RISK FACTORS

A description of the risks and uncertainties associated with our business and ownership of our ordinary shares is set forth below. You should carefully consider the risks and uncertainties described below, together with all of the other information in this prospectus, including the section titled “Management’s Discussion and Analysis of Financial Condition and Result of Operations” and our consolidated financial statements and the related notes thereto, before making a decision to invest in our ordinary shares. Our business, results of operations, financial condition, or prospects could also be harmed by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be materially and adversely affected. In that event, the market price of our ordinary shares could decline and you could lose all or part of your investment.

Risks Related to Our Business

Our business and operations have experienced rapid growth, and if we do not appropriately manage future growth, if any, or are unable to improve our systems, processes and controls, our business, financial condition, results of operations, and prospects will be adversely affected.

We have experienced rapid growth and increased demand for our products. Our total number of customers has grown to approximately 5,800 organizations as of June 30, 2020 from approximately 5,600 organizations as of December 31, 2019. Our employee headcount has also increased significantly, and we expect to continue to grow our headcount over the next year. The growth and expansion of our business places a continuous significant strain on our management, operational, and financial resources. In addition, as customers adopt our products for an increasing number of use cases, we have had to support more complex commercial relationships. We must continue to improve and expand our information technology and financial infrastructure, our security and compliance requirements, our operating and administrative systems, and our relationships with various partners and other third parties, and our ability to manage headcount and processes in an efficient manner to manage our growth effectively.

We may not be able to sustain the pace of improvements to our products successfully or implement systems, processes, and controls in an efficient or timely manner or in a manner that does not negatively affect our results of operations. Our failure to improve our systems, processes, and controls, or their failure to operate in the intended manner, may result in our inability to manage the growth of our business and to forecast our revenue, expenses, and earnings accurately, or to prevent losses.

As we expand our business and operate as a public company, we may find it difficult to maintain our corporate culture while managing our employee growth. Any failure to manage our anticipated growth and related organizational changes in a manner that preserves our culture could negatively impact future growth and achievement of our business objectives. Additionally, our productivity and the quality of our products may be adversely affected if we do not integrate and train our new employees quickly and effectively. Failure to manage any future growth effectively could result in increased costs, negatively affect our customers’ satisfaction with our products and harm our results of operations.

Our recent rapid growth may not be indicative of our future growth, and we may not be able to sustain our revenue growth rate in the future. Our rapid growth also makes it difficult to evaluate our future prospects and may increase the risk that we will not be successful.

Our total revenues for the six months ended June 30, 2019 and 2020 were $46.1 million and $69.3 million, respectively, representing a growth rate of 50%. Our total revenues for the years ended December 31, 2018 and 2019 were $63.5 million and $104.7 million, respectively, representing an annual growth rate of 65%. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future

 

15

performance. Even if our revenue continues to increase, we expect our revenue growth rate to decline in future periods. Many factors may contribute to declines in our growth rate, including greater market penetration, increased competition, slowing demand for our platform, a failure by us to continue capitalizing on growth opportunities, the maturation of our business, and global economic downturn, among others. If our growth rate declines, investors’ perceptions of our business and the market price of our ordinary shares could be adversely affected.

In addition, our rapid growth may make it difficult to evaluate our future prospects. Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business would be harmed. Moreover, if the assumptions that we use to plan our business are incorrect or change in reaction to changes in our market, or we are unable to maintain consistent revenue or revenue growth, our share price could be volatile, and it may be difficult to achieve and maintain profitability.

We have a history of losses and may not be able to achieve profitability on a consistent basis. If we cannot achieve profitability, our business, financial condition, and results of operations may suffer.

Although we have achieved positive operating cash flow and free cash flow for each of the past five years, we have incurred losses in all years since our incorporation. We incurred a net loss of $2.1 million, and $0.4 million in the six months ended June 30, 2019 and 2020, respectively, and $26.0 million and $5.4 million in the years ended December 31, 2018 and 2019, respectively. As a result, we had an accumulated deficit of $65.8 million as of June 30, 2020. We anticipate that our operating expenses will increase substantially in the foreseeable future as we continue to enhance our products, broaden our customer base, expand our sales and marketing activities, including building a small, high-touch strategic sales team and customer success team, expanding our operations, hiring additional employees, and continuing to develop our technology. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses. Revenue growth may slow or revenue may decline for a number of possible reasons, including slowing demand for our products or increasing competition. Any failure to increase our revenue as we grow our business could prevent us from achieving profitability or maintaining positive operating cash flow and free cash flow at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer.

The markets for our products are new, unproven, and evolving and may develop more slowly or differently than we expect. Our future success depends on the growth and expansion of these markets and our ability to adapt and respond effectively to evolving markets.

The markets for our products are relatively new, rapidly evolving, and unproven. Accordingly, it is difficult to predict customer adoption and renewals and demand for our platform and our products, the entry of competitive products, the success of existing competitive products, or the future growth rate, expansion, longevity, and the size of the DevOps and software release management software markets. The expansion of and our ability to penetrate, these new and evolving markets depends on a number of factors, including: the cost, performance, and perceived value associated with DevOps technologies, as well as the ability of DevOps workflows to improve critical steps in the lifecycle of software, including managing software security. If we or other software and SaaS providers experience security incidents, loss of customer data, or disruptions in delivery or service, the market for these applications as a whole, including our platform and products may be negatively affected. If DevOps and software release management software do not continue to achieve market acceptance, or there is a reduction in demand caused by decreased customer acceptance, technological challenges, weakening economic conditions, privacy, data protection and data security concerns, governmental regulation, competing technologies and products, or decreases in information technology spending or otherwise, the market for our platform and products might not continue to develop or might develop more slowly than we expect, which could adversely affect our business, financial condition, and results of operations.

 

16

Our results of operations are likely to fluctuate from quarter to quarter, which could adversely affect the trading price of our ordinary shares.

Our results of operations, including our revenue, cost of revenue, gross margin, operating expenses, cash flow, and deferred revenue, have fluctuated from quarter to quarter in the past and may continue to vary significantly in the future so that period-to-period comparisons of our results of operations may not be meaningful. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, may be difficult to predict, and may or may not fully reflect the underlying performance of our business. Factors that may cause fluctuations in our quarterly financial results include:

 

•

our ability to attract and retain new customers;

 

•

the loss of existing customers;

 

•

renewals and timing of renewals;

 

•

customer usage of our products;

 

•

customer satisfaction with our products and platform capabilities and customer support;

 

•

our ability to expand sales within our existing customers;

 

•

mergers and acquisitions that might affect our customer base including the consolidation of affiliates’ multiple paid business accounts into a single paid business account;

 

•

mix of our revenue;

 

•

our ability to gain new partners and retain existing partners;

 

•

our ability to convert users of free trials, freemium offerings, and open source version of JFrog Artifactory into subscribing customers;

 

•

increases or decreases in the number of elements of our subscriptions or pricing changes upon any renewals of customer agreements;

 

•

fluctuations in share-based compensation expense;

 

•

decisions by potential customers to purchase alternative solutions;

 

•

decisions by potential customers to develop in-house DevOps technologies as alternatives to our products;

 

•

the amount and timing of operating expenses related to the maintenance and expansion of our business and operations, including investments in research and development, sales and marketing, and general and administrative resources;

 

•

network outages;

 

•

actual or perceived breaches of, or failures relating to, privacy, data protection, or data security;

 

•

the timing of expenses related to the development or acquisition of technologies or businesses and potential future charges for impairment of goodwill from acquired companies;

 

•

general economic, industry, and market conditions;

 

•

the impact of the coronavirus pandemic or other global health crises on our business and general economic conditions;

 

•

the impact of political uncertainty or unrest;

 

•

changes in our pricing policies or those of our competitors;

 

•

fluctuations in the growth rate of the overall market that our products address;

 

17

•

the budgeting cycles and purchasing practices of customers;

 

•

the business strengths or weakness of our customers;

 

•

our ability to collect timely on invoices or receivables;

 

•

the cost and potential outcomes of future litigation or other disputes;

 

•

future accounting pronouncements or changes in our accounting policies;

 

•

our overall effective tax rate, including impacts caused by any reorganization in our corporate tax structure and any new legislation or regulatory developments;

 

•

our ability to successfully expand our business in the U.S. and internationally;

 

•

fluctuations in the mix of our revenue between self-managed subscriptions and SaaS subscriptions;

 

•

fluctuations in foreign currency exchange rates; and

 

•

the timing and success of new products introduced by us or our competitors or any other change in the competitive dynamics of our industry, including consolidation among competitors, customers or partners.

The impact of one or more of the foregoing or other factors may cause our results of operations to vary significantly. Such fluctuations could cause us to fail to meet the expectations of investors or securities analysts, which could cause the trading price of our ordinary shares to fall substantially, and we could face costly lawsuits, including securities class action suits.

If we are not able to keep pace with technological and competitive developments or fail to integrate our products with a variety of technologies that are developed by others, our products may become less marketable, less competitive, or obsolete, and our results of operations may be adversely affected.

In order to provide value for our customers, we must offer products that allow our customers to compile software from source code repositories, manage the dependencies among components within software packages, move packages to a universal repository, ingest packages from third parties, including open source libraries, scan for vulnerabilities through various stages, distribute to endpoints, and deploy in production, all through a single user access point. The success of our new product introductions depends on a number of factors including, but not limited to, timely and successful product development, market acceptance, our ability to manage the risks associated with new product releases, the effective management of development and other spending in connection with anticipated demand for new products, and the availability of newly developed products. We have in the past experienced bugs, errors, or other defects or deficiencies in new products and product updates and delays in releasing new products, deployment options, and product enhancements and may have similar experiences in the future. As a result, some of our customers may either defer purchasing our products until the next upgrade is released or switch to a competitor if we are not able to keep up with technological developments.

To keep pace with technological and competitive developments we have in the past invested, and may continue to invest, in the acquisition of complementary businesses, technologies, services, products, and other assets that expand the products that we can offer our customers. We may make these investments without being certain that they will result in products or enhancements that will be accepted by existing or prospective customers or that will achieve market acceptance. If we are unable to successfully enhance our existing products to meet evolving customer requirements, increase adoption and use cases of our products, develop new products, quickly resolve security vulnerabilities, or if our efforts to increase the use cases of our products are more expensive than we expect, then our business, results of operations and financial condition would be adversely affected.

In addition, our success depends on our ability to integrate our products with a variety of third-party technologies. Our technology partnership ecosystem powers significant extensibility of our products and offers

 

18

our customers the ability to use external tools of their choice with our products and to deploy our products in their preferred environments and successfully support new package technologies as they arise. Further, our SaaS products must be compatible with the major cloud service providers in order to support local hosting of our JFrog-managed products in geographies chosen by our customers. We also benefit from access to public and private vulnerability databases.

Changes in our relationship with any provider, the instability or vulnerability of any third-party technology, or the inability of our products to successfully integrate with third-party technology may adversely affect our business and results of operations. Any losses or shifts in the market position of these providers in general, in relation to one another or to new competitors or new technologies, could lead to losses in our relationships or customers, or to our need to identify and develop integrations with new third-party technologies. Such changes could consume substantial resources and may not be effective. Further, any expansion into new geographies may require us to integrate our products with new third-party technology and invest in developing new relationships with providers. If we are unable to respond to changes in a cost-effective manner, our products may become less marketable, less competitive, or obsolete and our results of operations may be negatively impacted.

A limited-functionality version of JFrog Artifactory is licensed under an open source license, which could negatively affect our ability to monetize our products and protect our intellectual property rights.

We make a limited-functionality version of JFrog Artifactory that only supports Java-based packages, and also lacks other features required for organization-wide adoption by DevOps teams, available under an open source license, the Affero General Public License version 3.0 (“AGPL”). The AGPL grants licensees broad freedom to view, use, copy, modify, and redistribute the source code of this limited version of JFrog Artifactory. Anyone can download a free copy of this limited version of JFrog Artifactory from the Internet, and we neither know who all of our AGPL licensees are, nor have visibility into how JFrog Artifactory is being used by licensees, so our ability to detect violations of the open source license is extremely limited.

The AGPL has a “copyleft” requirement that further distribution of AGPL-licensed software and modifications or adaptations to that software be made available pursuant to the AGPL as well. This leads some commercial enterprises to consider AGPL-licensed software to be unsuitable for commercial use. However, the AGPL would not prevent a commercial licensee from taking this open source version of JFrog Artifactory under AGPL and using it for internal purposes for free. AGPL also would not prevent a commercial licensee from taking this open source version of JFrog Artifactory under AGPL and using it to compete in our markets by providing it for free.

This competition can develop without the degree of overhead and lead time required by traditional proprietary software companies, due to the permissions allowed under AGPL. It is also possible for competitors to develop their own software based on our open source version of JFrog Artifactory. Although this software would also need to be made available for free under the AGPL, it could reduce the demand for our products and put pricing pressure on our subscriptions. We cannot guarantee that we will be able to compete successfully against current and future competitors, some of which may have greater resources than we have, or that competitive pressure or the availability of new open source software will not result in price reductions, reduced operating margins, and loss of market share, any one of which could harm our business, financial condition, results of operations, and cash flows.

The market for our products is nascent and highly fragmented, and we may not be able to compete successfully against current and future competitors, some of whom have greater financial, technical, and other resources than we do. If we do not compete successfully our business, financial condition, and results of operations could be harmed.

Our platform consists of multiple products and we compete in each product category as well as the entire platform level. The market for our products is highly fragmented, quickly evolving, and subject to rapid changes

 

19

in technology. We believe that our ability to compete successfully depends upon many factors both within and beyond our control, including the following:

 

•

ability to provide an end-to-end, unified platform solution for the CSRM workflow;

 

•

breadth of technologies we support;

 

•

breadth of technology integrations;

 

•

total cost of ownership;

 

•

extensibility across organizations, including software developers, IT operators, and IT managers;

 

•

ability to enable collaboration between software developers and IT operators;

 

•

ability to deploy our products in any combination of cloud, multi-cloud or on-premise environments;

 

•

performance, security, scalability, and reliability;

 

•

quality of customer experience and satisfaction;

 

•

quality of customer support;

 

•

ease of implementation and use; and

 

•

brand recognition and reputation.

Our products are available for both self-managed and SaaS deployments. While we believe we compete successfully on the above factors, particularly with regards to the comprehensive nature of our solutions, we do experience competition in each of these categories with different vendors:

 

•

With respect to self-managed deployments, diversified software companies, such as IBM, Inc. (Red Hat), Pivotal Software, Inc., and VMware, Inc., and developer-focused software companies, such as GitLab Inc. and Sonatype, Inc., have offerings that compete with certain of our products.

 

•

With respect to SaaS deployments, cloud providers, such as Alphabet Inc. (GCP), Amazon.com, Inc. (AWS), and Microsoft Corporation (Azure DevOps including GitHub), have offerings that compete with certain of our products.

Additionally, we compete with home-grown, start-up, and open source technologies across the categories described above. Many of our competitors have greater financial, technical, and other resources, greater brand recognition, larger sales forces and marketing budgets, broader distribution networks, more diverse product and services offerings, and larger and more mature intellectual property portfolios. They may be able to leverage these resources to gain business in a manner that discourages customers from purchasing our offerings. Furthermore, we expect that our industry will continue to attract new companies, including smaller emerging companies, which could introduce new offerings. We may also expand into new markets and encounter additional competitors in such markets.

JFrog Artifactory is at the core of our business and any decline in demand for JFrog Artifactory occasioned by malfunction, inferior performance, increased competition or otherwise, will impact our business, results of operations and financial condition.

Our subscription structure is aligned with the way we have built our platform, and JFrog Artifactory is at the core of our business and all subscriptions. Accordingly, market acceptance of JFrog Artifactory is critical to our success. If demand for JFrog Artifactory declines, the demand for our other products will also decline. Demand for JFrog Artifactory is affected by a number of factors, many of which are beyond our control, such as continued market acceptance of JFrog Artifactory and products by customers for existing and new use cases, the timing of development and release of new features, functionality, and lower cost alternatives introduced by our competitors, technological changes and developments within the markets we serve, and growth or contraction in

 

20

our addressable markets. If we are unable to continue to meet customer demand, if our products fail to compete with the products of our competitors, if we fail to achieve more widespread market acceptance of JFrog Artifactory, or if our products fail to meet statutory, regulatory, contractual, or other applicable requirements, then our business, results of operations, and financial condition would be harmed.

If we are unable to increase sales of our subscriptions to new customers, sell additional subscriptions to our existing customers, or expand the value of our existing customers’ subscriptions, our future revenue and results of operations will be harmed.

Our future success depends on our ability to sell our subscriptions to new customers and to expand within our existing customers by selling paid subscriptions to our existing users and expanding the value and number of existing customers’ subscriptions within the organization. Our ability to sell new subscriptions depends on a number of factors, including the prices of our products, the functionality of our products, the prices of products offered by our competitors, and the budgets of our customers. We serve customer needs with multiple tiers of subscriptions that differ based on product depth and functionality. We also offer a limited free trial of our platform and limited freemium versions of some of our products. The free trial gives users access to the full functionality of our platform for a limited period, whereas the freemium container registry offering (“JCR”) give users permanent access to limited-functionality. To the extent that users of our free trial and freemium versions do not become, or lead others not to become, paying customers, we will not realize the intended benefits of these strategies, our expenses may increase as a result of associated hosting costs, and our ability to grow our business may be harmed.

We also offer an open source version of JFrog Artifactory. Our open source version is intended to increase visibility and familiarity of our platform among the developer communities. We invest in developers and developer communities through multiple channels, including the introduction of new open source projects, as well as through our annual developer conference, swampUP, and other community-centered events. There is no guarantee that such events will translate into new customers, or that freemium and open source users will convert to paying subscribers.

In addition, a significant aspect of our sales and marketing focus is to expand deployments within existing customers. The rate at which our customers purchase additional subscriptions and expand the value of existing subscriptions depends on a number of factors, including customers’ level of satisfaction with our products, the nature and size of the deployments, the desire to address additional use cases, and the perceived need for additional features, as well as general economic conditions. If our customers do not recognize the potential of our products, our business would be materially and adversely affected.

Seasonality may cause fluctuations in our sales and results of operations.

Historically, we have experienced seasonality in customer bookings, as we typically enter into a higher percentage of subscription agreements with new customers and renewals with existing customers in the fourth quarter of the year. We believe that this results from the procurement, budgeting, and deployment cycles of many of our customers, particularly our enterprise customers. We expect that this seasonality will continue to affect our bookings, deferred revenue, and our results of operations in the future and might become more pronounced as we continue to target larger enterprise customers.

In addition, we have historically experienced seasonality in usage patterns by users of our SaaS subscriptions. We typically experience reduced usage by our customers during holiday periods, particularly at the end of the fourth quarter. As revenue from our SaaS subscriptions is recognized based upon usage, the changes in usage patterns may negatively affect revenues from our SaaS subscriptions and our results of operations.

 

21

If our existing customers do not renew their subscriptions, it could have an adverse effect on our business and results of operations.

We expect to derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Our self-managed subscriptions are offered on an annual and multi-year basis, and SaaS subscriptions are offered on an annual basis, with the exception of certain SaaS subscriptions, which are also offered on a monthly basis. For our JFrog-managed products, we also offer subscriptions for committed usage amounts. Our customers’ renewals may decline or fluctuate as a result of a number of factors, including their satisfaction with our products and our customer support, the frequency and severity of product outages, our product uptime or latency, the pricing of our, or competing, products, additional new features and capabilities that we offer, new integrations, and updates to our products as a result of updates by technology partners. If our customers renew their subscriptions, they may renew for shorter subscription terms or on other terms that are less economically beneficial to us. Furthermore, our self-managed products are sold with perpetual licenses and we depend on the deployment of material updates to such products to drive renewals. If we do not provide material updates to these products, customers may not renew their existing subscriptions and may continue to use our products under the original license instead. We may not accurately predict future renewal trends. If our customers do not renew their subscriptions, or renew on less favorable terms, our revenue may grow more slowly than expected or decline.

We recognize a significant portion of revenue from subscriptions over the term of the relevant subscription period, and as a result, downturns or upturns in sales are not immediately reflected in full in our results of operations.

We recognize a significant portion of our subscription revenue over the term of the relevant subscription period. As a result, much of the subscription revenue we report each fiscal quarter is the recognition of deferred revenue from subscription contracts entered into during previous fiscal quarters. Consequently, a decline in new or renewed subscriptions in any one fiscal quarter will not be fully or immediately reflected in revenue in that fiscal quarter and will negatively affect our revenue in future fiscal quarters. Accordingly, the effect of significant downturns in new or renewed sales of our subscriptions is not reflected in full in our results of operations until future periods.

A real or perceived defect, security vulnerability, error, or performance failure in our software could cause us to lose revenue, damage our reputation, and expose us to liability.

Our products are inherently complex and, despite extensive testing and quality control, have in the past and may in the future contain defects or errors, especially when first introduced, or not perform as contemplated. These defects, security vulnerabilities, errors, or performance failures could cause damage to our reputation, loss of customers or revenue, order cancellations, service terminations, or lack of market acceptance of our software. As the use of our products, including products that were recently acquired or developed, expands to more sensitive, secure, or mission critical uses by our customers, we may be subject to increased scrutiny, potential reputational risk, or potential liability should our software fail to perform as contemplated in such deployments. We have in the past and may in the future need to issue corrective releases of our software to fix these defects, errors or performance failures, which could require us to allocate significant research and development and customer support resources to address these problems.

Any limitation of liability provisions that may be contained in our customer, user, third-party vendor, service provider, and partner agreements may not be enforceable or adequate or effective as a result of existing or future applicable law or unfavorable judicial decisions, and they may not function to limit our liability arising from regulatory enforcement. The sale and support of our products entail the risk of liability claims, which could be substantial in light of the use of our products in enterprise-wide environments. In addition, our insurance against this liability may not be adequate to cover a potential claim and potentially may be subject to exclusions, or that the insurer will deny coverage as to any future claim or exclude from our coverage such claims in policy

 

22

renewals. The denial of our claims by our insurer or the successful assertion of claims by others against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, results of operations and reputation.

If we, or our third-party service providers experience a security breach or unauthorized parties otherwise obtain access to our customers’ data, our data, or our platform, our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products may be reduced, and we may incur significant liabilities.

Our platform and products involve the storage and transmission of data, including certain confidential, sensitive, and personal information. Any security breach, including those resulting from a cybersecurity attack, phishing attack, or any unauthorized access, unauthorized usage, virus or similar breach or disruption could result in the loss or destruction of or unauthorized access to, or use, alteration, disclosure, or acquisition of, information, damage to our reputation, litigation, regulatory investigations, or other liabilities. These attacks may come from individual hackers, criminal groups, and state-sponsored organizations. If our security measures are breached as a result of third-party action, employee error, a defect or bug in our products, malfeasance or otherwise and, as a result, someone obtains unauthorized access to our confidential, sensitive, or personal information or the confidential, sensitive, or personal information of our customers, or other persons, or any of these types of information is lost, destroyed, or used, altered, disclosed, or acquired without authorization, our reputation may be damaged, our business may suffer, and we could incur significant liability. Even the perception of inadequate security may damage our reputation and negatively impact our ability to win new customers and retain and receive prompt payments from existing customers. Further, we could be required to expend significant capital and other resources to address any data security incident or breach, which may not be covered or fully covered by our insurance.

In addition, we do not directly control content that our customers store in our products. If our customers use our products for the transmission or storage of confidential, sensitive, or personal information and our security measures are or are believed to have been breached as a result of third-party action, employee error, malfeasance or otherwise, our reputation could be damaged, our business may suffer, and we could incur significant liability.

We engage third-party vendors and service providers to store and otherwise process some of our and our customers’ data, including confidential, sensitive, and personal information. Our vendors and service providers may also be the targets of cyberattacks, malicious software, phishing schemes, and fraud. Our ability to monitor our vendors and service providers’ data security is limited, and, in any event, third parties may be able to circumvent those security measures, resulting in the unauthorized access to, misuse, acquisition, disclosure, loss, alteration, or destruction of our and our customers’ data, including confidential, sensitive, and personal information.

Techniques used to sabotage or obtain unauthorized access to systems or networks are constantly evolving and, in some instances, are not identified until or after they are launched against a target. We and our service providers may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventative and mitigating measures.

Incorrect implementation or use of, or our customers’ failure to update, our software could result in customer dissatisfaction and negatively affect our business, operations, financial results, and growth prospects.

Our products are often operated in large scale, complex IT environments. Our customers and some partners require training and experience in the proper use of and the benefits that can be derived from our products to maximize their potential. If users of our products do not implement, use, or update our products correctly or as intended, then inadequate performance and/or security vulnerabilities may result. Because our customers rely on our software to manage a wide range of operations, the incorrect implementation, use of, or our customers’

 

23

failure to update, our software or our failure to train customers on how to use our software productively may result in customer dissatisfaction, and negative publicity and may adversely affect our reputation and brand. Our failure to effectively provide training and implementation services to our customers could result in lost opportunities for follow-on sales to these customers and decrease subscriptions by new customers, which would adversely affect our business and growth prospects.

Interruptions or performance problems associated with our technology and infrastructure, and our reliance on technologies from third parties, may adversely affect our business operations and financial results.

We outsource substantially all of the infrastructure relating to our cloud products to third-party cloud providers chosen by our customers. Customers of our SaaS offerings need to be able to access our platform at any time, without interruption or degradation of performance, and we provide them with service-level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access, and we are, therefore, vulnerable to their service interruptions and any changes in their product offerings. Any limitation on the capacity of our third-party hosting services could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third-party hosting services’ infrastructure that may be caused by cyber-attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, protests or riots, and other similar events beyond our control could negatively affect our cloud-based and multi-cloud hybrid products. It is also possible that our customers and regulators would seek to hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability in investigating such an incident and responding to any claims, investigations, or proceedings made or initiated by those customers, regulators, and other third parties. We may not be able to recover a material portion of such liabilities from any of our third-party cloud providers. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Moreover, our insurance may not be adequate to cover such liability and may be subject to exclusions. Any of the above circumstances or events may harm our business, results of operations, and financial condition.

In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters, or fraud or security attacks. Our use and distribution of open source software may increase this risk. If our website is unavailable or our users are unable to download our products or order subscriptions or services within a reasonable amount of time or at all, our business could be harmed. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and applications for our products. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business and results of operations may be harmed.

In the event that our service agreements with our third-party hosting services are terminated, or there is a lapse of service, elimination of services or features that we utilize, interruption of internet service provider connectivity or damage to such facilities, we could experience interruptions in access to our platform as well as significant delays and additional expense in arranging or creating new facilities and services and/or re-architecting our cloud solution for deployment on a different cloud infrastructure service provider, which could adversely affect our business, financial condition, and results of operations.

We also rely on cloud technologies from third parties in order to operate critical functions of our business, including financial management services, relationship management services, and lead generation management services. If these services become unavailable due to extended outages or interruptions or because they are no longer available on commercially reasonable terms or prices, our expenses could increase, our ability to manage our finances could be interrupted, our processes for managing sales of our products and supporting our customers

 

24

could be impaired, and our ability to generate and manage sales leads could be weakened until equivalent services, if available, are identified, obtained, and implemented, any of which could harm our business and results of operations.

We typically provide service-level commitments under our subscription agreements. If we fail to meet these contractual commitments, we could be obligated to provide credits for future service or face subscription termination with refunds of prepaid amounts, which would lower our revenue and harm our business, financial condition, and results of operations.

Our subscription agreements typically contain service-level commitments. If we are unable to meet the stated service-level commitments, including failure to meet the uptime and response time requirements under our customer subscription agreements, we may be contractually obligated to provide these customers with service credits which could significantly affect our revenue in the periods in which the failure occurs and the credits are applied. We could also face subscription terminations and a reduction in renewals, which could significantly affect both our current and future revenue. We offer multiple tiers of subscriptions to our products and as such our service-level commitments will increase if more customers choose subscriptions of JFrog Pro X, JFrog Enterprise, and JFrog Enterprise Plus. Any service-level failures could also damage our reputation, which could also adversely affect our business, financial condition and results of operations.

We depend on our executive officers and other key employees, and the loss of one or more of these employees or an inability to attract and retain highly skilled employees could harm our business.

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously harm our business, financial condition, and results of operations. Although we have entered into employment offer letters with our key personnel, their employment is for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products.

Our future performance also depends on the continued services and continuing contributions of our senior management to execute on our business plan and to identify and pursue new opportunities and product innovations. The loss of services of senior management could significantly delay or prevent the achievement of our development and strategic objectives, which could adversely affect our business, financial condition, and results of operations.

Additionally, the industry in which we operate is generally characterized by significant competition for skilled personnel as well as high employee attrition. There is currently a high demand for experienced DevOps professionals and we may not be successful in attracting, integrating or retaining qualified personnel to fulfill our current or future needs. Also, to the extent we hire personnel from competitors, we may be subject to allegations that they have been improperly solicited, that they have divulged proprietary or other confidential information, or that their former employers own their inventions or other work product.

To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these employees is intense, specifically for engineers for research and development and support positions who are experienced in DevOps, and such competition often results in increasing wages, especially in Israel, where most of our research and development positions are located, and in the San Francisco Bay Area, where we have a significant presence. Therefore, we may not be successful in attracting and retaining qualified personnel. We have from time to time in the past experienced, and we expect to continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. Our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater

 

25

resources than we have and due to our profile and market position, such competitors actively seek to hire skilled personnel away from us, even if such employee has entered into a non-compete agreement. Israeli labor courts have required employers seeking to enforce non-compete undertakings of a former employee to demonstrate that the competitive activities of the former employee will harm one of a limited number of material interests of the employer that have been recognized by the courts, such as the protection of a company’s trade secrets or other intellectual property. We may not be able to make such a demonstration.

In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets after this offering, which may reduce their motivation to continue to work for us and could lead to employee attrition. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business and growth prospects could be harmed.

If we are not able to maintain and enhance our brand, especially among developers and IT operators, our business and results of operations may be adversely affected.

We believe that developing and maintaining widespread awareness of our brand, especially with developers and IT operators, is critical to achieving widespread acceptance of our software and attracting new users and customers. Brand promotion activities may not generate user or customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brand. If we fail to successfully promote and maintain our brand, we may fail to attract or retain users and customers necessary to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad customer adoption of our products.

Our corporate culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the innovation, creativity, and entrepreneurial spirit we have worked to foster, which could harm our business.

We believe that our culture has been and will continue to be a key contributor to our success. We expect to continue to hire aggressively as we expand. If we do not continue to maintain our corporate culture as we grow, we may be unable to foster the innovation, creativity, and entrepreneurial spirit we believe we need to support our growth. If our existing employees receive proceeds from our sale of ordinary shares as previously described in these risk factors, it could lead to disparities of wealth among our employees that could adversely affect relations among employees and our culture in general. Our substantial anticipated headcount growth and our continued transition from a private company to a public company may result in a change to our corporate culture, which could harm our business.

Our ability to achieve customer renewals and increase sales of our products is highly dependent on the quality of our customer support, and our failure to offer high quality support would have an adverse effect on our business, reputation, and results of operations.

Our customers depend on our customer support to resolve issues and realize the full benefits relating to our products. If we do not succeed in helping our customers quickly resolve post-deployment issues or provide effective ongoing support and education on our products, our ability to sell additional subscriptions to, or renew subscriptions with, existing customers or expand the value of existing customers’ subscriptions would be adversely affected and our reputation with potential customers could be damaged. Many larger enterprise customers have more complex IT environments and require higher levels of support than smaller customers. If we fail to meet the requirements of these enterprise customers, it may be more difficult to grow sales with them.

Additionally, it can take several months to recruit, hire, and train qualified engineering-level customer support employees. We may not be able to hire such resources fast enough to keep up with demand, particularly

 

26

if the sales of our products exceed our internal forecasts. To the extent that we are unsuccessful in hiring, training, and retaining adequate support resources, our ability to provide adequate and timely support to our customers, and our customers’ satisfaction with our products, will be adversely affected. Our failure to provide and maintain high-quality support services would have an adverse effect on our business, reputation, and results of operations.

We currently primarily rely on an inbound sales model that may not continue to be as successful as we anticipate, and the absence of a large, direct, traditional sales function may impede the growth of our business.

We currently primarily rely on an inbound sales model that may not continue to be as successful as we anticipate, and the absence of a large, direct, traditional sales function may impede our future growth. We have begun building a small, high-touch strategic sales team to identify new use cases and drive expansion and standardization on JFrog within our largest customers. There is no guarantee however that this high-touch strategic sales team will be successful. Moreover, we are not able to predict whether the deployment of our high-touch strategic sales team may adversely affect our inbound sales model. If our efforts to sell subscriptions to new customers and to expand deployments with existing customers are not successful, our total revenue and revenue growth rate may decline and our business will suffer.

Further, as we continue to scale our business, a more traditional sales infrastructure could assist in reaching larger enterprise customers and growing our revenue. Identifying, recruiting, and training such a qualified sales force would require significant time, expense and attention and would significantly impact our business model. We believe that there is significant competition for sales personnel, including sales representatives, sales managers, and sales engineers, with the skills and technical knowledge that we require. Our ability to achieve revenue growth will depend, in large part, on our success in recruiting, training, and retaining sufficient numbers of sales personnel to support our growth. New hires require significant training and may take significant time before they achieve full productivity.

In addition, expanding our sales infrastructure would considerably change our cost structure and results of operations, and we may have to reduce other expenses, such as our research and development expenses, in order to accommodate a corresponding increase in marketing and sales expenses, and maintain positive operating cash flow and free cash flow. Moreover, recent hires and planned hires may not become productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. In addition, particularly if we continue to grow rapidly, a large percentage of our sales force will have relatively little experience working with us, our subscriptions and our business model. If our lack of a large, direct enterprise sales force limits us from reaching larger enterprise customers and growing our revenue and we are unable to hire, develop, and retain talented sales personnel in the future, our revenue growth and results of operations may be harmed.

The sales prices of our products may decrease, which may reduce our revenue and gross profit and adversely affect our financial results.

The sales prices for our products may decline for a variety of reasons, including competitive pricing pressures, discounts, anticipation of the introduction of new products, or promotional programs. Competition continues to increase in the market segments in which we participate, and we expect competition to further increase in the future, thereby leading to increased pricing pressures. Larger competitors with more diverse offerings may reduce the price of offerings that compete with ours or may bundle them with other offerings and provide for free. Additionally, currency fluctuations in certain countries and regions may negatively impact actual prices that customers and partners are willing to pay in those countries and regions. Any decrease in the sales prices for our products, without a corresponding decrease in costs or increase in volume, would adversely affect our revenue and gross profit. Revenue and gross profit would also be adversely affected by a shift in mix of our subscriptions from self-managed to our SaaS offerings, which have a lower gross margin. We cannot

 

27

assure you that we will be able to maintain our prices and gross profits at levels that will allow us to achieve and maintain profitability.

We expect our revenue mix to vary over time, which could harm our gross margin and results of operations.

We expect our revenue mix to vary over time due to a number of factors, including the mix of our subscriptions for self-managed and our SaaS offerings. Due to the differing revenue recognition policies applicable to our self-managed and SaaS subscriptions, shifts in our business mix from quarter to quarter could produce substantial variation in revenue recognized. Further, our gross margins and results of operations could be harmed by changes in revenue mix and costs, together with numerous other factors, including entry into new markets or growth in lower margin markets; entry into markets with different pricing and cost structures; pricing discounts; and increased price competition. Any one of these factors or the cumulative effects of certain of these factors may result in significant fluctuations in our gross margin and results of operations. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our ordinary shares could decline.

The length of our sales cycle can be unpredictable, particularly with respect to sales to large customers, and our sales efforts may require considerable time and expense.

Our results of operations may fluctuate, in part, because of the length and variability of the sales cycle of our subscriptions and the difficulty in making short-term adjustments to our operating expenses. Our results of operations depend in part on sales to new large customers and increasing sales to existing customers. The length of our sales cycle, from initial contact from a prospective customer to contractually committing to our paid subscriptions can vary substantially from customer to customer based on deal complexity as well as whether a sale is made directly by us. It is difficult to predict exactly when, or even if, we will make a sale to a potential customer or if we can increase sales to our existing customers. As a result, large individual sales have, in some cases, occurred in quarters subsequent to those we anticipated, or have not occurred at all. Because a substantial proportion of our expenses are relatively fixed in the short term, our results of operations will suffer if revenue falls below our expectations in a particular quarter, which could cause the price of our ordinary shares to decline.

Failure to protect our proprietary technology and intellectual property rights could substantially harm our business and results of operations.

Our success depends to a significant degree on our ability to protect our proprietary technology, methodologies, know-how, and brand. We rely on a combination of trademarks, copyrights, patents, contractual restrictions, and other intellectual property laws and confidentiality procedures to establish and protect our proprietary rights. However, we make certain products, including a limited-functionality version of JFrog Artifactory, available under open source licenses, contribute other source code to open source projects under open source licenses, and release internal software projects under open source licenses, and anticipate doing so in the future. Because the source code for the open source version of JFrog Artifactory and any other software we contribute to open source projects or distribute under open source licenses is publicly available, our ability to monetize and protect our intellectual property rights with respect to such source code may be limited or, in some cases, lost entirely. Our competitors could access such source code and use it to create software and service offerings that compete with ours.

Further, the steps we take to protect our intellectual property rights may be inadequate. We will not be able to protect our intellectual property rights if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property rights. If we fail to protect our intellectual property rights adequately, our competitors may gain access to our proprietary technology and our business may be harmed. In addition, defending our intellectual property rights might entail significant expense. Any patents, trademarks, or other intellectual property rights that we have or may obtain may be challenged by others or invalidated through

 

28

administrative process or litigation. As of June 30, 2020, we had 11 U.S. patent applications including six pending U.S. provisional patents. There can be no assurance that our patent applications will result in issued patents. Even if we continue to seek patent protection in the future, we may be unable to obtain further patent protection for our technology. In addition, any patents issued in the future may not provide us with competitive advantages, or may be successfully challenged by third parties. Furthermore, legal standards relating to the validity, enforceability, and scope of protection of intellectual property rights are uncertain.

Despite our precautions, it may be possible for unauthorized third parties to copy our products and use information that we regard as proprietary to create offerings that compete with ours. Effective patent, trademark, copyright, and trade secret protection may not be available to us in every country in which our products are available. We may be unable to prevent third parties from acquiring domain names or trademarks that are similar to, infringe upon, or diminish the value of our trademarks and other proprietary rights. The laws of some countries may not be as protective of intellectual property rights as those in the United States, and mechanisms for enforcement of intellectual property rights may be inadequate. As we continue to expand our international activities, our exposure to unauthorized copying and use of our products and proprietary information will likely increase. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property.

We enter into confidential, non-compete, proprietary, and inventions assignment agreements with our employees and consultants and enter into confidentiality agreements with other parties. No assurance can be given that these agreements will be effective in controlling access to and distribution of our proprietary information, especially in certain states and countries, including Israel, that are less willing to enforce such agreements. Further, these agreements may not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our products.

In order to protect our intellectual property rights, we may be required to spend significant resources to monitor and protect our intellectual property rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Litigation brought to protect and enforce our intellectual property rights could be costly, time-consuming, and distracting to management, and could result in the impairment or loss of portions of our intellectual property. Further, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our products, impair the functionality of our products, delay introductions of new products, result in our substituting inferior or more costly technologies into our products, or injure our reputation.

We could incur substantial costs as a result of any claim of infringement, misappropriation or violation of another party’s intellectual property rights.

In recent years, there has been significant litigation involving patents and other intellectual property rights in the software industry. We do not currently have a large patent portfolio, which could prevent us from deterring patent infringement claims through our own patent portfolio, and our competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have. We could incur substantial costs in prosecuting or defending any intellectual property litigation. If we sue to enforce our rights or are sued by a third party that claims that our products infringe, misappropriate or violate their rights, the litigation could be expensive and could divert our management resources.

Any intellectual property litigation to which we might become a party, or for which we are required to provide indemnification, may require us to do one or more of the following:

 

•

cease selling or using products that incorporate or cover the intellectual property rights that we allegedly infringe, misappropriate or violate;

 

29

•

make substantial payments for legal fees, settlement payments or other costs or damages;

 

•

obtain a license, which may not be available on reasonable terms or at all, to sell or use the relevant technology; or

 

•

redesign the allegedly infringing products to avoid infringement, misappropriation or violation, which could be costly, time-consuming or impossible.

If we are required to make substantial payments or undertake any of the other actions noted above as a result of any intellectual property infringement, misappropriation or violation claims against us or any obligation to indemnify our customers for such claims, such payments or actions could harm our business.

We may become subject to claims for remuneration or royalties for assigned service invention rights by our employees, which could result in litigation and would adversely affect our business.

A significant portion of our intellectual property has been developed by our employees in the course of their employment for us. Under the Israeli Patents Law, 5727-1967 (the “Patents Law”), inventions conceived by an employee in the course and as a result of or arising from his or her employment with a company are regarded as “service inventions,” which belong to the employer, absent a specific agreement between the employee and employer giving the employee service invention rights. The Patents Law also provides that if there is no such agreement between an employer and an employee, the Israeli Compensation and Royalties Committee (the “Committee”), a body constituted under the Patents Law, shall determine whether the employee is entitled to remuneration for his or her inventions. Case law clarifies that the right to receive consideration for “service inventions” can be waived by the employee and that in certain circumstances, such waiver does not necessarily have to be explicit. The Committee will examine, on a case-by-case basis, the general contractual framework between the parties, applying interpretation rules of the general Israeli contract laws. Further, the Committee has not yet determined one specific formula for calculating this remuneration, but rather uses the criteria specified in the Patents Law. Although we generally enter into assignment-of-invention agreements with our employees pursuant to which such individuals assign to us all rights to any inventions created in the scope of their employment or engagement with us, we may face claims demanding remuneration in consideration for assigned inventions. As a consequence of such claims, we could be required to pay additional remuneration or royalties to our current and former employees, or be forced to litigate such claims, which could negatively affect our business.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement, misappropriation, violation, and other losses.

Our agreements with customers and other third parties may include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, misappropriation or violation, damages caused by us to property or persons, or other liabilities relating to or arising from our software, services or other contractual obligations. Large indemnity payments could harm our business, results of operations, and financial condition. Pursuant to certain agreements we do not have a cap on our liability and any payments under such agreements would harm our business, results of operations, and financial condition. Although we normally contractually limit our liability with respect to such indemnity obligations, we may still incur substantial liability related to them. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other existing customers and new customers and harm our business and results of operations.

Our use of open source software could negatively affect our ability to sell our products and subject us to possible litigation.

Our paid products incorporate open source software, and we expect to continue to incorporate open source software in our paid products in the future. Few of the licenses applicable to open source software have been

 

30

interpreted by courts, and there is a risk that these licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our paid products. Moreover, we cannot assure you that we have not used additional open source software in our software in a manner that is inconsistent with the terms of the applicable license or our current policies and procedures. If we fail to comply with these licenses, we may be subject to certain requirements, including requirements that we offer additional portions of our solutions for no cost, that we make available additional source code for modifications or derivative works we create based upon, incorporating or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses. If an author or other third party that distributes such open source software were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations and could be subject to significant damages, enjoined from the sale of our products that contained the open source software and required to comply with onerous conditions or restrictions on these products, which could disrupt the distribution and sale of these products. In addition, there have been claims challenging the ownership rights in open source software against companies that incorporate open source software into their products, and the licensors of such open source software provide no warranties or indemnities with respect to such claims. In any of these events, we and our customers could be required to seek licenses from third parties in order to continue offering our products, and to re-engineer our products or discontinue the sale of our products in the event re-engineering cannot be accomplished on a timely basis. We and our customers may also be subject to suits by parties claiming infringement, misappropriation or violation due to the reliance by our solutions on certain open source software, and such litigation could be costly for us to defend or subject us to an injunction. Some open source projects provided on an “as-is” basis have known vulnerabilities and architectural instabilities which, if not properly addressed, could negatively affect the performance of our product. Any of the foregoing could require us to devote additional research and development resources to re-engineer our solutions, could result in customer dissatisfaction, and may adversely affect our business, results of operations, and financial condition.

We rely on traditional web search engines to direct traffic to our website. If our website fails to rank prominently in unpaid search results, traffic to our website could decline and our business would be adversely affected.

Our success depends in part on our ability to attract users through unpaid Internet search results on traditional web search engines such as Google. The number of users we attract to our website from search engines is due in large part to how and where our website ranks in unpaid search results. These rankings can be affected by a number of factors, many of which are not in our direct control, and they may change frequently. For example, a search engine may change its ranking algorithms, methodologies or design layouts. As a result, links to our website may not be prominent enough to drive traffic to our website, and we may not know how or otherwise be in a position to influence the results. Any reduction in the number of users directed to our website could reduce our revenue or require us to increase our customer acquisition expenditures.

The estimates of market opportunity and forecasts of market growth included in this prospectus may prove to be inaccurate, and even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

The estimates of market opportunity and forecasts of market growth included in this prospectus may prove to be inaccurate. Market opportunity estimates and growth forecasts included in this prospectus, including those we have generated ourselves, are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate, including the risks described herein. Even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

The variables that go into the calculation of our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of addressable users or companies covered by our market opportunity estimates will purchase our products at all or generate any particular level of revenue for us. Any expansion in our market depends on a number of factors, including the cost, performance, and perceived

 

31

value associated with our platform and those of our competitors. Even if the market in which we compete meets the size estimates and growth forecasted in this prospectus, our business could fail to grow at similar rates, if at all. Our growth is subject to many factors, including our success in implementing our business strategy, which is subject to many risks and uncertainties. Accordingly, the forecasts of market growth included in this prospectus should not be taken as indicative of our future growth.

We are subject to stringent and changing laws, regulations, standards, and contractual obligations related to privacy, data protection, and data security. Our actual or perceived failure to comply with such obligations could harm our business.

We receive, collect, store, process, transfer, and use personal information and other data relating to users of our products, our employees and contractors, and other persons. We have legal and contractual obligations regarding the protection of confidentiality and appropriate use of certain data, including personal information. We are subject to numerous federal, state, local, and international laws, directives, and regulations regarding privacy, data protection, and data security and the collection, storing, sharing, use, processing, transfer, disclosure, and protection of personal information and other data, the scope of which are changing, subject to differing interpretations, and may be inconsistent among jurisdictions or conflict with other legal and regulatory requirements. We are also subject to certain contractual obligations to third parties related to privacy, data protection and data security. We strive to comply with our applicable policies and applicable laws, regulations, contractual obligations, and other legal obligations relating to privacy, data protection, and data security to the extent possible. However, the regulatory framework for privacy, data protection and data security worldwide is, and is likely to remain for the foreseeable future, uncertain and complex, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that we do not anticipate or that is inconsistent from one jurisdiction to another and may conflict with other legal obligations or our practices. Further, any significant change to applicable laws, regulations or industry practices regarding the collection, use, retention, security or disclosure of data, or their interpretation, or any changes regarding the manner in which the consent of users or other data subjects for the collection, use, retention or disclosure of such data must be obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete, and may limit our ability to store and process user data or develop new services and features.

If we were found in violation of any applicable laws or regulations relating to privacy, data protection, or security, our business may be materially and adversely affected and we would likely have to change our business practices and potentially the services and features available through our platform. In addition, these laws and regulations could impose significant costs on us and could constrain our ability to use and process data in manners that may be commercially desirable. In addition, if a breach of data security were to occur or to be alleged to have occurred, if any violation of laws and regulations relating to privacy, data protection or data security were to be alleged, or if we had any actual or alleged defect in our safeguards or practices relating to privacy, data protection, or data security, our solutions may be perceived as less desirable and our business, prospects, financial condition, and results of operations could be materially and adversely affected.

We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, and information security proposed and enacted in various jurisdictions. For example, the data protection landscape in the European Union (“EU”) is currently evolving, resulting in possible significant operational costs for internal compliance and risks to our business. The EU adopted the General Data Protection Regulation (“GDPR”), which became effective in May 2018, and contains numerous requirements and changes from previously existing EU laws, including more robust obligations on data processors and heavier documentation requirements for data protection compliance programs by companies. Among other requirements, the GDPR regulates the transfer of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States. Failure to comply with the GDPR could result in penalties for noncompliance (including possible fines of up to the greater of €20 million and 4% of our global annual turnover for the preceding financial year for the most serious violations, as well as

 

32

the right to compensation for financial or non-financial damages claimed by individuals under Article 82 of the GDPR).

In addition to the GDPR, the European Commission has another draft regulation in the approval process that focuses on a person’s right to conduct a private life. The proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. Originally planned to be adopted and implemented at the same time as the GDPR, the ePrivacy Regulation is still being negotiated.

Various United States privacy laws are potentially relevant to our business, including the Federal Trade Commission Act, Controlling the Assault of Non-Solicited Pornography and Marketing Act, and the Telephone Consumer Protection Act. Any actual or perceived failure to comply with these laws could result in a costly investigation or litigation resulting in potentially significant liability, loss of trust by our users, and a material and adverse impact on our reputation and business.

Additionally, in June 2018, California passed the California Consumer Privacy Act (“CCPA”), which provides new data privacy rights for California consumers and new operational requirements for covered companies. Specifically, the CCPA provides that covered companies must provide new disclosures to California consumers and afford such consumers new data privacy rights that include the right to request a copy from a covered company of the personal information collected about them, the right to request deletion of such personal information, and the right to request to opt-out of certain sales of such personal information. The CCPA became operative on January 1, 2020. The California Attorney General can enforce the CCPA, including seeking an injunction and civil penalties for violations. The CCPA also provide a private right of action for certain data breaches that is expected to increase data breach litigation. The CCPA may require us to modify our data practices and policies and to incur substantial costs and expenses in an effort to comply. A new privacy law, the California Privacy Rights Act (“CPRA”), recently was certified by the California Secretary of State to appear on the ballot for the November 3, 2020 election. If this initiative is approved by California voters, the CPRA would significantly modify the CCPA, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. More generally, some observers have noted the CCPA could mark the beginning of a trend toward more stringent privacy legislation in the United States, which could increase our potential liability and adversely affect our business. Further in March 2017, the United Kingdom (“U.K.”) formally notified the European Council of its intention to leave the EU pursuant to Article 50 of the Treaty on European Union (“Brexit”). The U.K. ceased to be an EU Member State on January 31, 2020, but enacted a Data Protection Act substantially implementing the GDPR, effective in May 2018, which was further amended to align more substantially with the GDPR following Brexit. It is unclear how U.K. data protection laws or regulations will develop in the medium to longer term and how data transfers to and from the U.K. will be regulated. Some countries also are considering or have enacted legislation requiring local storage and processing of data that could increase the cost and complexity of delivering our services.

In addition, failure to comply with the Israeli Privacy Protection Law 5741-1981, and its regulations as well as the guidelines of the Israeli Privacy Protection Authority, may expose us to administrative fines, civil claims (including class actions) and in certain cases criminal liability. Current pending legislation may result in a change of the current enforcement measures and sanctions.

Any failure or perceived failure by us to comply with our posted privacy policies, our privacy-related obligations to users or other third parties, or any other legal obligations or regulatory requirements relating to privacy, data protection, or data security, may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us by consumer advocacy groups or others and could result in significant liability, cause our users to lose trust in us, and otherwise materially and adversely affect our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, other obligations, and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our platform. Additionally, if third parties we work with

 

33

violate applicable laws, regulations or contractual obligations, such violations may put our users’ data at risk, could result in governmental investigations or enforcement actions, fines, litigation, claims, or public statements against us by consumer advocacy groups or others and could result in significant liability, cause our users to lose trust in us, and otherwise materially and adversely affect our reputation and business. Further, public scrutiny of, or complaints about, technology companies or their data handling or data protection practices, even if unrelated to our business, industry or operations, may lead to increased scrutiny of technology companies, including us, and may cause government agencies to enact additional regulatory requirements, or to modify their enforcement or investigation activities, which may increase our costs and risks.

Unfavorable conditions in our industry or the global economy or reductions in information technology spending could limit our ability to grow our business and negatively affect our results of operations.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. Current or future economic uncertainties or downturns could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, financial, and credit market fluctuations, political turmoil, natural catastrophes, the coronavirus pandemic, warfare, protests and riots, and terrorist attacks on the United States, Europe, the Asia Pacific region, or elsewhere, could cause a decrease in business investments by our customers and potential customers, including spending on information technology, and negatively affect the growth of our business. To the extent our products are perceived by customers and potential customers as discretionary, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Also, customers may choose to develop in-house software as an alternative to using our products. Moreover, competitors may respond to market conditions by lowering prices. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or markets in which we operate do not improve, or worsen from present levels, our business, results of operations, and financial condition could be adversely affected.

The recent global coronavirus outbreak could harm our business and results of operations.

In December 2019, a novel coronavirus disease (“COVID-19”) was reported in China, in January 2020, the World Health Organization (“WHO”) declared it a Public Health Emergency of International Concern, and in March 2020 the WHO declared it a pandemic. This contagious disease outbreak has continued to spread across the globe and is impacting worldwide economic activity and financial markets. In light of the uncertain and rapidly evolving situation relating to the spread of COVID-19, as well as government mandates, we took precautionary measures intended to minimize the risk of the virus to our employees, our customers, our partners and the communities in which we operate, which could negatively impact our business. In March 2020, we temporarily closed all of our offices, and enabled our entire work force to work remotely. We also suspended all travel worldwide for our employees for non-essential business. In the second quarter of 2020 we reopened offices in Israel to partial capacity and these changes remain in effect in the third quarter of 2020, and could extend to future quarters. While we have a distributed workforce and our employees are accustomed to working remotely or working with other remote employees, our workforce was not trained to be fully remote. Our employees travel frequently to establish and maintain relationships with one another, as well as our customers, partners, and investors. Although we continue to monitor the situation and may adjust our current policies as more information and public health guidance become available, temporarily suspending travel and doing business in person may negatively affect our customer success efforts, sales and marketing efforts, challenge our ability to enter into customer contracts in a timely manner, slow down our recruiting efforts, or create operational or other challenges, any of which could harm our business and results of operations. For example, as a result of COVID-19 we have experienced and expect to continue to experience an increase in the average length of sales cycles to onboard new customers, delays in new projects, and requests by some customers for extension of payment obligations, all of which adversely affect and could materially adversely impact our business, results of operations, and overall financial condition in future periods.

 

34

In addition, COVID-19 has disrupted and may continue to disrupt the operations of our customers and technology partners for an indefinite period of time, including as a result of travel restrictions and/or business shutdowns, all of which could negatively impact our business and results of operations. More generally, the COVID-19 outbreak has adversely affected economies and financial markets globally, leading to an economic downturn, which could decrease technology spending and adversely affect demand for our products and harm our business and results of operations. It is possible that continued widespread remote work arrangements may have a negative impact on our operations, the execution of our business plans, the productivity and availability of key personnel and other employees necessary to conduct our business, and on third-party service providers who perform critical services for us, or otherwise cause operational failures due to changes in our normal business practices necessitated by the outbreak and related governmental actions. If a natural disaster, power outage, connectivity issue, or other event occurred that impacted our employees’ ability to work remotely, it may be difficult or, in certain cases, impossible, for us to continue our business for a substantial period of time. The increase in remote working may also result in privacy, data protection, data security, and fraud risks, and our understanding of applicable legal and regulatory requirements, as well as the latest guidance from regulatory authorities in connection with the COVID-19 pandemic, may be subject to legal or regulatory challenge, particularly as regulatory guidance evolves in response to future developments. In response to COVID-19 we launched our FrogCare program that provides free software development and DevOps tools to accelerate delivery for research organizations in the fight against COVID-19.

It is not possible at this time to estimate the long-term impact that COVID-19 could have on our business, as the impact will depend on future developments, which are highly uncertain and cannot be predicted.

Our international operations and expansion expose us to risk.

Our primary research and development operations are located in Israel. As of June 30, 2020, we had customers located in over 90 countries, and our strategy is to continue to expand internationally. In addition, as a result of our strategy of leveraging a distributed workforce, as of June 30, 2020, we had employees located in six countries. Our current international operations involve, and future initiatives will involve, a variety of risks, including:

 

•

unexpected changes in practices, tariffs, export quotas, custom duties, trade disputes, tax laws and treaties, particularly due to economic tensions and trade negotiations or other trade restrictions;

 

•

different labor regulations, especially in the European Union, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations;

 

•

exposure to many stringent and potentially inconsistent laws and regulations relating to privacy, data protection, and information security, particularly in the European Union;

 

•

changes in a specific country’s or region’s political or economic conditions;

 

•

risks resulting from the recent outbreak of the novel coronavirus, including uncertainty regarding how the U.S. or foreign governments will act with respect to the pandemic;

 

•

risks resulting from changes in currency exchange rates;

 

•

challenges inherent to efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs;

 

•

risks relating to the implementation of exchange controls, including restrictions promulgated by the OFAC, and other similar trade protection regulations and measures in the United States or in other jurisdictions;

 

•

reduced ability to timely collect amounts owed to us by our customers in countries where our recourse may be more limited;

 

35

•

slower than anticipated availability and adoption of cloud and hybrid infrastructures by international businesses;

 

•

limitations on our ability to reinvest earnings from operations derived from one country to fund the capital needs of our operations in other countries;

 

•

potential changes in laws, regulations, and costs affecting our U.K operations and personnel due to Brexit;

 

•

limited or unfavorable intellectual property protection; and

 

•

exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act of 1977, as amended, and similar applicable laws and regulations in other jurisdictions.

If we are unable to address these difficulties and challenges or other problems encountered in connection with our international operations and expansion, we might incur unanticipated liabilities or we might otherwise suffer harm to our business generally.

If we are not successful in sustaining and expanding our international business, we may incur additional losses and our revenue growth could be harmed.

Our future results depend, in part, on our ability to sustain and expand our penetration of the international markets in which we currently operate and to expand into additional international markets. Our ability to expand internationally will depend upon our ability to deliver functionality and foreign language translations that reflect the needs of the international clients that we target. Our ability to expand internationally involves various risks, including the need to invest significant resources in such expansion, and the possibility that returns on such investments will not be achieved in the near future or at all in these less familiar competitive environments. We may also choose to conduct our international business through other partnerships. If we are unable to identify partners or negotiate favorable terms, our international growth may be limited. In addition, we have incurred and may continue to incur significant expenses in advance of generating material revenue as we attempt to establish our presence in particular international markets.

Our relatively limited operating history makes it difficult to evaluate our current business and prospects and may increase the risks associated with your investment.

We were founded in 2008. Our relatively limited operating history makes it difficult to evaluate our current business and our future prospects, including our ability to plan for and model future growth. We have encountered and will continue to encounter risks and difficulties frequently experienced by rapidly growing companies in constantly evolving industries. If we do not address these risks successfully, our business and results of operations will be adversely affected, and the market price of our ordinary shares could decline.

Further, we have limited historical financial data and we operate in a rapidly evolving market. As such, any predictions about our future revenue and expenses may not be as accurate as they would be if we had a longer operating history or operated in a more predictable market.

Our business could be negatively impacted by changes in the United States political environment.

The 2016 presidential election and the 2018 congressional and state elections in the United States have resulted in significant uncertainty with respect to, and have and could further result in changes in, legislation, regulation, and government policy at the federal, state, and local levels, and the results of the 2020 presidential and congressional elections may result in significant uncertainty and changes. Any such changes could significantly impact our business as well as the markets in which we compete. Specific legislative and regulatory proposals discussed during election campaigns and more recently that might materially impact us include, but are

 

36

not limited to, changes to trade agreements, immigration policy, import and export regulations, tariffs and customs duties, income tax regulations and the federal tax code, public company reporting requirements, and antitrust enforcement. Further, an extended federal government shutdown resulting from failing to pass budget appropriations, adopt continuing funding resolutions, or raise the debt ceiling, and other budgetary decisions limiting or delaying deferral government spending, may negatively impact U.S. or global economic conditions, including corporate and consumer spending, and liquidity of capital markets. To the extent changes in the political environment have a negative impact on us or on our markets, our business, results of operation and financial condition could be materially and adversely affected in the future.

Legal, political, and economic uncertainty surrounding the exit of the United Kingdom from the EU may be a source of instability to international markets, create significant currency fluctuations, adversely affect our operations in the United Kingdom and pose additional risks to our business, financial condition, and results of operations.

In connection with Brexit, the United Kingdom ceased to be an EU Member State on January 31, 2020, but will maintain access to the EU single market and to the global trade deals negotiated by the EU on behalf of its members, and remains subject to EU law, for a transition period ending on December 31, 2020. The suspension or further delay of Brexit beyond January 31, 2020 requires the unanimous agreement of all remaining EU member states. The ongoing uncertainty with the United Kingdom’s government and Parliament on the status of Brexit has negatively impacted the United Kingdom’s economy, and will likely continue to have a negative impact until the United Kingdom and EU reach a definitive resolution on the outstanding trade and legal matters. Any additional impact of Brexit will depend on the terms of such resolution. Even if the United Kingdom maintains access to the EU single market and trade deals following the transition period, Brexit could result in further economic downturn globally. If the United Kingdom ultimately loses access to the EU single market and trade deals, significant market and economic disruption would likely occur, our customer experience, service quality, and international operations would likely be negatively impacted, and the demand for our services could be depressed.

Additionally, we may face new regulations regarding trade, aviation, tax, security, and employees, among others, in the United Kingdom. Compliance with such regulations could be costly, negatively impacting our business, results of operations, and financial condition. Brexit could also adversely affect European and worldwide economic and market conditions and could contribute to instability in global financial and foreign exchange markets, including volatility in the value of the euro and the British pound.

We are subject to various governmental export control, trade sanctions, and import laws and regulations that could impair our ability to compete in international markets or subject us to liability if we violate these controls.

In some cases, our software is subject to export control laws and regulations, including the Export Administration Regulations administered by the U.S. Department of Commerce, and our activities may be subject to trade and economic sanctions, including those administered by the United States Department of the Treasury’s Office of Foreign Assets Control (“OFAC”) (collectively, “Trade Controls”). As such, a license may be required to export or re-export our products, or provide related services, to certain countries and end-users, and for certain end-uses. Further, our products incorporating encryption functionality may be subject to special controls applying to encryption items and/or certain reporting requirements.

We have procedures in place designed to ensure our compliance with Trade Controls. We are currently working to enhance these procedures, with which failure to comply could subject us to both civil and criminal penalties, including substantial fines, possible incarceration of responsible individuals for willful violations, possible loss of our export or import privileges, and reputational harm. Further, the process for obtaining necessary licenses may be time-consuming or unsuccessful, potentially causing delays in sales or losses of sales opportunities. Trade Controls are complex and dynamic regimes, and monitoring and ensuring compliance can be

 

37

challenging, particularly given that our products are widely distributed throughout the world and are available for download without registration. Although we have no knowledge that our activities have resulted in violations of Trade Controls, any failure by us or our partners to comply with applicable laws and regulations would have negative consequences for us, including reputational harm, government investigations, and penalties.

In addition, various countries regulate the import of certain encryption technology, including through import permit and license requirements, and have enacted laws that could limit our ability to distribute our products or could limit our end-customers’ ability to implement our products in those countries. Changes in our products or changes in export and import regulations in such countries may create delays in the introduction of our products into international markets, prevent our end-customers with international operations from deploying our products globally or, in some cases, prevent or delay the export or import of our products to certain countries, governments, or persons altogether. Any change in export or import laws or regulations, economic sanctions or related legislation, shift in the enforcement or scope of existing export, import or sanctions laws or regulations, or change in the countries, governments, persons, or technologies targeted by such export, import or sanctions laws or regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential end-customers with international operations. Any decreased use of our products or limitation on our ability to export to or sell our products in international markets could adversely affect our business, financial condition, and results of operations.

Unanticipated changes in effective tax rates or adverse outcomes resulting from examination of our income or other tax returns could expose us to greater than anticipated tax liabilities.

The tax laws applicable to our business, including the laws of Israel, the United States, and other jurisdictions, are subject to interpretation and certain jurisdictions may aggressively interpret their laws in an effort to raise additional tax revenue. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements or our revenue recognition policies, which could increase our worldwide effective tax rate and harm our financial position and results of operations. It is possible that tax authorities may disagree with certain positions we have taken and any adverse outcome of such a review or audit could have a negative effect on our financial position and results of operations. Further, the determination of our worldwide provision for income taxes and other tax liabilities requires significant judgment by management, and there are transactions where the ultimate tax determination is uncertain. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our consolidated financial statements and may materially affect our financial results in the period or periods for which such determination is made.

In addition, we typically invoice customers for the full contract amount at the time of entering into a contract, but recognize revenue over the term of the subscription period. Applicable tax authorities may challenge our tax reporting position and may accelerate our tax obligation based on cash received, which may materially affect our financial results.

Our corporate structure and intercompany arrangements are subject to the tax laws of various jurisdictions, and we could be obligated to pay additional taxes, which would harm our results of operations.

Based on our current corporate structure, we are subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents. The authorities in these jurisdictions could review our tax returns or require us to file tax returns in jurisdictions in which we are not currently filing, and could impose additional tax, interest, and penalties. These authorities could also claim that various withholding requirements apply to us or our subsidiaries, assert that benefits of tax treaties are not available to us or our subsidiaries, or challenge our methodologies for valuing developed technology or intercompany arrangements, including our transfer pricing. The relevant taxing authorities may determine that

 

38

the manner in which we operate our business does not achieve the intended tax consequences. If such a disagreement was to occur, and our position was not sustained, we could be required to pay additional taxes, interest, and penalties. Such authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries. Any increase in the amount of taxes we pay or that are imposed on us could increase our worldwide effective tax rate and harm our business and results of operations.

The tax benefits that are available to us require us to continue to meet various conditions and may be terminated or reduced in the future, which could increase our costs and taxes.

We are eligible for certain tax benefits provided to a “Preferred Technology Enterprise” under the Israeli Law for the Encouragement of Capital Investments, 1959, referred to as the Investment Law. In order to remain eligible for the tax benefits for a “Preferred Technology Enterprise” we must continue to meet certain conditions stipulated in the Investment Law and its regulations, as amended. If these tax benefits are reduced, cancelled or discontinued, our Israeli taxable income from the Preferred Technology Enterprise would be subject to regular Israeli corporate tax rates. Additionally, if we increase our activities outside of Israel through acquisitions, for example, our expanded activities might not be eligible for inclusion in future Israeli tax benefit programs. See the section titled “Taxation and Government Programs—Israeli Tax Considerations and Government Programs—Law for the Encouragement of Capital Investments, 5719-1959.”

We could be required to collect additional sales, use, value added, digital services or other similar taxes or be subject to other liabilities that may increase the costs our clients would have to pay for our products and adversely affect our results of operations.

We collect sales, value added and other similar taxes in a number of jurisdictions. One or more U.S. states or countries may seek to impose incremental or new sales, use, value added, digital services, or other tax collection obligations on us. Further, an increasing number of U.S. states have considered or adopted laws that attempt to impose tax collection obligations on out-of-state companies. Additionally, the Supreme Court of the United States ruled in South Dakota v. Wayfair, Inc. et al, or Wayfair, that online sellers can be required to collect sales and use tax despite not having a physical presence in the state of the customer. In response to Wayfair, or otherwise, U.S. states or local governments may adopt, or begin to enforce, laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. A successful assertion by one or more U.S. states requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial liabilities, including taxes on past sales, as well as interest and penalties. Furthermore, certain jurisdictions, such as the United Kingdom and France, have recently introduced a digital services tax, which is generally a tax on gross revenue generated from users or customers located in in those jurisdictions, and other jurisdictions have enacted or are considering enacting similar laws. A successful assertion by a U.S. state or local government, or other country or jurisdiction that we should have been or should be collecting additional sales, use, value added, digital services or other similar taxes could, among other things, result in substantial tax payments, create significant administrative burdens for us, discourage potential customers from subscribing to our platform due to the incremental cost of any such sales or other related taxes, or otherwise harm our business.

Our ability to use our net operating loss carryforwards to offset future taxable income may be subject to certain limitations.

As of December 31, 2019, we had net operating loss carryforwards of $16.0 million in Israel, U.S. federal net operating loss carryforwards of $4.9 million and U.S. state net operating loss carryforwards of $12.4 million, which may be utilized against future income taxes. Limitations imposed by the applicable jurisdictions on our ability to utilize net operating loss carryforwards, including with respect to the net operating loss carryforwards of companies that we have acquired or may acquire in the future, could cause income taxes to be paid earlier than would be paid if such limitations were not in effect and could cause such net operating loss carryforwards to

 

39

expire unused, in each case reducing or eliminating the benefit of such net operating loss carryforwards. Furthermore, we may not be able to generate sufficient taxable income to utilize our net operating loss carryforwards before they expire. If any of these events occur, we may not derive some or all of the expected benefits from our net operating loss carryforwards.

We have acquired, and may acquire, other businesses which could require significant management attention, disrupt our business, dilute shareholder value, and adversely affect our results of operations.

As part of our business strategy, we may acquire or make investments in complementary companies, products or technologies. We have in the past acquired, and expect in the future to acquire, businesses that we believe will complement or augment our existing business. For example, in February 2019 we acquired 100% of the shares of Shippable Inc., a privately held cloud-based continuous integration and delivery platform. The identification of suitable acquisition candidates is difficult, and we may not be able to complete such acquisitions on favorable terms, if at all. If we do complete future acquisitions, we may not ultimately strengthen our competitive position or achieve our goals and business strategy, we may be subject to claims or liabilities assumed from an acquired company, product, or technology, and any acquisitions we complete could be viewed negatively by our customers, investors, and securities analysts. In addition, if we are unsuccessful at integrating future acquisitions, or the technologies associated with such acquisitions, into our company, the revenue and results of operations of the combined company could be adversely affected. Any integration process may require significant time and resources, which may disrupt our ongoing business and divert management’s attention, and we may not be able to manage the integration process successfully.

We may have to pay cash, incur debt, or issue equity or equity-linked securities to pay for any future acquisitions, each of which could adversely affect our financial condition or the market price of our ordinary shares. The sale of equity or issuance of equity-linked debt to finance any future acquisitions could result in dilution to our shareholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. The occurrence of any of these risks could harm our business, results of operations, and financial condition.

Our failure to raise additional capital or generate the significant capital necessary to expand our operations and invest in new products could reduce our ability to compete and could harm our business.

Historically, we have funded our operations and capital expenditures primarily through equity issuances and cash generated from our operations. Although we currently anticipate that our existing cash and cash equivalents and operating cash flow will be sufficient to meet our cash needs for the next twelve months, we may require additional financing. We evaluate financing opportunities from time to time, and our ability to obtain financing will depend, among other things, on our development efforts, business plans, operating performance, and condition of the capital markets at the time we seek financing. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity or equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our ordinary shares, and our shareholders may experience dilution.

If we need additional capital and cannot raise it on acceptable terms, we may not be able to, among other things:

 

•

develop or enhance our products;

 

•

continue to expand our research and development and sales and marketing organizations;

 

•

acquire complementary technologies, products or businesses;

 

•

expand operations in the United States or internationally;

 

•

hire, train, and retain employees; or

 

•

respond to competitive pressures or unanticipated working capital requirements.

 

40

Our failure to have sufficient capital to do any of these things could harm our business, financial condition, and results of operations.

Failure to comply with anti-bribery, anti-corruption, anti-money laundering laws, and similar laws, could subject us to penalties and other adverse consequences.

We are subject to the U.S. Foreign Corrupt Practices Act of 1977, as amended (the “FCPA”), the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, the USA PATRIOT Act, the United Kingdom Bribery Act 2010, the Proceeds of Crime Act 2002, Chapter 9 (sub-chapter 5) of the Israeli Penal Law, 1977, the Israeli Prohibition on Money Laundering Law–2000 and possibly other anti-bribery and anti-money laundering laws in countries outside of the United States in which we conduct our activities. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years and are interpreted broadly to generally prohibit companies, their employees, and their third-party intermediaries from authorizing, offering, or providing, directly or indirectly, improper payments or benefits to recipients in the public or private sector.

We sometimes leverage third parties to sell our products and conduct our business abroad. We and our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and may be held liable for the corrupt or other illegal activities of these third-party business partners and intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities. We cannot assure you that all of our employees and agents will not take actions in violation of applicable law, for which we may be ultimately held responsible. As we increase our international sales and business, our risks under these laws may increase.

Any allegations or violation of the FCPA or other applicable anti-bribery, anti-corruption laws, and anti-money laundering laws could result in whistleblower complaints, sanctions, settlements, prosecution, enforcement actions, fines, damages, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, or suspension or debarment from U.S. government contracts, all of which may have an adverse effect on our reputation, business, results of operations, and prospects. Responding to any investigation or action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees. In addition, the U.S. government may seek to hold us liable for successor liability for FCPA violations committed by companies in which we invest or that we acquire. As a general matter, investigations, enforcement actions and sanctions could harm our reputation, business, results of operations, and financial condition.

A minor portion of our revenue is generated by sales to government entities, which are subject to a number of challenges and risks.

Sales to government entities are subject to a number of risks. Selling to government entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government certification requirements for products like ours may change, thereby restricting our ability to sell into the U.S. federal government, U.S. state government, or non-U.S. government sectors until we have attained the revised certification. Government demand and payment for our products may be affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our products. Additionally, any actual or perceived privacy, data protection, or data security incident, or even any perceived defect with regard to our practices or measures in these areas, may negatively impact public sector demand for our products.

Additionally, we rely on certain partners to provide technical support services to certain of our government entity customers to resolve any issues relating to our products. If our partners do not effectively assist our government entity customers in deploying our products, succeed in helping our government entity customers quickly resolve post-deployment issues, or provide effective ongoing support, our ability to sell additional products to new and existing government entity customers would be adversely affected and our reputation could be damaged.

 

41

Government entities may have statutory, contractual, or other legal rights to terminate contracts with us for convenience or due to a default, and any such termination may adversely affect our future results of operations. Governments routinely investigate and audit government contractors’ administrative processes, and any unfavorable audit could result in the government refusing to continue buying our subscriptions, a reduction of revenue, or fines or civil or criminal liability if the audit uncovers improper or illegal activities, which could adversely affect our results of operations in a material way.

Catastrophic events, or man-made problems such as terrorism, may disrupt our business.

A significant natural disaster, such as an earthquake, fire, flood, or significant power outage could have an adverse impact on our business, results of operations, and financial condition. We have a number of our employees and executive officers located in the San Francisco Bay Area, a region known for seismic activity and increasingly, wildfires. In the event our or our partners abilities are hindered by any of the events discussed above, sales could be delayed, resulting in missed financial targets for a particular quarter. In addition, acts of terrorism, pandemics, such as the outbreak of the novel coronavirus or another public health crisis, protests, riots and other geo-political unrest could cause disruptions in our business or the business of our partners, customers, or the economy as a whole. Any disruption in the business of our partners or customers that affects sales in a given fiscal quarter could have a significant adverse impact on our quarterly results for that and future quarters. All of the aforementioned risks may be further increased if our disaster recovery plans prove to be inadequate.

We are exposed to fluctuations in currency exchange rates, which could negatively affect our financial condition and results of operations.

Our functional currency is the U.S. dollar and our revenue and expenses are primarily denominated in U.S. dollars. However, a significant portion of our headcount related expenses, consisting principally of salaries and related personnel expenses as well as leases and certain other operating expenses, are denominated in NIS. This foreign currency exposure gives rise to market risk associated with exchange rate movements of the U.S. dollar against the NIS. Furthermore, we anticipate that a material portion of our expenses will continue to be denominated in NIS. We currently utilize foreign currency contracts, with financial institutions to protect against foreign exchange risks, mainly the exposure to changes in the exchange rate of the NIS against the U.S. dollar that are associated with future cash flows denominated in NIS.

In addition, increased international sales in the future may result in greater foreign currency denominated sales, increasing our foreign currency risk. Moreover, operating expenses incurred outside the United States and denominated in foreign currencies are increasing and are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully hedge against the risks associated with currency fluctuations, our financial condition and results of operations could be adversely affected. To date, we have entered into hedging transactions in an effort to reduce our exposure to foreign currency exchange risk. While we may decide to continue to enter into hedging transactions in the future, the availability and effectiveness of these hedging transactions may be limited and we may not be able to successfully hedge our exposure, which could adversely affect our financial condition and results of operations.

If our estimates or judgments relating to our critical accounting policies are based on assumptions that change or prove to be incorrect, our results of operations could fall below expectations of securities analysts and investors, resulting in a decline in the trading price of our ordinary shares.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” included elsewhere in this prospectus, the results of which form the basis for making judgments about the carrying values of assets, liabilities, equity, revenue, and expenses that

 

42

are not readily apparent from other sources. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below our publicly announced guidance or the expectations of securities analysts and investors, resulting in a decline in the market price of our ordinary shares. Significant items subject to such estimates and assumptions include, but are not limited to, the allocation of a transaction price among various performance obligations, the estimated customer life on deferred contract acquisition costs, the allowance for doubtful accounts, the fair value of financial assets and liabilities, including accounting and fair value of derivatives, the fair value of acquired intangible assets and goodwill, the useful lives of acquired intangible assets and property and equipment, share-based compensation including the determination of the fair value of our ordinary shares, and the valuation of deferred tax assets and uncertain tax positions.

We are exposed to credit risk and fluctuations in the market values of our investment portfolio.

Given the global nature of our business we have diversified U.S. and non-U.S. investments. Credit ratings and pricing of our investments can be negatively affected by liquidity, credit deterioration, financial results, economic risk, political risk, sovereign risk, or other factors. As a result, the value and liquidity of our investments may fluctuate substantially. Therefore, although we have not realized any significant losses on our investments, future fluctuations in their value could result in a significant realized loss.

Risks Related to Our Ordinary Shares

The market price for our ordinary shares may be volatile or may decline regardless of our operating performance.

The market price of our ordinary shares may be highly volatile and may fluctuate or decline substantially as a result of a variety of factors, many of which are beyond our control, including:

 

•

actual or anticipated changes or fluctuations in our results of operations;

 

•

the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections;

 

•

announcements by us or our competitors of new offerings or new or terminated significant contracts, commercial relationships or capital commitments;

 

•

industry or financial analyst or investor reaction to our press releases, other public announcements, and filings with the SEC;

 

•

rumors and market speculation involving us or other companies in our industry;

 

•

future sales or expected future sales of our ordinary shares;

 

•

investor perceptions of us and the industries in which we operate;

 

•

price and volume fluctuations in the overall stock market from time to time;

 

•

changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

 

•

failure of industry or financial analysts to maintain coverage of us, changes in financial estimates by any analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

 

•

actual or anticipated developments in our business or our competitors’ businesses or the competitive landscape generally;

 

•

litigation involving us, our industry or both, or investigations by regulators into our operations or those of our competitors;

 

43

•

developments or disputes concerning our intellectual property rights or our solutions, or third-party proprietary rights;

 

•

announced or completed acquisitions of businesses or technologies by us or our competitors;

 

•

actual or perceived breaches of, or failures relating to, privacy, data protection or data security;

 

•

new laws or regulations or new interpretations of existing laws or regulations applicable to our business;

 

•

any major changes in our management or our board of directors;

 

•

general economic conditions and slow or negative growth of our markets; and

 

•

other events or factors, including those resulting from war, incidents of terrorism or responses to these events.

The concentration of our share ownership with insiders will likely limit your ability to influence corporate matters, including the ability to influence the outcome of director elections and other matters requiring shareholder approval.

Our executive officers, directors, current 5% or greater shareholders and affiliated entities together beneficially owned approximately 85.8% of our ordinary shares outstanding as of June 30, 2020. As a result, these shareholders, acting together, will have control over most matters that require approval by our shareholders, including matters such as adoption of the financial statements, declarations of dividends, the appointment and dismissal of directors, capital increases, amendment to our articles of associations, and approval of significant corporate transactions. Corporate action might be taken even if other shareholders oppose them. This concentration of ownership might also have the effect of delaying or preventing a change of control of us that other shareholders may view as beneficial.

In addition, three of our non-executive directors are affiliated with holders of greater than 5% of our ordinary shares.

No public market for our ordinary shares currently exists, and an active public trading market may not develop or be sustained following this offering.

No public market for our ordinary shares currently exists. An active public trading market for our ordinary shares may not develop following the completion of this offering or, if developed, it may not be sustained. The lack of an active market may impair your ability to sell your shares at the time you wish to sell them or at a price that you consider reasonable. The lack of an active trading market may also reduce the fair value of your shares. An inactive market may also impair our ability to continue to fund operations by selling shares and may impair our ability to acquire other companies or technologies by using our shares as consideration.

We will have broad discretion in the use of net proceeds to us from this offering and may not use them effectively.

We will have broad discretion in the application of the net proceeds to us from this offering, including for any of the purposes described in the section titled “Use of Proceeds,” and you will not have the opportunity as part of your investment decision to assess whether the net proceeds are being used appropriately. Because of the number and variability of factors that will determine our use of net proceeds from this offering, our ultimate use may vary substantially from our currently intended use. Investors will need to rely upon the judgment of our management with respect to the use of proceeds. Pending their use, we may invest our proceeds in a manner that does not produce income or that loses value. Our investments may not yield a favorable return to our investors and may adversely affect the price of our ordinary share.

 

44

You will experience immediate and substantial dilution in the net tangible book value of the ordinary shares you purchase in this offering.

The initial public offering price of our ordinary shares is substantially higher than the pro forma net tangible book value per ordinary share immediately after this offering. If you purchase ordinary shares in this offering, you will suffer immediate dilution of $        per share, or $        per share if the underwriters exercise their over-allotment option in full, representing the difference between our pro forma as adjusted net tangible book value per share after giving effect to the sale of our ordinary shares in this offering and the initial public offering price of $        per share.

This dilution is due to the substantially lower price paid by our investors who purchased ordinary shares prior to this offering as compared to the price offered to the public in this offering, and any previous exercise of options granted to our service providers. In addition, as of June 30, 2020, options to purchase 13,743,426 ordinary shares with a weighted-average exercise price of $3.97 per share were outstanding as well as 199,295 issuable ordinary shares upon satisfaction of service-based vesting conditions. The exercise of any of these options or issuance of these contingent ordinary shares would result in additional dilution. See the section titled “Dilution” for additional information.

Future sales of substantial amounts of our ordinary shares in the public markets, or the perception that they might occur, could reduce the price that our ordinary shares might otherwise attain.

Future sales of a substantial number of ordinary shares in the public market, particularly sales by our directors, executive officers, and significant shareholders, or the perception that these sales could occur, could adversely affect the market price of our ordinary shares and may make it more difficult for you to sell your ordinary shares at a time and price that you deem appropriate.

All of our directors and officers and the holders of substantially all of our capital shares and securities convertible into our capital shares are subject to lock-up agreements that restrict their ability to transfer shares of our capital shares for 180 days from the date of this prospectus, subject to certain exceptions; provided that such restricted period will end with respect to 25% of the shares subject to each lock-up agreement if at any time beginning 90 days after the date of this prospectus (1) we have filed at least one quarterly report on Form 10-Q or annual report on Form 10-K and (2) the last reported closing price of our ordinary shares is at least 33% greater than the initial public offering price of our ordinary shares for 10 out of any 15 consecutive trading days, including the last day, ending on or after the 90th day after the date of this prospectus; and provided further that, if 90 days after the date of this prospectus occurs within five trading days of a regular quarterly trading black-out period under our insider trading policy, the above referenced early expiration period will be the sixth trading day immediately preceding the commencement of such trading black-out period. In addition, with respect to shares not released as a result of such early release, if the 180th day after the date of this prospectus occurs within five trading days of a regular quarterly trading black-out period under our insider trading policy, the lock-up period will expire on the sixth trading day immediately preceding the commencement of such trading black-out period. Morgan Stanley & Co. LLC and J.P. Morgan Securities LLC may, in their sole discretion, permit our shareholders who are subject to these lock-up agreements to sell shares prior to the expiration of the lock-up agreements, subject to applicable notice requirements. If not earlier released, all of the ordinary shares subject to these lock-up agreements will become eligible for sale upon expiration of the 180-day lock-up period, except for any shares held by our affiliates as defined in Rule 144 under the Securities Act.

In addition, holders of an aggregate of approximately 80,536,775 ordinary shares, based on shares outstanding as of June 30, 2020, are entitled to rights with respect to registration of these shares under the Securities Act pursuant to our amended and restated investors’ rights agreement. If these holders of our ordinary shares, by exercising their registration rights, sell a large number of shares, they could adversely affect the market price for our ordinary shares. We have also registered the offer and sale of all ordinary shares that we may issue under our equity compensation plan.

 

45

The issuance of additional shares in connection with financings, acquisitions, investments, our share incentive plans or otherwise will dilute all other shareholders.

Our amended and restated articles of association authorize us to issue up to             million ordinary shares and up to             million preference shares with such rights and preferences as included in our articles of association. Subject to compliance with applicable rules and regulations, we may issue ordinary shares or securities convertible into ordinary shares from time to time in connection with a financing, acquisition, investment, our share incentive plans or otherwise. Any such issuance could result in substantial dilution to our existing shareholders unless pre-emptive rights exist and cause the market price of our ordinary shares to decline.

Provisions of Israeli law and our amended and restated articles of association to be effective upon the closing of this offering may delay, prevent or make undesirable an acquisition of all or a significant portion of our shares or assets.

Certain provisions of Israeli law and our articles of association could have the effect of delaying or preventing a change in control and may make it more difficult for a third party to acquire us or for our shareholders to elect different individuals to our board of directors, even if doing so would be beneficial to our shareholders, and may limit the price that investors may be willing to pay in the future for our ordinary shares. For example, Israeli corporate law regulates mergers and requires that a tender offer be effected when certain thresholds of percentage ownership of voting power in a company are exceeded (subject to certain conditions). Further, Israeli tax considerations may make potential transactions undesirable to us or to some of our shareholders whose country of residence does not have a tax treaty with Israel granting tax relief to such shareholders from Israeli tax. See the section titled “Description of Share Capital and Articles of Association—Acquisitions Under Israeli Law.”

Furthermore, under the Encouragement of Research, Development and Technological Innovation in the Industry Law, 5744-1984, and the regulations, guidelines, rules, procedures, and benefit tracks thereunder, collectively, the Innovation Law, to which we are subject due to our receipt of grants from the Israeli National Authority for Technological Innovation, or the Israeli Innovation Authority (the “IIA”), a recipient of IIA grants such as our company must report to the IIA regarding any change in the holding of means of control of our company which transforms any non-Israeli citizen or resident into an “interested party,” as defined in the Israeli Securities Law, and such non-Israeli citizen or resident shall execute an undertaking in favor of IIA, in a form prescribed by IIA.

If industry or financial analysts do not publish research or reports about our business, or if they issue inaccurate or unfavorable research regarding our ordinary shares, our share price and trading volume could decline.

The trading market for our ordinary shares is influenced by the research and reports that industry or financial analysts publish about us or our business. We do not control these analysts, or the content and opinions included in their reports. As a new public company, we may be slow to attract research coverage and the analysts who publish information about our ordinary shares will have had relatively little experience with our company, which could affect their ability to accurately forecast our results and make it more likely that we fail to meet their estimates. In the event we obtain industry or financial analyst coverage, if any of the analysts who cover us issues an inaccurate or unfavorable opinion regarding our company, our share price would likely decline. In addition, the share prices of many companies in the technology industry have declined significantly after those companies have failed to meet, or significantly exceed, the financial guidance publicly announced by the companies or the expectations of analysts. If our financial results fail to meet, or significantly exceed, our announced guidance or the expectations of analysts or public investors, analysts could downgrade our ordinary shares or publish unfavorable research about us. If one or more of these analysts cease coverage of our company or fail to publish reports on us regularly, our visibility in the financial markets could decrease, which in turn could cause our share price or trading volume to decline.

 

46

Our management team has limited experience managing a public company, and the requirements of being a public company may strain our resources, divert management’s attention, and affect our ability to attract and retain qualified board members.

As a public company listed in the United States, we will incur significant additional legal, accounting, and other expenses. In addition, changing laws, regulations, and standards relating to corporate governance and public disclosure, including regulations implemented by the SEC and Nasdaq, may increase legal and financial compliance costs, and make some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, and as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies.

Most members of our management team have no experience managing a publicly traded company, interacting with public company investors, and complying with the increasingly complex laws pertaining to public companies. Our management team may not successfully or efficiently manage our transition to being a public company that is subject to significant regulatory oversight and reporting obligations under the federal securities laws and the continuous scrutiny of securities analysts and investors. We intend to invest resources to comply with evolving laws, regulations, and standards, and these new obligations and constituents will require significant attention from our senior management and could divert their attention away from the day-to-day management of our business. If, notwithstanding our efforts, we fail to comply with new laws, regulations, and standards, regulatory authorities may initiate legal proceedings against us and our business, results of operations, and financial condition may be harmed.

Failure to comply with these rules might also make it more difficult for us to obtain certain types of insurance, including director and officer liability insurance, and we might be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. The impact of these events would also make it more difficult for us to attract and retain qualified persons to serve on our board of directors, on committees of our board of directors or as members of senior management.

We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make our ordinary shares less attractive to investors.

For so long as we remain an “emerging growth company” as defined in the JOBS Act, we may take advantage of certain exemptions from various requirements that are applicable to public companies that are not “emerging growth companies,” including, but not limited to, not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, and exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and shareholder approval of any golden parachute payments not previously approved. We may take advantage of these exemptions until we are no longer an emerging growth company. We would cease to be an emerging growth company upon the earliest to occur of: (i) the first fiscal year following the fifth anniversary of our initial public offering; (ii) the first fiscal year after our annual gross revenue is $1.07 billion or more; (iii) the date on which we have, during the previous three-year period, issued more than $1.0 billion in non-convertible debt securities; or (iv) as of the end of any fiscal year after the first anniversary of our initial public offering in which the market value of our ordinary shares held by non-affiliates exceeded $700.0 million as of the end of the second quarter of that fiscal year. We cannot predict if investors will find our ordinary shares less attractive because we may rely on these exemptions. If some investors find our ordinary shares less attractive as a result, there may be a less active trading market for our ordinary shares and our share price may be more volatile.

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.

As a public company, we will be subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Sarbanes-Oxley Act, and the rules and regulations of the applicable

 

47

listing standards of Nasdaq. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming, and costly, and place significant strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs, and significant management oversight.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we will eventually be required to include in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our ordinary shares. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq.

We are not currently required to comply with the SEC rules that implement Section 404 of the Sarbanes-Oxley Act (“Section 404”) and are therefore not required to make a formal assessment of the effectiveness of our internal control over financial reporting for that purpose. As a public company, we will be required to provide an annual management report on the effectiveness of our internal control over financial reporting. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting. We have recently commenced the costly and challenging process of compiling the system and processing documentation necessary to perform the evaluation needed to comply with Section 404, but we may not be able to complete our evaluation, testing, and any required remediation in a timely fashion once initiated. Our compliance with Section 404 will require that we incur substantial expenses and expend significant management efforts. We currently do not have an internal audit group, and we will need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge and compile the system and process documentation necessary to perform the evaluation needed to comply with Section 404. During the evaluation and testing process of our internal controls, if we identify one or more material weaknesses in our internal control over financial reporting, we will be unable to certify that our internal control over financial reporting is effective. We cannot assure you that there will not be material weaknesses or significant deficiencies in our internal control over financial reporting in the future.

Our independent registered public accounting firm is not required to formally attest to the effectiveness of our internal control over financial reporting until after we are no longer an “emerging growth company” as defined in the JOBS Act. At such time, our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could materially and adversely affect our business, results of operations, and financial condition and could cause a decline in the trading price of our ordinary shares.

 

48

U.S. Holders of our ordinary shares may suffer adverse tax consequences if we are characterized as a passive foreign investment company.

A non-U.S. corporation will generally be considered a passive foreign investment company (“PFIC”) for U.S. federal income tax purposes, in any taxable year if either (1) at least 75% of its gross income for such year is passive income (the “PFIC income test”) or (2) at least 50% of its average quarterly assets during such year is attributable to assets that produce or are held for the production of passive income (the “PFIC asset test”). For purposes of the PFIC asset test, the value of our assets will generally be determined by reference to the fair market value of our assets, including goodwill and other unbooked intangibles. Based on our past and current projections of our income and assets, we do not expect to be a PFIC for the current taxable year or for the foreseeable future. Nevertheless, a separate factual determination as to whether we are or have become a PFIC must be made each year (after the close of such year). Since our projections may differ from our actual business results and our market capitalization and value of our assets may fluctuate, we cannot assure you that we will not be or become a PFIC in the current taxable year or any future taxable year. If we are a PFIC for any taxable year during which a U.S. Holder (as defined in “Taxation and Government Programs—U.S. Federal Income Taxation”) holds our ordinary shares, the U.S. Holder may be subject to adverse tax consequences. Each U.S. Holder is strongly urged to consult its tax advisor regarding the application of these rules and the availability of any potential elections. See the section titled “Taxation and Government Programs—U.S. Federal Income Taxation.”

If a U.S. person is treated as owning at least 10% of our shares, such person may be subject to adverse U.S. federal income tax consequences.

If a U.S. person is treated as owning (directly, indirectly, or constructively) at least 10% of the value or voting power of our shares, such person may be treated as a “United States shareholder” with respect to each “controlled foreign corporation” in our group (if any). Because our group includes one or more U.S. subsidiaries, certain of our non-U.S. subsidiaries could be treated as controlled foreign corporations (regardless of whether or not we are treated as a controlled foreign corporation). A United States shareholder of a controlled foreign corporation may be required to report annually and include in its U.S. taxable income its pro rata share of “Subpart F income,” “global intangible low-taxed income,” and investments in U.S. property by controlled foreign corporations, regardless of whether we make any distributions. Failure to comply with such reporting requirements could result in adverse tax effects for United States shareholders and potentially significant monetary penalties. An individual that is a United States shareholder with respect to a controlled foreign corporation generally would not be allowed certain tax deductions or foreign tax credits that would be allowed to a U.S. shareholder that is a U.S. corporation. We cannot provide any assurances that we will assist investors in determining whether any of our non-U.S. subsidiaries is treated as a controlled foreign corporation or furnish to any United States shareholders information that may be necessary to comply with the aforementioned obligations. A United States shareholder should consult its advisors regarding the potential application of these rules to an investment in our ordinary shares.

We do not intend to pay dividends in the foreseeable future. As a result, your ability to achieve a return on your investment will depend on appreciation in the price of our ordinary shares.

We have never declared or paid any cash dividends on our shares. We currently intend to retain all available funds and any future earnings for use in the operation of our business and do not anticipate paying any dividends on our ordinary shares in the foreseeable future. Consequently, investors who purchase ordinary shares in this offering may be unable to realize a gain on their investment except by selling sell such shares after price appreciation, which may never occur.

Our board of directors has sole discretion whether to pay dividends. If our board of directors decides to pay dividends, the form, frequency, and amount will depend upon our future, operations and earnings, capital requirements and surplus, general financial condition, contractual restrictions and other factors that our directors

 

49

may deem relevant. The Israeli Companies Law, 5759-1999 (the “Companies Law”) imposes restrictions on our ability to declare and pay dividends. See the section titled “Description of Share Capital and Articles of Association—Dividend and Liquidation rights” for additional information. Payment of dividends may also be subject to Israeli withholding taxes. See the section titled “Taxation and Government Programs” for additional information.

Risks Related to Our Incorporation and Location in Israel

Conditions in Israel could materially and adversely affect our business.

Many of our employees, including certain management members operate from our offices that are located in Netanya and Tel Aviv, Israel. In addition, a number of our officers and directors are residents of Israel. Accordingly, political, economic, and military conditions in Israel and the surrounding region may directly affect our business and operations. In recent years, Israel has been engaged in sporadic armed conflicts with Hamas, an Islamist terrorist group that controls the Gaza Strip, with Hezbollah, an Islamist terrorist group that controls large portions of southern Lebanon, and with Iranian-backed military forces in Syria. In addition, Iran has threatened to attack Israel and may be developing nuclear weapons. Some of these hostilities were accompanied by missiles being fired from the Gaza Strip against civilian targets in various parts of Israel, including areas in which our employees and some of our consultants are located, and negatively affected business conditions in Israel. Any hostilities involving Israel or the interruption or curtailment of trade between Israel and its trading partners could adversely affect our operations and results of operations.

Our commercial insurance does not cover losses that may occur as a result of events associated with war and terrorism. Although the Israeli government currently covers the reinstatement value of direct damages that are caused by terrorist attacks or acts of war, we cannot assure you that this government coverage will be maintained or that it will sufficiently cover our potential damages. Any losses or damages incurred by us could have a material adverse effect on our business. Any armed conflicts or political instability in the region would likely negatively affect business conditions and could harm our results of operations.

Further, in the past, the State of Israel and Israeli companies have been subjected to economic boycotts. Several countries still restrict business with the State of Israel and with Israeli companies. These restrictive laws and policies may have an adverse impact on our results of operations, financial condition or the expansion of our business. A campaign of boycotts, divestment, and sanctions has been undertaken against Israel, which could also adversely affect our business. Actual or perceived political instability in Israel or any negative changes in the political environment, may individually or in the aggregate adversely affect the Israeli economy and, in turn, the Group’s business, financial condition, results of operations, and prospects.

In addition, many Israeli citizens are obligated to perform several weeks of annual military reserve duty each year until they reach the age of 40 (or older, for reservists who are military officers or who have certain occupations) and, in the event of a military conflict, may be called to active duty. In response to increases in terrorist activity, there have been periods of significant call-ups of military reservists. It is possible that there will be military reserve duty call-ups in the future. Our operations could be disrupted by such call-ups, which may include the call-up of members of our management. Such disruption could materially adversely affect our business, prospects, financial condition, and results of operations.

It may be difficult to enforce a U.S. judgment against us, our officers and directors named in this prospectus in Israel or the United States, or to assert U.S. securities laws claims in Israel or serve process on our officers and directors.

Not all of our directors or officers are residents of the United States. Most of our assets and those of our non-U.S. directors and officers are located outside the United States. Service of process upon us or our non-U.S. resident directors and officers may be difficult to obtain within the United States. We have been informed by our

 

50

legal counsel in Israel, that it may be difficult to assert claims under U.S. securities laws in original actions instituted in Israel or obtain a judgment based on the civil liability provisions of U.S. federal securities laws. Israeli courts may refuse to hear a claim based on an alleged violation of U.S. securities laws against us or our non-U.S. officers or directors reasoning that Israeli is not the most appropriate forum to hear such a claim. In addition, even if an Israeli court agrees to hear a claim, it may determine that Israeli law and not U.S. law is applicable to the claim. If U.S. law is found to be applicable, the content of applicable U.S. law must be proved as a fact by expert witnesses which can be a time-consuming and costly process. Certain matters of procedure may also be governed by Israeli law. There is little binding case law in Israel addressing the matters described above. Israeli courts might not enforce judgments rendered outside Israel, which may make it difficult to collect on judgments rendered against us or our non-U.S. officers and directors.

Moreover, among other reasons, including but not limited to, fraud or absence of due process, or the existence of a judgment which is at variance with another judgment that was given in the same matter if a suit in the same matter between the same parties was pending before a court or tribunal in Israel, an Israeli court will not enforce a foreign judgment if it was given in a state whose laws do not provide for the enforcement of judgments of Israeli courts (subject to exceptional cases), or if its enforcement is likely to prejudice the sovereignty or security of the State of Israel. For more information, see the section titled “Enforceability of Civil Liabilities.”

Your rights and responsibilities as our shareholder will be governed by Israeli law, which may differ in some respects from the rights and responsibilities of shareholders of U.S. corporations.

We are incorporated under Israeli law. The rights and responsibilities of holders of our ordinary shares are governed by our amended and restated articles of association and the Companies Law. These rights and responsibilities differ in some respects from the rights and responsibilities of shareholders in typical U.S. corporations. In particular, pursuant to the Companies Law each shareholder of an Israeli company has to act in good faith and in a customary manner in exercising his or her rights and fulfilling his or her obligations toward the company and other shareholders and to refrain from abusing his or her power in the company, including, among other things, in voting at the general meeting of shareholders, on amendments to a company’s articles of association, increases in a company’s authorized share capital, mergers, and certain transactions requiring shareholders’ approval under the Companies Law. In addition, a controlling shareholder of an Israeli company or a shareholder who knows that it possesses the power to determine the outcome of a shareholder vote or who has the power to appoint or prevent the appointment of a director or officer in the company, or has other powers toward the company has a duty of fairness toward the company. However, Israeli law does not define the substance of this duty of fairness. There is little case law available to assist in understanding the implications of these provisions that govern shareholder behavior.

We have received Israeli government grants for certain of our research and development activities. The terms of these grants may require us to satisfy specified conditions in order to develop and transfer technologies supported by such grants outside of Israel. In addition, in some circumstances, we may be required to pay penalties in addition to repaying the grants.

Our research and development efforts were financed, in part, through grants from the IIA. From our inception through 2015, we conducted projects with the IIA’s support and received grants totaling $1.2 million from the IIA and repaid to the IIA $1.3 million (the entire amount of the grants and accrued interest).

The United Kingdom’s Financial Conduct Authority, which regulates the London Interbank Offered Rate (“LIBOR”), announced in July 2017 that it will no longer persuade or require banks to submit rates for LIBOR after 2021. The grants received from the IIA bear an annual interest rate based on the 12-month LIBOR. Accordingly, there is considerable uncertainty regarding the publication of LIBOR beyond 2021. While it is not currently possible to determine precisely whether, or to what extent, the withdrawal and replacement of LIBOR would affect us, the implementation of alternative benchmark rates to LIBOR may increase our financial liabilities to the IIA.

 

51

The Innovation Law requires, inter alia, that the products developed as part of the programs under which the grants were given be manufactured in Israel and restricts the ability to transfer know-how funded by IIA outside of Israel. Transfer of IIA-funded know-how outside of Israel requires prior approval and is subject to payment of a redemption fee to the IIA calculated according to a formula provided under the Innovation Law. A transfer for the purpose of the Innovation Law is generally interpreted very broadly and includes, inter alia, any actual sale of the IIA-funded know-how, any license to develop the IIA-funded know-how or the products resulting from such IIA-funded know-how or any other transaction, which, in essence, constitutes a transfer of IIA-funded know-how. We cannot be certain that any approval of the IIA will be obtained on terms that are acceptable to us, or at all. We may not receive the required approvals should we wish to transfer IIA-funded know-how and/or development outside of Israel in the future.

Transfer of IIA know-how created, in whole or in part, in connection with an IIA-funded project, to a third party outside Israel requires prior approval and is subject to payment to the IIA of a redemption fee calculated according to a formula provided under the Innovation Law. Subject to prior approval of the IIA, we may transfer the IIA-funded know-how to another Israeli company. If the IIA-funded know-how is transferred to another Israeli entity, the transfer would still require IIA approval but will not be subject to the payment of the redemption fee. In such case, the acquiring company would have to assume all of the applicable restrictions and obligations towards the IIA (including the restrictions on the transfer of know-how and manufacturing capacity, to the extent applicable, outside of Israel) as a condition to IIA approval.

 

52