of comprehensive loss, changes in stockholders’ equity and cash flows for each of the three years in the period ended December 31, 20172021, and the related notes (collectively referred to as the “financial“consolidated financial statements”). In our opinion, the consolidated financial statements present fairly, in all material respects, the consolidated financial position of the Company at December 31, 20172021, and 20162020 and the consolidated results of its operations and its cash flows for each of the three years in the period ended December 31, 2017,2021, in conformity with U.S. generally accepted accounting principles.


We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the Company's internal control over financial reporting as of December 31, 2017,2021, based on criteria established in Internal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework) and our report dated February 13, 20188, 2022, expressed an unqualified opinion thereon.


Basis for Opinion


These financial statements are the responsibility of the Company's management. Our responsibility is to express an opinion on the Company’s financial statements based on our audits. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.


We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement, whether due to error or fraud. Our audits included performing procedures to assess the risks of material misstatement of the financial statements, whether due to error or fraud and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the financial statements. We believe that our audits provide a reasonable basis for our opinion.

/s/



Critical Audit Matter

The critical audit matter communicated below is a matter arising from the current-period audit of the consolidated financial statements that were communicated or required to be communicated to the audit committee and that: (1) relate to accounts or disclosures that are material to the financial statements and (2) involved our especially challenging, subjective or complex judgments. The communication of critical audit matter does not alter in any way our opinion on the consolidated financial statements, taken as a whole, and we are not, by communicating the critical audit matter below, providing a separate opinion on the critical audit matter or on the accounts or disclosures to which they relate.

55


vrns-20211231_g3.jpg
Kost Forer Gabbay & Kasierer
144 Menachem Begin Road, Building A
Tel-Aviv 6492102, Israel
Tel: +972-3-6232525
Fax: +972-3-5622555
ey.com
Revenue Recognition
Description of the Matter
As described in Note 2.h to the consolidated financial statements, the Company generates revenues in the form of software license fees and related maintenance and services fees. Software license revenues are recognized at the point of time when the software license has been delivered and the benefit of the asset has been transferred. The Company recognizes revenues from maintenance ratably over the term of the underlying maintenance contract term. Renewals of maintenance contracts create new performance obligations that are satisfied over the term with the revenues recognized ratably over the period.

Revenues from professional services consist mostly of time and material services. The performance obligations are satisfied, and revenues are recognized, when the services are provided. The Company enters into contracts that can include combinations of products and services, which are generally capable of being distinct and accounted for as separate performance obligations. To account for promised goods and services, the Company allocates the transaction price to the distinct performance obligations on a relative standalone selling price basis and recognizes revenue when control of the distinct performance obligation is transferred. For maintenance and professional services, the Company determines the standalone selling prices based on the price at which the Company separately sells these services. For software licenses, the Company uses the residual approach to determine the standalone selling prices due to the lack of history of selling software licenses on a standalone basis and the highly variable sales price.

Auditing the Company’s recognition of revenue was challenging and complex due to the effort required to evaluate determination of whether products and services are considered distinct performance obligations that should be accounted for separately versus together, such as software licenses and related services, the determination of stand-alone selling prices for each distinct performance obligation and the timing of when revenue is recognized.

Given these factors, the related audit effort in evaluating management’s judgments in determining revenue recognition was extensive and required a high degree of auditor judgment.

How We Addressed the Matter in Our Audit
We obtained an understanding, evaluated design and tested the operating effectiveness of internal controls related to the identification of distinct performance obligations, the determination of the stand-alone selling prices and of the timing of revenue recognition.

Among the procedures we performed to test the identification and determination of distinct performance obligations, for a sample of contracts, we read the executed contract to understand and evaluated management’s identification of significant terms for completeness, including the identification of distinct performance obligations.

To test management’s determination of stand-alone selling price for each performance obligation, we performed procedures to evaluate the methodology applied, tested the accuracy of the underlying data and calculations and the application of that methodology to the sample of contracts.

We also tested the mathematical accuracy of management’s calculations of revenue and the associated timing of revenue recognized in the financial statements. Finally, we assessed the appropriateness of the related disclosures in the consolidated financial statements.


KOST FORER GABBAY & KASIERER

A Member of Ernst & Young Global



We have served as the Company’s auditor since 2007.

Tel-Aviv, Israel

February 13, 2018

8, 2022

56


48

vrns-20211231_g3.jpg
Kost Forer Gabbay & Kasierer
144 Menachem Begin Road, Building A
Tel-Aviv 6492102, Israel
Tel: +972-3-6232525

Fax: +972-3-5622555

ey.com


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM


To the Stockholders and the Board of Directors and Stockholders of

VARONIS SYSTEMS, INC.

Opinion on Internal Control over Financial Reporting

We have audited Varonis Systems, Inc. and its subsidiaries (the "Company"“Company”) internal control over financial reporting as of December 31, 2017,2021, based on criteria established in Internal Control – IntegratedControl-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework) (the "COSO Criteria"criteria"). In our opinion, the Company maintained, in all material respects, effective internal control over financial reporting as of December 31, 2017,2021, based on the COSO criteria.


We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the consolidated balance sheets of the Company as of December 31, 20172021, and 20162020 and the related consolidated statements of operations, statements of comprehensive loss, Changeschanges in Stockholders’ Equitystockholders’ equity and cash flows for each of the three years in the period ended December 31, 2017 of2021, and the Companyrelated notes, and our report dated February 13, 20188, 2022, expressed an unqualified opinion thereon.



Basis for Opinion

The Company’s management is responsible for maintaining effective internal control over financial reporting and for its assessment of the effectiveness of internal control over financial reporting included in the accompanying Management's Annual Report on Internal Control over Financial Reporting. Our responsibility is to express an opinion on the Company’s internal control over financial reporting based on our audit. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.


We conducted our audit in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether effective internal control over financial reporting was maintained in all material respects.


Our audit included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, testing and evaluating the design and operating effectiveness of internal control based on the assessed risk, and performing such other procedures as we considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion.


Definition and Limitations of Internal Control Over Financial Reporting

A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.



57


49

vrns-20211231_g3.jpg
Kost Forer Gabbay & Kasierer
144 Menachem Begin Road, Building A
Tel-Aviv 6492102, Israel
Tel: +972-3-6232525

Fax: +972-3-5622555

ey.com


Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

/s/




KOST FORER GABBAY & KASIERER

A Member of Ernst & Young Global

We have served as the Company’s auditor since 2007.


Tel-Aviv, Israel

February 13, 2018

50
8, 2022

58



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED BALANCE SHEETS

(in thousands)

  December 31,
  2017 2016
Assets        
Current assets:        
Cash and cash equivalents $56,689  $48,315 
Short-term investments  79,868   65,493 
Trade receivables (net of allowance for doubtful accounts of $ 433 and $ 372 at December 31, 2017 and at December 31, 2016, respectively)  75,596   53,861 
Prepaid expenses and other current assets  7,130   3,650 
Total current assets  219,283   171,319 
Long-term assets:        
Other assets  973   609 
Property and equipment, net  11,896   9,910 
Total long-term assets  12,869   10,519 
Total assets $232,152  $181,838 
 December 31,
 20212020
Assets  
Current assets:  
Cash and cash equivalents$805,761 $234,092 
Marketable securities— 34,117 
Short-term deposits1,850 30,053 
Trade receivables (net of allowance of $2,754 and $1,250 at December 31, 2021 and December 31, 2020, respectively)117,179 94,229 
Prepaid expenses and other current assets34,417 27,357 
Total current assets959,207 419,848 
Long-term assets:  
Operating lease right-of-use asset63,749 47,924 
Property and equipment, net38,298 37,163 
Intangible assets, net4,313 5,846 
Goodwill23,135 23,135 
Other assets19,835 21,566 
Total long-term assets149,330 135,634 
Total assets$1,108,537 $555,482 

The accompanying notes are an integral part of these consolidated financial statements.

51

59



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED BALANCE SHEETS

(in thousands, except share data)

  December 31,
  2017 2016
Liabilities and stockholders’ equity        
Current liabilities:        
Trade payables $635  $1,288 
Accrued expenses and other short term liabilities  42,453   28,479 
Deferred revenues  73,891   58,478 
Total current liabilities  116,979   88,245 
         
Long-term liabilities:        
Deferred revenues  7,034   3,562 
Other liabilities  6,561   7,292 
Total long-term liabilities  13,595   10,854 
         
Stockholders’ equity:        
Share capital        
Common stock of $ 0.001 par value—Authorized: 200,000,000 shares at December 31, 2017 and 2016; Issued and outstanding: 28,146,162 shares at December 31, 2017 and 26,821,762 shares at December 31, 2016  28   27 
Accumulated other comprehensive income (loss)  136   (479)
Additional paid-in capital  223,868   189,335 
Accumulated deficit  (122,454)  (106,144)
Total stockholders’ equity  101,578   82,739 
Total liabilities and stockholders’ equity $232,152  $181,838 
 December 31,
 20212020
Liabilities and stockholders’ equity  
Current liabilities:  
Trade payables$5,324 $850 
Accrued expenses and other short-term liabilities102,226 83,198 
Deferred revenues104,221 98,588 
Total current liabilities211,771 182,636 
Long-term liabilities:  
Convertible senior notes, net225,330 218,460 
Operating lease liability68,694 54,540 
Deferred revenues2,566 2,778 
Other liabilities3,583 2,997 
Total long-term liabilities300,173 278,775 
Stockholders’ equity:  
Share capital  
Common stock of $0.001 par value - Authorized: 200,000,000 shares at December 31, 2021 and December 31, 2020; Issued and outstanding: 107,509,096 shares at December 31, 2021 and 95,456,862 shares at December 31, 2020108 95 
Accumulated other comprehensive income6,083 9,371 
Additional paid-in capital1,018,005 395,347 
Accumulated deficit(427,603)(310,742)
Total stockholders’ equity596,593 94,071 
Total liabilities and stockholders’ equity$1,108,537 $555,482 

The accompanying notes are an integral part of these consolidated financial statements.

52




60


VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF OPERATIONS

(in thousands, except share and per share data)

  Year ended
December 31,
  2017 2016 2015
Revenues:            
Licenses $123,610  $92,873  $71,273 
Maintenance and services  93,754   71,583   55,937 
Total revenues  217,364   164,456   127,210 
Cost of revenues  20,873   15,843   12,019 
Gross profit  196,491   148,613   115,191 
             
Operating costs and expenses:            
Research and development  47,369   36,660   31,792 
Sales and marketing  135,896   107,825   86,367 
General and administrative  26,823   19,822   16,106 
Total operating expenses  210,088   164,307   134,265 
Operating loss  (13,597)  (15,694)  (19,074)
Financial income (expenses), net  2,362   (885)  (1,523)
Loss before income taxes  (11,235)  (16,579)  (20,597)
Income taxes  (2,459)  (1,131)  (686)
Net loss $(13,694) $(17,710) $(21,283)
Net loss per share of common stock, basic and diluted $(0.50) $(0.67) $(0.84)
Weighted average number of shares used in computing net loss per share of common stock, basic and diluted  27,467,440   26,406,312   25,198,546 
Year ended
 December 31,
 202120202019
Revenues:   
Subscriptions$268,942 $161,188 $76,730 
Maintenance and services119,302 130,028 135,367 
Perpetual licenses1,890 1,473 42,093 
Total revenues390,134 292,689 254,190 
Cost of revenues59,399 44,261 35,144 
Gross profit330,735 248,428 219,046 
Operating expenses:   
Research and development137,882 99,363 80,764 
Sales and marketing230,314 179,902 169,898 
General and administrative61,233 47,578 44,371 
Total operating expenses429,429 326,843 295,033 
Operating loss(98,694)(78,415)(75,987)
Financial expenses, net(12,145)(7,483)(389)
Loss before income taxes(110,839)(85,898)(76,376)
Income taxes(6,022)(8,112)(2,388)
Net loss$(116,861)$(94,010)$(78,764)
Net loss per share of common stock, basic and diluted$(1.11)$(1.00)$(0.87)
Weighted average number of shares used in computing net loss per share of common stock, basic and diluted105,305,957 94,336,893 90,772,230 

The accompanying notes are an integral part of these consolidated financial statements.

53

61



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF COMPREHENSIVE LOSS

(in thousands)

  2017 2016 2015
Net loss $(13,694) $(17,710) $(21,283)
Other comprehensive income (loss):            
Unrealized losses on short-term investments  (27)  -   - 
Unrealized gains (losses) on derivative instruments  642   (148)  (5)
Total other comprehensive income (loss)  615   (148)  (5)
Comprehensive loss $(13,079) $(17,858) $(21,288)
Year ended
December 31,
 202120202019
Net loss$(116,861)$(94,010)$(78,764)
Other comprehensive income (loss):
Unrealized income (loss) on marketable securities, net of tax(7)(94)21 
Income on marketable securities reclassified into earnings, net of tax76 
(3)(18)26 
Unrealized income on derivative instruments, net of tax5,616 4,043 3,510 
Loss (income) on derivative instruments reclassified into earnings, net of tax(8,901)5,795 (352)
(3,285)9,838 3,158 
Total other comprehensive income (loss)(3,288)9,820 3,184 
Comprehensive loss$(120,149)$(84,190)$(75,580)

The accompanying notes are an integral part of these consolidated financial statements.

54

62



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF CHANGES IN STOCKHOLDERS’ EQUITY

(in thousands, except share data)

  Common stock Additional
paid-in
 Accumulated
other
comprehensive
 Accumulated Total
stockholders’
  Number Amount capital loss deficit equity
             
Balance as of January 1, 2015  24,685,604   25   162,478   (326)  (67,151)  95,026 
Stock-based compensation expense        7,794         7,794 
Exercise of stock options  1,350,162   1   2,054         2,055 
Exercise of restricted stock units  33,388   *)             
Unrealized loss on derivative instruments           (5)     (5)
Net loss              (21,283)  (21,283)
Balance as of December 31, 2015  26,069,154   26   172,326   (331)  (88,434)  83,587 
Stock-based compensation expense        12,938         12,938 
                         
Common stock issued under employee stock plans, net  752,608   1   4,071         4,072 
Unrealized loss on derivative instruments           (148)     (148)
Net loss              (17,710)  (17,710)
Balance as of December 31, 2016  26,821,762  $27  $189,335  $(479) $(106,144) $82,739 
                         
Effect of adoption of ASU 2016-09        2,616      (2,616)   
Stock-based compensation expense        19,835         19,835 
Common stock issued under employee stock plans, net  1,324,400   1   12,082         12,083 
Unrealized gain on derivative instruments           642      642 
Unrealized gains and losses on available for sale securities           (27)     (27)
Net loss              (13,694)  (13,694)
Balance as of December 31, 2017  28,146,162  $28  $223,868  $136  $(122,454) $101,578 
 Common stockAdditional
paid-in capital
Accumulated
other
comprehensive income (loss)
Accumulated deficitTotal
stockholders’ equity
 NumberAmount
Balance as of January 1, 201988,730,640 89 266,882 (3,633)(137,968)125,370 
Stock-based compensation expense— — 46,139 — — 46,139 
Common stock issued under employee stock plans, net3,019,293 (2,400)— — (2,397)
Unrealized income on derivative instruments— — — 3,158 — 3,158 
Unrealized income on available for sale securities— — — 26 — 26 
Net loss— — — — (78,764)(78,764)
Balance as of December 31, 201991,749,933 92 310,621 (449)(216,732)93,532 
Stock-based compensation expense— — 68,585 — — 68,585 
Common stock issued under employee stock plans, net3,600,003 9,788 — — 9,791 
Issuance of common stock from acquisitions106,926 — 4,198 — — 4,198 
Fair value of replacement equity awards attributable to pre-acquisition service— — 709 — — 709 
Realized and unrealized income on derivative instruments— — — 9,838 — 9,838 
Unrealized loss on available for sale securities— — — (18)— (18)
Purchase of capped calls related to Convertible senior notes— — (29,348)— — (29,348)
Equity component of Convertible senior notes, net— — 30,794 — — 30,794 
Net loss— — — — (94,010)(94,010)
Balance as of December 31, 202095,456,862 95 395,347 9,371 (310,742)94,071 
Issuance of Common stock in connection with follow-on offering, net of issuance costs of $17,4667,961,538 500,026 — — 500,034 
Stock-based compensation expense— — 109,779 — — 109,779 
Common stock issued under employee stock plans, net4,090,696 12,853 — — 12,858 
Realized and unrealized loss on derivative instruments, net— — — (3,285)— (3,285)
Unrealized loss on available for sale securities— — — (3)— (3)
Net loss— — — — (116,861)(116,861)
Balance as of December 31, 2021107,509,096 $108 $1,018,005 $6,083 $(427,603)$596,593 

___________________

*)Represents an amount lower than $ 1.

The accompanying notes are an integral part of these consolidated financial statements.

55

63



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF CASH FLOWS

(in thousands)

  Year Ended
December 31,
  2017 2016 2015
Cash flows from operating activities:            
Net loss $(13,694) $(17,710) $(21,283)
Adjustments to reconcile net loss to net cash provided by (used in) operating activities:            
Depreciation  3,328   2,180   1,615 
Stock-based compensation  19,835   12,938   7,794 
Capital gain from disposal of fixed assets  (20)  (2)  (4)
Changes in assets and liabilities:            
Trade receivables  (21,735)  (6,425)  (9,567)
Prepaid expenses and other current assets  (3,317)  (1,028)  796 
Trade payables  (653)  (1,324)  (91)
Accrued expenses and other short term liabilities  14,453   5,302   6,270 
Deferred revenues  18,885   13,269   11,554 
Other long term liabilities  (731)  147   187 
Net cash provided by (used in) operating activities  16,351   7,347   (2,729)
             
Cash flows from investing activities:            
Increase in short-term investments  (14,402)  (8,390)  (22,001)
Decrease (increase) in long-term deposits  (305)  (111)  11 
Proceeds from sale of property and equipment  20   2   4 
Purchase of property and equipment  (5,314)  (3,825)  (4,536)
Net cash used in investing activities  (20,001)  (12,324)  (26,522)
             
Cash flows from financing activities:            
Proceeds from employee stock plans, net  12,083   4,072   2,055 
Net cash provided by financing activities  12,083   4,072   2,055 
Increase (decrease) in cash, cash equivalents and restricted cash  8,433   (905)  (27,196)
Cash, cash equivalents and restricted cash at beginning of period  48,803   49,708   76,904 
Cash, cash equivalents and restricted cash at end of period $57,236  $48,803  $49,708 
             
Supplemental disclosures of non-cash flow information            
Deferred rent fixed asset additions $-  $583  $1,355 
             
Supplemental disclosure of cash flow information:            
Cash paid for income taxes $469  $246  $354 
64



Year ended
 December 31,
 202120202019
Cash flows from operating activities:
Net loss$(116,861)$(94,010)$(78,764)
Adjustments to reconcile net loss to net cash provided by (used in) operating activities:
Depreciation and amortization10,888 10,167 6,321 
Stock-based compensation109,779 68,585 46,139 
Amortization of deferred commissions14,147 13,106 13,630 
Noncash operating lease costs8,232 8,737 9,023 
Amortization of debt discount and issuance costs6,870 4,096 — 
Capital loss from sale of fixed assets— — 45 
Changes in assets and liabilities:
Trade receivables(22,950)(19,075)8,173 
Prepaid expenses and other current assets(506)(543)(1,225)
Deferred commissions(21,151)(19,131)(19,132)
Other long-term assets1,404 1,172 81 
Trade payables4,474 (328)(1,623)
Accrued expenses and other short-term liabilities5,850 16,058 (886)
Deferred revenues5,421 (169)7,219 
Other long-term liabilities1,581 5,493 316 
Net cash provided by (used in) operating activities7,178 (5,842)(10,683)
Cash flows from investing activities:
Proceeds from sales and maturities of marketable securities34,117 51,539 65,359 
Investment in marketable securities— (44,124)(67,120)
Proceeds from short-term and long-term deposits80,752 74,776 147,531 
Investment in short-term and long-term deposits(50,000)(97,454)(87,086)
Acquisition, net of cash acquired— (29,369)— 
Proceeds from sale of property and equipment— — 11 
Purchases of property and equipment(10,490)(10,116)(25,392)
Net cash provided by (used in) investing activities54,379 (54,748)33,303 
Cash flows from financing activities:
Proceeds from follow-on offering, net500,034 — — 
Proceeds from issuance of convertible senior notes, net of issuance costs— 245,308 — 
Purchases of capped calls— (29,348)— 
Proceeds from employee stock plans, net10,078 9,793 (2,398)
Net cash provided by (used in) financing activities510,112 225,753 (2,398)
Increase in cash and cash equivalents571,669 165,163 20,222 
Cash and cash equivalents at beginning of period234,092 68,929 48,707 
Cash and cash equivalents at end of period$805,761 $234,092 $68,929 
Supplemental disclosure of cash flow information:
Cash paid for income taxes$8,507 $1,342 $3,955 
Lease liabilities arising from obtaining right-of-use assets$22,156 $6,256 $10,252 

The accompanying notes are an integral part of these consolidated financial statements.

56

65



VARONIS SYSTEMS, INC. AND SUBSIDIARIES

NOTES TO CONSOLIDATED FINANCIAL STATEMENTS

(in thousands, except share and per share data)


NOTE 1:- GENERAL


Varonis Systems, Inc. (“VSI”("VSI" and together with its subsidiaries, collectively, the “Company” or "Varonis") was incorporated under the laws of the State of Delaware on November 3, 2004, and commenced operations on January 1, 2005.

VSI2005 and has seven12 wholly-owned subsidiaries: Varonis Systems Ltd. (“VSL”) incorporated under the laws of Israel on November 24, 2004; Varonis (UK) Limited (“VSUK”) incorporated under the laws of England on March 14, 2007; Varonis Systems (Deutschland) GmbH (“VSG”) incorporated under the laws of Germany on July 6, 2011; Varonis France SAS (“VSF”) incorporated under the laws of France on February 22, 2012; Varonis Systems Corp. (“VSC”) incorporated under the laws of British Columbia, Canada on February 19, 2013; Varonis Systems (Ireland) Limited (“VIRE”) incorporated under the laws of Ireland on November 11, 2016; and Varonis Systems (Australia) Pty Ltd (“VAUS”) incorporated under the laws of Victoria, Australia on February 28, 2017.

subsidiaries.

The Company’s software products and services allow enterprises to manage, analyze, alert and secure enterprise data. Varonis focuses on protecting enterprise data:data including: sensitive files and emails; confidential customer, patient and employee data; financial records; strategic and product plans; and other intellectual property. Through its products DatAdvantage (including DatAlert, the Automation Engine andEngine), DatAlert (including Varonis Edge), DataPrivilege, Data Classification Engine (including GDPR Patterns)Policy Pack and Data Classification Labels), Data Transport Engine and DatAnswers, the Varonis Data Security Platform detects cyberthreats from both internal and DatAnywhere, the software platform allows enterprises to protectexternal actors by analyzing data, account activity and user behavior; prevents and limits disaster by locking down sensitive and stale data; and efficiently sustains a secure state with automation. Varonis products address additional important use cases including data from insider threatsprotection, data governance, Zero Trust, cybercrime, compliance, data privacy, classification and cyberattacks,threat detection and realize the value of their enterprise data in ways that are not resource-intensive and easy to implement.

VSI markets and sells products and services mainly in the United States. VSUK, VSG, VSF, VSC, VIRE and VAUS resell the Company’s products and services mainly in the UK, Germany, France and rest of Europe, Canada, Ireland and Australia, respectively. The Company primarily sells its products and services to a global network of distributors and Value Added Resellers (VARs), which sell the products to end user customers.

response.


NOTE 2:- SIGNIFICANT ACCOUNTING POLICIES

The consolidated financial statements are prepared according to United States generally accepted accounting principles (“U.S. GAAP”), applied on a consistent basis, as follows:

a.
a.Use of Estimates:

The preparation of the consolidated financial statements in conformity with U.S. generally accepted accounting principles requires management to make estimates, judgments and assumptions. The Company’s management believes that the estimates, judgments and assumptions used are reasonable based upon information available at the time they are made. These estimates, judgments and assumptions can affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the dates of the financial statements, and the reported amounts of revenues and expenses during the reporting period. Actual results could differ from those estimates. On an ongoing basis, the Company’s management evaluates estimates, including those related to accounts receivable and salescredit loss allowances, fair values of stock-based awards, deferred taxes and income tax uncertainties, and contingent liabilities. Such estimates are based on historical experience and on various other assumptions that are believed to be reasonable, the results of which form the basis for making judgments about the carrying values of assets and liabilities.

b.
b.Financial Statements in U.S. Dollars:

Most of the Company's revenues and costs of VSI are denominated in United States dollars (“dollars”). Some of the subsidiaries’ revenues and costs are primarily incurred in Euros, the Pound Sterling, Canadian dollars, Australian dollars and NIS;New Israeli Shekels ("NIS"); however, the Company’s management believes that the dollar is the primary currency of the economic environment in which VSIit and each of its subsidiaries operate. Thus, the dollar is the Company’s functional and reporting currency.

Accordingly, transactions denominated in currencies other than the functional currency are re-measuredremeasured to the functional currency in accordance with ASC No. 830, “Foreign Currency Matters” at the exchange rate at the date of the transaction or the average exchange rate in the quarter. At the end of each reporting period, financial assets and liabilities are re-measuredremeasured to the functional currency using exchange rates in effect at the balance sheet date. Non-financial assets and liabilities are re-measuredremeasured at historical exchange rates. Gains and losses related to re-measurementremeasurement are recorded as financial income (expense) in the consolidated statements of operations as appropriate.


57
c.Principles of Consolidation:

c.Principles of Consolidation:

The consolidated financial statements include the accounts of VSI and its wholly-owned subsidiaries, VSL, VSUK, VSG, VSF, VSC, VIRE and VAUS.subsidiaries. All intercompany transactions and balances have been eliminated upon consolidation.

66


d.
d.Cash, Cash Equivalents, Marketable Securities and Short-Term Investments:

The Company accounts for investments in marketable securities in accordance with ASC No. 320, “Investments—Debt and Equity Securities”. and ASC No. 326, “Financial Instruments—Credit Losses.” The Company considers all highly liquid investments with a maturity of three months or less when purchased to be cash equivalents. Cash and cash equivalents consist of cash on hand, highly liquid investments in money market funds and various deposit accounts.


The Company considers all high qualityhigh-quality investments purchased with original maturities at the date of purchase greater than three months but less than one year to be short-term investments. Investments are available to be used for current operations and are, therefore, classified as current assets even though maturities may extend beyond one year.deposits. Cash equivalents, marketable securities and short-term investmentsdeposits are classified as available for sale and are, therefore, recorded at fair value on the consolidated balance sheet, with any unrealized gains and losses reported in accumulated other comprehensive income, (loss), which is reflected as a separate component of stockholders’ equity in the Company’s consolidated balance sheets, until realized. The Company uses the specific identification method to compute gains and losses on the investments. The amortized cost of securities is adjusted for amortization of premiums and accretion of discounts to maturity. Such amortization and accretion is included as a component of financial income,expenses, net in the consolidated statement of operations. Cash, cash equivalents, marketable securities and short-term investmentsdeposits consist of the following (in thousands):

  As of December 31, 2017
  Amortized
Cost
 Gross
Unrealized
Gains
 Gross
Unrealized
Loss
 Fair
Value
         
Cash and cash equivalents                
Cash $49,819  $-  $-  $49,819 
Money market funds  6,870   -   -   6,870 
Total $56,689  $-  $-  $56,689 
                 
Short-term investments                
US Treasury securities $39,758  $*)  $(27) $39,731 
Term bank deposits  40,137   -   -   40,137 
Total $79,895  $-  $(27) $79,868 

 As of December 31, 2021
 Amortized
Cost
Gross
Unrealized
Gains
Gross
Unrealized
Losses
Fair
Value
Cash and cash equivalents    
Money market funds$414,942 $— $— $414,942 
Total$414,942 $— $— $414,942 
Short-term deposits
Term bank deposits$1,850 $— $— $1,850 
Total$1,850 $— $— $1,850 

 As of December 31, 2020
 Amortized
Cost
Gross
Unrealized
Gains
Gross
Unrealized
Losses
Fair
Value
Cash and cash equivalents    
Money market funds$10,712 $— $— $10,712 
Total$10,712 $— $— $10,712 
Marketable securities    
US Treasury securities$34,113 $*)$34,117 
Total$34,113 $*)$34,117 
Short-term deposits
Term bank deposits$30,053 $— $— $30,053 
Total$30,053 $— $— $30,053 
*) Represents an amount lower than $1.


All the US Treasury securities in short-term investmentsmarketable securities have a stated effective maturity of less than 12 months as of December 31, 2017.

  As of December 31, 2016
  Amortized
Cost
 Gross
Unrealized
Gains
 Gross
Unrealized
Loss
 Fair
Value
         
Cash and cash equivalents                
Cash $42,175  $-  $-  $42,175 
Money market funds  6,140   -   -   6,140 
Total $48,315  $-  $-  $48,315 
                 
Short-term investments                
Term bank deposits $65,493   -   -  $65,493 
Total $65,493  $-  $-  $65,493 

58
2020.


The gross unrealized lossgains and losses related to these short-term investments was due primarily to changes in interest rates. The Company reviews its short-term investments on a regular basis to evaluate whether or not any security has experiencedAvailable for sale debt securities with an other than temporary decline in fair value. The Company considers factors such as length of time and extent to which the market value has been less than the cost, the financial condition and near-term prospects of the issuer and its intent to sell, or whether it is more likely than not the Company will be required to sell the investment before recovery of the investment’s amortized cost basis. Ifbasis in excess of estimated fair value are assessed using the Company believesCurrent Expected Credit losses ("CECL") model to determine what portion of that an other than temporary decline exists in one of these securities, the Company writes down these investments to fair value. Fordifference, if any, is caused by expected credit losses. Expected credit losses on available for sale debt securities the portion of the write-down related to credit loss would be recorded to other income (expense), netare recognized in financial expenses, net
67


on the Company’s consolidated statements of operations. Any portion not related to credit loss would be recorded to accumulated other comprehensive income (loss), which is reflected as a separate component of stockholders’ equity in the Company’s condensed consolidated balance sheets. During the yearyears ended December 31, 2017,2021 and 2020, the Company did not considerrecognize an allowance for credit losses on available for sale marketable securities as any of its investmentsexpected credit losses are not material to be other-than-temporarily impaired.

the consolidated financial statements.

A short-term bank deposit is a deposit with a maturity of more than three months but less than one year. Deposits in U.S. dollars bearbore interest at rates ranging from 0.60% - 1.35% and 0.55%-1.11%a rate of 0.15%, per annum, as of December 31, 20172021 and 2016, respectively. Deposits in NIS bear interest at rates of 0.03% and 0.15%ranging from 0.10% - 0.16%, per annum, as of December 31, 2017 and 2016, respectively.2020. Short-term investmentsdeposits are presented at cost which approximates market value due to their short maturities.


e.Restricted Cash:

Restricted cash is primarily invested in certificates of deposit and is used mostly as security for the Company’s lease commitments.

The Company had no short-term restricted cash as of December 31, 2017 and 2016, respectively. The Company had long-term restricted cash in the amount of $547 and $488 as of December 31, 2017 and 2016, respectively.

f.
e.Property and Equipment:

Property and equipment are stated at cost, net of accumulated depreciation. Depreciation is calculated using the straight-line method over the estimated useful lives of the assets at the following annual rates:

  %
Computer equipment   33  
Office furniture and equipment  14-15 
Leasehold improvements   Over the shorter of the expected lease
term or estimated useful life
  
 %
Computer equipment 33% 
Office furniture and equipment14%15%
Leasehold improvements Over the shorter of the expected lease
term or estimated useful life
 

g.Impairment of
f.Goodwill and Other Long-Lived Assets:Assets, including Acquired Intangible Assets and Right-of-Use-Asset:


Goodwill represents the excess of the fair value of purchase consideration in a business combination over the fair value of net tangible and intangible assets acquired. Goodwill amounts are not amortized, but rather tested for impairment at least annually or more often if circumstances indicate that the carrying value may not be recoverable. The Company operates as one reporting segments and considers the enterprise to be the only reporting unit. If the carrying amount of our reporting unit exceeds its fair value, the Company recognizes an impairment loss in an amount equal to that excess, limited to the total amount of goodwill allocated to that reporting unit. No indications of impairment of goodwill were noted during the periods presented.

Acquired intangible assets consist of identifiable intangible assets, including developed technology and trademarks, resulting from business combinations. Acquired finite-lived intangible assets are initially recorded at fair value and are amortized on a straight-line basis over their estimated useful lives. Amortization expense of developed technology and trademarks are recorded within cost of revenues and sales and marketing, respectively, in the consolidated statements of operations.

The Company’s long-lived assets are reviewed for impairment in accordance with ASC No. 360 “Property, Plant and Equipment” whenever events or changes in circumstances indicate that the carrying amount of an asset (or asset group) may not be recoverable. Recoverability of assets (or asset group) to be held and used is measured by a comparison of the carrying amount of an asset to the future undiscounted cash flows expected to be generated by the assets. If such assets are considered to be impaired, the impairment to be recognized is measured by the amount by which the carrying amount of the assets exceeds the fair value of the assets. During the years ended December 31, 2017, 20162021 and 2015,2020, no impairment losses have been recorded.


h.
g.Long-Term Lease Deposits:

Long-term lease deposits include long-term deposits for offices.

i.
h.Revenue Recognition:

The Company generates revenues in the form of software license fees and related maintenance and services fees. MaintenanceSubscription revenues are sold on-premises and services primarily consistare comprised of fees for maintenance servicestime-based licenses whereby customers use the Company's software (including support and unspecified upgrades and enhancements when and if they are available) for a specified period. Perpetual licenses have the same functionality as subscriptions. Maintenance and services primarily consist of fees for maintenance and services of perpetual license sales (including support and unspecified upgrades and
68


enhancements when and if they are available) and to a lesser extent professional services, (including training)which focus on both operationalizing the software and training the Company's customers to fully leverage the use of its products, although the user can benefit from the software without the Company's assistance. In 2021, the Company launched its cloud offering that are not essentialallow customers to functionality of the Company’suse hosted software. The Company sells its products worldwide directly to a network of distributors and VARs.

value-added resellers, and payment is typically due within 30 to 60 calendar days of the invoice date.


The Company accounts for the sale of perpetual softwarerecognizes revenues in accordance with ASC No. 985-605, “Software Revenue Recognition”.606, “Revenue from Contracts with Customers.” As required by ASC 985-605,such, the Company identifies a contract with a customer, identifies the performance obligations in the contract, determines the value oftransaction price, allocates the transaction price to each performance obligation in the contract and recognizes revenues when (or as) the Company satisfies a performance obligation.

Subscription software component of its multiple-element arrangements using the residual method when vendor specific objective evidence (VSOE) of fair value exists for the undelivered elements of maintenance, and professional services agreements. VSOE is based on the price charged when an element is sold separately or renewed. Under the residual method, the fair value of the undelivered elements is deferred, and the remaining portion of the arrangement fee is allocated to the delivered elements and is recognized as revenue, when all ASC 985-605 criteria for revenue recognition are met.

59

The Company determines the fair value based on the stand alone sales price charged for maintenance, and professional services. The Company has defined classes of transactions, based on the value of licensed software products purchased from the Company. The Company prices renewals for each class of transaction as a fixed percentage of the total gross value of licensed software products the customer purchased.

Softwareperpetual license revenues are recognized when persuasive evidenceat the point of an arrangement exists,time when the software license has been delivered there are no uncertainties surrounding product acceptance, there are no significant future performance obligations,and the license fees are fixed or determinable and collectionbenefit of the license feeasset has transferred. Maintenance associated with subscription licenses is considered probable. Fees for arrangements with payment terms extending beyond customary payment terms are considered not to be fixed or determinable, in which case revenue is deferred and recognized when payments become due from the customer provided that all other revenue recognition criteria have been met.

The Company recognizes revenues from the sale of term license arrangements, ratably on a straight-line basis, over the term of the underlyingagreement. In 2021, the Company launched its cloud offering that allows customers to use hosted software and its revenue is recognized ratably over the associated contract and is typically up to one year.

period. As the Company only introduced these licenses in the second half of 2021, the total revenues have not yet been material.

The Company recognizes revenues from maintenance of perpetual license sales ratably over the term of the underlying maintenance contract term.contract. The term of the maintenance contract is usually one year.

Renewals of maintenance contracts create new performance obligations that are satisfied over the new term with the revenues recognized ratably over the period.

Revenues from professional services consist mostly of time and material servicesservices. The performance obligations are satisfied, and accordingly,revenues are generally recognized, aswhen the services are performedprovided or whenonce the service term has expired.

Professional

The Company enters into contracts that can include combinations of products and services, bundled with licensedwhich are generally capable of being distinct and accounted for as separate performance obligations.  The license is distinct upon delivery as the customer can derive the economic benefit of the software and otherwithout any professional services, updates or technical support. The Company allocates the transaction price to each performance obligation based on its relative standalone selling price out of the total consideration of the contract. For maintenance, the Company determines the standalone selling prices based on the price at which the Company separately sells a renewal contract. For professional services, the Company determines the standalone selling prices based on the price at which the Company separately sells those services. For software related elements are not essentiallicenses, the Company uses the residual approach to determine the standalone selling prices due to the functionalitylack of history of selling software license on a standalone basis and the other elementshighly variable sales price.

Trade receivables are generally recorded at the invoice amount mostly for a one year period, net of the arrangement. Revenues allocable to the services are recognized as the services are performed or when the service term has expired, using VSOEan allowance for such services.

credit losses.

Deferred revenues represent mostly unrecognized fees billed or collected for maintenance and professional services.

Deferred revenues are recognized as (or when) the Company performs under the contract. Pursuant to these contracts, customers are not invoiced for subsequent years until the annual renewal occurs. The amount of revenues recognized in the period that was included in the opening deferred revenues balance was $98,085 for the year ended December 31, 2021.

The Company does not grant a right of return to its customers, except for one of its resellers. During the years ended December 31, 2017, 20162021, 2020 and 2015,2019, there were no returns from this reseller.


For information regarding disaggregated revenues, please refer to Note 14.

j.
i.Contract Costs:

The Company pays sales commissions to sales and marketing and certain management personnel based on their attainment of certain predetermined sales goals. Sales commissions earned by employees are considered incremental and recoverable costs of obtaining a contract with a customer. Sales commissions paid for initial contracts, which are not commensurate with sales commissions paid for renewal contracts, are capitalized and amortized over an expected period of benefit. Based on its technology, customer contracts and other factors, the Company has determined the expected period of benefit to be approximately four years. Sales commissions for renewal contracts are capitalized and then
69


amortized on a straight-line basis. Amortization expenses related to these costs are included in sales and marketing expenses in the accompanying consolidated statements of operations.

j.Cost of Revenues:

Cost of revenues consists of the cost of maintenance and services, resulting from costs associated with support, customer success and professional services.

These costs consist primarily of salaries (including payroll tax expense related to stock-based compensation), employee benefits (including commissions and bonuses) and stock-based compensation for our maintenance and services employees; amortization of acquired intangible assets; travel expenses; and allocated overhead costs for facilities, IT and depreciation.
k.
k.Accounting for Stock-Based Compensation:

The Company accounts for stock-based compensation in accordance with ASC No. 718, “Compensation-Stock Compensation”.Compensation.” ASC No. 718 requires companies to estimate the fair value of equity-based payment awards on the date of grant using an Option-Pricing Model (“OPM”). The value of the portion of the award that is ultimately expected to vest is recognized as an expense over the requisite service periods in the Company’s consolidated statements of operations.

Model. The Company recognizes compensation expenses for the value of its equity awards granted based on the straight-line method over the requisite service period of each of the awards.

The Company applies ASC 718 and ASC 505-50, “Equity-Based Payments to Non-Employees” with respect to options issued to non-employee consultants. Accordingly, the Company uses option valuation models to measure the fair value of the options at the measurement date as defined in ASC 505-50.

The Company selected the Black-Scholes-Merton option pricing model as the most appropriate fair value method for its stock options awards, whereas the fair value of restricted stock units is based on the market value of the underlying shares at the date of grant.

The fair value of options granted to employees and non-employee directors is estimated at the date of grant using the following weighted average assumptions:

For the year ended December 31, 2017, there were no stock options granted. For the years ended December 31, 2016 and 2015, dividend yield was 0%, expected volatility was 62.1% and 65.0%, respectively, risk-free interest was 1.42% and 1.94% - 2.00%, respectively, and expected life was 6.25.

The Company used its historical volatility in accordance with ASC 718. The computation of volatility uses historical volatility derived from the Company’s exchange traded shares. Expected term of options granted is calculated based on the simplified method, in accordance with SAB 110, (i.e., as the average between the vesting period and the contractual term of the options). The risk free interest rate assumption is the implied yield currently available on United States treasury zero-coupon issues with a remaining term equal to the expected life of the Company’s options. The dividend yield assumption is based on the Company’s historical experience and expectation of no future dividend payouts and may be subject to substantial change in the future. The Company has historically not paid cash dividends and has no foreseeable plans to pay cash dividends in the future.

60

The non-cashstock-based compensation expenses related to employees and consultants for the years ended December 31, 2017, 20162021, 2020 and 20152019 amounted to $19,835, $12,938$109,779, $68,585 and $7,794,$46,139, respectively.

Effective as


l.Business Combinations:

The Company accounts for its business combinations using the acquisition method of January 1, 2017,accounting, which requires, among other things, allocation of the Company adopted Accounting Standards Update 2016-09, “Compensation—Stock Compensation (Topic 718)” (“ASU 2016-09”)fair value of purchase consideration to the tangible and intangible assets acquired and liabilities assumed at their estimated fair values on a modified, retrospective basis. ASU 2016-09 permits entities to make an accounting policy election related to how forfeitures will impact the recognition of compensation cost for stock-based compensation: to estimate the total number of awards for which the requisite service period will not be rendered or to account for forfeitures as they occur. Upon adoption of ASU 2016-09, the Company elected to change its accounting policy to account for forfeitures as they occur.acquisition date. The change was applied on a modified, retrospective basis with a cumulative-effect adjustment to retained earnings of $2,616 (which increased the accumulated deficit) as of January 1, 2017.

ASU 2016-09 also eliminates the requirement that excess tax benefits be realized as a reduction in current taxes payable before the associated tax benefit can be recognized as an increase in paid in capital. Approximately $7,131 of federal net operating losses and $718 of state net operating losses, neither of which was included in the deferred tax assets recognized in the statement of financial position as of December 31, 2016, have been attributed to tax deduction for stock-based compensation in excess of the fair value of purchase consideration over the values of these identifiable assets and liabilities is recorded as goodwill. When determining the fair value of assets acquired and liabilities assumed, the Company makes estimates and assumptions, especially with respect to intangible assets. The Company's estimates of fair value are based upon assumptions believed to be reasonable, but which are inherently uncertain and unpredictable and, as a result, actual results may differ from estimates. During the measurement period, not to exceed one year from the date of acquisition, the Company may record adjustments to the assets acquired and liabilities assumed, with a corresponding offset to goodwill if new information is obtained related book expense. Under ASU 2016-09, these previously unrecognized deferred tax assets will be recognized on a modified, retrospective basisto facts and circumstances that existed as of the startacquisition date. After the measurement period, any subsequent adjustments are reflected in the consolidated statements of the year in which the ASU 2016-09 is adopted; in this caseoperations. Acquisition costs, such as of January 1, 2017. The U.S. federallegal and state net operating losses and credits that were recognizedconsulting fees, are expensed as of January 1, 2017 have been offset by a valuation allowance. As a result, there is no cumulative-effect adjustment to retained earnings as of January 1, 2017.

Additionally, ASU 2016-09 addresses the presentation of excess tax benefits and employee taxes paid on the statement of cash flows. The Company is now required to present excess tax benefits as an operating activity on the statement of cash flows rather than as a financing activity. The Company adopted this change prospectively.

incurred.

l.
m.Research and Development Costs:

Research and development costs are charged to the statement of operations as incurred. ASC No. 985-20, “Software-Costs of Software to Be Sold, Leased, or Marketed,” requires capitalization of certain software development costs subsequent to the establishment of technological feasibility.

Based on the Company’s product development process, technological feasibility is established upon the completion of a working model. The Company does not incur material costs between the completion of the working model and the point at which the product is ready for general release. Therefore, research and development costs are charged to the statement of operations as incurred.

m.
n.Income Taxes:

The Company accounts for income taxes in accordance with ASC No. 740, using the asset and liability method whereby deferred tax assets and liability account balances are determined based on the differences between financial reporting and the tax basis for assets and liabilities and are measured using the enacted tax rates and laws that will be in effect when the differences are expected to reverse. The Company provides a valuation allowance, if necessary, to reduce deferred tax assets to the amounts that are more likely-than-not to be realized.

70


ASC 740 contains a two-step approach to recognizing and measuring a liability for uncertain tax positions. The first step is to evaluate the tax position taken or expected to be taken in a tax return by determining if the weight of available evidence indicates that it is more likely than not that, on an evaluation of the technical merits, the tax position will be sustained on audit, including resolution of any related appeals or litigation processes. The second step is to measure the tax benefit as the largest amount that is more than 50% likely to be realized upon ultimate settlement. The Company accrues interest and penalties related to unrecognized tax provisions in its taxes on income.

n.
o.Derivative Instruments:

The Company’s primary objective for holding derivative instruments is to reduce its exposure to foreign currency rate changes. The Company reduces its exposure by entering into forward foreign exchange contracts with respect to operating expenses that are forecastforecasted to be incurred in currencies other than the U.S. dollar. A majority of the Company’s revenues and operating expenditures are transacted in U.S. dollars. However, certain operating expenditures are incurred in or exposed to other currencies, primarily the NIS.

The Company has established forecasted transaction currency risk management programs to protect against fluctuations in fair value and the volatility of future cash flows caused by changes in exchange rates. The Company’s currency risk management program includes forward foreign exchange contracts designated as cash flow hedges. These forward foreign exchange contracts generally mature within 12 months. In addition, the Company enters into forward contracts to hedge a portion of its monetary items in the balance sheet, such as trade receivables and payables, denominated in Pound Sterling and Euro for short-term periods (the “Fair Value Hedging Program”). The purpose of the Fair Value Hedging Program is to protect the fair value of the monetary assets from foreign exchange rate fluctuations. Gains and losses from derivatives related to the Fair Value Hedging Program are not designated as hedging instruments. The Company does not enter into derivative financial instruments for trading or speculative purposes.

61


Derivative instruments measured at fair value and their classification on the consolidated balance sheets are presented in the following table (in thousands):

  Assets as of
December 31, 2017
 Liabilities as of
December 31, 2016
  Notional
Amount
 Fair
Value
 Notional
Amount
 Fair
Value
Foreign Exchange Forward Contract Derivatives in cash flow hedging relationships—included in other current assets and accrued expenses and other short term liabilities $1,746  $163  $46,116  $(479)
Assets (liabilities) as ofAssets as of
 December 31, 2021December 31, 2020
 Notional
Amount
Fair
Value
Notional
Amount
Fair
Value
Foreign exchange forward contract derivatives in cash flow hedging relationships included in prepaid expenses and other current assets$115,710 $6,083 $90,452 $3,315 
Foreign exchange forward contract derivatives for monetary items included in prepaid expenses and other current assets and accrued expenses and other short-term liabilities$42,056 $(62)$33,977 $17 

For the years ended December 31, 20172021, 2020 and 2016,2019, the consolidated statements of operations reflect a gain of approximately $2,649$8,901, $257 and $332,$352, respectively, related to the effective portion of foreign currency forward contracts. There was nothe cash flow hedges. No material ineffective portionhedges were recognized for the years ended December 31, 20172021, 2020 and 2016.

2019 in operating expenses in the consolidated statement of operations.

For the years ended December 31, 2021, 2020 and 2019, the consolidated statements of operations reflect a gain of $959, a loss of $1,144 and a gain of $683, respectively, in financial expenses, net, related to the Fair Value Hedging Program.
o.
p.Concentrations of Credit Risks:

Financial instruments that potentially subject the Company to concentrations of credit risk consist principally of cash, cash equivalents, marketable securities, short-term investmentsdeposits and trade receivables.

The Company’s cash, cash equivalents, marketable securities and short-term investmentsdeposits are invested in major banks mainly in the United States but also in Israel, France, Canada, the United Kingdom, France, Germany, Israel, Canada,the Netherlands, Ireland, Luxembourg and Australia. Such deposits in the United States may be in excess of insured limits and are not insured in other jurisdictions. The Company maintains cash and cash equivalents with diversereputable financial institutions and monitors the amount of credit exposure to each financial institution.

71


The Company’s trade receivables are geographically diversified and derived primarily from sales to a network of distributors and VARs mainly in the United States and Europe. Concentration of credit risk with respect to trade receivables is limited by credit limits, ongoing credit evaluation and account monitoring procedures. The Company performs ongoing credit evaluations of its channel partners and establishes an allowance for doubtful accountscredit losses based upon a specific review of all significant outstanding invoices.invoices, historical collection experience, customer creditworthiness, current, and future economic and market condition. The Company writes off receivables when they are deemed uncollectible and having exhausted all collection efforts.

p.
q.Retirement and Severance Pay:

VSI makesand Varonis U.S. Public Sector LLC ("VPS") make available to its employees a retirement plan (the “U.S. Plan”) that qualifies as a deferred salary arrangement under Section 401(k) of the Internal Revenue Code of 1986, as amended (“the Code”(the "Code"). Participants in the U.S. Plan may elect to defer a portion of their pre-tax earnings, up to the Internal Revenue Service annual contribution limit. VSI matchesand VPS match 100% of each participant’s contributions up to a maximum of 3% of the participant’s total pay and 50% of each participant’s contributions on contributions between 3% and 5% of the participant’s total pay. Each participant may contribute up to 80% of total remuneration up to the Internal Revenue Service’s annual contribution limit. Contributions to the U.S. Plan are recorded during the year contributed as an expense in the consolidated statements of income.

Pursuant

Varonis Systems Ltd ("VSL") makes available to its employees, pursuant to Israel’s Severance Pay Law, Israeli employees are entitled to severance pay equal to one month’s salary for each year of employment, or a portion thereof. The employees of the Israeli subsidiary elected to be included under section 14 of the Severance Pay Law, 1963 (“section 14”). According to this section, these employees are entitled only to monthly deposits, at a rate of 8.33% of their monthly salary, made in their name with insurance companies. Payments in accordance with section 14 release the Company from any future severance payments (under the above Israeli Severance Pay Law) in respect of those employees; therefore, related assets and liabilities are not presented in the balance sheet.

The Company’s liability for severance pay for the employees of its French subsidiary is calculated pursuant to French law, according to which French employees are entitled to an indemnity (a statutory redundancy). The law provides for the payment of severance payment to any employee working for the French subsidiary for at least a year.

VSUK


In addition, the Company also makes available pension plans to certain eligible employees a pension plan whereby participantsof other subsidiaries in the plan may elect to defer a portion of their earnings. VSUK matches 100% of each participant’s contributions up to a maximum of 3% of the participant’s net pay.

62

which it operates. Total Company expenses related to retirement and severance pay amounted to $4,801, $3,775$9,598, $7,169 and $3,085$6,390 for the years ended December 31, 2017, 20162021, 2020 and 2015,2019, respectively. The amount of severance payable included in other liabilities as of December 31, 20172021 and 20162020 is $1,781$2,877 and $1,664,$2,727, respectively.

q.
r.Fair Value of Financial Instruments:

Fair value is an exit price, representing the amount that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants. As such, fair value is a market-based measurement that should be determined based on assumptions that market participants would use in pricing an asset or a liability.

A three tier fair value hierarchy is established as a basis for considering such assumptions and for inputs used in the valuation methodologies in measuring fair value:

Level 1: Observable inputs that reflect quoted prices (unadjusted) for identical assets or liabilities in active markets.

Level 2: Observable inputs that reflect quoted prices for identical assets or liabilities in markets that are not active; quoted prices for similar assets or liabilities in active markets; inputs other than quoted prices that are observable for the assets or liabilities; or inputs that are derived principally from or corroborated by observable market data by correlation or other means.

Level 3: Unobservable inputs reflecting ourthe Company's own assumptions incorporated in valuation techniques used to determine fair value. These assumptions are required to be consistent with market participant assumptions that are reasonably available.


72


The fair value hierarchy also requires an entity to maximize the use of observable inputs and minimize the use of unobservable inputs when measuring fair value.

The carrying amounts of cash and cash equivalents, marketable securities, trade receivables, short-term investmentsdeposits and trade payables approximate their fair value due to the short-term maturity of such instruments.

r.
s.Basic and Diluted Net Loss Per Share:

Basic net loss per share is computed by dividing the net loss by the weighted-average number of shares of common stock outstanding during the period.


Diluted net loss per share is computed by giving effect to all potential shares of common stock,potentially dilutive securities, including stock options, restricted stock units, performance stock units and the impact of the conversion spread of the 1.25% Convertible Senior Notes issued by the Company on May 11, 2020 and due August 2025 in an aggregate principal amount of $253,000 (the "2025 Notes"), to the extent dilutive.

Basic and diluted net loss per share was the same for each period presented as the inclusion of all potential shares of common stock outstanding would have been anti-dilutive.

There were 8,556,245,  9,445,326 and 9,101,154 potentially dilutive shares from the conversion of outstanding stock options, restricted stock units and performance stock units that were not included in the calculation of diluted net loss per share for the years ending of December 31, 2021, 2020 and 2019, respectively. Additionally, 8,239,254 shares underlying the conversion option of the 2025 Notes are not considered in the calculation of diluted net loss per share as the effect would be anti-dilutive for the years ending of December 31, 2021 and 2020. The Company intends to settle the principal amount of the 2025 Notes in cash and will use the if-converted method for calculating any potential dilutive effect on diluted net income per share, if applicable. The conversion will have a dilutive impact on diluted net income per share when the average market price of a common stock for a given period exceeds the conversion price of $30.71 per share.

s.
t.Contingent Liabilities:

The Company accounts for its contingent liabilities in accordance with ASC No. 450 “Contingencies”.“Contingencies.” A provision is recorded when it is both probable that a liability has been incurred and the amount of the loss can be reasonably estimated.

With respect to legal matters, provisions are reviewed and adjusted to reflect the impact of negotiations, estimated settlements, legal rulings, advice of legal counsel and other information and events pertaining to a particular matter. As of December 31, 20172021 and 2016,2020, the Company was not a party to any litigation that could have a material adverse effect on the Company’s business, financial position, results of operations or cash flows.

t.Reclassification:
u.Basis of Presentation:

Certain amounts in prior years' financial statements have been recast and reclassified to conform to the current year's presentation.

u.
v.Revolving Credit Facility:

On August 21, 2020, the Company entered into a credit and security agreement with KeyBank National Association (the "Credit and Security Agreement"), for a three-year secured revolving credit facility of $70,000 (the "Credit Facility"). The Credit Facility maturity date is the earlier of August 21, 2023 or 90 days prior to the scheduled maturity of any convertible debt securities. The fees incurred in connection with entering into the Credit and Security Agreement are amortized on a straight-line basis over the contractual term of the arrangement. Ongoing fees and interest paid on the used and unused portions of the Credit Facility are expensed as incurred and included within financial expenses, net on the consolidated statement of operations. The Credit Facility is secured and the Credit and Security Agreement contains customary covenants and customary events of default provisions.

As of December 31, 2021, the Company had no balance outstanding on the Credit Facility and was in compliance with all financial covenants and non-financial covenants.

73


w.Recently Issued Accounting Pronouncements:Pronouncements Not Yet Adopted:

In May 2014,August 2020, the FASB issued ASU No. 2014-09, “Revenue from 2020-06, ASC Subtopic 470-20 “Debt—Debt with Conversion and Other Options” and ASC subtopic 815-40 “Hedging—Contracts in Entity’s Own Equity.” The standard reduced the number of accounting models for convertible debt instruments and convertible preferred stock. Convertible instruments that continue to be subject to separation models are (1) those with Customers”, an updated standard on revenue recognition embedded conversion features that are not clearly and issued subsequent amendmentsclosely related to the initial guidancehost contract, that meet the definition of a derivative, and that do not qualify for a scope exception from derivative accounting and (2) convertible debt instruments issued with substantial premiums for which the premiums are recorded as paid-in capital. Among other potential impacts, ASU 2020-06 will reduce reported interest expense, and thereby decrease reported net loss, and result in March 2016, April 2016, May 2016 and December 2016 within ASU 2016-08, 2016-10, 2016-12 and 2016-20, respectively. The new standards provide enhancementsa reclassification of certain conversion feature balance sheet amounts from stockholder’s equity to liabilities as it relates to the quality and consistency of how revenue is reported while also improving comparability inCompany’s 2025 Notes. Additionally, ASU 2020-06 requires the financial statements of companies reporting using IFRS and US GAAP. The core principleapplication of the new standard is for companiesif-converted method to recognize revenue to depictcalculate the transferimpact of goods or services to customersconvertible instruments on earnings per share. The amendments in amounts that reflect the consideration (that is, payment) to which the company expects to be entitled in exchange for those goods or services. The new standard also will result in enhanced disclosures about revenue, provide guidance for transactions that were not previously addressed comprehensively (for example, service revenue and contract modifications) and improve guidance for multiple-element arrangements. ASU 2014-09 was initially scheduled to bethis update are effective for annual and interim reporting periodsfiscal years beginning after December 15, 20162021, including interim periods within those fiscal years, and maycan be adopted on either on a fullfully retrospective or modified retrospective approach. However, on July 9, 2015, the FASB approved a one year deferral of the effective date of ASU 2014-09. The revised effective date is for annual reporting periods beginning after December 15, 2017 and interim periods thereafter, with an early adoption permitted as of the original effective date.basis. The Company has decided to adoptadopted this standard effectiveon January 1, 20182022 using the fulla modified retrospective methodbasis which will require each prior reporting period presented to be recast in future issuances of the Company’s financial statements. In preparation for adoption of the standard, the Company has implemented internal controls and key system functionality to enable the preparation of financial information and have reached conclusions on key accounting assessments related to the standard, including the assessment of the impact.

63

The most significant impact of the new standard relates to the way the Company accounts for term agreements and commission expense. Specifically, under the current revenue standard, the Company recognizes both the term license and maintenance revenues ratably over the contract period whereas under the new revenue standard it would recognize term license revenues upfront and the associated maintenance revenues over the contract period. The Company has also considered the impact of the guidance in ASC 340-40, “Other Assets and Deferred Costs” under the new standard. Under ASC 340-40, it may be required to capitalize and amortize certain incremental costs of obtaining a contract such as the maintenance portion of sales commissions over the life of the license. Under the Company’s current accounting policy, it does not capitalize sales commission costs but rather recognizes these costs when the purchase order is received.

Adoption of the standard will resultresulted in a reductiondecrease to accumulated deficit of revenues$8,647, a decrease in additional paid-in capital of $1,974 for the year ended December 31, 2017$30,794 and recognition of additional revenues of $1,407 for the year ended December 31, 2016, primarily due to the net change in term license revenue recognition. In addition, adoption of the standard will result in an increase in prepaid expenses and other current assets and a decrease in deferred revenuesliabilities of $9,865 and $97, respectively, as of December 31, 2017, driven by the capitalization of sales commission costs and the upfront recognition of license revenues from term licenses. The cumulative impact to the Company’s accumulated deficit as of January 1, 2016 is a reduction of $5,583.

Adoption of the standard related to revenue recognition had no impact to cash from or used in operating, financing or investing activities on the Company’s consolidated statements of cash flows.

Select recast financial statement information, which reflects the preliminary effect of the adoption of this standard, is set forth below.

  Year ended
December 31, 2017
  As Reported Adjustments Recast for Adoption
of ASC 606
Total revenues $217,364  $(1,974) $215,390 
Operating loss $(13,597) $178  $(13,419)
Income taxes $(2,459) $(328) $(2,787)
Net loss $(13,694) $(151) $(13,845)

  Year ended
December 31, 2016
  As Reported Adjustments Recast for Adoption
of ASC 606
Total revenues $164,456  $1,407  $165,863 
Operating loss $(15,694) $3,699  $(11,995)
Income taxes $(1,131) $(182) $(1,313)
Net loss $(17,710) $3,517  $(14,193)

64

  

December 31, 2017

Balance Sheet Data

  As Reported 

Adjustments

 Recast for Adoption
of ASC 606
Assets      
Current assets:            
Prepaid expenses and other current assets $7,130  $9,865  $16,995 
             
Liabilities and stockholders’ equity            
Current liabilities:            
Accrued expenses and other short term liabilities $42,453  $1,014  $43,467 
Deferred revenues $73,891  $(227) $73,664 
             
Long-term liabilities:            
Deferred revenues $7,034  $130  $7,164 

In January 2016, the FASB issued ASU 2016-13, “Financial Instruments – Credit Losses on Financial Instruments”, which requires that expected credit losses relating to financial assets measured on an amortized cost basis and available for sale debt securities be recorded through an allowance for credit losses. ASU 2016-13 limits the amount of credit losses to be recognized for available for sale debt securities to the amount by which carrying value exceeds fair value and also requires the reversal of previously recognized credit losses if fair value increases. The new standard will be effective for interim and annual periods beginning after January 1, 2020, and early adoption is permitted. The Company is currently evaluating whether to early adopt this standard and the potential effect$22,146 on its consolidated financial statements.

In February 2016, the FASB issued ASU 2016-02, “Leases”, on the recognition, measurement, presentation and disclosure of leases for both parties to a contract (i.e., lessees and lessors). The new standard requires lessees to apply a dual approach, classifying leases as either finance or operating leases based on the principle of whether or not the lease is effectively a financed purchase by the lessee. This classification will determine whether lease expense is recognized based on an effective interest method or on a straight line basis over the term of the lease, respectively. A lessee is also required to record a right-of-use asset and a lease liability for all leases with a term of greater than 12 months regardless of their classification. Leases with a term of 12 months or less will be accounted for in a manner similar to the accounting under existing guidance for operating leases today. The new standard requires lessors to account for leases using an approach that is substantially equivalent to existing guidance for sales-type leases, direct financing leases and operating leases. ASC 842 supersedes the previous leases standard, ASC 840, "Leases". The guidance is effective for the interim and annual periods beginning on or after December 15, 2018, and early adoption is permitted. The Company is currently evaluating whether to early adopt this standard and the potential effect of the guidance on its consolidated financial statements.

In November 2016, the FASB issued ASU 2016-18, “Statement of Cash Flows (Topic 230): Restricted Cash”, which requires companies to include amounts generally described as restricted cash and restricted cash equivalents in cash and cash equivalents when reconciling beginning-of-period and end-of-period total amounts shown on the statement of cash flows. This ASU is effective for annual and interim periods beginning after December 15, 2017. The Company has decided to adopt this standard effective December 31, 2017 using the retrospective transition method, as required by the new standard. The adoption of this standard has an immaterial impact on the Company’s consolidated statements of cash flows.

The following table provides a reconciliation of cash and cash equivalents, and long term restricted cash reported within the consolidated balance sheets that sum to the total of such amounts in the consolidated statements of cash flows:

  December 31.
2017
 December 31.
2016
 December 31.
2015
Cash and cash equivalents $56,689  $48,315  $49,241 
Long term restricted cash included in other assets  547   488   467 
Cash, cash equivalents and long term restricted cash shown in the consolidated statement of cash flows $57,236  $48,803  $49,708 

In January 2018, the FASB released guidance on the accounting for tax on the GILTI provisions of the TCJA. The GILTI provisions impose a tax on foreign income in excess of a deemed return on tangible assets of foreign corporations. The guidance indicates that either (i) accounting for deferred taxes related to GILTI inclusions, or (ii) to treat any taxes on GILTI inclusions as period cost, are both acceptable methods subject to an accounting policy election. In accordance with SEC Staff Accounting Bulletin No. 118, and as the Company is not yet able to reasonably estimate the effect of the GILTI tax, as described in note 9 of the consolidated financial statements, the Company has not yet adopted an accounting policy with respect to the GILTI tax.

65
sheets.


NOTE 3:- PREPAID EXPENSES AND OTHER CURRENT ASSETS

  December 31,
  2017 2016
Prepaid expenses $6,044  $2,871 
Government institutions & other receivables  542   369 
Deferred charges  -   256 
Foreign currency forward contracts derivatives  163   - 
Short-term deposits  

374

   122 
Other  

7

   32 
  $7,130  $3,650 

Prepaid expenses and other current assets consist of the following (in thousands):

 December 31,
 20212020
Deferred commission$17,930 $14,144 
Prepaid expenses6,746 7,938 
Foreign currency forward contracts derivatives6,083 3,332 
Government institutions & other receivables3,333 1,586 
Short-term deposits & other325 357 
Prepaid expenses and other current assets$34,417 $27,357 

NOTE 4:- PROPERTY AND EQUIPMENT, NET

  December 31,
  2017 2016
Cost:    
Computer equipment $8,473  $7,800 
Office furniture and equipment  2,263   2,094 
Leasehold improvements  9,163   7,459 
   19,899   17,353 
Accumulated depreciation  8,003   7,443 
Property and equipment, net $11,896  $9,910 

Property and equipment, net consist of the following (in thousands):

 December 31,
 20212020
Cost:  
Computer equipment$23,515 $18,848 
Office furniture and equipment6,462 5,735 
Leasehold improvements42,419 37,391 
 72,396 61,974 
Accumulated depreciation34,098 24,811 
Property and equipment, net$38,298 $37,163 
Depreciation expensesand amortization expense of property and equipment, net for the years ended December 31, 2017, 20162021, 2020 and 20152019 were $3,328, $2,180$9,355, $9,903 and $1,615,$6,321, respectively.


74


NOTE 5:- ACCRUED EXPENSES AND OTHER SHORT TERMSHORT-TERM LIABILITIES

  December 31,
  2017 2016
Employees $17,748  $12,306 
Accrued expenses  9,507   6,777 
Government authorities and other  14,006   8,293 
Foreign exchange forward contract derivatives  -   479 
Other short term liabilities  1,192   624 
  $42,453  $28,479 

Accrued expenses and other short-term liabilities consist of the following (in thousands):

 December 31,
 20212020
Employees$44,057 $32,593 
Government authorities and other38,487 37,268 
Accrued expenses19,620 13,337 
Foreign exchange forward contract derivatives62 — 
Accrued expenses and other short-term liabilities$102,226 $83,198 

NOTE 6:- COMMITMENTS AND CONTINGENT LIABILITIES

a.Liens:

LEASES

The Company has several liens grantedvarious operating leases for office space, vehicles and office equipment that expire through 2032. The lease agreements generally do not contain any material residual value guarantees or material restrictive covenants. Below is a summary of its operating right-of-use assets and operating lease liabilities (in thousands):
December 31, 2021
Operating right-of-use assets$63,749 
Operating lease liabilities, current$8,794 
Operating lease liabilities, long-term68,694 
Total operating lease liabilities$77,488 

Operating lease liabilities, current are included within accrued expenses and other short-term liabilities in the consolidated balance sheet.

Some leases include one or more options to renew. The exercise of lease renewal options is typically at the Company's sole discretion; therefore, the majority of renewals to extend the lease terms are not included in our right-of-use assets and lease liabilities as they are not reasonably certain of exercise. The Company regularly evaluates the renewal options, and, when it is reasonably certain of exercise, it will include the renewal period in its lease term. New lease modifications result in remeasurement of the right-of-use asset and lease liability.

Some of the real estate leases contain variable lease payments, including payments based on a Consumer Price Index ("CPI"). Variable lease payments based on a CPI are initially measured using the index in effect at lease adoption. Additional payments based on the change in a CPI are recorded as a period expense when incurred.

The Company has deposit guarantees issued by a financial institutions mainlyinstitution to secure various operating lease agreements in connection with its office space.

66


b.Lease Commitments:

The Company rents its facilities in all locations under operating leases with

75


Minimum lease payments for the Company's right-of-use assets over the remaining lease periods expiring from 2018-2026. The lease agreements of VSL include extension options. VSL leases cars for its employees under operating lease agreements expiring at various dates from 2018-2020.

Aggregate minimum rental commitments under non-cancelable leases as of December 31, 20172021, are as follows (in thousands):
December 31, 2021
2022$10,932 
202311,347 
20249,845 
20259,884 
20269,998 
Thereafter34,583 
 
Total undiscounted lease payments$86,589 
Less: Imputed interest(9,101)
Present value of lease liabilities$77,488 

The weighted average remaining lease terms and discount rates for the upcoming yearsall operating leases were as follows:

follows as of December 31, 2021:
Remaining lease term and discount rate:
Weighted average remaining lease term (years)8.19
Weighted average discount rate2.88 %
  Payments Due By
Period
 
2018 $6,418  
2019  5,561  
2020  4,335  
2021  4,561  
2022  4,587  
Thereafter  21,063  
  $46,525  

Total rent expensesoperating lease cost for the years ended December 31, 2017, 20162021, 2020 and 20152019 were $4,075, $3,258$6,920, $12,151 and $4,296,$8,912, respectively.

NOTE 7:- CONVERTIBLE SENIOR NOTES AND CAPPED CALL TRANSACTIONS

On May 11, 2020, the Company issued the 2025 Notes pursuant to an Indenture dated May 11, 2020 (the “Indenture”), between the Company and U.S. Bank National Association, as trustee. The total minimum rentoffering consisted of $220,000 aggregate principal amount plus the full exercise of the initial purchasers’ option to purchase up to an additional $33,000 aggregate principal amount. The net proceeds to the Company after the initial purchaser discount and issuance costs were approximately $245,158. The Company used $29,348 of the net proceeds from the offering to pay the cost of the capped call transactions described below.

The 2025 Notes will mature on August 15, 2025, unless earlier converted, redeemed or repurchased. Interest will be payable semi-annually in arrears on February 15 and August 15 of each year, beginning on August 15, 2020, at a rate of 1.25% per year.

The initial conversion rate for the 2025 Notes is 32.5668 shares of the Company’s common stock for each $1,000 principal amount of the 2025 Notes, which is equivalent to an initial conversion price of approximately $30.71 per share. The conversion rate is subject to adjustment in specified events. The 2025 Notes are convertible into shares of the Company’s common stock, at the option of a holder, prior to the close of business on the business day immediately preceding February 15, 2025, under certain conditions.

In addition, on or after February 15, 2025, a holder may convert all or any portion of its 2025 Notes at any time. During the three months ended December 31, 2021, the conversion feature of the 2025 Notes was triggered and therefore the 2025 Notes are currently convertible, in whole or in part, at the option of the holders from January 1, 2022 through March 31, 2022. Whether the 2025 Notes will be convertible following such period will depend on the continued satisfaction of this condition or another conversion condition. The Company has not received any conversion notices through the issuance date of our consolidated financial statements. Since the Company may elect to repay the 2025 Notes in cash, shares of our common stock, or a combination of both, it has continued to classify the future under the non-cancelable sublease2025 Notes as long-term debt on its consolidated balance sheet as of December 31, 2017 was $732.

For leases that contain predetermined fixed escalations2021.

76



The 2025 Notes are not redeemable at the Company’s option prior to August 20, 2023. The Company may redeem the 2025 Notes for cash, at its option, subject to the terms and conditions provided in the Indenture.

If the Company undergoes a “fundamental change” (as defined in the Indenture), subject to certain conditions, holders may require the Company to repurchase for cash all or part of their 2025 Notes. The Indenture includes customary terms, including certain events of default after which the 2025 Notes may be due and payable immediately.

The Company accounted for the 2025 Notes in accordance with ASC 470-20 "Debt with Conversion and Other Options" and separated the 2025 Notes into liability and equity components. The carrying amounts of the minimum rent,liability components of the 2025 Notes were calculated by measuring the fair value of similar debt instruments that do not have an associated convertible feature. The carrying amounts of the equity components, representing the conversion option, were determined by deducting the fair value of the liability components from the par value of the 2025 Notes. This difference represents the debt discount that is amortized to interest expense over the terms of the 2025 Notes using the effective interest rate method. The carrying amount of the equity components representing the conversion option was approximately $31,779 for the 2025 Notes and is recorded in additional paid-in capital and are not remeasured as long as they continue to meet the conditions for equity classification.

The Company allocates transaction costs related to the issuance of the 2025 Notes to the liability and equity components using the same proportions as the initial carrying value of the Notes. Transaction costs attributable to the liability component were approximately $6,857 and are being amortized to interest expense at an effective interest method rate of 4.51% over the term of the 2025 Notes. Transaction costs attributable to the equity component were approximately $985 and are netted with the equity component of the 2025 Notes in additional paid-in capital.

The net carrying amount of the liability and equity components of the 2025 Notes was as follows (in thousands):
As of
December 31, 2021
Liability component
Principal$253,000 
Unamortized discount(22,759)
Unamortized issuance costs(4,911)
Net carrying amount$225,330 
Equity component, net of discount and issuance costs$30,794 

The interest expense recognized related to the 2025 Notes for the years ended December 31, 2021 and 2020 was as follows (in thousands):
December 31, 2021December 31, 2020
Contractual interest expense$3,162 $2,012 
Amortization of debt discount5,651 3,369 
Amortization of debt issuance costs1,219 727 
Total$10,032 $6,108 

As of December 31, 2021, the total estimated fair value of the 2025 Notes was approximately $436,425. The fair value was determined based on the closing trading price per $100 of the 2025 Notes as of the last day of trading for the period. The fair value of the 2025 Notes is primarily affected by the trading price of our common stock and market interest rates. The fair value of the 2025 Notes is considered a Level 2 within the fair value hierarchy and was determined based on inputs that are observable in the market or that could be derived from, or corroborated with, observable market data, quoted price of the 2025 Notes in an over-the-counter market.

Capped Call Transactions

In May 2020, in connection with the pricing of the 2025 Notes, the Company recognizesentered into privately negotiated capped call transactions (the “Capped Call Transactions”). The Capped Call Transactions are generally expected to reduce the
77


potential dilution to the Company’s common stock upon any conversion of the 2025 Notes and/or offset any cash payments the Company is required to make in excess of the principal amount of converted 2025 Notes, as the case may be, with such reduction and/or offset subject to a cap initially equal to $47.24 (the "Cap Price").

The Capped Call Transactions are separate transactions, and are not part of the terms of the 2025 Notes and will not change the holders’ rights under the 2025 Notes. As the Capped Call Transactions are considered indexed to the Company's stock and are considered equity classified, they are recorded in stockholders’ equity on the consolidated balance sheet and are not accounted for as derivatives. The cost of the Capped Call Transactions was approximately $29,348 and was recorded as a reduction to additional paid-in capital.

NOTE 8:- BUSINESS COMBINATIONS

On October 29, 2020, the Company completed the acquisition of all the share capital of Polyrize Security Ltd. ("Polyrize"). The deal was for $39,380 and comprised of the total fair value of consideration of $29,620 (the "Purchase Price") and an aggregate conditional retention consideration of $9,760 to be paid to its founders over three years subject to their continued employment with the Company. The Purchase Price consisted of $24,713 in cash, $4,198 for the fair value of 106,926 shares of our common stock issued and $709 in fair value of replacement equity awards attributable to pre-acquisition service. The conditional retention consideration expenses related rent expenseto the founders will be recorded as compensation expenses in the statement of operations over the period.

The following table summarizes the allocation of the purchase price to the fair value of the tangible and intangible assets acquired and liabilities assumed as of the acquisition date:
 Purchase Price Allocation
(in thousands)
Estimated Useful Life
(in years)
Net tangible assets acquired$375 
Intangible assets:
Developed technology & trademarks6,110 4
Goodwill23,135 
Total purchase price$29,620 

The excess of purchase consideration over the fair value of net tangible and identifiable intangible assets acquired was recorded as goodwill. The Company believes the goodwill represents the synergies expected from expanded market opportunities when integrating Polyrize with our offerings. Acquisition-related costs of $325 are included in general and administrative expenses on our consolidated statements of operations for the year ended December 31, 2020.

NOTE 9:- GOODWILL AND INTANGIBLE ASSETS

On October 29, 2020, the Company completed the acquisition of the share capital of Polyrize, a provider of software that maps and analyzes relationships between users and data across a number of cloud applications and services.
Goodwill

Goodwill represents the excess of the purchase price over the identifiable tangible and intangible assets acquired less liabilities assumed arising from business combinations. The Company believes the goodwill represents the synergies expected from expanded market opportunities when integrating with its offerings.

All goodwill balances are subject to annual goodwill impairment testing. As of December 31, 2021, the Company concluded that no impairment for goodwill, including intangibles, was required.

Intangible Assets

Total cost and amortization of intangible assets is comprised of the following (in thousands, except useful life):
78



Intangible assets, netEstimated Useful Life
(in years)
December 31, 2021
Developed technology & trademarks4$6,110 
Total intangible assets6,110 
Less: Accumulated amortization1,797 
Total intangible assets, net$4,313 

Intangible assets are expensed on a straight-line basis fromover the date of possessionuseful life of the property to the end of the initial lease term.asset. The Company records any differences betweenrecorded amortization expense of $1,533 and $264 for the straight-line rent amountsyears ended December 31, 2021 and amounts payable under the leases2020, respectively.

The following table summarizes estimated future amortization expense of our intangible assets as part of deferred rent, in accrued liabilities or long-term liabilities, as appropriate. Cash or lease incentives received upon entering into certain leases (“tenant allowances”) are recognized on a straight-line basis as a reduction to rent from the date of possession of the property through the end of the initial lease term. The Company records the unamortized portion of tenant allowances as a part of deferred rent, in current liabilities or other long-term liabilities, as appropriate. As of December 31, 2017 and 2016, deferred rent included $941 and $624, respectively, in current liabilities in the Company’s consolidated balance sheets, and deferred rent included $4,780 and $5,377, respectively, in long-term liabilities in the Company’s consolidated balance sheets.

On March 31, 2014, the Company entered into a promissory note and related security documents with Bank Leumi USA. The Company may borrow up to $7,000 against certain of its accounts receivable outstanding amount, based on several conditions, at an annual interest rate of the Wall Street Journal Prime Rate less 0.15%, provided that the annual interest rate applicable to advances will not be lower than 4.10%. As of December 31, 2017, that rate amounted to 4.35%. This promissory note enables the Company, among other things, to engage in foreign currency hedging transactions with Bank Leumi USA to manage exposure to foreign currency risk without restricted cash requirements. The Company may borrow under the promissory note until August 15, 2018 at which time the principal sum of each such loan, together with accrued and unpaid interest payable, will become due and payable. As of December 31, 2017, the Company had no balance outstanding under the promissory note. As part of the transaction, the Company granted the lender a security interest in its personal property, excluding intellectual property and other intangible assets. The promissory note also contains customary events of default.

2021 (in thousands):

Years ending December 31,Amount
20221,525 
20231,525 
20241,263 
Total future amortization expense$4,313 


NOTE 7:10:- FAIR VALUE MEASUREMENTS


The Company evaluates assets and liabilities subject to fair value measurements on a recurring basis to determine the appropriate level to classify them for each reporting period. There have been no transfers between fair value measurements levels during the years ended December 31, 2021 and 2020.

The following table sets forth the Company’s assets and liabilities that were measured at fair value as of December 31, 20172021 and 20162020 by level within the fair value hierarchy (in thousands):

  As of December  31, 2017 As of December 31, 2016
  Level I 

Level

II

 Level
III
 Fair
Value
 Level I 

Level

II

 Level
III
 Fair
Value
Financial assets:                                
Cash equivalents:                                
Money market funds  6,870         6,870   6,140         6,140 
Short-term investments:                                
US Treasury securities  39,731         39,731             
Term bank deposits  40,137         40,137   65,493         65,493 
Other current assets:                                
Forward foreign exchange contracts     163      163             
Financial liabilities:                                
Forward foreign exchange contracts                 (479)     (479)
Total financial assets (liabilities) $86,738  $163  $  $86,901  $71,633  $(479) $  $71,154 

67

 As of December 31, 2021As of December 31, 2020
 Level ILevel
II
Level
III
Fair
Value
Level ILevel
II
Level
III
Fair
Value
Financial assets:        
Cash equivalents:        
Money market funds$414,942 $— $— $414,942 $10,712 $— $— $10,712 
Marketable securities:
US Treasury securities— — — — 34,117 — — 34,117 
Prepaid expenses and other current assets:
Forward foreign exchange contracts— 6,083 — 6,083 — 3,332 — 3,332 
Financial liabilities:
Accrued expenses and other short-term liabilities:
Forward foreign exchange contracts— (62)— (62)— — — — 
Total financial assets (liabilities)$414,942 $6,021 $— $420,963 $44,829 $3,332 $— $48,161 


See Note 7 “Convertible Senior Notes and Capped Call Transactions” for the carrying amount and estimated fair value of the Company's 2025 Notes as of December 31, 2021.

NOTE  8:11:- STOCKHOLDERS’ EQUITY

79


a.
a.Composition of common stock capital:

  Authorized Issued and outstanding
  Number of shares
  December 31, December 31,
  2017 2016 2017 2016
Stock of $0.001 par value:        
Common stock  200,000,000   200,000,000   28,146,162   26,821,762 
 AuthorizedIssued and outstanding
 Number of shares
 December 31,December 31,
 2021202020212020
Stock of $0.001 par value:    
Common stock200,000,000 200,000,000 107,509,096 95,456,862 

b.
b.Common stock rights:

The Company’s Amended and Restated Certificate of Incorporation authorizes the Company to issue 200,000,000 shares of common stock, par value $0.001 per share.

The common stock confers upon its holders the right to participate in the general meetings of the Company, to vote at such meetings (each share represents one1 vote), to elect board members and to participate in any distribution of dividends or any other distribution of the Company’s property, including the distribution of surplus assets upon liquidation.


On February 8, 2021, the Company announced a 3-for-one split of its common stock to stockholders of record as of the close of business on March 12, 2021. Trading of the Company’s common stock began on a split-adjusted basis on March 15, 2021. Common stock and per share data in this Annual Report on Form 10-K have been adjusted for the impact of the split.

c.
c.Stock option plans:

On December 30, 2005, the Company’s board of directors adopted the Varonis Systems, Inc. 2005 Stock Plan (the “2005 Stock Plan”). As of December 31, 2013, the Company had reserved 4,713,31914,139,957 shares of common stock available for issuance to employees, directors, officers and consultants of the Company and its subsidiaries. The optionsawards generally vest over four years. No awards were granted under the 2005 Stock Plan subsequent to December 31, 2013, and no further awards will be granted under the 2005 Stock Plan.

On November 14, 2013, the Company’s board of directors adopted the Varonis Systems, Inc. 2013 Omnibus Equity Incentive Plan (the “2013 Plan”) which was subsequently approved by the Company’s stockholders. The Company initially reserved 1,904,6335,713,899 shares of common stock for issuance under the 2013 Plan to employees, directors, officers and consultants of the Company and its subsidiaries. The number of shares of common stock available for issuance under the 2013 Plan was increased on January 1, 2016 and has been, and will be, increased on each January 1 thereafter by four percent (4%) of the number of shares of common stock issued and outstanding on each December 31 immediately prior to the date of increase (rounded down to the nearest whole share), but the amount of each increase will be limited to the number of shares of common stock necessary to bring the total number of shares of Common Stock available for grant and issuance under the 2013 Plan to five percent (5%) of the number of shares of common stock issued and outstanding on each December 31. OnSince January 1, 2018, 2017 and 2016, the share reserve under the 2013 Plan washas been automatically increased by 1,125,846, 1,072,870 and 1,042,766 shares, respectively.an aggregate of 24,217,741 shares. Awards granted under the 2013 Plan generally vest over four years. Any award that is forfeited or canceled before expiration becomes available for future grants under the 2013 Plan.


On October 22, 2020, and as part of the acquisition, the Company’s board of directors approved the assumption of a certain portion of Polyrize Options pursuant to the terms and conditions of the Polyrize 2019 Share Incentive (“Polyrize Plan”) as part of the acquisition.
A summary of employees’ stock options activities during the year ended December 31, 20172021 is as follows:

  Year ended
December 31, 2017
  Number Weighted
average
exercise
price
 Aggregate
intrinsic
value
(in thousands)
 Weighted
average
remaining
contractual
life (years)
Options outstanding at the beginning of the year  2,388,348  $15.243  $30,025   5.861 
Granted  -  $-         
Exercised  (832,270) $13.031         
Forfeited  (99,793) $19.930         
Options outstanding at the end of the period  1,456,285  $16.172  $47,152   4.906 
Vested and expected to vest  1,456,285  $16.172  $47,152   4.906 
Options exercisable at the end of the period  1,262,206  $15.052  $42,282   4.595 

68

80

A summary of employees’ stock options activities during the years ended December 31, 2016 and 2015 is as follows:


  Year ended
December 31, 2016
  Number Weighted
average
exercise
price
 Aggregate
intrinsic
value
(in thousands)
 Weighted
average
remaining
contractual
life (years)
Options outstanding at the beginning of the year  2,782,560  $14.026  $21,337   6.246 
Granted  135,000  $16.870         
Exercised  (445,535) $5.901         
Forfeited  (83,677) $27.126         
Options outstanding at the end of the period  2,388,348  $15.243  $30,025   5.861 
Vested and expected to vest  2,331,800  $15.074  $29,689   5.806 
Options exercisable at the end of the period  1,752,416  $12.583  $26,473   5.119 

  Year ended
December 31, 2015
  Number Weighted
average
exercise
price
 Aggregate
intrinsic
value
(in thousands)
 Weighted
average
remaining
contractual
life (years)
Options outstanding at the beginning of the year  4,080,611  $9.697  $95,855   6.092 
Granted  191,200  $28.253         
Exercised  (1,334,351) $1.521         
Forfeited  (154,900) $25.265         
Options outstanding at the end of the period  2,782,560  $14.026  $21,337   6.246 
Vested and expected to vest  2,677,503  $13.623  $21,284   6.156 
Options exercisable at the end of the period  1,794,249  $8.841  $20,496   5.035 
Year ended
 December 31, 2021
 NumberWeighted
average
exercise
price
Aggregate
intrinsic
value
(in thousands)
Weighted
average
remaining
contractual
life (years)
Options outstanding at the beginning of the year1,022,763 $6.862 $47,417 3.452 
Granted— $— 
Exercised(215,893)$6.128 
Forfeited(3,000)$2.077 
Options outstanding at the end of the period803,870 $7.077 $33,524 2.747 
Options exercisable at the end of the period787,775 $7.106 $32,830 2.638 


There were no options granted in 2017. The weighted average grant date fair values of options granted during the year ended December 31, 2016 and 2015 were $16.870 and $28.637, respectively.

2021 pursuant to our 2005 Stock Plan, 2013 Plan or Polyrize Plan (collectively "Stock Plans").


The aggregate intrinsic value in the table above represents the total intrinsic value that would have been received by the option holders had all option holders exercised their options on the last date of the period. Total intrinsic value of options exercised for the years ended December 31, 2017, 20162021, 2020 and 20152019 was $22,382, $9,418$13,153, $9,922 and $27,885,$12,453, respectively. As of December 31, 20172021 and 2016,2020, there was $2,208$496 and $3,380,$810, respectively, of total unrecognized compensation cost related to non-vested share-based compensation arrangements granted under the 2005our Stock Plan and 2013 Plan.Plans. This cost is expected to be recognized over a weighted-average period of approximately 0.8871.802 and 1.7742.721 years, respectively.

69


The options outstanding as of December 31, 20172021 have been separated into ranges of exercise price as follows:

Range of

exercise price

 Options
outstanding
as of
December 31,
2017
 Weighted
average
remaining
contractual
life (years)
 Weighted
average
exercise
price
 Options
exercisable
as of
December 31,
2017
 Weighted
average
remaining
contractual
life (years)
 Weighted
average
exercise
price of
options
exercisable
$1.039-1.576  401,476   1.383  $1.295   401,476   1.383  $1.295 
$6.230-8.800  55,929   3.908  $7.125   55,929   3.908  $7.125 
$12.470-16.870  228,001   5.820  $13.435   200,917   5.508  $12.972 
$19.510-21.660  374,257   6.606  $21.207   284,671   6.567  $21.201 
$22.010-24.230  170,815   6.193  $22.292   144,967   6.182  $22.342 
 $29.880   117,829   7.145  $29.880   74,758   7.145  $29.880 
 $39.860   107,978   6.225  $39.860   99,488   6.225  $39.860 
     1,456,285   4.906  $16.172   1,262,206   4.595  $15.052 
Range of exercise price
Options
outstanding
as of
December 31, 2021
Weighted
average
remaining
contractual
life (years)
Weighted
average
exercise
price
Options
exercisable
as of
December 31, 2021
Weighted
average
remaining
contractual
life (years)
Weighted
average
exercise
price of
options
exercisable
$4.157 5.682224,661 2.959 $4.883 208,566 2.561 $4.808 
$6.503 8.077433,307 2.559 $7.111 433,307 2.559 $7.111 
 $9.960  120,180 3.142 $9.960 120,180 3.142 $9.960 
 $13.287  25,722 2.222 $13.287 25,722 2.222 $13.287 
   803,870 2.747 $7.077 787,775 2.638 $7.106 

The options outstanding as of December 31, 2016 have been separated into ranges of exercise price as follows:

Range of

exercise price

 Options
outstanding
as of
December 31,
2016
 Weighted
average
remaining
contractual
life (years)
 Weighted
average
exercise
price
 Options
exercisable
as of
December 31,
2016
 Weighted
average
remaining
contractual
life (years)
 Weighted
average
exercise
price of
options
exercisable
$0.901-1.576  710,562   2.482  $1.317   710,562   2.482  $1.317 
$6.230-8.800  89,373   4.963  $6.953   89,373   4.963  $6.953 
$12.470-16.870  442,507   7.078  $13.812   279,863   6.163  $12.470 
$19.510-21.660  546,959   7.622  $21.205   307,302   7.558  $21.200 
$22.010-24.230  295,513   7.299  $22.278   191,891   7.289  $22.316 
 $29.880   154,200   8.145  $29.880   70,684   8.145  $29.880 
 $39.860   149,234   7.225  $39.860   102,741   7.225  $39.860 
     2,388,348   5.861  $15.243   1,752,416   5.119  $12.583 

d.
d.Options issued to consultants:

The Company’s outstanding options granted to consultants for services as of December 31, 20172021 were as follows:

Issuance date Options for
shares of
common stock
 Exercise price
per share
 Options
exercisable
 Exercisable
through
  (number)   (number)  
February 2013  1,500  $12.470   1,500  February 2023
August 2013  4,188  $21.140   4,083  August 2023
March 2014  7,953  $39.860   7,163  March 2024
May 2014  6,075  $22.010   5,317  May 2024
November 2014  7,107  $21.660   4,897  November 2024
May 2015  2,000  $19.510   1,292  May 2025
February 2016  2,500  $16.870   1,145  February 2026
   31,323       25,397   
Issuance dateNumber of options outstanding and exercisableExercise price
per share
Exercisable
through
August 20136,000 $7.047 August 2023
March 20144,950 $13.287 March 2024
May 20143,000 $7.337 May 2024
November 20149,300 $7.220 November 2024
February 20163,000 $5.623 February 2026
 26,250 


There were no options granted in 2021 pursuant to our Stock Plans.

70
e.Restricted stock units and performance stock units:

81

 The Company’s outstanding options granted to consultants for services as of December 31, 2016 were as follows:


Issuance date Options for
shares of
common stock
 Exercise price
per share
 Options
exercisable
 Exercisable
through
  (number)   (number)  
February 2013  1,500  $12.470   1,344  February 2023
August 2013  4,188  $21.140   3,104  August 2023
October 2013  750  $24.230   547  October 2023
March 2014  13,100  $39.860   8,187  March 2024
May 2014  6,850  $22.010   3,704  May 2024
November 2014  10,246  $21.660   4,364  November 2024
May 2015  5,250  $19.510   1,750  May 2025
February 2016  2,500  $16.870     February 2026
   44,384       23,000   

e.Restricted stock units:

The following provides a

A summary of the restricted stock unit activityunits and performance stock units for employees, consultants and non-employee directors of the Company for the year ended December 31, 2017:

2021 is as follows:
  Number of
Shares
Underlying
Outstanding
Restricted Stock
Units
 Weighted-
Average
Grant Date
Fair Value
Outstanding as of January 1, 2017  1,399,127  $19.96 
Granted  1,295,653  $31.58 
Vested  (407,458) $21.89 
Forfeited  (269,201) $22.75 
Unvested as of December 31, 2017  2,018,121  $27.32 
 Number of
Shares
Underlying
Outstanding
Restricted Stock
Units and Performance Stock Units
Weighted-
Average
Grant Date
Fair Value
Outstanding as of January 1, 20218,388,963 $23.00 
Granted3,542,175 $65.25 
Vested(3,615,077)$20.10 
Forfeited(589,936)$38.10 
Unvested as of December 31, 20217,726,125 $42.53 

As of December 31, 2021 and 2020, there was $265,345 and $141,408, respectively, of total unrecognized compensation cost related to employees and non-employees unvested restricted stock units and performance stock units which is expected to be recognized over a weighted-average period of 2.078 and 2.120 years, respectively.

The following providesCompany grants performance stock units to certain employees under the 2013 Plan. The number of performance stock units earned and eligible to vest are generally determined after a summaryone-year performance period, based on achievement of certain Company financial performance measures and the recipient’s continued service. The Company recognizes share-based compensation expense for the performance stock units on a straight-line basis over the requisite service period for each separately vesting portion of the restrictedaward when it is probable that the performance conditions will be achieved. Compensation expense for performance stock unit activity forunits with financial performance measures is measured using the Company forfair value at the year ended December 31, 2016:

date of grant and recorded over the three-year vesting period, and may be adjusted over the vesting period based on interim estimates of performance against the pre-set objectives.
  Number of
Shares
Underlying
Outstanding
Restricted Stock
Units
 Weighted-
Average
Grant Date
Fair Value
Outstanding as of January 1, 2016  643,506  $23.38 
Granted  1,038,044  $19.67 
Vested  (199,074) $22.82 
Forfeited  (83,349) $20.21 
Unvested as of December 31, 2016  1,399,127  $19.96 

f.
f.2015 Employee Stock Purchase Plan

On May 5, 2015, the Company’s stockholders approved the Varonis Systems, Inc. 2015 Employee Stock Purchase Plan (the “ESPP”), which the Company’s board of directors had adopted on March 19, 2015. The ESPP became effective as of June 30, 2015. The ESPP allows eligible employees to purchase shares of the Company’s common stock at a discount through payroll deductions of up to 15% of their eligible compensation, at not less than 85% of the fair market value of the Company’s common stock on the first day or last trading day in the offering period, subject to any plan limitations. The Company initially reserved 500,0001,500,000 shares of common stock for issuance under the ESPP. The number of shares available for issuance under the ESPP was increased on January 1, 2016 and has been, and will increasebe, increased each January 1 thereafter, by an amount equal to the lesser of (i) one percent (1%) of the number of shares of common stock issued and outstanding on each December 31 immediately prior to the date of increase, except that the amount of each such increase will be limited to the number of shares of common stock necessary to bring the total number of shares of common stock available for issuance under the ESPP to two percent (2%) of the number of shares of common stock issued and outstanding on each such December 31, or (ii) 400,0001,200,000 shares of common stock. OnSince January 1, 2018, 2017 and 2016, the share reserve under the ESPP washas been automatically increased by 188,813, 158,695 and 21,383 shares, respectively.an aggregate of 3,004,765 shares. The ESPP will continue in effect until the earlier of (i) the date when no shares of common stock are available for issuance thereunder or (ii) June 30, 2025; unless terminated prior thereto by the Company’s board of directors or compensation committee, each of which has the right to terminate the ESPP at any time.

71


g.
g.Stock-based compensation expense for employees and consultants:

The Company recognized non-cash stock-based compensation expense in the consolidated statements of operations as follows (in thousands):

  Year ended
December 31,
  2017 2016 2015
Cost of revenues $1,078  $699  $419 
Research and development  5,209   3,052   1,954 
Sales and marketing  8,542   6,104   3,041 
General and administrative  5,006   3,083   2,380 
Total $19,835  $12,938  $7,794 
82



Year ended
 December 31,
 202120202019
Cost of revenues$8,995 $5,013 $2,561 
Research and development36,033 21,979 13,188 
Sales and marketing39,684 25,578 14,782 
General and administrative25,067 16,015 15,608 
Total$109,779 $68,585 $46,139 

h.Follow-on offering:

On February 16, 2021, the Company completed a registered public offering of 7,961,538 shares of the Company's common stock, which included 1,038,459 additional optional shares, at a price of $65.00 per share, before underwriting discounts and commissions. The common stock offering generated net proceeds to the Company of approximately $500,034, after deducting $17,466 in underwriting discounts and commissions and offering costs, which have been recorded against the proceeds received from the offering.

NOTE 9:12:- INCOME TAXES


a.
a.U.S. Tax Reform:


On December 22, 2017, the U.S. government enacted comprehensive tax legislation commonly referred to as the Tax Cuts and Jobs Act (the “TCJA”"TCJA"). was signed into law. The TCJA makes broad and complex changes to the Code.Code that impact the Company's provision for income taxes. The changes include, but are not limited to:

·A corporate income tax rate decrease from 35% to 21% effective for tax years beginning after December 31, 2017 (“Rate Reduction”);
·The transition of U.S international taxation from a worldwide tax system to a territorial system by providing a 100 percent deduction to an eligible U.S. shareholder on foreign sourced dividends received from a foreign subsidiary (“100% Dividend Received Deduction”);
·A one-time transition tax on

Decreasing the mandatory deemed repatriation of cumulative foreign earnings as of December 31, 2017; and
·Taxation of GILTI earned by foreign subsidiaries beginning after December 31, 2017. The GILTI tax imposes a tax on foreign income in excess of a deemed return on tangible assets of foreign corporations.

The Company has not completed its accounting for the income tax effects of the TCJA. Where the Company has not yet been able to make reasonable estimates of the impact of certain elements, the Company has not recorded any amounts related to those elements and has continued accounting for them in accordance with ASC 740 on the basis of the tax laws in effect immediately prior to the enactment of the TCJA, pursuant to SEC Staff Accounting Bulletin No. 118.

The Company has calculated its best estimate of the impact of the TCJA for its year end income tax provision in accordance with its understanding of the TCJA and guidance available as of the date of this filing. As a result:

Rate Reduction

The TCJA reduces the U.S. federal corporate income tax rate from 35% to 21% for tax years beginning after December 31, 2017. In addition, the TCJA makes certain changes to the depreciation rules and implements new limits on the deductibility of certain executive compensation.

The Company estimates that after it utilizes its $23,992 net operating losses carryforwards for Federal income tax purposes, available as of December 31, 2017, the Rate Reduction is expected to positively impact the Company’s future US after tax earnings. However, the ultimate impact is subject to the effect of other complex provisions in the TCJA, including the GILTI tax, which the Company is currently reviewing, and it is possible that any impact of GILTI tax could significantly reduce the benefit of the Rate Reduction. Due to the uncertain practical and technical application of many of these provisions, it is currently not possible to reliably estimate whether GILTI will apply and if so, how it would impact the Company.

72

Deemed Repatriation Transition Tax

The Deemed Repatriation Transition Tax is a tax on previously untaxed accumulated and current earnings and profits (“E&P”) of certain of our foreign subsidiaries. To determine the amount of the Transition Tax, the Company must determine, in addition to other factors, the amount of post-1986 E&P of its foreign subsidiaries, as well as the amount of non-U.S. income taxes paid on such earnings. Due to the aggregate accumulated deficits of our foreign subsidiaries, the Company will not be subject to any transition tax under this provision of the TCJA.

100% Dividend Received Deduction and Indefinite Reinvestment Assertion

Effectiveeffective for tax years beginning after December 31, 2017 the TCJA provides a 100% dividend received deduction, subject to a one-year holding period, to a U.S. corporate shareholder for the foreign source portion(“Rate Reduction”); and


Taxation of dividends received from a “specified 10-percent owned foreign corporation.”

Prior to enactment of the TCJA, the Company had asserted indefinite reinvestment of the earnings of its foreign subsidiaries. Under the TCJA, however, these earnings are no longer subject to U.S. tax as a result of the transition tax. Nevertheless, a distribution of the earnings from ourGILTI earned by foreign subsidiaries may still be subject to withholding taxes imposed by the local country from which the earnings would be distributed. Because the Company did not have sufficient information as of year-end to evaluate how the TCJA would impact the Company’s existing position that its foreign earnings are permanently reinvested, the Company has not included a provisional amount for this item in its financial statements for fiscal yearbeginning after December 31, 2017. The Company will record amounts as needed for this item beginningGILTI tax imposes a tax on foreign income in the first reporting period within the measurement period in which the Company obtains the necessary information and is able to analyze and use to prepareexcess of a reasonable estimate.

deemed return on tangible assets of foreign corporations.


GILTI Tax

The TCJA creates a new requirement that certain


Certain income (i.e.(i.e., GILTI) earned by controlled foreign corporations (“CFCs”) must be included currently in the gross income of the CFCs’ U.S. shareholder. GILTI is the excess of the shareholder’s “net CFC tested income” over the net deemed tangible income return, which is currently defined as the excess of (1) 10 percent of the aggregate of the U.S. shareholder’s pro rata share of the qualified business asset investment of each CFC with respect to which it is a U.S. shareholder, over (2) the amount of certain interest expense taken into account in the determination of net CFC-tested income.

Because of the complexity of the new GILTI tax rules,


For 2021, the Company is continuingnot subject to evaluate this provisiontax on account of GILTI as it has net CFC tested loss on an aggregated basis.

Accounting for the TCJA

The Company accounted for the tax impact related to the TCJA and believe its analysis to be completed. The Company recognizes that the application of ASC 740. Under U.S. GAAP,IRS is continuing to publish and finalize ongoing guidance which may modify accounting interpretation for the TCJA, the Company would look to account for these impacts in the period of such change is permitted to make an accounting policy election to either treat taxes due on future inclusions in U.S. taxable income related to GILTI as a current-period expense when incurred or to factor such amounts into the Company’s measurement of its deferred taxes.

Whether the Company is expected to have future U.S. inclusions in taxable income related to GILTI depends on not only its current structure and estimated future results of global operations but also its intent and ability to modify its structure and/or business, The Company has not yet completed its analysis of the GILTI tax rules and is not yet able to reasonably estimate the effect of this provision of the TCJA or make an accounting policy election for the ASC 740 treatment of the GILTI tax. Therefore, the Company has not recorded any amounts related to potential GILTI tax in its financial statements and has not yet made a policy decision regarding whether to record deferred taxes on GILTI.

enacted.

b.
b.The Company:

The Company is taxed in accordance with U.S. tax laws.


83


As of December 31, 2017,2021, the Company had gross federal net operating loss carry-forward("NOL") carry-forwards of approximately $318,321, of which approximately $22,907 expire starting in 2032 and the remainder do not expire and can only be used to offset 80% of taxable income. As of December 31, 2021, the Company had NOL carry-forwards for federal, state and foreign income tax purposes of approximately $23,992, $10,646$201,029 and $534,$3,870, respectively. If not utilized, these carryforwards willState NOL carry-forwards of $172,131 expire starting in 2028, 20202023 and indefinitely for federal, state and foreign tax purposes, respectively.the remainder do not expire. Foreign NOL carry-forwards do not expire. In addition, as of December 31, 2017,2021, the Company had federal research credit, retention credit, and foreign tax credit and Ireland Employment credit carryforwards of approximately $1,412, $24, $190 and $195,$19, respectively. If not utilized, the federal tax carryforwards will begin to expire in 2033, 2032 and 2026, respectively. The Company alsoIreland has credits in Israel totaling approximately $344. These credits have no expiration date. Utilization ofon the employment credit.

A U.S. net operating lossescorporation's ability to utilize its federal and credits may be subjectstate NOL and tax credit carryforwards to substantial annual limitations due to the “change in ownership” provisionsoffset its taxable income is limited under Section 382 of the Code if the corporation undergoes an ownership change (within the meaning of Code Section 382). In general, an “ownership change” occurs whenever the percentage of the stock of a corporation owned by “5-percent shareholders” (within the meaning of Code Section 382) increases by more than 50 percentage points over the lowest percentage of the stock of such corporation owned by such “5-percent shareholders” at any time over the testing period.

An ownership change under Code Section 382 would establish an annual limitation to the amount of NOL and similar state provisions.tax credit carryforwards the Company could utilize to offset its taxable income or income tax in any single year. The annual limitation may result in the expiration of net operating losses and credits before utilization and in the event the Company undergoeswe have a change of ownership, utilization of the carryforwards could be restricted.

73


c.
c.Loss before taxes on income is comprised as follows:  follows (in thousands): 

  Year ended
December 31,
  2017 2016 2015
Domestic $(18,234) $(16,898) $(20,098)
Foreign  6,999   319   (499)
  $(11,235) $(16,579) $(20,597)
Year ended
 December 31,
 202120202019
Domestic$(101,245)$(80,086)$(82,007)
Foreign(9,594)(5,812)5,631 
 $(110,839)$(85,898)$(76,376)

d.
d.Taxes on income (loss) are comprised as follows:follows (in thousands):

  Year ended
December 31,
  2017 2016 2015
Current:      
Domestic:      
Federal $(92) $92  $ 
State  191   109   85 
Foreign  2,516   930   601 
Total current income tax $2,615  $1,131  $686 
             
Deferred:            
Foreign $(156) $  $ 
Total deferred income tax $(156) $  $ 
Income tax expense $2,459  $1,131  $686 
Year ended
 December 31,
 202120202019
Current:   
Domestic:   
Federal$(549)$90 $665 
State145 128 13 
Foreign5,182 8,854 1,619 
Total current income tax$4,778 $9,072 $2,297 
Deferred:
Domestic:
Federal$43 $$— 
State— 
Foreign1,195 (969)91 
Total deferred income tax$1,244 $(960)$91 
Income tax expense$6,022 $8,112 $2,388 

84


e.
e.Deferred income taxes:

Deferred income taxes reflect the net tax effects of temporary differences between the carrying amounts of assets and liabilities for financial reporting purposes and the amounts used for income tax purposes. The Company’s deferred tax assets are derived from its U.S. net operating loss carry forwardsNOL carry-forwards and other temporary differences.

In assessing


ASC 740 requires an assessment of both positive and negative evidence concerning the realizationrealizability of our deferred tax assets in each jurisdiction. After considering evidence such as current and cumulative financial reporting incomes, the Company considers whether itexpected sources of future taxable income and tax planning strategies, the Company’s management concluded that a valuation allowance is more likely than not that all orrequired in the Unites States and some portionforeign jurisdictions. However, other foreign jurisdictions recorded a net deferred tax liability of $97 as of December 31, 2021. Future changes in these factors, including the Company’s anticipated results, could have a significant impact on the realization of the deferred tax assets will not be realized. Based on the Company’s history of losses in the US and Israel, the Company established a valuation allowance on its US and Israeli deferred tax assets.

  December 31,
  2017 2016
Carry forward losses and credits $7,407  $6,294 
Deferred revenues  14,226   16,774 
Accrued payroll, commissions, vacation  1,105   2,078 
Allowance for doubtful accounts  633   43 
Accrued severance pay  239   372 
Other  2,668   2,939 
Net deferred tax assets before valuation allowance  26,278   28,500 
Valuation allowance  (26,122)  (28,500)
Net deferred tax assets $

156

  $ 

Valuation allowance decreased by $2,378 during 2017, which included the impact of the Company’s adoption of ASU 2016-09, Improvements to Employee Share-Based Payment Accounting, on January 1, 2017. ASU 2016-09 simplifies several aspects of accounting for employee share-based payment transactions, including the accounting for income taxes, forfeitures, statutory tax withholding requirements and classification in the statements of cash flows.  Upon adoption, the Company recognized the previously unrecognized excess tax benefits using the modified retrospective transition method.  The adoption resultedwould result in an increase or decrease to the valuation allowance and a corresponding charge to income tax expense. The Company reevaluates the judgements surrounding its estimates and makes adjustments as appropriate each reporting period.


Significant components of our deferred tax assets and liabilities as of $7,849December 31, 2021 and a decrease to retained earnings of the same amount with an offsetting entry to valuation allowance which was also recorded to retained earnings. As a result, the adoption of this standard did not have an impact on our consolidated balance sheet, results of operations, cash flows or statement of stockholders’ equity. Without2020 are as follows (in thousands):
 December 31,
 20212020
Deferred tax assets:
Carry forward losses and credits$82,530 $53,221 
Deferred revenues11,628 13,054 
Accrued payroll, commissions, vacation6,867 3,808 
Equity compensation18,469 10,348 
Allowance for credit losses1,711 1,287 
Accrued severance pay391 312 
Operating lease liability14,453 11,302 
Other512 963 
Deferred tax assets before valuation allowance136,561 94,295 
Valuation allowance(118,882)(77,542)
Deferred tax assets$17,679 $16,753 
Deferred tax liability:
Accrued compensation and other accrued expense$— $(48)
Operating lease right-of-use asset(12,478)(8,780)
Convertible senior notes, net(5,298)(6,797)
Deferred tax liability$(17,776)$(15,625)
Net deferred tax asset (liability)$(97)$1,128 
The change in the valuation allowance the Company’s deferred tax assets would have increased by $7,849.

74
was approximately an increase of $41,340 and $14,943 during 2021 and 2020, respectively.


f.
f.Reconciliation of the theoretical tax expenses:

85


A reconciliation between the theoretical tax expense, assuming all income is taxed at the statutory tax rate applicable to income of the Company, and the actual tax expense (benefit) as reported in the consolidated statements of operations is as follows:

follows (in thousands, except tax rate):
  Year ended December 31,
  2017 2016 2015
Loss before taxes, as reported in the consolidated statements of operations $(11,235) $(16,579) $(20,597)
Statutory tax rate  34%  34%  34%
             
Theoretical tax benefits on the above amount at the US statutory tax rate $(3,820) $(5,637) $(7,003)
Income tax at rate other than the U.S. statutory tax rate  (934)  68   333 
Tax advances and non-deductible expenses including equity based compensation expenses  3,123   4,298   1,061 
Operating losses and other temporary differences for which valuation allowance was provided  (10,203)  3,001   6,558 
Research and Development Tax Credit  1,126   (1,182)  - 
State tax  (563)  (536)  (477)
Impact of rate change  12,121   (360)  (82)
Change in tax reserve for uncertain tax positions  1,576   1,209   320 
Other individually immaterial income tax items  33   270   (24)
Actual tax expense $2,459  $1,131  $686 
 Year ended December 31,
 202120202019
Loss before taxes, as reported in the consolidated statements of operations$(110,839)$(85,898)$(76,376)
Statutory tax rate21 %21 %21 %
Theoretical tax benefits on the above amount at the US statutory tax rate$(23,276)$(18,039)$(16,039)
Income tax at rate other than the U.S. statutory tax rate(2,621)4,845 (2,508)
Tax advances and non-deductible expenses including equity based compensation expenses(8,533)934 (115)
Operating losses and other temporary differences for which valuation allowance was provided41,340 22,189 22,818 
State tax(2,945)(2,872)(3,436)
Impact of rate change(2,568)— 401 
Change in tax reserve for uncertain tax positions4,850 1,489 1,247 
Other individually immaterial income tax items(225)(434)20 
Actual tax expense$6,022 $8,112 $2,388 

g.A reconciliation of the beginning and ending amounts of unrecognized tax benefits in the years ended December 31, 20162021 and 20152020 are as follows:follows (in thousands):

Gross unrecognized tax benefits as of January 1, 2016 $897 
Increase/decrease in tax position for current year  992 
Increase/decrease in tax position for prior years  217 
Gross unrecognized tax benefits as of December 31, 2016 $2,106 
Increase/decrease in tax position for current year  1,752 
Increase/decrease in tax position for prior years  (176)
Gross unrecognized tax benefits as of December 31, 2017 $3,682 
Gross unrecognized tax benefits as of January 1, 2020$3,201 
Increase in tax position for current year1,787 
Increase in tax position for prior years979 
Decrease in tax position for prior years(171)
Decrease for lapse of statute of limitations/settlements(1,106)
Gross unrecognized tax benefits as of December 31, 2020$4,690 
Increase in tax position for current year4,335 
Increase in tax position for prior years3,624 
Decrease in tax position for prior years(870)
Decrease for lapse of statute of limitations/settlements(2,239)
Gross unrecognized tax benefits as of December 31, 2021$9,540 

There was $3,682$9,540 of unrecognized income tax benefits that, if recognized, approximately $3,400$5,762 would impact the effective tax rate in the period in which each of the benefits is recognized. The Company includes interest and penalties related to unrecognized tax benefits within the provision for income taxes on the consolidated statements of operations. The total amount of penalties and interest is approximately $172$578 as of December 31, 2017.

2021.

75
h.Foreign taxation:

86

h.Foreign taxation:



1. Israeli tax benefits under the Law for the Encouragement of Capital Investments, 1959 (the “Investment Law”):

Conditions for entitlement to

VSL has utilized various benefits under the benefits:

TheInvestment Law. Those benefits available to a Beneficiary Enterprise relate only to taxable income attributable to the specific investment program and are conditioned upon meeting the terms stipulated in the Investment Law, and the related regulations and the criteria set forth in the applicable certificate of approval (for a Beneficiary Enterprise).approval. If VSL does not fulfill these conditions, in whole or in part, the benefits canwill most likely be cancelled, and VSL may be required to refund the benefits, in an amount linked to the Israeli consumer price index plus interest.

The Office of the Chief Scientist at Israel’s Ministry of Industry, Trade and Labor approved the Israeli subsidiary as an R&D-incentive enterprise for a foreign resident company in accordance with the Encouragement of Capital Investments (Consolidated Version) Law.

If cash dividends are distributed out of tax exempt profits in a manner other than upon complete liquidation, VSL will then become liable for tax at the rate of 10%-25% (depending on the level of foreign investments in VSL) in respect of the amount distributed.

2. Undistributed earnings of foreign subsidiaries:


In general, it is the Company’s practice and intention to reinvest the earnings of its non-U.S. subsidiaries in those operations. Undistributed earnings, if any, of foreign subsidiaries are immaterial for all periods presented. Because the Company’s non-U.S. subsidiary earnings have previously been included in the computation of the one-time Transition Tax on foreign earnings required by the TCJA and throughout the years have been included in the GILTI computations, any additional taxes due with respect to such earnings or the excess of the amount for financial reporting over the tax basis of its foreign investments would generally be limited to foreign withholding taxes and/or U.S. state income taxes.
i.Tax assessments:
As of December 31, 2017, approximately $3,401 of undistributed earnings from non-U.S. operations held by2021, the Company’s foreign subsidiaries andCompany's federal tax returns for the Beneficiary Enterprise of VSL are designated as indefinitely reinvested outsideyears 2010 through the U.S. Accordingly, no additional U.S. income taxes or additional foreign withholding taxes have been provided thereon. Determination ofcurrent period, excluding the amount of unrecognized deferred2016 tax liability related to these earnings is not practicable.

i.Tax assessments:

The Company has not beenyear which was audited by the Internal Revenue Service, but are under current audit in various states forand most state tax years 2013 through 2016. As of December 31, 2016, our federal returns for the years ended 2012 through the current period and most state returns for the years ended 2009 through the current period, are still open to examination. In addition, all ofThe Company remains open to examination to the extent net carry-over unused operating losses and research and developmenttax credit carryforwards that may be used in futureattributable to those years are still subject to adjustment.

In January 2017,remain unutilized. The Company is currently under certain state tax audits.


During 2020, the Israeli Tax AuthoritiesAuthority initiated a withholding tax assessment audit on VSL for the years 2013-2015. The2016-2019. During 2021, the Company believes it has valid arguments to support its positions and intends to defend against anythe Israeli Tax Authority settled an income tax assessment.audit on VSL for the tax years 2016-2019. The Company has recorded a provision with respect to its uncertain tax positions in accordance with ASC 740.

The Company has final income tax assessments for VSL in Israel through 2012, VSUK in UK2019, Varonis (UK) Limited through 20122017 and VSF inVaronis France SAS through 2012.

VSG in Germany, VSC in Canada, VIRE in Ireland and VAUS in Australia2018.

All other foreign subsidiaries do not have final tax assessments since their respective inceptions.

87


NOTE 10:13:- FINANCIAL EXPENSES, NET

Year ended
 December 31,
 202120202019
Financial income:   
Interest on bank deposits & other$164 $674 $2,041 
 164 674 2,041 
Financial expenses:
Amortization of debt discount and issuance costs6,870 4,096 — 
Interest expenses, principally from convertible note3,168 2,017 — 
Foreign currency transaction losses, net1,699 1,726 2,225 
Bank and other charges572 318 205 
 (12,309)(8,157)(2,430)
Financial expenses, net$(12,145)$(7,483)$(389)

  Year ended
December 31,
  2017 2016 2015
Financial income:            
Interest on bank deposits, net $747  $520  $330 
Foreign currency transactions gains, net  1,773       
Other  27       
   2,547   520   330 
             
Financial expenses:            
Bank charges  185   149   95 
Foreign currency transactions losses, net     1,224   1,711 
Other     32   47 
   (185)  (1,405)  (1,853)
  $2,362  $(885) $(1,523)

76

NOTE 11:14:- GEOGRAPHIC INFORMATION AND MAJOR CUSTOMER AND PRODUCT DATA

Summary information about geographic areas:

ASC 280, “Segment Reporting,” establishes standards for reporting information about operating segments. Operating segments are defined as components of an enterprise about which separate financial information is available that is evaluated regularly by the chief operating decision maker in deciding how to allocate resources and in assessing performance. The Company manages its business on the basis of one1 reportable segment and unit and derives revenues from licensing of software saleand sales of professional services, maintenance and technical support (see Note 1 above for a brief description of the Company’s business). The following is a summary of revenues within geographic areas:

areas (in thousands):
  Year ended
December 31,
  2017 2016 2015
Revenues based on customer’s location:            
United States $134,438  $100,281  $73,343 
EMEA (*)  70,128   52,410   44,994 
Rest of the World  12,798   11,765   8,873 
Total revenues $217,364  $164,456  $127,210 
Year ended
 December 31,
 202120202019
Revenues based on customer’s location:   
North America$279,104 $207,488 $174,607 
EMEA (*)101,694 77,093 70,208 
Rest of the World9,336 8,108 9,375 
Total revenues$390,134 $292,689 $254,190 

(*)Sales to customers in France accounted for $22,762, $17,129 and $13,570 for the years ended December 31, 2017, 2016 and 2015, respectively.
During the years ended December 31, 2017, 2016 and 2015, there were no sales to a single customer exceeding 10% of the Company’s revenues.

  December 31,
  2017 2016
Long-lived assets by geographic region:        
United States $7,072  $7,664 
Israel  2,944   1,827 
France  1,426   207 
Other  454   212 
  $11,896  $9,910 

(*) Sales to customers in France accounted for 10.5% and 10.6% of the Company’s revenues for the years ended December 31, 2021 and 2020, respectively. Sales to customers in France did not exceed 10% of total revenues for the year ended December 31, 2019.


During the years ended December 31, 2021, 2020 and 2019, respectively, there were no sales to a single customer exceeding 10% of the Company’s revenues.

The following is a summary of long-lived assets, including property and equipment, net and operating lease right-of-use assets, within geographic areas (in thousands):
88


 December 31,
 20212020
Long-lived assets by geographic region:  
United States$43,317 $30,938 
Israel40,169 42,471 
Ireland16,341 9,684 
Other2,220 1,994 
$102,047 $85,087 

89


Item 9.Changes in and Disagreements with Accountants on Accounting and Financial Disclosure

There have been no changes in our independent registered public accounting firm, Kost Forer Gabbay & Kasierer, a member of Ernst & Young Global, or disagreements with our accountants on matters of accounting and financial disclosure.

Item 9A.Controls and Procedures

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act) as of the end of the period covered by this report. Based on that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures as of the end of the period covered by this report were effective at a reasonable assurance level in ensuring that information required to be disclosed by us in reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. We believe that a control system, no matter how well designed and operated, cannot provide absolute assurance that the objectives of the control system are met, and no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within a company have been detected. The effectiveness of our internal control over financial reporting as of December 31, 2017 has been audited by Kost Forer Gabbay & Kasierer, a member of Ernst & Young Global and an independent registered public accounting firm, as stated in their report which is included in Part II, Item 8 of this Annual Report on Form 10-K.

77


Management’s Annual Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act). Our management conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 20172021 based on the criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

Based on the results of its evaluation, management concluded that our internal control over financial reporting was effective as of December 31, 2017.

2021.


The effectiveness of our internal control over financial reporting as of December 31, 2021 has been audited by Kost Forer Gabbay & Kasierer, a member of Ernst & Young Global and an independent registered public accounting firm, as stated in their report which is included in Part II, Item 8 of this Annual Report on Form 10-K.
Changes in Internal Control over Financial Reporting

There was no change in our internal control over financial reporting that occurred during the three months ended December 31, 20172021 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.


We regularly seek to identify, develop and implement improvements to our technology systems and business processes, some of which may affect our internal control over financial reporting. These changes may include such activities as implementing new, more efficient systems, updating existing systems or platforms, automating manual processes or utilizing technology developed by third parties. These system changes are often phased in over multiple periods in order to limit the implementation risk in any one period, and as each change is implemented we monitor its effectiveness as part of its internal control over financial reporting.
Item 9B.Other Information

None.


Item 5.02 Departure of Directors or Certain Officers; Election of Directors; Appointment of Certain Officers; Compensatory Arrangements of Certain Officers.

On February 3, 2022, in connection with a change in the reporting structure of the Company, Gilad Raz, the Company’s Chief Information Officer and Vice President of Technical Services, is no longer an executive officer of the Company, as defined under the Securities Exchange Act of 1934.

Item 5.03. Amendments to Articles of Incorporation or Bylaws; Change in Fiscal Year.

90


On February 3, 2022, the Board adopted amendments to the Company’s Amended and Restated Bylaws (the “Bylaws,” and as so amended, the “Amended Bylaws”), effective immediately, to change the requirements under which stockholders may (i) nominate persons for election to the Board or bring business before an annual meeting of stockholders and (ii) nominate persons for election to the Board at a special meeting of stockholders called by the Board for that purpose, in each case, without including such matters in the Company’s proxy materials. As amended, nominations and notices of other business to be brought before an annual meeting must be received at the Company’s principal executive offices not earlier than the close of business on the 120th day nor later than the close of business on the 90th day prior to the anniversary date of the immediately preceding annual meeting. Director nominations for a special meeting must be received at the Company’s principal executive offices (i) not earlier than the close of business on the120th day prior to the scheduled date of the special meeting (ii) nor later than (a) the close of business on the 90th day prior to the scheduled date of the special meeting or (b) the close of business on the 10th day following the date on which the public disclosure of the date of the special meeting was first made. In addition, the amendments to the Bylaws expand upon the procedural requirements applicable to stockholders who wish to nominate director candidates or propose other business at a meeting of stockholders, by adding certain customary informational and other requirements regarding the proposing stockholder and any director nominee. The Board made the amendments to the timing and other procedural requirements for stockholder nominations and proposals of other business to better align them with peer company norms.

The foregoing summary of the amendments to the Bylaws is qualified in its entirety by reference to the Amended Bylaws, a copy of which is filed with this Annual Report as Exhibit 3.2 and incorporated in this Part II, Item 9B by reference. Additionally, a copy of the Amended Bylaws, marked to show changes to the Bylaws, is also included as Exhibit 3.3 hereto (additions are underlined and deletions are struck through) and incorporated herein by reference.
91


PART III


Item 10.Directors, Executive Officers and Corporate Governance


The information required by this item (other than the information set forth in the next paragraph in this Item 10) will be included in our definitive proxy statement with respect to our 20182022 Annual Meeting of Stockholders to be filed with the SEC, and is incorporated herein by reference.

reference (the “2022 Proxy Statement”).


Code of Business Conduct and Ethics

We have adopted a code of business conduct and ethics that is applicable to all of our employees, officers and directors, including our chief executive and senior financial officers. The code of business conduct and ethics is available on our website at www.varonis.com. We expect that any amendment to the code, or any waivers of its requirements, will be disclosed on our website. The inclusion of our website in this Form 10-K does not include or incorporate by reference the information on our website into this Form 10-K.


Procedures for Stockholder Nominations

The information required under Item 407(c)(3) of Regulation S-K is incorporated herein by reference to the discussion under “Stockholder Recommendations and Nominations of Directors” in our 2022 Proxy Statement on the procedures by which stockholders may recommend nominees to our Board or directly propose nominees for consideration pursuant to our Bylaws. No material changes to those procedures have occurred since the disclosure regarding those procedures in our definitive proxy statement for our 2021 Annual Meeting of Shareholders, except as set forth in Item 9B above.
Item 11.Executive Compensation

The information called for by this item will be included in our definitive proxy statement with respect to our 20182022 Annual Meeting of Stockholders to be filed with the SEC and is incorporated herein by reference.


Item 12.Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters

The information called for by this item will be included in our definitive proxy statement with respect to our 20182022 Annual Meeting of Stockholders to be filed with the SEC and is incorporated herein by reference.


Item 13.Certain Relationships and Related Transactions, and Director Independence

The information called for by this item will be included in our definitive proxy statement with respect to our 20182022 Annual Meeting of Stockholders to be filed with the SEC and is incorporated herein by reference.


Item 14.Principal Accounting Fees and Services

The information called for by this item will be included in our definitive proxy statement with respect to our 20182022 Annual Meeting of Stockholders to be filed with the SEC and is incorporated herein by reference.


92


PART IV

Item 15.Exhibits and Financial Statement Schedules

(a) Financial Statements

Our consolidated financial statements are listed in the “Index to Consolidated Financial Statements” under Part II, Item 8 of this Annual Report on Form 10-K. All schedules are omitted because they are not applicable or the required information is shown in the financial statements or notes thereto.

78


(b) Exhibits

Exhibit
Number
Description of the Document
3.1(1)Amended and Restated Certificate of Incorporation
3.2(2)Amended and Restated Bylaws
4.1(3)Third Amended and Restated Investors’ Rights Agreement, dated as of February 24, 2011, by and among the Company and certain holders of the Company’s capital stock named therein
10.1(4)†Form of Indemnification Agreement between the Company and its directors and officers
10.2(5)†2005 Stock Plan, as amended May 7, 2013
10.3(6)†2013 Omnibus Equity Incentive Plan
10.4(7)†Forms of Restricted Stock Unit Award Grant Notice and Restricted Stock Unit Award Agreement under the 2013 Omnibus Equity Incentive Plan
10.5(8)†2015 Employee Stock Purchase Plan
10.6(9)†Employment Agreement by and between the Company and Yakov Faitelson, dated as of February 10, 2014
10.7(10)†Employment Agreement by and between the Company and Ohad Korkus, dated as of February 10, 2014
10.8(11)†Employment Agreement by and between the Company and Guy Melamed, dated as of February 7, 2017
10.9(12)†Amendment to Employment Agreement by and between the Company and Guy Melamed, dated as of February 8, 2018
10.10(13)†Employment Agreement by and between the Company and James O’Boyle, dated as of February 10, 2014
10.11(14)New York Office Lease, dated as of December 19, 2011 by and between JT MH 1250 Owner LP and the Company
10.12(15)First Modification of Lease Agreement, dated as of June 18, 2014, between JT MH 1250 Owner LP and the Company
10.13(16)*EMC Select Distributor Agreement for Software, dated January 24, 2007, by and between EMC Corporation and the Company
10.14(17)*Amendment No. 1 to the EMC Select Distributor Agreement for Software, dated July 2011, by and between EMC Corporation and the Company
21.1List of Subsidiaries
23.1Consent of Kost Forer Gabbay & Kasierer, a member of Ernst & Young Global
31.1Rule 13a-14(a) Certification of Chief Executive Officer and President of the Company in accordance with Section 302 of the Sarbanes-Oxley Act of 2002
31.2Rule 13a-14(a) Certification of Chief Financial Officer of the Company in accordance with Section 302 of the Sarbanes-Oxley Act of 2002
32.1**Section 1350 Certification of Chief Executive Officer and President of the Company in accordance with Section 906 of the Sarbanes-Oxley Act of 2002
32.2**Section 1350 Certification of Chief Financial Officer of the Company in accordance with Section 906 of the Sarbanes-Oxley Act of 2002
101The following materials from the Company’s Annual Report on Form 10-K for the year ended December 31, 2016, formatted in XBRL (eXtensible Business Reporting Language): (i) the Consolidated Balance Sheets, (ii) the Consolidated Statements of Operations, (iii) the Consolidated Statements of Comprehensive Loss, (iv) the Consolidated Statements of Cash Flows and (v) related notes to these consolidated financial statements, tagged as blocks of text and in detail

Indicates management contract or compensatory plan or arrangement.
*Confidential treatment for portions of this exhibit has been granted by the Securities and Exchange Commission.

79


**Document has been furnished, is not deemed filed and is not to be incorporated by reference into any of the Company’s filings under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended, irrespective of any general incorporation language contained in any such filing.
(1)Filed as Exhibit 3.1 to the Company’s Quarterly Report on Form 10-Q filed with the SEC on May 8, 2014 (the “Company’s First Quarter 2014 Form 10-Q”) and incorporated herein by reference.
(2)Filed as Exhibit 3.2 to the Company’s First Quarter 2014 Form 10-Q and incorporated herein by reference.
(3)Filed as Exhibit 4.2 to the Company’s Registration Statement on Form S-1 (Registration No. 333-191840) (the “IPO Registration Statement”) with the SEC on October 22, 2013 and incorporated herein by reference.
(4)Filed as Exhibit 10.1 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(5)Filed as Exhibit 10.2 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.
(6)Filed as Exhibit 99.2 to the Company’s Registration Statement on Form S-8 (Registration No. 333-194657) with the SEC on March 18, 2014 and incorporated herein by reference.
(7)Filed as Exhibit 10.1 to the Company’s Quarterly Report on Form 10-Q filed with the SEC on August 6, 2014 (the “Company’s Third Quarter 2014 Form 10-Q”) and incorporated herein by reference.
(8)Filed as Exhibit A of the Proxy Statement on Form DEF 14A with the SEC on March 26, 2015 and incorporated herein by reference.
(9)Filed as Exhibit 10.8 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(10)Filed as Exhibit 10.9 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(11)Filed as Exhibit 10.1 to the Company’s Current Report on Form 8-K filed with the SEC on February 13, 2017 and incorporated herein by reference.
(12)Filed as Exhibit 10.1 to the Company’s Current Report on Form 8-K filed with the SEC on February 12, 2018 and incorporated herein by reference.
(13)Filed as Exhibit 10.11 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(14)Filed as Exhibit 10.11 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.
(15)Filed as Exhibit 10.2 to the Company’s Third Quarter 2014 Form 10-Q and incorporated herein by reference.
(16)Filed as Exhibit 10.12 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.
(17)Filed as Exhibit 10.13 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.

The exhibits listed below in the accompanying “Index to Exhibits” are filed or incorporated by reference as part of this Annual Report on Form 10-K.

Item  16.Form 10-K Summary

None.

80

None.






93


SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.

VARONIS SYSTEMS, INC.
February 13, 20188, 2022By:/s/ Yakov Faitelson
Yakov Faitelson
Chief Executive Officer and President
(Principal Executive Officer)
February 13, 20188, 2022By:/s/ Guy Melamed
Guy Melamed
Chief Financial Officer and Chief Operating Officer (Principal Financial Officer
and Principal Accounting Officer)





POWER OF ATTORNEY

Each

KNOW ALL PERSONS BY THESE PRESENTS, that each person whose signature appears below constitutes and appoints Yakov Faitelson and Guy Melamed, jointly and each of them,severally, his true and lawfulor her attorneys-in-fact, and agents, each with fullthe power of substitution, and resubstitution, severally, for him and in his name, place and stead,or her in any and all capacities, to sign any and all amendments (including post-effective amendments) to this Annual Report on Form 10-K, and to file the same, with all exhibits thereto and other documents in connection therewith, with the Securities and Exchange Commission, granting unto said attorneys-in-fact and agents, and each of them, full power and authority to do and perform each and every act and thing requisite and necessary to be done in and about the premises, as fully to all intents and purposes as he might or could do in person, hereby ratifying and confirming all that each of said attorneys-in-fact, and agents, or any of them or their or his substitute or substitutes, may lawfully do or cause to be done by virtue hereof.


Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant in the capacities and on the dates indicated below.

indicated.

Signature

Title

Date

SignatureTitleDate

/s/ Yakov Faitelson

Chief Executive Officer, President

February 13, 20188, 2022
Yakov Faitelson

and Chairman of the Board


(Principal Executive Officer)

/s/ Ohad Korkus

Chief Technology Officer and

February 13, 2018
Ohad KorkusDirector

/s/ Guy Melamed

Chief Financial Officer (Principal

and Chief Operating Officer
February 13, 20188, 2022
Guy Melamed

(Principal Financial Officer)Officer and Principal

Accounting Officer

Officer)

/s/ Carlos Aued

DirectorFebruary 8, 2022
Carlos Aued
/s/ Kevin Comolli

DirectorFebruary 13, 20188, 2022
Kevin Comolli

/s/ John J. Gavin, Jr.

DirectorFebruary 13, 20188, 2022

John J. Gavin, Jr.

/s/ Gili Iohan

DirectorFebruary 13, 20188, 2022
Gili Iohan

/s/ Avrohom J. Kess

DirectorFebruary 8, 2022
Avrohom J. Kess
/s/ Ohad KorkusDirectorFebruary 8, 2022
Ohad Korkus
/s/ Thomas F. Mendoza

DirectorFebruary 13, 20188, 2022
Thomas F. Mendoza

/s/ Rachel Prishkolnik

DirectorFebruary 8, 2022
Rachel Prishkolnik
/s/ Ofer Segev

DirectorFebruary 13, 20188, 2022
Ofer Segev

/s/ Rona Segev-Gal

DirectorFebruary 13, 2018
Rona Segev-Gal

/s/ Fred Van Den Bosch

DirectorFebruary 13, 20188, 2022
Fred Van Den Bosch




EXHIBIT INDEX

Exhibit
Number
Exhibit
Number
Description of the Document
3.1(1)
3.2(2)3.2
4.1(3)3.3
4.1
4.2(2)
10.1(4)10.1(3)
10.2(5)10.2(4)
10.3(6)10.3(5)
10.4(7)10.4(6)
10.5(8)10.5(7)
10.6(8)†
10.6(9)10.7(9)
10.7(10)10.8(10)
10.9(11)†
10.10(12)†
10.8(11)†Employment Agreement7, 2017, by and between the Company and Guy Melamed
10.11(13)†
10.9(12)†Amendment to Employment Agreement8, 2018, by and between the Company and Guy Melamed
10.12(14)†
10.13(15)†
10.10(13)†Employment Agreement10, 2014, by and between the Company and James O’Boyle



10.14(16)†
10.15(17)†
10.11(14)New York Office Lease, dated as of December 19, 20118, 2018, by and between JT MH 1250 Owner LPVaronis Systems Ltd. and the CompanyDavid Bass
10.12(15)10.16(18)†
10.13(16)*EMC Select Distributor Agreement for Software, dated January 24, 2007,February 7, 2019, by and between EMC Corporationthe Company and the CompanyGilad Raz
10.14(17)*10.17(19)
21.1
23.1
31.1
31.2
32.1**
32.2**
101The following materials from the Company’s Annual Report on Form 10-K for the year ended December 31, 2016,2021, formatted in inline XBRL (eXtensible Business Reporting Language): (i) the Consolidated Balance Sheets, (ii) the Consolidated Statements of Operations, (iii) the Consolidated Statements of Comprehensive Loss, (iv) the Unaudited Consolidated Statements of Changes in Stockholders' Equity, (v) the Consolidated Statements of Cash Flows and (v)(vi) related notes to these consolidated financial statements, tagged as blocks of text and in detail
104Cover Page Interactive Data File - (formatted as Inline XBRL and contained in Exhibit 101)




____________________________________
Indicates management contract or compensatory plan or arrangement.
***Confidential treatment for portions of this exhibit has been granted by the Securities and Exchange Commission.
**Document has been furnished, is not deemed filed and is not to be incorporated by reference into any of the Company’s filings under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended, irrespective of any general incorporation language contained in any such filing.
(1)(1)Filed as Exhibit 3.1 to the Company’s Quarterly Report on Form 10-Q filed with the SEC on May 8, 2014 (the “Company’s First Quarter 2014 Form 10-Q”) and incorporated herein by reference.

(2)(2)Filed as Exhibit 3.24.1 to the Company’s First Quarter 2014Current Report on Form 10-Q8-k filed with the SEC on May 11, 2020 and incorporated herein by reference.
(3)(3)Filed as Exhibit 4.210.1 to the Company’sCompany's Registration Statement on Form S-1 (Registration No. 333-191840) (the “IPO"IPO Registration Statement”Statement") with the SEC on October 22, 2013 and incorporated herein by reference.
(4)Filed as Exhibit 10.1 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(4)(5)Filed as Exhibit 10.2 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.
(5)(6)Filed as Exhibit 99.2 to the Company’s Registration Statement on Form S-8 (Registration No. 333-194657) with the SEC on March 18, 2014 and incorporated herein by reference.
(6)(7)Filed as Exhibit 10.1 to the Company’s Quarterly Report on Form 10-Q filed with the SEC on August 6, 2014 (the “Company’s Third Quarter 2014 Form 10-Q”) and incorporated herein by reference.
(7)Filed as Exhibit 10.4 to the Company’s Current Report on Form 8-K filed with the SEC on June 26, 2019 and incorporated herein by reference.
(8)Filed as Exhibit A of the Proxy Statement on Form DEF 14A with the SEC on March 26, 2015 and incorporated herein by reference.
(9)(9)Filed as Exhibit 10.8 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(10)(10)Filed as Exhibit 10.910.1 to the IPO Registration StatementCompany’s Current Report on Form 8-K filed with the SEC on February 18, 2014August 31, 2018 and incorporated herein by reference.
(11)(11)Filed as Exhibit 10.3 to the Company’s Current Report on Form 8-K filed with the SEC on June 26, 2019 and incorporated herein by reference.
(12)Filed as Exhibit 10.1 to the Company’s Current Report on Form 8-K filed with the SEC on February 13, 2017 and incorporated herein by reference.
(13)(12)Filed as Exhibit 10.1 to the Company’s Current Report on Form 8-K filed with the SEC on February 12, 2018 and incorporated herein by reference.
(14)(13)Filed as Exhibit 10.2 to the Company’s Current Report on Form 8-K filed with the SEC on August 31, 2018 and incorporated herein by reference.
(15)Filed as Exhibit 10.11 to the IPO Registration Statement with the SEC on February 18, 2014 and incorporated herein by reference.
(16)(14)Filed as Exhibit 10.1110.3 to the IPO Registration StatementCompany’s Current Report on Form 8-K filed with the SEC on October 22, 2013August 31, 2018 and incorporated herein by reference.
(17)(15)Filed as Exhibit 10.2 to the Company’s Third Quarter 2014 Form 10-Q and incorporated herein by reference.
(16)Filed as Exhibit 10.12 to the IPO Registration Statement with the SEC on October 22, 2013 and incorporated herein by reference.
(17)Filed as Exhibit 10.13 to the IPO Registration StatementCompany’s Annual Report on Form 10-K filed with the SEC on October 22, 2013February 12, 2019 (the “Company’s 2018 Form 10-K”) and incorporated herein by reference.
(18)Filed as Exhibit 10.14 to the Company’s 2018 Form 10-K and incorporated herein by reference.
(19)Filed as Exhibit 10.1 to the company’s Current Report on Form 8-k filed with the SEC on May 11, 2020 and incorporated herein by reference.