Summary of Significant Accounting Policies | Summary of Significant Accounting Policies (a) Basis of Presentation and Consolidation The accompanying consolidated financial statements include our results of operations and those of our wholly-owned subsidiaries. All intercompany transactions and balances have been eliminated in consolidation. The accompanying consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States of America (GAAP). (b) Use of Estimates The preparation of consolidated financial statements in conformity with GAAP requires management to make estimates, judgments and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. Significant items subject to such estimates and assumptions include the determination of the estimated economic life of perpetual licenses for revenue recognition, the determination of standalone selling prices in revenue transactions with multiple performance obligations, the estimated period of benefit for deferred contract acquisition and fulfillment costs, the valuation of allowance for doubtful accounts, the valuation of stock-based compensation and the valuation of intangible assets acquired in a business combination. We base our estimates on historical experience and on various other assumptions that we believe are reasonable. Actual results could differ from those estimates. (c) Revenue Recognition We generate products revenue from the sale of (1) cloud-based subscriptions for our InsightIDR, InsightVM, InsightAppSec and InsightConnect products, (2) managed services offerings which utilize our products and (3) term or perpetual software licenses for our Nexpose, Metasploit, AppSpider and Komand products, and associated content subscriptions for our Nexpose and Metasploit products. We also generate appliance revenue that is included in our products revenue and is associated with hardware sold with our Nexpose product to certain customers. We generate maintenance and support revenue associated with customers’ purchases of our software licenses for Nexpose, Metasploit, AppSpider and Komand. We generate professional service revenue from the sale of our deployment and training services related to our solutions, incident response services and security advisory services. Our deployment services educate and assist our customers on the best use and best practices to deploy our solutions. We adopted Financial Accounting Standards Board (FASB) Accounting Standards Update (ASU) 2014-09, Revenue from Contracts with Customers (Topic 606) (ASC 606) on January 1, 2018 using the modified retrospective method. Under this method of adoption, we recognized the cumulative effect of initially applying the new revenue standard as an adjustment to the opening balance of accumulated deficit. Comparative prior periods were not adjusted. In accordance with ASC 606, revenue is recognized when a customer obtains control of promised products or services. The amount of revenue recognized reflects the consideration that we expect to be entitled to receive in exchange for these products or services. To achieve the core principle of this standard, we apply the following five steps: 1) Identify the contract with a customer We consider the terms and conditions of the contracts and our customary business practices in identifying our contracts under ASC 606. We determine we have a contract with a customer when the contract is approved, we can identify each party’s rights regarding the services to be transferred, we can identify the payment terms for the services, and we have determined the customer has the ability and intent to pay and the contract has commercial substance. We apply judgment in determining the customer’s ability and intent to pay, which is based on a variety of factors, including the customer’s historical payment experience or, in the case of a new customer, credit and financial information pertaining to the customer. 2) Identify the performance obligations in the contract Performance obligations promised in a contract are identified based on the products and services that will be transferred to the customer that are both capable of being distinct, whereby the customer can benefit from the product or service either on its own or together with other resources that are readily available from third parties or from us, and are distinct in the context of the contract, whereby the transfer of the products or services is separately identifiable from other promises in the contract. 3) Determine the transaction price The transaction price is determined based on the consideration to which we expect to be entitled in exchange for transferring products or services to the customer. Variable consideration is included in the transaction price if, in our judgment, it is probable that no significant future reversal of cumulative revenue under the contract will occur. In instances where the timing of revenue recognition differs from the timing of invoicing, we have determined our contracts generally do not include a significant financing component. The primary purpose of our invoicing terms is to provide customers with simplified and predictable ways of purchasing our products and services, not to receive financing from our customers or to provide customers with financing. Examples include invoicing at the beginning of a subscription term with revenue recognized ratably over the contract period. 4) Allocate the transaction price to performance obligations in the contract If the contract contains a single performance obligation, the entire transaction price is allocated to the single performance obligation. Contracts that contain multiple performance obligations require an allocation of the transaction price to each performance obligation based on a relative standalone selling price (“SSP”). 5) Recognize revenue when or as we satisfy a performance obligation Revenue is recognized at the time the related performance obligation is satisfied by transferring the promised product or service to a customer. Revenue is recognized when control of the products or services are transferred to our customers, in an amount that reflects the consideration that we expect to receive in exchange for those products or services. The following table summarizes revenue from contracts with customers for the year ended December 31, 2018 : Year Ended (in thousands) Subscription revenue $ 137,442 Term and perpetual software licenses 28,200 Maintenance and support 42,223 Professional services 33,297 Other 2,929 Total revenue $ 244,091 The following table summarizes the revenue by region based on the shipping address of customers who have contracted to use our product or service for the year ended December 31, 2018 : Year Ended (in thousands) United States $ 199,852 All other 44,239 Total revenue $ 244,091 Subscription Revenue Subscription revenue consists of revenue from our cloud-based subscription, managed services offerings and content subscriptions associated with our software licenses. • We generate cloud-based subscription revenue primarily from sales of subscriptions to access our cloud platform, together with related support services to our customers. These arrangements do not provide the customer with the right to take possession of our software operating on our cloud platform at any time. Instead, customers are granted continuous access to our cloud platform over the contractual period. Revenue is recognized over time on a ratable basis over the contract term beginning on the date that our service is made available to the customer. Our cloud-based subscription contracts generally have a term of 1 year which is billed in advance and non-cancellable. • Managed services offerings consist of fees generated when we operate our software and provide our capabilities on behalf of our customers. Revenue is recognized on a ratable basis over the contract term beginning on the date that our service is made available to the customer. Our managed services offerings generally have a term of 1 year which is billed in advance and non-cancellable. • Revenue related to our content subscriptions associated with our software licenses is recognized ratably over the contractual period. • Some of our customers have the option to purchase additional subscription and support services at a stated price. These options generally do not provide a material right as they are priced at our SSP. Certain subscription contracts contain service level commitments, which entitle our customers to receive service credits and, in certain cases, refunds, if our services do not meet certain levels. These service credits and refunds represent variable consideration. We have historically not experienced any significant incidents affecting the defined levels of reliability and performance as required by our subscription contracts and accordingly, no estimated refunds have been considered in the allocation of the transaction price. Term and Perpetual Software Licenses For our perpetual software licenses where the utility to the customer is dependent on the continued delivery of content subscriptions, the content subscription renewal options result in a material right with respect to the perpetual software license. As a result, the revenue attributable to the perpetual software license is recognized ratably over the customer’s estimated economic life of five years , which represents a longer period of time in comparison to the initial contractual period of maintenance and support. The estimated economic life of five years represents the period which the customer is expected to benefit from the material right. We estimated this period of benefit by taking into consideration several factors, including the terms and conditions of our customer contracts and renewals and the expected useful life of our technology. For our term software licenses where the utility to the customer is dependent on the continued delivery of content subscriptions, we recognize the license revenue over the contractual term of the arrangement as a material right does not exist. For our term and perpetual software licenses which are not dependent on the continued delivery of content subscriptions, the license is considered distinct from the maintenance and support, and we therefore recognize revenue attributable to the license at the time of delivery. Maintenance and Support Maintenance and support services are sold with our perpetual and term software licenses. As maintenance and support services are distinct from the perpetual and term software license, revenue attributable to maintenance and support services is recognized ratably over the contractual period. Professional Services All of our professional services are considered distinct performance obligations when sold stand alone or with other products. These contracts generally have terms of one year or less. For the majority of these contracts, revenue is recognized over time based upon the proportion of work performed to date. Other Other revenue primarily includes revenue from delivery of appliances and other miscellaneous revenue. Contracts with Multiple Performance Obligations The majority of our contracts with customers contain multiple performance obligations. For these contracts, we account for individual performance obligations separately if they are considered distinct. The transaction price is allocated to the separate performance obligations on a relative SSP basis. We determine SSP based on our overall pricing objectives, taking into consideration market conditions and other factors, including the geographic locations of our customers and selling method (i.e., partner or direct). Contract Balances Contract liabilities consist of deferred revenue and include payments received in advance of performance under the contract. Such amounts are recognized as revenue over the contractual period consistent with the above methodology. For the year ended December 31, 2018 , we recognized revenue of $135.6 million that was included in the corresponding contract liability balance at the beginning of the period presented. Deferred revenue that will be realized during the succeeding 12-month period is recorded as current, and the remaining deferred revenue is recorded as non-current. We receive payments from customers based upon contractual billing schedules. Accounts receivable are recorded when the right to consideration becomes unconditional. Contract assets, or unbilled receivables, include amounts related to our contractual right to consideration for both completed and partially completed performance obligations that may not have been invoiced. As of January 1, 2018 and December 31, 2018 , contract assets of $0.3 million and $0.8 million , respectively, are included in prepaid expenses and other current assets in our consolidated balance sheet. Transaction Price Allocated to the Remaining Performance Obligations The following table includes estimated revenue expected to be recognized in the future related to performance obligations that are unsatisfied or partially unsatisfied as of December 31, 2018 . The estimated revenues do not include unexercised contract renewals. 2019 2020 2021 and thereafter (in thousands) Subscription revenue $ 129,539 $ 37,471 $ 980 Term and perpetual software licenses 22,880 20,776 4,043 Maintenance and support 26,966 6,536 110 The amounts presented in the table above primarily consist of fixed fees which are typically recognized ratably as the performance obligation is satisfied. As of December 31, 2018 , the estimated revenue expected to be recognized in the future related to performance obligations that are unsatisfied or partially unsatisfied associated with professional services was $12.0 million . We will recognize this revenue as the professional services are completed, which is expected to occur within the next 12 months or less. Transition Disclosures For periods prior to January 1, 2018, we recognized revenue in accordance with FASB ASC Topic 605, Revenue Recognition (ASC 605). In accordance with the modified retrospective method transition requirements, we will present the financial statement line items impacted and adjusted to compare to presentation under ASC 605 for each of the interim and annual periods during the first year of our adoption of ASC 606. The following tables summarize the impact as of and for the year ended December 31, 2018 : As of December 31, 2018 Balance Sheet As Reported under ASC 606 Proforma as if ASC 605 was in effect (in thousands) Cash and cash equivalents $ 99,565 $ 99,565 Short-term investments 159,210 159,210 Accounts receivable, net 74,935 74,935 Deferred contract acquisition and fulfillment costs, current portion 12,321 — Prepaid expenses and other current assets 9,746 9,281 Long-term investments 44,892 44,892 Property and equipment, net 17,523 17,523 Goodwill 88,420 88,420 Intangible assets, net 23,955 23,955 Deferred contract acquisition and fulfillment costs, non-current portion 27,634 — Other assets 1,168 1,168 Total assets $ 559,369 $ 518,949 Accounts payable 7,048 7,048 Accrued expenses 37,376 37,376 Deferred revenue, current portion 189,855 193,763 Other current liabilities 707 707 Convertible senior notes, net 174,688 174,688 Deferred revenue, non-current portion 58,716 41,658 Other long-term liabilities 3,660 2,912 Total liabilities 472,050 458,152 Common stock 476 476 Treasury stock (4,764 ) (4,764 ) Additional paid-in-capital 556,223 556,223 Accumulated other comprehensive loss (31 ) (31 ) Accumulated deficit (464,585 ) (491,107 ) Total stockholders’ equity 87,319 60,797 Total liabilities and stockholders’ equity $ 559,369 $ 518,949 Total reported assets were $40.4 million greater than the proforma balance sheet, which assumes the previous guidance remained in effect as of December 31, 2018 , largely due to deferred contract acquisition and fulfillment costs of $40.0 million . Total reported liabilities were $13.9 million greater than the proforma balance sheet primarily due to changes in deferred revenue and deferred tax liabilities. Year Ended December 31, 2018 Statement of Operations As Reported under ASC 606 Proforma as if ASC 605 was in effect (in thousands, except share and per share data) Revenue: Products $ 168,571 175,146 Maintenance and support 42,223 45,767 Professional services 33,297 35,010 Total revenue 244,091 255,923 Cost of revenue: Products 39,810 39,761 Maintenance and support 7,678 7,678 Professional services 23,595 23,577 Total cost of revenue 71,083 71,016 Total gross profit 173,008 184,907 Operating expenses: Research and development 67,743 67,743 Sales and marketing 123,310 136,167 General and administrative 34,993 34,993 Total operating expenses 226,046 238,903 Loss from operations (53,038 ) (53,996 ) Other income (expense), net: Interest income 3,229 3,229 Interest expense (4,934 ) (4,934 ) Other income (expense), net (336 ) (336 ) Loss before income taxes (55,079 ) (56,037 ) Provision for income taxes 466 157 Net loss $ (55,545 ) $ (56,194 ) Net loss per share, basic and diluted $ (1.20 ) $ (1.21 ) Weighted-average common shares outstanding, basic and diluted 46,456,825 46,456,825 The following summarizes the significant changes on the consolidated statement of operations for the year ended December 31, 2018 as a result of the adoption of ASC 606 on January 1, 2018 compared to if we had continued to recognize revenue under ASC 605: • Products revenue decreased $6.6 million for the year ended December 31, 2018 under ASC 606 primarily due to perpetual licenses revenue which are dependent on the continued delivery of content subscriptions and the change in the allocation of contract consideration to the relative fair value method under ASC 606 from the residual method under ASC 605. As a result of the allocation change, more contract consideration is allocated to license revenue under ASC 606. Given the utility of certain of our perpetual license products are dependent on the continued delivery of content subscriptions, the content subscription renewal option results in a material right with respect to the perpetual license. As a result, revenue allocated to the perpetual license is recognized ratably over the customer's estimated economic life of five years rather than over the contractual period of maintenance and support, typically one to three years . • Maintenance and support revenue decreased $3.5 million for the year ended December 31, 2018 under ASC 606 primarily due to the change in the allocation of contract consideration to the relative fair value method under ASC 606 from the residual method under ASC 605. As a result of the allocation change, more contract consideration is allocated to license revenue under ASC 606. • Professional services revenue decreased $1.7 million for the year ended December 31, 2018 under ASC 606 primarily due to the fact that our professional services are sold together with term or perpetual licenses. Under ASC 606, the professional services represent distinct performance obligations and therefore are recognized as services are performed. Under ASC 605, professional services sold together with term or perpetual licenses were recognized ratably over the contractual period of maintenance and support. • Sales and marketing expense decreased $12.9 million for the year ended December 31, 2018 under ASC 606 primarily due to the capitalization of commissions considered direct and incremental costs to obtain a contract partially offset by amortization of capitalized commissions. • Provision for income taxes increased $0.3 million for the year ended December 31, 2018 under ASC 606 due to additional deferred taxes for the temporary differences between the accounting and tax treatments of capitalized costs to obtain or fulfill a contract. Year Ended December 31, 2018 Statement of Cash Flows As Reported under ASC 606 Proforma as if ASC 605 was in effect (in thousands) Net loss $ (55,545 ) $ (56,194 ) Adjustments to reconcile net loss to net cash provided by operating activities 43,443 43,125 Changes in operating assets and liabilities: Accounts receivable (1,685 ) (1,685 ) Deferred contract acquisition and fulfillment costs (12,790 ) — Prepaid expenses and other assets (287 ) 146 Accounts payable 3,675 3,675 Accrued expenses 6,018 6,018 Deferred revenue 22,870 10,614 Other liabilities 367 367 Net cash provided by operating activities $ 6,066 $ 6,066 The adoption of ASC 606 resulted in offsetting changes in operating assets and liabilities and had no impact on net cash flow from operations. Legacy Revenue Accounting Policy For periods prior to January 1, 2018, revenue was recognized in accordance with ASC 605. Under ASC 605, revenue was recognized when all of the following were met: • Persuasive evidence of an arrangement existed . Binding agreements or purchase orders were generally evidence of an arrangement. • Delivery had occurred . Delivery occurred (1) upon delivery of the software license key or when the customer had access to the software product or (2) when we performed the services. • The sales price was fixed or determinable . Fees were considered fixed and determinable when the fees were contractually agreed upon with the customer. • Collectability was probable . Collectability was deemed probable based on review of a number of factors, including creditworthiness and customer payment history. If collectability was not probable, revenue was deferred until collection became probable, which was generally upon the receipt of payment. Substantially all of our software licenses were sold in multiple-element arrangements that included maintenance and support and content subscriptions, and in addition could include cloud-based subscriptions, professional services and/or managed services. All of these elements were considered to be software elements other than cloud-based subscriptions and managed services which were non-software elements. Non-software elements included in multiple-element arrangements consist of a single deliverable that had stand-alone value and represented a single unit of accounting. We determined that we did not have vendor-specific objective evidence, or VSOE, of the selling price for the elements comprising these multiple-element arrangements as our software licenses were generally not sold on a stand-alone basis and we purposefully employed variable pricing for our offerings in order to meet customer purchase requirements along the multiple price points of the demand curve. When all of the elements of a multiple-element arrangement were software elements, the revenue for software licenses and any other products and services that were sold along with the license was generally deferred on our balance sheet and recognized as revenue on our consolidated statements of operations ratably over the contractual period of the maintenance and support, typically one to three years, which was longer than the period over which the professional services were performed. Revenue recognition began upon delivery of the software license, assuming that all other criteria for revenue recognition had been met. When a multiple-element arrangement included both software elements and non-software elements, the total arrangement consideration was first allocated between the software elements and the non-software elements based on the selling price hierarchy, which included (1) VSOE, if available, (2) third-party evidence, or TPE, if VSOE was not available or (3) best estimate of selling price, or BESP, if neither VSOE nor TPE was available. We were not able to establish a selling price for any element using VSOE or TPE. We determined BESP by considering our overall pricing objectives and market conditions. Significant pricing practices taken into consideration included our discounting practices, the size and volume of our transactions, our price lists, our go-to-market strategy, historical standalone sales and contract prices. The determination of BESP was made in consultation with, and was approved by, our management. The portion of the consideration allocated to the non-software elements was recognized ratably over the service period of the non-software elements, assuming all other criteria for revenue recognition had been met. The portion of the consideration allocated to software elements was recognized as described above. With respect to our managed services and cloud-based subscription offerings sold on a stand-alone basis, we recognized revenue ratably over the term of the managed service agreement or subscription, assuming that the other criteria for revenue recognition were met. We recognized revenue from professional services sold on a stand-alone basis as those services were rendered. For purposes of disclosing revenue by class, we allocated the arrangement consideration for multiple-element software arrangements among the individual elements utilizing BESP, as we did not have VSOE or TPE of selling price for any of the elements. (d) Cash and Cash Equivalents We consider all highly liquid instruments with original maturities of three months or less at the date of purchase to be cash equivalents. Cash and cash equivalents are recorded at cost, which approximates fair value. As of December 31, 2018 and 2017 , $58.6 million and $0.1 million , respectively, of our cash equivalents were invested in money market funds, U.S. Government agencies and commercial paper. (e) Restricted Cash As of December 31, 2017 , we had $0.2 million of restricted cash recorded on our balance sheet in other non-current assets as collateral for a credit card program. This restricted cash was released during 2018, therefore as of December 31, 2018 , we had no restricted cash on our balance sheet. (f) Investments We classify our investments as available-for-sale and record these investments at fair value. We currently invest primarily in commercial paper, corporate bonds, agency bonds, U.S. Government agencies and asset-backed securities. Investments with an original maturity of greater than three months at the date of purchase and less than one year from the date of the balance sheet are classified as short-term and those with maturities of more than one year from the date of the balance sheet are classified as long-term in the consolidated balance sheet. Additionally, we do not invest in any securities with contractual maturities greater than 24 months. Unrealized gains and losses that are considered temporary are reported as a component of other comprehensive loss. Realized gains and losses are determined based on the specific identification method, and are reflected in our consolidated statements of operations. We regularly review our investment portfolio to identify and evaluate investments that have indicators of possible impairment. Factors considered in determining whether a loss is other-than-temporary include, but are not limited to: the length of time and extent a security’s fair value has been below its cost, the financial condition and near-term prospects of the investee, the credit quality of the security’s issuer, likelihood of recovery and our intent and ability to hold the security for a period of time sufficient to allow for any anticipated recovery in value. For our debt instruments, we also evaluate whether we have the intent to sell the security or it is more likely than not that we will be required to sell the security before recovery of its cost basis. (g) Accounts Receivable and Allowance for Doubtful Accounts Accounts receivable are recorded at the invoiced amount, net of allowances for doubtful accounts. Management regularly reviews the adequacy of the allowance for doubtful accounts by considering the age of outstanding invoices, the customer’s expected ability to pay and the collection history, when applicable, to determine whether an allowance is appropriate. Accounts receivable are charged against the allowance for doubtful accounts after all means of collection have been exhausted and the potential for recovery is considered remote. Additions to the allowance for doubtful accounts are recorded in general and administrative expense in the consolidated statement of operations. We do not have any off-balance sheet credit exposure related to our customers. The following table displays the changes in our allowance for doubtful accounts: Amount (in thousands) Balance at December 31, 2015 $ 730 Additions, net of recoveries 931 Less write-offs (600 ) Balance at December 31, 2016 1,061 Additions, net of recoveries 905 Less write-offs (488 ) Balance at December 31, 2017 1,478 Additions, net of recoveries 740 Less write-offs (594 ) Balance at December 31, 2018 $ 1,624 (h) Concentration of Credit Risk Financial instruments that potentially expose us to concentrations of credit risk consist primarily of cash and cash equivalents, accounts receivable and short-term and long-term investments. As of December 31, 2018 and 2017 , $58.6 million and $0.1 million , respectively, of our cash equivalents were invested in money market funds, U.S. Government agencies and commercial paper. Deposits held with banks may exceed the amount of insurance provided on such deposits. We have not experienced any losses in such accounts and believe that we are not exposed to any significant risk. We provide credit to customers in the normal course of business. Collateral is not required for accounts receivable, but ongoing credit evaluations of customers’ financial condition are performed. We maintain reserves for potential credit losses. No single customer, including channel partners, accounted for 10% or more of our total revenues in 2018 , 2017 or 2016 or accounts receivable as of December 31, 2018 or 2017 . Our short-term and long-term investments primarily consist of commercial paper, corporate bonds, agency bonds, U.S. Government agencies and asset-backed securities. All of our investments are highly-rated by credit rating agencies and are issued by organizations with reputable credit, and therefore bear minimal credit risk. (i) Property and Equipment Property and equipment are recorded at cost and depreciated over their estimated useful lives using the straight-line method. The following table presents the useful lives of our property and equipment: Useful Lives Computer equipment and software 3 years Furniture and fixtures 5 - 7 years Leasehold improvements Shorter of the useful life of the asset or the lease term Upon sale, the cost of assets disposed and the related accumulated depreciation are removed from the accounts and any resulting gain or loss is recognized in the consolidated statements of operations. Repairs and maintenance costs are expensed as incurred. (j) Software Development Costs Software development costs associated with the development of products for sale are recorded to research and development expense until technological feasibility has been established for the product. Once technological feasibility is established, all software costs are capitalized until the product is available for release to customers. To date, the software development costs have not been capitalized as we believe our current software development process is essentially completed concurrently with the establishment of technological feasibility. As such, these costs are expensed as incurred and recognized in research and development expenses in our consolidated statements of operations. With respect to software developed for internal use, we capitalize qualifying internal costs, such as payroll and benefits of those employees directly associated with the development of the software, and other qualifying consulting costs. Costs incurred during the preliminary planning and evaluation and post implementation stages of the project are expensed as incurred. Costs incurred during the application development stage of the project are capitalized. We capitalized $3.3 million , $1.2 million and $0 of costs related to software developed for internal use in the years ended December 31, 2018, 2017 and 2016, respectively. Total unamortized costs relating to software developed for internal use was $3.4 million and $1.1 million as of December 31, 2018 and 2017 , respectively. These costs are included in long-term assets as part of intangible assets, net in our consolidated balance sheet. (k) Long-Lived Assets We evaluate our long-lived assets for impairment whenever events or changes in circumstances indicate that the carrying value of these assets may not be recoverable. When such events or changes in circumstances occur, recoverability of these assets is measured by a comparison of the carryin |