10-Q

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

(Mark One)

☒ QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the quarterly period ended September 30, 2021

or

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from             to             

Commission File Number 001-36067

Mandiant, Inc.

(Exact name of registrant as specified in its charter)

Delaware	20-1548921
(State or other jurisdiction of incorporation or organization)	(I.R.S. Employer Identification No.)

601 McCarthy Blvd.

Milpitas, CA 95035

(Address of principal executive offices) (Zip Code)

(408) 321-6300

(Registrant's telephone number, including area code)

 Securities registered pursuant to Section 12(b) of the Act:

Title of each class	Trading Symbol	Name of each exchange on which registered
Common Stock, $0.0001 par value per share	MNDT	The NASDAQ Global Select Market

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.    Yes  ☒ No  ☐    

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files).    Yes  ☒    No  ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and "emerging growth company" in Rule 12b-2 of the Exchange Act.

Large accelerated filer	☒	Accelerated filer	☐
Non-accelerated filer	☐	Smaller reporting company	☐
		Emerging growth company	☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.  ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).  Yes  ☐   No   ☒

The number of shares of the registrant's common stock outstanding as of November 3, 2021 was 239,987,486.

TABLE OF CONTENTS

		Page
	PART I — FINANCIAL INFORMATION
Item 1.	Financial Statements (unaudited)	1
	Condensed Consolidated Balance Sheets as of September 30, 2021 and December 31, 2020	2
	Condensed Consolidated Statements of Operations for the Three and Nine Months Ended September 30, 2021 and 2020	3
	Condensed Consolidated Statements of Comprehensive Loss for the Three and Nine Months Ended September 30, 2021 and 2020	4
	Condensed Consolidated Statements of Convertible Preferred Stock and Stockholders' Equity for the Three and Nine Months Ended September 30, 2021 and 2020	5
	Condensed Consolidated Statements of Cash Flows for the Nine Months Ended September 30, 2021 and 2020	6
	Notes to Condensed Consolidated Financial Statements	8
Item 2.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	34
Item 3.	Quantitative and Qualitative Disclosures About Market Risk	52
Item 4.	Controls and Procedures	53
	PART II — OTHER INFORMATION
Item 1.	Legal Proceedings	54
Item 1A.	Risk Factors	55
Item 2.	Unregistered Sales of Equity Securities and Use of Proceeds	90
Item 3.	Defaults Upon Senior Securities	90
Item 4.	Mine Safety Disclosures	90
Item 5.	Other Information	90
Item 6.	Exhibits	90
	Signature	91

PART I — FINANCIAL INFORMATION

Item 1.    Financial Statements

1

MANDIANT, INC.

Condensed Consolidated Balance Sheets

(In thousands, except per share data)

(Unaudited)

	September 30, 2021		December 31, 2020
ASSETS
Current assets:
Cash and cash equivalents	$	384,700	$	664,679
Short-term investments	845,637		624,824
Accounts receivable, net of allowance for doubtful accounts of $563 and $1,225 at September 30, 2021 and December 31, 2020, respectively	67,553		70,563
Prepaid expenses and other current assets	44,342		39,670
Current assets held for sale	573,486		162,509
Total current assets	1,915,718		1,562,245
Property and equipment, net	60,772		64,336
Operating lease right-of-use assets, net	35,550		36,728
Goodwill	1,060,023		1,050,962
Intangible assets, net	90,715		120,555
Deposits and other long-term assets	18,841		18,084
Long-term assets held for sale	—		392,974
TOTAL ASSETS	$	3,181,619	$	3,245,884
LIABILITIES, CONVERTIBLE PREFERRED STOCK AND STOCKHOLDERS’ EQUITY
Current liabilities:
Accounts payable	$	13,854	$	4,027
Operating lease liabilities, current	13,567		14,556
Accrued and other current liabilities	22,467		19,730
Accrued compensation	67,261		71,784
Convertible senior notes, current, net	445,732		—
Deferred revenue, current	248,140		226,356
Current liabilities held for sale	686,072		417,291
Total current liabilities	1,497,093		753,744
Convertible senior notes, non-current, net	549,733		960,896
Deferred revenue, non-current	66,536		57,897
Operating lease liabilities, non-current	54,571		41,802
Other long-term liabilities	4,672		12,339
Long-term liabilities held for sale	—		285,251
TOTAL LIABILITIES	2,172,605		2,111,929
Commitments and contingencies (NOTE 11)
Series A Convertible Preferred Stock, par value of $0.0001 per share; 400 shares authorized, issued and outstanding as of September 30, 2021 and December 31, 2020	414,738		401,050
Stockholders' equity:
Common stock, par value of $0.0001 per share; 1,000,000 shares authorized, 239,783 shares and 235,690 shares issued and outstanding as of September 30, 2021 and December 31, 2020, respectively	24		24
Additional paid-in capital	3,671,356		3,623,243
Treasury stock, at cost; 1,778 shares as of September 30, 2021 and December 31, 2020	(80,000)		(80,000)
Accumulated other comprehensive income	656		3,834
Accumulated deficit	(2,997,760)		(2,814,196)
Total stockholders’ equity	594,276		732,905
TOTAL LIABILITIES, CONVERTIBLE PREFERRED STOCK AND STOCKHOLDERS’ EQUITY	$	3,181,619	$	3,245,884

See accompanying notes to condensed consolidated financial statements.

MANDIANT, INC.

Condensed Consolidated Statements of Operations

(In thousands, except per share data)

(Unaudited)

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Revenue:
Platform, cloud subscription and managed services	$	60,249	$	48,613	$	168,184	$	141,966
Professional services	61,721		51,439		182,384		147,470
Total revenue	121,970		100,052		350,568		289,436
Cost of revenue:
Platform, cloud subscription and managed services	28,725		27,431		83,581		79,788
Professional services	36,380		29,660		104,134		85,501
Total cost of revenue	65,105		57,091		187,715		165,289
Total gross profit	56,865		42,961		162,853		124,147
Operating expenses:
Research and development	44,814		31,316		127,649		89,059
Sales and marketing	65,899		55,459		190,130		167,045
General and administrative	32,760		24,485		87,131		79,342
Restructuring charges	—		822		1,927		19,597
Total operating expenses	143,473		112,082		406,837		355,043
Operating loss	(86,608)		(69,121)		(243,984)		(230,896)
Interest income	1,226		2,163		4,235		9,450
Interest expense	(14,903)		(14,353)		(44,289)		(45,555)
Other income (expense), net	(464)		156		(364)		(951)
Loss before income taxes from continuing operations	(100,749)		(81,155)		(284,402)		(267,952)
Provision for income taxes	498		458		2,441		1,464
Loss from continuing operations	$	(101,247)	$	(81,613)	$	(286,843)	$	(269,416)
Net income from discontinued operations, net of income taxes	33,025		42,494		103,279		100,716
Net loss	$	(68,222)	$	(39,119)	$	(183,564)	$	(168,700)
Dividend on series A convertible preferred stock	(4,613)		—		(13,688)		—
Accretion of series A convertible preferred stock	—		—		(82)		—
Net loss attributable to common stockholders	$	(72,835)	$	(39,119)	$	(197,334)	$	(168,700)
Net loss per share attributable to common stockholders, basic and diluted:
Continuing operations	$	(0.45)	$	(0.36)	$	(1.27)	$	(1.22)
Discontinued operations	0.14		0.19		0.44		0.46
Net loss per share attributable to common stockholders, basic and diluted	$	(0.31)	$	(0.17)	$	(0.83)	$	(0.76)
Weighted average shares used in computing net loss per share, basic and diluted	237,168		224,807		236,404		221,329

See accompanying notes to condensed consolidated financial statements.

3

MANDIANT, INC.

Condensed Consolidated Statements of Comprehensive Loss

(In thousands)

(Unaudited)

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Net loss	$	(68,222)	$	(39,119)	$	(183,564)	$	(168,700)
Change in net unrealized gain (loss) on available-for-sale investments	(763)		(1,197)		(3,178)		3,934
Comprehensive loss	$	(68,985)	$	(40,316)	$	(186,742)	$	(164,766)

See accompanying notes to condensed consolidated financial statements.

4

MANDIANT, INC.

Condensed Consolidated Statement of Convertible Preferred Stock and Stockholders' Equity

(Unaudited, in thousands)

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Total stockholders' equity, beginning balances	$	645,478	$	660,360	$	732,905	$	701,666
Common stock and additional paid-in-capital:
Balance, beginning of period	3,653,597		3,470,525		3,623,267		3,457,381
Issuance of common stock for equity awards, net of tax withholdings	751		2,539		4,351		6,270
Shares withheld for taxes	(789)		(763)		(10,514)		(8,802)
Issuance of common stock related to employee stock purchase plan	—		—		12,335		12,300
Shares repurchased	(31,667)		—		(100,001)		—
Shares retired	—		—		—		(70,000)
Accretion of series A convertible preferred stock	—		—		(82)		—
Dividends on series A convertible preferred stock	(4,613)		—		(13,688)		—
Stock-based compensation	54,101		41,340		155,712		116,492
Balance, end of period	3,671,380		3,513,641		3,671,380		3,513,641
Treasury stock:
Balance, beginning of period	(80,000)		(80,000)		(80,000)		(150,000)
Shares retired	—		—		—		70,000
Balance, end of period	(80,000)		(80,000)		(80,000)		(80,000)
Accumulated other comprehensive income:
Balance, beginning of period	1,419		6,311		3,834		1,180
Net unrealized gain (loss) on investments	(763)		(1,197)		(3,178)		3,934
Balance, end of period	656		5,114		656		5,114
Accumulated deficit:
Balance, beginning of period	(2,929,538)		(2,736,476)		(2,814,196)		(2,606,895)
Net loss	(68,222)		(39,119)		(183,564)		(168,700)
Balance, end of period	(2,997,760)		(2,775,595)		(2,997,760)		(2,775,595)
Total stockholders' equity, ending balances	$	594,276	$	663,160	$	594,276	$	663,160
Series A convertible preferred stock:
Balance, beginning of period	$	410,125	$	—	$	401,050	$	—
Series A convertible preferred stock issuance costs	—		—		(82)		—
Accretion of series A convertible preferred stock	—		—		82		—
Dividends on series A convertible preferred stock	4,613		—		13,688		—
Balance, end of period	$	414,738	$	—	$	414,738	$	—

See accompanying notes to condensed consolidated financial statements

5

MANDIANT, INC.

Condensed Consolidated Statements of Cash Flows

(In thousands)

(Unaudited)

	Nine Months Ended September 30,
	2021		2020
CASH FLOWS FROM OPERATING ACTIVITIES:
Net loss	$	(183,564)	$	(168,700)
Less: income from discontinued operations	103,279		100,716
Loss from continuing operations	(286,843)		(269,416)
Adjustments to reconcile loss from continuing operations to net cash used in continuing operating activities:
Depreciation and amortization	67,448		57,630
Stock-based compensation	111,295		82,102
Non-cash interest expense related to convertible senior notes	34,570		35,480
Deferred income taxes	(106)		91
Other	1,154		1,514
Changes in operating assets and liabilities, net of business acquisitions:
Accounts receivable	3,174		17,429
Prepaid expenses and other assets	6,654		3,691
Accounts payable	8,731		(9,961)
Accrued liabilities	618		(1,456)
Accrued compensation	(4,524)		23,868
Deferred revenue	30,423		(29,617)
Other long-term liabilities	(9,827)		(8,205)
Net cash used in operating activities - continuing operations	(37,233)		(96,850)
Net cash provided by operating activities - discontinued operations	126,836		120,351
Net cash provided by operating activities	89,603		23,501
CASH FLOWS FROM INVESTING ACTIVITIES:
Purchases of property and equipment and demonstration units	(16,809)		(16,554)
Purchases of short-term investments	(647,949)		(305,180)
Proceeds from maturities of short-term investments	414,952		355,820
Purchase of investment in privately held company	—		(1,000)
Proceeds from sales of short-term investments	2,008		28,208
Business acquisitions, net of cash acquired	(11,678)		(6,284)
Lease deposits	(233)		(222)
Net cash provided by (used in) investing activities - continuing operations	(259,709)		54,788
Net cash used in investing activities - discontinued operations	(15,962)		(12,018)
Net cash provided by (used in) investing activities	(275,671)		42,770
CASH FLOWS FROM FINANCING ACTIVITIES:
Repurchase of convertible senior notes	—		(96,392)
Share repurchases	(100,001)		—

6

MANDIANT, INC.

Condensed Consolidated Statements of Cash Flows

(In thousands)

(Unaudited)

	Nine Months Ended September 30,
	2021		2020
Series A convertible preferred stock issuance costs	(82)		—
Payment related to shares withheld for taxes	(10,514)		(8,802)
Proceeds from employee stock purchase plan	12,335		12,300
Proceeds from exercise of equity awards	4,351		6,270
Net cash used in financing activities	(93,911)		(86,624)
Net change in cash and cash equivalents	(279,979)		(20,353)
Cash and cash equivalents, beginning of period	664,679		322,828
Cash and cash equivalents held for sale, beginning of period	11,775		11,775
Cash and cash equivalents held for sale, end of period	(11,775)		(11,775)
Cash and cash equivalents, end of period	$	384,700	$	302,475
SUPPLEMENTAL DISCLOSURES OF CASH FLOW INFORMATION:
Cash paid for income taxes	$	4,915	$	3,961
Cash paid for interest	$	6,480	$	6,962
SUPPLEMENTAL DISCLOSURES OF NON-CASH INVESTING AND FINANCING ACTIVITIES:
Purchases of property and equipment and demonstration units in accounts payable and accrued liabilities	$	3,495	$	2,031
Dividend on series A convertible preferred stock	$	13,688	$	—
Accretion of series A convertible preferred stock	$	82	$	—

See accompanying notes to condensed consolidated financial statements.

7

MANDIANT, INC.

Notes to Condensed Consolidated Financial Statements

1. Description of Business and Summary of Significant Accounting Policies

Description of Business

Mandiant, Inc., with principal executive offices located in Milpitas, California, was incorporated as NetForts, Inc. on February 18, 2004, under the laws of the State of Delaware, and changed its name to FireEye, Inc. on September 7, 2005. On October 4, 2021, the Company changed its name to Mandiant, Inc.

Mandiant, Inc. and its wholly owned subsidiaries (collectively, the “Company”, “we”, “us” or “our”) provide intelligence-based cybersecurity solutions and services that allow organizations to prepare for, prevent, investigate, respond to and remediate cyber attacks, including attacks that target on-premise, cloud and critical infrastructure environments.

Unless otherwise noted, discussion in these Notes to Condensed Consolidated Financial Statements refers to our continuing operations. Refer to Note 2, “Discontinued Operations,” for further information.

Our portfolio of cybersecurity solutions and services is comprised of the following:

•Mandiant Solutions, including the Mandiant Advantage software-as-a-service (SaaS) platform with integrated modules for threat intelligence, validation and security automation, managed services, and professional services. Our solutions and services help customers minimize the risk of costly cybersecurity breaches by:

•detecting and preventing advanced, targeted and evasive attacks missed by other security control solutions,

•automating the investigation and triage of security alerts generated by Mandiant solutions, as well as security control solutions from other vendors,

•providing visibility into the latest threats and the tools and techniques used by threat actors,

•validating the effectiveness of existing cybersecurity controls against attacks before an attack occurs and,

•providing assessment, training and other strategic security consulting services that help organizations improve their resilience to attack.

The majority of our solutions and services are sold to end-customers directly, with a lesser percentage of sales to our end-customers sold through distributors, resellers, and strategic partners.

On August 4, 2021, we acquired Intrigue Corp. ("Intrigue"), a privately-held company, for cash consideration of approximately $12.3 million. Intrigue's attack surface management technology will be integrated into the Mandiant Advantage platform, enabling organizations to discover, monitor and manage risk across their entire attack surface.

On June 2, 2021, we announced a stock repurchase program for the repurchase of up to $500 million of our common stock. There is no expiration date on this authorization, and we may suspend, amend or discontinue the repurchase program at any time. During the three months ended September 30, 2021, we repurchased 1.8 million shares of our common stock for $31.6 million, at an average repurchase price of approximately $17.72 per share. During the nine months ended September 30, 2021, we repurchased 5.3 million shares of our common stock for $100.0 million, at an average repurchase price of approximately $18.84 per share. As of September 30, 2021, we had cumulatively repurchased 5.3 million shares of our common stock for $100.0 million, at an average repurchase price of approximately $18.84. The repurchases were recorded to additional paid-in capital as the Company is in an accumulated net deficit position.

On May 29, 2021, we entered into an Asset Purchase Agreement (the “Purchase Agreement”), pursuant to which we agreed to sell the FireEye Products business to a consortium led by Symphony Technology Group (“STG”) in exchange for total cash consideration of $1.2 billion and assumption of certain assets and liabilities of the FireEye Products business as specified in the Purchase Agreement. As a result, the FireEye Products business was classified as discontinued operations in our condensed consolidated financial statements and excluded from continuing operations and the related assets and liabilities were classified as held for sale. The transaction closed on October 8, 2021.

In November 2020, we acquired Respond Software, Inc. ("Respond Software"), a cybersecurity investigation automation company. In connection with this acquisition, we paid cash consideration of $116.1 million, and issued 4,931,862 shares of our

8

common stock of which 694,768 shares are subject to vesting conditions. The estimated fair value of the common stock issued and not subject to vesting conditions was $60.3 million. We also assumed unvested stock options, which are now exercisable for our common stock, of which $1.2 million of the fair value has been accounted for as consideration for assumed awards pertaining to pre-combination service prior to acquisition. Based on the above, total purchase consideration for Respond Software was $177.6 million.

In November 2020, we entered into a Securities Purchase Agreement with BTO Delta Holdings DE L.P., an investment vehicle of funds affiliated with The Blackstone Group Inc., and a Securities Purchase Agreement with ClearSky Security Fund I LLC and ClearSky Power & Technology Fund II LLC (together, the “Series A Securities Financing Agreements”). Pursuant to the Series A Securities Financing Agreements, in December 2020 we issued and sold 400,000 shares of a newly designated 4.5% Series A Convertible Preferred Stock, par value $0.0001 per share, at a price of $1,000 per share, for an aggregate purchase price of $400.0 million. We intend to use the net proceeds from the issuance and sale to fund acquisitions, buybacks of our common stock, and for working capital purposes.

In January 2020, we acquired Cloudvisory LLC ("Cloudvisory"), a provider of cloud visibility and control solutions. As consideration for the acquisition, we paid approximately $13.2 million in cash and assumed $0.3 million in net tangible liabilities.

Basis of Presentation and Consolidation

The accompanying unaudited condensed consolidated financial statements include the accounts of Mandiant, Inc. and its wholly owned subsidiaries. All intercompany balances and transactions have been eliminated in consolidation.

The accompanying unaudited condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States of America (“U.S. GAAP”), and following the requirements of the Securities and Exchange Commission (“SEC”), for interim reporting. As permitted under those rules, certain footnotes or other financial information that are normally required by U.S. GAAP can be condensed or omitted. These unaudited condensed consolidated financial statements have been prepared on the same basis as our annual consolidated financial statements and, in the opinion of management, reflect all adjustments, consisting only of normal recurring adjustments, that are necessary for a fair statement of our financial information. The results of operations for the three and nine months ended September 30, 2021 are not necessarily indicative of the results to be expected for the year ending December 31, 2021 or for any other interim period or for any other future year. As a result of the Purchase Agreement, the FireEye Products business is presented as discontinued operations in our condensed consolidated financial statements and all prior periods presented have been adjusted to reflect the assets and liabilities held for sale and discontinued operations. The balance sheet as of December 31, 2020 has been derived from audited consolidated financial statements at that date but does not include all information required by U.S. GAAP for annual consolidated financial statements.

The accompanying unaudited condensed consolidated financial statements and related financial information should be read in conjunction with the audited consolidated financial statements and the related notes thereto for the year ended December 31, 2020 included in our Annual Report on Form 10-K for the year ended December 31, 2020.

Use of Estimates

The preparation of consolidated financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements and the reported amounts of revenue and expenses during the reporting period. Such management estimates include, but are not limited to, determining the nature and timing of satisfaction of performance obligations, useful life of our security appliances that are dependent on intelligence and assessing the material rights associated with it, determining the standalone selling price of performance obligations, subscriptions and services, commissions expense including the period of benefit of customer acquisition cost, bonus expense, future taxable income, contract manufacturer liabilities, litigation and settlement costs and other loss contingencies, fair value of our equity awards, achievement of targets for performance stock units, fair value of the liability and equity components of the Convertible Senior Notes (as defined in Note 10), results of operations of the Company’s discontinued operations, and the purchase price allocation of acquired businesses. We base our estimates on historical experience and on assumptions that we believe are reasonable. Changes in facts or circumstances may cause us to change our assumptions and estimates in future periods, and it is possible that actual results could differ from current or revised future estimates.

Summary of Significant Accounting Policies

Our accounting policies are set forth in Note 1 to Consolidated Financial Statements contained in our Annual Report on Form 10-K for the year ended December 31, 2020. We include herein certain updates to those policies.

Discontinued Operations

We consider assets to be held for sale when management commits to a formal plan to actively market the assets for sale at a price reasonable in relation to fair value, it is unlikely that significant changes will be made to the plan, the assets are available for immediate sale in their present condition, an active program to locate a buyer and other actions required to complete the sale have been initiated and the sale of the assets is expected to be completed within one year. Upon designation as held for sale, we record the

9

carrying value of the assets at the lower of the then current carrying value or estimated fair value, less costs to sell. Following recording as such, assets held for sale are not depreciated or amortized thereafter.

If the disposal of the component of an entity (or group of components) represents a strategic shift that has (or will have) a major effect on an entity’s operations and financial results, it meets the criteria for discontinued operations. The results of discontinued operations, as well as any gain or loss on the disposal transaction, are presented separately, net of tax, from the results of continuing operations for all periods presented. The revenue and expenses included in the results of discontinued operations are the revenue and direct operating expenses incurred by the discontinued component that may be reasonably segregated from the revenue and costs of the ongoing operations of the Company. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. The operating results have been included in discontinued operations in our condensed consolidated financial statements. Assets and liabilities held for sale are classified as current as of September 30, 2021 as it is probable that the sale will occur and proceeds will be collected within one year. The condensed consolidated statement of cash flows presents combined cash flows from continuing operations with cash flows from discontinued operations within each cash flow statement category. The prior periods have been adjusted to reflect the assets and liabilities held for sale and discontinued operations.

See Note 2, “Discontinued Operations,” to our condensed consolidated financial statements for additional information.

Recently Adopted Accounting Pronouncements

Customer’s Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract

In August 2018, the FASB issued ASU 2018-15, Intangibles - Goodwill and Other - Internal-Use Software (Subtopic 350-40): Customer's Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract. This standard requires capitalization of the implementation costs incurred in a hosting arrangement that is a service contract with the requirements for capitalizing implementation costs incurred to develop or obtain internal-use software. Further, the standard also requires the Company to expense the capitalized implementation costs of a hosting arrangement over the term of the hosting arrangement. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying the Test for Goodwill Impairment

In January 2017, the FASB issued ASU 2017-04, Intangibles - Goodwill and Other (Topic 350): Simplifying the Test for Goodwill Impairment. This standard eliminates the requirement to calculate the implied fair value of goodwill to measure a goodwill impairment charge (i.e. Step 2 of the current guidance), instead measuring the impairment charge as the excess of the reporting unit's carrying amount over its fair value (i.e. Step 1 of the current guidance). We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Measurement of Credit Losses on Financial Instruments

In June 2016, the FASB issued ASU 2016-13, Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments. This standard changes the impairment model for most financial assets and certain other instruments by introducing a current expected credit loss ("CECL") model. The CECL model is a more forward-looking approach based on expected losses rather than incurred losses, requiring entities to estimate and record losses expected over the remaining contractual life of an asset. The guidance was effective for the Company beginning in the first quarter of 2020. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying Accounting for Income Taxes

In December 2019, the FASB issued ASU 2019-12, Income Taxes (Topic 740): Simplifying the Accounting for Income Taxes. This standard simplifies the accounting for income taxes by eliminating certain exceptions to the guidance in Topic 740 related to the approach for intra-period tax allocation, the methodology for calculating income taxes in an interim period and the recognition of deferred tax liabilities for outside basis differences. The new guidance also simplifies aspects of the accounting for franchise taxes and enacted changes in tax laws or rates and clarifies the accounting for transactions that result in a step-up in the tax basis of goodwill and allocating consolidated income taxes to separate financial statements of entities not subject to income tax. ASU 2019-12 is effective for annual and interim periods in fiscal years beginning after December 15, 2020. We adopted ASU 2019-12 as of January 1, 2020. The adoption did not have a significant impact on our unaudited condensed consolidated financial statements.

Recent Legislation

On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act was enacted and signed into U.S. law to provide economic relief to individuals and businesses facing economic hardship as a result of the COVID-19 pandemic. Changes in tax laws or rates are accounted for in the period of enactment. The income tax provisions of the CARES Act do not have a significant impact on our current taxes, deferred taxes, or uncertain tax positions.

10

Recent Accounting Pronouncements Not Yet Adopted

In August 2020, the FASB issued ASU No. 2020-06, Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity (ASU 2020-06): This standard simplifies the accounting for certain financial instruments with characteristics of liabilities and equity, including convertible instruments and contracts in an entity’s own equity. Among other changes, ASU 2020-06 removes from U.S. GAAP the liability and equity separation model for convertible instruments with a cash conversion feature, and as a result, after adoption, entities will no longer separately present in equity an embedded conversion feature for such debt. Similarly, the embedded conversion feature will no longer be amortized into income as interest expense over the life of the instrument. Instead, entities will account for a convertible debt instrument wholly as debt unless (1) a convertible instrument contains features that require bifurcation as a derivative under ASC Topic 815, Derivatives and Hedging, or (2) a convertible debt instrument was issued at a substantial premium. Among other potential impacts, this change is expected to reduce reported interest expense, increase reported net income, and result in a reclassification of certain conversion feature balance sheet amounts from stockholders’ equity to liabilities as it relates to the Convertible Senior Notes. Additionally, ASU 2020-06 requires the application of the if-converted method to calculate the impact of convertible instruments on diluted earnings per share (EPS), which is consistent with the Company’s accounting treatment under the current standard. ASU 2020-06 is effective for fiscal years beginning after December 15, 2021, with early adoption permitted for fiscal years beginning after December 15, 2020, and can be adopted on either a fully retrospective or modified retrospective basis. We are adopting the standard on January 1, 2022 and are currently evaluating the method of adoption and overall impact of this standard on our consolidated financial statements.

2. Discontinued Operations

On May 29, 2021, we entered into the Purchase Agreement, pursuant to which we agreed to sell the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion, subject to certain purchase price adjustments, and assumption of certain assets and liabilities of the FireEye Products business as specified in the Purchase Agreement. On October 8, 2021, we entered into an amendment to the Purchase Agreement, pursuant to which we increased certain assets and liabilities held for sale. The increases have been reflected in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020. As a result, the FireEye Products business was classified as discontinued operations in our condensed consolidated statements of operations and excluded from continuing operations for all periods presented. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. The transaction closed on October 8, 2021.

The following table summarizes the assets and liabilities held for sale relating to our discontinued operations (dollars in thousands):

11

	September 30, 2021		December 31, 2020
MAJOR CLASSES OF ASSETS
Current:
Cash and cash equivalents	$	11,775	$	11,775
Accounts receivable, net of allowance for doubtful accounts of $905 and $1,334 at September 30, 2021 and December 31, 2020, respectively	88,609		83,012
Inventories	7,565		4,023
Prepaid expenses and other current assets	60,700		63,699
Property and equipment, net	31,285		—
Goodwill	313,873		—
Intangible assets, net	4,292		—
Deposits and other long-term assets	51,974		—
Operating lease right-of-use assets, net	3,413		—
Total current assets held for sale	573,486		162,509
Non-current:
Property and equipment, net	—		15,434
Goodwill	—		313,924
Intangible assets, net	—		5,512
Deposits and other long-term assets	—		56,580
Operating lease right-of-use assets, net	—		1,524
Total assets classified as held for sale	$	573,486	$	555,483
MAJOR CLASSES OF LIABILITIES
Current:
Accounts payable	$	9,105	$	1,080
Accrued and other current liabilities	7,980		3,510
Deferred revenue, current	640,049		387,353
Operating lease liabilities	3,031		1,468
Accrued compensation	25,907		23,880
Total current liabilities held for sale	686,072		417,291
Non-current:
Deferred revenue, non-current	—		284,851
Operating lease liabilities	—		400
Total liabilities classified as held for sale	$	686,072	$	702,542
Commitments and contingencies
Contract manufacturer commitments	$	10,034	$	5,996

The following table summarizes the results of the discontinued operations (dollars in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
MAJOR LINE ITEMS CONSTITUTING NET INCOME
Revenue from discontinued operations	$	132,842	$	138,408	$	398,546	$	403,646
Cost of revenue	28,126		29,654		83,928		89,854
Research and development	31,358		27,470		87,444		92,450
Sales and marketing	35,114		37,648		109,644		113,714
General and administrative	4,631		—		12,757		—
Restructuring charges	—		666		—		5,423
Net income from discontinued operations before income taxes	$	33,613	$	42,970	$	104,773	$	102,205
Provision for income taxes	588		476		1,494		1,489
Net income from discontinued operations, net of income taxes	$	33,025	$	42,494	$	103,279	$	100,716

12

At the closing of the sale of the FireEye Products business on October 8, 2021, we entered into a Transition Services Agreement (“TSA”) and a Reseller and Market Cooperation Agreement (“RSA”) with Magenta Buyer LLC ("McAfee Enterprise"), which is backed by a consortium led by STG. The TSA is designed to ensure and facilitate an orderly transfer of business operations. The services provided by us under the TSA will run up to 18 months following the closing, subject to the ability of McAfee Enterprise to earlier terminate any such services. The RSA is designed to enable the parties and their respective subsidiaries to continue using certain product and service offerings in the operation of their businesses. Under the RSA, each party will grant the other a non-exclusive appointment and license as both a seller and a reseller to promote, sell and distribute the product and service offerings directly or indirectly through the other party’s authorized resale and distribution channel on a standalone basis or as part of a bundled service at agreed-upon rates for 36 months following the separation. The agreed-upon fees for the product and service offerings are generally intended to (i) allow the providing party to recover all costs and expenses of providing such product and service offerings plus a mark-up over those costs and expenses or (ii) compensate the providing party for providing such product and service offerings through an agreed-upon fixed fee arrangement. No revenues or expenses have been incurred for the TSA or RSA for the three and nine months ended September 30, 2021, as the TSA and RSA were not in effect during these periods.

3. Fair Value Measurements

The accounting guidance for fair value measurements provides a framework for measuring fair value on either a recurring or nonrecurring basis, whereby the inputs used in our valuation techniques are assigned a hierarchical level. The following are the three levels of inputs to measure fair value:

•Level 1: Observable inputs that reflect quoted prices (unadjusted) for identical assets or liabilities in active markets.

•Level 2: Inputs that reflect quoted prices for identical assets or liabilities in less active markets; quoted prices for similar assets or liabilities in active markets; benchmark yields, reported trades, broker/dealer quotes, inputs other than quoted prices that are observable for the assets or liabilities; or inputs that are derived principally from or corroborated by observable market data by correlation or other means.

•Level 3: Unobservable inputs that reflect our own assumptions incorporated in valuation techniques used to measure fair value. These assumptions are required to be consistent with market participant assumptions that are reasonably available.

We consider an active market to be one in which transactions for the asset or liability occur with sufficient frequency and volume to provide pricing information on an ongoing basis, and consider an inactive market to be one in which there are infrequent or few transactions for the asset or liability, the prices are not current, or price quotations vary substantially either over time or among market makers. Where appropriate, our own or the counterparty’s non-performance risk is considered in measuring the fair values of assets.

The following table presents our assets measured at fair value on a recurring basis using the above input categories (in thousands):

	As of September 30, 2021								As of December 31, 2020
Description	Level 1		Level 2		Level 3		Total		Level 1		Level 2		Level 3		Total
Assets
Cash equivalents:
Money market funds	$	143,233	$	—	$	—	$	143,233	$	32,954	$	—	$	—	$	32,954
Total cash equivalents	143,233		—		—		143,233		32,954		—		—		32,954
Short-term investments:
Certificates of deposit	—		6,355		—		6,355		—		2,752		—		2,752
Commercial paper	—		—		—		—		—		19,994		—		19,994
Corporate notes and bonds	—		569,090		—		569,090		—		437,652		—		437,652
U.S. Treasuries	—		75,364		—		75,364		—		74,934		—		74,934
U.S. Government agencies	—		194,828		—		194,828		—		89,492		—		89,492
Total short-term investments	—		845,637		—		845,637		—		624,824		—		624,824
Total assets measured at fair value	$	143,233	$	845,637	$	—	$	988,870	$	32,954	$	624,824	$	—	$	657,778

Additionally, we have a restructuring liability related to certain real estate facilities which was calculated based on the present value of future non-lease payments, discounted at a rate commensurate with our current cost of financing as well as external ratings. This non-recurring fair value measurement is considered to be a Level 3 measurement due to the use of significant unobservable inputs. See Note 7, "Restructuring Charges," for a reconciliation of this liability.

We measure certain assets, including goodwill, intangible assets and our equity-method investment in a privately held company at fair value on a nonrecurring basis when there are identifiable events or changes in circumstances that may have a significant adverse

13

impact on the fair value of these assets. In light of the COVID-19 pandemic, we performed an analysis of impairment indicators of these assets and noted no adverse impact to their fair values as of September 30, 2021.

The estimated fair value of the Convertible Senior Notes was determined to be $1.0 billion as of September 30, 2021 and December 31, 2020. The fair value was determined based on the closing trading prices per $1,000 principal amount of the respective Convertible Senior Notes as of the last day of trading for the period. We consider the fair value of the Convertible Senior Notes to be a Level 2 measurement as they are not actively traded.

4. Investments

Our investments consisted of the following (in thousands):

	As of September 30, 2021
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	6,326	$	36	$	(7)	$	6,355
Corporate notes and bonds	567,840		1,469		(219)		569,090
U.S. Treasuries	75,384		2		(22)		75,364
U.S. Government agencies	194,924		5		(101)		194,828
Total	$	844,474	$	1,512	$	(349)	$	845,637

	As of December 31, 2020
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	2,679	$	73	$	—	$	2,752
Commercial paper	19,994		—		—		19,994
Corporate notes and bonds	433,445		4,248		(41)		437,652
U.S. Treasuries	74,914		26		(6)		74,934
U.S. Government agencies	89,451		54		(13)		89,492
Total	$	620,483	$	4,401	$	(60)	$	624,824

The following tables present the gross unrealized losses and related fair values of our investments that have been in a continuous unrealized loss position (in thousands):

	As of September 30, 2021
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Certificates of deposit	$	2,936	$	(7)	$	—	$	—	$	2,936	$	(7)
Corporate notes and bonds	263,919		(219)		—		—		263,919		(219)
U.S. Treasuries	42,620		(22)		—		—		42,620		(22)
U.S. Government agencies	170,720		(101)		—		—		170,720		(101)
Total	$	480,195	$	(349)	$	—	$	—	$	480,195	$	(349)

14

	As of December 31, 2020
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Commercial paper	$	4,997	$	—	$	—	$	—	$	4,997	$	—
Corporate notes and bonds	92,855		(41)		870		—		93,725		(41)
U.S. Treasuries	42,799		(6)		—		—		42,799		(6)
U.S. Government agencies	37,488		(13)		1,700		—		39,188		(13)
Total	$	178,139	$	(60)	$	2,570	$	—	$	180,709	$	(60)

Unrealized losses related to these investments are due to interest rate fluctuations as opposed to credit quality. In addition, we do not intend to sell, and it is not more likely than not that we would be required to sell, these investments before recovery of their cost basis.

The following table summarizes the contractual maturities of our investments as of September 30, 2021 (in thousands):

	Amortized Cost		Fair Value
Due within one year	$	425,939	$	426,811
Due within one to three years	418,535		418,826
Total	$	844,474	$	845,637

All available-for-sale securities have been classified as current, based on management's ability to use the funds in current operations.

As of December 31, 2020 and September 30, 2021, we held an 11.0% ownership interest in a privately held company, which is accounted for under the equity method based on our ability to exercise significant influence over operating and financial policies of the privately held company. The investment was fully written off as of March 31, 2021 and no gains or losses were recorded during the nine months ended September 30, 2021. We were informed that substantially all of the assets of the privately held company were sold during the three months ended March 31, 2021 and that the privately held company is expected to be dissolved after the first anniversary of the asset sale. None of the proceeds of the sale were paid to us or other shareholders of the privately held company in respect of their stock holdings.

5. Property and Equipment

Property and equipment, net consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Computer equipment and software	$	79,879	$	139,147
Leasehold improvements	58,636		56,401
Furniture and fixtures	14,282		12,955
Machinery and equipment	16		160
Total property and equipment	152,813		208,663
Less: accumulated depreciation and amortization	(92,041)		(144,327)
Total property and equipment, net	$	60,772	$	64,336

Depreciation and amortization expense related to property and equipment during the three months ended September 30, 2021 and 2020 was $5.3 million and $6.0 million, respectively. Depreciation and amortization expense related to property and equipment during the nine months ended September 30, 2021 and 2020 was $21.7 million and $17.1 million, respectively.

During the three months ended September 30, 2021 and 2020, we capitalized $4.2 million and $2.2 million, respectively, of software development costs primarily related to our platform and cloud subscription offerings. Amortization expense related to capitalized software development costs during the three months ended September 30, 2021 and 2020 was $2.7 million and $2.8 million, respectively. During the nine months ended September 30, 2021 and 2020, we capitalized $13.0 million and $10.0 million, respectively, of software development costs primarily related to our platform and cloud subscription offerings. Amortization expense related to capitalized software development costs during the nine months ended September 30, 2021 and 2020 were $8.7 million and $7.5 million, respectively.

15

Refer to Note 7, "Restructuring Charges,'" regarding facilities-related write-offs.

6. Business Combinations

Acquisition of Cloudvisory

In January 2020, we acquired Cloudvisory, a provider of cloud visibility and control solutions. As consideration for the acquisition, we paid approximately $13.2 million in cash and assumed $0.3 million in net tangible liabilities.

The acquisition of Cloudvisory was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $13.2 million was allocated using the information available to us. The results of operations of Cloudvisory have been included in our condensed consolidated statements of operations from the acquisition date. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Allocation of the purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(288)
Intangible assets	5,650
Goodwill	7,846
Total purchase price allocation	$	13,208

The purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill generated as a result of the Cloudvisory acquisition is deductible for tax purposes.

Intangible assets consist primarily of developed technology and trade name. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content. Trade name is attributable to marketing goods and services under the Cloudvisory brand.

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	5,500
Trade name	1	150
Total identifiable intangible assets		$	5,650

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 35% to determine the fair value.

The value of the trade name was estimated using the relief-from-royalty method, an income approach (Level 3), which estimates the cost savings that accrue to the owner of the intangibles asset that would otherwise be payable as royalties or license fees on revenues earned through the use of the asset. A royalty rate of 1% was applied to the projected revenues associated with the intangible asset to determine the amount of savings using a discount rate of 35% to determine the fair value.

Discount rates for each respective intangible asset were determined by accounting for the risk associated with each asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful lives were determined by evaluating the expected economic and useful lives of the assets and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Cloudvisory.

The intangible assets acquired and net tangible liability assumed in this acquisition are reported as held for sale in the condensed consolidated balance sheets. Goodwill generated by the Cloudvisory acquisition amounted to $1.8 million and was allocated to the FireEye Products business based on relative fair value and is reported as held for sale.

16

Acquisition of Respond Software

In November 2020, we acquired all outstanding shares of privately held Respond Software, a cybersecurity investigation automation company. The acquisition of Respond Software, a leader in automation of extended detection and response (XDR), is intended to add significant capabilities to our Mandiant Advantage platform by automating threat detection and reducing the amount of analyst time necessary to investigate threats due to the reduction in false positives as well as to accelerate Respond Software's learning models with our unique expertise and threat intelligence. In connection with this acquisition, we paid cash consideration of $116.1 million and issued 4,931,862 shares of our common stock, 694,768 of these shares were subject to vesting conditions as of December 31, 2020, of which 257,852 were canceled during the three months ended March 31, 2021 and 436,916 shares remained subject to vesting conditions as of September 30, 2021. The estimated fair value of the common stock issued and not subject to vesting conditions was $60.3 million. We also assumed unvested stock options, which are now exercisable for our common stock, of which $1.2 million of the fair value has been accounted for as consideration for assumed awards pertaining to pre-combination service prior to acquisition. Based on the above, total purchase consideration for Respond Software was $177.6 million.

The acquisition of Respond Software was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $177.6 million was allocated using the information available to us. As a result, we may continue to adjust the preliminary purchase price allocation after obtaining more information regarding asset valuations, liabilities assumed, and revisions of preliminary estimates. The results of operations of Respond Software have been included in our condensed consolidated statements of operations from the acquisition date, and revenue and net income from Respond Software were not material for the year ended December 31, 2020. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Allocation of the preliminary purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(4,551)
Intangible assets	31,880
Deferred tax liability	(949)
Goodwill	151,217
Total purchase price allocation	$	177,597

The preliminary purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill is not expected to be deductible for U.S. income tax purposes.

Intangible assets consist primarily of developed technology, in-process technology, customer relationships and trade name. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content. Customer relationship intangibles relate to Respond Software's ability to sell current and future content, as well as products built around this content, to its existing customers. Trade name is attributable to marketing goods and services under the Respond Software brand.

The estimated useful life and fair values of the identifiable intangible assets are as follows (dollars in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	5	$	22,300
In-process technology	4	2,200
Customer relationships	5	6,760
Trade name	2	620
Total identifiable intangible assets		$	31,880

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 12% to determine the fair value.

The value of in-process technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows

17

generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 13% to determine the fair value.

The value of customer relationships was estimated using the "with and without" version of the Income Approach, which measures the difference between cash flows generated assuming the existence of the current customer relationships and the cash flows assuming those relationships do not exist and are replaced over time. Estimated costs on projected revenues, excluding acquired contract backlog, were made using historical data pertaining to sales to new and existing customers. The cash flow impact of projected cost savings, primarily avoidance of legal costs pertaining to new customers and lower commission rates applicable to existing customers than new customers, were discounted at a rate of 11% to determine the fair value.

The value of the trade name was estimated using the relief-from-royalty method, an income approach (Level 3), which estimates the cost savings that accrue to the owner of the intangibles asset that would otherwise be payable as royalties or license fees on revenues earned through the use of the asset. A royalty rate of 1% was applied to the projected revenues associated with the intangible asset to determine the amount of savings using a discount rate of 12% to determine the fair value.

Discount rates for each respective intangible asset were determined by accounting for the risk associated with each asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful lives were determined by evaluating the expected economic and useful lives of the assets and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Respond Software.

A portion of the goodwill generated by the Respond Software acquisition was allocated to the FireEye Products business based on relative fair value and is reported as held for sale. The amount of Respond Software goodwill reported as held for sale is $34.8 million as of September 30, 2021.

Acquisition of Intrigue

On August 4, 2021, we acquired Intrigue, a privately-held company, for cash consideration of approximately $12.3 million. Intrigue's attack surface management technology will be integrated into the Mandiant Advantage platform, enabling organizations to discover, monitor and manage risk across their entire attack surface.

The acquisition of Intrigue was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $12.3 million was allocated using the information available to us. The results of operations of Intrigue have been included in our condensed consolidated statements of operations from the acquisition date, though revenue and net income from Intrigue were not material for the three and nine months ended September 30, 2021. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Preliminary allocation of the purchase price is as follows (in thousands):

	Amount
Net tangible assets acquired	$	143
Intangible assets	3,400
Deferred tax liability	(513)
Goodwill	9,230
Total preliminary purchase price allocation	$	12,260

The purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill generated as a result of the Intrigue acquisition is not deductible for tax purposes.

Intangible assets consist primarily of developed technology. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content.

18

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	3,400
Total identifiable intangible assets		$	3,400

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 40% to determine the fair value.

The discount rate was determined by accounting for the risk associated with the asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful life was determined by evaluating the expected economic and useful lives of the asset and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Intrigue.

Goodwill and Purchased Intangible Assets

Goodwill and purchased intangible assets held for sale pursuant to our agreement to sell the FireEye Products business to a consortium led by STG were included in assets held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, are excluded from the amounts shown in the tables below.

An initial amount of $9.2 million was recorded to goodwill as a result of the Intrigue acquisition. Goodwill decreased by a net of $0.2 million due to tax adjustments to the goodwill balance of Respond Software for the nine months ended September 30, 2021. There were no other changes to the carrying amount of goodwill.

Purchased intangible assets consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Developed technology	$	150,893	$	147,493
Content	158,700		158,700
Customer relationships	112,360		112,360
Contract backlog	13,200		13,200
Trade names	17,720		17,720
Non-competition agreements	1,100		1,100
Total intangible assets	453,973		450,573
Less: accumulated amortization	(363,258)		(330,018)
Total net intangible assets	$	90,715	$	120,555

Amortization expense of intangible assets during the three months ended September 30, 2021 and 2020 was $11.1 million and $10.0 million, respectively. Amortization expense of intangible assets during the nine months ended September 30, 2021 and 2020 was $33.2 million and $30.4 million, respectively.

The expected future annual amortization expense of intangible assets as of September 30, 2021 is presented below (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	11,204
2022	34,439
2023	29,421
2024	10,566
2025	5,085
Total	$	90,715

19

7. Restructuring Charges

The following table sets forth the restructuring balance as of September 30, 2021 related to previous restructuring activities and a summary of restructuring activities during the nine months ended September 30, 2021 (in thousands):

	Severance and related costs		Facilities costs		Total costs
Balance, December 31, 2020	$	570	$	478	$	1,048
Provision for restructuring charges	1,898		—		1,898
Cash payments	(2,168)		(360)		(2,528)
Other adjustments	(249)		11		(238)
Balance, September 30, 2021	$	51	$	129	$	180

The remainder of the restructuring balance of $0.2 million at September 30, 2021 is composed of $0.1 million of non-cancelable non-lease costs which we expect to pay over the terms of the related obligations through the first quarter of 2022 and $0.1 million of severance costs.

8. Leases

We have operating leases primarily for corporate offices. Our leases have remaining lease terms of one to eleven years, some of which include options to extend the leases for up to five years, and some of which include options to terminate within one year.

Operating leases held for sale related to our discontinued operations were included in assets and liabilities held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, are excluded from the amounts shown in the tables below.

The components of lease expenses were as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Operating lease costs	$	3,256	$	10,039
Short-term lease costs	493		1,175
Sublease income	(148)		(592)
Total net lease costs	$	3,601	$	10,622

Supplemental balance sheet information related to leases is as follows (in thousands, except lease term and discount rate):

	As of September 30, 2021
Operating leases:
Operating lease right-of-use assets, net	$	35,550
Operating lease liabilities, current	$	13,567
Operating lease liabilities, non-current	54,571
Total operating lease liabilities	$	68,138
Weighted average remaining lease term (in years)	6.9
Weighted average discount rate	6.0		%

Supplemental cash flow and other information related to leases is as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Cash paid for amounts included in the measurement of lease liabilities:
Operating cash flows from operating leases	$	3,951	$	13,278
Lease liabilities arising from obtaining right-of-use assets:
Operating leases	$	—	$	11,683

20

Cash flows of operating lease liabilities are as follows (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	2,894
2022	14,600
2023	12,914
2024	11,409
2025	10,626
2026	10,595
2027 and thereafter	20,250
Total lease payments	83,288
Less: imputed interest	(15,150)
Total lease obligations	68,138
Less: current lease obligations	(13,567)
Long-term lease obligations	$	54,571

As of September 30, 2021, we did not have any additional operating lease commitments for office leases that have not yet commenced.

9. Deferred Revenue

Deferred revenue held for sale related to our discontinued operations was included in liabilities held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, is excluded from the amounts shown in the tables below.

Deferred revenue consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Platform, cloud subscription and managed services, current	$	136,273	$	126,086
Professional services, current	111,867		100,270
Total deferred revenue, current	248,140		226,356
Platform, cloud subscription and managed services, non-current	65,275		56,691
Professional services, non-current	1,261		1,206
Total deferred revenue, non-current	66,536		57,897
Total deferred revenue	$	314,676	$	284,253

Changes in the balance of deferred revenue for the periods presented are as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Deferred revenue, beginning of period	$	297,326	$	244,084	$	284,253	$	273,241
Billings for the period	139,320		99,591		380,991		259,818
Revenue recognized	(121,970)		(100,052)		(350,568)		(289,436)
Deferred revenue, end of period	$	314,676	$	243,623	$	314,676	$	243,623

Remaining Performance Obligations

Transaction price allocated to remaining performance obligations for continuing operations represents contracted revenue that has not yet been recognized, which includes deferred revenue and non-cancelable contracts that will be invoiced and recognized as revenue in future periods ("backlog"). While deferred revenue is recorded on our balance sheet as a liability, backlog is not recorded in revenue, deferred revenue or elsewhere in our consolidated financial statements until we establish a contractual right to invoice, at which point it is recorded as revenue or deferred revenue as appropriate. As of September 30, 2021, the aggregate amount of the transaction price allocated to remaining performance obligations was $314.7 million in deferred revenue and $11.1 million in backlog.

21

We expect that the amount of backlog relative to the total value of our contracts will change from year to year due to several factors, including the amount invoiced early in the contract term, the timing and duration of customer agreements, varying invoicing cycles of agreements and changes in customer financial circumstances. Accordingly, we believe that fluctuations in backlog are not always a reliable indicator of future revenues and we do not utilize backlog internally as a key management metric.

We expect to recognize these remaining performance obligations as follows (in percentages):

	Total	Less than 1 year	1-2 years	2-3 years	More than 3 years
Deferred revenue	100%	79%	14%	6%	1%
Backlog	100%	48%	30%	20%	2%

10. Convertible Senior Notes

Convertible Senior Notes due 2024

On May 24, 2018, we issued $525.0 million aggregate principal amount of 0.875% Convertible Senior Notes due 2024 (the "2024 Notes") in a private placement to qualified institutional purchasers pursuant to an exemption from registration provided by Section 4(a)(2) and Rule 144A under the Securities Act of 1933, as amended (the "Securities Act"). In addition, on June 5, 2018, we issued an additional $75.0 million aggregate principal amount of the 2024 Notes pursuant to the full exercise of the initial purchasers' option to purchase additional 2024 Notes, in a private placement exempt from the registration requirements of the Securities Act. The net proceeds from the offerings, after deducting the initial purchasers' discount of approximately $15.0 million and the issuance costs of approximately $0.6 million, were $584.4 million. We used (i) approximately $330.4 million of the net proceeds to repurchase approximately $340.2 million in aggregate principal amount outstanding of the Series A Notes (as defined below) in negotiated transactions with institutional investors and (ii) approximately $65.2 million of the net proceeds from the offering of the 2024 Notes to enter into capped call transactions (the "Capped Calls").

The 2024 Notes are unsecured obligations and rank senior in right of payment to any of our indebtedness that is expressly subordinated in right of payment to the 2024 Notes. They rank equally in right of payment with all of our existing and future liabilities that are not expressly subordinated to the 2024 Notes, including the Series A Notes and the Series B Notes (as defined below); and effectively rank junior in right of payment to any of our secured indebtedness to the extent of the value of the assets securing such indebtedness. The 2024 Notes are structurally junior to all indebtedness and other liabilities (including trade payables) of our subsidiaries.

The 2024 Notes do not contain any financial covenants and do not restrict us from paying dividends or issuing or repurchasing other securities.

The 2024 Notes bear interest at 0.875% per year, payable semiannually in arrears on June 1 and December 1 of each year. The 2024 Notes mature on June 1, 2024, unless earlier repurchased, redeemed or converted.

The initial conversion rate of the 2024 Notes is 43.1667 shares of our common stock per $1,000 of principal amount of the 2024 Notes, which is equivalent to an initial conversion price of approximately $23.17 per share of common stock. The conversion rate of the 2024 Notes may be adjusted pursuant to the terms of the indenture governing the 2024 Notes upon the occurrence of certain specified events, but not for accrued and unpaid interest.

Holders may convert the 2024 Notes at their option in multiples of $1,000 principal amount prior to the business day preceding March 1, 2024, only under the following circumstances:

•during any calendar quarter (and only during such calendar quarter), if the last reported sale price of the common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the conversion price of the 2024 Notes on each applicable trading day;

•during the five business day period after any five consecutive trading day period (the "measurement period") in which the trading price per $1,000 principal amount of the 2024 Notes for each trading day of the measurement period was less than 98% of the product of the last reported sale price of our common stock and the conversion rate for the notes on each such trading day;

•if we call any or all of the 2024 Notes for redemption, at any time prior to the close of business on the scheduled trading day immediately preceding the relevant redemption date; or

•upon the occurrence of specified corporate events, as specified in each indenture governing the 2024 Notes.

22

Regardless of the foregoing conditions, holders may convert their 2024 Notes at their option in multiples of $1,000 principal amount during the period from, and including, March 1, 2024 to the close of business on the second scheduled trading day immediately preceding the maturity date. Upon conversion, the 2024 Notes can be settled in cash, shares of our common stock or any combination of cash and shares of common stock at our option.

Holders may also require us to repurchase the 2024 Notes if we undergo a "fundamental change," as defined in each indenture governing the 2024 Notes, at a repurchase price equal to 100% of the principal amount, plus accrued and unpaid interest to, but excluding, the fundamental change repurchase date.

Additionally, we may redeem for cash all or any portion of the 2024 Notes, if the last reported sale price of our common stock has been at least 130% of the conversion price of the 2024 Notes then in effect for at least 20 trading days (whether or not consecutive) during any 30 consecutive trading day period (including the last trading day of such period) immediately preceding the date on which we provide notice of redemption at a redemption price equal to 100% of the principal amount of the notes to be redeemed, plus any accrued and unpaid interest to, but excluding, the redemption date.

As of September 30, 2021, none of the conditions permitting holders to convert their 2024 Notes had been satisfied and no shares of our common stock had been issued in connection with any conversions of the 2024 Notes. Based on the closing price of our common stock of $17.80 per share on September 30, 2021, the conversion value of the 2024 Notes was less than the principal amount of the 2024 Notes outstanding on a per 2024 Note basis.

In accordance with accounting for debt with conversions and other options, we bifurcated the principal amount of the 2024 Notes into liability and equity components. The initial liability component of the 2024 Notes was valued at $458.3 million based on the contractual cash flows discounted at an appropriate comparable market non-convertible debt borrowing rate at the date of issuance of 5.5% with the equity component representing the residual amount of the proceeds of $141.7 million, which was recorded as a debt discount. Issuance costs were allocated pro rata based on the relative initial carrying amounts of the liability and equity components. As a result, transaction costs of $0.5 million and $0.1 million and initial purchasers' discount of $11.5 million and $3.5 million were attributable to the liability component and equity component of the 2024 Notes, respectively. The debt discount and the issuance costs allocated to the liability component are amortized as additional interest expense over the term of the 2024 Notes using the effective interest method as noted in the table below.

The liability and equity components of the 2024 Notes consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
	2024 Notes		2024 Notes
Liability component:
Principal	$	600,000	$	600,000
Less: 2024 Notes discounts and issuance costs, net of amortization	(73,703)		(92,750)
Net carrying amount	$	526,297	$	507,250
Equity component, net of issuance costs	$	138,064	$	138,064

The unamortized issuance costs as of September 30, 2021 will be amortized over a weighted-average remaining period of approximately 2.7 years.

Interest expense related to the 2024 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30,						Nine Months Ended September 30,
	2021			2020			2021			2020
	2024 Notes			2024 Notes			2024 Notes			2024 Notes
Coupon interest	$	1,313		$	1,313		$	3,938		$	3,938
Amortization of 2024 Notes discounts and issuance costs	6,427			6,119			19,047			18,133
Total interest expense recognized	$	7,740		$	7,432		$	22,985		$	22,071
Effective interest rate on the liability component	6.0		%	6.0		%	6.0		%	6.1		%

In connection with the 2024 Notes offering, we entered into the Capped Calls with certain counterparties affiliated with the initial purchasers of the 2024 Notes. The Capped Calls are expected to reduce potential dilution of earnings per share upon conversion of the 2024 Notes, and have an initial strike price of $23.17 per share, which corresponds to the initial conversion price of the 2024 Notes

23

and which have a cap price of $34.32 per share. The Capped Calls do not meet the criteria for separate accounting as a derivative as they are indexed to our own stock and are accounted for as freestanding financial instruments. The premiums paid for the purchase of the Capped Calls in the amount of $65.2 million have been recorded as a reduction of the Company's additional paid-in capital in stockholder's equity in the accompanying condensed consolidated financial statements and fair values of the Capped Calls are not re-measured at each reporting period.

Convertible Senior Notes due 2035

In June 2015, we issued $460.0 million principal amount of 1.000% Convertible Senior Notes due 2035 (the "Series A Notes") and $460.0 million principal amount of 1.625% Convertible Senior Notes due 2035 (the “Series B Notes” and together with the Series A Notes, the "2035 Notes", and the 2035 Notes, together with the 2024 Notes, the "Convertible Senior Notes") in a private placement to qualified institutional purchasers pursuant to an exemption from registration provided by Section 4(a)(2) and Rule 144A under the Securities Act. The net proceeds after the initial purchasers' discount of $23.0 million and issuance costs of $0.5 million from the 2035 Notes were $896.5 million. The Series A Notes and Series B Notes bear interest at 1.000% per year and 1.625% per year, respectively, payable semiannually in arrears on June 1 and December 1 of each year. The 2035 Notes mature on June 1, 2035, unless earlier repurchased, redeemed or converted.

The 2035 Notes are unsecured obligations and rank senior in right of payment to any of our indebtedness that is expressly subordinated in right of payment to the 2035 Notes. They rank equally in right of payment with all of our existing and future liabilities that are not expressly subordinated to the 2035 Notes and effectively rank junior in right of payment to any of our secured indebtedness to the extent of the value of the assets securing such indebtedness. They are structurally junior to all indebtedness and other liabilities (including trade payables) of our subsidiaries.

The 2035 Notes do not contain any financial covenants and do not restrict us from paying dividends or issuing or repurchasing our other securities.

The initial conversion rate on each series of 2035 Notes is 16.4572 shares of our common stock per $1,000 principal amount of 2035 Notes, which is equivalent to an initial conversion price of approximately $60.76 per share of common stock. The conversion rate of each series of 2035 Notes may be adjusted upon the occurrence of certain specified events, but not for accrued and unpaid interest.

Holders may convert the 2035 Notes at their option in multiples of $1,000 principal amount prior to March 1, 2035, only under the following circumstances:

•during any calendar quarter (and only during such calendar quarter), if the last reported sale price of the common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the conversion price for the 2035 Notes of the relevant series on each applicable trading day;

•during the five business day period after any five consecutive trading day period in which the trading price per $1,000 principal amount of Series A Notes or Series B Notes, as applicable, for each trading day of the measurement period was less than 98% of the product of the last reported sale price of our common stock and the conversion rate for the notes of the relevant series on each such trading day;

•if we call any or all of the 2035 Notes of a series for redemption, at any time prior to the close of business on the scheduled trading day immediately preceding the relevant redemption date; or

•upon the occurrence of specified corporate events, as specified in each indenture governing the 2035 Notes.

Regardless of the foregoing conditions, holders may convert their 2035 Notes at their option in multiples of $1,000 principal amount at any time after March 1, 2035 until maturity for either series of 2035 Notes. Upon conversion, the 2035 Notes can be settled in cash, shares of our common stock or any combination thereof at our option.

We may be required by holders of the 2035 Notes to repurchase all or any portion of their 2035 Notes at 100% of the principal amount plus accrued and unpaid interest, on each of June 1, 2025 and June 1, 2030, in the case of the Series A Notes, and each of June 1, 2022, June 1, 2025 and June 1, 2030 in the case of the Series B Notes. Holders may also require us to repurchase the 2035 Notes if we undergo a "fundamental change," as defined in each indenture governing the 2035 Notes, at a purchase price equal to 100% of the principal amount, plus accrued and unpaid interest.

Additionally, we may redeem for cash all or any portion of the Series B Notes at any time prior to June 1, 2022 if the last reported sale price of our common stock has been at least 130% of the conversion price then in effect for at least 20 trading days (whether or not consecutive) during any 30 consecutive trading day period (including the last trading day of such period) ending not more than three trading days immediately preceding the date we provide notice of redemption. We also may redeem for cash all or any portion of the Series A Notes at any time prior to maturity and all or any portion of the Series B Notes on or after June 1, 2022 until maturity, regardless of the foregoing sale price condition.

24

In accordance with accounting for debt with conversions and other options, we allocated the principal amount of the 2035 Notes into liability and equity components. We also allocated the total amount of initial purchasers' discount and transaction costs incurred to the liability and equity components using the same proportions as the proceeds from the 2035 Notes. Transaction costs of $0.4 million and $0.1 million and initial purchasers' discount of $17.6 million and $5.4 million were attributable to the liability component and equity component of the 2035 Notes, respectively.

Repurchase of a portion of the Series A Notes

In May 2018, we used approximately $330.4 million of the net proceeds from the offering of the 2024 Notes to repurchase $340.2 million aggregate principal amount of the Series A Notes. The repurchase was accounted for as a partial extinguishment of the Series A Notes. The consideration of approximately $330.4 million used to repurchase the Series A Notes was allocated between the liability and equity components of the amount extinguished by determining the fair value of the liability component immediately prior to the debt extinguishment and allocating that portion of the repurchase price to the liability component in the amount of $317.4 million. The residual of the repurchase price of $13.0 million was allocated to the equity component of the Series A Notes as a reduction of additional paid-in capital. The fair value of the debt extinguished was calculated using a discount rate of 4.5%, representing an estimate of the Company's borrowing rate at the date of repurchase with a remaining expected life of two years. As part of the repurchase, we wrote-off a portion of the unamortized debt issuance cost apportioned to the principal amount of Series A Notes repurchased. We also recorded a loss on partial extinguishment of the Series A Notes of $10.8 million in Other Expense, net, representing the difference between the consideration attributed to the liability component and the sum of the net carrying amount of the liability component and unamortized costs.

In June 2020, the Company delivered a notice to the holders of Series A Notes to notify such holders of their option to require the Company to repurchase their Series A Notes on June 1, 2020. Holders representing $96.4 million aggregate principal amount of Series A Notes chose to exercise their option to require the Company to repurchase their Series A Notes. The repurchase was accounted for as a partial extinguishment of the Series A Notes. The consideration of approximately $96.4 million was used to repurchase the Series A Notes. The fair value of the debt extinguished was deemed to be the same as the par value of $96.4 million and no gain or loss was recognized.

As of September 30, 2021, $23.4 million aggregate principal amount of the Series A Notes remained outstanding.

The liability and equity components of the remaining portion of 2035 Notes consisted of the following (in thousands):

	As of September 30, 2021				As of December 31, 2020
	Series A Notes		Series B Notes		Series A Notes		Series B Notes
Liability component:
Principal	$	23,436	$	460,000	$	23,436	$	460,000
Less: 2035 Notes discount and issuance costs, net of amortization	—		(14,268)		—		(29,790)
Net carrying amount	$	23,436	$	445,732	$	23,436	$	430,210
Equity component, net of issuance costs	$	15,559	$	117,834	$	15,559	$	117,834

The unamortized discounts and issuance costs as of September 30, 2021 will be amortized over a weighted-average remaining period of approximately 0.7 years.

Interest expense for the three and nine months ended September 30, 2021 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2021						Nine Months Ended September 30, 2021
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	176		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			5,235			—			15,523
Total interest expense recognized	$	59		$	7,104		$	176		$	21,129
Effective interest rate on the liability component	1.0		%	6.5		%	1.0		%	6.5		%

25

Interest expense for the three and nine months ended September 30, 2020 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2020						Nine Months Ended September 30, 2020
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	577		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			4,994			2,540			14,806
Total interest expense recognized	$	59		$	6,863		$	3,117		$	20,412
Effective interest rate on the liability component	1.0		%	6.5		%	3.5		%	6.6		%

Prepaid Forward Stock Purchase

In connection with the issuance of the 2035 Notes, we also entered into privately negotiated prepaid forward transactions (the "Prepaid Forwards") with one of the initial purchasers of the 2035 Notes (the "Forward Counterparty"), pursuant to which we paid approximately $150.0 million. The amount of the Prepaid Forward entered into in connection with the issuance of the Series A Notes was equivalent to approximately 1.6 million shares which was settled on June 3, 2020. The amount of the Prepaid Forward entered into in connection with the issuance of the Series B Notes was equivalent to approximately 1.8 million shares which is to be settled on or around June 1, 2022, subject to any early settlement, in whole or in part, of such Prepaid Forward. Such Prepaid Forward is intended to facilitate privately negotiated derivative transactions by which investors in the Series B Notes will be able to hedge their investment in the Series B Notes. In the event we pay any cash dividends on our common stock, the Forward Counterparty will pay an equivalent amount back to us.

The related shares were accounted for as a repurchase of common stock, and are presented as Treasury Stock in the unaudited condensed consolidated balance sheets. On June 3, 2020, we retired approximately 1.6 million shares delivered under the Prepaid Forward entered into in connection with the issuance of the Series A Notes. The remaining approximately 1.8 million shares of common stock purchased under the Prepaid Forward entered into in connection with the issuance of the Series B Notes are excluded from weighted-average shares outstanding for basic and diluted EPS purposes although they remain legally outstanding.

11. Commitments and Contingencies

Letters of Credit

We were party to letters of credit totaling $3.4 million and $3.9 million as of September 30, 2021 and December 31, 2020, respectively, issued primarily in support of operating leases for our facilities. These letters of credit are collateralized by a line with our bank. No amounts have been drawn against these letters of credit.

Purchase Obligations

As of September 30, 2021, we had approximately $26.1 million of non-cancelable firm purchase commitments primarily for purchases of software and services. In situations where we have received delivery of the goods or services as of September 30, 2021 under purchase orders outstanding as of the same date, such amounts are reflected in the condensed consolidated balance sheet as accounts payable or accrued liabilities and are excluded from the $26.1 million.

Litigation

From time to time, we are involved in claims and legal proceedings that arise in the ordinary course of business. Any claims or proceedings against us, whether meritorious or not, could be time consuming, result in costly litigation, require significant amounts of management time, result in the diversion of significant operational resources, or require us to enter into agreements which may not be available on terms favorable to us or at all.

On November 3, 2021, an alleged shareholder filed an action against the Company and its board of directors, alleging a violation of Delaware General Corporation Law Sec. 271 and breaches of fiduciary duty in connection with sale of the FireEye Products business. The lawsuit seeks a declaratory judgment, a shareholder vote, and attorneys’ fees, as well as other relief. The action was filed in the Court of Chancery of the State of Delaware under the caption Altieri v. Mandiant, Inc., et al., No. 2021-0946. Based on information currently available, the Company has determined that the amount of any possible loss or range of possible loss is not reasonably estimable.

To the extent there is a reasonable possibility that a loss exceeding amounts already recognized may be incurred, and the amount of such additional loss would be material, we will either disclose the estimated additional loss or state that such an estimate cannot be

26

made. We do not currently believe that it is reasonably possible that additional losses in connection with litigation arising in the ordinary course of business would be material.

Indemnification

Under the indemnification provisions of our standard sales related contracts, we agree to defend our customers against third-party claims asserting infringement of certain intellectual property rights, which may include patents, copyrights, trademarks, or trade secrets, and to pay judgments entered on such claims. Our exposure under these indemnification provisions is generally limited to the total amount paid by our customer under the agreement. However, certain agreements include indemnification provisions that could potentially expose us to losses in excess of the amount received under the agreement. In addition, we indemnify our officers, directors, and certain key employees for actions taken while they are or were serving in good faith in such capacities. Through September 30, 2021, there have been no claims under any indemnification provisions.

12. Redeemable Convertible Preferred Stock

On November 18, 2020, we entered into the Series A Securities Financing Agreements. Pursuant to the Series A Securities Financing Agreements, on December 11, 2020 we issued and sold 400,000 shares of a newly designated 4.5% Series A Convertible Preferred Stock (“Series A Preferred Stock”), at a price of $1,000 per share, for an aggregate purchase price of $400.0 million. We intend to use the net proceeds from the issuance and sale to fund acquisitions, buybacks of our common stock, and for working capital purposes.

Each share of Series A Preferred Stock has the powers, designations, preferences, and other rights of the shares of such series as are set forth in the Certificate of Designations of the Series A Preferred Stock filed by us with the Secretary of State of the State of Delaware on December 11, 2020 (the “Certificate of Designations”).

The Series A Preferred Stock ranks senior to our common stock, with respect to dividend rights and rights upon the voluntary or involuntary liquidation, dissolution, or winding up of our affairs (a “Liquidation”). Upon a Liquidation, each share of Series A Preferred Stock is entitled to receive an amount per share equal to the greater of (i) the purchase price paid by the Purchaser, plus all accrued and unpaid dividends and (ii) the amount that the holder of Series A Preferred Stock (each, a “Holder” and collectively, the “Holders”) would have been entitled to receive at such time if the Series A Preferred Stock were converted into our common stock (the “Liquidation Preference”). The initial purchase price of the Series A Preferred Stock is $1,000 per share (the “Original Purchase Price”). The Holders are entitled to dividends on the Original Purchase Price paid by the Purchaser at the rate of 4.5%, cumulatively, per annum that (i) for the first three years after December 11, 2020 will be paid in-kind, and (ii) after the third anniversary of December 11, 2020, will, at our election either be paid in cash, or, if not, will accrue and accumulate, in each case, accruing daily and paid quarterly in arrears. The Holders are also entitled to participate in dividends declared or paid on our common stock on an as-converted basis.

The Holder has the right, at its option, to convert its Series A Preferred Stock, in whole or in part, into fully paid and non-assessable shares of our common stock at a conversion price equal to $17.25 per share subject to certain customary adjustments in the event of certain adjustments to our common stock. The conversion price was equal to $17.25 per share as of September 30, 2021. After the third anniversary of December 11, 2020, subject to certain conditions, we may, at our option, require conversion of all of the outstanding shares of Series A Preferred Stock to Common Stock if, for at least 20 trading days during the 30 consecutive trading days immediately preceding the date we notify the Holders of the election to convert, the closing price of our common stock is at least 175% of the conversion price.

After the seventh anniversary of December 11, 2020, each Holder shall have the right to require us to redeem all or any part of the Holder’s Series A Preferred Stock for cash at a price equal to the Original Purchase Price paid by the Purchaser plus any accrued and unpaid dividends. Upon a “Fundamental Change” (involving a change of control, bankruptcy, insolvency, liquidation or de-listing as further described in the Certificate of Designations), each Holder shall have the right to require us to redeem all or any part of the Holder’s Series A Preferred Stock for an amount equal to the Liquidation Preference at a repurchase price calculated in accordance with the Certificate of Designations plus any accrued and unpaid dividends.

The Holders are generally entitled to vote with the holders of the shares of our common stock on all matters submitted for a vote of holders of shares of our common stock (voting together with the holders of shares of our common stock as one class) on an as-converted basis, subject to certain Nasdaq voting limitations, if applicable. Additionally, the consent of the Holders of a majority of the outstanding shares of Series A Preferred Stock is required for so long as any shares of the Series A Preferred Stock remain outstanding for (i) amendments to our organizational documents that have an adverse effect on the holders of Series A Preferred Stock and (ii) issuances by us of securities that are senior to, or equal in priority with, the Series A Preferred Stock. In addition, for so long as 25% of the Series A Preferred Stock issued in connection with the Financing Agreements remains outstanding, consent of the Holders of a majority of the outstanding shares of Series A Preferred Stock is required for (i) any change to the size of our Board of

27

Directors, (ii) any voluntary dissolution, liquidation, bankruptcy, winding up or deregistration or delisting and (iii) incurrence by us of net debt in excess of $350,000,000.

We have applied the guidance in ASC 480‑10‑S99‑3A, SEC Staff Announcement: Classification and Measurement of Redeemable Securities and have therefore classified the Series A Preferred Stock as mezzanine equity. The Series A Preferred Stock was recorded outside of stockholders’ deficit because it is probable that the shares will be redeemed at the option of the Holders and that redemption option is not solely within the Company's control. Upon issuance, we elected to record the Series A Preferred Stock at redemption value. As such, we recognized $0.1 million and $4.7 million of accretion as of September 30, 2021 and December 31, 2020, respectively.

We accrued $13.7 million of dividends on the Series A Preferred Stock during the nine months ended September 30, 2021. The cumulative dividend accrued on the Series A Preferred Stock as of September 30, 2021 was $14.7 million. Accrued dividends are recorded against additional paid-in capital due to the Company being in an accumulated deficit position.

13. Common Shares Reserved for Issuance

Under our amended and restated certificate of incorporation, we are authorized to issue 100,000,000 shares of convertible preferred stock with a par value of $0.0001 per share, of which 400,000 shares of Series A Preferred Stock were issued and outstanding as of September 30, 2021 and December 31, 2020.

Under our amended and restated certificate of incorporation, we are authorized to issue 1,000,000,000 shares of common stock with a par value of $0.0001 per share as of September 30, 2021 and December 31, 2020. Each share of common stock outstanding is entitled to one vote. The holders of common stock are also entitled to receive dividends whenever funds are legally available and when declared by our Board of Directors, subject to the prior rights of holders of all classes of convertible preferred stock outstanding.

We had reserved shares of common stock for issuance as follows (in thousands):

	As of September 30, 2021	As of December 31, 2020
Reserved under stock award plans	41,923	38,745
Convertible senior notes	33,856	33,856
Convertible preferred stock	24,043	23,249
Employee Stock Purchase Plan (ESPP)	4,684	3,425
Total	104,506	99,275

14. Equity Award Plans

We have operated under our 2013 Equity Incentive Plan ("2013 Plan") since our initial public offering ("IPO") in September 2013. Our 2013 Plan provides for the issuance of restricted stock and the granting of options, stock appreciation rights, performance shares, performance units and restricted stock units to our employees, officers, directors and consultants. Our 2013 Plan provides for annual increases in the number of shares available for issuance on the first day of each fiscal year. Awards granted under the 2013 Plan vest over the periods determined by our Board of Directors or compensation committee of our Board of Directors, generally four years, and stock options granted under the 2013 Plan expire no more than ten years after the date of grant. In the case of an incentive stock option granted to an employee who at the time of grant owns stock representing more than 10% of the total combined voting power of all classes of stock, the exercise price shall be no less than 110% of the fair value per share on the date of grant, and the award shall expire five years from the date of grant. For options granted to any other employee, the per share exercise price shall be no less than 100% of the fair value per share on the date of grant. In the case of non-statutory stock options and options granted to consultants, the per share exercise price shall be no less than 100% of the fair value per share on the date of grant. Approximately 13.8 million shares and 14.9 million shares of our common stock were reserved for future grants as of September 30, 2021 and December 31, 2020, respectively, under the 2013 Plan.

Our 2013 Employee Stock Purchase Plan ("ESPP") allows eligible employees to acquire shares of our common stock at 85% of the lower of the fair market value of our common stock on the first trading day of each offering period or on the exercise date. Our ESPP provides for annual increases in the number of shares available for issuance on the first day of each fiscal year. An aggregate of approximately 4.7 million shares and 3.4 million shares of common stock were available for future issuance as of September 30, 2021 and December 31, 2020, respectively, under our ESPP.

From time to time, we also grant restricted common stock or restricted stock awards outside of our equity incentive plans to certain employees in connection with acquisitions.

28

Stock Option Activity

A summary of the activity, for continuing and discontinued operations, for our stock option changes during the reporting period and a summary of information related to options outstanding and options exercisable are presented below (in thousands, except per share amounts and contractual life years):

	Options Outstanding
	Number of Shares	Weighted- Average Exercise Price (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Balance — December 31, 2020	3,485	$	8.33	5.3	$	60,679
Exercised	(913)	4.76			13,972
Cancelled	(99)	29.39
Balance — September 30, 2021	2,473	8.81		5.0	31,100
Options exercisable — September 30, 2021	1,642	$	12.05	3.6	$	18,311

The aggregate intrinsic value above represents the pre-tax difference between the exercise price of stock options and the quoted market price of our stock on that day for all in-the-money stock options.

Restricted Stock Award ("RSA") and Restricted Stock Unit ("RSU") Activity

A summary of the activity, for continuing and discontinued operations, for our restricted common stock, RSAs and RSUs during the reporting periods and a summary of information related to unvested restricted common stock, RSAs and RSUs, including those expected to vest based on the achievement of a performance condition, are presented below (in thousands, except per share amounts and contractual life years):

	Number of Shares	Weighted- Average Grant Date Fair Value (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Unvested balance — December 31, 2020	20,400	$	15.35	1.4	$	470,424
Granted	16,045	20.62
Vested	(8,135)	15.71
Cancelled	(2,616)	17.23
Unvested balance — September 30, 2021	25,694	18.39		1.6	457,355
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition — September 30, 2021	2,748	$	18.69	1.6	$	48,907

Stock-Based Compensation

We record stock-based compensation based on the fair value as determined on the date granted. We determine the fair value of stock options and shares of common stock to be issued under our ESPP using the Black-Scholes option-pricing model. The fair value of restricted stock units and restricted stock awards equals the market value of the underlying stock on the date of grant. We grant performance-based restricted stock units and restricted stock awards to certain employees which vest upon the achievement of certain performance conditions, subject to the employees’ continued service relationship with us. With respect to performance-based restricted stock units, we assess the probability of vesting at each reporting period and adjust our compensation cost based on this probability assessment. We recognize such compensation expense on a straight-line basis over the service providers' requisite service period.

29

The following table summarizes the assumptions used in the Black-Scholes option-pricing model to determine fair value of our common shares to be issued under the ESPP for the offering periods beginning in May 2020:

	Three and Nine Months Ended September 30, 2021	Three and Nine Months Ended September 30, 2020
Fair value of common stock	$22.33	$13.06
Risk-free interest rate	0.04%	0.17% - 0.18%
Expected term (in years)	0.5 - 1.0	0.5 - 1.0
Volatility	55% - 62%	52% - 68%
Sounds	—%	—%

Stock-based compensation expense related to stock options, ESPP and restricted stock unit awards, relating to continuing operations, is included in the condensed consolidated statements of operations as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Cost of platform, cloud subscription and managed services revenue	$	3,451	$	2,667	$	9,752	$	7,532
Cost of professional services revenue	6,253		4,722		17,574		12,470
Research and development	9,644		6,232		27,387		16,598
Sales and marketing	10,176		9,706		31,605		26,749
General and administrative	9,598		5,952		24,948		18,439
Total	$	39,122	$	29,279	$	111,266	$	81,788

As of September 30, 2021, total compensation cost related to stock-based awards not yet recognized was $419.0 million, which is expected to be amortized on a straight-line basis over the weighted-average remaining vesting period of approximately 2.7 years.

15. Income Taxes

We account for income taxes under the asset and liability method. Under this method, deferred income tax assets and liabilities are determined based upon the difference between the financial statement carrying amounts and the tax basis of assets and liabilities and are measured using the enacted tax rate expected to apply to taxable income in the years in which the differences are expected to be reversed.

We recognized a provision for income taxes of $0.5 million and $0.5 million for the three months ended September 30, 2021 and 2020, respectively. We recognized a provision for income taxes of $2.4 million and $1.5 million for the nine months ended September 30, 2021 and 2020, respectively. The provision for income taxes was primarily comprised of income taxes in foreign jurisdictions and withholding taxes, offset by tax benefits from business combinations.

On March 27, 2020, the Coronavirus Aid, Relief and Economic Security (CARES) Act was enacted and signed into U.S. law to provide economic relief to individuals and businesses facing economic hardship as a result of the COVID-19 pandemic. Changes in tax laws or rates are accounted for in the period of enactment. The income tax provisions of the CARES Act do not have a significant impact on our current taxes, deferred taxes, or uncertain tax positions.

16. Net Loss per Share

Basic net loss per share is calculated by dividing net loss attributable to common stockholders by the weighted average number of common shares outstanding during the period, less shares subject to repurchase, and excludes any dilutive effects of employee share based awards and options. Diluted net income per common share is computed giving effect to all potentially dilutive common shares, including common stock issuable upon exercise of stock options, convertible preferred stock, conversion of the Convertible Senior Notes, and unvested restricted common stock and stock units. As we had net losses for continuing operations for the three and nine months ended September 30, 2021 and 2020, all potentially issuable common shares were determined to be anti-dilutive.

30

The following table sets forth the computation of net loss per common share (in thousands, except per share amounts):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Numerator:
Loss from continuing operations	$	(101,247)	$	(81,613)	$	(286,843)	$	(269,416)
Net income from discontinued operations	33,025		42,494		103,279		100,716
Net loss	(68,222)		(39,119)		(183,564)		(168,700)
Dividend on series A convertible preferred stock	(4,613)		—		(13,688)		—
Accretion of series A convertible preferred stock	—		—		(82)		—
Net loss attributable to common stockholders	(72,835)		(39,119)		(197,334)		(168,700)
Denominator:
Weighted average number of shares outstanding—basic and diluted	237,168		224,807		236,404		221,329
Net loss per share attributable to common stockholders, basic and diluted:
Continuing operations	$	(0.45)	$	(0.36)	$	(1.27)	$	(1.22)
Discontinued operations	0.14		0.19		0.44		0.46
Total net loss per share attributable to common stockholders, basic and diluted	$	(0.31)	$	(0.17)	$	(0.83)	$	(0.76)

The following outstanding options, unvested shares and units, ESPP shares, shares issuable upon the conversion of the Convertible Senior Notes, convertible preferred stock and shares contingently issuable were excluded (as common stock equivalents) from the computation of diluted net loss per common share for the periods presented as their effect would have been anti-dilutive (in thousands):

	As of September 30,
	2021	2020
Options to purchase common stock	2,473	2,999
Unvested restricted stock awards and units	25,694	21,633
Convertible preferred stock	24,043	—
Convertible senior notes	33,856	33,856
ESPP shares	530	744

17. Employee Benefit Plan

401(k) Plan

We have established a 401(k) tax-deferred savings plan (the “401(k) Plan”) which permits participants to make contributions by salary deduction pursuant to Section 401(k) of the Internal Revenue Code of 1986, as amended. All participants’ interests in their deferrals are 100% vested when contributed. We are responsible for administrative costs of the 401(k) Plan and have made no matching contributions into our 401(k) Plan since inception. Under the 401(k) Plan, pre-tax contributions are allocated to each participant’s individual account and are then invested in selected investment alternatives according to the participants’ directions. The 401(k) Plan is intended to qualify under Sections 401(a) and 501(a) of the Code. As a tax-qualified retirement plan, contributions to the 401(k) Plan and earnings on those contributions are not taxable to the employees until distributed, and all contributions are deductible by us when and if made.

18. Segment and Major Customers Information

Disaggregation of revenue by geography

We conduct business globally and are primarily managed on a geographic basis. Our Chief Executive Officer, who is our chief operating decision maker, reviews financial information presented on a consolidated basis accompanied by information about revenue by geographic region for purposes of allocating resources and evaluating financial performance. We define our regions as United States ("U.S."), Europe, the Middle East, and Africa ("EMEA"), Asia Pacific and Japan ("APAC"), and all remaining geographies (primarily Latin America and Canada) included in Others. There are no segment managers who are held accountable for operations,

31

operating results, and plans for levels, components, or types of products or services below the consolidated unit level. Accordingly, we are considered to be a single reportable segment and operating unit structure.

As discussed in Note 2, the results of product and related subscription and support revenue during the three and nine months ended September 30, 2021 have been included in discontinued operations due to the Purchase Agreement entered into with a consortium led by STG and closing of the sale.

Revenue by geographic region based on the billing address is as follows (in thousands):

	Three Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	40,844	$	35,482	$	9,040	$	5,749	$	7,245	$	5,548	$	3,120	$	1,834
Professional services	42,864		36,027		7,737		6,251		4,865		4,286		6,255		4,875
Total revenue	$	83,708	$	71,509	$	16,777	$	12,000	$	12,110	$	9,834	$	9,375	$	6,709

	Nine Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	112,687	$	103,394	$	26,056	$	17,256	$	21,043	$	15,423	$	8,398	$	5,893
Professional services	126,291		102,183		24,155		19,580		13,989		11,376		17,949		14,331
Total revenue	$	238,978	$	205,577	$	50,211	$	36,836	$	35,032	$	26,799	$	26,347	$	20,224

Our continuing operations generate revenue from sales of our Mandiant Solutions software-as-a-service platform and modules, subscriptions to our managed services and professional services engagements. We disaggregate our revenue from continuing operations into two main categories: (i) platform, cloud subscription and managed services and (ii) professional services.

Our platform, cloud subscription and managed services category includes our Mandiant Advantage software-as-a-service platform and our threat intelligence, security validation, and automated defense modules, as well as our managed services for detection and response and validation. We deliver our managed services and platform entirely through the cloud or, in the case of our security validation software, either through the cloud or in a hybrid on-premise/cloud configuration.

Our professional services include incident response and other security consulting services to our customers who have experienced a cybersecurity breach or desire assistance assessing the resilience of their information systems infrastructure. The majority of our professional services are offered on a time and materials basis, through a fixed fee arrangement, or on a retainer basis. Revenue from professional services is recognized as services are delivered. Revenue from our pre-paid expertise-on-demand subscription and some pre-paid professional services is deferred and recognized when services are delivered.

The following table depicts the disaggregation of revenue according to revenue type and is consistent with how we evaluate our financial performance (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Platform, cloud subscription and managed services	$	60,249	$	48,613	$	168,184	$	141,966
Professional services	61,721		51,439		182,384		147,470
Total revenue	$	121,970	$	100,052	$	350,568	$	289,436

32

Long lived assets by geography

Long lived assets by geographic region based on physical location is as follows (in thousands):

	As of September 30, 2021		As of December 31, 2020
Property and equipment, net:
United States	$	57,382	$	59,998
International	3,390		4,338
Total property and equipment, net	$	60,772	$	64,336

For the three and nine months ended September 30, 2021, and for the three months ended September 30, 2020, one reseller represented 10% of our total revenue. For the nine months ended September 30, 2020, no customer represented 10% or greater of our total revenue.

As of September 30, 2021 and December 31, 2020, no customer represented 10% or greater of our net accounts receivable balance.

19. Subsequent Events

On October 8, 2021, we completed the previously announced sale of the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion, subject to certain purchase price adjustments, and assumption of certain liabilities of the FireEye Products business as specified in the Purchase Agreement, as amended by an Amendment to the Asset Purchase Agreement entered into on October 8, 2021. The FireEye Products business was classified as discontinued operations in our condensed consolidated statements of operations and excluded from continuing operations. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. See Note 2, "Discontinued Operations," for additional information.

33

Item 2. Management's Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our condensed consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q and our Annual Report on Form 10-K for the year ended December 31, 2020. The following discussion and analysis contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. These statements include, but are not limited to, statements regarding:

•the evolution of the threat landscape facing our customers and prospects;

•our ability, and the effects of our efforts, to educate the market regarding the advantages of our security solutions;

•our ability to continue to grow revenues, in particular annual recurring revenues from cloud and subscriptions;

•our future financial and operating results;

•our business plan and our ability to effectively manage our growth and associated investments;

•our beliefs and objectives for future operations;

•our ability to attract and retain customers and to expand our solutions footprint within each of these customers;

•our expectations concerning customer retention rates as well as expectations for the value of subscriptions and services renewals;

•our ability to maintain our competitive technological advantages against new entrants in our industry;

•our ability to timely and effectively scale and adapt our existing technology;

•our ability to innovate new offerings and bring them to market in a timely manner;

•our ability to maintain, protect, and enhance our brand and intellectual property;

•our ability to expand internationally;

•the effects of increased competition in our market and our ability to compete effectively;

•cost of revenue, including changes in costs associated with customer support;

•trends in operating expenses, including changes in research and development, sales and marketing, and general and administrative expenses;

•anticipated income tax rates;

•potential attrition and other impacts associated with restructuring;

•sufficiency of cash to meet cash needs for at least the next 12 months;

•our ability to generate cash flows from operations and free cash flows;

•our ability to capture new, and renew existing, contracts with the United States and international governments;

•our expectations concerning relationships with third parties, including channel partners and logistics providers;

•economic and industry trends or trend analysis;

•the impact of the COVID-19 pandemic and related public health measures on our business and the global economy;

•the attraction, training, integration and retention of qualified employees and key personnel;

•future acquisitions of or investments in complementary companies, products, subscriptions or technologies;

•our expectations, beliefs, plans, intentions and strategies related to our acquisitions of Respond Software, Inc. (“Respond Software”) and Intrigue Corp. ("Intrigue");

•our expectations, beliefs, plans, intentions and strategies related to our divestiture of the FireEye Products business to a consortium led by Symphony Technology Group (“STG”) including our expectations related to the transition services agreement and the impact of the divestiture on our remaining business;

•costs and any benefits of our divestiture of the FireEye Products business; and

•the effects of seasonal trends on our results of operations.

34

As well as other statements regarding our future operations, financial condition and prospects, and business strategies. Forward-looking statements generally can be identified by words such as “anticipates,” “believes,” “estimates,” “expects,” “intends,” “plans,” “predicts,” “projects,” “will be,” “will continue,” “will likely result,” and similar expressions. These forward-looking statements are based on current expectations and assumptions that are subject to risks and uncertainties, which could cause our actual results to differ materially from those reflected in the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those discussed in this Quarterly Report on Form 10-Q, and in particular, the risks discussed under the caption “Risk Factors” in Item 1A of Part II of this Quarterly Report on Form 10-Q and those discussed in other documents we file with the SEC. We undertake no obligation to revise or publicly release the results of any revision to these forward-looking statements, except as required by law. Given these risks and uncertainties, readers are cautioned not to place undue reliance on such forward-looking statements.

Investors and others should note that we announce material financial information to our investors using our investor relations Web site (http://investors.mandiant.com/), SEC filings, press releases, public conference calls and webcasts. We use these channels, as well as social media, to communicate with the public about our company, our services and other issues. It is possible that the information we post on social media could be deemed to be material information.

Overview

We provide a broad portfolio of cybersecurity solutions and services that allow organizations to prepare for, prevent, respond to, investigate and remediate cyber attacks. Our portfolio includes Mandiant Solutions, which include threat intelligence, security validation, and automated alert investigation integrated in the Mandiant Advantage platform, managed services and professional services.

On May 29, 2021, we entered into an Asset Purchase Agreement (the “Purchase Agreement”), pursuant to which we agreed to sell the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion and assumption of certain liabilities of the FireEye Products business as specified in the Purchase Agreement. As a result, the FireEye Products business was classified as discontinued operations in our condensed consolidated financial statements and excluded from continuing operations and the related assets and liabilities were classified as held for sale. The transaction closed on October 8, 2021.

In March 2020, the World Health Organization declared the novel coronavirus disease (COVID-19) a global pandemic. The pandemic has impacted, and could further impact, our operations and the operations of our customers as a result of quarantines, various local, state and federal government public health orders, facility and business closures, supply chain shortages, vaccination mandates, and travel and logistics restrictions. While we instituted a global work-from-home policy and restricted employee travel to essential, business-critical trips toward the end of the first quarter of 2020, we were able to maintain strong customer relationships and deliver our technology-enabled managed and professional services to customers without interruption. As a result, we did not incur significant disruptions to our operations during the three and nine months ended September 30, 2021.

On September 9, 2021, President Biden directed the U.S. Department of Labor’s Occupational Safety and Health Administration (“OSHA”) to issue an Emergency Temporary Standard (the “ETS”) requiring that all employers with at least 100 employees ensure that their U.S. employees are fully vaccinated for COVID-19 by January 4, 2022 or obtain a negative COVID-19 test at least once a week. The ETS was issued on November 4, 2021. As a company with more than 100 U.S. employees, we would be required to mandate COVID-19 vaccination of our U.S. workforce or require our unvaccinated U.S. employees to be tested on a weekly basis. Although this ETS takes effect immediately, it also serves as a proposal under Section 6(b) of the Occupational Safety and Health Act for a final standard. It remains unclear, among other things, if the final OSHA standard will apply to all U.S. employees or only to U.S. employees who work in an office, and how compliance will be documented. President Biden also issued an Executive Order requiring certain COVID-19 precautions for U.S. government contractors and their subcontractors, which would include us, including mandatory employee vaccination (subject to medical and religious exemptions) (the “Executive Order”). We are evaluating the ETS and taking steps to comply with the Executive Order. Our preparation and implementation of these requirements could be difficult, costly, and potentially result in employee attrition, including attrition of key employees, disruptions in workforce performance, and difficulty securing future labor needs, any of which could have a material adverse effect on our business, financial condition, and results of operations.

We anticipate governments and businesses may take additional actions or extend existing actions to respond to the risks of the COVID-19 pandemic. We continue to actively monitor the impacts and potential impacts of the COVID-19 pandemic in all aspects of our business. Although we are unable to predict the impact of the COVID-19 pandemic on our business, results of operations, liquidity or capital resources at this time, we expect we may be negatively affected if the pandemic and related public health measures result in disruptions in local and global economies, volatility in the global financial markets, overall reductions in demand, delays in payment, or other ramifications from the COVID-19 pandemic. For a further discussion of the uncertainties and business risks associated with the COVID-19 pandemic, see the section entitled “Risk Factors” in Part II, Item 1A of this Quarterly Report on Form 10-Q.

35

Our Business Model

We generate revenue from Mandiant Solutions. Pursuant to our agreement to sell the FireEye Products business to a consortium led by STG, the revenue from FireEye Products has been included within discontinued operations in our condensed consolidated financial statements for all periods presented. We disaggregate our revenue from Mandiant Solutions into two main categories: (i) platform, cloud subscription and managed services and (ii) professional services. For the three months ended September 30, 2021 and 2020, platform, cloud subscription and managed services revenue as a percentage of total revenue was 49% and 49%, respectively. For the nine months ended September 30, 2021 and 2020, platform, cloud subscription and managed services revenue as a percentage of total revenue was 48% and 49%, respectively. Revenue from professional services was 51% and 51% for the three months ended September 30, 2021 and 2020, respectively, and 52% and 51% for the nine months ended September 30, 2021 and 2020, respectively.

Platform, cloud subscription and managed services

The majority of our platform, cloud subscription and managed services revenue is generated from sales of subscriptions to our Mandiant Advantage platform and modules (including security validation, threat intelligence and automated defense) and managed services that are delivered through the cloud. A majority of the revenue in this category is recognized ratably over the contractual term, generally one to three years.

While our threat intelligence and automated defense modules are only available through the cloud, a portion of our revenue in the platform, cloud subscription and managed services category is derived from term licenses of our security validation platform, and revenue from these sales is recognized when the license key is issued to the customer. Revenue from the sale of our on-premise security validation term licenses continues to decline as we encourage our new and existing customers to migrate their solution to the cloud-based Mandiant Advantage platform for greater flexibility and integration with our threat intelligence and automated defense modules. An increasing number of new security validation customers are purchasing subscriptions for the cloud-based Mandiant Advantage security validation module, and we expect an increasing number of security validation customers to renew on the cloud-based Mandiant Advantage module. Deferred revenue from platform, cloud and managed services as of September 30, 2021 and December 31, 2020 was $201.5 million and $182.8 million, respectively.

Professional services

In addition to our platform, cloud subscription and managed services, we offer professional services, including incident response and other strategic security consulting services, to our customers who have experienced a cybersecurity breach or desire assistance assessing and increasing the resilience of their IT environments to cyber attack. The majority our professional services are offered on a time and materials basis, through a fixed fee arrangement, or on a retainer basis. Revenue from professional services is recognized as services are delivered. Revenue from our expertise-on-demand subscription and some pre-paid professional services is deferred, and revenue is recognized when services are delivered. Deferred revenue from professional services as of September 30, 2021 and December 31, 2020 was $113.1 million and $101.5 million, respectively.

Discontinued Operations

Revenue from discontinued operations is generated primarily from sales of network, email, endpoint security, Helix SIEM and Cloudvisory solutions that are deployed on a customer's premises, either as an integrated security appliance or a distributed hybrid on-premise/private cloud configurations.

Key Business Metrics

We monitor our key business metrics set forth below to help us evaluate growth trends, establish budgets, measure the effectiveness of our sales and marketing efforts, and assess operational efficiencies. We discuss revenue and gross margin below under “Components of Operating Results.” Deferred revenue, annualized recurring revenue, billings (a non-GAAP metric), net cash flow provided by (used in) operating activities, and free cash flow (a non-GAAP metric) are discussed immediately below the following table (in thousands, except percentages).

36

	Three Months Ended or as of						Nine Months Ended or as of
	September 30,						September 30,
	2021			2020			2021			2020
Platform, cloud subscription and managed services revenue	$	60,249		$	48,613		$	168,184		$	141,966
Professional services revenue	61,721			51,439			182,384			147,470
Total revenue	$	121,970		$	100,052		$	350,568		$	289,436
Year-over-year percentage increase	22		%	18		%	21		%	22		%
Gross margin percentage	47		%	43		%	46		%	43		%
Deferred revenue, (current and non-current)	$	314,676		$	243,623		$	314,676		$	243,623
Annualized recurring revenue	$	264,115		$	208,929		$	264,115		$	208,929
Billings (non-GAAP)	$	139,320		$	99,591		$	380,991		$	259,818
Net cash used in operating activities - continuing operations	$	(13,756)		$	(22,024)		$	(37,233)		$	(96,850)
Net cash provided by operating activities - discontinued operations	59,054			55,291			126,836			120,351
Net cash provided by operating activities	$	45,298		$	33,267		$	89,603		$	23,501
Free cash flow (non-GAAP) (continuing operations)	$	(11,597)		$	(1,431)		$	(54,042)		$	(113,404)

    Deferred revenue. Our deferred revenue consists of amounts that we have the right to invoice but have not yet been recognized into revenue as of the end of the respective period. We monitor our deferred revenue balance because it represents a significant portion of revenue to be recognized in future periods. The majority of our deferred revenue consists of the unamortized balance of deferred revenue from previously invoiced sales of our security validation platforms, threat intelligence and managed detection and response services and excludes deferred revenue from discontinued operations included in liabilities held for sale. Invoiced amounts for such contracts can be for multiple years, and we classify our deferred revenue as current or non-current depending on when we expect to recognize the related revenue. If the deferred revenue is expected to be recognized within 12 months it is classified as current, otherwise, the deferred revenue is classified as non-current. A table for our deferred revenue is provided below (in thousands):

	As of September 30,
	2021		2020
Deferred revenue, current	$	248,140	$	192,713
Deferred revenue, non-current	66,536		50,910
Total deferred revenue	$	314,676	$	243,623

Annualized recurring revenue. Annualized recurring revenue ("ARR") is an operating metric and represents the annualized revenue run-rate of active term licenses, subscriptions, managed services and support contracts at the end of a reporting period. ARR should be viewed independently of revenue and deferred revenue as ARR is an operating metric and is not intended to be combined with or replace revenue or deferred revenue. ARR is not a forecast of future revenue, which can be impacted by contract start and end dates and renewal rates, and does not include revenue from consumption-based contracts or professional services except for service level agreement payments. We consider ARR a useful measure of the value of the recurring components of our business because it reflects both our ability to attract new customers for our solutions and our success at retaining and expanding our relationships with existing customers. Further, ARR is not impacted by variations in contract length, enabling more meaningful comparison to prior periods as we align our invoicing practices to growing customer preference for annual billing on multi-year contracts.

	As of September 30,
	2021		2020
Platform, cloud subscription and managed services	$	254,932	$	202,903
Professional services	9,183		6,026
Total annualized recurring revenue	$	264,115	$	208,929

Billings. Billings are a non-GAAP financial metric that we define as revenue recognized in accordance with generally accepted accounting principles ("GAAP") plus the change in deferred revenue from the beginning to the end of the period, excluding deferred revenue assumed through acquisitions. We monitor billings as a supplement to revenue (the corresponding GAAP measure), because billings impact our deferred revenue, which is an important indicator of the health and visibility of trends in our business and represents a significant percentage of future revenue. However, it is important to note that other companies, including companies in our industry, may not use billings, may define billings differently, may have different billing frequencies, or may use other financial

37

measures to evaluate their performance, all of which could reduce the usefulness of billings as a comparative measure. Additionally, the calculated billings metric represents the total contract value we have the right to invoice, which includes multi-year subscriptions to our solutions as well as commitments for future services engagements. Calculated billings are impacted by changes in average contract length, thereby reducing the usefulness of comparisons to prior periods. Unlike subscription revenue, which is recognized ratably over a contract term, services revenue is recognized when services are delivered, making calculated services billings less useful as a measure of current business activity. A reconciliation of billings to revenue, the most directly comparable financial measure calculated and presented in accordance with GAAP, is provided below (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Revenue	$	121,970	$	100,052	$	350,568	$	289,436
Add: deferred revenue, end of period	314,676		243,623		314,676		243,623
Less: deferred revenue, beginning of period	(297,326)		(244,084)		(284,253)		(273,241)
Billings (non-GAAP)	$	139,320	$	99,591	$	380,991	$	259,818

We have provided disaggregation of billings below (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Platform, cloud subscription and managed services	$	73,623	$	46,676	$	186,955	$	121,044
Professional services	65,697		52,915		194,036		138,774
Billings (non-GAAP)	$	139,320	$	99,591	$	380,991	$	259,818

Net cash provided by (used in) operating activities. We monitor net cash provided by (used in) operating activities as a measure of our overall business performance. Our net cash provided by (used in) operating activities performance is driven in large part by sales of our offerings in the platform, cloud subscription, managed services category and professional services and from up-front payments for both subscriptions and services. Monitoring net cash provided by (used in) operating activities enables us to analyze our financial performance without the non-cash effects of certain items, such as depreciation, amortization and stock-based compensation costs, thereby allowing us to better understand and manage the cash needs of our business.

Free cash flow. Free cash flow is a non-GAAP financial measure we define as net cash provided by (used in) operating activities, the most directly comparable GAAP financial measure, less purchases of property and equipment. We consider free cash flow to be a liquidity measure that provides useful information to management and investors about the amount of cash generated by our business that, after the purchases of property and equipment, can be used by us for strategic opportunities, including investing in our business, making strategic acquisitions, debt repayment, strengthening our balance sheet and share repurchases. However, it is important to note that other companies, including companies in our industry, may not use free cash flow, may calculate free cash flow differently, or may use other financial measures to evaluate their performance, all of which could reduce the usefulness of free cash flow as a comparative measure. A reconciliation of free cash flow to cash flow provided by (used in) operating activities is provided below (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Net cash provided by (used in) operating activities (continuing operations)	$	(8,285)	$	1,086	$	(37,233)	$	(96,850)
Less: purchase of property and equipment and demonstration units	(3,312)		(2,517)		(16,809)		(16,554)
Free cash flow (non-GAAP) (continuing operations)	$	(11,597)	$	(1,431)	$	(54,042)	$	(113,404)
Net cash provided by (used in) investing activities (continuing operations)	$	1,495	$	(123,251)	$	(259,709)	$	54,788
Net cash provided by (used in) financing activities (continuing operations)	$	(31,705)	$	1,776	$	(93,911)	$	(86,624)

Factors Affecting our Performance

Market Adoption. We rely on market education to raise awareness of today’s cyber attacks and articulate the need for our, solutions and services. Although our security validation and automated defense solutions address significant challenges experienced by customers when implementing effective cyber security safeguards – challenges that include an expanding attack surface from

38

remote workers and digital transformation, proliferation of nation state-sponsored attackers, and an acute shortage of cybersecurity talent – the markets for these solutions are in the early stages of development. As a result, our prospective customers may not have a specific portion of their IT budgets allocated for our advanced security solutions.

We invest heavily in sales and marketing efforts to increase market awareness, educate prospective customers and drive adoption of our solutions and services. Additionally, our consultants use our technology in their engagements, allowing customers to witness the features and capabilities in their IT environments. This market education is critical to creating new IT budget dollars or allocating more of existing IT budget dollars to cybersecurity in general and specifically our security validation and security automation solutions. The degree to which prospective customers recognize the mission critical need for our solutions will drive our ability to acquire new customers and increase renewals and follow-on sales opportunities, which, in turn, will affect our future financial performance.

Sales Productivity. Our sales organization consists of in-house sales teams who work in collaboration with external channel partners to identify new sales prospects, sell additional products, subscriptions and services, and provide post-sale support. Our direct sales teams are organized by territory to target large enterprise and government customers who typically have sales cycles that can last several months or more. We have also expanded our inside sales teams to work with channel partners to expand our customer base of small and medium enterprises, or SMEs, as well as manage renewals of subscription and support contracts.

Newly hired sales and marketing employees typically require several months to establish prospect relationships and achieve full sales productivity. In addition, although we believe our investments in market education have increased awareness of us and our solutions globally, sales teams in certain international markets may face local markets with limited awareness of us and our solutions, or have specific requirements that are not available with our solutions. These factors will influence the timing and overall levels of sales productivity, impacting the rate at which we will be able to convert prospects to sales and drive revenue growth.

Customer Acquisition and Retention. Since we expect that our existing customers are likely to expand their deployments and purchase additional solutions from us over time, we believe new customer acquisition and retention of existing customers is important to expanding the value of our installed base, which we monitor through our key business metrics, including annualized recurring revenue. We believe our ability to maintain strong customer retention and drive new customer acquisition will have a material impact on future sales of our security solutions and services and therefore our future financial performance.

Follow-On Sales. To grow our revenue, it is important that our customers make additional purchases of our solutions and services. After the initial sale to a new customer, we focus on expanding our relationship with the customer to sell additional modules available on the Mandiant Advantage platform as well as and additional services. Sales to our existing customer base can take the form of incremental sales of our solutions, managed services, and professional services either to expand their deployment of our technologies, to extend their internal security resources with our managed and professional security services, or continuously measure the effectiveness of their security controls. Our opportunity to expand our customer relationships through follow-on sales will increase as we add new customers, broaden our security solutions portfolio with additional subscriptions and services and enhance the functionality of our existing solutions. Follow-on sales lead to increased revenue over the lifecycle of a customer relationship and can significantly increase the return on our sales and marketing investments. With many of our large enterprise and government customers, we have realized follow-on sales that were multiples of the value of their initial purchases.

Components of Operating Results

Revenue

We generate revenue from the sales of our Mandiant solutions and services. Revenue is recognized when a contract has been entered into with a customer, the performance obligation(s) is (are) identified, the transaction price is determined and has been allocated to the performance obligation(s) and only then for each performance obligation after we have satisfied that performance obligation.

•Platform, cloud subscription and managed services revenue. The majority of our platform, cloud subscription and managed services revenue is generated from sales of subscriptions to our Mandiant Advantage platform and modules (security validation, threat intelligence, and automated defense) and to our managed services that are delivered through the cloud. A small portion of our revenue in the platform, cloud subscription and managed services category is derived from sales of term licenses to our security validation platform, and revenue from these sales is recognized when the license key is issued to the customer.

•Professional services revenue. Professional services, which includes incident response, security assessments, and other strategic security consulting services, are offered on a time-and-material basis, through a fixed fee arrangement, or on a retainer basis. We recognize the associated revenue as the services are delivered. Some professional services and our expertise-on-demand subscription are prepaid, and revenue is deferred until services are delivered.

39

Cost of Revenue

Our total cost of revenue consists of cost of cloud and managed service revenue and cost of professional services revenue.

•Cost of platform, cloud subscription and managed services revenue. Cost of platform, cloud subscription and managed services revenue primarily consists of personnel costs associated with maintaining our threat intelligence and delivering our managed services, hosting costs paid to third party cloud platform providers, and allocated overhead costs. Personnel costs associated with maintaining our threat intelligence and delivering our managed services consist of salaries, benefits, bonuses and stock-based compensation. Overhead costs consist of certain facilities, depreciation and information technology costs. If revenue from sales of our cloud and managed services declines, the cost of platform, cloud subscription and managed services revenue may increase as a percentage of cloud and managed services revenue due to the fixed nature of a portion of these costs.

•Cost of professional services revenue. Cost of professional services revenue primarily consists of personnel costs for our services organization and allocated overhead costs. If sales of our professional services decline or we are unable to maintain our chargeability rates, our cost of professional services revenue may increase as a percentage of professional services revenue.

Gross Margin

Gross margin, or gross profit as a percentage of revenue, has been and will continue to be affected by a variety of factors, including the mix between platform, cloud subscription and managed services and professional services revenue, the mix of incident response and other strategic security consulting, and the amount of reimbursable travel expenses. We expect our gross margins to fluctuate slightly depending on these factors, but increase over time with expected growth and higher mix of platform, cloud subscription and managed services revenue compared to professional services revenue.

The inclusion of FireEye products revenue in discontinued operations resulted in an increase in allocated overhead costs to continuing operations, which reduced gross margins.

Operating Expenses

Our operating expenses consist of research and development, sales and marketing and general and administrative expenses. Personnel costs are the most significant component of operating expenses and consist of salaries, benefits, bonuses, stock-based compensation and, with regard to sales and marketing expense, sales commissions. Operating expenses also include allocated overhead costs consisting of certain facilities, depreciation and information technology costs.

Operating expenses for continuing operations include the full cost of resources shared by Mandiant solutions and FireEye Products. Following the completion of the divestiture, we will be reimbursed for the cost of shared resources associated with supporting the FireEye Products business under the Transition Services Agreement ("TSA").

In the fourth quarter of 2020, we experienced an attack from a highly sophisticated threat actor that targeted and accessed certain Red Team assessment tools that we use to test our customers' security. This security incident did not have a material adverse impact to our operating expenses during the three and nine months ended September 30, 2021. In addition, we do not expect the incident to materially impact our operating expenses in future periods.

•Research and development. Research and development expense consists primarily of personnel costs and allocated overhead. Research and development expense also includes certain costs associated with delivering our threat intelligence through our Mandiant Advantage platform that were included in cost of goods sold before the Mandiant Advantage platform became generally available. We expect research and development expense to increase in terms of absolute dollars and remain relatively flat or slightly decrease as a percentage of total revenue.

•Sales and marketing. Sales and marketing expense consists primarily of personnel costs, incentive commission costs and allocated overhead. Commission costs are capitalized and amortized over the expected period of benefit, taking into consideration the pattern of transfer to which the asset relates and the expected renewal period. When commissions paid for initial contracts are higher than those paid for renewal contracts, the initial commissions are not commensurate and as such, are recognized over the expected period of benefit. Renewal commissions are generally amortized over the renewal period.

Sales and marketing expense also includes costs for market development programs, promotional and other marketing activities, travel, and outside consulting costs. These costs are recognized as incurred. We expect sales and marketing expense to increase in absolute dollars and remain relatively constant as a percentage of total revenue.

•General and administrative. General and administrative expense consists of personnel costs, professional service costs and allocated overhead. General and administrative personnel include our executive, finance, human resources, facilities and legal organizations. Professional service costs consist primarily of legal, auditing, accounting and other consulting costs. We expect general and administrative expense to decrease in terms of absolute dollars and decrease as a percentage of total

40

revenue after the divestiture of FireEye Products and the cost of shared resources associated with FireEye Products is reimbursed under the TSA.

•Restructuring Charges. In April 2020, August 2020 and December 2020, we implemented restructuring plans designed to align our resources with the strategic initiatives of the business. These restructuring plans resulted in a reduction of 7% of our total workforce as well as the exiting and downsizing of certain real estate facilities and the impairment of certain assets. The expenses incurred primarily consisted of employee severance charges and other termination benefits, as well as real estate and related fixed asset charges for the consolidation or exiting of certain leased facilities.

Interest Income

Interest income consists of interest earned on our cash and cash equivalent and investment balances. We have historically invested our cash in money-market funds and other short-term, high quality securities. We expect interest income to vary each reporting period depending on our average cash and cash equivalent and investment balances during the respective reporting periods, types and mix of investments and market interest rates.

Interest Expense

Interest expense consists primarily of interest at the stated rate (coupon) and amortization of discounts and issuance costs relating to our convertible notes. We expect interest expense to decrease slightly as a result of the repurchase of Series A Notes in June 2020.

Other Income (Expense), Net

Other income (expense), net includes gains or losses on the disposal of fixed assets, gains or losses from our equity-method investment, gains or losses on the extinguishment of convertible notes, foreign currency re-measurement gains and losses and foreign currency transaction gains and losses. We expect other income (expense), net to fluctuate primarily as a result of foreign exchange rate movements.

Provision for (Benefit from) Income Taxes

Provision for (benefit from) income taxes relates primarily to income taxes payable in foreign jurisdictions where we conduct business, withholding taxes, and state income taxes in the United States. The provision is offset by tax benefits primarily related to the reversal of valuation allowances previously established against our deferred tax assets. Should the tax benefits exceed the provision, then a net tax benefit from income taxes is reflected for the period. Income in certain countries may be taxed at statutory tax rates that are lower than the U.S. statutory tax rate. As a result, our overall effective tax rate over the long-term may be lower than the U.S. federal statutory tax rate due to net income being subject to foreign income tax rates that are lower than the U.S. federal statutory rate.

Net Income (Loss) from Discontinued Operations

On May 29, 2021, we entered into a Purchase Agreement, pursuant to which we agreed to sell the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion and assumption of certain liabilities of the FireEye Products business as specified in the Purchase Agreement. The transaction closed on October 8, 2021. The FireEye Products business results of operations have been included within discontinued operations. Discontinued operations are more fully described in Note 2 to the condensed consolidated financial statements.

41

Results of Operations

The following table summarizes our results of operations for the periods presented and as a percentage of our total revenue for those periods. The period-to-period comparison of results is not necessarily indicative of results for future periods.

	Three Months Ended September 30,								Nine Months Ended September 30,
	2021				2020				2021				2020
	Amount		% of total Revenue		Amount		% of total Revenue		Amount		% of total Revenue		Amount		% of total Revenue
	(Dollars in thousands)								(Dollars in thousands)
Revenue:
Platform, cloud subscription and managed services	$	60,249	49	%	$	48,613	49	%	$	168,184	48	%	$	141,966	49
Professional services	61,721		51		51,439		51		182,384		52		147,470		51
Total revenue	121,970		100		100,052		100		350,568		100		289,436		100
Cost of revenue:
Platform, cloud subscription and managed services	28,725		24		27,431		27		83,581		24		79,788		28
Professional services	36,380		30		29,660		30		104,134		30		85,501		30
Total cost of revenue	65,105		53		57,091		57		187,715		54		165,289		57
Total gross profit	56,865		47		42,961		43		162,853		46		124,147		43
Operating expenses:
Research and development	44,814		37		31,316		31		127,649		36		89,059		31
Sales and marketing	65,899		54		55,459		55		190,130		54		167,045		58
General and administrative	32,760		27		24,485		24		87,131		25		79,342		27
Restructuring charges	—		—		822		1		1,927		1		19,597		7
Total operating expenses	143,473		118		112,082		112		406,837		116		355,043		123
Operating loss	(86,608)		(71)		(69,121)		(69)		(243,984)		(70)		(230,896)		(80)
Interest income	1,226		1		2,163		2		4,235		1		9,450		3
Interest expense	(14,903)		(12)		(14,353)		(14)		(44,289)		(13)		(45,555)		(16)
Other income (expense), net	(464)		—		156		—		(364)		—		(951)		—
Loss before income taxes from continuing operations	$	(100,749)	(83)		$	(81,155)	(81)		$	(284,402)	(81)		$	(267,952)	(92)
Provision for income taxes	498		—		458		—		2,441		1		1,464		1
Loss from continuing operations	$	(101,247)	(83)	%	$	(81,613)	(82)	%	$	(286,843)	(82)	%	$	(269,416)	(93)	%
Net income from discontinued operations, net of income taxes	33,025				42,494				103,279				100,716
Net loss	$	(68,222)			$	(39,119)			$	(183,564)			$	(168,700)

42

Comparison of the Three Months Ended September 30, 2021 and 2020

Continuing operations

Revenue

	Three Months Ended September 30,
	2021				2020				Change
	Amount		% of Total Revenue		Amount		% of Total Revenue		Amount		%
	(Dollars in thousands)
Revenue:
Platform, cloud subscription and managed services	$	60,249	49	%	$	48,613	49	%	$	11,636	24	%
Professional services	61,721		51		51,439		51		10,282		20
Total revenue	$	121,970	100	%	$	100,052	100	%	$	21,918	22	%
Revenue by geographic region:
U.S.	$	83,708	69	%	$	71,509	71	%	$	12,199	17	%
EMEA	16,777		14		12,000		12		4,777		40
APAC	12,110		10		9,834		10		2,276		23
Other	9,375		7		6,709		7		2,666		40
Total revenue	$	121,970	100	%	$	100,052	100	%	$	21,918	22	%

Platform, cloud subscription and managed services revenue increased by $11.6 million, or 24%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase in platform, cloud subscription and managed services revenue reflected increased recognition of deferred revenue associated with sales of the threat intelligence and security validation modules of the Mandiant Advantage platform and our Managed Defense managed security service, partially offset by a decrease in sales of term licenses for our on-premise security validation solution.

Professional services revenue increased by $10.3 million, or 20%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase was primarily driven by an increase in number of engagements enabled by an increase in professional services personnel and an increase in mix of incident response services with higher rates per hour as compared to the same period in 2020.

Our international revenue increased $9.7 million, or 34%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase reflects growth in sales of our platform, cloud subscription and managed services and an increase in the number of professional services engagements in certain international regions compared to prior periods.

Cost of Revenue and Gross Margin

	Three Months Ended September 30,
	2021				2020				Change
	Amount		Gross  Margin		Amount		Gross  Margin		Amount		%
	(Dollars in thousands)
Cost of revenue:
Platform, cloud subscription and managed services	$	28,725			$	27,431			$	1,294	5	%
Professional services	36,380				29,660				6,720		23
Total cost of revenue	$	65,105			$	57,091			$	8,014	14	%
Gross margin:
Platform, cloud subscription and managed services			52	%			44	%
Professional services			41	%			42	%
Total gross margin			47	%			43	%

The cost of platform, cloud subscription and managed services revenue increased by $1.3 million, or 5%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase in cost of platform, cloud subscription and managed services revenue was primarily due to an increase of $1.9 million in payroll costs due to an increase in

43

headcount, an increase of $0.8 million in stock-based compensation, an increase of $0.8 million in amortization of intangible assets and an increase of $0.3 million pertaining to hosting services, partially offset by a $2.7 million decrease in shared services.

The cost of professional services revenue increased by $6.7 million, or 23%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase in cost of professional services revenue was primarily due to an increase of $5.6 million in headcount and travel expense to support the increase in customer engagements and an increase of $1.5 million in stock-based compensation expense, partially offset by a $0.8 million decrease in shared services.

Gross margin percentage increased 4 percentage points during the three months ended September 30, 2021 compared to the three months ended September 30, 2020.

Operating Expenses

	Three Months Ended September 30,
	2021				2020				Change
	Amount		% of Total Revenue		Amount		% of Total Revenue		Amount		%
	(Dollars in thousands)
Operating expenses:
Research and development	$	44,814	37	%	$	31,316	31	%	$	13,498	43	%
Sales and marketing	65,899		54		55,459		55		10,440		19
General and administrative	32,760		27		24,485		24		8,275		34
Restructuring charges	—		—		822		1		(822)		(100)
Total operating expenses	$	143,473	118	%	$	112,082	112	%	$	31,391	28	%
Includes stock-based compensation expense of:
Research and development	$	9,644			$	6,232
Sales and marketing	10,176				9,706
General and administrative	9,598				5,952
Total	$	29,418			$	21,890

Research and Development

Research and development expense increased by $13.5 million, or 43%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase was primarily due to an increase of $7.3 million in employee costs due to an increase in headcount both organically and through acquisitions and an increase of $3.4 million in stock-based compensation expense.

Sales and Marketing

Sales and marketing expense increased by $10.4 million, or 19%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase was primarily due to an increase of $5.4 million in marketing program expense and company rebranding costs and an increase of $4.0 million in commission and employee expenses due to an increase in headcount.

General and Administrative

General and administrative expense increased by $8.3 million, or 34%, during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The increase was primarily due to an increase of $3.6 million in stock-based compensation expense associated with annual equity refresh grants and the addition of new hires, an increase of $1.9 million in professional services expense and an increase of $1.4 million in employee costs primarily due to retention bonuses.

Restructuring Charges

We did not incur restructuring charges during the three months ended September 30, 2021. During the three months ended September 30, 2020, we incurred restructuring charges of approximately $0.8 million, which primarily related to employee salary, severance charges and other termination benefits and related to certain facilities exit costs and other restructuring-related expenses under our 2020 restructuring plans.

44

Interest Income

	Three Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Interest income	$	1,226	$	2,163	$	(937)	(43)	%

Interest income decreased for the three months ended September 30, 2021 compared to the three months ended September 30, 2020, due primarily to a lower rate of return on balances in our cash and cash equivalents and investments.

Interest Expense

	Three Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Interest expense	$	(14,903)	$	(14,353)	$	(550)	4	%

Interest expense decreased for the three months ended September 30, 2021 compared to the three months ended September 30, 2020 primarily due to the repurchase of a portion of our convertible notes in June 2020. Interest expense pertains primarily to the amortization of discount and issuance costs related to our convertible notes.

Other Income (Expense), Net

	Three Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Other expense, net	$	(464)	$	156	$	(620)	(397)	%

Other expense, net, increased for the three months ended September 30, 2021 compared to the three months ended September 30, 2020 primarily due to foreign currency transaction losses.

Provision for Income Taxes

	Three Months Ended September 30,
	2021			2020
	(Dollars in thousands)
Provision for income taxes	$	498		$	458
Effective tax rate	(0.5)		%	(0.6)		%

The provision for income taxes remained relatively flat for the three months ended September 30, 2021 compared to the three months ended September 30, 2020.

Discontinued Operations

	Three Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Net income from discontinued operations	$	33,025	$	42,494	$	(9,469)	(22)	%

Net income from discontinued operations decreased during the three months ended September 30, 2021 compared to the three months ended September 30, 2020. The decrease was primarily due a $4.0 million decrease in gross profit due to lower revenues and an increase in operating expenses of $5.3 million.

45

Comparison of the Nine Months Ended September 30, 2021 and 2020

Continuing Operations

Revenue

	Nine Months Ended September 30,
	2021				2020				Change
	Amount		% of Total Revenue		Amount		% of Total Revenue		Amount		%
	(Dollars in thousands)
Revenue:
Platform, cloud subscription and managed services	$	168,184	48	%	$	141,966	49	%	$	26,218	18	%
Professional services	182,384		52		147,470		51		34,914		24
Total revenue	$	350,568	100	%	$	289,436	100	%	$	61,132	21	%
Revenue by geographic region:
United States	$	238,978	68	%	$	205,577	71	%	$	33,401	16	%
EMEA	50,211		14		36,836		13		13,375		36
APAC	35,032		10		26,799		9		8,233		31
Other	26,347		8		20,224		7		6,123		30
Total revenue	$	350,568	100	%	$	289,436	100	%	$	61,132	21	%

Platform, cloud subscription and managed services revenue increased by $26.2 million, or 18%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase in platform, cloud subscription and managed services revenue was primarily due to an increase in revenue recognized from deferred revenue related to increased sales of subscriptions to our threat intelligence and validation modules of the Mandiant Advantage platform and our managed services.

Professional services revenue increased by $34.9 million, or 24%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase was primarily due to an increase in the number of engagements, resulting in an increase in billable hours compared to the same period in 2020.

Our international revenue increased $27.7 million, or 33%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase reflects an increase in sales of our platform, cloud subscription and managed services and an increase in the number of professional services engagements in certain international regions compared to prior periods.

Cost of Revenue and Gross Margin

	Nine Months Ended September 30,
	2021				2020				Change
	Amount		Gross  Margin		Amount		Gross  Margin		Amount		%
	(Dollars in thousands)
Cost of revenue:
Platform, cloud subscription and managed services	$	83,581			$	79,788			$	3,793	5	%
Professional services	104,134				85,501				18,633		22
Total cost of revenue	$	187,715			$	165,289			$	22,426	14	%
Gross margin:
Platform, cloud subscription and managed services			50	%			44	%
Professional services			43	%			42	%
Total gross margin			46	%			43	%

The cost of platform, cloud subscription and managed services revenue increased by $3.8 million, or 5%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase in cost of platform, cloud subscription and managed services revenue was primarily due to an increase of $7.4 million in payroll costs due to an increase in

46

headcount, an increase of $2.2 million in stock-based compensation, an increase of $1.8 million in amortization of intangible assets and an increase of $1.8 million pertaining to hosting services, partially offset by a $9.1 million decrease in shared services.

The cost of professional services revenue increased $18.6 million, or 22%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase in cost of professional services revenue was primarily due to an increase of $16.0 million in payroll costs due to increased headcount to support the increase in customer engagements and an increase of $5.1 million in stock-based compensation expense, partially offset by a $2.7 million decrease in shared services.

Gross profit margin increased by 3% as a percentage of revenue during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. Platform, cloud subscription and managed services gross profit margin increased by 6% compared to the same period in 2020. Professional services gross margin increased 1% primarily due to an increase in billable hours as compared to the same period in 2020.

Operating Expenses

	Nine Months Ended September 30,
	2021				2020				Change
	Amount		% of Total Revenue		Amount		% of Total Revenue		Amount		%
	(Dollars in thousands)
Operating expenses:
Research and development	$	127,649	36	%	$	89,059	31	%	$	38,590	43	%
Sales and marketing	190,130		54		167,045		58		23,085		14
General and administrative	87,131		25		79,342		27		7,789		10
Restructuring charges	1,927		1		19,597		7		(17,670)		(90)
Total operating expenses	$	406,837	116	%	$	355,043	123	%	$	51,794	15	%
Includes stock-based compensation expense of:
Research and development	$	27,387			$	16,598
Sales and marketing	31,605				26,749
General and administrative	24,948				18,439
Restructuring charges	—				—
Total	$	83,940			$	61,786

Research and Development

Research and development expense increased $38.6 million, or 43%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase was due primarily to a $27.4 million increase in payroll and related costs due to an increase in headcount and an increase of $10.8 million in stock-based compensation expense.

Sales and Marketing

Sales and marketing expense increased $23.1 million, or 14%, during the nine months ended September 30, 2021 as compared to the nine months ended September 30, 2020. The increase was primarily due to a $13.6 million increase in commission costs and employee costs due to an increase in headcount, an increase of $4.9 million in stock-based compensation expense and a $0.8 million increase in amortization for intangible assets, partially offset by a $3.8 million decrease in marketing programs and professional services.

General and Administrative

General and administrative expense increased by $7.8 million, or 10%, during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase was primarily due to an increase of $6.5 million in stock-based compensation expense and a $2.9 million increase in third party professional services.

Restructuring Charges

During the nine months ended September 30, 2021, we incurred restructuring charges of approximately $1.9 million. During the nine months ended September 30, 2020, we incurred restructuring charges of approximately $19.6 million, which primarily related to employee severance charges and other termination benefits as well as certain facilities exit costs for other outside services under our 2020 restructuring plans.

47

Interest Income

	Nine Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Interest income	$	4,235	$	9,450	$	(5,215)	(55)	%

Interest income decreased for the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020, due to a lower rate of return on balances in our cash and cash equivalents and investments, which was a direct result of the overall lower interest rate environment and our limited duration investment portfolio.

Interest Expense

	Nine Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Interest expense	$	(44,289)	$	(45,555)	$	1,266	(3)	%

Interest expense decreased slightly for the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020, primarily due to the repurchase of a portion of our convertible notes in June 2020.

Other Expense, Net

	Nine Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Other income (expense), net	$	(364)	$	(951)	$	587	(62)	%

Other income (expense), net, for the nine months ended September 30, 2021 decreased primarily due to foreign currency transaction losses compared to the nine months ended September 30, 2020.

Provision for Income Taxes

	Nine Months Ended September 30,
	2021			2020
	(Dollars in thousands)
Provision for income taxes	$	2,441		$	1,464
Effective tax rate	(0.9)		%	(0.5)		%

The provision for income taxes increased for the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase in the provision for income taxes for the nine months ended September 30, 2021 was primarily due to higher foreign taxes and decreased tax benefits from business combinations included in the nine months ended September 30, 2021 as compared to the nine months ended September 30, 2020.

Discontinued Operations

	Nine Months Ended September 30,				Change
	2021		2020		Amount		%
	(Dollars in thousands)
Net income from discontinued operations	$	103,279	$	100,716	$	2,563	3	%

Net income from discontinued operations increased during the nine months ended September 30, 2021 compared to the nine months ended September 30, 2020. The increase was primarily due to a decrease in operating expenses.

48

Liquidity and Capital Resources

	As of September 30, 2021		As of December 31, 2020
	(In thousands)
Cash and cash equivalents	$	384,700	$	664,679
Short-term investments	$	845,637	$	624,824

	Nine Months Ended September 30,
	2021		2020
	(In thousands)
Cash used in operating activities - continuing operations	$	(37,233)	$	(96,850)
Cash provided by operating activities - discontinued operations	126,836		120,351
Cash provided by operating activities	$	89,603	$	23,501
Cash provided by (used in) investing activities - continuing operations	$	(259,709)	$	54,788
Cash used in investing activities - discontinued operations	(15,962)		(12,018)
Cash provided by (used in) investing activities	$	(275,671)	$	42,770
Cash used in financing activities	$	(93,911)	$	(86,624)
Net decrease in cash and cash equivalents	$	(279,979)	$	(20,353)

 

As of September 30, 2021, our cash and cash equivalents of $384.7 million were held for working capital, capital expenditures, investment in technology, debt servicing and business acquisition purposes, of which approximately $102.9 million was held outside of the United States. We consider the undistributed earnings of our foreign subsidiaries as of September 30, 2021 to be indefinitely reinvested outside the United States on the basis of estimates that future domestic cash generation will be sufficient to meet future domestic cash needs and our plan for reinvestment of our foreign subsidiaries’ undistributed earnings.

On August 4, 2021, we announced the acquisition of Intrigue, a privately-held company, for consideration of approximately $12.3 million in cash.

On May 29, 2021, we entered into a Purchase Agreement, pursuant to which we agreed to sell the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion and assumption of certain liabilities of the FireEye Products business as specified in the Purchase Agreement. The proceeds were received when the transaction closed on October 8, 2021.

In December 2020, we issued and sold 400,000 shares of a newly designated 4.5% Series A Convertible Preferred Stock, par value $0.0001 per share, at a price of $1,000 per share, for an aggregate purchase price of $400.0 million.

In November 2020, we acquired Respond Software, a cybersecurity investigation automation company. In connection with this acquisition, we paid cash consideration of $116.1 million and assumed $5.0 million in net tangible liabilities.

In January 2020, we acquired Cloudvisory, a provider of cloud visibility and control solutions. Total consideration for the acquisition was $13.2 million in cash. We also assumed $0.3 million in net tangible liabilities.

Our principal sources of liquidity are existing cash and cash equivalents and short-term investments and any cash inflow from operations, which we believe will be sufficient to meet our anticipated cash needs for at least the next 12 months. While we have experienced delays in collections which we attribute to the COVID-19 pandemic, we believe we will be able to manage liquidity to meet our anticipated cash needs for at least the next 12 months. Our future capital requirements will depend on many factors, including our growth rate, the timing and extent of spending to support development efforts, the efficiency of our marketing and sales activities, the introduction of new and enhanced product and service offerings, the cost of any future acquisitions of technology or businesses, and the continuing market acceptance of our products and services. In the event that additional financing is required from outside sources, we may not be able to raise such financing on terms acceptable to us or at all. If we are unable to raise additional capital when desired, our business, operating results and financial condition would be adversely affected.

49

Operating Activities

During the nine months ended September 30, 2021, our operating activities from continuing operations used cash of $37.2 million. We incurred a net loss of $286.8 million, which included net non-cash expenses of $214.4 million, primarily consisting of stock-based compensation charges, depreciation and amortization expense and non-cash interest expense related to our convertible notes. Our net change in operating assets and liabilities provided cash of $35.2 million, primarily related to cash sourced from a decrease in deferred revenue of $30.4 million, a reduction in accounts receivable of $3.2 million due to increased collections, an increase in accounts payable and accrued liabilities of $9.3 million and a decrease in prepaid expenses and other assets of $6.7 million primarily due to receipt of other receivables, partially offset by a decrease in other long-term liabilities of $9.8 million and a decrease in accrued compensation of $4.5 million.

During the nine months ended September 30, 2020, our operating activities from continuing operations used cash of $96.9 million. We incurred a net loss of $269.4 million, which included net non-cash expenses of $176.8 million, primarily consisting of stock-based compensation charges, depreciation and amortization expense and non-cash interest expense related to our convertible notes. Our net change in operating assets and liabilities used cash of $4.3 million, primarily due to a decrease in deferred revenue of $29.6 million, a decrease in accounts payable and accrued liabilities of $11.4 million and a decrease in other long-term liabilities of $8.2 million, partially offset by cash sourced from a reduction in accounts receivable of $17.4 million due to increased collections, an increase in accrued compensation of $23.9 million and a decrease in prepaid expenses and other current assets of $3.7 million primarily due to receipt of other receivables.

Investing Activities

Cash used in investing activities from continuing operations during the nine months ended September 30, 2021 was $259.7 million. This was primarily due to $231.0 million net spending on short-term investments as purchases exceeded maturities and sales, $16.8 million used for capital expenditures to purchase property and equipment and by $11.7 million used to acquire Intrigue, net of cash acquired. Cash used in investing activities from discontinued operations was $16.0 million.

Cash provided by investing activities from continuing operations during the nine months ended September 30, 2020 was $54.8 million. This was primarily due to $78.8 million of net receipts from short-term investments as maturities and sales exceeded purchases, partially offset by $16.6 million used for capital expenditures to purchase property and equipment and by $6.3 million used to acquire Cloudvisory, net of cash acquired. Cash used in investing activities from discontinued operations was $12.0 million.

Financing Activities

During the nine months ended September 30, 2021, financing activities used $93.9 million in cash, primarily for share repurchases of $100.0 million, and payment related to shares withheld for taxes of $10.5 million, partially offset by $12.3 million received from employee purchases of shares under our 2013 Employee Stock Purchase Plan ("ESPP") and $4.4 million received from exercises of employee stock options.

During the nine months ended September 30, 2020, financing activities used $86.6 million in cash, primarily for payment of $96.4 million related to the repurchase of Series A Notes, payment related to shares withheld for taxes of $8.8 million offset by $12.3 million received from employee purchases of shares under our ESPP and $6.3 million received from exercises of employee stock options.

Contractual Obligations and Commitments

There have been no significant changes to our contractual obligations and commitments discussed in our Annual Report on Form 10-K for the year ended December 31, 2020 except for those disclosed in Note 10 Convertible Senior Notes and Note 11 Commitments and Contingencies contained in the "Notes to Condensed Consolidated Financial Statements" in Part I, Item I of this Quarterly Report on Form 10-Q.

Off-Balance Sheet Arrangements

As of September 30, 2021, we did not have any relationships with unconsolidated entities or financial partnerships, such as structured finance or special purpose entities, which were established for the purpose of facilitating off-balance sheet arrangements or other purposes.

Use of Estimates

Our condensed consolidated financial statements have been prepared in accordance with U.S. generally accepted accounting principles. The preparation of these condensed consolidated financial statements requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue, expenses, and related disclosures. We base our estimates on historical experience and on various other assumptions that we believe are reasonable under the circumstances. We evaluate our estimates and assumptions on an ongoing basis. Actual results may differ from these estimates. To the extent that there are material differences between these estimates and our actual results, our future financial statements will be affected.

50

Summary of Significant Accounting Policies

We include herein certain updates to those policies.

Discontinued Operations

We consider assets to be held for sale when management, commits to a formal plan to actively market the assets for sale at a price reasonable in relation to fair value, the asset is available for immediate sale in its present condition, an active program to locate a buyer and other actions required to complete the sale have been initiated, the sale of the asset is expected to be completed within one year and it is unlikely that significant changes will be made to the plan. Upon designation as held for sale, we record the carrying value of the assets at the lower of its carrying value or its estimated fair value, less costs to sell. In accordance with GAAP, assets held for sale are not depreciated or amortized.

If the disposal of the component of an entity (or group of components) represents a strategic shift that has (or will have) a major effect on an entity’s operations and financial results, it meets the criteria for discontinued operations. The results of discontinued operations, as well as any gain or loss on the disposal transaction, are presented separately, net of tax, from the results of continuing operations for all periods presented. The expenses included in the results of discontinued operations are the direct operating expenses incurred by the discontinued segment that may be reasonably segregated from the costs of the ongoing operations of the Company. The assets and liabilities have been accounted for as assets held for sale in our condensed consolidated balance sheets. The operating results have been included in discontinued operations in our condensed consolidated statements of operations. The condensed consolidated statement of cash flows presents combined cash flows from continuing operations with cash flows from discontinued operations within each cash flow statement category.

See Note 2, “Discontinued Operations,” to our condensed consolidated financial statements for additional information.

Recent Accounting Pronouncements

See Note 1, "Description of Business and Summary of Significant Accounting Policies," contained in the "Notes to Condensed Consolidated Financial Statements" in Part I, Item I of this Quarterly Report on Form 10-Q for a full description of the recent accounting pronouncements and our expectation of their impact, if any, on our results of operations and financial conditions.

Item 3. Quantitative and Qualitative Disclosures About Market Risk

Foreign Currency Exchange Risk

Our sales contracts are primarily denominated in U.S. dollars. A portion of our operating expenses are incurred outside the United States and are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates, particularly changes in the Indian Rupee, British Pound Sterling, Japanese Yen and Euro. Additionally, fluctuations in foreign currency exchange rates may cause us to recognize transaction gains and losses in our statement of operations. On June 23, 2016, the United Kingdom ("U.K.") held a referendum in which British voters approved an exit from the European Union ("EU"), commonly referred to as "Brexit." This resulted in an adverse impact to currency exchange rates, notably the British Pound Sterling which experienced a sharp decline in value compared to the U.S. dollar and other currencies. Continued volatility in currency exchange rates is expected as the U.K. negotiates its exit from the EU, which could result in greater transaction gains or losses in our statement of operations.

The effect of a hypothetical 10% adverse change in foreign exchange rates on monetary assets and liabilities at September 30, 2021 would not be material to our financial condition or results of operations. To date, foreign currency transaction gains and losses and exchange rate fluctuations have not been material to our financial statements, and we have not engaged in any foreign currency hedging transactions.

As our international operations continue to grow, our risks associated with fluctuations in currency rates will become greater, and we will continue to reassess our approach to managing this risk. In addition, currency fluctuations or a weakening U.S. dollar can increase the costs of our international expansion, and a strengthening U.S. dollar could slow international demand as products and services priced in U.S. dollars become more expensive.

Interest Rate Risk

We had cash and cash equivalents and investments of $1,230.3 million and $1,289.5 million as of September 30, 2021 and December 31, 2020, respectively, consisting of bank deposits, money market funds, certificates of deposit, commercial paper and bonds issued by corporate institutions, the U.S. Treasury and U.S. government agencies. Such interest-earning instruments carry a degree of interest rate risk, but the risk is limited due to our investment policies which limit the duration of our short-term investments. To date, fluctuations in interest income have not been significant.

We do not enter into investments for trading or speculative purposes and have not used any derivative financial instruments to manage our interest rate risk exposure. We have not been exposed to, nor do we anticipate being exposed to, material risks due to changes in interest rates.

Our cash flow exposure due to changes in interest rates related to our debt is limited as the Series A Notes, Series B Notes and 2024 Notes have fixed interest rates of 1.000%, 1.625% and 0.875%, respectively. The fair value of our convertible notes may increase or decrease for various reasons, including fluctuations in the market price of our common stock, fluctuations in market interest rates and fluctuations in general economic conditions. Based upon the quoted market price as of September 30, 2021, the fair value of our convertible notes was approximately $1.0 billion.

A hypothetical 10% change in interest rates during any of the periods presented would not have had a material impact on our financial statements.

52

Item 4. Controls and Procedures

Limitations on Effectiveness of Controls

In designing and evaluating our disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that management is required to apply its judgment in evaluating the benefits of possible controls and procedures relative to their costs.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of September 30, 2021. The term "disclosure controls and procedures," as defined in Rule 13a-15(e) under the Securities Exchange Act of 1934, as amended (or the “Exchange Act”), means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to management, including our principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure.

Based on our evaluation, our Chief Executive Officer and Chief Financial Officer concluded that, as of September 30, 2021, our disclosure controls and procedures are designed at a reasonable assurance level and are effective to provide reasonable assurance that information we are required to disclose in reports that we file or submit under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC rules and forms, and that such information is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rules 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the quarter ended September 30, 2021 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

53

PART II - OTHER INFORMATION

Item 1. Legal Proceedings

The information set forth under the "Litigation" subheading in Note 11 Commitments and Contingencies contained in the "Notes to Condensed Consolidated Financial Statements" in Part I, Item I of this Quarterly Report on Form 10-Q is incorporated herein by reference.

54

Item 1A. Risk Factors

Our operations and financial results are subject to various risks and uncertainties including those described below. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, also may become important factors that affect us. Please see page 34 of this Quarterly Report on Form 10-Q for a discussion of forward-looking statements that are qualified by these risk factors. If any of the following risks or others not specified below materialize, our business, financial condition and results of operations could be materially adversely affected. In that case, the trading price of our common stock could decline.

Summary

• If we are unsuccessful at executing our business plan and necessary transition activities following the sale of the FireEye Products business, our business and results of operations may be adversely affected and our ability to invest in and grow our business could be limited.

• We may not achieve the intended benefits of the sale of the FireEye Products business.

• If the IT security market does not continue to adopt our security solutions, our sales will not grow as quickly as anticipated, or at all, and our business, results of operations and financial condition would be harmed.

• We have had operating losses each year since our inception, and may not achieve or maintain profitability in the future.

• We face intense competition and could lose market share to our competitors, which could adversely affect our business, financial condition and results of operations.

• Real or perceived defects, errors or vulnerabilities in our solutions or services, the misconfiguration of our solutions, the failure of our solutions or services to detect or respond to a security breach or incident, or the failure of customers to take action on attacks identified by our solutions could harm our reputation and adversely impact our business, financial position and results of operations.

• Our results of operations may vary significantly from period to period, which could cause the trading price of our common stock to decline.

• If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, we may not be able to sustain revenue growth and we may not achieve or maintain profitability in the future.

• Our ability to manage our business and monitor results is highly dependent upon IT systems. A failure of these systems or our planned QTC and ERP implementations could have a material adverse effect on our business.

• The implementation of our planned new ERP and change in related processes could negatively impact the effectiveness of our internal control over financial reporting.

• We have experienced network or data security incidents in the past, and we may experience additional network or data security incidents in the future, which, whether actual, alleged or perceived, may harm our reputation, create liability and adversely impact our financial results.

• If securities or industry analysts do not publish research or reports about our business, or publish inaccurate or unfavorable research reports about our business, our share price and trading volume could decline.

• The price of our common stock has been and may continue to be volatile, and the value of your investment could decline.

• Sales of substantial amounts of our common stock in the public markets, or sales of our common stock by our executive officers and directors under Rule 10b5-1 plans, could adversely affect the market price of our common stock.

Risks Related to the Sale of the FireEye Products Business

If we are unsuccessful at executing our business plan and necessary transition activities following the sale of the FireEye Products business, our business and results of operations may be adversely affected and our ability to invest in and grow our business could be limited.

On October 8, 2021, we completed the sale of the FireEye Products business to Magenta Buyer LLC (“McAfee Enterprise”), which is backed by a consortium led by Symphony Technology Group. This and other operational transitions have involved turnover in management and other key personnel and changes in our strategic direction. Transitions of this type can be disruptive, result in the loss of focus and employee morale and make the execution of business strategies more difficult. We also expect to pay one-time separation costs, a portion of which will be expenses paid by proceeds from the transaction. We have also entered into a transition services agreement under which we will provide assistance to McAfee Enterprise including, but not limited to, business

55

support services and IT services that have historically been provided to the FireEye Products business. We may experience delays in the anticipated timing of activities related to such transitions and higher than expected or unanticipated execution costs. If we do not succeed in executing on these transition activities while achieving our cost optimization goals, or if these efforts are more costly or time-consuming than expected, our business and results of operations may be adversely affected, which could limit our ability to invest in and grow our business. Even if we are successful at executing the transition of the FireEye Products business, the divestiture may not enhance long-term stockholder value as anticipated.

The TSA has an initial term of 12 months and may be extended by McAfee Enterprise for up to two three-month extensions. McAfee Enterprise may also terminate any or all services delivered pursuant to the TSA upon written notice, with such termination becoming effective the last day of the month following delivery of such notice. The TSA provides that McAfee Enterprise will pay us a variable fee each month based on the specific services we have provided to it in the previous month. Once services terminate under the TSA, we will not receive the associated fees for providing services and our level of staffing and cost structure may no longer be appropriate for our business needs at that time. If we are not successful at optimizing our costs in performing the services under the TSA, or if we fail to effectively prepare for and manage the effect of the termination of services under the TSA, our business and results of operations may be adversely affected and our ability to invest in and grow our business could be limited.

We may not achieve the intended benefits of the sale of the FireEye Products business.

We may not realize some or all of the anticipated benefits from the sale of the FireEye Products business. The constraints on our business imposed by the divestiture, including the resources required to focus on completing the divestiture and the limitations created by the sale of certain assets we have historically used in our business, a non-compete, bilateral commercial agreements and the loss of employees, could have a continuing impact on the execution of our business strategy and our overall operating results. Further, our remaining employees may become concerned about the future of our remaining operations and lose focus or seek other employment.

We may not realize some or all of the anticipated benefits from the divestiture with respect to the anticipated performance in our remaining business and the divestiture may in fact adversely affect our business. Our ability to realize the anticipated benefits of the divestiture will depend, to a large extent, on our ability to successfully operate the remaining business as a standalone business and to grow and develop the remaining business in the absence of the divested business. In addition, some of the anticipated benefits may not occur for a significant time period following the completion of the divestiture. If our strategy is not successful and does not achieve our expectations over the long term, our business and results of operations may be adversely affected and the price of our common stock could decline.

Our future results of operations are dependent solely on the operations of the Mandiant Solutions business and will differ materially from our previous results.

The FireEye Products business generated approximately 58% of our total revenue for fiscal 2020, and approximately 63% of our total revenue for fiscal 2019. Accordingly, our future financial results will differ materially from our previous results since our future financial results will be dependent solely on our Mandiant Solutions business. Any downturn in our Mandiant Solutions business could have a material adverse effect on our future operating results and financial condition and could materially and adversely affect the trading price of our common stock.

Because we depend in part on FireEye Products and product telemetry data in the operation of our business, disruptions in the availability of such products or product telemetry data could negatively impact our ability to operate our business and provide services to our customers.

We use and depend in part on FireEye Products and product telemetry data from FireEye Products in the operation of our business. For example, in providing incident response services, we typically use a variety of FireEye Products as part of the investigation and remediation, and we use FireEye Product data for threat research, threat hunting and generating derivative content for our offerings such as Mandiant Security Validation. We have entered into a market cooperation and reseller agreement with McAfee Enterprise to, among other things, purchase FireEye Products for our continued use in our consulting business. We have also entered into a strategic collaboration agreement with McAfee Enterprise that allows us to, among other things, purchase telemetry data from FireEye Products until October 2024. However, there is an inherent risk that there could be a disruption in the availability of FireEye Products from McAfee Enterprise or in the sharing of product telemetry data by McAfee Enterprise, due to any number of events, including but not limited to supply chain disruptions, natural disasters or other events outside of the control of McAfee Enterprise. Any such disruptions in the availability of such products or product telemetry data could negatively impact our ability to operate our business and provide services to our customers in the same manner as before our divestiture of the FireEye Products business, which could harm our reputation and adversely impact our business, financial position and results of operations.

56

Risks Related to Our Business and Our Industry

If the IT security market does not continue to adopt our security solutions, our sales will not grow as quickly as anticipated, or at all, and our business, results of operations and financial condition would be harmed.

Our future success depends on market adoption of our unique approach to IT security, which combines our technology, threat intelligence and security expertise in solutions that measure security effectiveness, investigate and respond to breaches and enable customers to adapt to changes in the threat environment. We are seeking to disrupt the IT security market with our security solutions. Our solutions interoperate with, but do not replace, other IT security solutions. Enterprises and governments may be hesitant to purchase our security solutions if they believe their existing solutions provide a level of IT security that is sufficient to meet their needs. Currently, many enterprises and governments have not allocated a fixed portion of their budgets to standalone threat intelligence or solutions that evaluate security effectiveness. As a result, to expand our customer base, we need to convince potential customers to allocate a portion of their discretionary budgets to purchase our technology, threat intelligence and expertise. However, even if we are successful in doing so, any future deterioration in general economic conditions, including as a result of the COVID-19 pandemic, may cause our customers to cut their overall IT spending, and such cuts may fall disproportionately on solutions like ours. If we do not succeed in convincing customers that our solutions should be an integral part of their overall approach to IT security and that a fixed portion of their annual IT budgets should be allocated to our solutions, our sales will not grow as quickly as anticipated, or at all, which would have an adverse impact on our business, results of operations and financial condition.

Even if there is significant demand for security solutions like ours, if our competitors include functionality that is, or is perceived to be, better than or equivalent to that of our solutions, we may have difficulty increasing the market penetration of our solutions. Furthermore, even if the functionality offered by other IT security providers is different and more limited than the functionality of our solutions, organizations may elect to accept such limited functionality in lieu of adding solutions and services from additional vendors like us, especially if competitor offerings are free or available at a lower cost.

In addition, changes in customer requirements could reduce customer demand for our security solutions. For example, if one or more governments share, on a free or nearly free basis, threat intelligence with other governmental agencies or organizations, such as critical infrastructure companies, then those agencies or organizations might have less demand for additional threat intelligence and may purchase less of our standalone threat intelligence offerings.

If enterprises and governments do not continue to adopt our security solutions for any of the reasons discussed above or for other reasons not contemplated, our sales would not grow as quickly as anticipated, or at all, and our business, results of operations and financial condition would be harmed.

We have had operating losses each year since our inception, and may not achieve or maintain profitability in the future.

We have incurred operating losses each year since our inception, including net losses of $72.8 million and $39.1 million during the three months ended September 30, 2021 and 2020 respectively, relating to our Mandiant Solutions business. Any failure to increase our revenue and manage our cost structure as we grow our business could prevent us from achieving or, if achieved, maintaining profitability. Even if we do achieve profitability, we may not be able to sustain or increase profitability on a quarterly or annual basis. If we are unable to become and remain profitable, the value of our company could decrease and our ability to raise capital, maintain our research and development efforts, and expand our business could be negatively impacted.

We face intense competition and could lose market share to our competitors, which could adversely affect our business, financial condition and results of operations.

The market for security solutions and services is intensely competitive and characterized by rapid changes in technology, customer requirements, industry standards, threat vectors and frequent new product introductions and improvements. We anticipate continued challenges from current competitors, which in many cases are more established and enjoy greater resources than us, as well as by new entrants into the industry. If we are unable to anticipate or effectively react to these competitive challenges, our competitive position could weaken, and we could experience a decline in our growth rate or revenue that could adversely affect our business and results of operations.

Our current competitors include large cybersecurity vendors such as CrowdStrike, Palo Alto Networks and Rapid7 that have multiple offerings similar to ours; large accounting firms that offer incident response and strategic consulting services similar to

57

ours; and other small and large companies that offer solutions or services that compete in some of our markets. Other IT providers offer, and may continue to introduce, security features that compete with our Mandiant Advantage platform, either in stand-alone security products or as additional features in their network infrastructure products. Many of our existing competitors have, and some of our potential competitors could have, substantial competitive advantages such as:

•greater name recognition, longer operating histories and larger customer bases;

•larger sales and marketing budgets and resources;

•broader distribution and established relationships with channel and distribution partners and customers;

•greater customer support resources;

•greater resources to make acquisitions or enter into strategic partnerships;

•lower labor and research and development costs;

•larger and more mature intellectual property portfolios; and

•substantially greater financial, technical and other resources.

In addition, some of our larger competitors have substantially broader offerings and may be able to leverage their relationships with distribution partners and customers based on other products or solutions to gain business in a manner that discourages users from purchasing our solutions, subscriptions and services, including by selling at zero or negative margins, product bundling or offering closed technology platforms. Potential customers may also prefer to purchase from their existing suppliers rather than a new supplier regardless of performance or features of the solutions. Furthermore, with the completion of our sale of the FireEye Products business, organizations that purchased both Mandiant Solutions offerings and FireEye Products offerings may decide to not continue purchasing Mandiant Solutions offerings if they desire to limit their number of existing suppliers for cybersecurity offerings. As a result, even if the features of our platform are superior, customers may not purchase our solutions. In addition, new innovative start-up companies, and larger companies that are making significant investments in research and development, may invent similar or superior solutions and technologies that compete with our platform. Our current and potential competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their resources. Further, as our customers refresh the security solutions bought in prior years, they may seek to consolidate vendors, which may result in current customers choosing to purchase solutions from our competitors on an ongoing basis.

Some of our competitors have made or could make acquisitions of businesses that allow them to offer more competitive and comprehensive solutions. As a result of such acquisitions, our current or potential competitors may accelerate the adoption of new technologies that better address end-customer needs, devote greater resources to bring these products and services to market, initiate or withstand substantial price competition, or develop and expand their product and service offerings more quickly than we do. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, and loss of market share.

If we are unable to compete successfully, or if competing successfully requires us to take costly actions in response to the actions of our competitors, our business, financial condition and results of operations could be adversely affected.

Real or perceived defects, errors or vulnerabilities in our solutions or services, the misconfiguration of our solutions, the failure of our solutions or services to detect or respond to a security breach or incident, or the failure of customers to take action on attacks identified by our solutions could harm our reputation and adversely impact our business, financial position and results of operations.

Because our solutions and services are complex, they have contained and may contain design defects or errors that are not detected until after their deployment. Our solutions also provide our customers with the ability to customize a multitude of settings, and it is possible that a customer could misconfigure our solutions or otherwise fail to configure our solutions in an optimal manner. Such defects and misconfigurations of our solutions could cause our solutions or services to be vulnerable to security attacks, or cause them to fail to respond to threats. In addition, because the techniques used by computer hackers to access or sabotage networks change frequently and generally are not recognized until launched against a target, there is a risk that an advanced attack could emerge that our solutions and services are unable to detect. Moreover, as our solutions and services are adopted by an increasing number of enterprises and governments, it is possible that the individuals and organizations behind advanced malware attacks will focus on finding ways to defeat our solutions and services. If this happens, our networks, solutions, services and subscriptions could be targeted by attacks specifically designed to disrupt our business and undermine the perception that our solutions and services are capable of providing superior IT security, which, in turn, could have a serious impact on our reputation as a provider of security solutions. For example, in the fourth quarter of 2020, we experienced an attack from a highly sophisticated threat actor which gained access to our networks and systems via trojanized updates to SolarWinds’ Orion IT

58

monitoring and management software as further described below. Moreover, our solutions must interoperate with our customers’ existing infrastructure, which often have different specifications, utilize multiple protocol standards, deploy products from multiple vendors, and contain multiple generations of products that have been added over time. As a result, unanticipated failures could occur if a customer deploys our solutions in an untested configuration. Similarly, if we inadvertently update our solutions with an erroneous configuration or untested detection content, invalid detections or downtime could occur. Any of these situations could result in negative publicity to us, damage to our reputation, declining sales, increased expenses and customer relations issues, and therefore adversely impact our business, financial position and results of operations.

If any of our customers becomes infected with malware after using our solutions or services, such customer could be disappointed with our solutions and services, regardless of whether our solutions or services blocked the theft of any of such customer’s data or would have blocked such theft if configured properly. Similarly, if our solutions detect attacks against a customer but the customer has not permitted our solutions to block the theft of customer data, customers and the public may erroneously believe that our solutions were not effective. For any security breaches or incidents impacting customers that use our services, such as customers that have hired us to monitor their networks and endpoints through our own or our co-branded security operation centers, breaches impacting those customers may result in customers and the public believing that our solutions and services failed. Furthermore, if any enterprises or governments that are publicly known to use our solutions or services are the subject of an advanced cyber-attack that becomes publicized, our other current or potential customers may look to our competitors for alternatives to our solutions and services. Real or perceived security breaches of or other security incidents impacting our customers’ networks could cause disruption or damage to their networks or other negative consequences and could result in negative publicity to us, damage to our reputation, declining sales, increased expenses and customer relations issues.

In addition, we cannot assure you that any limitation of liability provisions in our customer agreements, contracts with third-party vendors and service providers or other contracts would be enforceable or adequate or would otherwise protect us from any liabilities or damages with respect to any particular claim relating to a security breach or other security-related matter. Furthermore, in the event that a customer suffers a security breach, we could be subject to claims based on a misunderstanding of the scope of our contractual warranties. While our insurance policies include liability coverage for certain of these matters, if we experienced a widespread security breach or other incident that impacted a significant number of our customers to whom we owe indemnity obligations, we could be subject to indemnity claims or other damages that exceed our insurance coverage. We also cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any future claim will not be excluded or otherwise be denied coverage by any insurer. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, operating results and reputation.

Any real or perceived defects, errors or vulnerabilities in our solutions and services, or any other actual or perceived failure of our solutions and services to detect or respond to an advanced threat, could result in:

•a loss of existing or potential customers or channel partners;

•delayed or lost revenue and harm to our financial condition and results of operations;

•a delay in attaining, or the failure to attain, market acceptance;

•the expenditure of significant financial and solution development resources in efforts to analyze, correct, eliminate, or work around errors or defects, or to address and eliminate vulnerabilities;

•an increase in warranty and other claims, or an increase in the cost of servicing warranty and other claims, either of which would adversely affect our gross margins;

•harm to our reputation or brand; and

•claims and litigation, regulatory inquiries, demands, investigations, enforcement actions, or other proceedings, and other claims and liabilities, all of which may be costly and burdensome and further harm our reputation.

Our results of operations may vary significantly from period to period, which could cause the trading price of our common stock to decline.

Our results of operations have varied significantly from period to period, and we expect that our results of operations, including, but not limited to our GAAP and non-GAAP measures, will continue to vary as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including:

59

•our ability to attract new and retain existing customers or sell additional solutions to our existing customers;

•our ability to successfully execute our business plan and necessary transition activities following the sale of the FireEye Products business;

•changes in our mix of solutions, subscriptions and services sold, including changes in the average contract length for subscriptions and support;

•the timing and success of new platform, subscription or service introductions by us or our competitors;

•real or perceived reductions in the efficacy of our solutions by our customers or in the marketplace;

•budgeting cycles, seasonal buying patterns and purchasing practices of customers;

•the timing of new contracts of our solutions and length of our sales cycles;

•changes in customer, distributor or reseller requirements or market needs;

•changes in the growth rate of the IT security market, particularly the market for solutions that measure security effectiveness, or managed detection and response services;

•any change in the competitive landscape of the IT security market, including consolidation among our customers or competitors and strategic partnerships entered into by and between our competitors;

•deferral of orders from customers in anticipation of new products or product enhancements announced by us or our competitors;

•our ability to successfully and continuously expand our business domestically and internationally;

•reductions in customer retention rates for our subscriptions and support;

•decisions by organizations to purchase IT security solutions from larger, more established security vendors or from their primary IT equipment vendors;

•changes in our pricing policies or those of our competitors;

•any disruption in, or termination of, our relationships with channel partners;

•the timing and costs related to the development or acquisition of technologies or businesses or strategic partnerships;

•the lack of synergy or the inability to realize expected synergies, resulting from acquisitions or strategic partnerships;

•our inability to execute, complete or integrate efficiently any acquisition that we may undertake;

•increased expenses, unforeseen liabilities, or write-downs and any impact on our operating results from any acquisitions we consummate;

•insolvency or credit difficulties confronting our customers, affecting their ability to purchase or pay for our solutions, subscriptions and services;

•the cost and potential outcomes of future litigation, including, without limitation, the lawsuit described under the "Litigation" subheading in Note 11 Commitments and Contingencies contained in the "Notes to Condensed Consolidated Financial Statements" in Part , Item I of this Quarterly Report on Form 10-Q;

•the departure of key employees, including, without limitation, attrition due to vaccine mandates;

•seasonality or cyclical fluctuations in our business;

•political, economic and social instability;

•public health crises, such as the COVID-19 pandemic, and related measures to protect the public health;

•future accounting pronouncements or changes in our accounting policies or practices;

•the amount and timing of operating costs and capital expenditures related to the maintenance and expansion of our business, operations and infrastructure;

•the amount and timing of costs related to any cost reduction initiatives and the impact of such initiatives; and

•increases or decreases in our revenues and expenses caused by fluctuations in foreign currency exchange rates.

Any of the above factors, individually or in the aggregate, may result in significant fluctuations in our financial and other operating results from period to period. As a result of this variability, our historical results of operations should not be relied upon as an indication of future performance. Moreover, this variability and unpredictability could result in our failure to meet our operating plan or the expectations of investors or analysts for any period. If we fail to meet such expectations for these or other reasons, the market price of our common stock could fall substantially, and we could face costly lawsuits, including securities class action suits.

60

If we are unable to retain our customers, renew and expand our relationships with them, and add new customers, we may not be able to sustain revenue growth and we may not achieve or maintain profitability in the future.

Although we have experienced rapid growth in the past with respect to our Mandiant Solutions business, we may not continue to grow in the future. Any success that we may experience in the future will depend, in large part, on our ability to, among other things:

•maintain, renew and expand our existing customer base;

•win new customers to our solutions;

•increase revenues from existing customers through increased use of our solutions, subscriptions and services within their organizations;

•improve the capabilities of our solutions and subscriptions through research and development;

•continue to develop our cloud-based solutions;

•maintain the rate at which customers purchase our subscriptions and support;

•continue to successfully expand our business domestically and internationally; and

•successfully compete with other companies.

If we are unable to maintain consistent or increasing revenue growth or if our revenues decline, it may be difficult to achieve and maintain profitability and our business and financial results could be adversely affected. Our revenue for any prior quarterly or annual periods should not be relied upon as any indication of our future revenue or revenue growth.

We could suffer disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud and internet infrastructure on which it relies.

Our business depends on our Mandiant Advantage platform to be available without disruption. We have experienced, and may in the future experience, disruptions, outages, defects, and other performance and quality problems with our platform. We have also experienced, and may in the future experience, disruptions, outages, defects, and other performance and quality problems with the public cloud and internet infrastructure on which our platform relies. These problems can be caused by a variety of factors, including introductions of new functionality, vulnerabilities and defects in proprietary and open source software, human error or misconduct, natural disasters (such as tornadoes, earthquakes, or fires), capacity constraints, design limitations, or denial of service attacks or other security-related incidents.

Further, if our contractual and other business relationships with our public cloud providers are terminated, suspended, or suffer a material change to which we are unable to adapt, such as the elimination of services or features on which we depend, we could be unable to provide our platform and could experience significant delays and incur additional expense in transitioning customers to a different public cloud provider.

Any disruptions, outages, defects, and other performance and quality problems with our platform or with the public cloud and internet infrastructure on which it relies, or any material change in our contractual and other business relationships with our public cloud providers, could result in reduced use of our platform, increased expenses, including service credit obligations, and harm to our brand and reputation, any of which could have a material adverse effect on our business, financial condition and results of operations.

Recent, past and future acquisitions and investments could disrupt our business and harm our financial condition and operating results.

Our success will depend, in part, on our ability to expand our platform and grow our business in response to changing technologies, customer demands and competitive pressures. In some circumstances, we may decide to do so through the acquisition of complementary businesses and technologies rather than through internal development, including, for example, our acquisitions of Verodin, Inc. (“Verodin”), Respond Software, Inc. (“Respond Software”) and Intrigue Corp. (“Intrigue”).

The identification of suitable acquisition candidates can be difficult, time-consuming and costly, and we may not be able to successfully complete acquisitions that we target in the future. The risks we face in connection with acquisitions, including our acquisitions of Verodin, Respond Software and Intrigue include:

•diversion of management time and focus from operating our business to addressing acquisition integration challenges;

61

•our ability to successfully achieve billings and revenue targets of acquired businesses;

•coordination of research and development and sales and marketing functions;

•integration of solution and service offerings;

•retention of key employees from the acquired company;

•changes in relationships with strategic partners as a result of product acquisitions or strategic positioning resulting from the acquisition;

•cultural challenges associated with integrating employees from the acquired company into our organization;

•integration of the acquired company’s accounting, management information, human resources and other administrative systems, as well as the acquired operations, technology and rights into our offerings, and any unanticipated expenses related to such integration;

•the need to implement or improve controls, procedures, and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies;

•financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we don’t adequately address and that cause our reported results to be incorrect;

•liability for activities of the acquired company before the acquisition, including intellectual property infringement claims, violations of laws, commercial disputes, tax liabilities and other known and unknown liabilities;

•completing the transaction and achieving or utilizing the anticipated benefits of the acquisition within the expected timeframe, or at all;

•unanticipated write-offs or charges; and

•litigation or other claims in connection with the acquired company, including claims from terminated employees, customers, former stockholders or other third parties which may differ from or be more significant than the risks our business faces.

Our failure to address these risks or other problems encountered in connection with our past or future acquisitions and investments could cause us to fail to realize the anticipated benefits of these acquisitions or investments, cause us to incur unanticipated liabilities, and harm our business generally. Future acquisitions could also result in dilutive issuances of equity securities. For example, in May 2019, we issued 8,404,609 shares of common stock in connection with our acquisition of Verodin and in November 2020, we issued 4,931,862 shares of common stock in connection with our acquisition of Respond Software.

There is also a risk that future acquisitions will result in the incurrence of debt, contingent liabilities, amortization expenses, incremental operating expenses or the write-off of goodwill, any of which could harm our financial condition or operating results.

Our growth depends on the development, expansion and success of our partner relationships.

As part of our vision for our business, we are building, and will need to grow and maintain, a partner ecosystem of providers of complementary cybersecurity offerings. Some of our existing and future partners may have offerings that compete with our offerings in certain markets. The relationships we have with our partners, and that our partners have with our customers, provide our customers with enhanced value from our Mandiant Advantage platform. Our future growth will be increasingly dependent on the success of these relationships, and if we are unsuccessful in growing and maintaining these relationships or the types and quality of data supported by or available for consumption on our platform, our business, financial condition and results of operations could be adversely affected.

If we are unable to maintain successful relationships with our channel partners and technology alliance partners, or if our channel partners or technology alliance partners fail to perform, our ability to market, sell and distribute our platform will be limited, and our business, financial position and results of operations will be harmed.

In addition to our direct sales force, we rely on our indirect channel partners to sell and support our platform. We derive a substantial portion of our revenue from sales of our solutions, subscriptions and services through, or with the assistance of, our indirect channel, and we expect that sales through channel partners will continue to be a significant percentage of our revenue. We also partner with our technology alliance partners to design go-to-market strategies that combine our platform with solutions or services provided by our technology alliance partners.

62

Our agreements with our channel partners and our technology alliance partners are generally non-exclusive, meaning our partners may offer customers solutions from several different companies, including solutions that compete with ours. If our channel partners do not effectively market and sell our platform, choose to use greater efforts to market and sell their own solutions or those of our competitors, or fail to meet the needs of our customers, our ability to grow our business and sell our platform may be adversely affected. Our channel partners and technology alliance partners may cease marketing our platform with limited or no notice and with little or no penalty, and new channel partners require extensive training and may take several months or more to achieve productivity. The loss of a substantial number of our channel partners, our possible inability to replace them, or the failure to recruit additional channel partners could materially and adversely affect our results of operations. In addition, sales by channel partners are more likely than direct sales to involve collectability concerns, particularly in developing markets. Our channel partner structure could also subject us to lawsuits or reputational harm if, for example, a channel partner misrepresents the functionality of our platform to customers or violates applicable laws or our corporate policies.

Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our channel partners, and in training our channel partners to independently sell and deploy our platform. If we are unable to maintain our relationships with these channel partners or otherwise develop and expand our indirect sales channel, or if our channel partners fail to perform, our business, financial position and results of operations could be adversely affected.

If we fail to effectively manage our growth, our business, financial condition and results of operations would be harmed.

Although our Mandiant Solutions business has experienced significant growth in the past, we cannot provide any assurance that it will continue to grow at the same rate or at all. There is no assurance that we will be able to successfully implement or scale improvements to our systems, processes and controls in a manner that keeps pace with our growth or that such systems, processes and controls will be effective in preventing or detecting errors, omissions or fraud.

As part of our efforts to improve our internal systems, processes and controls, we have licensed technology from third parties. The support services available for such third-party technology are outside of our control and may be negatively affected by consolidation in the software industry. In addition, if we do not receive adequate support for the software underlying our systems, processes and controls, our ability to provide solutions and services to our customers in a timely manner may be impaired, which may cause us to lose customers, limit us to smaller deployments of our platform or increase our technical support costs.

Many of our expenses are relatively fixed, at least in the short term. If our projections or assumptions on which we base our projections are incorrect, we may not be able to adjust our expenses rapidly enough to avoid an adverse impact on our profitability or cash flows.

To manage this growth effectively, we must continue to improve our operational, financial and management systems and controls by, among other things:

•effectively hiring, training and integrating new employees, particularly members of our sales and management teams;

•further improving our key business applications, processes and IT infrastructure, including our data centers, to support our business needs;

•continuing to refine our ability to forecast our bookings, billings, revenues, expenses and cash flows;

•enhancing our information and communication systems to ensure that our employees and offices around the world are well coordinated and can effectively communicate with each other and our growing base of channel partners and customers;

•improving our internal control over financial reporting and disclosure controls and procedures to ensure timely and accurate reporting of our operational and financial results; and

•appropriately documenting and testing our IT systems and business processes.

These and other improvements in our systems and controls will require significant capital expenditures and the allocation of valuable management and employee resources. If we fail to implement these improvements effectively, our ability to manage our expected growth, ensure uninterrupted operation of key business systems and comply with the rules and regulations applicable to public reporting companies would be impaired, and our business, financial condition and results of operations would be harmed.

If the general level of advanced cyber-attacks declines, or is perceived by our current or potential customers to have declined, our business could be harmed.

63

Our business is substantially dependent on enterprises and governments recognizing that advanced cyber-attacks are pervasive and are not effectively prevented by legacy security solutions. High visibility attacks on prominent enterprises and governments have increased market awareness of the problem of advanced cyber-attacks and help to provide an impetus for enterprises and governments to devote resources to protecting against advanced cyber-attacks, such as testing our Mandiant Advantage platform, purchasing it, and broadly deploying it within their organizations. If advanced cyber attacks were to decline, or enterprises or governments perceived that the general level of advanced cyber-attacks have declined, our ability to attract new customers and expand our offerings within existing customers could be materially and adversely affected. A change in the threat landscape may reduce the demand from customers or prospects for our solutions, and therefore could increase our sales cycles and harm our business, results of operations and financial condition.

If organizations do not adopt cloud-based SaaS-delivered security solutions, our ability to grow our business and results

of operations may be adversely affected.

We believe our future success will depend in large part on the growth, if any, in the market for cloud-based SaaS-delivered security solutions. The use of SaaS solutions to manage and automate security and IT operations is at an early stage and rapidly evolving. As such, it is difficult to predict its potential growth, if any, customer adoption and retention rates, customer demand for our solutions, or the success of existing competitive solutions. Any expansion in our market depends on a number of factors, including the cost, performance, and perceived value associated with our solutions and those of our competitors. If our solutions do not achieve widespread adoption or there is a reduction in demand for our solutions due to a lack of customer acceptance, technological challenges, competing solutions, concerns relating to privacy, data protection, or cybersecurity, decreases in corporate spending, weakening economic conditions or otherwise, it could result in early terminations, reduced customer retention rates, or decreased revenue, any of which would adversely affect our business, results of operations, and financial results. We do not know whether the trend in adoption of cloud-based SaaS-delivered security solutions we have experienced in the past will continue in the future. Furthermore, if we or other SaaS security providers experience security incidents, loss or disclosure of customer data, disruptions in delivery, or other problems, the market for SaaS solutions as a whole, including our security solutions, may be negatively affected. You should consider our business and prospects in light of the risks and difficulties we encounter in this new and evolving market.

If we are not able to maintain and enhance our Mandiant brand and our reputation as a provider of high-quality security solutions and services, our business and results of operations may be adversely affected.

We believe that maintaining and enhancing our Mandiant brand and our reputation as a provider of high-quality security solutions and services is critical to our relationship with our existing customers, channel partners, and technology alliance partners and our ability to attract new customers and partners. The successful promotion of our Mandiant brand will depend on a number of factors, including our marketing efforts, and ultimately our ability to continue to develop additional high-quality security solutions and our ability to continue to provide services valued by customers. Although we believe it is important for our growth, our brand promotion activities may not be successful or yield increased revenue.

In addition, in October 2021, we rebranded and changed our name from FireEye, Inc. to Mandiant, Inc. Customers, suppliers and partners may be confused by the name change leading to disruptions in our business, and investors may not understand or appreciate our rebranding efforts, which could materially and adversely impact our business, results of operations, financial condition and trading price of our common stock.

We rely on our management team and other key employees and will need additional personnel to grow our business, and the loss of one or more key employees or our inability to hire, integrate, train and retain qualified personnel, including members for our board of directors, could harm our business.

Our future success is substantially dependent on our ability to hire, integrate, train, retain and motivate the members of our management team and other key employees throughout our organization, including key employees obtained through our acquisitions. Competition for highly skilled personnel is intense, especially in the San Francisco Bay Area and the Washington D.C. Area, where we have a substantial presence and need for highly skilled personnel. We may not be successful in hiring or retaining qualified personnel to fulfill our current or future needs, and potential changes in U.S. immigration and work authorization laws and regulations, including those that restrain the flow of technical and professional talent, may make it difficult to renew or obtain visas for highly skilled personnel that we have hired or are actively recruiting. Following the divestiture of the FireEye Products business, we remain highly dependent on the services of Kevin Mandia, our Chief Executive Officer, who is critical to our thought leadership, market presence, reputation, future vision and strategic direction. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our solutions. Engineering personnel and other employees in the technology industry, including the cyber security industry, are increasingly able to work

64

remotely, which in turn increases employee mobility and our risk of unwanted employee attrition. Our competitors and other companies in the technology industry may be successful in recruiting and hiring members of our management team or other key employees, including key employees obtained through our acquisitions, and it may be difficult for us to find suitable replacements on a timely basis, on competitive terms, or at all. Also, to the extent we hire employees from mature public companies with significant financial resources, we may be subject to allegations that such employees have been improperly solicited, or that they have divulged proprietary or other confidential information or that their former employers own such employees’ inventions or other work product.

The workforce reductions made in connection with our restructuring plans may adversely affect our ability to attract and retain highly skilled employees. Even if our key personnel are not directly affected by these reductions, the termination of others may have a negative impact on morale and our ability to retain current personnel, as well as our ability to attract qualified new personnel in the future.

We made a number of organizational changes over the past year and, from time to time, key personnel leave our company. For example, we recently announced that Frank Verdecanna plans to retire in 2022 and that Alexa King stepped down as our Executive Vice President, Corporate and Legal Affairs, General Counsel, and Secretary due to her desire to pursue other opportunities and interests. In addition, in connection with the sale of the FireEye Products business, we experienced employee attrition, including the departure of certain members of senior management. These and other leadership transitions and management changes can be inherently difficult to manage, may cause uncertainty or a disruption to our business, and may increase the likelihood of turnover in other key officers and employees. Our success depends in part on having a successful leadership team. If we cannot effectively manage these and other leadership transitions and management changes, it could make it more difficult to successfully operate our business and pursue our business goals.

In addition, we believe that it is important to establish and maintain a corporate culture that facilitates the maintenance and transfer of institutional knowledge within our organization and also fosters innovation, teamwork, a passion for customers and a focus on execution. Any of our organizational changes may result in a loss of institutional knowledge and cause disruptions to our business. Furthermore, if we are not successful in identifying and recruiting new key employees and integrating them into our organization, and creating effective working relationships among them and our other key employees, such failure could delay or hinder our development of net and enhanced offerings and the achievement of our strategic objectives, which could adversely affect our business, financial condition and results of operations.

Our employees, including our executive officers, work for us on an “at-will” basis, which means they may terminate their employment with us at any time. We do not maintain key person life insurance policies on any of our key employees. If Mr. Mandia or one or more of our other key employees resigns or otherwise ceases to provide us with their service, our business could be harmed.

Any litigation against us could be costly and time-consuming to defend.

From time to time, we are and may become subject to legal proceedings and claims, such as claims brought by our customers in connection with commercial disputes, employment claims made by our current or former employees, intellectual property claims, or securities class actions or other claims related to our sale of the FireEye Products business or any volatility in the trading price of our common stock. For example, on July 13, 2021, an alleged stockholder filed an action against the Company, seeking inspection of certain of books and records pursuant to Section 220 of the Delaware General Corporation Law. On July 26, 2021, the parties filed a stipulation that the Company is not obligated to respond to the complaint at this time. The lawsuit was voluntarily dismissed on November 3, 2021. Also on November 3, 2021, the same alleged stockholder filed another action against the Company and its board of directors, alleging a violation of Delaware General Corporation Law Sec. 271 and breaches of fiduciary duty in connection with our sale of the FireEye Products business.

Litigation might result in substantial costs and may divert management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Insurance might not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims, and might not continue to be available on terms acceptable to us (including premium increases or the imposition of large deductible or co-insurance requirements). A claim brought against us that is uninsured or underinsured could result in unanticipated costs, potentially harming our business, financial position, and results of operations. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim.

If we do not accurately anticipate and respond promptly to changes in our customers’ security needs or scale our business in a cost-effective manner, our competitive position, prospects and financial condition could be harmed.

65

The IT security market has grown quickly and is expected to continue to evolve rapidly. We have identified a number of new solutions and enhancements to our Mandiant Advantage platform that we believe are important to our continued success in the IT security market. There can be no assurance that we will be successful in developing and marketing, on a timely basis, such new solutions or enhancements or that our new solutions or enhancements will adequately address the changing needs of the marketplace. Although the market expects rapid introduction of new solutions and enhancements to respond to customer needs, the development of these solutions and enhancements is difficult and the timetable for commercial release and availability is uncertain, as there can be significant time lags between initial beta releases and the commercial availability of new solutions and enhancements. We may experience unanticipated delays in the availability of new solutions and enhancements to our platform and fail to meet customer expectations with respect to the timing of such availability. If we do not quickly respond to the rapidly changing and rigorous needs of our customers by developing, releasing and making available on a timely basis new solutions and enhancements to our platform that can adequately respond to our customers’ needs, our competitive position and business prospects will be harmed. Furthermore, from time to time, we or our competitors may announce new solutions with capabilities or technologies that could have the potential to replace or shorten the life cycles of our existing solutions. There can be no assurance that announcements of new solutions will not cause customers to defer purchasing our existing solutions.

Additionally, the process of developing new technology is expensive, complex and uncertain. The success of new solutions and enhancements depends on several factors, including appropriate component costs, timely completion and introduction, differentiation of new solutions and enhancements from those of our competitors and market acceptance. To maintain our competitive position, we must continue to commit significant resources to developing new solutions or enhancements to our Mandiant Advantage platform before knowing whether these investments will be cost-effective or achieve the intended results. There can be no assurance that we will successfully identify new market opportunities, develop and bring new solutions or enhancements to market in a timely manner, or achieve market acceptance of our solutions or that solutions and technologies developed by others will not render our Mandiant Advantage platform obsolete or noncompetitive. If we expend significant resources on researching and developing solutions or enhancements to our platform and such solutions or enhancements are not successful, our business, financial position and results of operations may be adversely affected.

In addition, we provide our cloud-based solutions and services through third-party data center hosting facilities located in the United States and other countries. While we control and have access to our servers and all of the components of our network that are located in our data centers, we do not control the operation of these hosting facilities. We rely on the owners or operators of these hosting facilities in maintaining the availability of their services, maintenance of their infrastructure, and in providing appropriate backup, disaster recovery and security measures. The owners of the data center hosting facilities have no obligation to renew their agreements with us on commercially reasonable terms, or at all. If we are unable to renew these agreements on commercially reasonable terms, or if one of our data center operators is acquired, we may be required to transfer our servers and other infrastructure to new data center facilities, and we may incur significant costs and possible service interruption in connection with doing so.

Furthermore, we have and will continue to make substantial investments to support growth of our Mandiant Advantage platform. If our cloud-based server costs were to increase, our business, results of operations and financial condition may be adversely affected. In addition, ongoing improvements to cloud infrastructure may be more expensive than we anticipate, and may not yield the expected savings in operating costs or the expected performance benefits. In addition, we may be required to re-invest any cost savings achieved from prior cloud infrastructure improvements in future infrastructure projects to maintain the levels of service required by our customers. We may not be able to maintain or achieve cost savings from our investments, which could harm our financial results.

Our current research and development efforts may not produce successful solutions or enhancements to our platform that result in significant revenue, cost savings or other benefits in the near future, if at all.

We must continue to dedicate significant financial and other resources to our research and development efforts if we are to maintain our competitive position. However, developing solutions and enhancements to our platform is expensive and time consuming, and there is no assurance that such activities will result in significant new marketable solutions or enhancements to our platform, design improvements, cost savings, revenue or other expected benefits. If we spend significant resources on research and development and are unable to generate an adequate return on our investment, our business and results of operations may be materially and adversely affected.

Seasonality may cause fluctuations in our revenue.

66

We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to (i) our customers’ budgetary and spending patterns, as many customers spend the unused portions of their discretionary budgets prior to the end of their fiscal years, and (ii) our sales compensation plans, which are typically structured around annual quotas and stair step commission rates. For example, we have historically recorded our highest level of revenue in our fourth quarter, which we believe corresponds to the fourth quarter of a majority of our customers. Similarly, we have historically recorded our second-highest level of revenue in our third quarter, which corresponds to the fourth quarter of U.S. federal agencies and other customers in the U.S. federal government. Our growth rate over the last couple years may have made seasonal fluctuations more difficult to detect. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.

Our operating history and changes to our business model makes it difficult to evaluate our current business and prospects and may increase the risk that we will not be successful.

We were founded in 2004, and we shipped our first commercially successful solution for on-premises network security in 2008. Since then, we have continued to expand our offerings, both organically and through acquisitions, to address changes in the threat environment, evolving customer requirements, and the continued migration of workloads to cloud platforms. On October 8, 2021, we completed the sale of the FireEye Products business. Our future results of operations are now dependent solely on the operations of the Mandiant Solutions business. Acquired solutions within our continuing business include Mandiant Corporation’s advanced threat intelligence capabilities and incident response and security consulting services; iSIGHT Security's standalone threat intelligence subscriptions; Verodin’s security instrumentation offering; Respond Software’s cybersecurity investigation automation technology; and Intrigue’s attack surface management offering. The markets for many of our acquired solutions are in the early stages of development and customer adoption remains limited. Additionally, most of our acquired solutions are sold as subscriptions, often to large enterprises or governments, and contract terms may vary significantly. We have encountered and will continue to encounter risks and uncertainties frequently encountered by emerging technology-based companies in developing markets.

If our assumptions regarding these risks and uncertainties are incorrect or change in response to changes in the IT security market, our results of operations and financial results could differ materially from our plans and forecasts. Although we have experienced rapid growth in the past, there is no assurance that such growth will continue. Any success we may experience in the future will depend in large part on our ability to, among other things:

•successfully execute our business plan and necessary transition activities following the sale of the FireEye Products business;

•maintain and expand our customer base and the ways in which customers use our solutions and services;

•expand revenue from existing customers through increased or broader use of our solutions, subscriptions and services within their organizations;

•grow our revenues from software, subscriptions and recent offerings from acquisitions such as Verodin and Respond Software;

•convince customers to allocate a fixed portion of their annual IT budgets to our solutions and services;

•improve the performance and capabilities of our platform through research and development;

•effectively expand our business domestically and internationally; and

•successfully compete with other companies that currently provide, or may in the future provide, solutions like ours that protect against advanced cyber-attacks, measure security effectiveness, or investigate and respond to attacks.

If we are unable to achieve our key objectives, including the objectives listed above, our business and results of operations will be adversely affected and the fair market value of our common stock could decline.

We are exposed to the credit risk of some of our distributors, resellers and customers and to credit exposure in weakened markets, which could result in material losses.

Most of our sales are on an open credit basis. Although we have programs in place that are designed to monitor and mitigate these risks, we cannot assure you these programs will be effective in reducing our credit risks, especially as we expand our business internationally. In addition, the COVID-19 pandemic may negatively affect the ability of our customers, especially in certain industries such as travel, entertainment, food and hospitality, to pay us on a timely basis or at all. If we are unable to adequately control these risks, our business, results of operations and financial condition could be harmed.

67

Failure to comply with governmental laws and regulations could harm our business.

Our business is subject to regulation by various U.S. federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, consumer protection laws, privacy, data-protection and cybersecurity laws, anti-bribery laws (including the U.S. Foreign Corrupt Practices Act and the U.K. Anti-Bribery Act), import/export controls, federal securities laws and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. Noncompliance with applicable regulations or requirements could subject us to investigations, sanctions, enforcement actions, disgorgement of profits, fines, damages, civil and criminal penalties, injunctions or other collateral consequences. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations, and financial condition could be materially adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources and an increase in professional fees. U.S. regulations surrounding our operating activities in foreign jurisdictions are not always consistent with, and at times are in contravention to, the local regulations or laws in such jurisdictions. Enforcement actions and sanctions could harm our business, reputation, results of operations and financial condition.

If we do not achieve increased tax benefits as a result of our corporate structure, our operating results and financial condition may be negatively impacted.

We generally conduct our international operations through wholly-owned subsidiaries and report our taxable income in various jurisdictions worldwide based upon our business operations in those jurisdictions. In 2019, we reorganized our corporate structure and intercompany relationships to better align our corporate organization with the expansion of our international business activities. Although we anticipate achieving a reduction in our overall effective tax rate in the future as a result of this reorganized corporate structure, we may not realize any benefits. Our intercompany relationships are subject to complex transfer pricing regulations administered by taxing authorities in various jurisdictions. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations. In addition, if the intended tax treatment of our reorganized corporate structure is not accepted by the applicable taxing authorities, changes in tax law negatively impact the structure or we do not operate our business consistent with the structure and applicable tax laws and regulations, we may fail to achieve any tax advantages as a result of the reorganized corporate structure, and our future operating results and financial condition may be negatively impacted. In addition, we continue to evaluate our corporate structure in light of current and pending tax legislation, and any changes to our corporate structure may require us to incur additional expenses and may impact our overall effective tax rate.

We could be subject to additional tax liabilities.

We are subject to U.S. federal, state, local and sales taxes in the United States and foreign income taxes, withholding taxes and transaction taxes in numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination is uncertain. In addition, our tax obligations and effective tax rates could be adversely affected by changes in the relevant tax, accounting and other laws, regulations, principles and interpretations, including those relating to income tax nexus, corporate income tax rates and the proposed global minimum tax, by recognizing tax losses or lower than anticipated earnings in jurisdictions where we have lower statutory rates and higher than anticipated earnings in jurisdictions where we have higher statutory rates, by changes in foreign currency exchange rates, or by changes in the valuation of our deferred tax assets and liabilities. We may be audited in various jurisdictions, and such jurisdictions may assess additional taxes, sales taxes and value-added taxes against us. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have a material adverse effect on our operating results or cash flows in the period for which a determination is made.

Our failure to raise additional capital or generate the significant capital necessary to expand our operations and invest in new solutions could reduce our ability to compete and could harm our business.

We intend to continue to make investments to support our business growth and may require additional funds to respond to business challenges, including the need to develop new solutions and enhancements to our platform, improve our operating infrastructure or acquire complementary businesses and technologies. Accordingly, we may need to engage in equity or debt financings to secure additional funds. If we raise additional equity financing, our stockholders may experience significant dilution

68

of their ownership interests and the per share value of our common stock could decline. Furthermore, if we engage in additional debt financing, the holders of debt would have priority over the holders of common stock, and we may be required to accept terms that restrict our ability to incur additional indebtedness. We may also be required to take other actions that would otherwise be in the interests of the debt holders and force us to maintain specified liquidity or other ratios, any of which could harm our business, results of operations, and financial condition. If we need additional capital and cannot raise it on acceptable terms, we may not be able to, among other things:

•develop or enhance our solutions and subscriptions;

•continue to expand our sales and marketing and research and development organizations;

•acquire complementary technologies, solutions or businesses;

•expand operations, in the United States or internationally;

•hire, train and retain employees; or

•respond to competitive pressures or unanticipated working capital requirements.

Our failure to do any of these things could harm our business, financial condition and results of operations.

Risks Related to Systems and the Transition to New Quote-to-Cash and Enterprise Resource Planning Systems

Our ability to manage our business and monitor results is highly dependent upon IT systems. A failure of these systems or our planned QTC and ERP implementations could have a material adverse effect on our business.

We are highly dependent upon a variety of IT systems to operate our business. In order to continue to support our growth and scale as a SaaS company, we are making significant technological upgrades to our information systems. We are in the process of implementing a new quote-to-cash (“QTC”) system in the first quarter of fiscal 2022 and a new enterprise resource planning (“ERP”) system in the second quarter of fiscal 2022, and are updating processes to perform various functions and improve on the efficiency of our global business. This is a complicated, lengthy and expensive process that will result in a diversion of resources from other operations. Continued execution of the project plan, or a divergence from it, may result in cost overruns, project delays or business interruptions. In addition, divergence from our project plan could negatively impact the timing and/or extent of benefits we expect to achieve from the system and process efficiencies. Failure to properly or adequately address any unaccounted for or unforeseen issues in successfully replacing our legacy systems could negatively impact the company’s ability to perform necessary business operations, which could adversely affect our reputation, competitive position, business, results of operations and financial condition.

Any disruptions, delays or deficiencies in the design and/or implementation of the new QTC and ERP systems, or in the performance or migration of our legacy systems, particularly any disruptions, delays or deficiencies that impact our operations, could adversely affect our ability to effectively run and manage our business. The implementation of our planned new QTC and ERP systems subjects us to inherent risks associated with migrating from our legacy systems, including, without limitation, our ability to process orders, provide services and customer support, send invoices and track payments, fulfill contractual obligations, fulfill federal, state and local reporting and filing requirements in a timely or accurate manner, or otherwise operate our business. In addition, if any issues with respect to the new systems result in, or contribute to, a delay in our timely reporting of our results of operations for any period or our not filing one or more periodic reports with the SEC on time, the price of our common stock could decline substantially, and we could face costly lawsuits, including securities class actions. Further, as we are dependent upon our ability to gather and promptly transmit accurate information to key decision makers, our business, results of operations and financial condition may be adversely affected if our information systems do not allow us to transmit accurate information, even for a short period of time. Failure to properly or adequately address these issues could negatively impact our ability to perform necessary business operations, which could adversely affect our reputation, competitive position, business, results of operations and financial condition.

In addition, the information systems of companies we acquire may not be sufficient to meet our standards or we may not be able to successfully convert them to provide acceptable information on a timely and cost-effective basis. Furthermore, we must attract and retain qualified people to operate our systems, expand and improve them, integrate new programs effectively with our existing programs, and convert to new systems efficiently when required. Any disruption to our business due to such issues, or an increase in our costs to cover these issues that is greater than what we have anticipated, could have an adverse effect on our financial results and operations.

The implementation of our planned new ERP and change in related processes could negatively impact the effectiveness of our internal control over financial reporting.

69

Our ERP system is critical to our ability to accurately maintain books and records, record transactions, provide important information to our management and prepare our consolidated financial statements. The implementation of our planned new ERP system in the second quarter of fiscal 2022 will also require the transformation of business and financial processes, and any such changes involves risks, including potential transaction errors, processing inefficiencies and loss of data. If the transition to our planned new ERP system is not successful, and the new system and new processes do not operate as intended, the effectiveness of our internal control over financial reporting could be adversely affected and our ability to assess it adequately could be further impacted. If difficulties in implementing the new ERP system or related processes result in a material weakness in our internal control over financial reporting, a failure to remediate the material weakness could also negatively impact our ability to prepare our future financial statements in conformity with GAAP. If we experience ongoing disruptions with such implementation and/or are unable to remediate any such material weakness, such events could have a material adverse effect on our reputation, competitive position, business, results of operations and financial condition.

Any additional costs, cost overruns and delays with implementation of our new QTC and ERP systems may adversely affect our business and results of operations.

The implementation of our planned new QTC and ERP systems has and will continue to involve substantial expenditures, as well as design, development and implementation activities. Until the new systems are fully implemented, we expect to incur additional selling, general and administrative expenses and capital expenditures to implement and test the systems, and there can be no assurance that issues relating to the systems will not occur or be identified. Our business and results of operations may be adversely affected if we experience operating problems, additional costs, or cost overruns during the QTC and ERP implementation process, or if any of the systems or the related processes changes significantly.

Risks Related to Privacy and Data Protection

We have experienced network or data security incidents in the past, and we may experience additional network or data security incidents in the future, which, whether actual, alleged or perceived, may harm our reputation, create liability and adversely impact our financial results.

Increasingly, companies are subject to a wide variety of attacks on their networks on an ongoing basis. In addition to traditional computer “hackers,” malicious code (such as viruses and worms), phishing attempts, ransomware, employee theft or misuse, accidental disclosure, and denial of service attacks, sophisticated nation-state and nation-state supported actors engage in intrusions and attacks (including advanced persistent threat intrusions) and add to the risks to our internal networks, cloud deployed enterprise and customer facing environments and the information they store and process. We also utilize third-party service providers to host, transmit, or otherwise process electronic data in connection with our business activities. We and/or our third-party service providers have faced and may continue to face security threats and attacks from a variety of sources. Our data, corporate systems, third-party systems and security measures have been and may continue to be subject to breaches or intrusions due to the actions of outside parties, employee error, malfeasance, a combination of these, or otherwise, including social engineering and employee and contractor error or malfeasance, and, as a result, an unauthorized party may obtain access to our systems, networks, or data. There have been and may continue to be significant software supply chain attacks, and we cannot guarantee that our or our third-party service providers’ systems and networks have not been breached or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support us and our services. Techniques used to sabotage or obtain unauthorized access to systems and networks are constantly evolving and, in some instances, are not identified until or after they are launched against a target, and we may face difficulties or delays in identifying or otherwise responding to any attacks or actual or potential breaches of security. Furthermore, as a well-known provider of security solutions, we may be a more attractive target for such attacks. A breach in our data security or an attack against our service availability, or that of our third-party service providers, could impact our solutions and subscriptions, creating system disruptions or slowdowns and exploiting security vulnerabilities of our solutions, and the information stored on our networks or those of our third-party service providers could be accessed, publicly disclosed, altered, lost, or stolen, which could result in a loss of intellectual property or loss of data and subject us to liability and cause us financial harm.

In the fourth quarter of 2020, we experienced an attack from a highly sophisticated threat actor, one whose discipline, operational security, and techniques lead us to believe it was a state-sponsored attack. Like numerous other public and private organizations affected by this attack, the threat actor gained access to our networks and systems via trojanized updates to SolarWinds’ Orion IT monitoring and management software. We conducted a comprehensive investigation in coordination with the Federal Bureau of Investigation and other key partners, including Microsoft. Our investigation identified that the attacker targeted and accessed certain Red Team assessment tools that we use to test our customers’ security. These tools mimic the

70

behavior of many cyber threat actors and enable us to provide essential diagnostic security services to our customers and, if used or publicly disclosed by the threat actor, could be used to conduct additional attacks on us or other organizations. Our investigation also identified that, consistent with a nation-state cyber-espionage effort, the attacker was able to access certain of our internal systems and primarily sought information related to certain government customers. We notified affected customers and government agencies, as we deemed was required or appropriate. We have incurred costs to respond to this attack and may continue to incur costs to remediate and support our efforts to enhance our security measures.

There can be no assurance that we will be successful in preventing security breaches or other security incidents nor that we will be successful in mitigating their effects, despite the implementation of security measures for systems, networks, or data within our control. Similarly, there can be no assurance that our third-party service providers, distributors and other contractors will be successful in protecting our data on their systems or in protecting other systems upon which we may rely. Any actual, alleged or perceived breach of network security in our systems or networks, or any other actual, alleged or perceived data security incident we or our third-party service providers suffer, could result in damage to our reputation, negative publicity, loss of channel partners, customers and sales, loss of competitive advantages over our competitors, increased costs to remedy any problems and otherwise respond to any incident, regulatory investigations and enforcement actions, costly litigation, and other liability. In addition, we may incur significant costs and operational consequences of investigating, remediating, eliminating and putting in place additional tools and devices designed to prevent actual or perceived security breaches and other security incidents, as well as the costs to comply with any notification or other legal obligations resulting from any security incidents. Any of these negative outcomes could result in substantial costs and diversion of resources, distract management and technical personnel, adversely impact the market perception of our solutions and subscriptions and end-customer and investor confidence in our company and could seriously harm our business or operating results.

Although we maintain cyber liability insurance coverage that may cover certain liabilities in connection with security breaches and other security incidents, we cannot be certain our insurance coverage will be adequate for liabilities actually incurred, that insurance will continue to be available to us on commercially reasonable terms (if at all) or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, or denials of coverage, could have a material adverse effect on our business, including our financial condition, results of operations and reputation.

If we fail to adequately protect personal information or other information we process or maintain, our business, financial condition and operating results could be adversely affected.

A wide variety of provincial, state, national, and international laws and regulations apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal data and other information. Evolving and changing definitions of personal data and personal information within the European Union ("EU"), the United States, and elsewhere, especially relating to classification of Internet Protocol addresses, machine identification, location data and other information, may limit or inhibit our ability to operate or expand our business, including limiting technology alliance partners that may involve the sharing of data. Data protection and privacy-related laws and regulations are evolving and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions.

For example, the EU General Data Protection Regulation ("GDPR"), which became fully effective on May 25, 2018, imposes more stringent data protection requirements than previously effective EU data protection law and provides for penalties for noncompliance of up to the greater of €20 million or four percent of worldwide annual revenues. The GDPR requires, among other things, that personal data only be transferred outside of the EU to certain jurisdictions, including the United States, if steps are taken to legitimize those data transfers. We historically relied on the EU-U.S. and Swiss-U.S. Privacy Shield programs, and the use of standard contractual clauses approved by the European Commission (the “SCCs”), to legitimize these transfers. Both the EU-U.S. Privacy Shield and the SCCs have been subject to legal challenge, however, and on July 16, 2020, the Court of Justice of the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield framework that had been in place since 2016, which allowed companies like us to meet certain European legal requirements for the transfer of personal data from the European Economic Area (“EEA”) to the U.S., and imposed additional obligations on companies when relying on the SCCs. This CJEU decision may result in different EEA data protection regulators applying differing standards for the transfer of personal data from the EEA to the United States, and may even require ad hoc verification of measures taken with respect to data flows. The CJEU decision requires us to take additional steps to legitimize any impacted personal data transfers, including in connection with the use of the SCCs, with the full impact of such decision uncertain at this time. The European Commission published new SCCs in June 2021, which are required to be implemented over time. The CJEU decision and related developments could result in increased costs of compliance and limitations on our customers and us. More generally, as a result of the CJEU decision or related developments, we

71

may find it necessary or desirable to modify our data handling practices and policies and to implement additional contractual and technical safeguards, and our practices relating to cross-border transfers of data or other data handling practices, or those of our customers and vendors, may be challenged. We also may be required to engage in additional contractual negotiations. As a result of these factors, our business, financial condition and operating results may be adversely impacted. Some countries also are considering or have enacted legislation requiring local storage and processing of data that could increase the cost and complexity of delivering our services.

In addition to the GDPR, the European Commission has another draft regulation in the approval process that focuses on a person’s right to conduct a private life. The proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. Originally planned to be adopted and implemented at the same time as the GDPR, the ePrivacy Regulation is still being negotiated. On February 10, 2021, the Council of the EU agreed on its version of the draft ePrivacy Regulation. If adopted, the earliest date for entry into force is in 2023, with broad potential impacts on the use of internet-based services and tracking technologies, such as cookies. Aspects of the ePrivacy Regulation remain for negotiation between the European Commission and the Council. We expect to incur additional costs to comply with the requirements of the ePrivacy Regulation as it is finalized for implementation.

Further, in June 2016, the United Kingdom ("U.K.") voted to leave the EU, commonly referred to as “Brexit,” which resulted in the U.K. exiting the EU on January 31, 2020, subject to a transition period ending December 31, 2020. Brexit could lead to further legislative and regulatory changes. The U.K. has implemented legislation that substantially implements the GDPR, with penalties for noncompliance of up to the greater of £17.5 million or four percent of worldwide revenues. Aspects of U.K. data protection laws and regulations, however, including with respect to the role of the U.K. Information Commissioner’s Office and regulation of data transfers to and from the U.K. in the medium to longer term, remain unclear. On June 28, 2021, the European Commission announced a decision of “adequacy” concluding that the U.K. ensures an equivalent level of data protection to the GDPR, which provides some relief regarding the legality of continued personal data flows from the European Economic Area to the U.K. Some uncertainty remains, however, as this adequacy determination must be renewed after four years and may be modified or revoked in the interim. We cannot fully predict how U.K. data protection laws or regulations may develop in the medium to longer term nor the effects of divergent laws and guidance regarding how data transfers to and from the U.K. will be regulated. We may find it necessary or appropriate to make additional changes to the way we process data and otherwise conduct our business within, and transmit data to and from, the U.K.

California enacted legislation in 2018, the California Consumer Privacy Act (“CCPA”), that became operative on January 1, 2020. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers, and affords such consumers new abilities to opt-out of certain sales of personal information. Aspects of the CCPA and its interpretation remain unclear. We cannot fully predict the impact of the CCPA on our business or operations, but it may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Additionally, a new privacy law, the California Privacy Rights Act (“CPRA”), was approved by California voters in the November 3, 2020 election. The CPRA creates obligations relating to consumer data beginning on January 1, 2022, with implementing regulations expected on or before July 1, 2022, and enforcement beginning July 1, 2023. The CPRA significantly modifies the CCPA, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses. More generally, some observers have noted the CCPA could mark the beginning of a trend toward more stringent privacy legislation in the U.S., as observed with the Virginia Consumer Data Protection Act, enacted March 2021 and which becomes effective January 1, 2023, and the Colorado Privacy Act, enacted in June 2021 and which takes effect on July 1, 2023.

Even the perception of privacy, data protection or cybersecurity concerns, whether or not valid, may harm our reputation, inhibit adoption of our solutions by current and future customers, or adversely impact our ability to hire and retain workforce talent. If our security measures are or are believed to be inadequate or breached as a result of third-party action, employee negligence, error or malfeasance, social engineering techniques or otherwise, and this results in, or is believed to result in, the disruption of the confidentiality, integrity or availability of our systems or networks or any data we process or maintain, or the loss, destruction or corruption of such data, or our privacy, data protection or cybersecurity practices are or are perceived to be inadequate, we could incur significant liability, we could face a loss of revenues, and our business may suffer and our reputation and competitive position may be damaged. Additionally, our service providers may suffer, or be perceived to suffer, privacy or data security breaches or other incidents that may compromise, or be perceived to compromise, data stored or processed for us that may give rise to any of the foregoing.

We also expect that there will continue to be changes in interpretations of existing laws and regulations, or new proposed laws and regulations concerning privacy, data protection and cybersecurity. We cannot yet determine the impact these laws and regulations or changed interpretations may have on our business, but we anticipate that they could impair our or our customers’ ability to collect, use or disclose information relating to individuals, which could decrease demand for our platform or solutions,

72

increase our costs and impair our ability to maintain and grow our customer base and increase our revenue. Moreover, because the interpretation and application of many laws and regulations relating to privacy, data protection and cybersecurity, along with certain industry standards, are uncertain, it is possible that these laws, regulations and standards, or contractual obligations to which we are or may become subject, or to which we may be alleged to be subject, may be interpreted and applied in a manner that is inconsistent with our existing or future data management practices or features of our platform and solutions. Our actual or perceived failure to adequately comply with any such applicable laws, regulations, standards, and other actual or asserted obligations or to protect personal data and other data we process or maintain, could result in regulatory investigations and enforcement actions against us, fines, penalties and other liabilities, imprisonment of company officials and public censure, claims for damages by customers and other affected individuals, required efforts to mitigate or otherwise respond to incidents, litigation, damage to our reputation and loss of goodwill (both in relation to existing customers and prospective customers), any of which could have a material adverse effect on our operations, financial performance and business. Even the perception of privacy, data protection or cybersecurity concerns, whether or not valid, may harm our reputation and inhibit adoption of our solutions and subscriptions by current and future customers.

Risks Related to Sales of Our Solutions, Subscriptions and Services

If we are unable to sell additional solutions, subscriptions and services, as well as renewals of our subscriptions and services, to our customers, our future revenue and operating results will be harmed.

Our future success depends, in part, on our ability to expand the deployment of our Mandiant Advantage platform with existing customers by selling them additional solutions, subscriptions and services. This may require increasingly sophisticated and costly sales efforts and may not result in additional sales. In addition, the rate at which our customers purchase additional solutions, subscriptions and services depends on a number of factors, including the perceived need for additional IT security, general economic conditions, and our customers' level of satisfaction with our existing solutions they have previously purchased. If our efforts to sell additional solutions, subscriptions and services to our customers are not successful, our business may suffer.

Further, existing customers that purchase our platform have no contractual obligation to renew their subscriptions after the initial contract period, and given our limited operating history, we may not be able to accurately predict our retention rates. Our customers’ retention rates may decline or fluctuate as a result of a number of factors, including the level of their satisfaction with our platform, our customer support, customer budgets and the pricing of our platform compared with the solutions and services offered by our competitors. If our customers renew their subscriptions, they may renew for shorter contract lengths or on other terms that are less economically beneficial to us. We cannot assure you that our customers will renew their subscriptions, and if our customers do not renew their subscriptions or renew them on less favorable terms, our revenue may grow more slowly than expected, not grow at all, or even decline.

Our sales cycles can be long and unpredictable, and our sales efforts require considerable time and expense. As a result, our sales, billings and revenue are difficult to predict and may vary substantially from period to period, which may cause our results of operations to fluctuate significantly.

Our results of operations may fluctuate, in part, because of the resource intensive nature of our sales efforts, the length and variability of our sales cycle and the short-term difficulty in adjusting our operating expenses. Our results of operations depend in part on sales to large organizations. The length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. To the extent our competitors develop solutions that our prospective customers view as equivalent to ours, our average sales cycle may increase. Because the length of time required to close a sale varies substantially from customer to customer, it is difficult to predict exactly when, or even if, we will make a sale with a potential customer. As a result, large individual sales have, in some cases, occurred in quarters subsequent to or in advance of those we anticipated, or have not occurred at all. We are generally billing a number of large deals in any quarter, and the loss or delay of one or more of these large transactions in a quarter could impact our results of operations for that quarter and any future quarters for which revenue from that transaction is delayed. As a result, it is difficult for us to forecast our revenue accurately in any quarter based on our internal forecasts of billings. Because a substantial portion of our expenses are relatively fixed in the short term, our results of operations will suffer if our revenue falls below our expectations in a particular quarter, which could cause the price of our common stock to decline.

We rely on revenue from sales of solutions and subscriptions, and because we recognize revenue from these sales over the term of the relevant subscription period, downturns or upturns in sales are not immediately reflected in full in our results of operations.

73

Revenue from sales of our solutions and subscriptions accounts for a significant portion of our total revenue. New or renewal sales of subscriptions may decline or fluctuate as a result of a number of factors, including customers’ level of satisfaction with our solutions and subscriptions, the actual or perceived efficacy of our security solutions, the prices of our solutions and subscriptions, the prices of solutions and subscriptions offered by our competitors or reductions in our customers’ spending levels. If our sales of new or renewal subscription and service contracts decline, our revenue and revenue growth rate may decline and adversely affect our business. In addition, we recognize revenue from our subscriptions revenue ratably over the term of the relevant contract period, which is generally between one to five years. As a result, much of the solution, subscription and support revenue we report each quarter is derived from sales in prior quarters. Consequently, a decline in new or renewal sales in any one quarter will not be fully reflected in revenue in that quarter but will negatively affect our revenue in future quarters. Accordingly, the effect of significant decreases in the market acceptance of, or demand for, our solutions or subscriptions may not be immediately apparent from our results of operations until future periods. Also, it is difficult for us to rapidly increase our revenue through additional sales in any period, as the majority of our revenue is derived from sales of our solutions, subscriptions and services sold in prior periods. Furthermore, any increases in the average term of our subscriptions would result in a longer revenue recognition period, and could reduce the amount of revenue recognized in each period.

The sales prices of our solutions, subscriptions and services may decrease, which may reduce our gross profits and adversely impact our financial results.

The sales prices for our solutions, subscriptions and services may decline for a variety of reasons, including competitive pricing pressures, discounts, anticipation of the introduction of new solutions by our competitors, or promotional programs offered by us or our competitors. Competition continues to increase in the market segments in which we participate, and we expect competition to further increase in the future, thereby leading to increased pricing pressures. Larger competitors with more diverse solution and service offerings may reduce the price of solutions or subscriptions that compete with ours or may bundle them with other solutions and subscriptions. Additionally, although we price our solutions and subscriptions worldwide in U.S. dollars, currency fluctuations in certain countries and regions may negatively impact actual prices that partners and customers are willing to pay in those countries and regions, or the effective prices we realize in our reporting currency. We cannot assure you that we will be successful in developing and introducing new offerings with enhanced functionality on a timely basis, or that our new subscription offerings, if introduced, will enable us to maintain our gross profits at levels that will allow us to achieve profitability.

If we do not effectively hire, integrate and train our direct sales force, we may be unable to add new customers or increase sales to our existing customers, and our business will be adversely affected.

We continue to be substantially dependent on our direct sales force to obtain new customers and increase sales with existing customers. There is significant competition for sales personnel with the skills and technical knowledge that we require. Our ability to achieve revenue growth will depend, in large part, on our success in recruiting, integrating, training and retaining sufficient numbers of sales personnel to support our growth, particularly in international markets. New hires require significant training and may take significant time before they achieve full productivity. Our recent hires and planned hires may not become productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. If we are unable to hire and train a sufficient number of effective sales personnel, or the sales personnel we hire are not successful in obtaining new customers or increasing sales to our existing customer base, our business will be adversely affected.

If we are unable to increase sales of our solutions to large organizations while mitigating the risks associated with serving such customers, our business, financial position and results of operations may suffer.

Our growth strategy is dependent, in part, upon increasing sales of our solutions to large enterprises and governments. Sales to large customers involve risks that may not be present (or that are present to a lesser extent) with sales to smaller entities. These risks include:

•increased purchasing power and leverage held by large customers in negotiating contractual arrangements with us;

•more stringent or costly requirements imposed upon us in our support service contracts with such customers, including stricter support response times and penalties for any failure to meet support requirements;

•more complicated implementation processes;

•longer sales cycles and the associated risk that substantial time and resources may be spent on a potential customer that ultimately elects not to purchase our platform or purchases less than we hoped;

•closer relationships with, and dependence upon, large technology companies who offer competitive solutions; and

•more pressure for discounts and write-offs.

74

In addition, because security breaches with respect to larger, high-profile enterprises are likely to be heavily publicized, there is increased reputational risk associated with serving such customers. If we are unable to increase sales of our offerings to large enterprise and government customers while mitigating the risks associated with serving such customers, our business, financial position and results of operations may suffer.

U.S. federal, state and local government sales are subject to a number of challenges and risks that may adversely impact our business.

Sales to U.S. federal, state, and local governmental agencies have accounted for, and may in the future account for, a significant portion of our revenue. Sales to such government entities are subject to the following risks:

•selling to governmental agencies can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that such efforts will generate a sale;

•government certification requirements applicable to our solutions may change and, in doing so, restrict our ability to sell into the U.S. federal government sector until we have attained the revised certification;

•government demand and payment for our solutions and services may be impacted by government shutdowns, public sector budgetary cycles, contracting requirements and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our solutions and services;

•we sell our solutions to governmental agencies through our indirect channel partners, and these agencies may have statutory, contractual or other legal rights to terminate contracts with our distributors and resellers for convenience or due to a default, and any such termination may adversely impact our future results of operations; and

•governments routinely investigate and audit government contractors’ administrative processes, and any unfavorable audit could result in the government refusing to continue buying our platform, which would adversely impact our revenue and results of operations, or institute fines or civil or criminal liability if the audit were to uncover improper or illegal activities.

Our ability to maintain customer satisfaction depends in part on the quality of our professional service organization and technical and other support services, including the quality of the support provided on our behalf by certain channel partners. Failure to maintain high-quality customer support could have a material adverse effect on our business, financial condition and results of operations.

Once our platform is deployed within our customers’ networks, our customers depend on our technical and other support services, as well as the support of our channel partners, to resolve any issues relating to the implementation and maintenance of our platform. If we or our channel partners do not effectively assist our customers in deploying our platform, succeed in helping our customers quickly resolve post-deployment issues, or provide effective ongoing support, our ability to sell additional solutions, subscriptions or services as part of our platform to existing customers would be adversely affected and our reputation with potential customers could be damaged. Many larger organizations have more complex networks and require higher levels of support than smaller customers. If we fail to meet the requirements of our larger customers, it may be more difficult to execute on our strategy of upselling and cross selling with these customers. Additionally, if our channel partners do not effectively provide support to the satisfaction of our customers, we may be required to provide this level of support to those customers, which would require us to hire additional personnel and to invest in additional resources. It can take significant time and resources to recruit, hire, and train qualified technical support employees. We may not be able to hire such resources fast enough to keep up with demand. To the extent that we or our channel partners are unsuccessful in hiring, training, and retaining adequate support resources, our ability and the ability of our channel partners to provide adequate and timely support to our customers will be negatively impacted, and our customers’ satisfaction with our platform will be adversely affected. Additionally, to the extent that we need to rely on our sales engineers to provide post-sales support, our sales productivity will be negatively impacted, which would harm our results of operations.

We may not have visibility into particular transactions affecting our financial position and results of operations.

We may, from time to time, change our pricing models. For example, we may offer some of our solutions and services on a consumption-based pricing model. In such event, we will generally recognize revenue on consumption. Because our customers will have flexibility in the timing of their consumption, we will not have the visibility into the timing of revenue recognition that would be the case under a subscription-based pricing model. There is a risk that customers will consume our solutions and services

75

more slowly than we expect, and our actual results may differ from our forecasts. If our quarterly results of operations fall below the expectations of investors and securities analysts who follow our stock, the price of our common stock could decline substantially, and we could face costly lawsuits, including securities class actions.

Risks Related to Intellectual Property and Technology Licensing

Claims by others that we infringe their proprietary technology or other rights could harm our business.

Technology companies frequently enter into litigation based on allegations of patent infringement or other violations of intellectual property rights. In addition, patent holding companies seek to monetize patents they have purchased or otherwise obtained. As we face increasing competition and gain an increasingly higher profile, the possibility of intellectual property rights claims against us grows. From time to time, third parties have asserted, and we expect that third parties will continue to assert, claims of infringement of intellectual property rights against us. For example, on December 29, 2017, we executed Confidential Patent License Agreements with Finjan Holdings, Inc. (“Finjan”), whereby we resolved all pending litigation matters. Under the terms of the settlement agreement, we paid Finjan a one-time net cash settlement amount of $12.5 million in December 2017, in exchange for the resolution and settlement of all claims between Mandiant and Finjan and for cross-licenses between the companies of certain issued patents and patent applications. Other security companies have paid amounts to the same plaintiff to license some of the patents asserted against us. Third parties may in the future also assert claims against our customers or channel partners, whom our standard license and other agreements obligate us to indemnify against claims that our solutions infringe the intellectual property rights of third parties. Many of our competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have. In addition, future litigation may involve patent holding companies or other patent owners who have no relevant product offerings or revenue and against whom our own patents may therefore provide little or no deterrence or protection. Any claim of intellectual property infringement by a third party, even a claim without merit, could cause us to incur substantial costs defending against such claim, could distract our management from our business and could require us to cease use of such intellectual property. Furthermore, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by the discovery process.

Although third parties may offer a license to their technology or other intellectual property, the terms of any offered license may not be acceptable, and the failure to obtain a license or the costs associated with any license could cause our business, financial condition and results of operations to be materially and adversely affected. We may also be subject to additional fees or be required to obtain new licenses if any of our licensors allege that we have not properly paid for such licenses or that we have improperly used the technologies under such licenses. In addition, some licenses may be non-exclusive, and therefore our competitors may have access to the same technology licensed to us. If a third party does not offer us a license to its technology or other intellectual property on reasonable terms, or at all, we could be enjoined from continued use of such intellectual property. As a result, we may be required to develop alternative, non-infringing technology, which could require significant time (during which we could be unable to continue to offer our affected solutions, subscriptions or services), effort, and expense and may ultimately not be successful. Furthermore, a successful claimant could secure a judgment or we may agree to a settlement that prevents us from distributing certain solutions, providing certain subscriptions or performing certain services or that requires us to pay substantial damages, royalties or other fees. Any of these events could harm our business, financial condition and results of operations.

Our technology alliance partnerships expose us to a range of business risks and uncertainties that could have a material adverse impact on our business and financial results.

We have entered, and intend to continue to enter, into technology alliance partnerships with third parties to support our future growth plans. Such relationships include technology licensing, joint technology development and integration, research cooperation, co-marketing activities and sell-through arrangements. We face a number of risks relating to our technology alliance partnerships that could prevent us from realizing the desired benefits from such partnerships on a timely basis or at all, which, in turn, could have a negative impact on our business and financial results.

Technology alliance partnerships require significant coordination between the parties involved, particularly if a partner requires that we integrate its solutions with our solutions. This could involve a significant commitment of time and resources by our technical staff and their counterparts within our technology alliance partner. The integration of solutions from different companies may be more difficult than we anticipate, and the risk of integration difficulties, incompatible solutions and undetected programming errors or defects may be higher than the risks normally associated with the introduction of new solutions. It may also be more difficult to market and sell solutions developed through technology alliance partnerships than it would be to market and

76

sell solutions that we develop on our own. Sales and marketing personnel may require special training, as the new solutions may be more complex than our other solutions.

We invest significant time, money and resources to establish and maintain relationships with our technology alliance partners, but we have no assurance that any particular relationship will continue for any specific period of time. In addition, our technology alliance partners may currently or in the future have offerings that compete with our offerings in certain markets, which may make it difficult to establish long-term or effective relationships with them. Generally, our agreements with technology alliance partners are terminable without cause with no or minimal notice or penalties. If we lose a significant technology alliance partner, we could lose the benefit of our investment of time, money and resources in the relationship. In addition, we could be required to incur significant expenses to develop a new strategic alliance or to determine and implement an alternative plan to pursue the opportunity that we targeted with the former partner.

We may be unable to protect our intellectual property adequately, which could harm our business, financial condition and results of operations.

We believe that our intellectual property is an essential asset of our business. We rely on a combination of patent, copyright, trademark, database rights, and trade secret laws, as well as confidentiality procedures and contractual provisions, to establish and protect our intellectual property rights in the United States and abroad. The efforts we have taken to protect our intellectual property may not be sufficient or effective, and our trademarks, copyrights and patents may be held invalid or unenforceable. Any U.S. or other patents issued to us may not be sufficiently broad to protect our proprietary technologies, and given the costs of obtaining patent protection, we may choose not to seek patent protection for certain of our proprietary technologies. We may not be effective in policing unauthorized use of our intellectual property, and even if we do detect violations, litigation may be necessary to enforce our intellectual property rights. Any enforcement efforts we undertake, including litigation, could be time-consuming and expensive, could divert management’s attention and may result in a court determining that our intellectual property rights are unenforceable. If we are not successful in cost-effectively protecting our intellectual property rights, our business, financial condition and results of operations could be harmed.

We incorporate technology from third parties into our solutions, and our inability to obtain or maintain rights to the technology could harm our business.

We incorporate technology from third parties into our solutions. We cannot be certain that our suppliers and licensors are not infringing the intellectual property rights of third parties or that the suppliers and licensors have sufficient rights to the technology in all jurisdictions in which we may sell our solutions. Some of our agreements with our suppliers and licensors may be terminated for convenience by them. If we are unable to obtain or maintain rights to any of this technology because of intellectual property infringement claims brought by third parties against our suppliers and licensors or against us, or if we are unable to continue to obtain such technology or enter into new agreements on commercially reasonable terms, our ability to develop and sell solutions, subscriptions and services containing such technology could be severely limited, and our business could be harmed. Additionally, if we are unable to obtain necessary technology from third parties, including certain sole suppliers, we may be forced to acquire or develop alternative technology, which may require significant time, cost and effort and may be of lower quality or performance standards. This would limit and delay our ability to offer new or competitive solutions and increase our costs of development. If alternative technology cannot be obtained or developed, we may not be able to offer certain functionality as part of our solutions, subscriptions and services. As a result, our margins, market share and results of operations could be significantly harmed.

Our solutions and subscriptions contain third-party open source software components, and failure to comply with the terms of the underlying open source software licenses could restrict our ability to sell our solutions and subscriptions.

Our solutions and subscriptions contain software modules licensed to us by third-party authors under “open source” licenses. The use and distribution of open source software may entail greater risks than the use of third-party commercial software, as open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality of the code. Some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use. If we combine our proprietary software with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar solutions with lower development effort and time and ultimately could result in a loss of sales for us.

Although we monitor our use of open source software to try to avoid subjecting our solutions and subscriptions to conditions, the terms of many open source licenses have not been interpreted by U.S. courts, and there is a risk that these licenses could be construed in ways that could impose unanticipated conditions or restrictions on our ability to commercialize solutions and

77

subscriptions incorporating such software. Moreover, we cannot assure you that our processes for controlling our use of open source software in our solutions and subscriptions will be effective. From time to time, we may face claims from third parties asserting ownership of, or demanding release of, the open source software or derivative works that we developed using such software (which could include our proprietary source code), or otherwise seeking to enforce the terms of the applicable open source license. These claims could result in litigation. If we are held to have breached the terms of an open source software license, we could be required to seek licenses from third parties to continue offering our solutions on terms that are not economically feasible, to re-engineer our solutions, to discontinue the sale of our solutions if re-engineering could not be accomplished on a timely or cost-effective basis, or to make generally available, in source code form, our proprietary code, any of which could adversely affect our business, results of operations and financial condition.

Risks Related to Operations Outside the United States

We generate a significant amount of revenue from sales through resellers, distributors and end-customers outside of the United States, and we are therefore subject to a number of risks associated with international sales and operations.

We have a limited history of marketing, selling, and supporting our platform internationally. As a result, we must hire and train experienced personnel to staff and manage our foreign operations. To the extent that we experience difficulties in recruiting, training, managing, and retaining international employees, particularly managers and other members of our international sales team, we may experience difficulties in sales productivity in, or market penetration of, foreign markets. We also enter into strategic distributor and reseller relationships with companies in certain international markets where we do not have a local presence. If we are not able to maintain successful strategic distributor relationships with our international channel partners or recruit additional channel partners, our future success in these international markets could be limited. Business practices in the international markets that we serve may differ from those in the United States and may require us to include non-standard terms in customer contracts, such as extended payment or warranty terms. To the extent that we enter into customer contracts in the future that include non-standard terms related to payment, warranties, or performance obligations, our results of operations may be adversely impacted.

Additionally, our international sales and operations are subject to a number of risks, including the following:

•greater difficulty in enforcing contracts and managing collections, as well as longer collection periods;

•higher costs of doing business internationally, including costs incurred in establishing and maintaining office space and equipment for our international operations;

•fluctuations in exchange rates between the U.S. dollar and foreign currencies in markets where we do business, such as the British Pound Sterling, which experienced a sharp decline in value compared to the U.S. dollar and other currencies;

•management communication and integration problems resulting from cultural and geographic dispersion;

•risks associated with trade restrictions and foreign legal requirements, including any importation, certification, and localization of our solutions that may be required in foreign countries and any changes in trade relations and restrictions;

•greater risk of unexpected changes in foreign and domestic regulatory practices, tariffs and tax laws and treaties, including regulatory and trade policy changes;

•compliance with anti-bribery laws, including, without limitation, compliance with the U.S. Foreign Corrupt Practices Act of 1977, as amended, the U.S. Travel Act and the U.K. Bribery Act 2010, violations of which could lead to significant fines, penalties and collateral consequences for our Company;

•heightened risk of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of, or irregularities in, financial statements;

•the uncertainty of protection for intellectual property rights in some countries;

•foreign exchange controls or tax regulations that might prevent us from repatriating cash earned outside the United States;

•general economic, political and social conditions in these foreign markets, including the perception of doing business with U.S. based companies and changes in regulatory requirements that impact our operating strategies, access to global markets or hiring;

•political and economic instability in some countries, such as those caused by recent U.S. presidential elections and Brexit;

•increased exposure to public health issues such as the current COVID-19 pandemic, and related industry and governmental actions to address these issues; and

•double taxation of our international earnings and potentially adverse tax consequences due to changes in the tax laws of the United States or the foreign jurisdictions in which we operate.

78

Further, the interpretation and application of international laws and regulations in many cases is uncertain, and our legal and regulatory obligations in foreign jurisdictions are subject to frequent and unexpected changes, including the potential for various regulatory or other governmental bodies to enact new or additional laws or regulations or to issue rulings that invalidate prior laws or regulations.

For example, Brexit could also lead to further legislative and regulatory changes. A Data Protection Act that substantially implements the GDPR has been implemented in the U.K., effective in May 2018 and subject to additional statutory amendments in 2019 to further align such Data Protection Act with the GDPR. It is unclear, however, how U.K. data protection laws or regulations will develop in the medium to longer term, and how data transfers to and from the U.K. will be regulated. In particular, the U.K.’s exit from the EU to effectuate Brexit could require us to make additional changes to the way we conduct our business and transmit data from the EU into the U.K.

These and other factors could harm our ability to generate future international revenue and, consequently, materially impact our business, results of operations and financial condition.

We are exposed to fluctuations in currency exchange rates, which could negatively affect our financial condition and results of operations.

Our sales contracts are denominated in U.S. dollars, and therefore our revenue is not subject to foreign currency risk. However, strengthening of the U.S. dollar increases the real cost of our solutions, subscriptions and services to our customers outside of the United States, which could lead to delays in the purchase of our solutions and services and the lengthening of our sales cycle. In addition, we are incurring an increasing portion of our operating expenses outside the United States. These expenses are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates.

Additionally, Brexit resulted in an adverse impact to currency exchange rates, notably the British Pound Sterling which experienced a sharp decline in value compared to the U.S. dollar and other currencies. A significantly weaker British Pound Sterling compared to the U.S. dollar could have a significantly negative effect on our financial condition and results of operations.

We do not currently hedge against the risks associated with currency fluctuations but may do so in the future.

We are subject to governmental export and import controls that could subject us to liability or impair our ability to compete in international markets.

Our solutions are subject to U.S. export controls, specifically the Export Administration Regulations and regulations enforced by the Office of Foreign Assets Control. We incorporate standard encryption algorithms into many of our solutions, which, along with the underlying technology, may be exported outside of the U.S. only with the required export authorizations, including by license, license exception or other appropriate government authorizations, which may require the filing of an encryption registration and classification request. Additionally, our current or future solutions may be classified under the Commerce Department Export Administration Regulations (“EAR”) or as defense articles subject to the United States International Traffic in Arms Regulations (“ITAR”). Most of our solutions have been classified under the EAR and are generally exportable without needing a specific license, under an EAR exception for encryption software. If a solution, or component of a solution, is classified under the ITAR, or is ineligible for the EAR encryption exception, then those solutions could be exported outside the United States only if we obtain the applicable export license or qualify for a different license exception. In certain contexts, the services we provide might be classified as defense services subject to the ITAR separately from the solutions we provide. Compliance with the EAR, ITAR, and other applicable regulatory requirements regarding the export of our solutions, including new releases of our solutions and/or the performance of services, may create delays in the introduction of our solutions in non-U.S. markets, prevent our customers with non-U.S. operations from deploying our solutions throughout their global systems or, in some cases, prevent the export of our solutions to some countries altogether. Violations of U.S. sanctions or export control regulations can result in significant fines or penalties and possible incarceration for responsible employees and managers. If our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected through reputational harm, as well as other negative consequences, including government investigations and penalties.

In addition, proposed regulations have been released in the United States which may subject additional solutions, technology, and services to control under the EAR. If those regulations go into effect as currently written, we may need to apply for and obtain licenses prior to exporting these items to certain destinations and end-users. This licensing requirement could increase the time

79

between order and delivery for these items and also could result in us not being able to provide solutions and services to particular customers if any license request is denied, which could adversely affect our business, financial condition and results of operations.

Also, various countries, in addition to the United States, regulate the import and export of certain cybersecurity, encryption and other solutions, technology and services, including through export and import permit and licensing requirements, and have enacted laws that could limit our ability to distribute our solutions, could limit our customers’ ability to implement our solutions or could limit our ability to provide services to our customers in those countries. Changes in our solutions or changes in export and import regulations may create delays in the introduction of our solutions into international markets, prevent our customers with international operations from deploying our solutions globally or, in some cases, prevent the export or import of our solutions to certain countries, governments or persons altogether. Any change in export or import regulations, economic sanctions or related legislation, shift in the enforcement or scope of existing regulations, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our solutions by, or in our decreased ability to export or sell our solutions to, existing or potential customers with international operations. Any decreased use of our solutions or limitation on our ability to export to or sell our solutions in international markets would likely adversely affect our business, financial condition and results of operations.

Risks Related to Our Convertible Senior Notes

We are leveraged financially, which could adversely affect our ability to adjust our business to respond to competitive pressures and to obtain sufficient funds to satisfy our future growth, business needs and development plans.

We have substantial existing indebtedness. In June 2015, we issued $460.0 million principal amount of 1.000% Convertible Senior Notes due 2035 (the "Series A Notes") and $460.0 million principal amount of 1.625% Convertible Senior Notes due 2035 (the "Series B Notes" and, together with the Series A Notes, the "2035 Notes"). During the three months ended June 30, 2018, we issued $600.0 million aggregate principal amount of 0.875% Convertible Senior Notes due 2024 (the "2024 Notes" and, together with the 2035 Notes, the "convertible notes") and repurchased approximately $340.2 million aggregate principal amount of the Series A Notes. During the three months ended June 30, 2020, we repurchased approximately $96.4 million aggregate principal amount of the Series A Notes. As a result, as of September 30, 2021, we had approximately $1.1 billion aggregate principal amount of convertible notes outstanding.

The degree to which we are leveraged could have negative consequences, including, but not limited to, the following:

•we may be more vulnerable to economic downturns, less able to withstand competitive pressures and less flexible in responding to changing business and economic conditions;

•our ability to obtain additional financing in the future for working capital, capital expenditures, acquisitions, general corporate or other purposes may be limited;

•a substantial portion of our cash flows from operations in the future may be required for the payment of the principal amount of our existing indebtedness when it becomes due; and

•we may elect to make cash payments upon any conversion of the convertible notes, which would reduce our cash on hand.

Our ability to meet our payment obligations under our convertible notes depends on our ability to generate significant cash flow in the future. This, to some extent, is subject to general economic, financial, competitive, legislative and regulatory factors as well as other factors that are beyond our control. There can be no assurance that our business will generate cash flow from operations, or that additional capital will be available to us, in an amount sufficient to enable us to meet our debt payment obligations and to fund other liquidity needs. If we are unable to generate sufficient cash flow to service our debt obligations, we may need to refinance or restructure our debt, sell assets, reduce or delay capital investments, or seek to raise additional capital. If we were unable to implement one or more of these alternatives, we may be unable to meet our debt payment obligations, which could have a material adverse effect on our business, results of operations, or financial condition.

If holders of the 2035 Notes require us to repurchase their notes on any repurchase date, our financial condition and operating results could be adversely affected.

Holders of the Series A Notes have the right to require us to repurchase their notes on each of June 1, 2025 and June 1, 2030, and holders of the Series B Notes will have the right to require us to repurchase their notes on each of June 1, 2022, June 1, 2025 and June 1, 2030 at a repurchase price equal to 100% of the principal amount of the notes of the relevant series to be repurchased, plus accrued and unpaid interest, if any, to, but excluding, the relevant repurchase date pursuant to the applicable indenture governing such series of notes. If holders require us to repurchase their notes of an applicable series on an applicable repurchase date, our financial condition and operating results could be adversely affected.

80

The conditional conversion feature of each series of convertible notes, if triggered, may adversely affect our financial condition and operating results.

In the event the conditional conversion feature of a series of convertible notes is triggered, holders of such series of convertible notes will be entitled to convert their convertible notes at any time during specified periods at their option. If one or more holders of such convertible notes elect to convert their convertible notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity. In addition, even if holders of such series of convertible notes do not elect to convert their convertible notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of such series of convertible notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.

The accounting method for convertible debt securities that may be settled in cash, such as the convertible notes, is subject to changes that could have a material effect on our reported financial results.

The current accounting method for reflecting the convertible notes on our balance sheet, accruing interest expense for the convertible notes and reflecting the shares of our common stock underlying the convertible notes in our reported diluted earnings per share may adversely affect our reported earnings and financial condition. Under current accounting principles, the initial liability carrying amount of the convertible notes is the fair value of a similar debt instrument that does not have a conversion feature, valued using our cost of capital for straight, unconvertible debt.

However, in August 2020, FASB issued ASU No. 2020-06, Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity (ASU 2020-06), eliminating the separate accounting for the debt and equity components as described above. ASU 2020-06 is effective for fiscal years beginning after December 15, 2021, with early adoption permitted for fiscal years beginning after December 15, 2020, and can be adopted on either a fully retrospective or modified retrospective basis. We are currently evaluating the timing, method of adoption and overall impact of this standard on our consolidated financial statements.

When we adopt ASU 2020-06, we expect the elimination of the separate accounting for the convertible notes described above to reduce the interest expense that we expect to recognize for the notes for accounting purposes. In addition, ASU 2020-06 eliminates the use of the treasury stock method for convertible instruments that can be settled in whole or in part with equity, and instead requires application of the “if-converted” method. Among other potential impacts, our adoption of ASU 2020-06 is expected to reduce reported interest expense, increase reported net income, and result in a reclassification of certain conversion feature balance sheet amounts from stockholders’ equity to liabilities as it relates to the convertible notes. Furthermore, if any of the conditions to the convertibility for a series of convertible notes is satisfied, then we may be required under applicable accounting standards to reclassify the liability carrying value of such series of convertible notes as a current, rather than a long-term, liability. This reclassification could be required even if no holders of the applicable series of convertible notes convert their notes and could materially reduce our reported working capital and have a material effect on our reported financial results.

Transactions related to our convertible notes may affect the market price of our common stock.

The conversion of any of our series of convertible notes, if such conversion occurs, will dilute the ownership interests of then-existing stockholders to the extent we deliver shares upon conversion of any of the convertible notes. Any sales in the public market of the common stock issuable upon such conversion could adversely affect prevailing market prices of our common stock. In addition, the existence of the convertible notes may encourage short selling by market participants because any conversion of the convertible notes could be used to satisfy short positions, or anticipated conversion of the convertible notes into shares of our common stock could depress the price of our common stock.

In addition, in connection with our issuance of the 2024 Notes, we entered into capped call transactions (the “capped call transactions”) with certain financial institutions (the “option counterparties”). The capped call transactions are expected generally to reduce the potential dilution to our common stock upon any conversion of the 2024 Notes and/or offset any cash payments we are required to make in excess of the principal amount of such 2024 Notes converted, as the case may be, with such reduction and/or offset subject to a cap. From time to time, the option counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivative transactions with respect to our common stock and/or purchasing or selling our common stock or other securities of ours in secondary market transactions prior to the maturity of the 2024 Notes. This activity could cause a decrease in the market price of our common stock.

81

We are subject to counterparty risk with respect to the capped call transactions.

The option counterparties to our capped call transactions are financial institutions, and we will be subject to the risk that one or more of the counterparties may default or otherwise fail to perform, or may exercise certain rights to terminate, their obligations under the capped call transactions. Our exposure to the credit risk of the option counterparties will not be secured by any collateral. Adverse global economic conditions may result in the actual or perceived failure or financial difficulties for financial institutions, including one or more of our option counterparties. If an option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at that time under our transactions with that option counterparty. Our exposure will depend on many factors but, generally, our exposure will increase if the market price or the volatility of our common stock increases. In addition, upon a default or other failure to perform, or a termination of obligations, by an option counterparty, we may suffer adverse tax consequences and more dilution than we currently anticipate with respect to our common stock. We can provide no assurances as to the financial stability or viability of the option counterparties.

Risks Related to Our Series A Convertible Preferred Stock

The holders of Series A Convertible Preferred Stock may exercise influence over us, including through their ability to designate a member of our board of directors.

The holders of Series A Convertible Preferred Stock are generally entitled to vote with the holders of the shares of common stock on all matters submitted for a vote of holders of shares of common stock (voting together with the holders of shares of common stock as one class) on an as-converted basis, subject to certain Nasdaq voting limitations, if applicable. Additionally, the consent of the holders of a majority of the outstanding shares of Series A Convertible Preferred Stock is required for so long as any shares of the Series A Convertible Preferred Stock remain outstanding for (i) amendments to our organizational documents that have an adverse effect on the holders of Series A Convertible Preferred Stock and (ii) issuances by us of securities that are senior to, or equal in priority with, the Series A Convertible Preferred Stock. In addition, for so long as 25% of the Series A Convertible Preferred Stock issued in connection with the Securities Purchase Agreement with BTO Delta Holdings DE L.P., an investment vehicle of funds affiliated with The Blackstone Group Inc. (“Blackstone”), and the Securities Purchase Agreement with ClearSky Security Fund I LLC and ClearSky Power & Technology Fund II LLC (together, the “Series A Securities Financing Agreements”) remains outstanding, consent of the holders of a majority of the outstanding shares of Series A Convertible Preferred Stock will be required for (A) any change to the size of our board of directors, (B) any voluntary dissolution, liquidation, bankruptcy, winding up or deregistration or delisting, and (C) incurrence by us of net debt in excess of $350,000,000.

Additionally, pursuant to the applicable Series A Securities Financing Agreement, Blackstone has the right to nominate for election one member to our board of directors for so long as Blackstone holds 65% of the Series A Convertible Preferred Stock. The director designated by Blackstone is entitled to serve on committees of our board of directors, subject to applicable law and Nasdaq rules. Notwithstanding the fact that all directors will be subject to fiduciary duties to us and to applicable law, the interests of the director designated by Blackstone may differ from the interests of our security holders as a whole or of our other directors.

As a result, the holders of Series A Convertible Preferred Stock have the ability to influence the outcome of certain matters affecting our governance and capitalization. The sponsors of the holders of Series A Convertible Preferred Stock are in the business of making or advising on investments in companies, including businesses that may directly or indirectly compete with certain portions of our business, and they may have interests that diverge from, or even conflict with, those of our other shareholders. They may also pursue acquisition opportunities that may be complementary to our business, and, as a result, those acquisition opportunities may not be available to us. Our obligations to the holders of Series A Convertible Preferred Stock could also limit our ability to obtain additional financing or increase our borrowing costs, which could have an adverse effect on our financial condition.

Our Series A Convertible Preferred Stock has rights, preferences, and privileges that are not held by, and are preferential to, the rights of holders of our common stock, which could adversely affect our liquidity and financial condition.

The holders have the right under the Series A Certificate of Designation to receive a liquidation preference entitling them to be paid an amount per share equal to the greater of (i) $1,000 per share, plus all accrued and unpaid dividends and (ii) the amount that the holder of Series A Convertible Preferred Stock would have been entitled to receive at such time if the Series A Convertible Preferred Stock were converted into common stock. In addition, the holders are entitled to dividends on the original purchase price of $1,000 per share at a rate of 4.5% per annum, that (i) for the first three years after December 11, 2020, or the Series A closing date, will be paid in-kind, and (ii) after the third anniversary of the Series A closing date, will, at our election either be paid in cash, or, if not, will accrue and accumulate, in each case, accruing daily and paid quarterly in arrears. The holders are also entitled to participate in dividends declared or paid on the common stock on an as-converted basis.

82

There may be future sales or other dilution of our equity, which may adversely affect the market price of our common stock or the Series A Convertible Preferred Stock and may negatively impact the holders’ investment.

Except in certain circumstances, we are not restricted from issuing additional shares of common stock or preferred stock, including any securities that are convertible into or exchangeable for, or that represent the right to receive, common stock or preferred stock or any substantially similar securities. The market price of our common stock or Series A Convertible Preferred Stock could decline as a result of sales of a large number of shares of common stock or Series A Convertible Preferred Stock or similar securities in the market or the perception that such sales could occur. For example, if we issue preferred stock in the future that has a preference over our common stock with respect to the payment of dividends or upon our liquidation, dissolution or winding-up, or if we issue preferred stock with voting rights that dilute the voting power of our common stock, the rights of holders of our common stock or the market price of our common stock could be adversely affected.

In addition, each share of Series A Convertible Preferred Stock will initially be convertible at the option of the holder thereof into shares of our common stock. The conversion of some or all of the Series A Convertible Preferred Stock will dilute the ownership interest of our existing common stockholders. Any sales in the public market of our common stock issuable upon such conversion could adversely affect prevailing market prices of the outstanding shares of our common stock and Series A Convertible Preferred Stock. In addition, the existence of our Series A Convertible Preferred Stock may encourage short selling or arbitrage trading activity by market participants because the conversion of our Series A Convertible Preferred Stock could depress the price of our equity securities. As noted above, a decline in the market price of the common stock may negatively impact the market price for the Series A Convertible Preferred Stock.

Risks Related to Ownership of Our Common Stock

If securities or industry analysts do not publish research or reports about our business, or publish inaccurate or unfavorable research reports about our business, our share price and trading volume could decline.

The trading market for our common stock, to some extent, depends on the research and reports that securities or industry analysts publish about us or our business. We do not have any control over these analysts. If one or more of the analysts who cover us should downgrade our shares or change their opinion of our shares, industry sector or solutions, our share price would likely decline. If one or more of these analysts ceases coverage of us or fails to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our share price or trading volume to decline.

We may fail to meet our publicly announced guidance or other expectations about our business and future operating results, which would cause our stock price to decline.

We have provided and may continue to provide guidance about our business and future operating results. In developing this guidance, our management must make certain assumptions and judgments about our future performance. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, and which could adversely affect our operations and operating results. Such factors may include the possibility that interpretation, industry practice, and accounting guidance may continue to evolve during the early stages of adoption of Accounting Standard Update 2014-09, Revenue from Contracts with Customers (Topic 606). Furthermore, if we make downward revisions of our previously announced guidance, or if our publicly announced guidance of future operating results fails to meet expectations of securities analysts, investors or other interested parties, the price of our common stock would decline.

The price of our common stock has been and may continue to be volatile, and the value of your investment could decline.

The trading price of our common stock has been volatile since our initial public offering, and is likely to continue to be volatile. The trading price of our common stock may fluctuate widely in response to various factors, some of which are beyond our control. These factors include:

•whether our results of operations, and in particular, our revenue growth rates, meet the expectations of securities analysts or investors;

•actual or anticipated changes in the expectations of investors or securities analysts, whether as a result of our forward-looking statements, our failure to meet such expectation or otherwise;

•announcements of new solutions, services or technologies, commercial relationships, acquisitions or other events by us or our competitors;

83

•changes in how customers perceive the effectiveness of our platform in protecting against advanced cyber attacks or other reputational harm;

•publicity concerning cyber attacks in general or high profile cyber attacks against specific organizations;

•price and volume fluctuations in the overall stock market from time to time;

•significant volatility in the market price and trading volume of technology and/or growth companies in general and of companies in the IT security industry in particular;

•fluctuations in the trading volume of our shares or the size of our public float;

•actual or anticipated changes or fluctuations in our results of operations;

•litigation involving us, our industry, or both;

•regulatory developments in the United States, foreign countries or both;

•general economic conditions and trends;

•natural disasters or other catastrophic events;

•public health crises and related measures to protect the public health, such as the COVID-19 pandemic;

•actual or perceived security breaches or incidents that we or our service providers may suffer;

•sales of large blocks of our common stock or substantial future sales by our directors, executive officers, employees and significant stockholders; and

•departures of key personnel.

In addition, if the market for technology stocks or the stock market in general experiences a loss of investor confidence, the trading price of our common stock could decline for reasons unrelated to our business, results of operations or financial condition. The trading price of our common stock might also decline in reaction to events that affect other companies in our industry even if these events do not directly affect us. In the past, following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. The price of our common stock has been highly volatile since our IPO in September 2013, and several lawsuits alleging violations of securities laws were filed against us and certain of our current and former directors and executive officers in 2014 and 2015. Any securities litigation could result in substantial costs and divert our management’s attention and resources from our business. This could have a material adverse effect on our business, results of operations and financial condition.

Sales of substantial amounts of our common stock in the public markets, or sales of our common stock by our executive officers and directors under Rule 10b5-1 plans, could adversely affect the market price of our common stock.

Sales of a substantial number of shares of our common stock in the public market, or the perception that such sales could occur, could adversely affect the market price of our common stock and may make it more difficult for you to sell your common stock at a time and price that you deem appropriate. In addition, certain of our executive officers and directors have adopted, and other executive officers and directors may in the future adopt, written plans, known as “Rule 10b5-1 Plans,” under which they have contracted, or may in the future contract, with a broker to sell shares of our common stock on a periodic basis to diversify their assets and investments. Sales made by our executive officers and directors pursuant to Rule 10b5-1, regardless of the amount of such sales, could adversely affect the market price of our common stock.

The issuance of additional stock in connection with financings, acquisitions, investments, our stock incentive plans, conversion of our convertible notes, conversion of the Series A Convertible Preferred Stock or otherwise will dilute all other stockholders.

Our amended and restated certificate of incorporation authorizes us to issue up to 1,000,000,000 shares of common stock and up to 100,000,000 shares of preferred stock with such rights and preferences as may be determined by our board of directors. Subject to compliance with applicable rules and regulations, we may issue shares of common stock or securities convertible into our common stock from time to time in connection with a financing, acquisition, investment, our stock incentive plans, the conversion of our convertible notes or otherwise. For example, in October 2017, we issued 259,425 shares of common stock in connection with our acquisition of The Email Laundry; in January 2018, we issued 1,016,334 shares of common stock in connection with our acquisition of X15; in May 2019, we issued 8,404,609 shares of common stock in connection with our acquisition of Verodin, in November 2020, we issued 4,931,862 shares of common stock in connection with our acquisition of Respond Software. In addition, we issued $920.0 million aggregate principal amount of 2035 Notes, of which approximately $483.4 million aggregate principal remains outstanding, and we issued $600.0 million aggregate principal amount of the 2024 Notes during the three months ended June 30, 2018. In December 2020, we issued 400,000 shares of Series A Convertible

84

Preferred Stock. Any future issuances could result in substantial dilution to our existing stockholders and cause the trading price of our common stock to decline.

We do not intend to pay dividends for the foreseeable future.

We have never declared or paid any dividends on our common stock. We intend to retain any earnings to finance the operation and expansion of our business, and we do not anticipate paying any cash dividends in the future. As a result, you may only receive a return on your investment in our common stock if the market price of our common stock increases.

Our charter documents and Delaware law, as well as certain provisions of our convertible notes, could discourage takeover attempts and lead to management entrenchment, which could also reduce the market price of our common stock.

Our amended and restated certificate of incorporation and amended and restated bylaws contain provisions that could delay or prevent a change in control of us. These provisions could also make it difficult for stockholders to elect directors who are not nominated by the current members of our board of directors or take other corporate actions, including effecting changes in our management. These provisions include:

•a classified board of directors with three-year staggered terms, which could delay the ability of stockholders to change the membership of a majority of our board of directors;

•the ability of our board of directors to issue shares of preferred stock and to determine the price and other terms of those shares, including preferences and voting rights, without stockholder approval, which could be used to significantly dilute the ownership of a hostile acquiror;

•the exclusive right of our board of directors to elect a director to fill a vacancy created by the expansion of our board of directors or the resignation, death or removal of a director, which prevents stockholders from being able to fill vacancies on our board of directors;

•a prohibition on stockholder action by written consent, which forces stockholder action to be taken at an annual or special meeting of our stockholders;

•the requirement that a special meeting of stockholders may be called only by our board of directors, the chairperson of our board of directors, our Chief Executive Officer or our President (in the absence of a Chief Executive Officer), which could delay the ability of our stockholders to force consideration of a proposal or to take action, including the removal of directors;

•the requirement for the affirmative vote of holders of at least 66 2/3% of the voting power of all of the then outstanding shares of the voting stock, voting together as a single class, to amend the provisions of our amended and restated certificate of incorporation relating to the management of our business (including our classified board structure) or certain provisions of our amended and restated bylaws, which may inhibit the ability of an acquiror to effect such amendments to facilitate an unsolicited takeover attempt;

•the ability of our board of directors to amend the bylaws, which may allow our board of directors to take additional actions to prevent an unsolicited takeover and inhibit the ability of an acquiror to amend the bylaws to facilitate an unsolicited takeover attempt; and

•advance notice procedures with which stockholders must comply to nominate candidates to our board of directors or to propose matters to be acted upon at a stockholders’ meeting, which may discourage or deter a potential acquiror from conducting a solicitation of proxies to elect the acquiror’s own slate of directors or otherwise attempting to obtain control of us.

In addition, as a Delaware corporation, we are subject to Section 203 of the Delaware General Corporation Law, which may prohibit large stockholders, in particular those owning 15% or more of our outstanding voting stock, from merging or combining with us for a specified period of time. Additionally, certain provisions of our convertible notes could make it more difficult or more expensive for a third party to acquire us. The application of Section 203 or certain provisions of our convertible notes also could have the effect of discouraging, delaying or preventing a transaction involving a change in control of us. Any of these provisions could, under certain circumstances, depress the market price of our common stock.

We cannot guarantee that our stock repurchase program will be fully implemented or that it will enhance long-term stockholder value.

85

In June 2021, our board of directors approved a stock repurchase program for the repurchase of up to $500 million of the currently outstanding shares of our common stock. As of September 30, 2021, approximately $400 million remained available under the stock repurchase program. The repurchase program has no termination date and may be suspended for periods, amended or discontinued at any time. We are not obligated to repurchase a specified number or dollar value of shares. Share repurchases under the program will be made from time to time in private transactions or open market purchases, as permitted by securities laws and other legal requirements. There can be no guarantee around the timing of our share repurchases, or that the volume of such repurchases will increase. The stock repurchase program could affect the price of our common stock, increase volatility, diminish our cash reserves, and even if fully implemented may not enhance long-term stockholder value.

Risks Related to Potential Catastrophic Events

The global COVID-19 pandemic, and government imposed COVID-19 vaccination mandates or testing requirements, could harm our business and results of operations.

This COVID-19 pandemic has continued to spread across the globe and is impacting worldwide economic activity and financial markets. In light of the uncertain and rapidly evolving situation relating to the spread of COVID-19, including the occurrence of breakthrough cases and COVID-19 variants, we have taken precautionary measures intended to minimize the risk of the virus to our employees, our customers, and the communities in which we operate, which could negatively impact our business. Although we continue to monitor the situation and may adjust our current policies as more information and public health guidance become available, precautionary measures that have been adopted could negatively affect our customer success efforts, sales and marketing efforts, delay and lengthen our sales cycles, or create operational or other challenges, any of which could harm our business and results of operations. In addition, the COVID-19 pandemic may disrupt the operations of our customers and partners for an indefinite period of time, including as a result of travel restrictions and/or business shutdowns, all of which could negatively impact our business and results of operations, including cash flows. More generally, the COVID-19 pandemic could adversely affect economies and financial markets globally, potentially leading to an economic downturn, which could decrease technology spending and adversely affect demand for our offerings and harm our business and results of operations. It is not possible at this time to estimate the impact that the COVID-19 pandemic could have on our business, as the impact will depend on future developments, which are highly uncertain and cannot be predicted.

In addition, on September 9, 2021, President Biden directed the U.S. Department of Labor’s Occupational Safety and Health Administration (“OSHA”) to issue an Emergency Temporary Standard (the “ETS”) requiring that all employers with at least 100 employees ensure that their U.S. employees are fully vaccinated for COVID-19 by January 4, 2022 or obtain a negative COVID-19 test at least once a week. The ETS was issued on November 4, 2021. As a company with more than 100 U.S. employees, we would be required to mandate COVID-19 vaccination of our U.S. workforce or require our unvaccinated U.S. employees to be tested on a weekly basis. Although this ETS takes effect immediately, it also serves as a proposal under Section 6(b) of the Occupational Safety and Health Act for a final standard. It remains unclear, among other things, if the final OSHA standard will apply to all U.S. employees or only to U.S. employees who work in an office, and how compliance will be documented. President Biden also issued an Executive Order requiring certain COVID-19 precautions for U.S. government contractors and their subcontractors, which would include us, including mandatory employee vaccination (subject to medical and religious exemptions) (the “Executive Order”). We are evaluating the ETS and taking steps to comply with the Executive Order. Our preparation and implementation of these requirements could be difficult, costly, and potentially result in employee attrition, including attrition of key employees, disruptions in workforce performance, and difficulty securing future labor needs, any of which could have a material adverse effect on our business, financial condition, and results of operations.

Our business is subject to the risks of earthquakes, fire, power outages, floods and other catastrophic events, and to interruption by man-made problems such as terrorism or armed conflicts.

Natural disasters or other catastrophic events, including earthquakes, fires, floods, significant power outages, telecommunications failures, outbreak of pandemic or contagious diseases (including, but not limited to, the current COVID-19 pandemic) and cyber attacks, may cause damage or disruption to our operations, international commerce and the global economy, and thus could have a material adverse impact on our business, results of operations, and financial condition. Our corporate headquarters is located in California, a region known for seismic activity. Despite any precautions we may take, the occurrence of a natural disaster or other unanticipated problems at our facilities or the facilities of our public cloud providers could result in disruptions, outages, and other performance and quality problems. Customer data could be lost, significant recovery time could be required to resume operations and our financial condition and operating results could be adversely affected in the event of a natural disaster or other catastrophic event. In addition, computer malware, viruses and computer hacking, fraudulent use attempts, and phishing attacks have become more prevalent in our industry, and our internal systems may be victimized by such attacks.

86

Although we maintain incident management and disaster response plans, in the event of a major disruption caused by a natural disaster or man-made problem, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our development activities, lengthy interruptions in service, breaches of data security and loss of critical data, and our insurance may not cover such events or may be insufficient to compensate us for the potentially significant losses we may incur. Furthermore, acts of terrorism, armed conflicts and other geo-political unrest could cause disruptions in our business or the business of our public cloud providers, partners, or customers or the economy as a whole. Any disruption in the business of our public cloud providers, partners or end-customers that impacts sales could have a significant adverse impact on our financial results. All of the aforementioned risks may be further increased if the disaster recovery plans for us and our public cloud providers prove to be inadequate. To the extent that any of the above should result in delays or cancellations of customer orders or the loss of customers, our business, financial condition and results of operations would be adversely affected.

General Risk Factors

Fluctuating economic conditions make it difficult to predict revenue for a particular period, and a shortfall in revenue may harm our business and operating results.

Our revenue depends significantly on general economic conditions and the demand for solutions and services in the IT security market. Economic weakness, customer financial difficulties, and constrained spending on IT security may result in decreased revenue and earnings.

In addition, concerns regarding the effects of Brexit, uncertainties related to changes in public policies such as domestic and international regulations, taxes, or international trade agreements, international trade disputes, government shutdowns, geopolitical turmoil and other disruptions to global and regional economies and markets in many parts of the world, have and may continue to put pressure on global economic conditions and overall spending on IT security. General economic weakness may also lead to longer collection cycles for payments due from our customers, an increase in customer bad debt, restructuring initiatives and associated expenses, and impairment of investments. Furthermore, the continued uncertainty in worldwide credit markets, including the sovereign debt situation in certain countries in the EU may adversely impact the ability of our customers to adequately fund their expected capital expenditures, which could lead to delays or cancellations of planned purchases of our platform.

The COVID-19 pandemic has created significant uncertainty in the global economy. The COVID-19 pandemic and health measures taken by governments and private industry in response to the pandemic, including stay-at-home orders and travel restrictions, have had significant negative effects on the economy. Continued uncertainty about the pandemic, associated economic consequences, and potential relief measures may have a long-term adverse effect on the economy, our customers, partners, suppliers, and our business.

Uncertainty about future economic conditions also makes it difficult to forecast operating results and to make decisions about future investments. Future or continued economic weakness for us or our customers, failure of our customers and markets to recover from such weakness, customer financial difficulties, and reductions in spending on IT security could have a material adverse effect on demand for our solutions, subscriptions and services and consequently on our business, financial condition and results of operations.

If our estimates or judgments relating to our critical accounting policies are based on assumptions that change or prove to be incorrect, our results of operations could fall below our publicly announced guidance or the expectations of securities analysts and investors, resulting in a decline in our stock price.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section entitled “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” the results of which form the basis for making judgments about the carrying values of assets, liabilities, equity, revenue and expenses that are not readily apparent from other sources. In general, if our estimates, judgments or assumptions related to our critical accounting policies change or if actual circumstances differ from our estimates, judgments or assumptions, our results of operations may be adversely affected and could fall below our publicly announced guidance or the expectations of securities analysts and investors, which may result in a decline in our stock price. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to assets, liabilities, revenue, expenses and related disclosures.

87

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

In general, under Section 382 of the Internal Revenue Code of 1986, as amended (the "Code"), a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change net operating losses, or NOLs, to offset future taxable income. Our existing NOLs may be subject to limitations arising from previous ownership changes. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code and adversely affect our ability to utilize our NOLs in the future. Furthermore, our ability to utilize NOLs of companies that we may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs, or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities. For example, the Tax Act, as modified by the CARES Act, changed certain limitations on our ability to use our federal NOLs, and California recently enacted legislation limiting our ability to use our state NOLs for taxable years 2020, 2021, and 2022. For these reasons, we may not be able to utilize a material portion of the NOLs reflected on our balance sheet, even if we attain profitability.

The requirements of being a public company may strain our resources, divert management’s attention and affect our ability to attract and retain qualified board members.

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the "Exchange Act"), the listing requirements of Nasdaq and other applicable securities rules and regulations. Compliance with these rules and regulations has increased and will continue to increase our legal and financial compliance costs, has made and will continue to make some activities more difficult, time-consuming or costly, and has increased and will continue to increase demand on our systems and resources. Among other things, the Exchange Act requires that we file annual, quarterly and current reports with respect to our business and results of operations and maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. As a result, management’s attention may be diverted from other business concerns, which could harm our business and results of operations. Although we have already hired additional employees to comply with these requirements, we may need to hire even more employees in the future, which will increase our costs and expenses.

We are subject to the independent auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act ("Section 404"), enhanced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, and the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. While we were able to determine in our management's report for fiscal 2020 that our internal control over financial reporting is effective, as well as provide an unqualified attestation report from our independent registered public accounting firm to that effect, we have and will continue to consume management resources and incur significant expenses for Section 404 compliance on an ongoing basis. In the event that our Chief Executive Officer, Chief Financial Officer, or independent registered public accounting firm determines in the future that our internal control over financial reporting is not effective as defined under Section 404, we could be subject to one or more investigations or enforcement actions by state or federal regulatory agencies, stockholder lawsuits or other adverse actions requiring us to incur defense costs, pay fines, settlements or judgments and causing investor perceptions to be adversely affected and potentially resulting in a decline in the market price of our common stock.

In addition, changing laws, regulations and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs, and making some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, in many cases due to their lack of specificity, and as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We intend to invest resources to comply with evolving laws, regulations, and standards, and this investment will increase our general and administrative expense and a diversion of management’s time and attention from revenue-generating activities to compliance activities. If our efforts to comply with new laws, regulations, and standards are unsuccessful, regulatory authorities may initiate legal proceedings against us and our business may be harmed.

We also expect that these new rules and regulations will make it more expensive for us to obtain and maintain director and officer liability insurance, and in the future, we may be required to accept reduced coverage or incur substantially higher costs to obtain coverage. These factors could also make it more difficult for us to attract and retain qualified executive officers and members of our board of directors, particularly to serve on our audit committee and compensation committee.

88

In addition, as a result of our disclosure obligations as a public company, we have reduced strategic flexibility and are under pressure to focus on short-term results, which may adversely impact our ability to achieve long-term profitability.

We are obligated to maintain proper and effective internal control over financial reporting. We may not complete our analysis of our internal control over financial reporting in a timely manner, or this internal control may not be determined to be effective, which may adversely affect investor confidence in us and, as a result, the value of our common stock.

We are required, pursuant to the Exchange Act, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting, as well as a statement that our auditors have issued an attestation report on our internal controls.

While we were able to determine in our management's report for fiscal 2020 that our internal control over financial reporting is effective, as well as provide an unqualified attestation report from our independent registered public accounting firm to that effect, we may not be able to complete our evaluation, testing, and any required remediation in a timely fashion or our independent registered public accounting firm may not be able to formally attest to the effectiveness of our internal control over financial reporting in the future. During the evaluation and testing process, if we identify one or more material weaknesses in our internal control over financial reporting that we are unable to remediate before the end of the same fiscal year in which the material weakness is identified, we will be unable to assert that our internal controls are effective. If we are unable to assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm is unable to attest to the effectiveness of our internal controls or determine we have a material weakness in our internal controls, we could lose investor confidence in the accuracy and completeness of our financial reports, which would cause the price of our common stock to decline.

89

Item 2. Unregistered Sales of Equity Securities and Use of Proceeds

Purchases of Equity Securities by the Issuer and Affiliated Purchasers

The following table summarizes stock repurchases during the three months ended September 30, 2021 (in thousands, except per share amounts):

Period	Total number of shares purchased(1)	Average price paid per share		Total number of shares purchased as part of publicly announced plans or programs(1)	Maximum number (or approximate dollar value) of shares that may yet be purchased under the plans or programs(1)
July 1, 2021 – July 31, 2021	—	—		—
August 1, 2021 – August 31, 2021	1,786	$	17.72	1,786	$	400,000
September 1, 2021 – September 30, 2021	—	—		—
Total:	1,786			1,786

(1) On June 2, 2021, we announced a stock repurchase program for the repurchase of up to $500 million of our common stock. There is no expiration date on this authorization and we may suspend, amend or discontinue the repurchase program at any time.

Item 3. Defaults Upon Senior Securities

None.

Item 4. Mine Safety Disclosures

Not applicable.

Item 5. Other Information

None.

Item 6. Exhibits

Exhibit No.		Description of Exhibit
31.1		Rule 13a-14(a) / 15(d)-14(a) Certification of Principal Executive Officer
31.2		Rule 13a-14(a) / 15(d)-14(a) Certification of Principal Financial Officer
32.1*		Section 1350 Certifications
101.INS		Inline XBRL Instance Document - the instance document does not appear in the Interactive Data File because its XBRL tags are embedded within the Inline XBRL document
101.SCH		Inline XBRL Taxonomy Extension Schema Document
101.CAL		Inline XBRL Taxonomy Extension Calculation Linkbase Document
101.DEF		Inline XBRL Taxonomy Extension Definition Linkbase Document
101.LAB		Inline XBRL Taxonomy Extension Label Linkbase Document
101.PRE		Inline XBRL Taxonomy Extension Presentation Linkbase Document
104		Cover Page Interactive Data File (formatted as Inline XBRL and contained in Exhibit 101)
*	Furnished herewith.

90

SIGNATURE

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

	MANDIANT, INC.
Dated: November 9, 2021	By:	/s/ Frank E. Verdecanna
		Frank E. Verdecanna
		Executive Vice President, Chief Financial Officer and Chief Accounting Officer (Principal Financial and Accounting Officer and duly authorized signatory)

91

EX-31.1

Exhibit 31.1

CERTIFICATION

I, Kevin R. Mandia, certify that:

1.I have reviewed this Quarterly Report on Form 10-Q of Mandiant, Inc.;

2.Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3.Based on my knowledge, the financial statements, and other financial information included in this report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4.The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a)Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b)Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c)Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d)Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter (the registrant’s fourth fiscal quarter in the case of an annual report) that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5.The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a)All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b)Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: November 9, 2021	/s/ Kevin R. Mandia
	Kevin R. Mandia
	Chief Executive Officer
	(Principal Executive Officer)

EX-31.2

Exhibit 31.2

CERTIFICATION

I, Frank E. Verdecanna, certify that:

1.I have reviewed this Quarterly Report on Form 10-Q of Mandiant, Inc.;

2.Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3.Based on my knowledge, the financial statements, and other financial information included in this report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4.The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a)Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b)Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c)Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d)Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter (the registrant’s fourth fiscal quarter in the case of an annual report) that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5.The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a)All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b)Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: November 9, 2021	/s/ Frank E. Verdecanna
	Frank E. Verdecanna
	Executive Vice President, Chief Financial Officer and Chief Accounting Officer
	(Principal Financial and Accounting Officer)

EX-32.1

Exhibit 32.1

SECTION 1350 CERTIFICATIONS

I, Kevin R. Mandia, certify to the best of my knowledge, pursuant to 18 U.S.C. Section 1350, that the Quarterly Report of Mandiant, Inc. on Form 10-Q for the quarterly period ended September 30, 2021 fully complies with the requirements of Section 13(a) or 15(d) of the Securities Exchange Act of 1934 and that information contained in such Form 10-Q fairly presents, in all material respects, the financial condition and results of operations of Mandiant, Inc.

Date: November 9, 2021	/s/ Kevin R. Mandia
	Kevin R. Mandia
	Chief Executive Officer
	(Principal Executive Officer)

I, Frank E. Verdecanna, certify to the best of my knowledge, pursuant to 18 U.S.C. Section 1350, that the Quarterly Report of Mandiant, Inc. on Form 10-Q for the quarterly period ended September 30, 2021 fully complies with the requirements of Section 13(a) or 15(d) of the Securities Exchange Act of 1934 and that information contained in such Form 10-Q fairly presents, in all material respects, the financial condition and results of operations of Mandiant, Inc.

Date: November 9, 2021	/s/ Frank E. Verdecanna
	Frank E. Verdecanna
	Executive Vice President, Chief Financial Officer and Chief Accounting Officer
	(Principal Financial and Accounting Officer)

XML

Cover - shares	9 Months Ended
	Sep. 30, 2021	Nov. 03, 2021
Cover [Abstract]
Document Type	10-Q
Document Quarterly Report	true
Document Period End Date	Sep. 30, 2021
Document Transition Report	false
Entity File Number	001-36067
Entity Registrant Name	Mandiant, Inc.
Entity Incorporation, State or Country Code	DE
Entity Tax Identification Number	20-1548921
Entity Address, Address Line One	601 McCarthy Blvd
Entity Address, City or Town	Milpitas
Entity Address, State or Province	CA
Entity Address, Postal Zip Code	95035
City Area Code	408
Local Phone Number	321-6300
Title of 12(b) Security	Common Stock, $0.0001 par value per share
Trading Symbol	MNDT
Security Exchange Name	NASDAQ
Entity Current Reporting Status	Yes
Entity Interactive Data Current	Yes
Entity Filer Category	Large Accelerated Filer
Entity Small Business	false
Emerging Growth Company	false
Entity Shell Company	false
Entity Common Stock, Shares Outstanding		239,987,486
Entity Central Index Key	0001370880
Current Fiscal Year End Date	--12-31
Document Fiscal Year Focus	2021
Document Fiscal Period Focus	Q3
Amendment Flag	false

XML

Condensed Consolidated Balance Sheets - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Current assets:
Cash and cash equivalents	$ 384,700	$ 664,679
Short-term investments	845,637	624,824
Accounts receivable, net of allowance for doubtful accounts of $563 and $1,225 at September 30, 2021 and December 31, 2020, respectively	67,553	70,563
Prepaid expenses and other current assets	44,342	39,670
Current assets held for sale	573,486	162,509
Total current assets	1,915,718	1,562,245
Property and equipment, net	60,772	64,336
Operating lease right-of-use assets, net	35,550	36,728
Goodwill	1,060,023	1,050,962
Intangible assets, net	90,715	120,555
Deposits and other long-term assets	18,841	18,084
Long-term assets held for sale	0	392,974
TOTAL ASSETS	3,181,619	3,245,884
Current liabilities:
Accounts payable	13,854	4,027
Operating lease liabilities, current	13,567	14,556
Accrued and other current liabilities	22,467	19,730
Accrued compensation	67,261	71,784
Convertible senior notes, current, net	445,732	0
Deferred revenue, current	248,140	226,356
Current liabilities held for sale	686,072	417,291
Total current liabilities	1,497,093	753,744
Convertible senior notes, non-current, net	549,733	960,896
Deferred revenue, non-current	66,536	57,897
Operating lease liabilities, non-current	54,571	41,802
Other long-term liabilities	4,672	12,339
Long-term liabilities held for sale	0	285,251
TOTAL LIABILITIES	2,172,605	2,111,929
Commitments and contingencies
Series A Convertible Preferred Stock, par value of $0.0001 per share; 400 shares authorized, issued and outstanding as of September 30, 2021 and December 31, 2020	414,738	401,050
Stockholders' equity:
Common stock, par value of $0.0001 per share; 1,000,000 shares authorized, 239,783 shares and 235,690 shares issued and outstanding as of September 30, 2021 and December 31, 2020, respectively	24	24
Additional paid-in capital	3,671,356	3,623,243
Treasury stock, at cost; 1,778 shares as of September 30, 2021 and December 31, 2020	(80,000)	(80,000)
Accumulated other comprehensive income	656	3,834
Accumulated deficit	(2,997,760)	(2,814,196)
Total stockholders’ equity	594,276	732,905
TOTAL LIABILITIES, CONVERTIBLE PREFERRED STOCK AND STOCKHOLDERS’ EQUITY	$ 3,181,619	$ 3,245,884

XML

Condensed Consolidated Balance Sheets (Parenthetical) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Statement of Financial Position [Abstract]
Allowance for doubtful accounts	$ 563	$ 1,225
Series A convertible preferred stock, par value (usd per share)	$ 0.0001	$ 0.0001
Series A convertible preferred stock, shares authorized (shares)	400,000	400,000
Series A convertible preferred stock, shares issued (shares)	400,000	400,000
Series A convertible preferred stock, shares outstanding (shares)	400,000	400,000
Common stock, par value (usd per share)	$ 0.0001	$ 0.0001
Common stock, shares authorized (shares)	1,000,000,000	1,000,000,000
Common stock, shares issued (shares)	239,783,000	235,690,000
Common stock, shares outstanding (shares)	239,783,000	235,690,000
Treasury stock (shares)	1,778,000	1,778,000

XML

Condensed Consolidated Statements of Operations - USD ($) shares in Thousands, $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Revenue:
Total revenue	$ 121,970	$ 100,052	$ 350,568	$ 289,436
Cost of revenue:
Total cost of revenue	65,105	57,091	187,715	165,289
Total gross profit	56,865	42,961	162,853	124,147
Operating expenses:
Research and development	44,814	31,316	127,649	89,059
Sales and marketing	65,899	55,459	190,130	167,045
General and administrative	32,760	24,485	87,131	79,342
Restructuring charges	0	822	1,927	19,597
Total operating expenses	143,473	112,082	406,837	355,043
Operating loss	(86,608)	(69,121)	(243,984)	(230,896)
Interest income	1,226	2,163	4,235	9,450
Interest expense	(14,903)	(14,353)	(44,289)	(45,555)
Other income (expense), net	(464)	156	(364)	(951)
Loss before income taxes from continuing operations	(100,749)	(81,155)	(284,402)	(267,952)
Provision for income taxes	498	458	2,441	1,464
Loss from continuing operations	(101,247)	(81,613)	(286,843)	(269,416)
Net income from discontinued operations, net of income taxes	33,025	42,494	103,279	100,716
Net loss	(68,222)	(39,119)	(183,564)	(168,700)
Dividend on series A convertible preferred stock	(4,613)	0	(13,688)	0
Accretion of series A convertible preferred stock	0	0	(82)	0
Net loss attributable to common stockholders	(72,835)	(39,119)	(197,334)	(168,700)
Net loss attributable to common stockholders	$ (72,835)	$ (39,119)	$ (197,334)	$ (168,700)
Net loss per share attributable to common stockholders, basic and diluted:
Continuing operations, basic (usd per share)	$ (0.45)	$ (0.36)	$ (1.27)	$ (1.22)
Continuing operations, diluted (usd per share)	(0.45)	(0.36)	(1.27)	(1.22)
Discontinued operations, basic (usd per share)	0.14	0.19	0.44	0.46
Discontinued operations, diluted (usd per share)	0.14	0.19	0.44	0.46
Net loss per share attributable to common stockholders, basic (usd per share)	(0.31)	(0.17)	(0.83)	(0.76)
Net loss per share attributable to common stockholders, diluted (usd per share)	$ (0.31)	$ (0.17)	$ (0.83)	$ (0.76)
Weighted average shares used in computing net loss per share, basic (shares)	237,168	224,807	236,404	221,329
Weighted average shares used in computing net loss per share, diluted (shares)	237,168	224,807	236,404	221,329
Platform, cloud subscription and managed services
Revenue:
Total revenue	$ 60,249	$ 48,613	$ 168,184	$ 141,966
Cost of revenue:
Total cost of revenue	28,725	27,431	83,581	79,788
Professional services
Revenue:
Total revenue	61,721	51,439	182,384	147,470
Cost of revenue:
Total cost of revenue	$ 36,380	$ 29,660	$ 104,134	$ 85,501

XML

Condensed Consolidated Statements of Comprehensive Loss - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Statement of Comprehensive Income [Abstract]
Net loss	$ (68,222)	$ (39,119)	$ (183,564)	$ (168,700)
Change in net unrealized gain (loss) on available-for-sale investments	(763)	(1,197)	(3,178)	3,934
Comprehensive loss	$ (68,985)	$ (40,316)	$ (186,742)	$ (164,766)

XML

Condensed Consolidated Statement of Convertible Preferred Stock and Stockholders' Equity - USD ($) $ in Thousands	Total	Series A convertible preferred stock	Common stock and additional paid-in-capital:	Treasury stock:	Accumulated other comprehensive income:	Accumulated deficit:
Beginning balance at Dec. 31, 2019	$ 701,666		$ 3,457,381	$ (150,000)	$ 1,180	$ (2,606,895)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock for equity awards, net of tax withholdings			6,270
Shares withheld for taxes			(8,802)
Issuance of common stock related to employee stock purchase plan			12,300
Shares repurchased			0
Shares retired			(70,000)	70,000
Accretion of series A convertible preferred stock			0
Dividends on series A convertible preferred stock			0
Stock-based compensation			116,492
Net unrealized gain (loss) on investments					3,934
Net loss	(168,700)					(168,700)
Ending balance at Sep. 30, 2020	663,160		3,513,641	(80,000)	5,114	(2,775,595)
Beginning balance at Dec. 31, 2019		$ 0
Increase (Decrease) in Temporary Equity [Roll Forward]
Series A convertible preferred stock issuance costs		0
Accretion of series A convertible preferred stock	0	0
Dividends on series A convertible preferred stock	0	0
Ending balance at Sep. 30, 2020		0
Beginning balance at Jun. 30, 2020	660,360		3,470,525	(80,000)	6,311	(2,736,476)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock for equity awards, net of tax withholdings			2,539
Shares withheld for taxes			(763)
Issuance of common stock related to employee stock purchase plan			0
Shares repurchased			0
Shares retired			0	0
Accretion of series A convertible preferred stock			0
Dividends on series A convertible preferred stock			0
Stock-based compensation			41,340
Net unrealized gain (loss) on investments					(1,197)
Net loss	(39,119)					(39,119)
Ending balance at Sep. 30, 2020	663,160		3,513,641	(80,000)	5,114	(2,775,595)
Beginning balance at Jun. 30, 2020		0
Increase (Decrease) in Temporary Equity [Roll Forward]
Series A convertible preferred stock issuance costs		0
Accretion of series A convertible preferred stock		0
Dividends on series A convertible preferred stock		0
Ending balance at Sep. 30, 2020		0
Beginning balance at Dec. 31, 2020	732,905		3,623,267	(80,000)	3,834	(2,814,196)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock for equity awards, net of tax withholdings			4,351
Shares withheld for taxes			(10,514)
Issuance of common stock related to employee stock purchase plan			12,335
Shares repurchased	(100,000)		(100,001)
Shares retired			0	0
Accretion of series A convertible preferred stock			(82)
Dividends on series A convertible preferred stock			(13,688)
Stock-based compensation			155,712
Net unrealized gain (loss) on investments					(3,178)
Net loss	(183,564)					(183,564)
Ending balance at Sep. 30, 2021	594,276		3,671,380	(80,000)	656	(2,997,760)
Beginning balance at Dec. 31, 2020	401,050	401,050
Increase (Decrease) in Temporary Equity [Roll Forward]
Series A convertible preferred stock issuance costs		(82)
Accretion of series A convertible preferred stock	82	82
Dividends on series A convertible preferred stock	13,688	13,688
Ending balance at Sep. 30, 2021	414,738	414,738
Beginning balance at Jun. 30, 2021	645,478		3,653,597	(80,000)	1,419	(2,929,538)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock for equity awards, net of tax withholdings			751
Shares withheld for taxes			(789)
Issuance of common stock related to employee stock purchase plan			0
Shares repurchased	(31,600)		(31,667)
Shares retired			0	0
Accretion of series A convertible preferred stock			0
Dividends on series A convertible preferred stock			(4,613)
Stock-based compensation			54,101
Net unrealized gain (loss) on investments					(763)
Net loss	(68,222)					(68,222)
Ending balance at Sep. 30, 2021	594,276		$ 3,671,380	$ (80,000)	$ 656	$ (2,997,760)
Beginning balance at Jun. 30, 2021		410,125
Increase (Decrease) in Temporary Equity [Roll Forward]
Series A convertible preferred stock issuance costs		0
Accretion of series A convertible preferred stock		0
Dividends on series A convertible preferred stock		4,613
Ending balance at Sep. 30, 2021	$ 414,738	$ 414,738

XML

Condensed Consolidated Statements of Cash Flows - USD ($) $ in Thousands	9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020
CASH FLOWS FROM OPERATING ACTIVITIES:
Net loss	$ (183,564)	$ (168,700)
Less: income from discontinued operations	103,279	100,716
Loss from continuing operations	(286,843)	(269,416)
Adjustments to reconcile loss from continuing operations to net cash used in continuing operating activities:
Depreciation and amortization	67,448	57,630
Stock-based compensation	111,295	82,102
Non-cash interest expense related to convertible senior notes	34,570	35,480
Deferred income taxes	(106)	91
Other	1,154	1,514
Changes in operating assets and liabilities, net of business acquisitions:
Accounts receivable	3,174	17,429
Prepaid expenses and other assets	6,654	3,691
Accounts payable	8,731	(9,961)
Accrued liabilities	618	(1,456)
Accrued compensation	(4,524)	23,868
Deferred revenue	30,423	(29,617)
Other long-term liabilities	(9,827)	(8,205)
Net cash used in operating activities - continuing operations	(37,233)	(96,850)
Net cash provided by operating activities - discontinued operations	126,836	120,351
Net cash provided by operating activities	89,603	23,501
CASH FLOWS FROM INVESTING ACTIVITIES:
Purchases of property and equipment and demonstration units	(16,809)	(16,554)
Purchases of short-term investments	(647,949)	(305,180)
Proceeds from maturities of short-term investments	414,952	355,820
Purchase of investment in privately held company	0	(1,000)
Proceeds from sales of short-term investments	2,008	28,208
Business acquisitions, net of cash acquired	(11,678)	(6,284)
Lease deposits	(233)	(222)
Net cash provided by (used in) investing activities - continuing operations	(259,709)	54,788
Net cash used in investing activities - discontinued operations	(15,962)	(12,018)
Net cash provided by (used in) investing activities	(275,671)	42,770
CASH FLOWS FROM FINANCING ACTIVITIES:
Repurchase of convertible senior notes	0	(96,392)
Share repurchases	(100,001)	0
Series A convertible preferred stock issuance costs	(82)	0
Payment related to shares withheld for taxes	(10,514)	(8,802)
Proceeds from employee stock purchase plan	12,335	12,300
Proceeds from exercise of equity awards	4,351	6,270
Net cash used in financing activities	(93,911)	(86,624)
Net change in cash and cash equivalents	(279,979)	(20,353)
Cash and cash equivalents, beginning of period	664,679	322,828
Cash and cash equivalents held for sale, beginning of period	11,775	11,775
Cash and cash equivalents held for sale, end of period	11,775	11,775
Cash and cash equivalents, end of period	384,700	302,475
SUPPLEMENTAL DISCLOSURES OF CASH FLOW INFORMATION:
Cash paid for income taxes	4,915	3,961
Cash paid for interest	6,480	6,962
SUPPLEMENTAL DISCLOSURES OF NON-CASH INVESTING AND FINANCING ACTIVITIES:
Purchases of property and equipment and demonstration units in accounts payable and accrued liabilities	3,495	2,031
Dividend on series A convertible preferred stock	13,688	0
Accretion of series A convertible preferred stock	$ 82	$ 0

XML

Description of Business and Summary of Significant Accounting Policies

9 Months Ended

Sep. 30, 2021

Organization, Consolidation and Presentation of Financial Statements [Abstract]

Description of Business and Summary of Significant Accounting Policies

Description of Business and Summary of Significant Accounting Policies

Description of Business

Mandiant, Inc., with principal executive offices located in Milpitas, California, was incorporated as NetForts, Inc. on February 18, 2004, under the laws of the State of Delaware, and changed its name to FireEye, Inc. on September 7, 2005. On October 4, 2021, the Company changed its name to Mandiant, Inc.

Mandiant, Inc. and its wholly owned subsidiaries (collectively, the “Company”, “we”, “us” or “our”) provide intelligence-based cybersecurity solutions and services that allow organizations to prepare for, prevent, investigate, respond to and remediate cyber attacks, including attacks that target on-premise, cloud and critical infrastructure environments.

Unless otherwise noted, discussion in these Notes to Condensed Consolidated Financial Statements refers to our continuing operations. Refer to Note 2, “Discontinued Operations,” for further information.

Our portfolio of cybersecurity solutions and services is comprised of the following:

•Mandiant Solutions, including the Mandiant Advantage software-as-a-service (SaaS) platform with integrated modules for threat intelligence, validation and security automation, managed services, and professional services. Our solutions and services help customers minimize the risk of costly cybersecurity breaches by:

•detecting and preventing advanced, targeted and evasive attacks missed by other security control solutions,

•automating the investigation and triage of security alerts generated by Mandiant solutions, as well as security control solutions from other vendors,

•providing visibility into the latest threats and the tools and techniques used by threat actors,

•validating the effectiveness of existing cybersecurity controls against attacks before an attack occurs and,

•providing assessment, training and other strategic security consulting services that help organizations improve their resilience to attack.

The majority of our solutions and services are sold to end-customers directly, with a lesser percentage of sales to our end-customers sold through distributors, resellers, and strategic partners.

On August 4, 2021, we acquired Intrigue Corp. ("Intrigue"), a privately-held company, for cash consideration of approximately $12.3 million. Intrigue's attack surface management technology will be integrated into the Mandiant Advantage platform, enabling organizations to discover, monitor and manage risk across their entire attack surface.

On June 2, 2021, we announced a stock repurchase program for the repurchase of up to $500 million of our common stock. There is no expiration date on this authorization, and we may suspend, amend or discontinue the repurchase program at any time. During the three months ended September 30, 2021, we repurchased 1.8 million shares of our common stock for $31.6 million, at an average repurchase price of approximately $17.72 per share. During the nine months ended September 30, 2021, we repurchased 5.3 million shares of our common stock for $100.0 million, at an average repurchase price of approximately $18.84 per share. As of September 30, 2021, we had cumulatively repurchased 5.3 million shares of our common stock for $100.0 million, at an average repurchase price of approximately $18.84. The repurchases were recorded to additional paid-in capital as the Company is in an accumulated net deficit position.

On May 29, 2021, we entered into an Asset Purchase Agreement (the “Purchase Agreement”), pursuant to which we agreed to sell the FireEye Products business to a consortium led by Symphony Technology Group (“STG”) in exchange for total cash consideration of $1.2 billion and assumption of certain assets and liabilities of the FireEye Products business as specified in the Purchase Agreement. As a result, the FireEye Products business was classified as discontinued operations in our condensed consolidated financial statements and excluded from continuing operations and the related assets and liabilities were classified as held for sale. The transaction closed on October 8, 2021.

In November 2020, we acquired Respond Software, Inc. ("Respond Software"), a cybersecurity investigation automation company. In connection with this acquisition, we paid cash consideration of $116.1 million, and issued 4,931,862 shares of our

common stock of which 694,768 shares are subject to vesting conditions. The estimated fair value of the common stock issued and not subject to vesting conditions was $60.3 million. We also assumed unvested stock options, which are now exercisable for our common stock, of which $1.2 million of the fair value has been accounted for as consideration for assumed awards pertaining to pre-combination service prior to acquisition. Based on the above, total purchase consideration for Respond Software was $177.6 million.

In November 2020, we entered into a Securities Purchase Agreement with BTO Delta Holdings DE L.P., an investment vehicle of funds affiliated with The Blackstone Group Inc., and a Securities Purchase Agreement with ClearSky Security Fund I LLC and ClearSky Power & Technology Fund II LLC (together, the “Series A Securities Financing Agreements”). Pursuant to the Series A Securities Financing Agreements, in December 2020 we issued and sold 400,000 shares of a newly designated 4.5% Series A Convertible Preferred Stock, par value $0.0001 per share, at a price of $1,000 per share, for an aggregate purchase price of $400.0 million. We intend to use the net proceeds from the issuance and sale to fund acquisitions, buybacks of our common stock, and for working capital purposes.

In January 2020, we acquired Cloudvisory LLC ("Cloudvisory"), a provider of cloud visibility and control solutions. As consideration for the acquisition, we paid approximately $13.2 million in cash and assumed $0.3 million in net tangible liabilities.

Basis of Presentation and Consolidation

The accompanying unaudited condensed consolidated financial statements include the accounts of Mandiant, Inc. and its wholly owned subsidiaries. All intercompany balances and transactions have been eliminated in consolidation.

The accompanying unaudited condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States of America (“U.S. GAAP”), and following the requirements of the Securities and Exchange Commission (“SEC”), for interim reporting. As permitted under those rules, certain footnotes or other financial information that are normally required by U.S. GAAP can be condensed or omitted. These unaudited condensed consolidated financial statements have been prepared on the same basis as our annual consolidated financial statements and, in the opinion of management, reflect all adjustments, consisting only of normal recurring adjustments, that are necessary for a fair statement of our financial information. The results of operations for the three and nine months ended September 30, 2021 are not necessarily indicative of the results to be expected for the year ending December 31, 2021 or for any other interim period or for any other future year. As a result of the Purchase Agreement, the FireEye Products business is presented as discontinued operations in our condensed consolidated financial statements and all prior periods presented have been adjusted to reflect the assets and liabilities held for sale and discontinued operations. The balance sheet as of December 31, 2020 has been derived from audited consolidated financial statements at that date but does not include all information required by U.S. GAAP for annual consolidated financial statements.

The accompanying unaudited condensed consolidated financial statements and related financial information should be read in conjunction with the audited consolidated financial statements and the related notes thereto for the year ended December 31, 2020 included in our Annual Report on Form 10-K for the year ended December 31, 2020.

Use of Estimates

The preparation of consolidated financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements and the reported amounts of revenue and expenses during the reporting period. Such management estimates include, but are not limited to, determining the nature and timing of satisfaction of performance obligations, useful life of our security appliances that are dependent on intelligence and assessing the material rights associated with it, determining the standalone selling price of performance obligations, subscriptions and services, commissions expense including the period of benefit of customer acquisition cost, bonus expense, future taxable income, contract manufacturer liabilities, litigation and settlement costs and other loss contingencies, fair value of our equity awards, achievement of targets for performance stock units, fair value of the liability and equity components of the Convertible Senior Notes (as defined in Note 10), results of operations of the Company’s discontinued operations, and the purchase price allocation of acquired businesses. We base our estimates on historical experience and on assumptions that we believe are reasonable. Changes in facts or circumstances may cause us to change our assumptions and estimates in future periods, and it is possible that actual results could differ from current or revised future estimates.

Summary of Significant Accounting Policies

Our accounting policies are set forth in Note 1 to Consolidated Financial Statements contained in our Annual Report on Form 10-K for the year ended December 31, 2020. We include herein certain updates to those policies.

Discontinued Operations

We consider assets to be held for sale when management commits to a formal plan to actively market the assets for sale at a price reasonable in relation to fair value, it is unlikely that significant changes will be made to the plan, the assets are available for immediate sale in their present condition, an active program to locate a buyer and other actions required to complete the sale have been initiated and the sale of the assets is expected to be completed within one year. Upon designation as held for sale, we record the

carrying value of the assets at the lower of the then current carrying value or estimated fair value, less costs to sell. Following recording as such, assets held for sale are not depreciated or amortized thereafter.

If the disposal of the component of an entity (or group of components) represents a strategic shift that has (or will have) a major effect on an entity’s operations and financial results, it meets the criteria for discontinued operations. The results of discontinued operations, as well as any gain or loss on the disposal transaction, are presented separately, net of tax, from the results of continuing operations for all periods presented. The revenue and expenses included in the results of discontinued operations are the revenue and direct operating expenses incurred by the discontinued component that may be reasonably segregated from the revenue and costs of the ongoing operations of the Company. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. The operating results have been included in discontinued operations in our condensed consolidated financial statements. Assets and liabilities held for sale are classified as current as of September 30, 2021 as it is probable that the sale will occur and proceeds will be collected within one year. The condensed consolidated statement of cash flows presents combined cash flows from continuing operations with cash flows from discontinued operations within each cash flow statement category. The prior periods have been adjusted to reflect the assets and liabilities held for sale and discontinued operations.

See Note 2, “Discontinued Operations,” to our condensed consolidated financial statements for additional information.

Recently Adopted Accounting Pronouncements

Customer’s Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract

In August 2018, the FASB issued ASU 2018-15, Intangibles - Goodwill and Other - Internal-Use Software (Subtopic 350-40): Customer's Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract. This standard requires capitalization of the implementation costs incurred in a hosting arrangement that is a service contract with the requirements for capitalizing implementation costs incurred to develop or obtain internal-use software. Further, the standard also requires the Company to expense the capitalized implementation costs of a hosting arrangement over the term of the hosting arrangement. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying the Test for Goodwill Impairment

In January 2017, the FASB issued ASU 2017-04, Intangibles - Goodwill and Other (Topic 350): Simplifying the Test for Goodwill Impairment. This standard eliminates the requirement to calculate the implied fair value of goodwill to measure a goodwill impairment charge (i.e. Step 2 of the current guidance), instead measuring the impairment charge as the excess of the reporting unit's carrying amount over its fair value (i.e. Step 1 of the current guidance). We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Measurement of Credit Losses on Financial Instruments

In June 2016, the FASB issued ASU 2016-13, Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments. This standard changes the impairment model for most financial assets and certain other instruments by introducing a current expected credit loss ("CECL") model. The CECL model is a more forward-looking approach based on expected losses rather than incurred losses, requiring entities to estimate and record losses expected over the remaining contractual life of an asset. The guidance was effective for the Company beginning in the first quarter of 2020. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying Accounting for Income Taxes

In December 2019, the FASB issued ASU 2019-12, Income Taxes (Topic 740): Simplifying the Accounting for Income Taxes. This standard simplifies the accounting for income taxes by eliminating certain exceptions to the guidance in Topic 740 related to the approach for intra-period tax allocation, the methodology for calculating income taxes in an interim period and the recognition of deferred tax liabilities for outside basis differences. The new guidance also simplifies aspects of the accounting for franchise taxes and enacted changes in tax laws or rates and clarifies the accounting for transactions that result in a step-up in the tax basis of goodwill and allocating consolidated income taxes to separate financial statements of entities not subject to income tax. ASU 2019-12 is effective for annual and interim periods in fiscal years beginning after December 15, 2020. We adopted ASU 2019-12 as of January 1, 2020. The adoption did not have a significant impact on our unaudited condensed consolidated financial statements.

Recent Legislation

On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act was enacted and signed into U.S. law to provide economic relief to individuals and businesses facing economic hardship as a result of the COVID-19 pandemic. Changes in tax laws or rates are accounted for in the period of enactment. The income tax provisions of the CARES Act do not have a significant impact on our current taxes, deferred taxes, or uncertain tax positions.

Recent Accounting Pronouncements Not Yet Adopted

In August 2020, the FASB issued ASU No. 2020-06, Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity (ASU 2020-06): This standard simplifies the accounting for certain financial instruments with characteristics of liabilities and equity, including convertible instruments and contracts in an entity’s own equity. Among other changes, ASU 2020-06 removes from U.S. GAAP the liability and equity separation model for convertible instruments with a cash conversion feature, and as a result, after adoption, entities will no longer separately present in equity an embedded conversion feature for such debt. Similarly, the embedded conversion feature will no longer be amortized into income as interest expense over the life of the instrument. Instead, entities will account for a convertible debt instrument wholly as debt unless (1) a convertible instrument contains features that require bifurcation as a derivative under ASC Topic 815, Derivatives and Hedging, or (2) a convertible debt instrument was issued at a substantial premium. Among other potential impacts, this change is expected to reduce reported interest expense, increase reported net income, and result in a reclassification of certain conversion feature balance sheet amounts from stockholders’ equity to liabilities as it relates to the Convertible Senior Notes. Additionally, ASU 2020-06 requires the application of the if-converted method to calculate the impact of convertible instruments on diluted earnings per share (EPS), which is consistent with the Company’s accounting treatment under the current standard. ASU 2020-06 is effective for fiscal years beginning after December 15, 2021, with early adoption permitted for fiscal years beginning after December 15, 2020, and can be adopted on either a fully retrospective or modified retrospective basis. We are adopting the standard on January 1, 2022 and are currently evaluating the method of adoption and overall impact of this standard on our consolidated financial statements.

XML

Discontinued Operations

9 Months Ended

Sep. 30, 2021

Discontinued Operations and Disposal Groups [Abstract]

Discontinued Operations

Discontinued Operations

On May 29, 2021, we entered into the Purchase Agreement, pursuant to which we agreed to sell the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion, subject to certain purchase price adjustments, and assumption of certain assets and liabilities of the FireEye Products business as specified in the Purchase Agreement. On October 8, 2021, we entered into an amendment to the Purchase Agreement, pursuant to which we increased certain assets and liabilities held for sale. The increases have been reflected in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020. As a result, the FireEye Products business was classified as discontinued operations in our condensed consolidated statements of operations and excluded from continuing operations for all periods presented. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. The transaction closed on October 8, 2021.

The following table summarizes the assets and liabilities held for sale relating to our discontinued operations (dollars in thousands):

	September 30, 2021		December 31, 2020
MAJOR CLASSES OF ASSETS
Current:
Cash and cash equivalents	$	11,775	$	11,775
Accounts receivable, net of allowance for doubtful accounts of $905 and $1,334 at September 30, 2021 and December 31, 2020, respectively	88,609		83,012
Inventories	7,565		4,023
Prepaid expenses and other current assets	60,700		63,699
Property and equipment, net	31,285		—
Goodwill	313,873		—
Intangible assets, net	4,292		—
Deposits and other long-term assets	51,974		—
Operating lease right-of-use assets, net	3,413		—
Total current assets held for sale	573,486		162,509
Non-current:
Property and equipment, net	—		15,434
Goodwill	—		313,924
Intangible assets, net	—		5,512
Deposits and other long-term assets	—		56,580
Operating lease right-of-use assets, net	—		1,524
Total assets classified as held for sale	$	573,486	$	555,483
MAJOR CLASSES OF LIABILITIES
Current:
Accounts payable	$	9,105	$	1,080
Accrued and other current liabilities	7,980		3,510
Deferred revenue, current	640,049		387,353
Operating lease liabilities	3,031		1,468
Accrued compensation	25,907		23,880
Total current liabilities held for sale	686,072		417,291
Non-current:
Deferred revenue, non-current	—		284,851
Operating lease liabilities	—		400
Total liabilities classified as held for sale	$	686,072	$	702,542
Commitments and contingencies
Contract manufacturer commitments	$	10,034	$	5,996

The following table summarizes the results of the discontinued operations (dollars in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
MAJOR LINE ITEMS CONSTITUTING NET INCOME
Revenue from discontinued operations	$	132,842	$	138,408	$	398,546	$	403,646
Cost of revenue	28,126		29,654		83,928		89,854
Research and development	31,358		27,470		87,444		92,450
Sales and marketing	35,114		37,648		109,644		113,714
General and administrative	4,631		—		12,757		—
Restructuring charges	—		666		—		5,423
Net income from discontinued operations before income taxes	$	33,613	$	42,970	$	104,773	$	102,205
Provision for income taxes	588		476		1,494		1,489
Net income from discontinued operations, net of income taxes	$	33,025	$	42,494	$	103,279	$	100,716

At the closing of the sale of the FireEye Products business on October 8, 2021, we entered into a Transition Services Agreement (“TSA”) and a Reseller and Market Cooperation Agreement (“RSA”) with Magenta Buyer LLC ("McAfee Enterprise"), which is backed by a consortium led by STG. The TSA is designed to ensure and facilitate an orderly transfer of business operations. The services provided by us under the TSA will run up to 18 months following the closing, subject to the ability of McAfee Enterprise to earlier terminate any such services. The RSA is designed to enable the parties and their respective subsidiaries to continue using certain product and service offerings in the operation of their businesses. Under the RSA, each party will grant the other a non-exclusive appointment and license as both a seller and a reseller to promote, sell and distribute the product and service offerings directly or indirectly through the other party’s authorized resale and distribution channel on a standalone basis or as part of a bundled service at agreed-upon rates for 36 months following the separation. The agreed-upon fees for the product and service offerings are generally intended to (i) allow the providing party to recover all costs and expenses of providing such product and service offerings plus a mark-up over those costs and expenses or (ii) compensate the providing party for providing such product and service offerings through an agreed-upon fixed fee arrangement. No revenues or expenses have been incurred for the TSA or RSA for the three and nine months ended September 30, 2021, as the TSA and RSA were not in effect during these periods.

XML

Fair Value Measurements

9 Months Ended

Sep. 30, 2021

Fair Value Disclosures [Abstract]

Fair Value Measurements

Fair Value Measurements

The accounting guidance for fair value measurements provides a framework for measuring fair value on either a recurring or nonrecurring basis, whereby the inputs used in our valuation techniques are assigned a hierarchical level. The following are the three levels of inputs to measure fair value:

•Level 1: Observable inputs that reflect quoted prices (unadjusted) for identical assets or liabilities in active markets.

•Level 2: Inputs that reflect quoted prices for identical assets or liabilities in less active markets; quoted prices for similar assets or liabilities in active markets; benchmark yields, reported trades, broker/dealer quotes, inputs other than quoted prices that are observable for the assets or liabilities; or inputs that are derived principally from or corroborated by observable market data by correlation or other means.

•Level 3: Unobservable inputs that reflect our own assumptions incorporated in valuation techniques used to measure fair value. These assumptions are required to be consistent with market participant assumptions that are reasonably available.

We consider an active market to be one in which transactions for the asset or liability occur with sufficient frequency and volume to provide pricing information on an ongoing basis, and consider an inactive market to be one in which there are infrequent or few transactions for the asset or liability, the prices are not current, or price quotations vary substantially either over time or among market makers. Where appropriate, our own or the counterparty’s non-performance risk is considered in measuring the fair values of assets.

The following table presents our assets measured at fair value on a recurring basis using the above input categories (in thousands):

	As of September 30, 2021								As of December 31, 2020
Description	Level 1		Level 2		Level 3		Total		Level 1		Level 2		Level 3		Total
Assets
Cash equivalents:
Money market funds	$	143,233	$	—	$	—	$	143,233	$	32,954	$	—	$	—	$	32,954
Total cash equivalents	143,233		—		—		143,233		32,954		—		—		32,954
Short-term investments:
Certificates of deposit	—		6,355		—		6,355		—		2,752		—		2,752
Commercial paper	—		—		—		—		—		19,994		—		19,994
Corporate notes and bonds	—		569,090		—		569,090		—		437,652		—		437,652
U.S. Treasuries	—		75,364		—		75,364		—		74,934		—		74,934
U.S. Government agencies	—		194,828		—		194,828		—		89,492		—		89,492
Total short-term investments	—		845,637		—		845,637		—		624,824		—		624,824
Total assets measured at fair value	$	143,233	$	845,637	$	—	$	988,870	$	32,954	$	624,824	$	—	$	657,778

Additionally, we have a restructuring liability related to certain real estate facilities which was calculated based on the present value of future non-lease payments, discounted at a rate commensurate with our current cost of financing as well as external ratings. This non-recurring fair value measurement is considered to be a Level 3 measurement due to the use of significant unobservable inputs. See Note 7, "Restructuring Charges," for a reconciliation of this liability.

We measure certain assets, including goodwill, intangible assets and our equity-method investment in a privately held company at fair value on a nonrecurring basis when there are identifiable events or changes in circumstances that may have a significant adverse

impact on the fair value of these assets. In light of the COVID-19 pandemic, we performed an analysis of impairment indicators of these assets and noted no adverse impact to their fair values as of September 30, 2021.

The estimated fair value of the Convertible Senior Notes was determined to be $1.0 billion as of September 30, 2021 and December 31, 2020. The fair value was determined based on the closing trading prices per $1,000 principal amount of the respective Convertible Senior Notes as of the last day of trading for the period. We consider the fair value of the Convertible Senior Notes to be a Level 2 measurement as they are not actively traded.

XML

Investments

9 Months Ended

Sep. 30, 2021

Investments, Debt and Equity Securities [Abstract]

Investments

Investments

Our investments consisted of the following (in thousands):

	As of September 30, 2021
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	6,326	$	36	$	(7)	$	6,355
Corporate notes and bonds	567,840		1,469		(219)		569,090
U.S. Treasuries	75,384		2		(22)		75,364
U.S. Government agencies	194,924		5		(101)		194,828
Total	$	844,474	$	1,512	$	(349)	$	845,637

	As of December 31, 2020
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	2,679	$	73	$	—	$	2,752
Commercial paper	19,994		—		—		19,994
Corporate notes and bonds	433,445		4,248		(41)		437,652
U.S. Treasuries	74,914		26		(6)		74,934
U.S. Government agencies	89,451		54		(13)		89,492
Total	$	620,483	$	4,401	$	(60)	$	624,824

The following tables present the gross unrealized losses and related fair values of our investments that have been in a continuous unrealized loss position (in thousands):

	As of September 30, 2021
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Certificates of deposit	$	2,936	$	(7)	$	—	$	—	$	2,936	$	(7)
Corporate notes and bonds	263,919		(219)		—		—		263,919		(219)
U.S. Treasuries	42,620		(22)		—		—		42,620		(22)
U.S. Government agencies	170,720		(101)		—		—		170,720		(101)
Total	$	480,195	$	(349)	$	—	$	—	$	480,195	$	(349)

	As of December 31, 2020
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Commercial paper	$	4,997	$	—	$	—	$	—	$	4,997	$	—
Corporate notes and bonds	92,855		(41)		870		—		93,725		(41)
U.S. Treasuries	42,799		(6)		—		—		42,799		(6)
U.S. Government agencies	37,488		(13)		1,700		—		39,188		(13)
Total	$	178,139	$	(60)	$	2,570	$	—	$	180,709	$	(60)

Unrealized losses related to these investments are due to interest rate fluctuations as opposed to credit quality. In addition, we do not intend to sell, and it is not more likely than not that we would be required to sell, these investments before recovery of their cost basis.

The following table summarizes the contractual maturities of our investments as of September 30, 2021 (in thousands):

	Amortized Cost		Fair Value
Due within one year	$	425,939	$	426,811
Due within one to three years	418,535		418,826
Total	$	844,474	$	845,637

All available-for-sale securities have been classified as current, based on management's ability to use the funds in current operations.

As of December 31, 2020 and September 30, 2021, we held an 11.0% ownership interest in a privately held company, which is accounted for under the equity method based on our ability to exercise significant influence over operating and financial policies of the privately held company. The investment was fully written off as of March 31, 2021 and no gains or losses were recorded during the nine months ended September 30, 2021. We were informed that substantially all of the assets of the privately held company were sold during the three months ended March 31, 2021 and that the privately held company is expected to be dissolved after the first anniversary of the asset sale. None of the proceeds of the sale were paid to us or other shareholders of the privately held company in respect of their stock holdings.

XML

Property and Equipment

9 Months Ended

Sep. 30, 2021

Property, Plant and Equipment [Abstract]

Property and Equipment

Property and Equipment

Property and equipment, net consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Computer equipment and software	$	79,879	$	139,147
Leasehold improvements	58,636		56,401
Furniture and fixtures	14,282		12,955
Machinery and equipment	16		160
Total property and equipment	152,813		208,663
Less: accumulated depreciation and amortization	(92,041)		(144,327)
Total property and equipment, net	$	60,772	$	64,336

Depreciation and amortization expense related to property and equipment during the three months ended September 30, 2021 and 2020 was $5.3 million and $6.0 million, respectively. Depreciation and amortization expense related to property and equipment during the nine months ended September 30, 2021 and 2020 was $21.7 million and $17.1 million, respectively.

During the three months ended September 30, 2021 and 2020, we capitalized $4.2 million and $2.2 million, respectively, of software development costs primarily related to our platform and cloud subscription offerings. Amortization expense related to capitalized software development costs during the three months ended September 30, 2021 and 2020 was $2.7 million and $2.8 million, respectively. During the nine months ended September 30, 2021 and 2020, we capitalized $13.0 million and $10.0 million, respectively, of software development costs primarily related to our platform and cloud subscription offerings. Amortization expense related to capitalized software development costs during the nine months ended September 30, 2021 and 2020 were $8.7 million and $7.5 million, respectively.

Refer to Note 7, "Restructuring Charges,'" regarding facilities-related write-offs.

XML

Business Combinations

9 Months Ended

Sep. 30, 2021

Business Combination and Asset Acquisition [Abstract]

Business Combinations

Business Combinations

Acquisition of Cloudvisory

In January 2020, we acquired Cloudvisory, a provider of cloud visibility and control solutions. As consideration for the acquisition, we paid approximately $13.2 million in cash and assumed $0.3 million in net tangible liabilities.

The acquisition of Cloudvisory was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $13.2 million was allocated using the information available to us. The results of operations of Cloudvisory have been included in our condensed consolidated statements of operations from the acquisition date. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Allocation of the purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(288)
Intangible assets	5,650
Goodwill	7,846
Total purchase price allocation	$	13,208

The purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill generated as a result of the Cloudvisory acquisition is deductible for tax purposes.

Intangible assets consist primarily of developed technology and trade name. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content. Trade name is attributable to marketing goods and services under the Cloudvisory brand.

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	5,500
Trade name	1	150
Total identifiable intangible assets		$	5,650

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 35% to determine the fair value.

The value of the trade name was estimated using the relief-from-royalty method, an income approach (Level 3), which estimates the cost savings that accrue to the owner of the intangibles asset that would otherwise be payable as royalties or license fees on revenues earned through the use of the asset. A royalty rate of 1% was applied to the projected revenues associated with the intangible asset to determine the amount of savings using a discount rate of 35% to determine the fair value.

Discount rates for each respective intangible asset were determined by accounting for the risk associated with each asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful lives were determined by evaluating the expected economic and useful lives of the assets and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Cloudvisory.

The intangible assets acquired and net tangible liability assumed in this acquisition are reported as held for sale in the condensed consolidated balance sheets. Goodwill generated by the Cloudvisory acquisition amounted to $1.8 million and was allocated to the FireEye Products business based on relative fair value and is reported as held for sale.

Acquisition of Respond Software

In November 2020, we acquired all outstanding shares of privately held Respond Software, a cybersecurity investigation automation company. The acquisition of Respond Software, a leader in automation of extended detection and response (XDR), is intended to add significant capabilities to our Mandiant Advantage platform by automating threat detection and reducing the amount of analyst time necessary to investigate threats due to the reduction in false positives as well as to accelerate Respond Software's learning models with our unique expertise and threat intelligence. In connection with this acquisition, we paid cash consideration of $116.1 million and issued 4,931,862 shares of our common stock, 694,768 of these shares were subject to vesting conditions as of December 31, 2020, of which 257,852 were canceled during the three months ended March 31, 2021 and 436,916 shares remained subject to vesting conditions as of September 30, 2021. The estimated fair value of the common stock issued and not subject to vesting conditions was $60.3 million. We also assumed unvested stock options, which are now exercisable for our common stock, of which $1.2 million of the fair value has been accounted for as consideration for assumed awards pertaining to pre-combination service prior to acquisition. Based on the above, total purchase consideration for Respond Software was $177.6 million.

The acquisition of Respond Software was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $177.6 million was allocated using the information available to us. As a result, we may continue to adjust the preliminary purchase price allocation after obtaining more information regarding asset valuations, liabilities assumed, and revisions of preliminary estimates. The results of operations of Respond Software have been included in our condensed consolidated statements of operations from the acquisition date, and revenue and net income from Respond Software were not material for the year ended December 31, 2020. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Allocation of the preliminary purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(4,551)
Intangible assets	31,880
Deferred tax liability	(949)
Goodwill	151,217
Total purchase price allocation	$	177,597

The preliminary purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill is not expected to be deductible for U.S. income tax purposes.

Intangible assets consist primarily of developed technology, in-process technology, customer relationships and trade name. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content. Customer relationship intangibles relate to Respond Software's ability to sell current and future content, as well as products built around this content, to its existing customers. Trade name is attributable to marketing goods and services under the Respond Software brand.

The estimated useful life and fair values of the identifiable intangible assets are as follows (dollars in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	5	$	22,300
In-process technology	4	2,200
Customer relationships	5	6,760
Trade name	2	620
Total identifiable intangible assets		$	31,880

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 12% to determine the fair value.

The value of in-process technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows

generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 13% to determine the fair value.

The value of customer relationships was estimated using the "with and without" version of the Income Approach, which measures the difference between cash flows generated assuming the existence of the current customer relationships and the cash flows assuming those relationships do not exist and are replaced over time. Estimated costs on projected revenues, excluding acquired contract backlog, were made using historical data pertaining to sales to new and existing customers. The cash flow impact of projected cost savings, primarily avoidance of legal costs pertaining to new customers and lower commission rates applicable to existing customers than new customers, were discounted at a rate of 11% to determine the fair value.

The value of the trade name was estimated using the relief-from-royalty method, an income approach (Level 3), which estimates the cost savings that accrue to the owner of the intangibles asset that would otherwise be payable as royalties or license fees on revenues earned through the use of the asset. A royalty rate of 1% was applied to the projected revenues associated with the intangible asset to determine the amount of savings using a discount rate of 12% to determine the fair value.

Discount rates for each respective intangible asset were determined by accounting for the risk associated with each asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful lives were determined by evaluating the expected economic and useful lives of the assets and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Respond Software.

A portion of the goodwill generated by the Respond Software acquisition was allocated to the FireEye Products business based on relative fair value and is reported as held for sale. The amount of Respond Software goodwill reported as held for sale is $34.8 million as of September 30, 2021.

Acquisition of Intrigue

On August 4, 2021, we acquired Intrigue, a privately-held company, for cash consideration of approximately $12.3 million. Intrigue's attack surface management technology will be integrated into the Mandiant Advantage platform, enabling organizations to discover, monitor and manage risk across their entire attack surface.

The acquisition of Intrigue was accounted for in accordance with the acquisition method of accounting for business combinations with Mandiant as the accounting acquirer. Under the acquisition method of accounting, the total purchase consideration is allocated to the tangible and identifiable intangible assets acquired and liabilities assumed based on their estimated fair values. The total purchase price of $12.3 million was allocated using the information available to us. The results of operations of Intrigue have been included in our condensed consolidated statements of operations from the acquisition date, though revenue and net income from Intrigue were not material for the three and nine months ended September 30, 2021. Transaction costs were immaterial and expensed as incurred. Pro forma financial information has not been presented for this acquisition as the impact to our condensed consolidated financial statements was not material. Preliminary allocation of the purchase price is as follows (in thousands):

	Amount
Net tangible assets acquired	$	143
Intangible assets	3,400
Deferred tax liability	(513)
Goodwill	9,230
Total preliminary purchase price allocation	$	12,260

The purchase price exceeded the fair value of the net tangible liabilities assumed and identifiable intangible assets acquired, resulting in the recognition of goodwill. Goodwill is primarily attributable to expected synergies in our subscription offerings and cross-selling opportunities. The goodwill generated as a result of the Intrigue acquisition is not deductible for tax purposes.

Intangible assets consist primarily of developed technology. Intangible assets attributable to developed technology include a combination of patented and unpatented technology, trade secrets, computer software and research processes that represent the foundation for the existing and planned new products to facilitate the generation of new content.

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	3,400
Total identifiable intangible assets		$	3,400

The value of developed technology was estimated using the excess earnings method, an income approach (Level 3), which converts projected revenues and costs into cash flows. To reflect the fact that certain other assets contribute to the cash flows generated, the returns for these contributory assets were removed to arrive at estimated cash flows solely attributable to the acquired technology, which were discounted at a rate of 40% to determine the fair value.

The discount rate was determined by accounting for the risk associated with the asset, including required technology development necessary to support respective projections, the uncertainty of market success and the risk inherent with projected financial results. The estimated useful life was determined by evaluating the expected economic and useful lives of the asset and of similar intangible assets from previous business combinations and adjusting accordingly for circumstances that may be unique to Intrigue.

Goodwill and Purchased Intangible Assets

Goodwill and purchased intangible assets held for sale pursuant to our agreement to sell the FireEye Products business to a consortium led by STG were included in assets held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, are excluded from the amounts shown in the tables below.

An initial amount of $9.2 million was recorded to goodwill as a result of the Intrigue acquisition. Goodwill decreased by a net of $0.2 million due to tax adjustments to the goodwill balance of Respond Software for the nine months ended September 30, 2021. There were no other changes to the carrying amount of goodwill.

Purchased intangible assets consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Developed technology	$	150,893	$	147,493
Content	158,700		158,700
Customer relationships	112,360		112,360
Contract backlog	13,200		13,200
Trade names	17,720		17,720
Non-competition agreements	1,100		1,100
Total intangible assets	453,973		450,573
Less: accumulated amortization	(363,258)		(330,018)
Total net intangible assets	$	90,715	$	120,555

Amortization expense of intangible assets during the three months ended September 30, 2021 and 2020 was $11.1 million and $10.0 million, respectively. Amortization expense of intangible assets during the nine months ended September 30, 2021 and 2020 was $33.2 million and $30.4 million, respectively.

The expected future annual amortization expense of intangible assets as of September 30, 2021 is presented below (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	11,204
2022	34,439
2023	29,421
2024	10,566
2025	5,085
Total	$	90,715

XML

Restructuring Charges

9 Months Ended

Sep. 30, 2021

Restructuring and Related Activities [Abstract]

Restructuring Charges

Restructuring Charges

The following table sets forth the restructuring balance as of September 30, 2021 related to previous restructuring activities and a summary of restructuring activities during the nine months ended September 30, 2021 (in thousands):

	Severance and related costs		Facilities costs		Total costs
Balance, December 31, 2020	$	570	$	478	$	1,048
Provision for restructuring charges	1,898		—		1,898
Cash payments	(2,168)		(360)		(2,528)
Other adjustments	(249)		11		(238)
Balance, September 30, 2021	$	51	$	129	$	180

The remainder of the restructuring balance of $0.2 million at September 30, 2021 is composed of $0.1 million of non-cancelable non-lease costs which we expect to pay over the terms of the related obligations through the first quarter of 2022 and $0.1 million of severance costs.

XML

Leases

9 Months Ended

Sep. 30, 2021

Leases [Abstract]

Leases

Leases

We have operating leases primarily for corporate offices. Our leases have remaining lease terms of one to eleven years, some of which include options to extend the leases for up to five years, and some of which include options to terminate within one year.

Operating leases held for sale related to our discontinued operations were included in assets and liabilities held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, are excluded from the amounts shown in the tables below.

The components of lease expenses were as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Operating lease costs	$	3,256	$	10,039
Short-term lease costs	493		1,175
Sublease income	(148)		(592)
Total net lease costs	$	3,601	$	10,622

Supplemental balance sheet information related to leases is as follows (in thousands, except lease term and discount rate):

	As of September 30, 2021
Operating leases:
Operating lease right-of-use assets, net	$	35,550
Operating lease liabilities, current	$	13,567
Operating lease liabilities, non-current	54,571
Total operating lease liabilities	$	68,138
Weighted average remaining lease term (in years)	6.9
Weighted average discount rate	6.0		%

Supplemental cash flow and other information related to leases is as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Cash paid for amounts included in the measurement of lease liabilities:
Operating cash flows from operating leases	$	3,951	$	13,278
Lease liabilities arising from obtaining right-of-use assets:
Operating leases	$	—	$	11,683

Cash flows of operating lease liabilities are as follows (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	2,894
2022	14,600
2023	12,914
2024	11,409
2025	10,626
2026	10,595
2027 and thereafter	20,250
Total lease payments	83,288
Less: imputed interest	(15,150)
Total lease obligations	68,138
Less: current lease obligations	(13,567)
Long-term lease obligations	$	54,571

As of September 30, 2021, we did not have any additional operating lease commitments for office leases that have not yet commenced.

XML

Deferred Revenue

9 Months Ended

Sep. 30, 2021

Revenue from Contract with Customer [Abstract]

Deferred Revenue

Deferred Revenue

Deferred revenue held for sale related to our discontinued operations was included in liabilities held for sale in our condensed consolidated balance sheets as of September 30, 2021 and December 31, 2020, and accordingly, is excluded from the amounts shown in the tables below.

Deferred revenue consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Platform, cloud subscription and managed services, current	$	136,273	$	126,086
Professional services, current	111,867		100,270
Total deferred revenue, current	248,140		226,356
Platform, cloud subscription and managed services, non-current	65,275		56,691
Professional services, non-current	1,261		1,206
Total deferred revenue, non-current	66,536		57,897
Total deferred revenue	$	314,676	$	284,253

Changes in the balance of deferred revenue for the periods presented are as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Deferred revenue, beginning of period	$	297,326	$	244,084	$	284,253	$	273,241
Billings for the period	139,320		99,591		380,991		259,818
Revenue recognized	(121,970)		(100,052)		(350,568)		(289,436)
Deferred revenue, end of period	$	314,676	$	243,623	$	314,676	$	243,623

Remaining Performance Obligations

Transaction price allocated to remaining performance obligations for continuing operations represents contracted revenue that has not yet been recognized, which includes deferred revenue and non-cancelable contracts that will be invoiced and recognized as revenue in future periods ("backlog"). While deferred revenue is recorded on our balance sheet as a liability, backlog is not recorded in revenue, deferred revenue or elsewhere in our consolidated financial statements until we establish a contractual right to invoice, at which point it is recorded as revenue or deferred revenue as appropriate. As of September 30, 2021, the aggregate amount of the transaction price allocated to remaining performance obligations was $314.7 million in deferred revenue and $11.1 million in backlog.

We expect that the amount of backlog relative to the total value of our contracts will change from year to year due to several factors, including the amount invoiced early in the contract term, the timing and duration of customer agreements, varying invoicing cycles of agreements and changes in customer financial circumstances. Accordingly, we believe that fluctuations in backlog are not always a reliable indicator of future revenues and we do not utilize backlog internally as a key management metric.

We expect to recognize these remaining performance obligations as follows (in percentages):

	Total	Less than 1 year	1-2 years	2-3 years	More than 3 years
Deferred revenue	100%	79%	14%	6%	1%
Backlog	100%	48%	30%	20%	2%

XML

Convertible Senior Notes

9 Months Ended

Sep. 30, 2021

Debt Disclosure [Abstract]

Convertible Senior Notes

Convertible Senior Notes

Convertible Senior Notes due 2024

On May 24, 2018, we issued $525.0 million aggregate principal amount of 0.875% Convertible Senior Notes due 2024 (the "2024 Notes") in a private placement to qualified institutional purchasers pursuant to an exemption from registration provided by Section 4(a)(2) and Rule 144A under the Securities Act of 1933, as amended (the "Securities Act"). In addition, on June 5, 2018, we issued an additional $75.0 million aggregate principal amount of the 2024 Notes pursuant to the full exercise of the initial purchasers' option to purchase additional 2024 Notes, in a private placement exempt from the registration requirements of the Securities Act. The net proceeds from the offerings, after deducting the initial purchasers' discount of approximately $15.0 million and the issuance costs of approximately $0.6 million, were $584.4 million. We used (i) approximately $330.4 million of the net proceeds to repurchase approximately $340.2 million in aggregate principal amount outstanding of the Series A Notes (as defined below) in negotiated transactions with institutional investors and (ii) approximately $65.2 million of the net proceeds from the offering of the 2024 Notes to enter into capped call transactions (the "Capped Calls").

The 2024 Notes are unsecured obligations and rank senior in right of payment to any of our indebtedness that is expressly subordinated in right of payment to the 2024 Notes. They rank equally in right of payment with all of our existing and future liabilities that are not expressly subordinated to the 2024 Notes, including the Series A Notes and the Series B Notes (as defined below); and effectively rank junior in right of payment to any of our secured indebtedness to the extent of the value of the assets securing such indebtedness. The 2024 Notes are structurally junior to all indebtedness and other liabilities (including trade payables) of our subsidiaries.

The 2024 Notes do not contain any financial covenants and do not restrict us from paying dividends or issuing or repurchasing other securities.

The 2024 Notes bear interest at 0.875% per year, payable semiannually in arrears on June 1 and December 1 of each year. The 2024 Notes mature on June 1, 2024, unless earlier repurchased, redeemed or converted.

The initial conversion rate of the 2024 Notes is 43.1667 shares of our common stock per $1,000 of principal amount of the 2024 Notes, which is equivalent to an initial conversion price of approximately $23.17 per share of common stock. The conversion rate of the 2024 Notes may be adjusted pursuant to the terms of the indenture governing the 2024 Notes upon the occurrence of certain specified events, but not for accrued and unpaid interest.

Holders may convert the 2024 Notes at their option in multiples of $1,000 principal amount prior to the business day preceding March 1, 2024, only under the following circumstances:

•during any calendar quarter (and only during such calendar quarter), if the last reported sale price of the common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the conversion price of the 2024 Notes on each applicable trading day;

•during the five business day period after any five consecutive trading day period (the "measurement period") in which the trading price per $1,000 principal amount of the 2024 Notes for each trading day of the measurement period was less than 98% of the product of the last reported sale price of our common stock and the conversion rate for the notes on each such trading day;

•if we call any or all of the 2024 Notes for redemption, at any time prior to the close of business on the scheduled trading day immediately preceding the relevant redemption date; or

•upon the occurrence of specified corporate events, as specified in each indenture governing the 2024 Notes.

Regardless of the foregoing conditions, holders may convert their 2024 Notes at their option in multiples of $1,000 principal amount during the period from, and including, March 1, 2024 to the close of business on the second scheduled trading day immediately preceding the maturity date. Upon conversion, the 2024 Notes can be settled in cash, shares of our common stock or any combination of cash and shares of common stock at our option.

Holders may also require us to repurchase the 2024 Notes if we undergo a "fundamental change," as defined in each indenture governing the 2024 Notes, at a repurchase price equal to 100% of the principal amount, plus accrued and unpaid interest to, but excluding, the fundamental change repurchase date.

Additionally, we may redeem for cash all or any portion of the 2024 Notes, if the last reported sale price of our common stock has been at least 130% of the conversion price of the 2024 Notes then in effect for at least 20 trading days (whether or not consecutive) during any 30 consecutive trading day period (including the last trading day of such period) immediately preceding the date on which we provide notice of redemption at a redemption price equal to 100% of the principal amount of the notes to be redeemed, plus any accrued and unpaid interest to, but excluding, the redemption date.

As of September 30, 2021, none of the conditions permitting holders to convert their 2024 Notes had been satisfied and no shares of our common stock had been issued in connection with any conversions of the 2024 Notes. Based on the closing price of our common stock of $17.80 per share on September 30, 2021, the conversion value of the 2024 Notes was less than the principal amount of the 2024 Notes outstanding on a per 2024 Note basis.

In accordance with accounting for debt with conversions and other options, we bifurcated the principal amount of the 2024 Notes into liability and equity components. The initial liability component of the 2024 Notes was valued at $458.3 million based on the contractual cash flows discounted at an appropriate comparable market non-convertible debt borrowing rate at the date of issuance of 5.5% with the equity component representing the residual amount of the proceeds of $141.7 million, which was recorded as a debt discount. Issuance costs were allocated pro rata based on the relative initial carrying amounts of the liability and equity components. As a result, transaction costs of $0.5 million and $0.1 million and initial purchasers' discount of $11.5 million and $3.5 million were attributable to the liability component and equity component of the 2024 Notes, respectively. The debt discount and the issuance costs allocated to the liability component are amortized as additional interest expense over the term of the 2024 Notes using the effective interest method as noted in the table below.

The liability and equity components of the 2024 Notes consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
	2024 Notes		2024 Notes
Liability component:
Principal	$	600,000	$	600,000
Less: 2024 Notes discounts and issuance costs, net of amortization	(73,703)		(92,750)
Net carrying amount	$	526,297	$	507,250
Equity component, net of issuance costs	$	138,064	$	138,064

The unamortized issuance costs as of September 30, 2021 will be amortized over a weighted-average remaining period of approximately 2.7 years.

Interest expense related to the 2024 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30,						Nine Months Ended September 30,
	2021			2020			2021			2020
	2024 Notes			2024 Notes			2024 Notes			2024 Notes
Coupon interest	$	1,313		$	1,313		$	3,938		$	3,938
Amortization of 2024 Notes discounts and issuance costs	6,427			6,119			19,047			18,133
Total interest expense recognized	$	7,740		$	7,432		$	22,985		$	22,071
Effective interest rate on the liability component	6.0		%	6.0		%	6.0		%	6.1		%

In connection with the 2024 Notes offering, we entered into the Capped Calls with certain counterparties affiliated with the initial purchasers of the 2024 Notes. The Capped Calls are expected to reduce potential dilution of earnings per share upon conversion of the 2024 Notes, and have an initial strike price of $23.17 per share, which corresponds to the initial conversion price of the 2024 Notes

and which have a cap price of $34.32 per share. The Capped Calls do not meet the criteria for separate accounting as a derivative as they are indexed to our own stock and are accounted for as freestanding financial instruments. The premiums paid for the purchase of the Capped Calls in the amount of $65.2 million have been recorded as a reduction of the Company's additional paid-in capital in stockholder's equity in the accompanying condensed consolidated financial statements and fair values of the Capped Calls are not re-measured at each reporting period.

Convertible Senior Notes due 2035

In June 2015, we issued $460.0 million principal amount of 1.000% Convertible Senior Notes due 2035 (the "Series A Notes") and $460.0 million principal amount of 1.625% Convertible Senior Notes due 2035 (the “Series B Notes” and together with the Series A Notes, the "2035 Notes", and the 2035 Notes, together with the 2024 Notes, the "Convertible Senior Notes") in a private placement to qualified institutional purchasers pursuant to an exemption from registration provided by Section 4(a)(2) and Rule 144A under the Securities Act. The net proceeds after the initial purchasers' discount of $23.0 million and issuance costs of $0.5 million from the 2035 Notes were $896.5 million. The Series A Notes and Series B Notes bear interest at 1.000% per year and 1.625% per year, respectively, payable semiannually in arrears on June 1 and December 1 of each year. The 2035 Notes mature on June 1, 2035, unless earlier repurchased, redeemed or converted.

The 2035 Notes are unsecured obligations and rank senior in right of payment to any of our indebtedness that is expressly subordinated in right of payment to the 2035 Notes. They rank equally in right of payment with all of our existing and future liabilities that are not expressly subordinated to the 2035 Notes and effectively rank junior in right of payment to any of our secured indebtedness to the extent of the value of the assets securing such indebtedness. They are structurally junior to all indebtedness and other liabilities (including trade payables) of our subsidiaries.

The 2035 Notes do not contain any financial covenants and do not restrict us from paying dividends or issuing or repurchasing our other securities.

The initial conversion rate on each series of 2035 Notes is 16.4572 shares of our common stock per $1,000 principal amount of 2035 Notes, which is equivalent to an initial conversion price of approximately $60.76 per share of common stock. The conversion rate of each series of 2035 Notes may be adjusted upon the occurrence of certain specified events, but not for accrued and unpaid interest.

Holders may convert the 2035 Notes at their option in multiples of $1,000 principal amount prior to March 1, 2035, only under the following circumstances:

•during any calendar quarter (and only during such calendar quarter), if the last reported sale price of the common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the conversion price for the 2035 Notes of the relevant series on each applicable trading day;

•during the five business day period after any five consecutive trading day period in which the trading price per $1,000 principal amount of Series A Notes or Series B Notes, as applicable, for each trading day of the measurement period was less than 98% of the product of the last reported sale price of our common stock and the conversion rate for the notes of the relevant series on each such trading day;

•if we call any or all of the 2035 Notes of a series for redemption, at any time prior to the close of business on the scheduled trading day immediately preceding the relevant redemption date; or

•upon the occurrence of specified corporate events, as specified in each indenture governing the 2035 Notes.

Regardless of the foregoing conditions, holders may convert their 2035 Notes at their option in multiples of $1,000 principal amount at any time after March 1, 2035 until maturity for either series of 2035 Notes. Upon conversion, the 2035 Notes can be settled in cash, shares of our common stock or any combination thereof at our option.

We may be required by holders of the 2035 Notes to repurchase all or any portion of their 2035 Notes at 100% of the principal amount plus accrued and unpaid interest, on each of June 1, 2025 and June 1, 2030, in the case of the Series A Notes, and each of June 1, 2022, June 1, 2025 and June 1, 2030 in the case of the Series B Notes. Holders may also require us to repurchase the 2035 Notes if we undergo a "fundamental change," as defined in each indenture governing the 2035 Notes, at a purchase price equal to 100% of the principal amount, plus accrued and unpaid interest.

Additionally, we may redeem for cash all or any portion of the Series B Notes at any time prior to June 1, 2022 if the last reported sale price of our common stock has been at least 130% of the conversion price then in effect for at least 20 trading days (whether or not consecutive) during any 30 consecutive trading day period (including the last trading day of such period) ending not more than three trading days immediately preceding the date we provide notice of redemption. We also may redeem for cash all or any portion of the Series A Notes at any time prior to maturity and all or any portion of the Series B Notes on or after June 1, 2022 until maturity, regardless of the foregoing sale price condition.

In accordance with accounting for debt with conversions and other options, we allocated the principal amount of the 2035 Notes into liability and equity components. We also allocated the total amount of initial purchasers' discount and transaction costs incurred to the liability and equity components using the same proportions as the proceeds from the 2035 Notes. Transaction costs of $0.4 million and $0.1 million and initial purchasers' discount of $17.6 million and $5.4 million were attributable to the liability component and equity component of the 2035 Notes, respectively.

Repurchase of a portion of the Series A Notes

In May 2018, we used approximately $330.4 million of the net proceeds from the offering of the 2024 Notes to repurchase $340.2 million aggregate principal amount of the Series A Notes. The repurchase was accounted for as a partial extinguishment of the Series A Notes. The consideration of approximately $330.4 million used to repurchase the Series A Notes was allocated between the liability and equity components of the amount extinguished by determining the fair value of the liability component immediately prior to the debt extinguishment and allocating that portion of the repurchase price to the liability component in the amount of $317.4 million. The residual of the repurchase price of $13.0 million was allocated to the equity component of the Series A Notes as a reduction of additional paid-in capital. The fair value of the debt extinguished was calculated using a discount rate of 4.5%, representing an estimate of the Company's borrowing rate at the date of repurchase with a remaining expected life of two years. As part of the repurchase, we wrote-off a portion of the unamortized debt issuance cost apportioned to the principal amount of Series A Notes repurchased. We also recorded a loss on partial extinguishment of the Series A Notes of $10.8 million in Other Expense, net, representing the difference between the consideration attributed to the liability component and the sum of the net carrying amount of the liability component and unamortized costs.

In June 2020, the Company delivered a notice to the holders of Series A Notes to notify such holders of their option to require the Company to repurchase their Series A Notes on June 1, 2020. Holders representing $96.4 million aggregate principal amount of Series A Notes chose to exercise their option to require the Company to repurchase their Series A Notes. The repurchase was accounted for as a partial extinguishment of the Series A Notes. The consideration of approximately $96.4 million was used to repurchase the Series A Notes. The fair value of the debt extinguished was deemed to be the same as the par value of $96.4 million and no gain or loss was recognized.

As of September 30, 2021, $23.4 million aggregate principal amount of the Series A Notes remained outstanding.

The liability and equity components of the remaining portion of 2035 Notes consisted of the following (in thousands):

	As of September 30, 2021				As of December 31, 2020
	Series A Notes		Series B Notes		Series A Notes		Series B Notes
Liability component:
Principal	$	23,436	$	460,000	$	23,436	$	460,000
Less: 2035 Notes discount and issuance costs, net of amortization	—		(14,268)		—		(29,790)
Net carrying amount	$	23,436	$	445,732	$	23,436	$	430,210
Equity component, net of issuance costs	$	15,559	$	117,834	$	15,559	$	117,834

The unamortized discounts and issuance costs as of September 30, 2021 will be amortized over a weighted-average remaining period of approximately 0.7 years.

Interest expense for the three and nine months ended September 30, 2021 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2021						Nine Months Ended September 30, 2021
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	176		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			5,235			—			15,523
Total interest expense recognized	$	59		$	7,104		$	176		$	21,129
Effective interest rate on the liability component	1.0		%	6.5		%	1.0		%	6.5		%

Interest expense for the three and nine months ended September 30, 2020 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2020						Nine Months Ended September 30, 2020
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	577		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			4,994			2,540			14,806
Total interest expense recognized	$	59		$	6,863		$	3,117		$	20,412
Effective interest rate on the liability component	1.0		%	6.5		%	3.5		%	6.6		%

Prepaid Forward Stock Purchase

In connection with the issuance of the 2035 Notes, we also entered into privately negotiated prepaid forward transactions (the "Prepaid Forwards") with one of the initial purchasers of the 2035 Notes (the "Forward Counterparty"), pursuant to which we paid approximately $150.0 million. The amount of the Prepaid Forward entered into in connection with the issuance of the Series A Notes was equivalent to approximately 1.6 million shares which was settled on June 3, 2020. The amount of the Prepaid Forward entered into in connection with the issuance of the Series B Notes was equivalent to approximately 1.8 million shares which is to be settled on or around June 1, 2022, subject to any early settlement, in whole or in part, of such Prepaid Forward. Such Prepaid Forward is intended to facilitate privately negotiated derivative transactions by which investors in the Series B Notes will be able to hedge their investment in the Series B Notes. In the event we pay any cash dividends on our common stock, the Forward Counterparty will pay an equivalent amount back to us.

The related shares were accounted for as a repurchase of common stock, and are presented as Treasury Stock in the unaudited condensed consolidated balance sheets. On June 3, 2020, we retired approximately 1.6 million shares delivered under the Prepaid Forward entered into in connection with the issuance of the Series A Notes. The remaining approximately 1.8 million shares of common stock purchased under the Prepaid Forward entered into in connection with the issuance of the Series B Notes are excluded from weighted-average shares outstanding for basic and diluted EPS purposes although they remain legally outstanding.

XML

Commitments and Contingencies

9 Months Ended

Sep. 30, 2021

Commitments and Contingencies Disclosure [Abstract]

Commitments and Contingencies

Commitments and Contingencies

Letters of Credit

We were party to letters of credit totaling $3.4 million and $3.9 million as of September 30, 2021 and December 31, 2020, respectively, issued primarily in support of operating leases for our facilities. These letters of credit are collateralized by a line with our bank. No amounts have been drawn against these letters of credit.

Purchase Obligations

As of September 30, 2021, we had approximately $26.1 million of non-cancelable firm purchase commitments primarily for purchases of software and services. In situations where we have received delivery of the goods or services as of September 30, 2021 under purchase orders outstanding as of the same date, such amounts are reflected in the condensed consolidated balance sheet as accounts payable or accrued liabilities and are excluded from the $26.1 million.

Litigation

From time to time, we are involved in claims and legal proceedings that arise in the ordinary course of business. Any claims or proceedings against us, whether meritorious or not, could be time consuming, result in costly litigation, require significant amounts of management time, result in the diversion of significant operational resources, or require us to enter into agreements which may not be available on terms favorable to us or at all.

On November 3, 2021, an alleged shareholder filed an action against the Company and its board of directors, alleging a violation of Delaware General Corporation Law Sec. 271 and breaches of fiduciary duty in connection with sale of the FireEye Products business. The lawsuit seeks a declaratory judgment, a shareholder vote, and attorneys’ fees, as well as other relief. The action was filed in the Court of Chancery of the State of Delaware under the caption Altieri v. Mandiant, Inc., et al., No. 2021-0946. Based on information currently available, the Company has determined that the amount of any possible loss or range of possible loss is not reasonably estimable.

To the extent there is a reasonable possibility that a loss exceeding amounts already recognized may be incurred, and the amount of such additional loss would be material, we will either disclose the estimated additional loss or state that such an estimate cannot be

made. We do not currently believe that it is reasonably possible that additional losses in connection with litigation arising in the ordinary course of business would be material.

Indemnification

Under the indemnification provisions of our standard sales related contracts, we agree to defend our customers against third-party claims asserting infringement of certain intellectual property rights, which may include patents, copyrights, trademarks, or trade secrets, and to pay judgments entered on such claims. Our exposure under these indemnification provisions is generally limited to the total amount paid by our customer under the agreement. However, certain agreements include indemnification provisions that could potentially expose us to losses in excess of the amount received under the agreement. In addition, we indemnify our officers, directors, and certain key employees for actions taken while they are or were serving in good faith in such capacities. Through September 30, 2021, there have been no claims under any indemnification provisions.

XML

Redeemable Convertible Preferred Stock

9 Months Ended

Sep. 30, 2021

Temporary Equity [Abstract]

Redeemable Convertible Preferred Stock

Redeemable Convertible Preferred Stock

On November 18, 2020, we entered into the Series A Securities Financing Agreements. Pursuant to the Series A Securities Financing Agreements, on December 11, 2020 we issued and sold 400,000 shares of a newly designated 4.5% Series A Convertible Preferred Stock (“Series A Preferred Stock”), at a price of $1,000 per share, for an aggregate purchase price of $400.0 million. We intend to use the net proceeds from the issuance and sale to fund acquisitions, buybacks of our common stock, and for working capital purposes.

Each share of Series A Preferred Stock has the powers, designations, preferences, and other rights of the shares of such series as are set forth in the Certificate of Designations of the Series A Preferred Stock filed by us with the Secretary of State of the State of Delaware on December 11, 2020 (the “Certificate of Designations”).

The Series A Preferred Stock ranks senior to our common stock, with respect to dividend rights and rights upon the voluntary or involuntary liquidation, dissolution, or winding up of our affairs (a “Liquidation”). Upon a Liquidation, each share of Series A Preferred Stock is entitled to receive an amount per share equal to the greater of (i) the purchase price paid by the Purchaser, plus all accrued and unpaid dividends and (ii) the amount that the holder of Series A Preferred Stock (each, a “Holder” and collectively, the “Holders”) would have been entitled to receive at such time if the Series A Preferred Stock were converted into our common stock (the “Liquidation Preference”). The initial purchase price of the Series A Preferred Stock is $1,000 per share (the “Original Purchase Price”). The Holders are entitled to dividends on the Original Purchase Price paid by the Purchaser at the rate of 4.5%, cumulatively, per annum that (i) for the first three years after December 11, 2020 will be paid in-kind, and (ii) after the third anniversary of December 11, 2020, will, at our election either be paid in cash, or, if not, will accrue and accumulate, in each case, accruing daily and paid quarterly in arrears. The Holders are also entitled to participate in dividends declared or paid on our common stock on an as-converted basis.

The Holder has the right, at its option, to convert its Series A Preferred Stock, in whole or in part, into fully paid and non-assessable shares of our common stock at a conversion price equal to $17.25 per share subject to certain customary adjustments in the event of certain adjustments to our common stock. The conversion price was equal to $17.25 per share as of September 30, 2021. After the third anniversary of December 11, 2020, subject to certain conditions, we may, at our option, require conversion of all of the outstanding shares of Series A Preferred Stock to Common Stock if, for at least 20 trading days during the 30 consecutive trading days immediately preceding the date we notify the Holders of the election to convert, the closing price of our common stock is at least 175% of the conversion price.

After the seventh anniversary of December 11, 2020, each Holder shall have the right to require us to redeem all or any part of the Holder’s Series A Preferred Stock for cash at a price equal to the Original Purchase Price paid by the Purchaser plus any accrued and unpaid dividends. Upon a “Fundamental Change” (involving a change of control, bankruptcy, insolvency, liquidation or de-listing as further described in the Certificate of Designations), each Holder shall have the right to require us to redeem all or any part of the Holder’s Series A Preferred Stock for an amount equal to the Liquidation Preference at a repurchase price calculated in accordance with the Certificate of Designations plus any accrued and unpaid dividends.

The Holders are generally entitled to vote with the holders of the shares of our common stock on all matters submitted for a vote of holders of shares of our common stock (voting together with the holders of shares of our common stock as one class) on an as-converted basis, subject to certain Nasdaq voting limitations, if applicable. Additionally, the consent of the Holders of a majority of the outstanding shares of Series A Preferred Stock is required for so long as any shares of the Series A Preferred Stock remain outstanding for (i) amendments to our organizational documents that have an adverse effect on the holders of Series A Preferred Stock and (ii) issuances by us of securities that are senior to, or equal in priority with, the Series A Preferred Stock. In addition, for so long as 25% of the Series A Preferred Stock issued in connection with the Financing Agreements remains outstanding, consent of the Holders of a majority of the outstanding shares of Series A Preferred Stock is required for (i) any change to the size of our Board of

Directors, (ii) any voluntary dissolution, liquidation, bankruptcy, winding up or deregistration or delisting and (iii) incurrence by us of net debt in excess of $350,000,000.

We have applied the guidance in ASC 480‑10‑S99‑3A, SEC Staff Announcement: Classification and Measurement of Redeemable Securities and have therefore classified the Series A Preferred Stock as mezzanine equity. The Series A Preferred Stock was recorded outside of stockholders’ deficit because it is probable that the shares will be redeemed at the option of the Holders and that redemption option is not solely within the Company's control. Upon issuance, we elected to record the Series A Preferred Stock at redemption value. As such, we recognized $0.1 million and $4.7 million of accretion as of September 30, 2021 and December 31, 2020, respectively.

We accrued $13.7 million of dividends on the Series A Preferred Stock during the nine months ended September 30, 2021. The cumulative dividend accrued on the Series A Preferred Stock as of September 30, 2021 was $14.7 million. Accrued dividends are recorded against additional paid-in capital due to the Company being in an accumulated deficit position.

XML

Common Shares Reserved for Issuance

9 Months Ended

Sep. 30, 2021

Equity [Abstract]

Common Shares Reserved for Issuance

Common Shares Reserved for Issuance

Under our amended and restated certificate of incorporation, we are authorized to issue 100,000,000 shares of convertible preferred stock with a par value of $0.0001 per share, of which 400,000 shares of Series A Preferred Stock were issued and outstanding as of September 30, 2021 and December 31, 2020.

Under our amended and restated certificate of incorporation, we are authorized to issue 1,000,000,000 shares of common stock with a par value of $0.0001 per share as of September 30, 2021 and December 31, 2020. Each share of common stock outstanding is entitled to one vote. The holders of common stock are also entitled to receive dividends whenever funds are legally available and when declared by our Board of Directors, subject to the prior rights of holders of all classes of convertible preferred stock outstanding.

We had reserved shares of common stock for issuance as follows (in thousands):

	As of September 30, 2021	As of December 31, 2020
Reserved under stock award plans	41,923	38,745
Convertible senior notes	33,856	33,856
Convertible preferred stock	24,043	23,249
Employee Stock Purchase Plan (ESPP)	4,684	3,425
Total	104,506	99,275

XML

Equity Award Plans

9 Months Ended

Sep. 30, 2021

Share-based Payment Arrangement [Abstract]

Equity Award Plans

Equity Award Plans

We have operated under our 2013 Equity Incentive Plan ("2013 Plan") since our initial public offering ("IPO") in September 2013. Our 2013 Plan provides for the issuance of restricted stock and the granting of options, stock appreciation rights, performance shares, performance units and restricted stock units to our employees, officers, directors and consultants. Our 2013 Plan provides for annual increases in the number of shares available for issuance on the first day of each fiscal year. Awards granted under the 2013 Plan vest over the periods determined by our Board of Directors or compensation committee of our Board of Directors, generally four years, and stock options granted under the 2013 Plan expire no more than ten years after the date of grant. In the case of an incentive stock option granted to an employee who at the time of grant owns stock representing more than 10% of the total combined voting power of all classes of stock, the exercise price shall be no less than 110% of the fair value per share on the date of grant, and the award shall expire five years from the date of grant. For options granted to any other employee, the per share exercise price shall be no less than 100% of the fair value per share on the date of grant. In the case of non-statutory stock options and options granted to consultants, the per share exercise price shall be no less than 100% of the fair value per share on the date of grant. Approximately 13.8 million shares and 14.9 million shares of our common stock were reserved for future grants as of September 30, 2021 and December 31, 2020, respectively, under the 2013 Plan.

Our 2013 Employee Stock Purchase Plan ("ESPP") allows eligible employees to acquire shares of our common stock at 85% of the lower of the fair market value of our common stock on the first trading day of each offering period or on the exercise date. Our ESPP provides for annual increases in the number of shares available for issuance on the first day of each fiscal year. An aggregate of approximately 4.7 million shares and 3.4 million shares of common stock were available for future issuance as of September 30, 2021 and December 31, 2020, respectively, under our ESPP.

From time to time, we also grant restricted common stock or restricted stock awards outside of our equity incentive plans to certain employees in connection with acquisitions.

Stock Option Activity

A summary of the activity, for continuing and discontinued operations, for our stock option changes during the reporting period and a summary of information related to options outstanding and options exercisable are presented below (in thousands, except per share amounts and contractual life years):

	Options Outstanding
	Number of Shares	Weighted- Average Exercise Price (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Balance — December 31, 2020	3,485	$	8.33	5.3	$	60,679
Exercised	(913)	4.76			13,972
Cancelled	(99)	29.39
Balance — September 30, 2021	2,473	8.81		5.0	31,100
Options exercisable — September 30, 2021	1,642	$	12.05	3.6	$	18,311

The aggregate intrinsic value above represents the pre-tax difference between the exercise price of stock options and the quoted market price of our stock on that day for all in-the-money stock options.

Restricted Stock Award ("RSA") and Restricted Stock Unit ("RSU") Activity

A summary of the activity, for continuing and discontinued operations, for our restricted common stock, RSAs and RSUs during the reporting periods and a summary of information related to unvested restricted common stock, RSAs and RSUs, including those expected to vest based on the achievement of a performance condition, are presented below (in thousands, except per share amounts and contractual life years):

	Number of Shares	Weighted- Average Grant Date Fair Value (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Unvested balance — December 31, 2020	20,400	$	15.35	1.4	$	470,424
Granted	16,045	20.62
Vested	(8,135)	15.71
Cancelled	(2,616)	17.23
Unvested balance — September 30, 2021	25,694	18.39		1.6	457,355
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition — September 30, 2021	2,748	$	18.69	1.6	$	48,907

Stock-Based Compensation

We record stock-based compensation based on the fair value as determined on the date granted. We determine the fair value of stock options and shares of common stock to be issued under our ESPP using the Black-Scholes option-pricing model. The fair value of restricted stock units and restricted stock awards equals the market value of the underlying stock on the date of grant. We grant performance-based restricted stock units and restricted stock awards to certain employees which vest upon the achievement of certain performance conditions, subject to the employees’ continued service relationship with us. With respect to performance-based restricted stock units, we assess the probability of vesting at each reporting period and adjust our compensation cost based on this probability assessment. We recognize such compensation expense on a straight-line basis over the service providers' requisite service period.

The following table summarizes the assumptions used in the Black-Scholes option-pricing model to determine fair value of our common shares to be issued under the ESPP for the offering periods beginning in May 2020:

	Three and Nine Months Ended September 30, 2021	Three and Nine Months Ended September 30, 2020
Fair value of common stock	$22.33	$13.06
Risk-free interest rate	0.04%	0.17% - 0.18%
Expected term (in years)	0.5 - 1.0	0.5 - 1.0
Volatility	55% - 62%	52% - 68%
Sounds	—%	—%

Stock-based compensation expense related to stock options, ESPP and restricted stock unit awards, relating to continuing operations, is included in the condensed consolidated statements of operations as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Cost of platform, cloud subscription and managed services revenue	$	3,451	$	2,667	$	9,752	$	7,532
Cost of professional services revenue	6,253		4,722		17,574		12,470
Research and development	9,644		6,232		27,387		16,598
Sales and marketing	10,176		9,706		31,605		26,749
General and administrative	9,598		5,952		24,948		18,439
Total	$	39,122	$	29,279	$	111,266	$	81,788

As of September 30, 2021, total compensation cost related to stock-based awards not yet recognized was $419.0 million, which is expected to be amortized on a straight-line basis over the weighted-average remaining vesting period of approximately 2.7 years.

XML

Income Taxes

9 Months Ended

Sep. 30, 2021

Income Tax Disclosure [Abstract]

Income Taxes

Income Taxes

We account for income taxes under the asset and liability method. Under this method, deferred income tax assets and liabilities are determined based upon the difference between the financial statement carrying amounts and the tax basis of assets and liabilities and are measured using the enacted tax rate expected to apply to taxable income in the years in which the differences are expected to be reversed.

We recognized a provision for income taxes of $0.5 million and $0.5 million for the three months ended September 30, 2021 and 2020, respectively. We recognized a provision for income taxes of $2.4 million and $1.5 million for the nine months ended September 30, 2021 and 2020, respectively. The provision for income taxes was primarily comprised of income taxes in foreign jurisdictions and withholding taxes, offset by tax benefits from business combinations.

On March 27, 2020, the Coronavirus Aid, Relief and Economic Security (CARES) Act was enacted and signed into U.S. law to provide economic relief to individuals and businesses facing economic hardship as a result of the COVID-19 pandemic. Changes in tax laws or rates are accounted for in the period of enactment. The income tax provisions of the CARES Act do not have a significant impact on our current taxes, deferred taxes, or uncertain tax positions.

XML

Net Loss per Share

9 Months Ended

Sep. 30, 2021

Earnings Per Share [Abstract]

Net Loss per Share

Net Loss per ShareBasic net loss per share is calculated by dividing net loss attributable to common stockholders by the weighted average number of common shares outstanding during the period, less shares subject to repurchase, and excludes any dilutive effects of employee share based awards and options. Diluted net income per common share is computed giving effect to all potentially dilutive common shares, including common stock issuable upon exercise of stock options, convertible preferred stock, conversion of the Convertible Senior Notes, and unvested restricted common stock and stock units. As we had net losses for continuing operations for the three and nine months ended September 30, 2021 and 2020, all potentially issuable common shares were determined to be anti-dilutive.

The following table sets forth the computation of net loss per common share (in thousands, except per share amounts):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Numerator:
Loss from continuing operations	$	(101,247)	$	(81,613)	$	(286,843)	$	(269,416)
Net income from discontinued operations	33,025		42,494		103,279		100,716
Net loss	(68,222)		(39,119)		(183,564)		(168,700)
Dividend on series A convertible preferred stock	(4,613)		—		(13,688)		—
Accretion of series A convertible preferred stock	—		—		(82)		—
Net loss attributable to common stockholders	(72,835)		(39,119)		(197,334)		(168,700)
Denominator:
Weighted average number of shares outstanding—basic and diluted	237,168		224,807		236,404		221,329
Net loss per share attributable to common stockholders, basic and diluted:
Continuing operations	$	(0.45)	$	(0.36)	$	(1.27)	$	(1.22)
Discontinued operations	0.14		0.19		0.44		0.46
Total net loss per share attributable to common stockholders, basic and diluted	$	(0.31)	$	(0.17)	$	(0.83)	$	(0.76)

The following outstanding options, unvested shares and units, ESPP shares, shares issuable upon the conversion of the Convertible Senior Notes, convertible preferred stock and shares contingently issuable were excluded (as common stock equivalents) from the computation of diluted net loss per common share for the periods presented as their effect would have been anti-dilutive (in thousands):

	As of September 30,
	2021	2020
Options to purchase common stock	2,473	2,999
Unvested restricted stock awards and units	25,694	21,633
Convertible preferred stock	24,043	—
Convertible senior notes	33,856	33,856
ESPP shares	530	744

XML

Employee Benefit Plan

9 Months Ended

Sep. 30, 2021

Retirement Benefits [Abstract]

Employee Benefit Plan

Employee Benefit Plan

401(k) Plan

We have established a 401(k) tax-deferred savings plan (the “401(k) Plan”) which permits participants to make contributions by salary deduction pursuant to Section 401(k) of the Internal Revenue Code of 1986, as amended. All participants’ interests in their deferrals are 100% vested when contributed. We are responsible for administrative costs of the 401(k) Plan and have made no matching contributions into our 401(k) Plan since inception. Under the 401(k) Plan, pre-tax contributions are allocated to each participant’s individual account and are then invested in selected investment alternatives according to the participants’ directions. The 401(k) Plan is intended to qualify under Sections 401(a) and 501(a) of the Code. As a tax-qualified retirement plan, contributions to the 401(k) Plan and earnings on those contributions are not taxable to the employees until distributed, and all contributions are deductible by us when and if made.

XML

Segment and Major Customers Information

9 Months Ended

Sep. 30, 2021

Segment Reporting [Abstract]

Segment and Major Customers Information

Segment and Major Customers Information

Disaggregation of revenue by geography

We conduct business globally and are primarily managed on a geographic basis. Our Chief Executive Officer, who is our chief operating decision maker, reviews financial information presented on a consolidated basis accompanied by information about revenue by geographic region for purposes of allocating resources and evaluating financial performance. We define our regions as United States ("U.S."), Europe, the Middle East, and Africa ("EMEA"), Asia Pacific and Japan ("APAC"), and all remaining geographies (primarily Latin America and Canada) included in Others. There are no segment managers who are held accountable for operations,

operating results, and plans for levels, components, or types of products or services below the consolidated unit level. Accordingly, we are considered to be a single reportable segment and operating unit structure.

As discussed in Note 2, the results of product and related subscription and support revenue during the three and nine months ended September 30, 2021 have been included in discontinued operations due to the Purchase Agreement entered into with a consortium led by STG and closing of the sale.

Revenue by geographic region based on the billing address is as follows (in thousands):

	Three Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	40,844	$	35,482	$	9,040	$	5,749	$	7,245	$	5,548	$	3,120	$	1,834
Professional services	42,864		36,027		7,737		6,251		4,865		4,286		6,255		4,875
Total revenue	$	83,708	$	71,509	$	16,777	$	12,000	$	12,110	$	9,834	$	9,375	$	6,709

	Nine Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	112,687	$	103,394	$	26,056	$	17,256	$	21,043	$	15,423	$	8,398	$	5,893
Professional services	126,291		102,183		24,155		19,580		13,989		11,376		17,949		14,331
Total revenue	$	238,978	$	205,577	$	50,211	$	36,836	$	35,032	$	26,799	$	26,347	$	20,224

Our continuing operations generate revenue from sales of our Mandiant Solutions software-as-a-service platform and modules, subscriptions to our managed services and professional services engagements. We disaggregate our revenue from continuing operations into two main categories: (i) platform, cloud subscription and managed services and (ii) professional services.

Our platform, cloud subscription and managed services category includes our Mandiant Advantage software-as-a-service platform and our threat intelligence, security validation, and automated defense modules, as well as our managed services for detection and response and validation. We deliver our managed services and platform entirely through the cloud or, in the case of our security validation software, either through the cloud or in a hybrid on-premise/cloud configuration.

Our professional services include incident response and other security consulting services to our customers who have experienced a cybersecurity breach or desire assistance assessing the resilience of their information systems infrastructure. The majority of our professional services are offered on a time and materials basis, through a fixed fee arrangement, or on a retainer basis. Revenue from professional services is recognized as services are delivered. Revenue from our pre-paid expertise-on-demand subscription and some pre-paid professional services is deferred and recognized when services are delivered.

The following table depicts the disaggregation of revenue according to revenue type and is consistent with how we evaluate our financial performance (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Platform, cloud subscription and managed services	$	60,249	$	48,613	$	168,184	$	141,966
Professional services	61,721		51,439		182,384		147,470
Total revenue	$	121,970	$	100,052	$	350,568	$	289,436

Long lived assets by geography

Long lived assets by geographic region based on physical location is as follows (in thousands):

	As of September 30, 2021		As of December 31, 2020
Property and equipment, net:
United States	$	57,382	$	59,998
International	3,390		4,338
Total property and equipment, net	$	60,772	$	64,336

For the three and nine months ended September 30, 2021, and for the three months ended September 30, 2020, one reseller represented 10% of our total revenue. For the nine months ended September 30, 2020, no customer represented 10% or greater of our total revenue.

As of September 30, 2021 and December 31, 2020, no customer represented 10% or greater of our net accounts receivable balance

XML

Subsequent Events	9 Months Ended
	Sep. 30, 2021
Subsequent Events [Abstract]
Subsequent Events	Subsequent EventsOn October 8, 2021, we completed the previously announced sale of the FireEye Products business to a consortium led by STG in exchange for total cash consideration of $1.2 billion, subject to certain purchase price adjustments, and assumption of certain liabilities of the FireEye Products business as specified in the Purchase Agreement, as amended by an Amendment to the Asset Purchase Agreement entered into on October 8, 2021. The FireEye Products business was classified as discontinued operations in our condensed consolidated statements of operations and excluded from continuing operations. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. See Note 2, "Discontinued Operations," for additional information.

XML

Description of Business and Summary of Significant Accounting Policies (Policies)

9 Months Ended

Sep. 30, 2021

Organization, Consolidation and Presentation of Financial Statements [Abstract]

Basis of Presentation and Consolidation

Basis of Presentation and Consolidation

The accompanying unaudited condensed consolidated financial statements include the accounts of Mandiant, Inc. and its wholly owned subsidiaries. All intercompany balances and transactions have been eliminated in consolidation.

The accompanying unaudited condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States of America (“U.S. GAAP”), and following the requirements of the Securities and Exchange Commission (“SEC”), for interim reporting. As permitted under those rules, certain footnotes or other financial information that are normally required by U.S. GAAP can be condensed or omitted. These unaudited condensed consolidated financial statements have been prepared on the same basis as our annual consolidated financial statements and, in the opinion of management, reflect all adjustments, consisting only of normal recurring adjustments, that are necessary for a fair statement of our financial information. The results of operations for the three and nine months ended September 30, 2021 are not necessarily indicative of the results to be expected for the year ending December 31, 2021 or for any other interim period or for any other future year. As a result of the Purchase Agreement, the FireEye Products business is presented as discontinued operations in our condensed consolidated financial statements and all prior periods presented have been adjusted to reflect the assets and liabilities held for sale and discontinued operations. The balance sheet as of December 31, 2020 has been derived from audited consolidated financial statements at that date but does not include all information required by U.S. GAAP for annual consolidated financial statements.

The accompanying unaudited condensed consolidated financial statements and related financial information should be read in conjunction with the audited consolidated financial statements and the related notes thereto for the year ended December 31, 2020 included in our Annual Report on Form 10-K for the year ended December 31, 2020.

Use of Estimates

Use of Estimates

The preparation of consolidated financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements and the reported amounts of revenue and expenses during the reporting period. Such management estimates include, but are not limited to, determining the nature and timing of satisfaction of performance obligations, useful life of our security appliances that are dependent on intelligence and assessing the material rights associated with it, determining the standalone selling price of performance obligations, subscriptions and services, commissions expense including the period of benefit of customer acquisition cost, bonus expense, future taxable income, contract manufacturer liabilities, litigation and settlement costs and other loss contingencies, fair value of our equity awards, achievement of targets for performance stock units, fair value of the liability and equity components of the Convertible Senior Notes (as defined in Note 10), results of operations of the Company’s discontinued operations, and the purchase price allocation of acquired businesses. We base our estimates on historical experience and on assumptions that we believe are reasonable. Changes in facts or circumstances may cause us to change our assumptions and estimates in future periods, and it is possible that actual results could differ from current or revised future estimates.

Discontinued Operations

Discontinued Operations

We consider assets to be held for sale when management commits to a formal plan to actively market the assets for sale at a price reasonable in relation to fair value, it is unlikely that significant changes will be made to the plan, the assets are available for immediate sale in their present condition, an active program to locate a buyer and other actions required to complete the sale have been initiated and the sale of the assets is expected to be completed within one year. Upon designation as held for sale, we record the

carrying value of the assets at the lower of the then current carrying value or estimated fair value, less costs to sell. Following recording as such, assets held for sale are not depreciated or amortized thereafter.

If the disposal of the component of an entity (or group of components) represents a strategic shift that has (or will have) a major effect on an entity’s operations and financial results, it meets the criteria for discontinued operations. The results of discontinued operations, as well as any gain or loss on the disposal transaction, are presented separately, net of tax, from the results of continuing operations for all periods presented. The revenue and expenses included in the results of discontinued operations are the revenue and direct operating expenses incurred by the discontinued component that may be reasonably segregated from the revenue and costs of the ongoing operations of the Company. The assets and liabilities have been accounted for as assets and liabilities held for sale in our condensed consolidated balance sheets. The operating results have been included in discontinued operations in our condensed consolidated financial statements. Assets and liabilities held for sale are classified as current as of September 30, 2021 as it is probable that the sale will occur and proceeds will be collected within one year. The condensed consolidated statement of cash flows presents combined cash flows from continuing operations with cash flows from discontinued operations within each cash flow statement category. The prior periods have been adjusted to reflect the assets and liabilities held for sale and discontinued operations.

Recently Adopted Accounting Pronouncements and Recent Accounting Pronouncements Not Yet Adopted

Recently Adopted Accounting Pronouncements

Customer’s Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract

In August 2018, the FASB issued ASU 2018-15, Intangibles - Goodwill and Other - Internal-Use Software (Subtopic 350-40): Customer's Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract. This standard requires capitalization of the implementation costs incurred in a hosting arrangement that is a service contract with the requirements for capitalizing implementation costs incurred to develop or obtain internal-use software. Further, the standard also requires the Company to expense the capitalized implementation costs of a hosting arrangement over the term of the hosting arrangement. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying the Test for Goodwill Impairment

In January 2017, the FASB issued ASU 2017-04, Intangibles - Goodwill and Other (Topic 350): Simplifying the Test for Goodwill Impairment. This standard eliminates the requirement to calculate the implied fair value of goodwill to measure a goodwill impairment charge (i.e. Step 2 of the current guidance), instead measuring the impairment charge as the excess of the reporting unit's carrying amount over its fair value (i.e. Step 1 of the current guidance). We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Measurement of Credit Losses on Financial Instruments

In June 2016, the FASB issued ASU 2016-13, Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments. This standard changes the impairment model for most financial assets and certain other instruments by introducing a current expected credit loss ("CECL") model. The CECL model is a more forward-looking approach based on expected losses rather than incurred losses, requiring entities to estimate and record losses expected over the remaining contractual life of an asset. The guidance was effective for the Company beginning in the first quarter of 2020. We adopted the standard effective January 1, 2020. The standard did not have a significant impact on our unaudited condensed consolidated financial statements.

Simplifying Accounting for Income Taxes

In December 2019, the FASB issued ASU 2019-12, Income Taxes (Topic 740): Simplifying the Accounting for Income Taxes. This standard simplifies the accounting for income taxes by eliminating certain exceptions to the guidance in Topic 740 related to the approach for intra-period tax allocation, the methodology for calculating income taxes in an interim period and the recognition of deferred tax liabilities for outside basis differences. The new guidance also simplifies aspects of the accounting for franchise taxes and enacted changes in tax laws or rates and clarifies the accounting for transactions that result in a step-up in the tax basis of goodwill and allocating consolidated income taxes to separate financial statements of entities not subject to income tax. ASU 2019-12 is effective for annual and interim periods in fiscal years beginning after December 15, 2020. We adopted ASU 2019-12 as of January 1, 2020. The adoption did not have a significant impact on our unaudited condensed consolidated financial statements.

Recent Legislation

On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act was enacted and signed into U.S. law to provide economic relief to individuals and businesses facing economic hardship as a result of the COVID-19 pandemic. Changes in tax laws or rates are accounted for in the period of enactment. The income tax provisions of the CARES Act do not have a significant impact on our current taxes, deferred taxes, or uncertain tax positions.

Recent Accounting Pronouncements Not Yet Adopted

In August 2020, the FASB issued ASU No. 2020-06, Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity (ASU 2020-06): This standard simplifies the accounting for certain financial instruments with characteristics of liabilities and equity, including convertible instruments and contracts in an entity’s own equity. Among other changes, ASU 2020-06 removes from U.S. GAAP the liability and equity separation model for convertible instruments with a cash conversion feature, and as a result, after adoption, entities will no longer separately present in equity an embedded conversion feature for such debt. Similarly, the embedded conversion feature will no longer be amortized into income as interest expense over the life of the instrument. Instead, entities will account for a convertible debt instrument wholly as debt unless (1) a convertible instrument contains features that require bifurcation as a derivative under ASC Topic 815, Derivatives and Hedging, or (2) a convertible debt instrument was issued at a substantial premium. Among other potential impacts, this change is expected to reduce reported interest expense, increase reported net income, and result in a reclassification of certain conversion feature balance sheet amounts from stockholders’ equity to liabilities as it relates to the Convertible Senior Notes. Additionally, ASU 2020-06 requires the application of the if-converted method to calculate the impact of convertible instruments on diluted earnings per share (EPS), which is consistent with the Company’s accounting treatment under the current standard. ASU 2020-06 is effective for fiscal years beginning after December 15, 2021, with early adoption permitted for fiscal years beginning after December 15, 2020, and can be adopted on either a fully retrospective or modified retrospective basis. We are adopting the standard on January 1, 2022 and are currently evaluating the method of adoption and overall impact of this standard on our consolidated financial statements.

Fair Value Measurements

The accounting guidance for fair value measurements provides a framework for measuring fair value on either a recurring or nonrecurring basis, whereby the inputs used in our valuation techniques are assigned a hierarchical level. The following are the three levels of inputs to measure fair value:

•Level 1: Observable inputs that reflect quoted prices (unadjusted) for identical assets or liabilities in active markets.

•Level 2: Inputs that reflect quoted prices for identical assets or liabilities in less active markets; quoted prices for similar assets or liabilities in active markets; benchmark yields, reported trades, broker/dealer quotes, inputs other than quoted prices that are observable for the assets or liabilities; or inputs that are derived principally from or corroborated by observable market data by correlation or other means.

•Level 3: Unobservable inputs that reflect our own assumptions incorporated in valuation techniques used to measure fair value. These assumptions are required to be consistent with market participant assumptions that are reasonably available.

We consider an active market to be one in which transactions for the asset or liability occur with sufficient frequency and volume to provide pricing information on an ongoing basis, and consider an inactive market to be one in which there are infrequent or few transactions for the asset or liability, the prices are not current, or price quotations vary substantially either over time or among market makers. Where appropriate, our own or the counterparty’s non-performance risk is considered in measuring the fair values of assets.

XML

Discontinued Operations (Tables)

9 Months Ended

Sep. 30, 2021

Discontinued Operations and Disposal Groups [Abstract]

Schedule of Assets and Liabilities, Operations & Supplemental Information of the Discontinued Operations

The following table summarizes the assets and liabilities held for sale relating to our discontinued operations (dollars in thousands):

	September 30, 2021		December 31, 2020
MAJOR CLASSES OF ASSETS
Current:
Cash and cash equivalents	$	11,775	$	11,775
Accounts receivable, net of allowance for doubtful accounts of $905 and $1,334 at September 30, 2021 and December 31, 2020, respectively	88,609		83,012
Inventories	7,565		4,023
Prepaid expenses and other current assets	60,700		63,699
Property and equipment, net	31,285		—
Goodwill	313,873		—
Intangible assets, net	4,292		—
Deposits and other long-term assets	51,974		—
Operating lease right-of-use assets, net	3,413		—
Total current assets held for sale	573,486		162,509
Non-current:
Property and equipment, net	—		15,434
Goodwill	—		313,924
Intangible assets, net	—		5,512
Deposits and other long-term assets	—		56,580
Operating lease right-of-use assets, net	—		1,524
Total assets classified as held for sale	$	573,486	$	555,483
MAJOR CLASSES OF LIABILITIES
Current:
Accounts payable	$	9,105	$	1,080
Accrued and other current liabilities	7,980		3,510
Deferred revenue, current	640,049		387,353
Operating lease liabilities	3,031		1,468
Accrued compensation	25,907		23,880
Total current liabilities held for sale	686,072		417,291
Non-current:
Deferred revenue, non-current	—		284,851
Operating lease liabilities	—		400
Total liabilities classified as held for sale	$	686,072	$	702,542
Commitments and contingencies
Contract manufacturer commitments	$	10,034	$	5,996

The following table summarizes the results of the discontinued operations (dollars in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
MAJOR LINE ITEMS CONSTITUTING NET INCOME
Revenue from discontinued operations	$	132,842	$	138,408	$	398,546	$	403,646
Cost of revenue	28,126		29,654		83,928		89,854
Research and development	31,358		27,470		87,444		92,450
Sales and marketing	35,114		37,648		109,644		113,714
General and administrative	4,631		—		12,757		—
Restructuring charges	—		666		—		5,423
Net income from discontinued operations before income taxes	$	33,613	$	42,970	$	104,773	$	102,205
Provision for income taxes	588		476		1,494		1,489
Net income from discontinued operations, net of income taxes	$	33,025	$	42,494	$	103,279	$	100,716

At the closing of the sale of the FireEye Products business on October 8, 2021, we entered into a Transition Services Agreement (“TSA”) and a Reseller and Market Cooperation Agreement (“RSA”) with Magenta Buyer LLC ("McAfee Enterprise"), which is backed by a consortium led by STG. The TSA is designed to ensure and facilitate an orderly transfer of business operations. The services provided by us under the TSA will run up to 18 months following the closing, subject to the ability of McAfee Enterprise to earlier terminate any such services. The RSA is designed to enable the parties and their respective subsidiaries to continue using certain product and service offerings in the operation of their businesses. Under the RSA, each party will grant the other a non-exclusive appointment and license as both a seller and a reseller to promote, sell and distribute the product and service offerings directly or indirectly through the other party’s authorized resale and distribution channel on a standalone basis or as part of a bundled service at agreed-upon rates for 36 months following the separation. The agreed-upon fees for the product and service offerings are generally intended to (i) allow the providing party to recover all costs and expenses of providing such product and service offerings plus a mark-up over those costs and expenses or (ii) compensate the providing party for providing such product and service offerings through an agreed-upon fixed fee arrangement. No revenues or expenses have been incurred for the TSA or RSA for the three and nine months ended September 30, 2021, as the TSA and RSA were not in effect during these periods.

XML

Fair Value Measurements (Tables)

9 Months Ended

Sep. 30, 2021

Fair Value Disclosures [Abstract]

Schedule of Assets Measured at Fair Value on a Recurring Basis

The following table presents our assets measured at fair value on a recurring basis using the above input categories (in thousands):

	As of September 30, 2021								As of December 31, 2020
Description	Level 1		Level 2		Level 3		Total		Level 1		Level 2		Level 3		Total
Assets
Cash equivalents:
Money market funds	$	143,233	$	—	$	—	$	143,233	$	32,954	$	—	$	—	$	32,954
Total cash equivalents	143,233		—		—		143,233		32,954		—		—		32,954
Short-term investments:
Certificates of deposit	—		6,355		—		6,355		—		2,752		—		2,752
Commercial paper	—		—		—		—		—		19,994		—		19,994
Corporate notes and bonds	—		569,090		—		569,090		—		437,652		—		437,652
U.S. Treasuries	—		75,364		—		75,364		—		74,934		—		74,934
U.S. Government agencies	—		194,828		—		194,828		—		89,492		—		89,492
Total short-term investments	—		845,637		—		845,637		—		624,824		—		624,824
Total assets measured at fair value	$	143,233	$	845,637	$	—	$	988,870	$	32,954	$	624,824	$	—	$	657,778

XML

Investments (Tables)

9 Months Ended

Sep. 30, 2021

Investments, Debt and Equity Securities [Abstract]

Summary of Investments

Our investments consisted of the following (in thousands):

	As of September 30, 2021
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	6,326	$	36	$	(7)	$	6,355
Corporate notes and bonds	567,840		1,469		(219)		569,090
U.S. Treasuries	75,384		2		(22)		75,364
U.S. Government agencies	194,924		5		(101)		194,828
Total	$	844,474	$	1,512	$	(349)	$	845,637

	As of December 31, 2020
	Amortized Cost		Gross Unrealized Gains		Gross Unrealized Losses		Estimated Fair Value
Certificates of deposit	$	2,679	$	73	$	—	$	2,752
Commercial paper	19,994		—		—		19,994
Corporate notes and bonds	433,445		4,248		(41)		437,652
U.S. Treasuries	74,914		26		(6)		74,934
U.S. Government agencies	89,451		54		(13)		89,492
Total	$	620,483	$	4,401	$	(60)	$	624,824

Summary of Gross Unrealized Losses and Fair Value of Investments in a Continuous Unrealized Loss Position

The following tables present the gross unrealized losses and related fair values of our investments that have been in a continuous unrealized loss position (in thousands):

	As of September 30, 2021
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Certificates of deposit	$	2,936	$	(7)	$	—	$	—	$	2,936	$	(7)
Corporate notes and bonds	263,919		(219)		—		—		263,919		(219)
U.S. Treasuries	42,620		(22)		—		—		42,620		(22)
U.S. Government agencies	170,720		(101)		—		—		170,720		(101)
Total	$	480,195	$	(349)	$	—	$	—	$	480,195	$	(349)

	As of December 31, 2020
	Less Than 12 Months				Greater Than 12 Months				Total
	Fair Value		Unrealized Loss		Fair Value		Unrealized Loss		Fair Value		Unrealized Loss
Commercial paper	$	4,997	$	—	$	—	$	—	$	4,997	$	—
Corporate notes and bonds	92,855		(41)		870		—		93,725		(41)
U.S. Treasuries	42,799		(6)		—		—		42,799		(6)
U.S. Government agencies	37,488		(13)		1,700		—		39,188		(13)
Total	$	178,139	$	(60)	$	2,570	$	—	$	180,709	$	(60)

Summary of Contractual Maturities of Investments

The following table summarizes the contractual maturities of our investments as of September 30, 2021 (in thousands):

	Amortized Cost		Fair Value
Due within one year	$	425,939	$	426,811
Due within one to three years	418,535		418,826
Total	$	844,474	$	845,637

XML

Property and Equipment (Tables)

9 Months Ended

Sep. 30, 2021

Property, Plant and Equipment [Abstract]

Schedule of Property and Equipment

Property and equipment, net consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Computer equipment and software	$	79,879	$	139,147
Leasehold improvements	58,636		56,401
Furniture and fixtures	14,282		12,955
Machinery and equipment	16		160
Total property and equipment	152,813		208,663
Less: accumulated depreciation and amortization	(92,041)		(144,327)
Total property and equipment, net	$	60,772	$	64,336

XML

Business Combinations (Tables)

9 Months Ended

Sep. 30, 2021

Business Combination and Asset Acquisition [Abstract]

Schedule of Purchase Price Allocation

Allocation of the purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(288)
Intangible assets	5,650
Goodwill	7,846
Total purchase price allocation	$	13,208

Allocation of the preliminary purchase price is as follows (in thousands):

	Amount
Net tangible liabilities assumed	$	(4,551)
Intangible assets	31,880
Deferred tax liability	(949)
Goodwill	151,217
Total purchase price allocation	$	177,597

llocation of the purchase price is as follows (in thousands):

	Amount
Net tangible assets acquired	$	143
Intangible assets	3,400
Deferred tax liability	(513)
Goodwill	9,230
Total preliminary purchase price allocation	$	12,260

Schedule of Purchased Intangible Assets

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	5,500
Trade name	1	150
Total identifiable intangible assets		$	5,650

The estimated useful life and fair values of the identifiable intangible assets are as follows (dollars in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	5	$	22,300
In-process technology	4	2,200
Customer relationships	5	6,760
Trade name	2	620
Total identifiable intangible assets		$	31,880

The estimated useful life and fair values of the identifiable intangible assets are as follows (in thousands):

	Estimated Useful Life (in years)	Amount
Developed technology	3	$	3,400
Total identifiable intangible assets		$	3,400

Purchased intangible assets consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Developed technology	$	150,893	$	147,493
Content	158,700		158,700
Customer relationships	112,360		112,360
Contract backlog	13,200		13,200
Trade names	17,720		17,720
Non-competition agreements	1,100		1,100
Total intangible assets	453,973		450,573
Less: accumulated amortization	(363,258)		(330,018)
Total net intangible assets	$	90,715	$	120,555

Schedule of Expected Annual Amortization Expense of Intangible Assets

The expected future annual amortization expense of intangible assets as of September 30, 2021 is presented below (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	11,204
2022	34,439
2023	29,421
2024	10,566
2025	5,085
Total	$	90,715

XML

Restructuring Charges (Tables)

9 Months Ended

Sep. 30, 2021

Restructuring and Related Activities [Abstract]

Summary of Restructuring Activities

The following table sets forth the restructuring balance as of September 30, 2021 related to previous restructuring activities and a summary of restructuring activities during the nine months ended September 30, 2021 (in thousands):

	Severance and related costs		Facilities costs		Total costs
Balance, December 31, 2020	$	570	$	478	$	1,048
Provision for restructuring charges	1,898		—		1,898
Cash payments	(2,168)		(360)		(2,528)
Other adjustments	(249)		11		(238)
Balance, September 30, 2021	$	51	$	129	$	180

XML

Leases (Tables)

9 Months Ended

Sep. 30, 2021

Leases [Abstract]

Schedule of Components of Lease Expenses and Supplemental Balance Sheet, Cash Flow and Other Information

The components of lease expenses were as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Operating lease costs	$	3,256	$	10,039
Short-term lease costs	493		1,175
Sublease income	(148)		(592)
Total net lease costs	$	3,601	$	10,622

Supplemental balance sheet information related to leases is as follows (in thousands, except lease term and discount rate):

	As of September 30, 2021
Operating leases:
Operating lease right-of-use assets, net	$	35,550
Operating lease liabilities, current	$	13,567
Operating lease liabilities, non-current	54,571
Total operating lease liabilities	$	68,138
Weighted average remaining lease term (in years)	6.9
Weighted average discount rate	6.0		%

Supplemental cash flow and other information related to leases is as follows (in thousands):

	Three Months Ended September 30, 2021		Nine Months Ended September 30, 2021
Cash paid for amounts included in the measurement of lease liabilities:
Operating cash flows from operating leases	$	3,951	$	13,278
Lease liabilities arising from obtaining right-of-use assets:
Operating leases	$	—	$	11,683

Schedule of Cash Flows of Operating Lease Liabilities

Cash flows of operating lease liabilities are as follows (in thousands):

Years Ending December 31,	Amount
2021 (remaining three months)	$	2,894
2022	14,600
2023	12,914
2024	11,409
2025	10,626
2026	10,595
2027 and thereafter	20,250
Total lease payments	83,288
Less: imputed interest	(15,150)
Total lease obligations	68,138
Less: current lease obligations	(13,567)
Long-term lease obligations	$	54,571

XML

Deferred Revenue (Tables)

9 Months Ended

Sep. 30, 2021

Revenue from Contract with Customer [Abstract]

Schedule of Deferred Revenue

Deferred revenue consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
Platform, cloud subscription and managed services, current	$	136,273	$	126,086
Professional services, current	111,867		100,270
Total deferred revenue, current	248,140		226,356
Platform, cloud subscription and managed services, non-current	65,275		56,691
Professional services, non-current	1,261		1,206
Total deferred revenue, non-current	66,536		57,897
Total deferred revenue	$	314,676	$	284,253

Changes in the balance of deferred revenue for the periods presented are as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Deferred revenue, beginning of period	$	297,326	$	244,084	$	284,253	$	273,241
Billings for the period	139,320		99,591		380,991		259,818
Revenue recognized	(121,970)		(100,052)		(350,568)		(289,436)
Deferred revenue, end of period	$	314,676	$	243,623	$	314,676	$	243,623

Schedule of Expected Recognition of Remaining Performance Obligations

We expect to recognize these remaining performance obligations as follows (in percentages):

	Total	Less than 1 year	1-2 years	2-3 years	More than 3 years
Deferred revenue	100%	79%	14%	6%	1%
Backlog	100%	48%	30%	20%	2%

XML

Convertible Senior Notes (Tables)

9 Months Ended

Sep. 30, 2021

Debt Disclosure [Abstract]

Schedule of the Liability and Equity Components of the Convertible Senior Notes

The liability and equity components of the 2024 Notes consisted of the following (in thousands):

	As of September 30, 2021		As of December 31, 2020
	2024 Notes		2024 Notes
Liability component:
Principal	$	600,000	$	600,000
Less: 2024 Notes discounts and issuance costs, net of amortization	(73,703)		(92,750)
Net carrying amount	$	526,297	$	507,250
Equity component, net of issuance costs	$	138,064	$	138,064

The liability and equity components of the remaining portion of 2035 Notes consisted of the following (in thousands):

	As of September 30, 2021				As of December 31, 2020
	Series A Notes		Series B Notes		Series A Notes		Series B Notes
Liability component:
Principal	$	23,436	$	460,000	$	23,436	$	460,000
Less: 2035 Notes discount and issuance costs, net of amortization	—		(14,268)		—		(29,790)
Net carrying amount	$	23,436	$	445,732	$	23,436	$	430,210
Equity component, net of issuance costs	$	15,559	$	117,834	$	15,559	$	117,834

Schedule of Interest Expense Related to the Convertible Senior Notes

Interest expense related to the 2024 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30,						Nine Months Ended September 30,
	2021			2020			2021			2020
	2024 Notes			2024 Notes			2024 Notes			2024 Notes
Coupon interest	$	1,313		$	1,313		$	3,938		$	3,938
Amortization of 2024 Notes discounts and issuance costs	6,427			6,119			19,047			18,133
Total interest expense recognized	$	7,740		$	7,432		$	22,985		$	22,071
Effective interest rate on the liability component	6.0		%	6.0		%	6.0		%	6.1		%

Interest expense for the three and nine months ended September 30, 2021 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2021						Nine Months Ended September 30, 2021
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	176		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			5,235			—			15,523
Total interest expense recognized	$	59		$	7,104		$	176		$	21,129
Effective interest rate on the liability component	1.0		%	6.5		%	1.0		%	6.5		%

Interest expense for the three and nine months ended September 30, 2020 related to the 2035 Notes consisted of the following (dollars in thousands):

	Three Months Ended September 30, 2020						Nine Months Ended September 30, 2020
	Series A Notes			Series B Notes			Series A Notes			Series B Notes
Coupon interest	$	59		$	1,869		$	577		$	5,606
Amortization of 2035 Notes discount and issuance costs	—			4,994			2,540			14,806
Total interest expense recognized	$	59		$	6,863		$	3,117		$	20,412
Effective interest rate on the liability component	1.0		%	6.5		%	3.5		%	6.6		%

XML

Common Shares Reserved for Issuance (Tables)

9 Months Ended

Sep. 30, 2021

Equity [Abstract]

Schedule of Reserved Shares of Common Stock for Issuance

We had reserved shares of common stock for issuance as follows (in thousands):

	As of September 30, 2021	As of December 31, 2020
Reserved under stock award plans	41,923	38,745
Convertible senior notes	33,856	33,856
Convertible preferred stock	24,043	23,249
Employee Stock Purchase Plan (ESPP)	4,684	3,425
Total	104,506	99,275

XML

Equity Award Plans (Tables)

9 Months Ended

Sep. 30, 2021

Share-based Payment Arrangement [Abstract]

Summary of the Activity for Stock Option Changes and Summary of Information Related to Options Outstanding and Options Exercisable

A summary of the activity, for continuing and discontinued operations, for our stock option changes during the reporting period and a summary of information related to options outstanding and options exercisable are presented below (in thousands, except per share amounts and contractual life years):

	Options Outstanding
	Number of Shares	Weighted- Average Exercise Price (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Balance — December 31, 2020	3,485	$	8.33	5.3	$	60,679
Exercised	(913)	4.76			13,972
Cancelled	(99)	29.39
Balance — September 30, 2021	2,473	8.81		5.0	31,100
Options exercisable — September 30, 2021	1,642	$	12.05	3.6	$	18,311

Summary of Activity for Restricted Common Stock, RSAs and RSUs and Summary of Information Related to Unvested Restricted Common Stock, RSAs and RSUs and those Expected to Vest

A summary of the activity, for continuing and discontinued operations, for our restricted common stock, RSAs and RSUs during the reporting periods and a summary of information related to unvested restricted common stock, RSAs and RSUs, including those expected to vest based on the achievement of a performance condition, are presented below (in thousands, except per share amounts and contractual life years):

	Number of Shares	Weighted- Average Grant Date Fair Value (per share)		Weighted- Average Contractual Life (years)	Aggregate Intrinsic Value
Unvested balance — December 31, 2020	20,400	$	15.35	1.4	$	470,424
Granted	16,045	20.62
Vested	(8,135)	15.71
Cancelled	(2,616)	17.23
Unvested balance — September 30, 2021	25,694	18.39		1.6	457,355
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition — September 30, 2021	2,748	$	18.69	1.6	$	48,907

Schedule of Assumptions used in Black-Scholes Option Pricing Model

The following table summarizes the assumptions used in the Black-Scholes option-pricing model to determine fair value of our common shares to be issued under the ESPP for the offering periods beginning in May 2020:

	Three and Nine Months Ended September 30, 2021	Three and Nine Months Ended September 30, 2020
Fair value of common stock	$22.33	$13.06
Risk-free interest rate	0.04%	0.17% - 0.18%
Expected term (in years)	0.5 - 1.0	0.5 - 1.0
Volatility	55% - 62%	52% - 68%
Sounds	—%	—%

Schedule of Stock-Based Compensation Expense Related to Stock Options, ESPP and Restricted Stock Units and Awards

Stock-based compensation expense related to stock options, ESPP and restricted stock unit awards, relating to continuing operations, is included in the condensed consolidated statements of operations as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Cost of platform, cloud subscription and managed services revenue	$	3,451	$	2,667	$	9,752	$	7,532
Cost of professional services revenue	6,253		4,722		17,574		12,470
Research and development	9,644		6,232		27,387		16,598
Sales and marketing	10,176		9,706		31,605		26,749
General and administrative	9,598		5,952		24,948		18,439
Total	$	39,122	$	29,279	$	111,266	$	81,788

XML

Net Loss per Share (Tables)

9 Months Ended

Sep. 30, 2021

Earnings Per Share [Abstract]

Schedule of Computation of Net Loss Per Common Share

The following table sets forth the computation of net loss per common share (in thousands, except per share amounts):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Numerator:
Loss from continuing operations	$	(101,247)	$	(81,613)	$	(286,843)	$	(269,416)
Net income from discontinued operations	33,025		42,494		103,279		100,716
Net loss	(68,222)		(39,119)		(183,564)		(168,700)
Dividend on series A convertible preferred stock	(4,613)		—		(13,688)		—
Accretion of series A convertible preferred stock	—		—		(82)		—
Net loss attributable to common stockholders	(72,835)		(39,119)		(197,334)		(168,700)
Denominator:
Weighted average number of shares outstanding—basic and diluted	237,168		224,807		236,404		221,329
Net loss per share attributable to common stockholders, basic and diluted:
Continuing operations	$	(0.45)	$	(0.36)	$	(1.27)	$	(1.22)
Discontinued operations	0.14		0.19		0.44		0.46
Total net loss per share attributable to common stockholders, basic and diluted	$	(0.31)	$	(0.17)	$	(0.83)	$	(0.76)

Schedule of Outstanding Options and Unvested Shares Excluded From Computation of Diluted Net Loss Per Common Share

The following outstanding options, unvested shares and units, ESPP shares, shares issuable upon the conversion of the Convertible Senior Notes, convertible preferred stock and shares contingently issuable were excluded (as common stock equivalents) from the computation of diluted net loss per common share for the periods presented as their effect would have been anti-dilutive (in thousands):

	As of September 30,
	2021	2020
Options to purchase common stock	2,473	2,999
Unvested restricted stock awards and units	25,694	21,633
Convertible preferred stock	24,043	—
Convertible senior notes	33,856	33,856
ESPP shares	530	744

XML

Segment and Major Customers Information (Tables)

9 Months Ended

Sep. 30, 2021

Segment Reporting [Abstract]

Revenue From External Customers by Geographic Areas

Revenue by geographic region based on the billing address is as follows (in thousands):

	Three Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	40,844	$	35,482	$	9,040	$	5,749	$	7,245	$	5,548	$	3,120	$	1,834
Professional services	42,864		36,027		7,737		6,251		4,865		4,286		6,255		4,875
Total revenue	$	83,708	$	71,509	$	16,777	$	12,000	$	12,110	$	9,834	$	9,375	$	6,709

	Nine Months Ended September 30,
	2021		2020		2021		2020		2021		2020		2021		2020
	U.S.				EMEA				APAC				Other
Platform, cloud subscription and managed services	$	112,687	$	103,394	$	26,056	$	17,256	$	21,043	$	15,423	$	8,398	$	5,893
Professional services	126,291		102,183		24,155		19,580		13,989		11,376		17,949		14,331
Total revenue	$	238,978	$	205,577	$	50,211	$	36,836	$	35,032	$	26,799	$	26,347	$	20,224

Schedule of Disaggregation of Revenue

The following table depicts the disaggregation of revenue according to revenue type and is consistent with how we evaluate our financial performance (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2021		2020		2021		2020
Platform, cloud subscription and managed services	$	60,249	$	48,613	$	168,184	$	141,966
Professional services	61,721		51,439		182,384		147,470
Total revenue	$	121,970	$	100,052	$	350,568	$	289,436

Summary of Long Lived Assets by Geographic Region Based on Physical Location

Long lived assets by geographic region based on physical location is as follows (in thousands):

	As of September 30, 2021		As of December 31, 2020
Property and equipment, net:
United States	$	57,382	$	59,998
International	3,390		4,338
Total property and equipment, net	$	60,772	$	64,336

XML

Description of Business and Summary of Significant Accounting Policies (Details) $ / shares in Units, $ in Millions			1 Months Ended				3 Months Ended	4 Months Ended	9 Months Ended
	Sep. 30, 2021 $ / shares shares	Dec. 31, 2020 $ / shares shares	Dec. 31, 2020 USD ($) $ / shares shares	Nov. 30, 2020 USD ($) shares	Jan. 31, 2020 USD ($)	Jun. 30, 2015 USD ($)	Sep. 30, 2021 USD ($) $ / shares shares	Sep. 30, 2021 USD ($) $ / shares shares	Sep. 30, 2021 USD ($) $ / shares shares	Jun. 02, 2021 USD ($)	May 29, 2021 USD ($)
Business Acquisition [Line Items]
Stock repurchase program of common stock amount										$ 500.0
Shares repurchased (in shares) | shares							1,800,000		5,300,000
Shares repurchased							$ 31.6		$ 100.0
Shares repurchased, average cost per share (in dollars per share) | $ / shares	$ 18.84						$ 17.72		$ 18.84
Stock repurchased during period (in shares) | shares								5,300,000
Stock repurchased during period						$ 150.0		$ 100.0
Series A convertible preferred stock, par value (usd per share) | $ / shares	$ 0.0001	$ 0.0001	$ 0.0001				$ 0.0001	$ 0.0001	$ 0.0001
Series A Preferred Stock | Private Placement
Business Acquisition [Line Items]
Number of shares issued and sold (shares) | shares			400,000
Dividend rate			0.045
Series A convertible preferred stock, par value (usd per share) | $ / shares		0.0001	$ 0.0001
Sale price (usd per share) | $ / shares		$ 1,000	$ 1,000
Aggregate purchase price			$ 400.0
Respond Software
Business Acquisition [Line Items]
Purchase consideration, cash paid				$ 116.1
Common stock issued to acquire company (shares) | shares				4,931,862
Common stock issued to acquire company, with vesting conditions (shares) | shares	436,916	694,768		694,768
Consideration transferred, equity interests				$ 60.3
Fair value of replacement awards				1.2
Total purchase consideration				$ 177.6
Cloudvisory
Business Acquisition [Line Items]
Purchase consideration, cash paid					$ 13.2
Liabilities assumed					$ 0.3
Products Business | Discontinued Operations, Held-for-sale
Business Acquisition [Line Items]
Total cash consideration											$ 1,200.0

XML

Discontinued Operations - Narrative (Details) - USD ($) $ in Thousands		3 Months Ended		9 Months Ended
	Oct. 08, 2021	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020	May 29, 2021
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Total revenue		$ 121,970	$ 100,052	$ 350,568	$ 289,436
Total cost of revenue		65,105	$ 57,091	187,715	$ 165,289
Subsequent Event
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Total cash consideration	$ 1,200,000
Products Business | Discontinued Operations, Held-for-sale
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Total cash consideration						$ 1,200,000
Products Business | Discontinued Operations, Disposed of by Sale | TSA and RSA
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Total revenue		0		0
Total cost of revenue		$ 0		$ 0
Products Business | Discontinued Operations, Disposed of by Sale | TSA | Subsequent Event
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Transition service period	18 months
Products Business | Discontinued Operations, Disposed of by Sale | RSA | Subsequent Event
Income Statement, Balance Sheet and Additional Disclosures by Disposal Groups, Including Discontinued Operations [Line Items]
Bundled service term period	36 months

XML

Discontinued Operations - The Assets and Liabilities Included Within Discontinued Operations (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020	Sep. 30, 2020	Dec. 31, 2019
Current:
Cash and cash equivalents	$ 11,775	$ 11,775	$ 11,775	$ 11,775
Total current assets held for sale	573,486	162,509
Current:
Total current liabilities held for sale	686,072	417,291
Discontinued Operations, Held-for-sale | Products Business
Current:
Cash and cash equivalents	11,775	11,775
Accounts receivable, net of allowance for doubtful accounts of $905 and $1,334 at September 30, 2021 and December 31, 2020, respectively	88,609	83,012
Allowance for doubtful accounts	905	1,334
Inventories	7,565	4,023
Prepaid expenses and other current assets	60,700	63,699
Property and equipment, net	31,285	0
Goodwill	313,873	0
Intangible assets, net	4,292	0
Deposits and other long-term assets	51,974	0
Operating lease right-of-use assets, net	3,413	0
Total current assets held for sale	573,486	162,509
Non-current:
Property and equipment, net	0	15,434
Goodwill	0	313,924
Intangible assets, net	0	5,512
Deposits and other long-term assets	0	56,580
Operating lease right-of-use assets, net	0	1,524
Total assets classified as held for sale	573,486	555,483
Current:
Accounts payable	9,105	1,080
Accrued and other current liabilities	7,980	3,510
Deferred revenue, current	640,049	387,353
Operating lease liabilities	3,031	1,468
Accrued compensation	25,907	23,880
Total current liabilities held for sale	686,072	417,291
Non-current:
Deferred revenue, non-current	0	284,851
Operating lease liabilities	0	400
Total liabilities classified as held for sale	686,072	702,542
Commitments and contingencies
Contract manufacturer commitments	$ 10,034	$ 5,996

XML

Discontinued Operations - Major Line Items Constituting Net Income (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
MAJOR LINE ITEMS CONSTITUTING NET INCOME
Net income from discontinued operations, net of income taxes	$ 33,025	$ 42,494	$ 103,279	$ 100,716
Discontinued Operations, Held-for-sale | Products Business
MAJOR LINE ITEMS CONSTITUTING NET INCOME
Revenue from discontinued operations	132,842	138,408	398,546	403,646
Cost of revenue	28,126	29,654	83,928	89,854
Research and development	31,358	27,470	87,444	92,450
Sales and marketing	35,114	37,648	109,644	113,714
General and administrative	4,631	0	12,757	0
Restructuring charges	0	666	0	5,423
Net income from discontinued operations before income taxes	33,613	42,970	104,773	102,205
Provision for income taxes	588	476	1,494	1,489
Net income from discontinued operations, net of income taxes	$ 33,025	$ 42,494	$ 103,279	$ 100,716

XML

Fair Value Measurements - Schedule of Assets Measured at Fair Value on a Recurring Basis (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	$ 143,233	$ 32,954
Total short-term investments	845,637	624,824
Total assets measured at fair value	988,870	657,778
Certificates of deposit
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	6,355	2,752
Commercial paper
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	19,994
Corporate notes and bonds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	569,090	437,652
U.S. Treasuries
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	75,364	74,934
U.S. Government agencies
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	194,828	89,492
Money market funds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	143,233	32,954
Level 1
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	143,233	32,954
Total short-term investments	0	0
Total assets measured at fair value	143,233	32,954
Level 1 | Certificates of deposit
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 1 | Commercial paper
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 1 | Corporate notes and bonds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 1 | U.S. Treasuries
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 1 | U.S. Government agencies
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 1 | Money market funds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	143,233	32,954
Level 2
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	0	0
Total short-term investments	845,637	624,824
Total assets measured at fair value	845,637	624,824
Level 2 | Certificates of deposit
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	6,355	2,752
Level 2 | Commercial paper
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	19,994
Level 2 | Corporate notes and bonds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	569,090	437,652
Level 2 | U.S. Treasuries
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	75,364	74,934
Level 2 | U.S. Government agencies
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	194,828	89,492
Level 2 | Money market funds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	0	0
Level 3
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	0	0
Total short-term investments	0	0
Total assets measured at fair value	0	0
Level 3 | Certificates of deposit
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 3 | Commercial paper
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 3 | Corporate notes and bonds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 3 | U.S. Treasuries
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 3 | U.S. Government agencies
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total short-term investments	0	0
Level 3 | Money market funds
Fair Value, Assets and Liabilities Measured on Recurring and Nonrecurring Basis [Line Items]
Total cash equivalents	$ 0	$ 0

XML

Fair Value Measurements - Narrative (Details) - Level 2 - Convertible Senior Notes - USD ($)	Sep. 30, 2021	Dec. 31, 2020
Debt Instrument [Line Items]
Fair value of debt	$ 1,000,000,000	$ 1,000,000,000
Measurement Input, Share Price
Debt Instrument [Line Items]
Measurement input	1,000

XML

Investments - Summary of Investments (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Debt Securities, Available-for-sale [Line Items]
Total	$ 844,474	$ 620,483
Gross Unrealized Gains	1,512	4,401
Gross Unrealized Losses	(349)	(60)
Estimated Fair Value	845,637	624,824
Certificates of deposit
Debt Securities, Available-for-sale [Line Items]
Total	6,326	2,679
Gross Unrealized Gains	36	73
Gross Unrealized Losses	(7)	0
Estimated Fair Value	6,355	2,752
Commercial paper
Debt Securities, Available-for-sale [Line Items]
Total		19,994
Gross Unrealized Gains		0
Gross Unrealized Losses		0
Estimated Fair Value	0	19,994
Corporate notes and bonds
Debt Securities, Available-for-sale [Line Items]
Total	567,840	433,445
Gross Unrealized Gains	1,469	4,248
Gross Unrealized Losses	(219)	(41)
Estimated Fair Value	569,090	437,652
U.S. Treasuries
Debt Securities, Available-for-sale [Line Items]
Total	75,384	74,914
Gross Unrealized Gains	2	26
Gross Unrealized Losses	(22)	(6)
Estimated Fair Value	75,364	74,934
U.S. Government agencies
Debt Securities, Available-for-sale [Line Items]
Total	194,924	89,451
Gross Unrealized Gains	5	54
Gross Unrealized Losses	(101)	(13)
Estimated Fair Value	$ 194,828	$ 89,492

XML

Investments - Summary of Gross Unrealized Losses and Fair Value of Investments in a Continuous Unrealized Loss Position (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Fair Value
Less Than 12 Months	$ 480,195	$ 178,139
Greater Than 12 Months	0	2,570
Total	480,195	180,709
Unrealized Loss
Less Than 12 Months	(349)	(60)
Greater Than 12 Months	0	0
Total	(349)	(60)
Certificates of deposit
Fair Value
Less Than 12 Months	2,936
Greater Than 12 Months	0
Total	2,936
Unrealized Loss
Less Than 12 Months	(7)
Greater Than 12 Months	0
Total	(7)
Commercial paper
Fair Value
Less Than 12 Months		4,997
Greater Than 12 Months		0
Total		4,997
Unrealized Loss
Less Than 12 Months		0
Greater Than 12 Months		0
Total		0
Corporate notes and bonds
Fair Value
Less Than 12 Months	263,919	92,855
Greater Than 12 Months	0	870
Total	263,919	93,725
Unrealized Loss
Less Than 12 Months	(219)	(41)
Greater Than 12 Months	0	0
Total	(219)	(41)
U.S. Treasuries
Fair Value
Less Than 12 Months	42,620	42,799
Greater Than 12 Months	0	0
Total	42,620	42,799
Unrealized Loss
Less Than 12 Months	(22)	(6)
Greater Than 12 Months	0	0
Total	(22)	(6)
U.S. Government agencies
Fair Value
Less Than 12 Months	170,720	37,488
Greater Than 12 Months	0	1,700
Total	170,720	39,188
Unrealized Loss
Less Than 12 Months	(101)	(13)
Greater Than 12 Months	0	0
Total	$ (101)	$ (13)

XML

Investments - Summary of Contractual Maturities of Investments (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Amortized Cost
Due within one year	$ 425,939
Due within one to three years	418,535
Total	844,474	$ 620,483
Fair Value
Due within one year	426,811
Due within one to three years	418,826
Total	$ 845,637	$ 624,824

XML

Investments - Narrative (Details) - Private Company - USD ($) $ in Thousands	9 Months Ended
	Sep. 30, 2021	Dec. 31, 2020
Schedule of Equity Method Investments [Line Items]
Ownership percentage	11.00%	11.00%
Gain (loss) from investment	$ 0
Amounts paid to shareholders	$ 0

XML

Property and Equipment - Schedule of Property and Equipment (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Property, Plant and Equipment [Line Items]
Total property and equipment	$ 152,813	$ 208,663
Less: accumulated depreciation and amortization	(92,041)	(144,327)
Total property and equipment, net	60,772	64,336
Computer equipment and software
Property, Plant and Equipment [Line Items]
Total property and equipment	79,879	139,147
Leasehold improvements
Property, Plant and Equipment [Line Items]
Total property and equipment	58,636	56,401
Furniture and fixtures
Property, Plant and Equipment [Line Items]
Total property and equipment	14,282	12,955
Machinery and equipment
Property, Plant and Equipment [Line Items]
Total property and equipment	$ 16	$ 160

XML

Property and Equipment - Narrative (Details) - USD ($) $ in Millions	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Property, Plant and Equipment [Abstract]
Depreciation and amortization	$ 5.3	$ 6.0	$ 21.7	$ 17.1
Capitalized software development costs	4.2	2.2	13.0	10.0
Amortization of capitalized software development costs	$ 2.7	$ 2.8	$ 8.7	$ 7.5

XML

Business Combinations - Narrative (Details) - USD ($) $ in Thousands				1 Months Ended		3 Months Ended			9 Months Ended
	Sep. 30, 2021	Aug. 04, 2021	Dec. 31, 2020	Nov. 30, 2020	Jan. 31, 2020	Sep. 30, 2021	Mar. 31, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Business Acquisition [Line Items]
Goodwill	$ 1,060,023		$ 1,050,962			$ 1,060,023			$ 1,060,023
Amortization expense						11,100		$ 10,000	33,200	$ 30,400
Cloudvisory
Business Acquisition [Line Items]
Purchase consideration, cash paid					$ 13,200
Liabilities assumed					300
Goodwill					$ 7,846
Cloudvisory | Discontinued Operations, Held-for-sale | Products Business
Business Acquisition [Line Items]
Goodwill		$ 1,800
Cloudvisory | Measurement Input, Discount Rate | Developed Technology
Business Acquisition [Line Items]
Intangible assets, measurement input		35.00%
Cloudvisory | Measurement Input, Discount Rate | Trade Names
Business Acquisition [Line Items]
Intangible assets, measurement input		35.00%
Cloudvisory | Measurement Input, Royalty Rate | Trade Names
Business Acquisition [Line Items]
Intangible assets, measurement input		1.00%
Respond Software
Business Acquisition [Line Items]
Purchase consideration, cash paid				$ 116,100
Goodwill				$ 151,217
Common stock issued to acquire company (shares)				4,931,862
Common stock issued to acquire company, with vesting conditions (shares)	436,916		694,768	694,768
Number of shares cancelled (shares)							257,852
Consideration transferred, equity interests				$ 60,300
Fair value of replacement awards				1,200
Total purchase consideration				177,600
Goodwill, expected tax deductible amount				$ 0
Respond Software | Discontinued Operations, Held-for-sale | Products Business
Business Acquisition [Line Items]
Goodwill	$ 34,800					34,800			34,800
Respond Software | Measurement Input, Discount Rate | Developed Technology
Business Acquisition [Line Items]
Intangible assets, measurement input				12.00%
Respond Software | Measurement Input, Discount Rate | Trade Names
Business Acquisition [Line Items]
Intangible assets, measurement input				12.00%
Respond Software | Measurement Input, Discount Rate | In-process technology
Business Acquisition [Line Items]
Intangible assets, measurement input				13.00%
Respond Software | Measurement Input, Discount Rate | Customer Relationships
Business Acquisition [Line Items]
Intangible assets, measurement input				11.00%
Respond Software | Measurement Input, Royalty Rate | Trade Names
Business Acquisition [Line Items]
Intangible assets, measurement input				1.00%
Intrigue
Business Acquisition [Line Items]
Purchase consideration, cash paid		$ 12,300
Goodwill	$ 9,200	$ 9,230				$ 9,200			9,200
Intrigue | Measurement Input, Discount Rate | Developed Technology
Business Acquisition [Line Items]
Intangible assets, measurement input		40.00%
Intrigue And Respond Software
Business Acquisition [Line Items]
Goodwill, tax adjustment									$ 200

XML

Business Combinations - Purchase Price Allocation (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Aug. 04, 2021	Dec. 31, 2020	Nov. 30, 2020	Jan. 31, 2020
Business Acquisition [Line Items]
Goodwill	$ 1,060,023		$ 1,050,962
Cloudvisory
Business Acquisition [Line Items]
Net tangible liabilities assumed					$ (288)
Intangible assets					5,650
Goodwill					7,846
Total preliminary purchase price allocation					$ 13,208
Respond Software
Business Acquisition [Line Items]
Net tangible liabilities assumed				$ (4,551)
Intangible assets				31,880
Deferred tax liability				(949)
Goodwill				151,217
Total preliminary purchase price allocation				$ 177,597
Intrigue
Business Acquisition [Line Items]
Net tangible assets acquired		$ 143
Intangible assets		3,400
Deferred tax liability		(513)
Goodwill	$ 9,200	9,230
Total preliminary purchase price allocation		$ 12,260

XML

Business Combinations - Identifiable Intangible Assets Acquired (Details) - USD ($) $ in Thousands		1 Months Ended
	Aug. 04, 2021	Nov. 30, 2020	Jan. 31, 2020
Cloudvisory
Business Acquisition [Line Items]
Amount			$ 5,650
Cloudvisory | Developed technology
Business Acquisition [Line Items]
Estimated Useful Life (in years)			3 years
Amount			$ 5,500
Cloudvisory | Trade name
Business Acquisition [Line Items]
Estimated Useful Life (in years)			1 year
Amount			$ 150
Respond Software
Business Acquisition [Line Items]
Amount		$ 31,880
Respond Software | Developed technology
Business Acquisition [Line Items]
Estimated Useful Life (in years)		5 years
Amount		$ 22,300
Respond Software | In-process technology
Business Acquisition [Line Items]
Estimated Useful Life (in years)		4 years
Amount		$ 2,200
Respond Software | Customer relationships
Business Acquisition [Line Items]
Estimated Useful Life (in years)		5 years
Amount		$ 6,760
Respond Software | Trade name
Business Acquisition [Line Items]
Estimated Useful Life (in years)		2 years
Amount		$ 620
Intrigue
Business Acquisition [Line Items]
Amount	$ 3,400
Intrigue | Developed technology
Business Acquisition [Line Items]
Estimated Useful Life (in years)	3 years
Amount	$ 3,400

XML

Business Combinations - Purchased Intangible Assets (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Business Acquisition [Line Items]
Total intangible assets	$ 453,973	$ 450,573
Less: accumulated amortization	(363,258)	(330,018)
Total net intangible assets	90,715	120,555
Developed technology
Business Acquisition [Line Items]
Total intangible assets	150,893	147,493
Content
Business Acquisition [Line Items]
Total intangible assets	158,700	158,700
Customer relationships
Business Acquisition [Line Items]
Total intangible assets	112,360	112,360
Contract backlog
Business Acquisition [Line Items]
Total intangible assets	13,200	13,200
Trade names
Business Acquisition [Line Items]
Total intangible assets	17,720	17,720
Non-competition agreements
Business Acquisition [Line Items]
Total intangible assets	$ 1,100	$ 1,100

XML

Business Combinations - Schedule of Expected Annual Amortization Expense of Intangible Assets (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Business Combination and Asset Acquisition [Abstract]
2021 (remaining three months)	$ 11,204
2022	34,439
2023	29,421
2024	10,566
2025	5,085
Total net intangible assets	$ 90,715	$ 120,555

XML

Restructuring Charges - Summary of Restructuring Activities (Details) $ in Thousands	9 Months Ended
	Sep. 30, 2021 USD ($)
Restructuring Reserve
Balance, December 31, 2020	$ 1,048
Provision for restructuring charges	1,898
Cash payments	(2,528)
Other adjustments	(238)
Balance, September 30, 2021	180
Severance and related costs
Restructuring Reserve
Balance, December 31, 2020	570
Provision for restructuring charges	1,898
Cash payments	(2,168)
Other adjustments	(249)
Balance, September 30, 2021	51
Facilities costs
Restructuring Reserve
Balance, December 31, 2020	478
Provision for restructuring charges	0
Cash payments	(360)
Other adjustments	11
Balance, September 30, 2021	$ 129

XML

Restructuring Charges - Narrative (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Restructuring Cost and Reserve [Line Items]
Restructuring reserve	$ 180	$ 1,048
Facilities Costs
Restructuring Cost and Reserve [Line Items]
Restructuring reserve	129	478
Severance and related costs
Restructuring Cost and Reserve [Line Items]
Restructuring reserve	$ 51	$ 570

XML

Leases - Narrative (Details)	9 Months Ended
	Sep. 30, 2021
Lessee, Lease, Description [Line Items]
Optional extension term	5 years
Optional termination period	1 year
Minimum
Lessee, Lease, Description [Line Items]
Remaining lease term	1 year
Maximum
Lessee, Lease, Description [Line Items]
Remaining lease term	11 years

XML

Leases - Components of Lease Expenses (Details) - USD ($) $ in Thousands	3 Months Ended	9 Months Ended
	Sep. 30, 2021	Sep. 30, 2021
Leases [Abstract]
Operating lease costs	$ 3,256	$ 10,039
Short-term lease costs	493	1,175
Sublease income	(148)	(592)
Total net lease costs	$ 3,601	$ 10,622

XML

Leases - Supplemental Balance Sheet Information (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Operating leases:
Operating lease right-of-use assets, net	$ 35,550	$ 36,728
Operating lease liabilities, current	13,567	14,556
Operating lease liabilities, non-current	54,571	$ 41,802
Total operating lease liabilities	$ 68,138
Weighted average remaining lease term (in years)	6 years 10 months 24 days
Weighted average discount rate	6.00%

XML

Leases - Supplemental Cash Flow Information (Details) - USD ($) $ in Thousands	3 Months Ended	9 Months Ended
	Sep. 30, 2021	Sep. 30, 2021
Cash paid for amounts included in the measurement of lease liabilities:
Operating cash flows from operating leases	$ 3,951	$ 13,278
Lease liabilities arising from obtaining right-of-use assets:
Operating leases	$ 0	$ 11,683

XML

Leases - Schedule of Undiscounted Cash Flows of Operating Lease Liabilities (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Lessee, Operating Lease, Liability, Payment, Due [Abstract]
2021 (remaining three months)	$ 2,894
2022	14,600
2023	12,914
2024	11,409
2025	10,626
2026	10,595
2027 and thereafter	20,250
Total lease payments	83,288
Less: imputed interest	(15,150)
Total operating lease liabilities	68,138
Less: current lease obligations	(13,567)	$ (14,556)
Long-term lease obligations	$ 54,571	$ 41,802

XML

Deferred Revenue - Schedule of Deferred Revenue (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Jun. 30, 2021	Dec. 31, 2020	Sep. 30, 2020	Jun. 30, 2020	Dec. 31, 2019
Revenue from External Customer [Line Items]
Total deferred revenue, current	$ 248,140		$ 226,356
Total deferred revenue, non-current	66,536		57,897
Total deferred revenue	314,676	$ 297,326	284,253	$ 243,623	$ 244,084	$ 273,241
Platform, cloud subscription and managed services
Revenue from External Customer [Line Items]
Total deferred revenue, current	136,273		126,086
Total deferred revenue, non-current	65,275		56,691
Professional services
Revenue from External Customer [Line Items]
Total deferred revenue, current	111,867		100,270
Total deferred revenue, non-current	$ 1,261		$ 1,206

XML

Deferred Revenue - Changes in Deferred Revenue (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Deferred Revenue
Beginning balance	$ 297,326	$ 244,084	$ 284,253	$ 273,241
Billings for the period	139,320	99,591	380,991	259,818
Revenue recognized	(121,970)	(100,052)	(350,568)	(289,436)
Ending balance	$ 314,676	$ 243,623	$ 314,676	$ 243,623

XML

Deferred Revenue - Narrative (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Jun. 30, 2021	Dec. 31, 2020	Sep. 30, 2020	Jun. 30, 2020	Dec. 31, 2019
Revenue from Contract with Customer [Abstract]
Deferred revenue	$ 314,676	$ 297,326	$ 284,253	$ 243,623	$ 244,084	$ 273,241
Backlog	$ 11,100

XML

Deferred Revenue - Remaining Performance Obligations (Details)	9 Months Ended
	Sep. 30, 2021
Revenue from Contract with Customer [Abstract]
Deferred revenue	100.00%
Backlog	100.00%
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction, Start Date [Axis]: 2021-10-01
Revenue from Contract with Customer [Abstract]
Deferred revenue	79.00%
Backlog	48.00%
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Deferred Revenue	1 year
Backlog	1 year
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction, Start Date [Axis]: 2022-10-01
Revenue from Contract with Customer [Abstract]
Deferred revenue	14.00%
Backlog	30.00%
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Deferred Revenue	1 year
Backlog	1 year
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction, Start Date [Axis]: 2023-10-01
Revenue from Contract with Customer [Abstract]
Deferred revenue	6.00%
Backlog	20.00%
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Deferred Revenue	1 year
Backlog	1 year
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction, Start Date [Axis]: 2024-10-01
Revenue from Contract with Customer [Abstract]
Deferred revenue	1.00%
Backlog	2.00%
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Deferred Revenue
Backlog

XML

Convertible Senior Notes - Convertible Senior Notes due 2024 (Details)			1 Months Ended		9 Months Ended
	Sep. 30, 2021 $ / shares shares	May 24, 2018 USD ($) day $ / shares	May 31, 2018 USD ($)	Jun. 30, 2015 USD ($) day $ / shares	Sep. 30, 2021 USD ($) $ / shares	Sep. 30, 2020 USD ($)	Jun. 30, 2020 USD ($)	Jun. 05, 2018 USD ($)
Debt Instrument [Line Items]
Repurchase of convertible senior notes					$ 0	$ 96,392,000
Purchase of capped calls		$ 65,200,000
Convertible Senior Notes
Debt Instrument [Line Items]
Debt instrument, convertible, conversion ratio				0.0164572
Conversion price (usd per share) | $ / shares				$ 60.76
Threshold note trading days | day				5
Threshold percentage of note price trigger				98.00%
Redemption price, percentage		100.00%		100.00%
Redemption price triggered by fundamental change, percentage		100.00%
Convertible Senior Notes | Subsequent to September 30, 2015
Debt Instrument [Line Items]
Threshold trading days | day		20		20
Threshold consecutive trading days | day		30		30
Threshold percentage of stock price trigger		130.00%		130.00%
Convertible Senior Notes | On or After June 1, 2020 Until June 1, 2022
Debt Instrument [Line Items]
Threshold consecutive trading days | day				30
Convertible Senior Notes Due 2024 | Convertible Senior Notes
Debt Instrument [Line Items]
Principal amount		$ 525,000,000						$ 75,000,000
Interest rate		0.875%
Initial purchaser's discount		$ 15,000,000
Debt issuance costs		600,000
Proceeds from issuance of convertible senior notes, net of issuance costs		584,400,000
Repurchase of convertible senior notes		330,400,000
Purchase of capped calls		$ 65,200,000
Debt instrument, convertible, conversion ratio		0.0431167
Conversion price (usd per share) | $ / shares		$ 23.17
Threshold note trading days | day		5
Threshold consecutive note trading days		5 days
Threshold percentage of note price trigger		98.00%
Equity component of debt		$ 141,700,000
Remaining discount amortization period					2 years 8 months 12 days
Cap price (usd per share) | $ / shares		$ 34.32
Convertible Senior Notes Due 2024 | Convertible Senior Notes | Measurement Input, Discount Rate
Debt Instrument [Line Items]
Measurement input		0.055
Convertible Senior Notes Due 2024 | Convertible Senior Notes | Common Stock
Debt Instrument [Line Items]
Number of shares issued from conversion of debt (in shares) | shares	0
Fair value of common stock (usd per share) | $ / shares	$ 17.80				$ 17.80
Convertible Senior Notes Due 2024 | Convertible Senior Notes | On or After June 1, 2020 Until June 1, 2022
Debt Instrument [Line Items]
Threshold trading days | day		20
Threshold percentage of stock price trigger		130.00%
Series A Notes | Convertible Senior Notes
Debt Instrument [Line Items]
Principal amount				$ 460,000,000
Interest rate				1.00%
Repurchase of convertible senior notes			$ 330,400,000
Repurchased principal amount of debt		$ 340,200,000	$ 340,200,000				$ 96,400,000
Series A Notes | Convertible Senior Notes | Measurement Input, Discount Rate
Debt Instrument [Line Items]
Measurement input			0.045
Debt, Liability Component | Convertible Senior Notes
Debt Instrument [Line Items]
Initial purchaser's discount		11,500,000		$ 17,600,000
Debt issuance costs		500,000		400,000
Carrying amount of convertible debt		458,300,000
Debt, Equity Component | Convertible Senior Notes
Debt Instrument [Line Items]
Initial purchaser's discount		3,500,000		5,400,000
Debt issuance costs		$ 100,000		$ 100,000

XML

Convertible Senior Notes - Schedule of the Liability and Equity Components of the Convertible Senior Notes (Details) - Convertible Senior Notes - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Convertible Senior Notes Due 2024
Debt Instrument [Line Items]
Principal	$ 600,000	$ 600,000
Less: Notes discounts and issuance costs, net of amortization	(73,703)	(92,750)
Net carrying amount	526,297	507,250
Equity component, net of issuance costs	138,064	138,064
Series A Notes
Debt Instrument [Line Items]
Principal	23,436	23,436
Less: Notes discounts and issuance costs, net of amortization	0	0
Net carrying amount	23,436	23,436
Equity component, net of issuance costs	15,559	15,559
Series B Notes
Debt Instrument [Line Items]
Principal	460,000	460,000
Less: Notes discounts and issuance costs, net of amortization	(14,268)	(29,790)
Net carrying amount	445,732	430,210
Equity component, net of issuance costs	$ 117,834	$ 117,834

XML

Convertible Senior Notes - Schedule of Interest Expense related to the Convertible Senior Notes (Details) - Convertible Senior Notes - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Convertible Senior Notes Due 2024
Debt Instrument [Line Items]
Coupon interest	$ 1,313	$ 1,313	$ 3,938	$ 3,938
Non-cash interest expense related to convertible senior notes	6,427	6,119	19,047	18,133
Total interest expense recognized	$ 7,740	$ 7,432	$ 22,985	$ 22,071
Effective interest rate on the liability component	6.00%	6.00%	6.00%	6.10%
Series A Notes
Debt Instrument [Line Items]
Coupon interest	$ 59	$ 59	$ 176	$ 577
Non-cash interest expense related to convertible senior notes	0	0	0	2,540
Total interest expense recognized	$ 59	$ 59	$ 176	$ 3,117
Effective interest rate on the liability component	1.00%	1.00%	1.00%	3.50%
Series B Notes
Debt Instrument [Line Items]
Coupon interest	$ 1,869	$ 1,869	$ 5,606	$ 5,606
Non-cash interest expense related to convertible senior notes	5,235	4,994	15,523	14,806
Total interest expense recognized	$ 7,104	$ 6,863	$ 21,129	$ 20,412
Effective interest rate on the liability component	6.50%	6.50%	6.50%	6.60%

XML

Convertible Senior Notes - Convertible Senior Notes due 2035 (Details) - Convertible Senior Notes		1 Months Ended
	May 24, 2018 USD ($) day	Jun. 30, 2015 USD ($) day $ / shares
Debt Instrument [Line Items]
Debt instrument, convertible, conversion ratio		0.0164572
Conversion price (usd per share) | $ / shares		$ 60.76
Threshold note trading days | day		5
Threshold percentage of note price trigger		98.00%
Redemption price, percentage	100.00%	100.00%
Purchase price trigger percentage		100.00%
Subsequent to September 30, 2015
Debt Instrument [Line Items]
Threshold trading days | day	20	20
Threshold consecutive trading days | day	30	30
Threshold percentage of stock price trigger	130.00%	130.00%
On or After June 1, 2020 Until June 1, 2022
Debt Instrument [Line Items]
Threshold consecutive trading days | day		30
Series A Notes
Debt Instrument [Line Items]
Principal amount		$ 460,000,000
Interest rate		1.00%
Series B Notes
Debt Instrument [Line Items]
Principal amount		$ 460,000,000
Interest rate		1.625%
Initial purchaser's discount		$ 23,000,000
Debt issuance costs		500,000
Proceeds from issuance of convertible senior notes, net of issuance costs		$ 896,500,000
Threshold consecutive note trading days		5 days
Series B Notes | On or After June 1, 2020 Until June 1, 2022
Debt Instrument [Line Items]
Threshold trading days | day		20
Threshold percentage of stock price trigger		130.00%
Required trading days since notice of redemption, not more than		3 days
Debt, Liability Component
Debt Instrument [Line Items]
Initial purchaser's discount	$ 11,500,000	$ 17,600,000
Debt issuance costs	500,000	400,000
Debt, Equity Component
Debt Instrument [Line Items]
Initial purchaser's discount	3,500,000	5,400,000
Debt issuance costs	$ 100,000	$ 100,000

XML

Convertible Senior Notes - Repurchase of a Portion of the Series A Notes (Details) $ in Thousands	1 Months Ended		9 Months Ended
	Jun. 30, 2020 USD ($)	May 31, 2018 USD ($)	Sep. 30, 2021 USD ($)	Sep. 30, 2020 USD ($)	Dec. 31, 2020 USD ($)	May 24, 2018 USD ($)
Debt Instrument [Line Items]
Repurchase of convertible senior notes			$ 0	$ 96,392
Convertible Senior Notes
Debt Instrument [Line Items]
Remaining discount and issuance cost, weighted average amortization period			8 months 12 days
Series A Notes | Convertible Senior Notes
Debt Instrument [Line Items]
Repurchase of convertible senior notes		$ 330,400
Repurchased principal amount of debt	$ 96,400	340,200				$ 340,200
Equity component of debt, subsequent adjustments		$ 13,000
Remaining expected life		2 years
Loss on repurchase of convertible senior notes	0	$ 10,800
Extinguishment of debt, amount	$ 96,400
Debt amount outstanding			$ 23,436		$ 23,436
Series A Notes | Convertible Senior Notes | Measurement Input, Discount Rate
Debt Instrument [Line Items]
Measurement input		0.045
Series A Notes | Convertible Senior Notes | Convertible senior notes
Debt Instrument [Line Items]
Repurchase of convertible senior notes		$ 317,400

XML

Convertible Senior Notes - Prepaid Forward Stock Purchase (Narrative) (Details) - USD ($) shares in Millions, $ in Millions		1 Months Ended	4 Months Ended
	Jun. 03, 2020	Jun. 30, 2015	Sep. 30, 2021
Debt Disclosure [Abstract]
Stock repurchased during period		$ 150.0	$ 100.0
Stock repurchased and retired during period shares (shares)	1.6
Antidilutive securities excluded from net loss per share (shares)	1.8

XML

Commitments and Contingencies (Details) $ in Millions	9 Months Ended
	Sep. 30, 2021 USD ($) claim	Dec. 31, 2020 USD ($)
Long-term Purchase Commitment [Line Items]
Letters of credit available	$ 3.4	$ 3.9
Amount drawn against letters of credit	$ 0.0
Number of claims | claim	0
Software and Services
Long-term Purchase Commitment [Line Items]
Non-cancellable open orders	$ 26.1

XML

Redeemable Convertible Preferred Stock (Details) $ / shares in Units, $ in Thousands		3 Months Ended		9 Months Ended
	Dec. 11, 2020 USD ($) day $ / shares shares	Sep. 30, 2021 USD ($) $ / shares	Sep. 30, 2020 USD ($)	Sep. 30, 2021 USD ($) $ / shares	Sep. 30, 2020 USD ($)	Dec. 31, 2020 USD ($)
Class of Stock [Line Items]
Dividend on series A convertible preferred stock		$ 4,613	$ 0	$ 13,688	$ 0
Series A convertible preferred stock
Class of Stock [Line Items]
Paid in-kind dividend period	3 years
Conversion price (usd per share) | $ / shares	$ 17.25	$ 17.25		$ 17.25
Trading days | day	20
Consecutive trading days | day	30
Conversion price, percent	175.00%
Percent issued still outstanding	25.00%
Excess of net debt	$ 350,000
Accretion recognized		$ 100		$ 100		$ 4,700
Dividend on series A convertible preferred stock				13,700
Dividends payable		$ 14,700		$ 14,700
Series A convertible preferred stock | Series A Securities Financing Agreements
Class of Stock [Line Items]
Number of shares issued and sold (shares) | shares	400,000
Dividend rate	0.045
Sale price (usd per share) | $ / shares	$ 1,000
Aggregate purchase price	$ 400,000

XML

Common Shares Reserved for Issuance - Narrative (Details)	9 Months Ended
	Sep. 30, 2021 vote $ / shares shares	Dec. 31, 2020 $ / shares shares
Class of Stock [Line Items]
Common stock, shares authorized (shares)	1,000,000,000	1,000,000,000
Common stock, par value (usd per share) | $ / shares	$ 0.0001	$ 0.0001
Voting rights, number of votes | vote	1
Series A convertible preferred stock
Class of Stock [Line Items]
Preferred stock authorized (shares)	100,000,000	100,000,000
Preferred stock, par value (usd per share) | $ / shares	$ 0.0001	$ 0.0001
Preferred stock, shares issued (shares)	400,000	400,000
Preferred stock, outstanding (shares)	400,000	400,000

XML

Common Shares Reserved for Issuance - Schedule of Reserved Shares of Common Stock for Issuance (Details) - shares shares in Thousands	Sep. 30, 2021	Dec. 31, 2020
Class of Stock [Line Items]
Shares reserved for future issuance (shares)	104,506	99,275
Series A Preferred Stock
Class of Stock [Line Items]
Shares reserved for future issuance (shares)	24,043	23,249
Convertible senior notes
Class of Stock [Line Items]
Shares reserved for future issuance (shares)	33,856	33,856
Reserved under stock award plans
Class of Stock [Line Items]
Shares reserved for future issuance (shares)	41,923	38,745
Employee Stock Purchase Plan (ESPP)
Class of Stock [Line Items]
Shares reserved for future issuance (shares)	4,684	3,425

XML

Equity Award Plans - Narrative (Details) - USD ($) shares in Thousands, $ in Millions	9 Months Ended
	Sep. 30, 2021	Dec. 31, 2020
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Shares reserved for future issuance (shares)	104,506	99,275
Compensation cost not yet recognized	$ 419.0
Compensation cost not yet recognized, period for recognition	2 years 8 months 12 days
Employee Stock Purchase Plan (ESPP)
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Shares reserved for future issuance (shares)	4,684	3,425
Acquisition price at lower of fair market value, percentage	85.00%
2013 Plan
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
General vesting period	4 years
Award expiration period from grant date	10 years
Employee stock ownership, combined voting power of all stock	10.00%
Minimum exercise price as a percentage of the fair value per share	110.00%
Award expiration period, for excess voting power grants	5 years
Shares reserved for future issuance (shares)	13,800	14,900
2013 Plan | Employee Stock Option
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Grant date fair value, percentage, no less than	100.00%

XML

Equity Award Plans - Summary of the Activity for Stock Option Changes and Summary of Information Related to Options Outstanding and Options Exercisable (Details) - USD ($) $ / shares in Units, shares in Thousands, $ in Thousands	9 Months Ended	12 Months Ended
	Sep. 30, 2021	Dec. 31, 2020
Number of Shares
Beginning balance, options outstanding (shares)	3,485
Exercised (shares)	(913)
Cancelled (shares)	(99)
Ending balance, options outstanding (shares)	2,473	3,485
Options exercisable (shares)	1,642
Weighted- Average Exercise Price (per share)
Balance (usd per share)	$ 8.81	$ 8.33
Exercised (usd per share)	4.76
Cancelled (usd per share)	29.39
Options exercisable (usd per share)	$ 12.05
Weighted- Average Contractual Life (years)
Balance	5 years	5 years 3 months 18 days
Options exercisable — September 30, 2021	3 years 7 months 6 days
Aggregate Intrinsic Value
Aggregate intrinsic value balance	$ 31,100	$ 60,679
Exercised	13,972
Options exercisable — September 30, 2021	$ 18,311

XML

Equity Award Plans - Summary of Activity for Restricted Common Stock, RSAs and RSUs and Summary of Information Related to Unvested Restricted Common Stock, RSAs and RSUs and those Expected to Vest (Details) - USD ($) $ / shares in Units, shares in Thousands, $ in Thousands	9 Months Ended	12 Months Ended
	Sep. 30, 2021	Dec. 31, 2020
Number of Shares
Beginning balance (shares)	20,400
Granted (shares)	16,045
Vested (shares)	(8,135)
Cancelled (shares)	(2,616)
Ending balance (shares)	25,694	20,400
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition (shares)	2,748
Weighted- Average Grant Date Fair Value (per share)
Balance (usd per share)	$ 18.39	$ 15.35
Granted (usd per share)	20.62
Vested (usd per share)	15.71
Cancelled (usd per share)	17.23
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition (usd per share)	$ 18.69
Weighted- Average Contractual Life (years)
Balance	1 year 7 months 6 days	1 year 4 months 24 days
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition — September 30, 2021	1 year 7 months 6 days
Aggregate Intrinsic Value
Balance	$ 457,355	$ 470,424
Unvested awards for which the requisite service period has not been rendered and vesting is subject to the achievement of a performance condition — September 30, 2021	$ 48,907

XML

Equity Award Plans - Assumptions (Details) - Employee Stock Purchase Plan (ESPP) - $ / shares	3 Months Ended
	Sep. 30, 2021	Sep. 30, 2020
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Fair value of common stock (usd per share)	$ 22.33	$ 13.06
Risk-free interest rate	0.04%
Risk free interest rate, minimum		0.17%
Risk free interest rate, maximum		0.18%
Sounds	0.00%	0.00%
Minimum
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Expected term (in years)	6 months	6 months
Volatility	55.00%	52.00%
Maximum
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Expected term (in years)	1 year	1 year
Volatility	62.00%	68.00%

XML

Equity Award Plans - Schedule of Stock-Based Compensation Expense Related to Stock Options, ESPP and Restricted Stock Units and Awards (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	$ 39,122	$ 29,279	$ 111,266	$ 81,788
Cost of platform, cloud subscription and managed services revenue
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	3,451	2,667	9,752	7,532
Cost of professional services revenue
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	6,253	4,722	17,574	12,470
Research and development
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	9,644	6,232	27,387	16,598
Sales and marketing
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	10,176	9,706	31,605	26,749
General and administrative
Employee Service Share-based Compensation, Allocation of Recognized Period Costs [Line Items]
Stock-based compensation expense	$ 9,598	$ 5,952	$ 24,948	$ 18,439

XML

Income Taxes - Narrative (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Income Tax Disclosure [Abstract]
Provision for income taxes	$ 498	$ 458	$ 2,441	$ 1,464

XML

Net Loss per Share - Schedule of Computation of Net Loss per Common Share (Details) - USD ($) $ / shares in Units, shares in Thousands, $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Numerator:
Loss from continuing operations	$ (101,247)	$ (81,613)	$ (286,843)	$ (269,416)
Net income from discontinued operations	33,025	42,494	103,279	100,716
Net loss	(68,222)	(39,119)	(183,564)	(168,700)
Dividend on series A convertible preferred stock	(4,613)	0	(13,688)	0
Accretion of series A convertible preferred stock	0	0	(82)	0
Net loss attributable to common stockholders	(72,835)	(39,119)	(197,334)	(168,700)
Net loss attributable to common stockholders	$ (72,835)	$ (39,119)	$ (197,334)	$ (168,700)
Denominator:
Weighted average number of shares outstanding—basic (shares)	237,168	224,807	236,404	221,329
Weighted average number of shares outstanding— diluted (shares)	237,168	224,807	236,404	221,329
Net loss from continuing operations per share attributable to common stockholders, Basic (usd per share)	$ (0.45)	$ (0.36)	$ (1.27)	$ (1.22)
Net loss from continuing operations per share attributable to common stockholders, diluted (usd per share)	(0.45)	(0.36)	(1.27)	(1.22)
Discontinued operations, basic (usd per share)	0.14	0.19	0.44	0.46
Discontinued operations, diluted (usd per share)	0.14	0.19	0.44	0.46
Net loss per share attributable to common stockholders, basic (usd per share)	(0.31)	(0.17)	(0.83)	(0.76)
Net loss per share attributable to common stockholders, diluted (usd per share)	$ (0.31)	$ (0.17)	$ (0.83)	$ (0.76)

XML

Net Loss per Share - Schedule of Outstanding Options and Unvested Shares Excluded from Computation of Diluted Net Loss per Common Share (Details) - shares shares in Thousands		9 Months Ended
	Jun. 03, 2020	Sep. 30, 2021	Sep. 30, 2020
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)	1,800
Options to purchase common stock
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)		2,473	2,999
Unvested restricted stock awards and units
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)		25,694	21,633
Convertible preferred stock
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)		24,043	0
Convertible senior notes
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)		33,856	33,856
ESPP shares
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from net loss per share (shares)		530	744

XML

Employee Benefit Plan (Details) $ in Thousands	9 Months Ended
	Sep. 30, 2021 USD ($)
Retirement Benefits [Abstract]
Employer contributions vested percentage	100.00%
Employer matching contributions	$ 0

XML

Segment and Major Customers Information - Narrative (Details) - segment	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021
Revenue, Major Customer [Line Items]
Number of reportable segments			1
Number of operating segments			1
Customer Concentration Risk | Revenue | One Reseller
Revenue, Major Customer [Line Items]
Concentration risk percentage	10.00%	10.00%	10.00%

XML

Segment and Major Customers Information - Schedule of Revenue by Geographic Region (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	$ 121,970	$ 100,052	$ 350,568	$ 289,436
U.S.
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	83,708	71,509	238,978	205,577
EMEA
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	16,777	12,000	50,211	36,836
APAC
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	12,110	9,834	35,032	26,799
Other
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	9,375	6,709	26,347	20,224
Platform, cloud subscription and managed services
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	60,249	48,613	168,184	141,966
Platform, cloud subscription and managed services | U.S.
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	40,844	35,482	112,687	103,394
Platform, cloud subscription and managed services | EMEA
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	9,040	5,749	26,056	17,256
Platform, cloud subscription and managed services | APAC
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	7,245	5,548	21,043	15,423
Platform, cloud subscription and managed services | Other
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	3,120	1,834	8,398	5,893
Professional services
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	61,721	51,439	182,384	147,470
Professional services | U.S.
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	42,864	36,027	126,291	102,183
Professional services | EMEA
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	7,737	6,251	24,155	19,580
Professional services | APAC
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	4,865	4,286	13,989	11,376
Professional services | Other
Revenues from External Customers and Long-Lived Assets [Line Items]
Revenue	$ 6,255	$ 4,875	$ 17,949	$ 14,331

XML

Segment and Major Customers Information - Revenue by Product (Details) - USD ($) $ in Thousands	3 Months Ended		9 Months Ended
	Sep. 30, 2021	Sep. 30, 2020	Sep. 30, 2021	Sep. 30, 2020
Segment Reporting Information [Line Items]
Revenue	$ 121,970	$ 100,052	$ 350,568	$ 289,436
Platform, cloud subscription and managed services
Segment Reporting Information [Line Items]
Revenue	60,249	48,613	168,184	141,966
Professional services
Segment Reporting Information [Line Items]
Revenue	$ 61,721	$ 51,439	$ 182,384	$ 147,470

XML

Segment and Major Customers Information - Summary of Long lived Assets by Geographic Region Based on Physical Location (Details) - USD ($) $ in Thousands	Sep. 30, 2021	Dec. 31, 2020
Entity Location [Line Items]
Total property and equipment, net	$ 60,772	$ 64,336
United States
Entity Location [Line Items]
Total property and equipment, net	57,382	59,998
International
Entity Location [Line Items]
Total property and equipment, net	$ 3,390	$ 4,338

XML

Subsequent Events (Details) $ in Billions	Oct. 08, 2021 USD ($)
Subsequent Event
Subsequent Event [Line Items]
Total cash consideration	$ 1.2