As filed with the Securities and Exchange Commission on September 11, 2019.

Registration No. 333-233296

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

Amendment No. 2

to

FORM S-1

REGISTRATION STATEMENT

Under

The Securities Act of 1933

Cloudflare, Inc.

(Exact name of Registrant as specified in its charter)

Delaware	7372	27-0805829
(State or other jurisdiction of incorporation or organization)	(Primary Standard Industrial Classification Code Number)	(I.R.S. Employer Identification Number)

Cloudflare, Inc.

101 Townsend Street

San Francisco, CA 94107

(888) 993-5273

(Address, including zip code, and telephone number, including area code, of Registrant’s principal executive offices)

Matthew Prince

Chief Executive Officer

Cloudflare, Inc.

101 Townsend Street

San Francisco, CA 94107

(888) 993-5273

(Name, address, including zip code, and telephone number, including area code, of agent for service)

Copies to:

Steven E. Bochner, Esq. Allison B. Spinner, Esq. Bryan D. King, Esq. Wilson Sonsini Goodrich & Rosati, P.C. 650 Page Mill Road Palo Alto, CA 94304 (650) 493-9300 Douglas J. Kramer, Esq. Chad A. Skinner, Esq. Cloudflare, Inc. 101 Townsend Street San Francisco, CA 94107 (888) 993-5273 Gordon K. Davidson, Esq. James D. Evans, Esq. Ran D. Ben-Tzur, Esq. Fenwick & West LLP 801 California Street Mountain View, CA 94041 (650) 988-8500

Approximate date of commencement of proposed sale to the public: As soon as practicable after this registration statement becomes effective.

If any of the securities being registered on this Form are to be offered on a delayed or continuous basis pursuant to Rule 415 under the Securities Act of 1933 check the following box.  ☐

If this Form is filed to register additional securities for an offering pursuant to Rule 462(b) under the Securities Act, please check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering.  ☐

If this Form is a post-effective amendment filed pursuant to Rule 462(c) under the Securities Act, check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering.  ☐

If this Form is a post-effective amendment filed pursuant to Rule 462(d) under the Securities Act, check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering.  ☐

Indicate by check mark whether Registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer	☐	Accelerated filer	☐
Non-accelerated filer	☒	Smaller reporting company	☐
Emerging growth company	☒

If an emerging growth company, indicate by check mark if Registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 7(a)(2)(B) of the Securities Act.  ☐

CALCULATION OF REGISTRATION FEE

Title of each Class of Securities to be Registered	Shares to be Registered(1)	Proposed Maximum Aggregate Offering Price Per Share(2)	Maximum Aggregate Offering Price(1)(2)	Amount of Registration Fee(3)
Class A common stock, $0.001 par value per share	40,250,000	$14.00	$563,500,000	$68,297

(1) Includes an additional 5,250,000 shares of our Class A common stock that the underwriters have the option to purchase.

(2) Estimated solely for the purpose of calculating the registration fee in accordance with Rule 457(a) under the Securities Act of 1933, as amended.

(3) The Registrant previously paid $58,540 of this amount in connection with a prior filing of this registration statement.

Registrant hereby amends this registration statement on such date or dates as may be necessary to delay its effective date until Registrant will file a further amendment which specifically states that this registration statement will thereafter become effective in accordance with Section 8(a) of the Securities Act of 1933, as amended, or until the registration statement will become effective on such date as the Securities and Exchange Commission, acting pursuant to said Section 8(a), may determine.

The information in this preliminary prospectus is not complete and may be changed. These securities may not be sold until the registration statement filed with the Securities and Exchange Commission is effective. This preliminary prospectus is not an offer to sell nor does it seek an offer to buy these securities in any jurisdiction where the offer or sale is not permitted.

Subject to Completion. Dated September 11, 2019                

35,000,000 Shares

Cloudflare, Inc.

Class A Common Stock

This is an initial public offering of shares of Class A common stock of Cloudflare, Inc.

Prior to this offering, there has been no public market for our Class A common stock. It is currently estimated that the initial public offering price per share will be between $12.00 and $14.00. We have been approved to list the Class A common stock on the New York Stock Exchange under the symbol “NET.”

We have two classes of authorized common stock, Class A common stock and Class B common stock. The rights of the holders of Class A common stock and Class B common stock are substantially identical, except with respect to voting and conversion. Each share of Class A common stock is entitled to one vote per share. Following the completion of this offering, each share of Class B common stock will be entitled to 10 votes per share and will be convertible at any time into one share of Class A common stock. Following this offering, outstanding shares of Class B common stock will represent approximately 96.3% of the voting power of our outstanding capital stock.

We are an “emerging growth company” as that term is used in the Jumpstart Our Business Startups Act of 2012 and, as such, may elect to comply with certain reduced public company reporting requirements in future reports after the completion of this offering.

See “Risk Factors” beginning on page 17 to read about factors you should consider before buying shares of our Class A common stock.

Neither the Securities and Exchange Commission nor any other regulatory body has approved or disapproved of these securities or passed upon the accuracy or adequacy of this prospectus. Any representation to the contrary is a criminal offense.

	Per share	Total
Initial public offering price	$	$
Underwriting discount(1)	$	$
Proceeds, before expenses, to Cloudflare	$	$

⁽¹⁾  See the section titled “Underwriting” for a description of the compensation payable to the underwriters.

At our request, the underwriters have reserved up to five percent of the shares of Class A common stock offered by this prospectus for sale, at the initial public offering price, to certain persons associated with us. See the section titled “Underwriting—Directed Share Program.”

To the extent that the underwriters sell more than 35,000,000 shares of Class A common stock, the underwriters have the option to purchase up to an additional 5,250,000 shares from Cloudflare, Inc. at the initial public offering price less the underwriting discount.

The underwriters expect to deliver the shares against payment in New York, New York, on or about                 , 2019.                

Goldman Sachs & Co. LLC       Morgan Stanley J.P. Morgan

Jefferies Wells Fargo Securities                     RBC Capital Markets

JMP Securities Evercore ISI Needham & Company
Oppenheimer & Co. BTIG SunTrust Robinson Humphrey

Prospectus dated                 , 2019

20M Internet Properties as of September 3, 2019 10% of Fortune 1,000 are Paying Customers as of September 3, 2019 99% Internet Users in the Developed World within 100ms as of September 3, 2019 44B Cyber Threats Blocked per Day approximate average over three months ended June 30, 2019 77% GAAP Gross Margin six months ended June 30, 2019 51% Revenue Growth F16-F18 CAGR see “Prospectus Summary—Summary Consolidated Financial and Other Data”

TABLE OF CONTENTS

Prospectus

	Page
PROSPECTUS SUMMARY		1
THE OFFERING		10
SUMMARY CONSOLIDATED FINANCIAL AND OTHER DATA		14
RISK FACTORS		17
SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS		65
INDUSTRY AND MARKET DATA		67
USE OF PROCEEDS		68
DIVIDEND POLICY		68
CAPITALIZATION		69
DILUTION		72
SELECTED CONSOLIDATED FINANCIAL AND OTHER DATA		75
MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS		77
A LETTER FROM MATTHEW PRINCE AND MICHELLE ZATLYN		112
BUSINESS		115
MANAGEMENT		147
EXECUTIVE COMPENSATION		156
CERTAIN RELATIONSHIPS AND RELATED PARTY TRANSACTIONS		171
PRINCIPAL STOCKHOLDERS		174
DESCRIPTION OF CAPITAL STOCK		178
SHARES ELIGIBLE FOR FUTURE SALE		185
MATERIAL U.S. FEDERAL INCOME TAX CONSEQUENCES TO NON-U.S. HOLDERS OF OUR CLASS A COMMON STOCK		189
UNDERWRITING		194
LEGAL MATTERS		200
EXPERTS		200
WHERE YOU CAN FIND ADDITIONAL INFORMATION		200

Through and including                 , 2019 (the 25th day after the date of this prospectus), all dealers effecting transactions in these securities, whether or not participating in this offering, may be required to deliver a prospectus. This is in addition to the dealers’ obligation to deliver a prospectus when acting as underwriters and with respect to their unsold allotment or subscriptions.

Neither we nor any of the underwriters have authorized anyone to provide any information or to make any representations other than those contained in this prospectus or in any free writing prospectuses we have prepared. Neither we nor any of the underwriters take responsibility for, and can provide no assurance as to the reliability of, any other information that others may give you. This prospectus is an offer to sell only the shares offered hereby, but only under circumstances and in jurisdictions where it is lawful to do so. The information contained in this prospectus is current only as of its date, regardless of the time of delivery of this prospectus or of any sale of our Class A common stock.

For investors outside the United States: Neither we nor any of the underwriters have done anything that would permit our initial public offering or possession or distribution of this prospectus in any jurisdiction where action for that purpose is required, other than in the United States. Persons outside the United States who come into possession of this prospectus must inform themselves about, and observe any restrictions relating to, the offering of the shares of our Class A common stock and the distribution of this prospectus outside the United States.

PROSPECTUS SUMMARY

This summary highlights selected information that is presented in greater detail elsewhere in this prospectus. This summary does not contain all of the information you should consider before investing in our Class A common stock. You should read this entire prospectus carefully, including the sections titled “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and our consolidated financial statements and the related notes thereto included elsewhere in this prospectus, before making an investment decision. Unless the context otherwise requires, the terms “Cloudflare,” “the Company,” “we,” “us,” and “our” in this prospectus refer to Cloudflare, Inc. and its consolidated subsidiaries, and references to our “common stock” include our Class A common stock and Class B common stock.

Cloudflare, Inc.

Overview

Cloudflare’s mission is to help build a better Internet.

Today, the Internet is the lifeblood of business and the primary vehicle of commerce and communication for people around the world. While it was brilliantly architected to deliver fault tolerance and robust connectivity, it was not designed to deliver the security, millisecond performance, and reliability required for businesses today.

For decades, a number of vendors have looked to address the core limitations and vulnerabilities of the Internet for businesses that operate online. These vendors built a range of standalone hardware boxes to address the emerging requirements for security, performance, and reliability. These boxes could be deployed in on-premise data centers to deliver functions such as virtual private network (VPN), firewall, routing, traffic optimization, load balancing, and other network services. While they created massive complexity, cost, technical debt, and a tangled web of dependencies for the organizations that deployed them, the approach generally worked and these on-premise “band-aid boxes” were able to alleviate some of the Internet’s fundamental security, performance, and reliability problems.

And then the cloud happened.

In recent years, the technology industry has undergone a massive transition from on-premise hardware and software that customers buy, to services in the cloud that they rent. This transition has swept through the application, compute, and storage layers of enterprise computing architectures.

Organizations now exist in a complex, heterogeneous infrastructure environment which exacerbates the fundamental problems of the Internet more than ever, and the on-premise band-aid boxes that they once relied upon to solve these problems were never designed to work in such an environment. An on-premise box will not solve the problems organizations now face. Nor can a business ship a band-aid box to a cloud vendor. Even if they wanted to, there is literally no place to install such a box in the cloud.

The result is that a major architectural shift at the network layer is now underway. Cloudflare is leading this transition.

We have built a global cloud platform that delivers a broad range of network services to businesses of all sizes and in all geographies—making them more secure, enhancing the performance of their

1

business-critical applications, and eliminating the cost and complexity of managing individual network hardware. Our platform serves as a scalable, easy-to-use, unified control plane to deliver security, performance, and reliability across on-premise, hybrid, cloud, and software-as-a-service (SaaS) applications. Today, approximately 10% of the Fortune 1,000 are paying Cloudflare customers. Additionally, across the broader Internet, approximately 10% of the top million, 17% of the top 100,000, and 18% of the top 10,000 websites use at least one product on our platform on a paid or free basis.⁽¹⁾

We started by building an efficient, scalable network. This network forms the foundation of our platform on which we can rapidly develop and deploy our products for our customers. Together, the development of our network and products create the interconnected flywheels that drive our business and have allowed us to achieve our market position.

• Network Flywheel: We have created a network architecture that is flexible, scalable, and becomes more efficient as it expands.

• Product Flywheel: We have leveraged this network to deploy products that are easy to use, continuously improved, and can be delivered without adding significant incremental cost.

We have experienced significant growth, with our revenue increasing from $84.8 million in 2016 to $134.9 million in 2017 and to $192.7 million in 2018, increases of 59% and 43%, respectively. As we continue to invest in our business, we have incurred net losses of $17.3 million, $10.7 million, and $87.2 million for 2016, 2017, and 2018, respectively. For the six months ended June 30, 2018 and 2019, our revenue increased from $87.1 million to $129.2 million, an increase of 48%, and we incurred net losses of $32.5 million and $36.8 million, respectively.

Our Industry

The Internet was not built for what it has become.

Originally conceived as a decentralized, wired network to interconnect academic institutions, the Internet has evolved into a global platform for business and communications, hosting a wide variety of often mission-critical applications. While the Internet was brilliantly architected to deliver fault tolerance and robust connectivity, it was not designed to deliver the security, millisecond performance, and reliability required now that it has become the lifeblood for business and the primary vehicle of commerce and communication for humanity.

Despite the Internet’s limitations, businesses relying on it must meet customer expectations for always-on access to their services, low latency, total reliability, and high levels of security and privacy. Furthermore, businesses are accountable for the delivery of these requirements end-to-end, to every customer and employee’s desktop or mobile device, forcing them to address security, performance, and reliability globally and well beyond what they once thought of as the perimeter of their own infrastructure.

Band-Aid Boxes

To meet evolving expectations and navigate the limitations of the Internet, businesses have traditionally relied on a broad array of hardware devices deployed in on-premise data centers to deliver

⁽¹⁾  These percentages are derived from Datanyze, Market Share, from January 2019, based on the average percentage market share for website optimization, domain name system, security, and content delivery network solutions for websites in the Alexa top million, top 100,000, and top 10,000. Refer to the section titled “Industry and Market Data.”

2

functions such as VPN, firewall, routing, traffic optimization, load balancing, and other network services. These band-aid boxes were meant to patch the Internet and address its core limitations. While the band-aid boxes added some security, performance, and reliability benefits, they contributed to massive complexity, cost, technical debt, and a tangled web of dependencies.

In spite of the drawbacks, the band-aid boxes were sufficient to ensure the safety, functionality, and resilience required by businesses that could afford them in the on-premise paradigm.

But these band-aid boxes were never designed to work in the cloud.

Shift to the Cloud

In recent years, the technology industry has been undergoing a transition from on-premise hardware and software that customers buy, to services in the cloud that they rent. Application vendors led this transition as companies like Salesforce, Workday, and NetSuite provided cloud-based, multi-tenant solutions that disrupted legacy, on-premise software from companies like SAP, Oracle, and Microsoft. Compute and storage followed, with public cloud vendors such as Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Alibaba Cloud disrupting server and storage vendors like HP, Dell, Lenovo, and Sun Microsystems.

The Network Layer Transitions to the Cloud

The rise of cloud computing architectures alongside the massive increase in mobile devices vastly complicates the already difficult task of securing and optimizing applications. Organizations exist in a complex, heterogeneous infrastructure environment of public cloud, on-premise, and hybrid deployments. The threat landscape, functional requirements, and scale of business applications are evolving faster than ever before, and the volume and sophistication of network attacks can strain the defensive capabilities of even the most advanced enterprises.

The hardware-based, inflexible, on-premise band-aid boxes that organizations once relied upon to meet these challenges were never designed to work in an environment like this. And even if the band-aid boxes could scale to meet the challenges of the modern enterprise, a business cannot simply ship a band-aid box to a cloud vendor. There is literally no place to install such a box in the cloud.

This is forcing a major architectural shift in how enterprises address security, performance, and reliability at the network layer. The functionality provided by companies such as Cisco Systems, Juniper Networks, F5 Networks, Check Point Software, Palo Alto Networks, FireEye, Riverbed Technology, and others is being elevated, abstracted, and unified into the cloud.

Cloudflare is leading this transition.

Our Platform

We have built a global cloud platform that delivers a broad range of network services to businesses of all sizes around the world—making them more secure, enhancing the performance of their business-critical applications, and eliminating the cost and complexity of managing and integrating individual network hardware. We provide businesses a scalable, easy-to-use, unified control plane to deliver security, performance, and reliability across their on-premise, hybrid, cloud, and SaaS applications.

Previously, enterprises would often string together a diverse set of on-premise band-aid boxes from different vendors to solve their network challenges. As these solutions move to the cloud, the network

3

latency, support complexity, and cost of overhead makes stringing together multiple point-cloud solutions that only address a specific network need untenable. Customers are therefore looking to consolidate behind a single platform. We offer this unified control plane. Customers who join our platform using one product can adopt our other seamlessly integrated products with a single click. We serve comprehensive customer needs across security, performance, and reliability. Our platform and business model are designed to make rolling out our new products fast and efficient. We believe that platforms with the broadest catalogue of products will ultimately beat point-cloud solutions.

To achieve what we have, we started by building an efficient, scalable network. This network forms the foundation of our platform on which we can develop and deploy our products for our customers. Together the development of our network and products create the interconnected flywheels that drive our business and have allowed us to achieve our market position.

Network Flywheel

We have created a network architecture that is flexible, scalable, and gets more and more efficient as it expands. We designed and built our network to be able to grow capacity quickly and inexpensively; to allow for every server, in every city, to run every Cloudflare service; and to allow us to shift customers and traffic across our network efficiently. We refer to this architecture as “serverless” because it means we can deploy standard, commodity hardware, and our product developers and customers do not need to worry about the underlying servers. Our software automatically manages the deployment and execution of our product developers’ code and our customers’ code across our network. Because we manage the execution and prioritization of code running across our network, it means that we are both able to optimize the performance of our highest paying customers and also effectively leverage idle capacity across our network. We have chosen to utilize this idle capacity to create a free tier of service—which has generated substantial global scale for us. In turn, this scale makes us attractive partners for Internet Service Providers (ISPs) globally, which reduces our co-location and bandwidth costs. As our network grows, these dynamics become even more powerful.

Today, our network spans 194 cities in over 90 countries and interconnects with over 8,000 networks globally, including major ISPs, cloud services, and enterprises. We estimate that we operate within 100 milliseconds of 99% of the Internet-connected population in the developed world, and 94% of the Internet-connected population globally (for context, the blink of an eye is 300-400 milliseconds).⁽²⁾ And, we have built this powerful network while achieving U.S. GAAP gross margin of 77% in the year ended December 31, 2018 and the six months ended June 30, 2019, demonstrating the cost and capital efficiency of our model.

Product Flywheel

We began with the idea of serving the broadest possible market. To do this, we made our products easy to use and affordable and were able to provide our entry level plan for free in part because of the cost advantage of our network. We leverage the resulting customer scale and diversity to continuously make our products better. Our machine learning systems improve our products with every customer’s request, optimizing our security, performance, and reliability globally. The over 20 million Internet properties (e.g., domains, websites, application programming interfaces, and mobile applications) that use our platform comprise a global sensor network, which functions like an immune system for the Internet—routing around congestion, optimizing for traffic conditions, and using data on cyber attacks

⁽²⁾  These percentages are derived from our observed round-trip time for all unique IP addresses sending or receiving traffic through our network in the Organisation for Economic Co-operation and Development countries and in all countries, respectively.

4

against any one of our customers to better protect them all. We leverage these insights to block cyber threats every day, which in the three months ended June 30, 2019 averaged approximately 44 billion per day.

Feedback from our diverse, global customer base helps us expand into new, adjacent product areas. Since our customers’ traffic is already passing through our network, our serverless architecture means we can add products on our platform to solve new network challenges without significantly increasing our incremental costs. This allows us to provide new products at competitive prices and further expand the overall market.

Market Opportunity

We believe our platform disrupts several large and well-established IT markets. The key markets that are addressed by our platform include VPN, internal and external firewalls, web security (including web application firewalls and content filtering), distributed denial of service (DDoS) prevention, intrusion detection and prevention, application delivery controls, content delivery networks, domain name systems, advanced threat prevention (ATP), and wide area network (WAN) technology. From our analysis based on IDC data, $31.6 billion was spent on those products in 2018, which is expected to grow to $47.1 billion in 2022, representing a compound annual growth rate of 10.5%. We also are actively developing new products to address adjacent markets including compute, storage, 5G, and Internet of Things (IoT) that are not included in the estimate of our addressable market.

Why We Win

We have six distinct advantages that uniquely position us to win:

1. Disruptive Business Model. Our business model is designed for efficiency. Our network and product flywheels create a virtuous cycle that has driven down our unit costs over time while we increase the diversity and quality of our products. We believe that our serverless platform’s flexibility, as well as our aligned interests with our ISP partners, allows us to continue to become more efficient as we expand our network. At the same time, this architecture allows us to add new products and features across our platform without significant additional operating costs.

2. Ease of Use. A new customer can sign up in minutes, regardless of its technical ability or budget. The ease of use of our products significantly increases our total addressable market and has also allowed our enterprise customers, which consist of customers that sign up for our Enterprise plan, to simplify and streamline their network operations.

3. Efficient Go-to-Market Model. Our go-to-market strategy is designed to efficiently address the broad market we serve. Our self-serve offering, coupled with our attractive pricing, allows customers to easily adopt our products. We augment our self-serve offering with a highly productive sales force to serve larger customers.

4. Product Innovation and Velocity. We drive product innovation by continuously improving our platform through machine learning and diverse customer feedback. Our systems learn from every request that passes through our network. This allows us to automatically mitigate new attacks, optimize protocols for the best performance, and reroute traffic to avoid network outages. Many of our free customers volunteer to test new features early in the development cycle, which allows us to ensure product excellence before deploying to our paying customers.

5

5. Integrated, Global Offering. Our network spans 194 cities in over 90 countries, and this flexible, serverless platform offers the same set of core features in every city and country. This gives our customers a unified control plane—whether they are running on-premise, with SaaS vendors, in hybrid environments, or solely in the public cloud. Additionally, because we offer an integrated solution, we do not force our customers to choose between safer, faster, or stronger—our solution offers security, performance, and reliability by design.

6. Trust and Neutrality. As businesses move to the cloud, there are increasing concerns over interoperability and avoiding being locked into any one public cloud vendor. We empower customers to overcome these concerns through our independence and neutrality. Moreover, unlike some public cloud providers, our business model aligns with the interests of our customers. We do not sell user data. Nor do we aim to compete with our customers.

Growth Strategy

Key elements of our growth strategy include:

• Acquire New Customers: We believe that any person or business that relies on the Internet to deliver products, services, or content can be a Cloudflare customer. We will continue to grow our customer base across all of our service offerings—free, self-serve, and enterprise.

• Expand Our Relationships with Existing Customers: Today, approximately 10% of the Fortune 1,000 are paying Cloudflare customers. Additionally, across the broader Internet, approximately 10% of the top one million, 17% of the top 100,000, and 18% of the top 10,000 websites use at least one product on our platform on a paid or free basis. Customers expand their relationships with us by upgrading to premium plans, increasing their usage of our platform, or adding products. Once a customer has adopted one product on our platform, it can easily add additional products with a single click. Over 70% of our enterprise customers already leverage four or more of our products.

• Develop New Products: We continue to invest in new product development, and as we onboard more customers and more traffic on our network, our ability to identify promising new avenues for innovation improves.

• Extend Our Serverless Platform Strategy: We have opened our serverless platform to outside developers with a product called Cloudflare Workers. This enables our customers to write and deploy their own code in seconds directly onto our global cloud platform and have it run close to their users. We have seen a growing number of customers bring applications to market using Cloudflare Workers. This opens up an entirely new market for us: compute and storage.

Risk Factors Summary

Our business is subject to numerous risks and uncertainties, including those highlighted in the section titled “Risk Factors” immediately following this prospectus summary. These risks include, but are not limited to, the following:

• We have a history of net losses and may not be able to achieve or sustain profitability in the future.

• We have experienced rapid revenue growth, which may not be indicative of our future performance.

6

• If we are unable to attract new paying and free customers, our future results of operations could be harmed.

• Our business depends on our ability to retain and upgrade paying customers and, to a lesser extent, convert free customers to paying customers, and any decline in renewals, upgrades, or conversions could adversely affect our future results of operations.

• Problems with our internal systems, networks, or data, including actual or perceived breaches or failures, could cause our network or products to be perceived as insecure, underperforming, or unreliable, our reputation to be damaged, and our financial results to be negatively impacted.

• Activities of our paying and free customers or the content of their websites and other Internet properties could subject us to liability.

• Activities of our paying and free customers or the content of their websites or other Internet properties, as well as our responses to those activities, could cause us to experience adverse political, business, and reputational consequences with customers, employees, suppliers, government entities, and others.

• Although offering a free self-serve plan for certain of our products is an important part of our business strategy, we may not be able to realize all of the expected benefits of this strategy and the costs and other detriments associated with our free plan could outweigh the benefits we receive from our free customers.

• The actual or perceived failure of our products to block malware or prevent a security breach could harm our reputation and adversely impact our business, results of operations, and financial condition.

• If our global network that delivers our products or the core co-location facilities we use to operate our network are damaged or otherwise fail to meet the requirements of our business, our ability to provide access to our platform and products to our customers and maintain the performance of our network could be negatively impacted, which could cause our business, results of operations, and financial condition to suffer.

• If our customers’ or channel partners’ access to our platform and products is interrupted or delayed for any reason, our business could suffer.

• Detrimental changes in, or the termination of, any of our co-location relationships, ISP partnerships, or our other interconnection relationships with ISPs could adversely impact our business, results of operations, and financial condition.

• The dual-class structure of our common stock will have the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of this offering, and it may depress the trading price of our Class A common stock.

Channels for Disclosure of Information

Investors, the media, and others should note that, following the completion of this offering, we intend to announce material information to the public through filings with the Securities and Exchange Commission (the SEC), the investor relations page on our website, press releases, public conference calls, webcasts, our company news site at https://www.cloudflare.com/press, and our corporate blog at https://blog.cloudflare.com.

7

The information disclosed by the foregoing channels could be deemed to be material information. As such, we encourage investors, the media, and others to follow the channels listed above and to review the information disclosed through such channels.

Any updates to the list of disclosure channels through which we will announce information will be posted on the investor relations page on our website.

Corporate Information

We were incorporated in the state of Delaware in July 2009. Our principal executive offices are located at 101 Townsend Street, San Francisco, California 94107, and our telephone number is (888) 993-5273. Our website address is www.cloudflare.com and our corporate blog’s address is https://blog.cloudflare.com. Information contained on, or that can be accessed through, our website or blog does not constitute part of this prospectus and inclusions of our website and blog addresses in this prospectus are inactive textual references only.

“Cloudflare,” our logo, and our other registered or common law trademarks, service marks, and trade names appearing in this prospectus are the property of Cloudflare, Inc. Other trademarks and trade names referred to in this prospectus are the property of their respective owners.

Implications of Being an Emerging Growth Company

We are an “emerging growth company” as defined in the Jumpstart Our Business Startups Act of 2012 (the JOBS Act). An emerging growth company may take advantage of specified reduced reporting requirements that are otherwise applicable generally to public companies. These reduced reporting requirements include:

• an exemption from compliance with the auditor attestation requirement on the effectiveness of our internal control over financial reporting;

• reduced disclosure about our executive compensation arrangements;

• an exemption from the requirements to obtain a non-binding advisory vote on executive compensation or stockholder approval of any golden parachute arrangements; and

• extended transition periods for complying with new or revised accounting standards.

We may take advantage of these provisions until we are no longer an emerging growth company. We would cease to be an “emerging growth company” upon the earliest to occur of: (i) the last day of the fiscal year in which we have greater than $1.07 billion in annual revenue; (ii) the date we qualify as a “large accelerated filer,” with at least $700 million of equity securities held by non-affiliates; (iii) the date on which we have, in any three-year period, issued greater than $1.0 billion in non-convertible debt securities; and (iv) the last day of the fiscal year ending after the fifth anniversary of this offering. We may choose to take advantage of some but not all of these reduced reporting burdens. We have taken advantage of certain reduced reporting burdens in this prospectus. Accordingly, the information contained herein may be different than the information you receive from other public companies in which you hold stock.

The JOBS Act permits an emerging growth company like us to take advantage of an extended transition period to comply with new or revised accounting standards applicable to public companies. We have elected to use this extended transition period until we are no longer an emerging growth company or until we affirmatively and irrevocably opt out of the extended transition period. As a result,

8

our financial statements may not be comparable to companies that comply with new or revised accounting pronouncements as of public company effective dates.

See the section titled “Risk Factors—Risks Related to Ownership of Our Class A Common Stock—We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make our Class A common stock less attractive to investors.”

9

The Offering

Class A common stock offered by us	35,000,000 shares
Class A common stock to be outstanding after this offering	81,360,728 shares
Class B common stock to be outstanding after this offering	211,982,959 shares
Total Class A common stock and Class B common stock to be outstanding after this offering	293,343,687 shares
Underwriters’ option to purchase additional shares of Class A common stock from us	5,250,000 shares
Use of proceeds	We estimate that the net proceeds to us from the sale of shares of our Class A common stock in this offering will be approximately $422.7 million (or approximately $486.8 million if the underwriters’ option to purchase additional shares of our Class A common stock from us is exercised in full), based upon the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, and after deducting underwriting discounts and commissions and estimated offering expenses. The principal purposes of this offering are to increase our capitalization and financial flexibility, create a public market for our Class A common stock, and enable access to the public equity markets for us and our stockholders. We intend to use the net proceeds we receive from this offering for general corporate purposes, including working capital, operating expenses, and capital expenditures. Additionally, we may use a portion of the net proceeds we receive from this offering to acquire businesses, products, services, or technologies. However, we do not have agreements or commitments for any material acquisitions at this time. See “Use of Proceeds” for additional information.
Voting rights	Shares of our Class A common stock are entitled to one vote per share. Following the completion of this offering, shares of our Class B common stock will be entitled to 10 votes per share.

10

	Holders of our Class A common stock and Class B common stock will generally vote together as a single class, unless otherwise required by law or our amended and restated certificate of incorporation. The holders of our outstanding Class B common stock will hold approximately 96.3% of the voting power of our outstanding capital stock following this offering and will have the ability to control the outcome of matters submitted to our stockholders for approval, including the election of our directors and the approval of any change in control transaction. Additionally, our executive officers, directors, and holders of 5% or more of our common stock will hold, in the aggregate, approximately 84.8% of the voting power of our outstanding capital stock following this offering. See “Principal Stockholders” and “Description of Capital Stock” for additional information.
Directed share program	At our request, the underwriters have reserved up to five percent of the shares of Class A common stock offered by this prospectus for sale, at the initial public offering price, to certain persons associated with us. The sales will be made by Goldman Sachs & Co. LLC, an underwriter in this offering, through a directed share program. We do not know if these parties will choose to purchase all or any portion of these reserved shares, but any purchases they do make will reduce the number of shares available to the general public. Any reserved shares that are not so purchased will be offered by the underwriters to the general public on the same terms as the other shares of Class A common stock. Shares sold through the directed share program will not be subject to lock-up restrictions. See the section titled “Underwriting—Directed Share Program” for additional information.
New York Stock Exchange symbol	“NET”

The number of shares of our Class A common stock and Class B common stock that will be outstanding after this offering is based on 46,360,728 shares of our Class A common stock and 211,982,959 shares of our Class B common stock outstanding as of June 30, 2019, and reflects:

• 31,381,152 shares of redeemable convertible preferred stock that will automatically convert into shares of Class A common stock immediately prior to the completion of this offering pursuant to the terms of our amended and restated certificate of incorporation;

11

• 14,979,576 shares of our Class B common stock held by former employees that will automatically convert into shares of Class A common stock immediately prior to the completion of this offering pursuant to the terms of our amended and restated certificate of incorporation; and

• 134,276,690 shares of redeemable convertible preferred stock that will automatically convert into shares of Class B common stock immediately prior to the completion of this offering pursuant to the terms of our amended and restated certificate of incorporation, which together with the conversion of redeemable convertible preferred stock and shares of Class B common stock into Class A common stock, we refer to as the Capital Stock Conversions.

The shares of our Class A common stock and Class B common stock outstanding as of June 30, 2019 exclude the following:

• 23,558,731 shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock outstanding as of June 30, 2019, with a weighted-average exercise price of $2.27 per share;

• No shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock granted after June 30, 2019;

• 177,410 shares of our Class B common stock issuable pursuant to warrants to purchase an aggregate of 177,410 shares of our redeemable convertible preferred stock outstanding as of June 30, 2019, with a weighted-average exercise price of $0.34 per share;

• 4,148,564 shares of our Class B common stock subject to restricted stock units (RSUs) outstanding as of June 30, 2019;

• 2,105,526 shares of our Class B common stock subject to RSUs granted after June 30, 2019; and

• 42,719,132 shares of our Class A common stock reserved for future issuance under our equity compensation plans, consisting of:

• 29,335,000 shares of our Class A common stock to be reserved for future issuance under our 2019 Equity Incentive Plan (our 2019 Plan), which will become effective prior to the completion of this offering;

• 7,514,132 shares of our Class B common stock reserved for future issuance under our 2010 Equity Incentive Plan (our 2010 Plan), and upon the termination of such 2010 Plan in connection with the effectiveness of our 2019 Plan, up to an equivalent number of shares of our Class A common stock to be added to the shares reserved for future issuance under our 2019 Plan above; and

• 5,870,000 shares of our Class A common stock to be reserved for future issuance under our 2019 Employee Stock Purchase Plan (our ESPP), which will become effective prior to the completion of this offering.

Our 2019 Plan and ESPP provide for annual automatic increases in the number of shares of our Class A common stock reserved thereunder, and our 2019 Plan also provides for increases to the number of shares of our Class A common stock that may be granted thereunder based on shares under our 2010 Plan that expire, are forfeited, or otherwise repurchased by us, as more fully described in the section titled “Executive Compensation—Employee Benefits and Stock Plans.”

12

Except as otherwise indicated, all information in this prospectus assumes:

• the Capital Stock Conversions will occur immediately prior to the completion of this offering;

• the filing and effectiveness of our amended and restated certificate of incorporation in Delaware and the effectiveness of our amended and restated bylaws, each of which will occur immediately prior to the completion of this offering;

• no exercise of outstanding stock options or warrants, or settlement of outstanding RSUs, subsequent to June 30, 2019; and

• no exercise by the underwriters of their option to purchase up to an additional 5,250,000 shares of our Class A common stock from us.

13

Summary Consolidated Financial and Other Data

The following summary consolidated financial and other data should be read in conjunction with “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” “Selected Consolidated Financial and Other Data,” and the consolidated financial statements and related notes thereto included elsewhere in this prospectus. The summary consolidated statements of operations data for the years ended December 31, 2016, 2017, and 2018 (except for the pro forma share and pro forma net loss per share information) are derived from our audited consolidated financial statements that are included elsewhere in this prospectus. The summary consolidated statements of operations data presented below for the six months ended June 30, 2018 and 2019 and the consolidated balance sheet data as of June 30, 2019 are derived from our unaudited interim consolidated financial statements that are included elsewhere in this prospectus. In management’s opinion, the unaudited interim consolidated financial statements include all adjustments necessary to state fairly our financial position as of June 30, 2019 and the results of operations and cash flows for the six months ended June 30, 2018 and 2019. Our historical results are not necessarily indicative of our future results and our results for the six months ended June 30, 2019 are not necessarily indicative of the results that may be expected for the full year ending December 31, 2019 or any other period. The summary consolidated financial data in this section are not intended to replace the consolidated financial statements and are qualified in their entirety by the consolidated financial statements and related notes thereto included elsewhere in this prospectus.

Consolidated Statements of Operations Data:

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(in thousands, except per share data)
Revenue	$	84,791		$	134,915		$	192,674		$	87,105		$	129,151
Cost of revenue(1)		23,962			28,788			43,537			19,372			29,192
Gross profit		60,829			106,127			149,137			67,733			99,959
Operating expenses:
Sales and marketing(1)		40,122			61,899			94,394			41,744			66,653
Research and development(1)		23,663			33,650			54,463			24,286			36,517
General and administrative(1)		14,073			20,308			85,179			33,041			33,707
Total operating expenses		77,858			115,857			234,036			99,071			136,877
Loss from operations		(17,029	)		(9,730	)		(84,899	)		(31,338	)		(36,918	)
Non-operating income (expense):
Interest income		626			762			1,895			460			1,743
Interest expense		(654	)		(862	)		(992	)		(475	)		(563	)
Other income (expense), net		(208	)		115			(2,091	)		(663	)		(379	)
Total non-operating income (expense), net		(236	)		15			(1,188	)		(678	)		801
Loss before income taxes		(17,265	)		(9,715	)		(86,087	)		(32,016	)		(36,117	)
Provision for income taxes		69			1,033			1,077			472			703
Net loss	$	(17,334	)	$	(10,748	)	$	(87,164	)	$	(32,488	)	$	(36,820	)
Net loss per share attributable to common stockholders, basic and diluted(2)	$	(0.23	)	$	(0.14	)	$	(1.08	)	$	(0.41	)	$	(0.43	)
Weighted-average shares used in computing net loss per share attributable to common stockholders, basic and diluted(2)		75,721			77,147			80,981			78,828			85,382

14

	Year Ended December 31,					Six Months Ended June 30,
	2016	2017	2018			2018	2019
	(in thousands, except per share data)
Pro forma net loss per share, basic and diluted(2)			$	(0.37	)		$	(0.15	)
Weighted-average shares used in computing pro forma net loss per share, basic and diluted(2)				237,322				251,085

⁽¹⁾ Includes stock-based compensation expense as follows:

	Year Ended December 31,						Six Months Ended June 30,
	2016		2017		2018		2018		2019
	(in thousands)
Cost of revenue	$	64	$	47	$	119	$	50	$	66
Sales and marketing		381		488		979		388		554
Research and development		1,043		969		1,532		617		823
General and administrative		4,212		1,251		24,717		794		658
Total stock-based compensation expense	$	5,700	$	2,755	$	27,347	$	1,849	$	2,101

⁽²⁾ Refer to Note 11 to our consolidated financial statements included elsewhere in this prospectus for an explanation of the method used to calculate our basic and diluted net loss per share attributable to common stockholders, our basic and diluted pro forma net loss per share attributable to common stockholders, and the weighted-average number of shares used in the computation of the per share amounts.

Consolidated Balance Sheet Data:

	June 30, 2019
	Actual			Pro Forma(1)			Pro Forma As Adjusted(2)(3)
	(in thousands)
Cash, cash equivalents, and marketable securities	$	124,688		$	124,688		$	547,353
Working capital(4)	$	88,518		$	88,518		$	513,141
Property and equipment, net	$	84,640		$	84,640		$	84,640
Total assets	$	286,859		$	286,859		$	706,597
Deferred revenue, current and noncurrent	$	27,764		$	27,764		$	27,764
Redeemable convertible preferred stock	$	331,521		$	—		$	—
Accumulated deficit	$	(232,698	)	$	(247,361	)	$	(247,361	)
Total stockholders’ (deficit) equity	$	(145,435	)	$	186,086		$	607,782

⁽¹⁾  The pro forma column above reflects (i) the Capital Stock Conversions, as if such conversions had occurred on June 30, 2019, (ii) stock-based compensation expense associated with outstanding qualified event options and RSUs subject to a performance condition of $14.7 million for the qualified event options service period rendered from the date of grant through June 30, 2019 and for the qualified event RSUs for which the service-based condition was satisfied as of June 30, 2019, which we will recognize in connection with this offering, as further described in Note 2 to our consolidated financial statements included elsewhere in this prospectus, and (iii) the filing and effectiveness of our amended and restated certificate of incorporation in Delaware that will become effective immediately prior to the completion of this offering. The pro forma adjustment related to stock-based compensation expense of $14.7 million has been reflected as an increase to additional paid-in capital and accumulated deficit. Payroll tax expenses and other withholding obligations have not been included in the pro forma adjustments, as further described in Note 2 to our consolidated financial statements included elsewhere in this prospectus.

⁽²⁾ The pro forma as adjusted column above gives effect to (i) the pro forma adjustments set forth above and (ii) the receipt of $422.7 million in net proceeds from the sale and issuance by us of 35,000,000 shares of our Class A common stock in this offering, based upon the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, after deducting underwriting discounts and commissions and estimated offering expenses.

15

⁽³⁾ Each $1.00 increase or decrease in the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, would increase or decrease, as applicable, the amount of our pro forma as adjusted cash, cash equivalents, and marketable securities, working capital, total assets, and total stockholders’ (deficit) equity by $32.9 million, assuming that the number of shares offered by us, as set forth on the cover page of this prospectus, remains the same, after deducting underwriting discounts and commissions. An increase or decrease of 1.0 million shares in the number of shares offered by us would increase or decrease, as applicable, the amount of our pro forma as adjusted cash, cash equivalents, and marketable securities, working capital, total assets, and total stockholders’ (deficit) equity by $12.2 million, assuming the assumed initial public offering price remains the same, and after deducting underwriting discounts and commissions.

⁽⁴⁾  Working capital is defined as current assets less current liabilities.

Key Business Metrics and Non-GAAP Financial Measures

We review a number of operating and financial metrics, including the following key metrics and non-GAAP financial measures to evaluate our business, measure our performance, identify trends affecting our business, formulate business plans, and make strategic decisions. Refer to the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Key Business Metrics and Non-GAAP Financial Measures” for additional information and reconciliations of our non-GAAP financial measures to the most directly comparable financial measures stated in accordance with U.S. GAAP.

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(dollars in thousands)
Gross profit	$	60,829		$	106,127		$	149,137		$	67,733		$	99,959
Gross margin		72	%		79	%		77	%		78	%		77	%
Loss from operations	$	(17,029	)	$	(9,730	)	$	(84,899	)	$	(31,338	)	$	(36,918	)
Non-GAAP loss from operations	$	(11,291	)	$	(6,513	)	$	(57,035	)	$	(29,227	)	$	(34,754	)
Operating margin		(20	%)		(7	%)		(44	%)		(36	%)		(29	%)
Non-GAAP operating margin		(13	%)		(5	%)		(30	%)		(34	%)		(27	%)
Net cash provided by (used in) operating activities	$	(13,318	)	$	3,167		$	(43,281	)	$	(17,099	)	$	(12,557	)
Net cash provided by (used in) investing activities	$	(15,256	)	$	9,544		$	(120,795	)	$	15,604		$	27,847
Net cash provided by (used in) financing activities	$	418		$	(149	)	$	168,621		$	3,163		$	2,049
Free cash flow	$	(31,876	)	$	(19,808	)	$	(78,120	)	$	(27,022	)	$	(39,018	)
Net cash provided by (used in) operating activities (as a percentage of revenue)		(16	%)		2	%		(22	%)		(20	%)		(10	%)
Free cash flow margin		(38	%)		(15	%)		(40	%)		(31	%)		(30	%)
Paying customers		35,002			49,309			67,899			56,119			74,873
Paying customers (> $100,000 Annualized Billings)		95			184			313			240			408

16

RISK FACTORS

Investing in our Class A common stock involves a high degree of risk. You should consider carefully the risks and uncertainties described below, together with all of the other information in this prospectus, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making a decision to invest in our Class A common stock. Our business, results of operations, financial condition, or prospects could also be harmed by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be materially and adversely affected. In that event, the market price of our Class A common stock could decline and you could lose all or part of your investment.

Risks Related to Our Business and Our Industry

We have a history of net losses and may not be able to achieve or sustain profitability in the future.

We have incurred net losses in all periods since we began operations and we expect we will continue to incur net losses for the foreseeable future. We experienced net losses of $10.7 million and $87.2 million for the years ended December 31, 2017 and 2018, respectively, and $32.5 million and $36.8 million for the six months ended June 30, 2018 and 2019, respectively. Because the markets for our products are rapidly evolving, it is difficult for us to predict our future results of operations. We expect our operating expenses to increase over the next several years as we continue to hire additional personnel, expand our operations and infrastructure both domestically and internationally, and continue to develop our products. In addition to the expected costs to grow our business, we also expect to incur significant additional legal, accounting, and other expenses as we transition to a public company, as described in greater detail in the risk factors below. If we fail to increase our revenue to offset the increases in our operating expenses, we may not achieve or sustain profitability in the future.

We have experienced rapid revenue growth, which may not be indicative of our future performance.

We have experienced rapid revenue growth in recent periods, with revenue of $134.9 million and $192.7 million for the years ended December 31, 2017 and 2018, respectively, and $87.1 million and $129.2 million for the six months ended June 30, 2018 and 2019, respectively. You should not consider our recent growth in revenue as indicative of our future performance. In particular, our revenue growth rates may decline in the future and may not be sufficient to achieve and sustain profitability, as we also expect our costs to increase in future periods. We believe that historical comparisons of our revenue may not be meaningful and should not be relied upon as an indication of future performance. Accordingly, you should not rely on our revenue and other growth for any prior quarter or year as an indication of our future revenue or revenue growth.

Our rapid growth may also make it difficult to evaluate our future prospects. Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business, results of operations, and financial condition could be harmed.

If we are unable to attract new paying and free customers, our future results of operations could be harmed.

The success of our business principally depends on our ability to attract new paying and free customers. To do so, we must persuade decision makers at potential customers that our products offer

17

significant advantages over those of our competitors. Other factors, many of which are out of our control, may now or in the future impact our ability to add new paying and free customers, including:

• potential customers’ commitments to existing equipment or vendors;

• potential customers’ greater familiarity and/or comfort with on-premises, appliance-based products;

• actual or perceived switching costs;

• our failure to obtain or maintain government or industry security certifications for our network and products;

• negative media, industry, or financial analyst commentary regarding our products and the identities and activities of some of our paying and free customers;

• the adoption of new, or amendment of existing, laws, rules, or regulations that negatively impact the utility of our network and products;

• our failure to expand, retain, and motivate our sales and marketing personnel;

• our failure to develop or expand relationships with existing channel partners or to attract new channel partners;

• our failure to help our customers to successfully deploy and use our products;

• our failure to educate our customers about our platform and products;

• the perceived risk, commencement, or outcome of litigation; and

• deteriorating general economic conditions.

If our efforts to attract new paying customers are not successful, our revenue and rate of revenue growth may decline, we may not achieve profitability, and our future results of operations could be materially harmed. If our efforts to attract new free customers are not successful, the benefits to our network and product development cycles from our strategy of providing a free subscription plan will be diminished.

Our business depends on our ability to retain and upgrade paying customers and, to a lesser extent, convert free customers to paying customers, and any decline in renewals, upgrades, or conversions could adversely affect our future results of operations.

Our business is subscription-based and it is important for our business and financial results that our paying customers renew their subscriptions for our products when existing contract terms expire. Our self-serve paying customers pay with a credit card on a monthly basis and can terminate their subscriptions at will with little advance notice. Because self-serve customers that subscribe to our basic subscription plans are an important source of revenue, this ease of termination could cause our results of operations to fluctuate significantly from quarter to quarter. Our enterprise customers, which consist of customers that sign up for our Enterprise plan, enter into longer term agreements ranging from one to three years, and they generally have no obligation to renew their subscriptions for our products after the expiration of their contractual period and are allowed to cancel their subscriptions in the case of an uncured material breach of the agreement. Some enterprise customers also have agreements that allow them to terminate the agreement without cause upon little or no advance written notice, or upon our failure to meet certain service level commitments, or to obtain and maintain industry security certifications within a specified time frame. Due to our varied customer base and short average subscription periods, it is difficult to accurately predict our long-term customer retention rate. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with the security, performance, and reliability of our products, our prices

18

and subscription plans, our customers’ budgetary restrictions, mergers, acquisitions, joint ventures, and business partnerships and relationships involving our customers, the perception that competitive products provide better or less expensive options, negative public perception of us or our free and paying customers, and deteriorating general economic conditions.

Our future financial performance also depends in part on our ability to continue to upgrade paying customers to higher-tier subscriptions or additional paid products and, to a lesser extent, to convert free customers into paying customers. Conversely, our paying customers may convert to lower-cost or free plans if they do not see the marginal value in paying for our higher-cost plans, thereby impacting our ability to increase revenue. Moreover, our free customers have no obligation to transition to paying customers at any point. In order to expand our commercial relationship with our customers, existing paying and free customers must decide that the incremental cost associated with such an upgrade is justified by the additional functionality. For example, some of our paying customers may decide that our enterprise offerings do not provide sufficient incremental value to upgrade from our self-serve offering. Our customers’ decision whether to upgrade their subscription is driven by a number of factors, including customer satisfaction with the security, performance, and reliability of our platform and products, customer security and networking issues and requirements, general economic conditions, and customer reaction to the price for additional products. If our efforts to expand our relationship with our existing paying and free customers are not successful, our financial condition and results of operations may materially suffer.

Problems with our internal systems, networks, or data, including actual or perceived breaches or failures, could cause our network or products to be perceived as insecure, underperforming, or unreliable, our reputation to be damaged, and our financial results to be negatively impacted.

We face security threats from malicious third parties that could obtain unauthorized access to our internal systems, networks, and data, including the equipment at our network and core co-location facilities. It is virtually impossible for us to entirely mitigate the risk of these security threats and the security, performance, and reliability of our platform and products may be disrupted by third parties, including nation-states, competitors, hackers, disgruntled employees, former employees, or contractors. We also face the possibility of security threats from other sources, such as employee or contractor errors, or malfeasance. For example, hostile third parties, including nation-states, may seek to bribe, extort, or otherwise manipulate our employees or contractors to compromise our platform and products. While we have implemented security measures internally and have integrated security measures into our platform and products, these measures may not function as expected and may not detect or prevent all unauthorized activity, prevent all security breaches, mitigate all security breaches, or protect against all attacks or incidents. Because the equipment in our network co-location facilities is designed to run all of our products, any insertion of malicious code on, unauthorized access to, or other security breach with respect to, this equipment could potentially impact all of our products running on this equipment. We may also experience security breaches and other incidents that may remain undetected for an extended period and, therefore, may have a greater impact on our products and the networks and systems used in our business, and the proprietary and other confidential data contained on our platform or otherwise stored or processed in our operations, and ultimately on our business. We expect to incur significant costs in our efforts to detect and prevent security breaches and other security-related incidents, and we may face increased costs in the event of an actual or perceived security breach or other security-related incident. Our internal systems are exposed to the same cybersecurity risks and consequences of a breach as our customers and other enterprises, any of which could have an adverse effect on our business or reputation. These cybersecurity risks pose a particularly significant risk to a business like ours that is focused on providing highly secure products to customers.

Unauthorized access to, other security breaches of, or security incidents affecting, systems, networks, and data used in our business, including those of our vendors, contractors, or those with which we

19

have strategic relationships, even if not resulting in an actual or perceived breach of our customers’ networks, systems, or data, could result in the loss, compromise or corruption of data, loss of business, reputational damage adversely affecting customer or investor confidence, regulatory investigations and orders, litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations, significant costs for remediation, and other liabilities.

Additionally, in the absence of malicious actions, our platform and products may experience errors, failures, vulnerabilities, or bugs that cause our products not to perform as intended. For example, from time to time we are subject to “route leaks” that involve the accidental or, less commonly, illegitimate advertisement of prefixes, or blocks of IP addresses, which propagate across networks such as ours and can lead to incorrect routing of traffic across our network, taking traffic offline, or in extreme cases, potential interception of customers’ traffic by attackers. In June 2019, a route leak spread by a major telecommunications services provider caused significant disruption to our traffic and that of many other providers. Although events like this are outside our control, they could materially harm our reputation and diminish the confidence of our current and potential customers in our platform and products. In addition, deployment of our platform and products into other computing environments may expose these errors, failures, vulnerabilities, or bugs in our products. Any such errors, failures, vulnerabilities, or bugs may not be found until after they are deployed to our customers and may create the perception that our platform and products are insecure, underperforming, or unreliable. In July 2019, we deployed an update to our web application firewall and certain aspects of the related software code resulted in excessive consumption of computing resources across our network, resulting in an outage on our network. While we continue to monitor the impact of the June 2019 route leak and July 2019 outage, we do not expect that they will have a material impact on our results of operations or financial condition. We also provide frequent updates and fundamental enhancements to our platform and products, which increase the possibility of errors. Our quality assurance procedures and efforts to report, track, and monitor issues with our network may not be sufficient to ensure we detect any such defects in a timely manner. For example, in February 2017, a bug in our software code that processes computer information requests was identified. Instead of the requested data, in certain circumstances this bug, which became known as “Cloudbleed,” caused our servers to output data that was not requested. The erroneous data output by our system included, but was not limited to, a portion of our customers’ secure data. There can be no assurance that our software code is or will remain free from actual or perceived errors, failures, vulnerabilities, or bugs, or that we will accurately route or process all requests and traffic on our network. Given the trillions of Internet requests that route through our network on a monthly basis and the large array of Internet properties (e.g., domains, websites, application programming interfaces (APIs), and mobile applications) we service, the impact of any such error, failure, vulnerability, or bug can be large in terms of absolute numbers of affected requests and customers.

Problems with our network or systems, or those of our vendors, contractors, or those with which we have strategic relationships, could result in actual or perceived breaches of our or our customers’ networks and systems or data. Actual or perceived breaches or other security incidents from these or other causes could lead to claims and litigation, indemnity obligations, regulatory audits, proceedings, and investigations and significant legal fees, significant costs for remediation, the expenditure of significant financial resources in efforts to analyze, correct, eliminate, remediate, or work around errors or defects, to address and eliminate vulnerabilities, and to address any applicable legal or contractual obligations relating to any actual or perceived security breach. They could damage our relationships with our existing customers and have a negative impact on our ability to attract and retain new customers. Because our business is focused on providing secure and high performing network services to our customers, we believe that our products and the networks and systems we use in our business could be targets for hackers and others, and that an actual or perceived breach of, or security incident affecting, our networks, systems, or data, could be especially detrimental to our reputation, customer and channel partner confidence in our solution, and our business. Additionally, our products

20

are designed to operate without interruption, including up to a 100% uptime guarantee for our Business and Enterprise plans. If a breach or security incident were to impact the availability of our platform and products, our business, results of operations, and financial condition, as well as our reputation, could be adversely affected.

Any cybersecurity insurance that we carry may be insufficient to cover all liabilities incurred by us in connection with any privacy or cybersecurity incidents or may not cover the kinds of incidents for which we submit claims. For example, insurers may consider cyberattacks by a nation-state as an “act of war” and any associated damages as uninsured. We also cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, results of operations, and financial condition, as well as our reputation.

Activities of our paying and free customers or the content of their websites and other Internet properties could subject us to liability.

Through our network, we provide a wide variety of products that enable our customers to exchange information, conduct business, and engage in various online activities both domestically and internationally. Our customers represent more than 20 million Internet properties, many of which utilize our free self-serve plan. Our customers may use our platform and products in violation of applicable law or in violation of our terms of service or the customer’s own policies. The existing laws relating to the liability of providers of online products and services for activities of their users are highly unsettled and in flux both within the United States and internationally. We are currently and, in the future, may be subject to lawsuits and/or liability arising from the conduct of our customers. Additionally, the conduct of our customers may subject us to regulatory enforcement actions and/or liability. We are a defendant in a number of lawsuits, both in the United States and abroad, alleging copyright infringement based on content that is made available through our customers’ websites. For example, in a case in Italy seeking injunctive relief, the court recently disagreed with our position and directed us to take action by removing access to content of certain sites on our network. There can be no assurance that we will not face similar litigation in the future or that we will prevail in any litigation we are facing or may face. An adverse decision in one or more of these lawsuits could materially and adversely affect our business, results of operations, and financial condition.

Several U.S. federal statutes may apply to us with respect to various activities of our customers, including: the Digital Millennium Copyright Act (the DMCA), which provides recourse for owners of copyrighted material who believe their rights under U.S. copyright law have been infringed on the Internet; and section 230 of the Communications Decency Act (the CDA), which addresses blocking and screening of content on the Internet. Although these and other similar legal provisions, such as the EU e-Commerce Directive, provide limited protections from liability for service providers like us, those protections may not be interpreted in a way that applies to us, may be amended in the future, or may not provide us with complete protection from liability claims. If we are found not to be protected by the safe harbor provisions of the DMCA, CDA or other similar laws, or if we are deemed subject to laws in other countries that may not have the same protections or that may impose more onerous obligations on us, we may owe substantial damages and our brand, reputation, and financial results may be harmed.

Current and future litigation subjects us to claims for very large potential damages based on a significant number of online occurrences under statutory or other damage theories. Such claims may result in liability that exceeds our ability to pay or our insurance coverage. Even if claims against us are

21

ultimately unsuccessful, defending against such claims will increase our legal expenses and divert management’s attention from the operation of our business, which could materially and adversely impact our business and results of operations.

Policies and laws in this area remain highly dynamic, and we may face additional theories of intermediary liability in various jurisdictions. For example, the European Union (the EU) recently approved a copyright directive that will impose additional obligations on online platforms and failure to comply could give rise to significant liability. And recent laws in Germany (extremist content), Australia (violent content), and Singapore (online falsehoods), as well as other new laws like them, may also expose Internet companies like us to significant liability. We may incur additional costs to comply with these new laws, which may have an adverse effect on our business, results of operations, and financial condition.

Activities of our paying and free customers or the content of their websites or other Internet properties, as well as our response to those activities, could cause us to experience significant adverse political, business, and reputational consequences with customers, employees, suppliers, government entities, and others.

Activities of our paying and free customers or the content of their websites and other Internet properties could cause us to experience significant adverse political, business, and reputational consequences with customers, employees, suppliers, government entities, and other third parties. Even if we comply with legal obligations to remove or disable customer content, we may maintain relationships with customers that others find hostile, offensive, or inappropriate. For example, we experienced significant negative publicity in connection with the use of our network by The Daily Stormer, a neo-Nazi, white supremacist website, around the time of the 2017 protests in Charlottesville, Virginia. We also received negative publicity in connection with the use of our network by 8chan, a forum website that served as inspiration for the recent attacks in El Paso, Texas and Christchurch, New Zealand. We are aware of some potential customers that have indicated their decision to not subscribe to our products was impacted, at least in part, by the actions of certain of our paying and free customers. We may also experience other adverse political, business and reputational consequences with prospective and current customers, employees, suppliers, and others related to the activities of our paying and free customers, especially if such hostile, offensive, or inappropriate use is high profile.

Conversely, actions we take in response to the activities of our paying and free customers, up to and including banning them from using our products, may harm our brand and reputation. Following the events in Charlottesville, Virginia, we terminated the account of The Daily Stormer. Similarly, following the events in El Paso, Texas, we terminated the account of 8chan. We received significant adverse feedback for these decisions from those concerned about our ability to pass judgment on our customers and the users of our platform, or to censor them by limiting their access to our products, and we are aware of potential customers who decided not to subscribe to our products because of this.

Although offering a free self-serve plan for certain of our products is an important part of our business strategy, we may not be able to realize all of the expected benefits of this strategy and the costs and other detriments associated with our free plan could outweigh the benefits we receive from our free customers.

We have historically offered a free self-serve plan for certain of our products. We believe that this strategy is valuable to us and it is an important part of our overall business strategy. However, to the extent that we do not achieve the expected benefits of this strategy, our business may be adversely affected by the costs and detriments of making certain of our products available on a free, self-serve basis to our free customers. While we do not receive any revenue from our free customers, we bear incremental expenses and other liabilities as a result of our free customers’ continuing free access to our platform and certain of our products. Adverse political, business, and reputational consequences

22

associated with Internet properties we serve that are perceived as hostile, offensive, or inappropriate may also be disproportionately common among our free customers. The vast majority of our customers do not pay for our products. In addition, a substantial majority of our free customers historically have not converted to paying customers and we expect this will continue in the future.

The actual or perceived failure of our products to block malware or prevent a security breach could harm our reputation and adversely impact our business, results of operations, and financial condition.

Our security products are designed to reduce the threat to our customers posed by malware and other Internet security threats. Our security products may fail to detect or prevent malware or security breaches for any number of reasons. Even where our security products perform as intended, the performance of our security products can be negatively impacted by our failure to enhance, expand, or update our network and products; improper classification of websites by our employees, automated systems, and partners which identify and track malicious websites; improper deployment or configuration of our products; and many other factors.

Companies are increasingly subject to a wide variety of attacks on their networks and systems, including traditional computer hackers; malicious code, such as viruses and worms; distributed denial-of-service attacks; sophisticated attacks conducted or sponsored by nation-states; advanced persistent threat intrusions; ransomware; phishing attacks and other forms of social engineering; employee, vendor, or contractor errors or malfeasance; and theft or misuse of intellectual property or business or personal data, including by disgruntled employees, former employees, or contractors. No security solution, including our products, can address all possible security threats or block all methods of penetrating a network or otherwise perpetrating a security incident. Accordingly, our security products may be unable to detect or prevent a threat until after our customers are impacted. As our products are adopted by an increasing number of enterprises, it is possible that the individuals and organizations behind cyber threats will focus on identifying ways to circumvent or defeat our security products. If our network is targeted by attacks specifically designed to disrupt it, it could create the perception that our security products are not capable of providing adequate security. As a provider of security products, any perceived lack of security to our network or any of our products could erode our customers’ and potential customers’ trust in our platform and products. Moreover, a high-profile security breach of another cloud services provider could cause our customers and potential customers to lose trust in cloud solutions generally, and cloud-based products like ours in particular. Any such loss of trust could materially and adversely impact our ability to retain existing customers or attract new customers.

Our customers must rely on complex network and security infrastructures, which include products and services from multiple vendors, to secure their networks. If any of our customers becomes infected with malware, or experiences a security breach, they could be disappointed with our products, regardless of whether our security products are intended to block the attack or would have blocked the attack if the customer had properly configured our products or their network, or taken other steps within their control. For example, in April 2017, we published details of a web cache deception attack method that exploits the misconfiguration of websites to circumvent reverse-proxy systems such as ours. While the vulnerability associated with this attack method relates to misconfiguration of websites outside of our control, a customer experiencing a security event related to this vulnerability may nevertheless blame us or become dissatisfied with our products as a result. Additionally, if any enterprises that are publicly known to use our platform and products are the subject of a cyberattack that becomes publicized, this could harm our reputation and our current or potential customers may look to our competitors for alternatives to our platform and products.

From time to time, industry or financial analysts and research firms test our platform and related security products against other security products. Our products may fail to detect or prevent threats in any particular test for a number of reasons, including misconfiguration. To the extent potential

23

customers, industry or financial analysts, or testing firms believe that the occurrence of a failure to detect or prevent any particular threat is a flaw or indicates that our products do not provide significant value or provide less value than competitive solutions, our reputation and business could be materially harmed.

Any real or perceived flaws in our network, or any actual or perceived security breaches of our customers, could result in:

• a loss of existing or potential customers or channel partners;

• delayed or lost sales and harm to our financial condition and results of operations;

• a delay in attaining, or the failure to attain, market acceptance of our products;

• the expenditure of significant financial resources in efforts to analyze, correct, eliminate, remediate, or work around errors or defects, to address and eliminate vulnerabilities, and to address any applicable legal or contractual obligations relating to any actual or perceived security breach;

• negative publicity and damage to our reputation and brand; and

• legal claims and demands (including for stolen assets or information, repair of system damages, and compensation to customers and business partners), litigation, regulatory audits, proceedings or investigations, and other liability.

Any of the above results could materially and adversely affect our business, results of operations, and financial condition.

If our global network that delivers our products or the core co-location facilities we use to operate our network are damaged or otherwise fail to meet the requirement of our business, our ability to provide access to our platform and products to our customers and maintain the performance of our network could be negatively impacted, which could cause our business, results of operations and financial condition to suffer.

We currently host our global network and serve our customers from co-location and ISP-partner facilities located in 194 cities and over 90 countries around the world. In addition to these global facilities, much of the infrastructure for our global network and for our business and operations is maintained through a core co-location facility located in the U.S. Pacific Northwest, a second core co-location facility located in Luxembourg that provides certain redundancy to the U.S. core facility, and through a limited number of other U.S. co-location facilities that provide limited subsets of our network support. While we have electronic and, to a lesser extent, physical access to the components and infrastructure of our network and co-location facilities that are hosted by third parties—including ISP-partner facilities—we do not control the operation of these third-party facilities. Consequently, we may be subject to service disruptions as well as failures to provide adequate support for reasons that are outside of our direct control. All of our co-location and ISP-partner facilities and network infrastructure are vulnerable to damage or interruption from a variety of sources including earthquakes; floods; fires; power loss; system failures; computer viruses; physical or electronic break-ins; human error; malfeasance; or interference, including by disgruntled employees, former employees, or contractors; terrorism; and other catastrophic events. Co-location facilities housing our network infrastructure may also be subject to local administrative actions, changes to legal or permitting requirements, labor disputes, and litigation to stop, limit, or delay operations. Despite precautions taken at these facilities, such as disaster recovery and business continuity arrangements, the occurrence of a natural disaster or an act of terrorism, a decision to close the co-location facilities without adequate notice, or other unanticipated problems at these facilities could result in interruptions or delays in the availability of our network and products, impede our ability to scale our operations, or have other adverse impacts upon our business, results of operations, and financial condition.

24

The components of our global network are interrelated, such that disruptions or outages affecting one or more of our network co-location facilities may increase the strain on other components of our network. Concurrent disruptions or outages at a number of our network co-location facilities may lead to a cascading effect in which heightened strain on our network causes further disruptions or outages, particularly within the regions where the disruptions and outages occur. In addition, the failure of any of our core co-location facilities for any significant period of time, particularly our U.S. core co-location facility, could place a significant strain upon the ongoing operation of our business, as we have only limited redundant functionality for these facilities. Such a failure of a core co-location facility could degrade and slow down our network, reduce the functionality of our products for our customers, impact our ability to bill our customers, and otherwise materially and adversely impact our business, reputation, and results of operations.

If our customers’ or channel partners’ access to our platform and products is interrupted or delayed for any reason, our business could suffer.

Any interruption or delay in our customers’ or channel partners’ access to our platform and products will negatively impact our customers. Our customers depend on the continuous availability of our network for the delivery and use of our products, and our products are designed to operate without interruption, including up to 100% uptime guarantee for our Business and Enterprise plans. If all or a portion of our network were to fail, our customers and partners could lose access to the Internet until such disruption is resolved or they deploy disaster recovery options that allow them to bypass our network. The adverse effects of any network interruptions on our reputation and financial condition may be heightened due to the nature of our business and our customers’ expectation of continuous and uninterrupted Internet access and low tolerance for interruptions of any duration. While we do not consider them to have been material, we have experienced, and may in the future experience, network disruptions and other performance problems due to a variety of factors.

The following factors, many of which are beyond our control, can affect the delivery, performance, and availability of our platform and products:

• the development, maintenance, and functioning of the infrastructure of the Internet as a whole;

• the performance and availability of third-party telecommunications services with the necessary speed, data capacity, and security for providing reliable Internet access and services;

• decisions by the owners and operators of the co-location and ISP-partner facilities where our network infrastructure is deployed or by global telecommunications service provider partners who provide us with network bandwidth to terminate our contracts, discontinue services to us, shut down operations or facilities, increase prices, change service levels, limit bandwidth, declare bankruptcy, or prioritize the traffic of other parties;

• the occurrence of earthquakes, floods, fires, power loss, system failures, physical or electronic break-ins, acts of war or terrorism, human error or interference (including by disgruntled employees, former employees, or contractors), and other catastrophic events;

• cyberattacks targeted at us, facilities where our network infrastructure is located, our global telecommunications service provider partners, or the infrastructure of the Internet;

• errors, defects, or performance problems in the software we use to operate our platform and provide our related products to our customers;

• our customers’ or channel partners’ improper deployment or configuration of our customer’s access to our platform and products;

• the maintenance of the APIs in our systems that our partners use to interact with us;

• the failure of our redundancy systems, in the event of a service disruption at one of the facilities hosting our network infrastructure, to redistribute load to other components of our network; and

• the failure of our disaster recovery and business continuity arrangements.

25

The occurrence of any of these factors, or our inability to efficiently and cost-effectively fix such errors or other problems that may be identified, could damage our reputation, negatively impact our relationship with our customers, or otherwise materially harm our business, results of operations, and financial condition.

Detrimental changes in, or the termination of, any of our co-location relationships, ISP partnerships, or our other interconnection relationships with ISPs could adversely impact our business, results of operations, and financial condition.

Our relationships with ISP partners and other vendors that provide co-location services for our network infrastructure and the pricing and other material contract terms we have with these vendors are important for the maintenance, development, and expansion of our global network. If any of our co-location agreements were to expire or the pricing and other material terms of these agreements were to worsen, our business, results of operations, and financial condition would be adversely affected unless we were able to find a substitute vendor for the impacted facility on comparable or better terms. Moreover, a significant number of our important co-location agreements are with a single company and if our arrangements with this company were to change in a manner adverse to us, we could face difficulty in maintaining or growing our network on commercially viable terms. In addition, as part of our arrangements with some of our ISP partners, the ISP partner has agreed to host our equipment for free or at a discount to the partner’s customary rate. There can be no assurances that these ISP partners will continue to provide these types of favorable equipment hosting arrangements in the future.

The efficient and effective operation of our network also relies upon a series of mutually beneficial arrangements with other Internet infrastructure companies. These arrangements are often referred to as “peering” or “interconnection” agreements, and allow us and our ISP partners to reduce bandwidth costs related to operating our respective networks. If the underlying competitive, business, or operational incentives supporting these arrangements were to change, we or our partners might terminate these agreements or allow them to expire. Many of our peering or interconnection agreements have a term of three years or less, after which such agreements auto-renew on an annual basis. Changes to the underlying incentive structure of peering arrangements may result from parties seeking to take advantage of an essential position or enter into exclusive arrangements, changes to U.S. or international laws, regulations, policies, or changes in the norms governing the relationships among Internet infrastructure providers. Without favorable peering arrangements, we would incur significantly increased costs to continue to provide our products at their current levels and such increased costs could adversely impact our business, results of operations, and financial condition. To the extent that other countries begin to regulate peering with outside networks, our costs may increase and our business and results of operations could be adversely impacted.

Abuse or misuse of our internal network services tools could cause significant harm to our business and reputation.

In order to provide real-time support to our customers, we have created internal network services tools that are used by our employees to diagnose and correct customer security, performance, and reliability issues. If our employees were to intentionally abuse these tools by interfering with or altering our customers’ Internet properties, our customers could be significantly harmed. Our employees’ inadvertent misuse of these tools could similarly harm our customers. For example, third parties have in the past attempted to induce our employees to use their administrative access to reveal, remove, or disable our customers’ information and content, including by submitting fraudulent law enforcement requests, copyright takedown requests, or other content-based complaints. Any such improper disclosure or removal could significantly and adversely impact our business and reputation. While our tools have been developed only for authorized use by our employees, any unauthorized release of

26

these tools to third parties would represent a significant vulnerability in our products. Accordingly, any abuse or misuse of our network services tools could significantly harm our business and reputation. If it became necessary to further restrict the availability or use of our network services tools by our employees in response to any abuse or misuse, our ability to deliver high-quality and timely customer support could be harmed.

Our network presence within China is dependent upon our commercial relationship with Baidu, and any detrimental changes in, or the termination of, that relationship could jeopardize our ability to offer an integrated global network that includes China.

We believe our offering of an integrated global network that includes facilities in China is important to our existing and potential future customers. Our ability to continue to offer an integrated network presence that includes China currently is dependent on our commercial relationship with an affiliate of Baidu. Regulation of Internet infrastructure and traffic by the Chinese government creates challenges to the peering of Chinese and non-Chinese networks. We have a strategic agreement with Baidu to provide a solution that accommodates the requirements imposed by Chinese regulations through Baidu’s development and operation of facilities in China that are included as part of our network. We have needed to periodically negotiate extensions to our existing agreement with Baidu and there can be no assurance that future extensions will be available on comparable terms. The term of our current agreement with Baidu expires at the end of 2020, but is subject to earlier termination by either party under certain circumstances such as the other party’s material breach. In addition, the agreement with Baidu can be terminated by Baidu under certain circumstances if necessary Chinese governmental approvals are revoked or become limited or impaired or if public law or regulatory action by the Chinese or U.S. government expressly prohibits or materially restricts the collaboration contemplated by the agreement. The risk of such an early termination event may have increased during the current environment of economic trade negotiations and tensions between the Chinese and U.S. governments. Although we have been successful in negotiating extensions of this agreement in the past, we cannot provide any assurance that we will continue to be able to do so in the future if we determine that we would like to continue to extend the agreement. If our commercial relationship with Baidu were terminated, identifying an alternative solution in China could be difficult, time-consuming, and expensive. Even if an alternative solution is identified, we cannot be certain that the economic terms or performance of any such alternative arrangement will be comparable to our existing relationship with Baidu, which could materially negatively impact our financial results and customer satisfaction with such alternative arrangement. A lack of network presence in China would represent a significant loss of utility to many of our customers and could materially harm our business.

Our customers that use our network presence in China through our Baidu commercial relationship are subject to Chinese laws and regulations of Internet infrastructure, traffic, and content. Under our agreement with Baidu, in some circumstances, these customers’ use of our Chinese network presence can be terminated if they violate these laws and regulations. The removal of our customers from our Chinese network presence could result in these customers deciding to terminate their overall relationship with us. In addition, any adverse publicity associated with the removal of some or all of our customers from our Chinese network presence as a result of the application of Chinese laws and regulations could cause us to experience adverse reputational and business consequences.

Our international operations expose us to significant risks, and failure to manage those risks could materially and adversely impact our business.

Historically, we have derived a significant portion of our revenue from outside the United States. We derived 52% of our revenue from our international customers for each of the years ended December 31, 2017 and 2018 and 53% and 50% for the six months ended June 30, 2018 and 2019,

27

respectively. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes expansion into geographies around the world, but there is no guarantee that such efforts will be successful. In addition, our global network includes co-location facilities located in 194 cities and over 90 countries around the world. We expect that our international sales and network activities will continue to grow in the future, as we continue to pursue opportunities in international markets and further grow our network around the world. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:

• political, economic, and social uncertainty, including the potential nationalization of key peering partners by foreign governments, or terrorist activities;

• changes in a specific country’s or region’s political or economic conditions, including in the United Kingdom as a result of its pending withdrawal from the EU (i.e., Brexit);

• unexpected costs for the localization of our products, including translation into foreign languages and adaptation for local practices and regulatory requirements;

• greater difficulty in enforcing contracts and accounts receivable collection, and longer collection periods;

• reduced or uncertain protection for intellectual property rights in some countries;

• greater risk of unexpected changes in regulatory practices, tariffs, and tax laws and treaties, including with respect to our business in China;

• greater risk of a failure of foreign employees and channel partners to comply with both U.S. and foreign laws, including antitrust regulations, anti-bribery laws, export and import control laws, and any applicable trade regulations ensuring fair trade practices;

• heightened security risks associated with our co-location facilities in high-risk countries and the software code and systems access shared with our service providers located in such countries;

• greater risks associated with third-party contractors that we use to install and maintain our hardware in co-location facilities in foreign countries and the limited background checks and screening that we can perform on such service providers;

• regulations related to privacy, data protection, security requirements, data localization, or content restriction that could pose risks to our intellectual property, increase the cost of doing business in a country, or create other disadvantages to our business;

• potential changes in laws, regulations, and costs affecting our U.K. operations and local employees due to Brexit;

• increased expenses incurred in establishing and maintaining office space and equipment for our international operations;

• greater difficulty in identifying, attracting, and retaining local qualified personnel and the costs and expenses associated with such activities;

• differing employment practices and labor relations issues;

• increased regulatory requirements and litigation risk related to the presence of our physical infrastructure in countries around the world;

• difficulties in managing and staffing international offices and increased travel, infrastructure, and legal compliance costs associated with operating multiple international locations; and

• fluctuations in exchange rates between the U.S. dollar and foreign currencies in markets where we do business, particularly the United Kingdom and Singapore where we have large offices and pay employees in local currency.

28

The expansion of our existing international operations and entry into additional international markets will require significant management attention and financial resources. Our failure to successfully manage our international operations and the associated risks could limit the future growth of our business. In particular, we are exposed to risks in China, which amounts to a significant part of both our short-term and long-term revenue growth plans. Our Chinese operations are substantially dependent on our relationship with Baidu, and due to economic and political challenges in servicing the Chinese market, the loss of this arrangement could have a significant adverse effect on our business and results of operations.

Geo-political events such as Brexit may increase the likelihood of certain of these risks materializing or heighten their impact on us in affected regions. In particular, it is possible that the level of economic activity in the United Kingdom and the rest of Europe will be adversely impacted and that we will face increased regulatory and legal complexities, including those related to tax, trade, data privacy, security, and employee relations, as a result of Brexit. Given the significance of our presence in the United Kingdom, such changes could be particularly costly and disruptive to our operations and business relationships. In addition, heightened use of trade restrictions such as tariffs or prohibitions on technology transfers to achieve diplomatic ends, including with respect to the current environment of economic trade negotiations and tensions between the Chinese and U.S. governments, could impact our ability to conduct our business as planned.

Our business could be adversely impacted by the decision of foreign governments, Internet service providers, or others, to block transmission from Cloudflare IP addresses in order to enforce certain Internet content blocking efforts.

Some of our security products involve making origin IP addresses and other operational assets of our customers more difficult for cyberattackers to target. The evolving design of our platform and products may create challenges for various organizations, including governments, that seek to block certain content based on IP address “black lists” or other mechanisms. This problem is exacerbated by the fact that a single Cloudflare IP address may be used for a number of Internet properties, and the Cloudflare IP used for any one Internet property may change over time. This means that efforts by ISPs to block a single domain name may end up blocking a number of other domains that share that Cloudflare IP address or domains that use that same Cloudflare IP address previously or subsequently. If these challenges become too difficult for those organizations to overcome, they could make the decision to block content in an overbroad manner or block completely websites and other Internet properties that are using our network and/or transmitted using known Cloudflare IP addresses. Some of these blocking efforts would be out of our control once they have been put in place and may limit our ability to provide our products on a fully global basis, which could reduce demand for our products among current or potential customers that are focused on the impacted regions or could otherwise adversely impact our business, results of operations, and financial condition.

We are subject to governmental trade sanctions laws, and export and import controls, that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.

Our business activities are subject to various economic and trade sanctions regulations administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) and U.S. export control and similar foreign laws and regulations, including the U.S. Department of Commerce’s Export Administration Regulations (EAR). We incorporate encryption technology into certain of our products, and the encryption products and the underlying technology may be exported outside the United States only with the required export authorizations, including by license, a license exception or other appropriate government authorizations, including the filing of classification requests or self-classification reports. Further, the U.S. economic sanctions laws and export control laws include

29

restrictions or prohibitions on the sale or supply of most products and services to U.S. embargoed or sanctioned countries, governments, persons, and entities. Even though we take precautions and have implemented policies and practices to assist in compliance, there is a risk that we may not be in full compliance with these laws.

In 2019, we learned that we may have failed to comply with certain U.S. export-related filing and reporting requirements and may have submitted incorrect information to the U.S. government in connection with certain hardware exports. Upon learning of these potential violations and associated export control requirements, we promptly initiated a voluntary internal review and are taking remedial measures to prevent similar export control anomalies from occurring in the future. In May 2019, we submitted a voluntary self-disclosure to the Bureau of Industry and Security regarding potential violations of EAR and a voluntary self-disclosure to the Census Bureau regarding potential violations of the Foreign Trade Regulations. These voluntary self-disclosures are under review by the respective agencies.

In May 2019, we submitted a voluntary self-disclosure to OFAC related to our non-compliance with certain economic and trade sanctions programs. Specifically, we identified that our products were used by, or for the benefit of, certain individuals and entities included in OFAC’s Specially Designated Nationals and Blocked Persons List (the SDN List), including entities identified in OFAC’s counter-terrorism and counter-narcotics trafficking sanctions programs, or affiliated with governments currently subject to comprehensive U.S. sanctions. A small number of these parties made payments to us in connection with their use of our platform. Although we have implemented, and are working to implement additional controls and screening tools designed to prevent similar activity from occurring in the future, there is no guarantee that we will not inadvertently provide our products to additional individuals, entities, or governments prohibited by U.S. sanctions in the future. The voluntary self-disclosure is under review by OFAC.

Additionally, we currently provide products to certain OFAC-sanctioned regions based upon general licenses issued by OFAC to engage in such activity. We continue to review the OFAC sanctions and our practices to verify compliance.

These efforts related to export controls and OFAC sanctions could result in negative consequences for us, including costs related to government investigations, financial penalties and harm to our reputation. The impact on us related to these matters could be substantial.

In addition, various countries regulate the import of certain technologies and have enacted or could enact laws that could limit our ability to provide our products and operate our network or could limit our customers’ ability to access or use our platform and products in those countries.

If we are found to have violated the U.S. or foreign laws and regulations, we and certain of our employees could be subject to civil or criminal penalties, including the possible loss of export privileges and fines. We may be materially and adversely affected through penalties, reputational harm, loss of access to certain markets, or otherwise. Obtaining the necessary authorizations, including any required license, for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. In addition, changes in our platform, products, or screening process, or changes in export, sanctions, and import laws, could delay the introduction and sale of subscriptions to our products in international markets, prevent customers in certain countries from accessing our platform and products or, in some cases, prevent the provision of our platform and products to certain countries, governments, persons, or entities altogether. Any decrease in our ability to sell our products could materially and adversely affect our business, results of operations, and financial condition.

30

We face intense and increasing competition, which could adversely affect our business, financial condition, and results of operations.

The markets for our platform and products are intensely competitive and characterized by rapid changes in technology, customer requirements, industry standards, and frequent introductions of new, and improvements of, existing products. Our broad portfolio of products exposes us to competition from a large number of competitors in a number of different markets, including companies and their product and services offerings in, among others, virtual private networks, internal and external firewalls, web security (including web application firewalls and content filtering), distributed denial of service prevention, intrusion detection and prevention, application delivery controls, content delivery networks, domain name systems, advanced threat prevention, and wide area network (WAN) technology.

Our competitors provide both on-premises, appliance-based solutions, and cloud-based services that have functionality similar to our platform and products. We expect competition to increase as other established and emerging companies and start-ups enter the markets for products and solutions for security, performance, and reliability, in particular with respect to cloud-based solutions, as customer requirements evolve and as new products, services, and technologies are introduced. If we are unable to anticipate or effectively react to these competitive challenges, our competitive position could weaken, and we could experience a decline in revenue or our growth rate that could materially and adversely affect our business and results of operations.

Our potential competitors include large companies with substantial infrastructure, such as global telecommunications services provider partners and public cloud providers. These companies could choose to enter the markets for products and solutions for security, performance, and reliability, including by acquiring existing companies, developing their own internal solutions, or establishing cooperative relationships with businesses that may allow them to offer more comprehensive solutions or to adapt more quickly than us to new technologies and customer needs. Additionally, if an increasing portion of web content is housed on another company’s platform or portions of the Internet are otherwise privatized, it could reduce the demand for our products and increase competitive pressure on us. These competitive pressures in our markets or our failure to compete effectively may result in price reductions, fewer subscriptions, reduced revenue and gross margin, increased net losses, and loss of market share.

Our current and potential future competitors include a number of different types of companies, including:

• on-premise hardware network vendors, such as Cisco Systems Inc., F5 Networks, Inc., Check Point Software Technologies Ltd., FireEye, Inc., Imperva, Inc., Palo Alto Networks, Inc., Juniper Networks, Inc., and Riverbed Technology, Inc.;

• point-cloud solution vendors, including cloud security vendors such as Zscaler, Inc. and Cisco Systems Inc. through Umbrella (formerly known as OpenDNS), content delivery network vendors such as Akamai Technologies, Inc., Limelight Networks, Inc., Fastly, Inc., and Verizon Communications Inc. through Edgecast, domain name system vendors services such as Oracle Corporation through DYN, NeuStar, Inc., and UltraDNS Corporation, and cloud SD-WAN vendors; and

• traditional public cloud vendors, such as Amazon.com, Inc. through Amazon Web Services, Alphabet Inc. through Google Cloud Platform, Microsoft Corporation through Azure, and Alibaba Group Holding Limited through Alibaba Cloud.

Many of our existing and potential competitors have or could have substantial competitive advantages including, among others:

• greater name recognition;

31

• longer operating histories and larger customer bases;

• larger sales and marketing budgets and capital resources;

• broader distribution and established relationships with partners and customers;

• greater customer support resources;

• greater resources to make acquisitions and enter into strategic partnerships;

• lower labor and research and development costs;

• larger and more mature intellectual property rights portfolios;

• control of significant technologies, standards, or networks, including operating systems, with which our products must interoperate;

• higher or more difficult to obtain security certifications than we possess; and

• substantially greater financial, technical, and other resources.

In particular, some of our larger competitors have substantially broader and more diverse product and services offerings, which may allow them to leverage existing commercial relationships, incorporate functionality into existing products, sell products and services with which we compete at zero or negative margins, offer fee waivers and reductions or other economic and non-economic concessions, bundle products, maintain closed technology platforms, or render our products unable to interoperate with such platforms. If they were to engage in predatory practices, it could harm our existing product offerings or prevent us from creating viable products in other segments of the markets in which we participate. If our competitors are able to exploit their advantages or are able to persuade our customers or potential customers that their products are superior to ours, we may not be able to compete effectively and our business, financial condition, and results of operations may be materially affected.

Our policies regarding user privacy could cause us to experience adverse business and reputational consequences with customers, employees, suppliers, government entities, and other third parties.

As a company, we strive to protect our customers’ privacy consistent with applicable law. Consequently, we generally do not provide personal information about our customers without legal process. From time to time, government entities may also seek our assistance with obtaining information about our customers or could request that we modify our platform and products in a manner to permit access or monitoring. In light of our privacy commitments, we may legally challenge law enforcement requests to provide a feed of content transiting our network, to obtain encryption keys, or to modify or weaken encryption. We may face complaints from individuals who assert we have provided their information improperly to law enforcement or in response to third-party abuse complaints, despite policies we have in place to protect that information. To the extent that we do not provide assistance to or comply with requests from government entities or challenge those requests publicly or in court, we may experience adverse political, business, and reputational consequences. We may also face such adverse political, business, and reputational consequences to the extent that we provide, or are perceived as providing, assistance to government entities that exceeds our legal obligations. For example, we periodically receive requests for information purportedly originating from law enforcement agencies or pursuant to legal process, but which are fraudulent or improper attempts to cause us to reveal customer information. Any such disclosure could significantly and adversely impact our business and reputation.

We publish a transparency report on a semi-annual basis to provide details of law enforcement and government requests we receive. Our transparency report also includes a list of certain actions we

32

have not taken in response to law enforcement requests. If we are ever required by law enforcement to take one or more of the actions covered by those disclosures, then we would have to remove the applicable disclosures from our transparency report. Both the publishing of our transparency report and, conversely, the potential narrowing of the list of actions we have not taken in response to law enforcement requests could damage our business and reputation.

If we do not effectively expand, train, and retain our sales force, we may be unable to add new Enterprise plan customers, or increase sales to our existing customers and our business would be adversely affected.

A majority of our revenue in the year ended December 31, 2018 and the six months ended June 30, 2019 was from Enterprise plan customers that were acquired through our inside and field sales teams. We expect this trend will continue for the foreseeable future. As a result, our financial condition and results of operations are dependent to a significant degree on the ability of our dedicated sales personnel to acquire new enterprise customers and expand our relationships with our existing enterprise customers. Our sales representatives typically engage in direct interaction with our prospective enterprise customers. Increasing our customer base and achieving broader market acceptance of our platform and products will depend, to a significant extent, on our ability to expand and further invest in our sales and marketing operations and activities. There is significant competition for sales personnel with the advanced sales skills and technical knowledge we need. We believe that selling subscriptions to our products requires particularly talented sales personnel that understand both cloud-based and appliance-based solutions, as well as the key differences between them. Our ability to achieve significant growth in revenue in the future will depend, in large part, on our success in recruiting, training, and retaining sufficient numbers of these talented sales personnel in both the United States and international markets. New sales hires require significant training and may take significant time before they achieve full productivity. As a result, our new sales hires and planned sales hires may not become as productive as we would like or as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals. As a result of our rapid growth, a large percentage of our sales and marketing team is new to our company and inexperienced in selling subscriptions to our products, and therefore these personnel may be less effective than our more seasoned employees. Experienced sales personnel are particularly sought after in our industry and we may have to expend significant resources to retain our most productive sales employees. Even with considerable effort, we may be unsuccessful at retaining our experienced sales employees, which would adversely impact our business, results of operations, and financial condition.

Furthermore, hiring sales personnel in new countries, or expanding our existing presence in the countries in which we currently operate, requires upfront and ongoing expenditures that we may not recover if the sales personnel fail to achieve full productivity or that may be recovered on a more delayed basis than expected. We cannot predict whether, or when or to what extent, our sales will increase as we expand our sales force or how long it will take for sales personnel to become productive. If we are unable to hire, train, and retain a sufficient number of effective sales personnel, or the sales personnel we hire are not successful in obtaining new customers or increasing sales to our existing customer base, our business and future growth prospects will be materially and adversely affected.

If we fail to effectively manage our growth, we may be unable to execute our business plan, maintain high-quality levels of support, ensure the security of our network, adequately address competitive challenges, or maintain our corporate culture, and our business, financial condition, and results of operations would be harmed.

We have recently experienced, and continue to experience, a period of rapid growth. For example, our headcount grew from 540 employees as of December 31, 2017, to 865 employees as of December 31,

33

2018, to 1,069 employees as of June 30, 2019. We also have offices around the world, and we opened offices in Beijing and Munich during 2018, an office in Sydney in January 2019, and an office in Lisbon in August 2019. In addition, we expanded our network into 17 and 46 new cities in 2017 and 2018, respectively, and into six new cities during the three months ended June 30, 2019. The number of customers, users, and requests on our network also has increased rapidly in recent years. While we expect to continue to expand our operations and to increase our headcount, network, and products significantly in the future, both domestically and internationally, our growth may not be sustainable. Our growth has placed, and future growth will continue to place, a significant strain on our management and our administrative, operational, and financial infrastructure. Our success will depend in part on our ability to manage this growth effectively, which will require that we continue to improve our administrative, operational, financial, and management systems and controls by, among other things:

• effectively attracting, training, and integrating a large number of new employees, particularly members of our sales, engineering, and management teams;

• ensuring the integrity and security of our network and IT infrastructure throughout the world;

• maintaining our corporate culture, which we believe fosters innovation, teamwork, and an emphasis on customer-focused results and contributes to our cost-effective business model;

• further improving our key business applications, processes, and IT infrastructure, including our core co-location facilities, to support our business needs;

• enhancing our information and communication systems to ensure that our employees and offices around the world are well coordinated and can effectively communicate with each other and our growing base of channel partners, customers, and users;

• maintaining high levels of customer support; and

• appropriately documenting and testing our IT systems and business processes.

Managing our growth will require significant capital expenditures and allocation of valuable management and employee resources. If we fail to manage our expected growth, the uninterrupted and secure operation of our network and products and key business systems, our corporate culture, our compliance with the rules and regulations applicable to our operations, the quality of our products, and our ability to compete could suffer. Any failure to preserve our culture also could further harm our ability to retain and recruit personnel, innovate and create new products, operate effectively, and execute on our business strategy.

Our quarterly results may fluctuate significantly and may not fully reflect the underlying performance of our business.

Our quarterly results of operations, including our revenue, gross margin, operating margin, profitability, cash flow from operations, and deferred revenue, may vary significantly in the future and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Our quarterly results of operations may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. Fluctuation in quarterly results may negatively impact the trading price of our Class A common stock. Factors that may cause fluctuations in our quarterly results of operations include, without limitation:

• our ability to attract new paying customers and, to a lesser extent, convert free customers to paying customers;

• our ability to retain and upgrade paying customers;

• the timing of expenses and recognition of revenue;

34

• the amount and timing of operating expenses related to the maintenance and expansion of our business, operations, and infrastructure, as well as entry into operating and capital leases and co-location and similar agreements related to the expansion of our network;

• the timing of expenses related to acquisitions;

• any large indemnification payments to our customers or other third parties;

• changes in our pricing policies or those of our competitors;

• the timing and success of new product feature and service introductions by us or our competitors;

• network outages or actual or perceived security breaches;

• our involvement in litigation or regulatory enforcement efforts, or the threat thereof;

• changes in the competitive dynamics of our industry, including consolidation among competitors;

• the length of the sales cycle for our enterprise customers;

• changes in laws and regulations that impact our business; and

• general economic and market conditions.

We rely on our key technical, sales, and management personnel to grow our business, and the loss of one or more key employees or the inability to attract and retain qualified personnel could harm our business.

Our future success is substantially dependent on our ability to attract, retain, and motivate the members of our management team and other key employees throughout our organization, particularly Matthew Prince, our Chief Executive Officer, and Michelle Zatlyn, our Chief Operating Officer. We rely on our leadership team in the areas of operations, security, marketing, sales, support, research and development, and general and administrative functions, and on individual contributors on our research and development team. Although we have entered into employment offer letters with our key personnel, these agreements have no specific duration and constitute at-will employment. We do not maintain key person life insurance policies on any of our employees. The loss of one or more of our executive officers or key employees could seriously harm our business.

To execute our growth plan, we must attract and retain highly qualified personnel. In particular, it is critical for us to attract and retain engineering talent in our fast growing industry. Competition for these personnel in the San Francisco Bay Area, where our headquarters is located, and in London, Singapore, Austin, Texas, and other locations where we maintain offices, is intense, especially for experienced sales professionals and for engineers experienced in designing and developing cloud applications. We have from time to time experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. For example, in recent years, recruiting, hiring, and retaining employees with expertise in the cybersecurity industry has become increasingly difficult as the demand for cybersecurity professionals has increased as a result of high-profile cybersecurity attacks on global corporations and governments. Many of the companies with which we compete for experienced personnel have greater resources than we have and may provide higher levels of compensation. In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. Volatility or lack of performance in our stock price may also affect our ability to attract and retain our key employees. Upon vesting of equity awards, many of our employees have acquired or may soon acquire a substantial amount of personal wealth. This may make it more difficult for us to retain and motivate these employees, and this wealth could affect their decision about whether or not they continue to work for

35

us. Any failure to successfully attract, integrate, or retain qualified personnel to fulfill our current or future needs could materially and adversely affect our business, results of operations, and financial condition.

We believe our long-term value as a company will be greater if we focus on growth, which may negatively impact our profitability.

A significant part of our business strategy is to focus on long-term growth. For example, in the year ended December 31, 2018 we increased our operating expenses to $234.0 million as compared to $115.9 million in the year ended December 31, 2017, and to $136.9 million in the six months ended June 30, 2019 as compared to $99.1 million in the six months ended June 30, 2018. In the year ended December 31, 2018, our net loss increased to $87.2 million from $10.7 million in the year ended December 31, 2017, and to $36.8 million in the six months ended June 30, 2019 as compared to $32.5 million in the six months ended June 30, 2018. As a result, we may continue to operate at a loss or our profitability may be lower than it would be if our strategy were to maximize short-term profitability. Significant expenditures on sales and marketing efforts, and expenditures on growing our platform and expanding our research and development and portfolio of products, each of which we intend to continue to invest in, may not ultimately grow our business or cause long-term profitability. If we are ultimately unable to achieve or improve profitability at the level or during the time frame anticipated by industry or financial analysts and our stockholders, our stock price may decline.

If we are not able to maintain our brand, our business and results of operations may be adversely affected.

We believe that maintaining our reputation as a provider of products with the highest levels of security, performance, and reliability is critical to our relationship with our existing customers and our ability to attract new customers. The successful promotion of our brand will depend on a number of factors, including our record of security, performance, and reliability; our marketing efforts; our ability to continue to develop high-quality features and products for our network; and our ability to successfully differentiate our products from competitive products and services. Our brand promotion activities may not be successful or yield increased revenue.

Independent industry and financial analysts often provide reviews of our products, as well as those of our competitors. Perception of our offerings in the marketplace may be significantly influenced by these expert reviews. If reviews of our products are negative, or less positive than those of our competitors’, our brand may be adversely affected. The performance of our channel partners may also affect our brand and reputation, particularly if customers do not have a positive experience with our channel partners. The promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our markets become more competitive and we expand into new markets. Expenditures intended to maintain and enhance our brand may not be cost-effective or effective at all. If we do not successfully maintain and enhance our brand, we may have reduced pricing power relative to our competitors, we could lose customers, or we could fail to attract potential new customers or expand sales to our existing customers, all of which could materially and adversely affect our business, results of operations, and financial condition.

We provide service level commitments under our Enterprise plan customer contracts and our Business plan terms of service. If we fail to meet these contractual commitments, we could be obligated to provide credits for future service or allow customers to terminate their subscriptions and our business could suffer.

Our Enterprise plan agreements and our Business plan terms of service typically provide for service level commitments, which contain specifications regarding the availability and performance of our

36

network. In particular, our Enterprise plan subscriptions and our Business plan terms of service include up to a 100% uptime guarantee. Any failure of or disruption to our infrastructure could adversely impact the security, performance, and reliability of our platform and products for our customers. If we are unable to meet our stated service level commitments or if we suffer extended periods of poor performance or unavailability of our platform and products, these customers could seek to bring claims against us or terminate their agreements with us and, in the case of our enterprise customers, we may be contractually obligated to provide affected customers with service credits that they may apply against future subscription fees otherwise owed to us, and, in certain cases, refunds of pre-paid and other fees. For example, the June 2019 route leak and the July 2019 outage on our network triggered certain of these types of obligations. While we continue to monitor the impact of the June 2019 route leak and July 2019 outage and do not expect they will have a material impact on our results of operations or financial condition, our estimates could be wrong and these and other future events like these may materially and adversely impact our results of operations or financial condition. Our revenue, other results of operations, and financial condition could be harmed if we suffer performance issues or downtime that exceeds the service level commitments under our agreements and terms of service with our paying customers.

If our products do not obtain and maintain market acceptance, our ability to grow our business and our results of operations may be adversely affected.

Our products are still evolving and it is difficult to predict customer demand and adoption rates for our product offerings. We believe that our platform and cloud-based products represent a major shift from traditional solutions. Many of our potential customers, particularly large enterprises and government entities, face barriers to adopting our offerings because of their prior investment in, and the familiarity of their IT personnel with, on-premises, appliance-based solutions. As a result, our sales process often involves extensive efforts to educate our customers about our products, particularly as we continue to pursue customer relationships with large organizations.

Our customers also expect us to meet voluntary certifications or adhere to standards established by third parties and may demand that they be provided a report from our auditors that we are in compliance. Although we currently have certain certifications such as SOC2 Type 1 and Type 2, SOC3, PCI DSS, and ISO27001, we may not be successful in continuing to maintain those certifications or in obtaining other certifications. In addition, sales to government entities and other large enterprises may in particular be conditioned upon adherence to the FedRAMP and eIDAS standards in the United States and the EU, respectively, and we do not currently have these certifications. The costs of obtaining and maintaining certification pursuant to any of these standards are significant, and any failure to obtain and maintain such certifications for our platform and products could reduce demand for them, which would harm our business, results of operations, and financial condition. To the extent our competitors have, and we do not have, these certifications, we may lose the opportunity to obtain subscriptions from certain potential paying customers.

Despite our efforts, we can provide no assurance that our cloud-based products will obtain market acceptance or that competing products or services based on other cloud-based and/or on-premises technologies will not achieve market acceptance. If we fail to achieve market acceptance of our products or are unable to keep pace with industry changes or obtain necessary product certifications, our ability to grow our business, results of operations, and financial condition will be materially and adversely affected.

We may not be able to respond to rapid technological changes or develop new products and features that are attractive to our current and prospective future customers.

The industry in which we compete is characterized by rapid technological change, including frequent introductions of new products and services, evolving industry standards, changing regulations, and the

37

development of novel cyber-attacks by hostile parties, as well as changing customer needs, requirements and preferences. Our need for continuous innovation is driven not only by competitive forces within our industry but also by our need to out-innovate the highly motivated third parties seeking to breach or compromise our network and those of our customers for economic, political, or military purposes.

Our ability to attract new customers and increase revenue from existing customers will depend in significant part on our ability to anticipate and respond effectively to these forces on a timely basis and continue to introduce enhancements to our platform and develop new products. If new technologies emerge that deliver competitive products and services at lower prices, more efficiently, more conveniently, more securely or reliably, or are higher performing, these technologies could render our platform and existing products less attractive to our current and prospective future customers, or obsolete. The development of novel attacks or exploits by criminal or malicious elements or hostile state actors also could render our platform and existing products less effective or obsolete. The success of our business depends on our continued investment in our research and development organization to increase the integrity, reliability, availability, and scalability of our products. We may experience difficulties with development, design, or marketing of such enhancements to our platform and products that could delay or prevent their development, introduction, or implementation. We have in the past experienced delays in the planned expansion of our network and in our internally planned or publicly announced release dates of new products and new features and capabilities, and there can be no assurance that planned expansions of our network will occur on schedule and that new products, features, or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by customers brought against us, all of which could have a material and adverse effect on our reputation, business, results of operations, and financial condition.

Adverse economic conditions, including reduced spending on products and solutions for network security, performance, and reliability, may adversely impact our revenue and profitability.

Our operations and financial performance depend in part on worldwide economic conditions and the impact these conditions have on levels of spending on products and solutions for network security, performance, and reliability. Our business depends on the overall demand for these products and on the economic health and general willingness of our current and prospective customers to purchase our products. Some of our paying customers may view a subscription to our products as a discretionary purchase and may reduce their discretionary spending on our products during an economic downturn. Weak economic conditions, including a reduction in spending on products and solutions for security, performance, and reliability, could reduce sales, lengthen sales cycles, increase churn, and lower demand for our products, any of which could adversely affect our business, results of operations, and financial condition.

Our relatively limited operating history makes it difficult to evaluate our current business and prospects, and may increase the risk that we will not be successful.

Our relatively limited operating history makes it difficult to evaluate our current business and prospects, and to plan for our anticipated future growth. We began operations in 2010 and much of our growth has occurred in recent years. As a result, our business model has not been fully proven, which subjects us to a number of uncertainties, including our ability to plan for and model future growth. While we have continued to expand our network and develop additional reliability products, we have encountered, and will continue to encounter, risks and uncertainties frequently experienced by rapidly growing companies in developing industries, including our ability to achieve broad market acceptance of our products, attract additional customers, identify and grow partnerships, withstand increasing

38

competition in our existing and future markets, and manage increasing expenses as we continue to grow our business. If our assumptions regarding these risks and uncertainties are incorrect or change in response to changes in the markets for products and solutions for network security, performance, and reliability, our business could suffer and our results of operations and financial condition could differ materially from our expectations.

We have limited experience with our pricing models, and may not accurately predict the long-term rate of paying customer adoption or renewal, or the impact these will have on our revenue or results of operations.

We generate revenue primarily from subscriptions to our platform and products. We offer subscription plans that provide varying degrees of functionality, and also offer separate subscriptions to various add-on products and platform functionality. We have limited experience with respect to determining the optimal prices and pricing models for our subscription plans and add-on products. As the markets for our products mature, as we enter into newer product markets for our business, or as new competitors introduce new products or services that compete with ours, we may be unable to attract new customers or retain existing customers at the same price or based on the same pricing model as we have used historically. Moreover, our increasing focus on larger customers may lead to greater price concessions in the future or have a more significant impact period to period on our revenue and results of operations. As a result, in the future we may be required to reduce our prices, which could adversely affect our revenue, gross margin, profitability, financial condition, and cash flow.

We also have limited experience in determining which products and functionality to offer as part of our subscription plans and which to offer as add-on products. Our limited experience in determining the optimal manner in which to bundle our various products and functionalities could reduce our ability to capture the value delivered by our offerings, which could adversely impact our business, results of operations, and financial condition.

As we expand our sales to enterprise customers, our sales cycle could lengthen and become unpredictable.

Historically, the implementation period to start using our products has been short, with most customers under our self-serve plans implementing usage of our products within a matter of minutes and our sales cycle for customers under our Enterprise plan typically lasting less than one quarter. As our business evolves, we are investing more resources into sales efforts directed to larger enterprises. These larger enterprises may undertake a significant evaluation and negotiation process, which could lengthen our sales cycle materially. The timing of sales to enterprise customers can be more difficult to predict because of the length and unpredictability of the sales cycle for these customers. Our sales efforts typically involve educating our prospective enterprise customers about the uses, benefits, and value proposition of our platform and products. Potential enterprise customers often view the subscription to our products as a significant strategic decision and, as a result, in some cases require considerable time to evaluate, test, and qualify our platform and products prior to entering into or expanding a relationship with us.

Our sales force develops relationships directly with our customers and our channel partners on account penetration, account coordination, sales, and overall market development. We spend substantial time and resources on our sales efforts without any assurance that our efforts will produce a sale. Subscriptions to our products often are subject to budget constraints, multiple approvals, and unanticipated administrative, processing, and other delays. As a result, it is difficult to predict whether or when a sale to a prospective enterprise customer will be completed and when revenue from a subscription will be recognized.

39

Sales to larger enterprise customers involve risks that may not be present, or that are present to a lesser extent, with sales to smaller customers, including:

• competition from companies that traditionally target larger enterprises and that may have pre-existing relationships or purchase commitments from such customers;

• longer evaluation periods, more detailed evaluations, and more cumbersome contract negotiation and approval processes;

• increased purchasing power and leverage in negotiating contractual arrangements with us;

• requirements for more technically complex configurations, integrations, deployments, or features;

• more stringent requirements in our support obligations; and

• longer sales cycles and the associated risk that substantial time and resources may be spent on a potential customer that elects not to purchase our products.

These additional risks also can potentially act as a disincentive to our sales team’s pursuit of these larger customers. As a result, sales to large organizations may lead to greater unpredictability in our business, results of operations, and financial condition. If our sales efforts are not successful or cost-effective, we could lose other sales opportunities or incur expenses that are not offset by an increase in revenue, either of which could harm our business.

Our growth depends, in part, on the success of our strategic relationships with third parties.

To grow our business, we anticipate that we will continue to depend on relationships with third parties, such as channel partners. Identifying partners, negotiating and documenting relationships with them, and maintaining APIs that some of our partners use to interact with our business, each require significant time and resources. Our competitors may be effective in providing incentives to third parties to favor their products or services over subscriptions to our products. In addition, acquisitions of such partners by our competitors could result in a decrease in the number of our current and potential customers, as these partners may no longer facilitate the adoption of our applications by potential customers. Further, some of our partners are or may become competitive with certain of our products and may elect to no longer integrate with our platform and products. If we are unsuccessful in establishing or maintaining our relationships with third parties, our ability to compete in the marketplace or to grow our revenue could be impaired, and our results of operations may suffer. Even if we are successful, we cannot assure you that these relationships will result in increased customer usage of our products or increased revenue.

Our ability to maintain customer satisfaction depends in part on the quality of our customer support. Failure to maintain high-quality customer support could have an adverse effect on our business, results of operation, and financial condition.

We believe that the successful use of our platform and products requires a high level of support and engagement for many of our customers, particularly our larger enterprise customers. In order to deliver appropriate customer support and engagement, we must successfully assist our customers in deploying and continuing to use our platform and products, resolving performance issues, addressing interoperability challenges with the customers’ existing IT infrastructure, and responding to security threats and cyberattacks and performance and reliability problems that may arise from time to time. The IT architecture of our enterprise customers, particularly the larger organizations, is very complex and may require high levels of focused support to effectively utilize our platform and products. Because our platform and products are designed to be highly configurable and to rapidly implement customers’ reconfigurations, customer errors in configuring our platform and products can result in significant

40

disruption to our customers. Our support organization faces additional challenges associated with our international operations, including those associated with delivering support, training, and documentation in languages other than English. Increased demand for customer support, without corresponding increases in revenue, could increase our costs and adversely affect our business, results of operations, and financial condition.

We also rely on channel partners in order to provide frontline support to our customers, including in regions where we do not have a significant physical presence or the customers primarily speak languages other than English. If our channel partners do not provide support to the satisfaction of our customers, we may be required to hire additional personnel and to invest in additional resources in order to provide an adequate level of support, generally at a higher cost than that associated with our channel partners. There can be no assurance that we will be able to hire sufficient support personnel as and when needed, particularly if our sales exceed our internal forecasts. To the extent that we are unsuccessful in hiring, training, and retaining adequate support resources, our ability to provide high-quality and timely support to our customers will be negatively impacted, and our customers’ satisfaction with our network could be adversely affected. Any failure to maintain high-quality customer support, or a market perception that we do not maintain high-quality customer support, could adversely affect our reputation, business, results of operations, and financial condition, particularly with respect to our large enterprise customers.

If our platform and products do not interoperate with our customers’ internal networks and infrastructure or with third-party products, websites, or services, our network may become less competitive and our results of operations may be harmed.

Our platform and products must interoperate with our customers’ existing internal networks and infrastructure. These complex internal systems are developed, delivered, and maintained by the customer and a myriad of vendors and service providers. As a result, the components of our customers’ infrastructure have different specifications, rapidly evolve, utilize multiple protocol standards, include multiple versions and generations of products, and may be highly customized. We must be able to interoperate and provide products to customers with highly complex and customized internal networks, which requires careful planning and execution between our customers, our customer support teams and, in some cases, our channel partners. Further, when new or updated elements of our customers’ infrastructure or new industry standards or protocols are introduced, we may have to update or enhance our network to allow us to continue to provide our products to customers. Our competitors or other vendors may refuse to work with us to allow their products to interoperate with our platform and products, which could make it difficult for our platform and products to function properly in customer internal networks and infrastructures that include these third-party products.

We may not deliver or maintain interoperability quickly or cost-effectively, or at all. These efforts require capital investment and engineering resources. If we fail to maintain compatibility of our platform and products with our customers’ internal networks and infrastructures, our customers may not be able to fully utilize our platform and products, and we may, among other consequences, lose or fail to increase our market share and experience reduced demand for our products, which would materially harm our business, results of operations, and financial condition.

Because we provide some of our products through a reverse-proxy, which is a network arrangement in which Internet user requests initially are directed to our network’s servers rather than those of our customers, the source of some traffic may be difficult to ascertain. When they cannot identify the source of the traffic, some governments, third-party products, websites, or services may block our traffic or blacklist our IP addresses. If our customers experience significant instances of traffic blockages, they will experience reduced functionality or other inefficiencies, which would reduce customer satisfaction with our platform and products and likelihood of renewal.

41

We rely on a limited number of suppliers for certain components of the equipment we use to operate our network and any disruption in the availability of these components could delay our ability to expand or increase the capacity of our global network or replace defective equipment.

We rely on a limited number of suppliers for several components of the equipment we use to operate our network and provide products to our customers. Our reliance on these suppliers exposes us to risks, including reduced control over production costs and constraints based on the then current availability, terms, and pricing of these components. For example, we generally rely on a single source to purchase the servers that we use in our network and we ordinarily purchase these components on a purchase-order basis, without any long-term contracts guaranteeing supply. While the network equipment and servers we purchase generally are commodity equipment and we believe an alternative supply source for servers on substantially similar terms could be identified quickly, our business could be adversely affected until those efforts were completed. In addition, the technology equipment industry has experienced component shortages and delivery delays in the past, and we may experience shortages or delays, including as a result of natural disasters, increased demand in the industry or our suppliers lacking sufficient rights to supply the components in all jurisdictions in which we have co-location facilities that support our global network. If our supply of certain components is disrupted or delayed, there can be no assurance that additional supplies or components can serve as adequate replacements for the existing components or that supplies will be available on terms that are favorable to us, if at all. Any disruption or delay in the supply of our hardware components may delay the opening of new co-location facilities, limit capacity expansion or replacement of defective or obsolete equipment at existing co-location facilities, or cause other constraints on our operations that could damage our customer relationships.

Our business could be adversely impacted by changes in Internet access for our customers or laws specifically governing the Internet.

Our network performance and reliability depends on the quality of our customers’ access to the Internet. Certain features of our network require significant bandwidth and fidelity to work effectively. Internet access is frequently provided by companies that have significant market power that could take actions that degrade, disrupt, or increase the cost of user access to our network, which would negatively impact our business. We could incur greater operating expenses and our customer acquisition and retention could be negatively impacted if other network operators:

• implement usage-based pricing;

• discount pricing for competitive products;

• otherwise materially change their pricing rates or schemes;

• charge us to deliver our traffic at certain levels or at all;

• throttle traffic based on its source or type;

• implement bandwidth caps or other usage restrictions; or

• otherwise try to monetize or control access to their networks.

In addition, there are various laws and regulations that could impede the growth of the Internet or online services, and new laws and regulations may be adopted in the future. These laws and regulations could involve interconnection and network management; taxation; tariffs; privacy; data protection; content; copyrights; distribution; electronic contracts and other communications; consumer protection; and requirements for the characteristics and quality of services, any of which could decrease the demand for, or the usage of, our products. Legislators and regulators may make legal and regulatory changes, or interpret and apply existing laws, in ways that require us to incur substantial costs, expose us to unanticipated civil or criminal liability, or cause us to change our business

42

practices. If these changes are implemented, it could have an adverse and negative impact on our business. In addition, we may be banned from providing our products in certain countries, which would prevent our ability to grow our business in such markets and would also have a detrimental impact on the performance and scope of our network. These changes or increased costs could materially harm our business, results of operations, and financial condition.

Failure to comply with laws and regulations applicable to our business could subject us to fines and penalties and could also cause us to lose customers or otherwise harm our business.

Our business is subject to regulation by various federal, state, local, and foreign governmental agencies, including agencies responsible for monitoring and enforcing compliance with various legal obligations, such as privacy and data protection laws and regulations, intellectual property laws, employment and labor laws, workplace safety, environmental laws, consumer protection laws, anti-bribery laws, governmental trade sanctions laws, import and export controls, anti-corruption and anti-bribery laws, federal securities laws, and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than in the United States. These laws and regulations impose added costs on our business. Noncompliance with applicable regulations or requirements could subject us to:

• investigations, enforcement actions, and sanctions;

• mandatory changes to our network and products;

• disgorgement of profits, fines, and damages;

• civil and criminal penalties or injunctions;

• claims for damages by our customers or channel partners;

• termination of contracts;

• loss of intellectual property rights; and

• temporary or permanent debarment from sales to government organizations.

If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations, and financial condition could be adversely affected. In addition, responding to any action will likely result in a significant diversion of our management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions could materially harm our business, results of operations, and financial condition.

Additionally, companies in the technology industry have recently experienced increased regulatory scrutiny. Any reviews by regulatory agencies or legislatures may result in substantial regulatory fines, changes to our business practices, and other penalties, which could negatively affect our business and results of operations. Changes in social, political, and regulatory conditions or in laws and policies governing a wide range of topics may cause us to change our business practices. Further, our expansion into a variety of new fields also could raise a number of new regulatory issues. These factors could negatively affect our business and results of operations in material ways.

Our actual or perceived failure to comply with privacy, data protection, and information security laws, regulations, and obligations could harm our business.

We receive, store, use, and otherwise process personal information and other information relating to individuals. There are numerous federal, state, local, and international laws and regulations regarding privacy, data protection, information security, and the storing, sharing, use, processing, transfer, disclosure, and protection of personal information and other content, the scope of which are changing,

43

subject to differing interpretations, and may be inconsistent among jurisdictions, or conflict with other rules. These data protection and privacy-related laws and regulations are evolving and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions. For example, the EU’s General Data Protection Regulation (the GDPR), which became fully effective on May 25, 2018, imposes more stringent data protection requirements than previously effective EU data protection law and provides for penalties for noncompliance of up to the greater of €20 million or four percent of worldwide annual revenues. Additionally, Brexit has created additional uncertainty with regard to the regulation of data protection in the United Kingdom. In particular, although the United Kingdom has enacted a Data Protection Act that is designed to be consistent with the GDPR, it is unclear how data transfers to and from the United Kingdom will be regulated.

We are also subject to the terms of our privacy policies and contractual obligations to third parties related to privacy, data protection, and information security. We strive to comply with applicable laws, regulations, policies, and other legal obligations relating to privacy, data protection, and information security to the extent possible. However, the regulatory framework for privacy and data protection worldwide is, and is likely to remain, uncertain for the foreseeable future, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices.

We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, and information security proposed and enacted in various jurisdictions. For example, in the United States, various laws and regulations apply to the collection, processing, disclosure and security of certain types of data, including the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act of 1996, the Gramm-Leach-Bliley Act, and state laws relating to privacy and data security, including, the California Consumer Privacy Act (the CCPA), that will, among other things, require covered companies to provide new disclosures to California consumers and afford such consumers new abilities to opt-out of certain sales of personal information when the CCPA goes into effect on January 1, 2020. The CCPA was amended on September 23, 2018, and it remains unclear whether any further modifications will be made to this legislation or how it will be interpreted. We cannot yet predict the impact of the CCPA on our business or operations, but it may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply.

Any failure or perceived failure by us to comply with our privacy policies, our privacy-related obligations to customers or other third parties, applicable laws or regulations, or any of our other legal obligations relating to privacy, data protection, or information security may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us by consumer advocacy groups or others and could result in significant liability or cause our customers to lose trust in us, which could cause them to cease or reduce use of our products and otherwise have an adverse effect on our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the adoption and use of, and reduce the overall demand for, our products.

Additionally, if third parties we work with, such as sub-processors, vendors, or developers, violate applicable laws or regulations, contractual obligations, or our policies—or if it is perceived that such violations have occurred—such actual or perceived violations may also have an adverse effect on our business. Further, any significant change to applicable laws, regulations, or industry practices regarding the collection, use, retention, security, disclosure, or other processing of users’ content, or regarding the manner in which the express or implied consent of users for the collection, use, retention, disclosure, or other processing of such content is obtained, could increase our costs and require us to modify our network, products, and features, possibly in a material manner, which we may be unable to complete, and may limit our ability to store and process customer data or develop new products and features.

44

We are subject to anti-corruption, anti-bribery, and similar laws, and noncompliance with such laws can subject us to criminal penalties or significant fines and harm our business and reputation.

We are subject to the U.S. Foreign Corrupt Practices Act of 1977, the UK Bribery Act 2010, and other anti-corruption, anti-bribery, anti-money laundering, and similar laws in the United States and other countries in which we conduct activities. Anti-corruption and anti-bribery laws, which have been enforced aggressively and are interpreted broadly, prohibit companies and their employees and agents from promising, authorizing, making, or offering improper payments or other benefits to government officials and others in the public sector. We leverage third parties, including channel partners, to sell subscriptions to our products, host many of our co-location facilities for our network, and conduct our business abroad. We and these third parties may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of our business partners and intermediaries, our employees, representatives, contractors, channel partners and agents, even if we do not explicitly authorize such activities. Further, some of our international sales activity occurs, and some of our network infrastructure is located, in parts of the world that are recognized as having a greater potential for business practices that violate anti-corruption, anti-bribery, or similar laws.

We cannot assure you that all of our employees and agents have complied with, or in the future will comply with, our policies and applicable law. As we continue to increase our international sales and business and expand our network globally, our risks under these laws may increase. The investigation of possible violations of these laws, including internal investigations and compliance reviews that we may conduct from time to time, could have a material adverse effect on our business. Noncompliance with these laws could subject us to investigations, severe criminal or civil sanctions, settlements, prosecution, loss of export privileges, suspension or debarment from U.S. government contracts and other contracts, other enforcement actions, the appointment of a monitor, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, whistleblower complaints, adverse media coverage and other consequences. Other internal and government investigations, regulatory proceedings, or litigation, including private litigation filed by our stockholders, may also follow as a consequence. Any investigations, actions, or sanctions could materially harm our reputation, business, results of operations, and financial condition. Further, the promulgation of new laws, rules or regulations or new interpretations of current laws, rules or regulations could impact the way the we do business in other countries, including requiring us to change certain aspects of our business to ensure compliance, which could reduce revenue, increase costs, or subject us to additional liabilities.

We may face fines, penalties, or other costs, either directly or vicariously, if any of our partners, resellers, contractors, vendors or other third parties to adhere to their compliance obligations under our policies and applicable law.

We use a number of third parties to perform services or act on our behalf in areas like sales, network infrastructure, administration, research, and marketing. It may be the case that one or more of those third parties fail to adhere to our policies or violate applicable federal, state, local, and international laws, including but not limited to, those related to corruption, bribery, economic sanctions, and export/import controls. Despite the significant challenges in asserting and maintaining control and compliance by these third parties, we may be held fully liable for third parties’ actions as fully as if they were a direct employee of ours. Such liabilities may create harm to our reputation, inhibit our plans for expansion, or lead to extensive liability either to private parties or government regulators, which could adversely impact our business, results of operations, and financial condition.

45

We are currently, and may be in the future, party to intellectual property rights claims and other litigation matters that, if resolved adversely, could have a material impact on our business, results of operations, or financial condition.

We own a large number of patents, copyrights, trademarks, domain names, and trade secrets and, from time to time, are subject to litigation based on allegations of infringement, misappropriation, or other violations of intellectual property or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. In addition, a number of companies in our industry hold a large number of patents and also protect their copyright, trade secret, and other intellectual property rights, and companies in the networking and security industry frequently enter into litigation based on allegations of patent infringement or other violations of intellectual property rights. We have in the past been, are currently, and may from time to time in the future become, a party to litigation and disputes related to intellectual property, our business practices, and our products. We may also be subject to governmental and other regulatory investigations from time to time. The costs of supporting litigation and dispute resolution proceedings are considerable, and there can be no assurances that a favorable outcome will be obtained. Disputes, whether or not favorably resolved, may generate negative publicity and damage our reputation. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense. Our business, results of operations, and financial condition could be materially and adversely affected as a result.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement and other losses.

Our agreements with certain of our enterprise customers or other third parties may include indemnification or other provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of intellectual property infringement, damages caused by us to property or persons, or other liabilities relating to or arising from the use of our platform or other acts or omissions. The term of these contractual provisions often survives termination or expiration of the applicable agreement. We have in the past been sued on the basis of alleged violation of intellectual property rights in the form of patents and trade secrets. Although we were successful in defending the claims to date, as we continue to grow, the possibility of these and other intellectual property rights claims against us may increase. For any intellectual property rights indemnification claim against us or our customers, we may incur significant legal expenses and have to pay damages, pay license fees and/or stop using technology found to be in violation of the third party’s rights. Large indemnity payments could harm our business, results of operations, and financial condition. We may also have to seek a license for the disputed technology. Such license may not be available on reasonable terms, if at all, and may significantly increase our operating expenses or may require us to restrict our business activities and limit our ability to deliver certain products. As a result, we may also be required to develop alternative non-infringing technology, which could require significant effort and expense and/or cause us to alter our platform, which could negatively affect our business.

From time to time, customers require us to indemnify or otherwise be liable to them for breach of confidentiality, violation of applicable law, or failure to implement adequate security measures with

46

respect to their data stored, transmitted, or accessed using our platform. Our standard Enterprise plan agreements provide limited indemnification to our customers based on third-party claims related to our violation of intellectual property rights, and some of our Enterprise plan agreements offer indemnification for claims beyond that scope. The existence of such a dispute may have adverse effects on our customer relationship and reputation and we may still incur substantial liability related to them.

Any assertions by a third party, whether or not successful, with respect to such indemnification obligations could subject us to costly and time-consuming litigation, expensive remediation and licenses, divert management attention and financial resources, harm our relationship with that customer and other current and prospective customers, reduce demand for our products, and harm our brand, business, results of operations, and financial condition.

Our failure to protect our intellectual property rights and proprietary information could diminish our brand and other intangible assets.

We rely and expect to continue to rely on a combination of patent, patent licenses, trade secret, domain name protection, trademarks, copyrights, and confidentiality and license agreements with our employees, consultants, and third parties in order to protect our intellectual property and proprietary rights. As of June 30, 2019, we had over 100 issued patents and 60 pending patent applications in the United States and abroad. However, third parties may knowingly or unknowingly infringe our proprietary rights. Third parties may challenge our proprietary rights, pending and future patent, trademark, and copyright applications may not be approved, and we may not be able to prevent infringement without incurring substantial expense. We have also devoted substantial resources to the development of our proprietary technologies and related processes, and we provide access to these technologies and processes to certain of our vendors and partners, including Baidu with respect to the facilities included within our network in China. We must protect this proprietary information in order to realize commercial benefit from our investment.

In order to protect our proprietary technologies and processes, we rely in part on trade secret laws and confidentiality agreements with our employees, consultants, and third parties. These agreements may not effectively prevent disclosure of confidential information and may not provide an adequate remedy in the event of unauthorized disclosure of confidential information. In addition, others may independently discover our trade secrets or develop similar technologies and processes, in which case we would not be able to assert trade secret rights against them. Laws in certain jurisdictions may afford little or no trade secret protection, and any changes in, or unexpected interpretations of, the intellectual property laws in any country in which we operate may compromise our ability to enforce our intellectual property rights. We may not be effective in policing unauthorized use of our intellectual property rights, and even if we do detect violations, costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights, and any such litigation could be unsuccessful, lead to the invalidation of our proprietary rights, or lead to counterclaims by other parties against us. If the protection of our proprietary rights is inadequate to prevent use or appropriation by third parties, the value of our platform, brand, and other intangible assets may be diminished and competitors may be able to more effectively replicate our platform and its features. Any of these events could materially and adversely affect our business, results of operations, and financial condition.

We depend and rely upon software and technologies licensed from third parties to operate our business, and interruptions or the unavailability of these technologies may adversely affect our business and results of operations.

We license software and other technology from third parties that we incorporate into, or integrate with, our platform and products. We also rely on software and other technology from third parties in order to

47

operate critical functions of our business, including enterprise resource planning and customer relationship management services. If the services we rely on become unavailable due to extended outages, expiration or termination of licenses, or because they are otherwise no longer available on commercially reasonable terms, our expenses could increase, and our ability to sell our products and our results of operations could be impaired until equivalent services are obtained or replacements are developed, all of which could adversely affect our business.

If we are unable to license necessary technology from third parties now or in the future, we may be forced to acquire or develop alternative technology, which we may be unable to do in a commercially feasible manner or at all, and we may be required to use alternative technology of lower quality or performance. This could limit and delay our ability to offer new or competitive products and increase our costs of production. As a result, our business and results of operations could be significantly harmed.

We cannot be certain that those from whom we license software and other technology are not infringing the intellectual property rights of third parties or have sufficient rights to the licensed intellectual property in all jurisdictions in which we may sell our products. Accordingly, our use of this intellectual property may expose us to third-party claims of infringement. In addition, many licenses are non-exclusive and may not prevent our competitors from licensing the same technology on equivalent or more favorable terms.

Some of our technology incorporates “open source” software, we license some of our software through open source projects and we voluntarily make available some of our software on an open source basis, which could negatively affect our ability to sell our products, subject us to possible litigation and be used by other companies to compete against us.

Our platform and products incorporate software licensed under open source licenses, including open source software included in software we receive from third-party commercial software vendors. Use of open source software may entail greater risks than use of third-party commercial software, as open source licensors generally do not provide support, updates, or warranties or other contractual protections regarding infringement claims or the quality of the software. In addition, the wide availability of source code incorporated in our products could allow hostile parties to more easily identify security vulnerabilities in our platform and products. The terms of some open source licenses may provide that under certain conditions we could be required to release the source code of our proprietary software, and to make our proprietary software available under open source licenses, including authorizing further modification and redistribution. In the event that certain portions of our proprietary software are determined to be subject to such requirements by an open source license, we could be required to publicly release the affected portions of our source code, re-engineer all or a portion of our network or applicable products, or otherwise be limited in the licensing of our network products, each of which provide an advantage to our competitors or other entrants to the market, create security vulnerabilities in our products and could reduce or eliminate the value of our products. Because the terms of open source licenses are novel and have not been widely interpreted by courts, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software or by third parties seeking to enforce the terms of open source licenses against us in a manner we do not anticipate. In addition, we voluntarily make available certain portions of our software on an open source basis to the public and such software could then be used by other companies to compete against us.

Any unanticipated disclosure of, or litigation regarding, our source code and any open source software incorporated into our source code could result in adverse judgments and liabilities, require us to reengineer all or a portion of our platform and products, limit the marketing of our products, provide an advantage to our competitors or other entrants to the market, create new security vulnerabilities or highlight existing security vulnerabilities in our platform and products, and reduce or eliminate the value

48

of our platform and products. We cannot assure you that our processes for controlling our use of open source software in our platform and products will be effective.

Our business depends, in part, on sales to U.S. and foreign government organizations, which are subject to a number of challenges and risks.

We derive a portion of our revenue from contracts with government organizations, and we believe the success and growth of our business will in part depend on adding additional public sector customers. However, demand from government organizations is often unpredictable, and we cannot assure you that we will be able to maintain or grow our revenue from the public sector. Sales to government entities are subject to substantial additional risks that are not present in sales to other customers, including:

• selling to government agencies can be more highly competitive, expensive, and time-consuming than sales to other customers, often requiring significant upfront time and expense without any assurance that such efforts will generate a sale;

• U.S., European, or other government certification and audit requirements potentially applicable to our network, including the Federal Risk and Authorization Management Program, are often difficult and costly to obtain and maintain, and failure to do so will restrict our ability to sell to government customers;

• government demand and payment for our products may be impacted by public sector budgetary cycles, funding authorizations, or government shutdowns;

• governments routinely investigate and audit government contractors’ administrative processes and any unfavorable audit could result in fines, civil or criminal liability, further investigations, damage to our reputation, and debarment from further government business;

• governments often require contract terms that differ from our standard customer arrangements, including terms that can lead to those customers obtaining broader rights in our products than would be expected under a standard commercial contract and terms that can allow for early termination; and

• governments may demand better pricing terms and public disclosure of such pricing terms, which may harm our ability to negotiate pricing terms with our non-government customers.

In addition, we must comply with laws and regulations relating to the formation, administration, and performance of contracts with the public sector, including U.S. federal, state, and local governmental organizations, which affect how we and our channel partners do business with governmental agencies. Selling our products to the U.S. government, whether directly or through channel partners, also subjects us to certain regulatory and contractual requirements. Failure to comply with these requirements by either us or our channel partners could subject us to investigations, fines, and other penalties, which could have an adverse effect on our business, results of operations, and financial condition. For example, the U.S. Department of Justice (the DOJ) and the General Services Administration (the GSA) have in the past pursued claims against and financial settlements with vendors under the False Claims Act and other statutes related to pricing and discount practices and compliance with certain provisions of GSA contracts for sales to the federal government. The DOJ and GSA continue to actively pursue such claims. Violations of certain regulatory and contractual requirements could also result in us being suspended or debarred from future government contracting. Any of these outcomes could have a material adverse effect on our revenue, results of operations, and financial condition. Any inability to address these risks and challenges could reduce the commercial benefit to us or otherwise preclude us from selling subscriptions to our products to government organizations.

49

We may have exposure to greater than anticipated income tax liabilities and may be affected by changes in tax laws, which could adversely impact our results of operations.

We operate in a number of tax jurisdictions globally, including in the United States at the federal, state, and local levels, and in many other countries, and plan to continue to expand the scale of our operations in the future. Accordingly, we are subject to income taxes in the United States and various jurisdictions outside of the United States. While to date we have not incurred significant income taxes in operating our business, we may in the future face significant tax liabilities. Our tax expense could also be impacted by changes in non-deductible expenses, changes in excess tax benefits of stock-based compensation, changes in the valuation of deferred tax assets and liabilities, and our ability to utilize them, the applicability of withholding taxes, and effects from acquisitions.

Our tax provision could also be impacted by changes in accounting principles, changes in U.S. federal, state, or international tax laws applicable to corporate multinationals such as the recent legislation enacted in the United States, United Kingdom, and Australia, other fundamental law changes currently being considered by many countries, and changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions. For example, on December 22, 2017, tax reform legislation referred to as the Tax Cuts and Jobs Act (the Tax Act) was enacted in the United States. The Tax Act significantly revises U.S. federal income tax law, including lowering the corporate income tax rate to 21%, requiring companies to pay a one-time transition tax on certain unrepatriated earnings of foreign subsidiaries, implementing a modified territorial tax system, requiring a current inclusion in U.S. federal taxable income of certain earnings of controlled foreign corporations, and creating a base erosion anti-abuse tax. We have reflected the impact of the Tax Act in our consolidated financial statements in accordance with our understanding of the Tax Act and guidance available as of the date of this prospectus. The primary effect of the Tax Act on our financial results was a reduction of our deferred tax assets resulting from the reduction in the U.S. federal corporate income tax rate. Because we have established a full valuation allowance against our U.S. deferred tax assets, our consolidated financial statements were not materially affected. Many consequences of the Tax Act, including whether and how state, local, and foreign jurisdictions will react to such changes, are not entirely clear at this time and the U.S. Department of the Treasury has broad authority to issue regulations and interpretive guidance that may significantly impact how the Tax Act will apply to us.

Additionally, in October 2015, the Organisation for Economic Co-Operation and Development (the OECD) released final guidance covering various topics, including transfer pricing, country-by-country reporting, and definitional changes to permanent establishment that could ultimately impact our tax liabilities. In March 2018, the European Commission released a proposal for a European Council directive on taxation of specified digital services. The proposal calls for an interim tax on certain revenues from digital activities, as well as a longer-term regime that creates a taxable presence for digital services and imposes tax on digital profits. We do not yet know the impact this proposal, if implemented, would have on our financial results. A number of other jurisdictions, including the United Kingdom, are considering enacting similar digital tax regimes. These efforts are alongside the OECD’s ongoing work, as part of its Base Erosion and Profit Shifting Action Plan, to issue a final report in 2020 that provides a long-term, multilateral proposal on taxation of the digital economy. Any of the foregoing changes could have an adverse impact on our results of operations, cash flows, and financial condition.

Our results of operations may be harmed if we are required to collect sales and use, gross receipts, value-added, or similar taxes for our products in jurisdictions where we have not historically done so.

Sales and use, value-added, goods and services, and similar tax laws and rates vary greatly by jurisdiction. Our customers can be located in one jurisdiction, utilize our platform and products through

50

our network equipment in a different jurisdiction, and pay us from an account located in a third jurisdiction. This divergence, along with the jurisdiction-by-jurisdiction variance in tax laws, causes significant uncertainty in the tax treatment of our business. There is further uncertainty as to what constitutes sufficient physical presence or nexus for a state or local jurisdiction to levy taxes, fees, and surcharges for sales made over the Internet, and there is also uncertainty as to whether our characterization of our platform and products as not taxable in certain jurisdictions will be accepted by state and local taxing authorities. In determining our tax filing obligations, management has made judgments regarding whether our activities in a jurisdiction rise to the level of taxability. These judgments may prove inaccurate, and one or more states or countries may seek to impose additional sales, use, or other tax collection obligations on us, including for past sales by us. It is possible that we could face sales tax audits and that our liability for these taxes could exceed our estimates as state and other tax authorities could still assert that we are obligated to collect additional amounts as taxes from our customers and remit those taxes to those authorities. Furthermore, the U.S. Supreme Court’s ruling in South Dakota v. Wayfair may permit wider enforcement of sales tax collection requirements. A successful assertion by a state, country, or other jurisdiction that we should have been or should be collecting additional sales, use, or other taxes on our platform and products could, among other things, result in substantial tax liabilities for past sales, create significant administrative burdens for us, discourage customers from purchasing our platform and products, or otherwise harm our business, results of operations, and financial condition.

Our international operations require us to exercise judgment in determining the applicability of tax laws, which may subject us to potentially adverse tax consequences.

We are subject to income taxes as well as non-income-based taxes, such as payroll, sales, use, value-added, property, and goods and services taxes, in both the United States and various foreign jurisdictions. Our domestic and international tax liabilities are subject to various jurisdictional rules regarding the timing and allocation of revenue and expenses. Additionally, the amount of income taxes paid is subject to our interpretation of applicable tax laws in the jurisdictions in which we file and to changes in tax laws. Significant judgment is required in determining our worldwide provision for income taxes and other tax liabilities. From time to time, we may be subject to income and non-income tax audits. While we believe we have complied with all applicable income tax laws, there can be no assurance that a governing tax authority will not have a different interpretation of the law and assess us with additional taxes, including with respect to intercompany transfer pricing and the collection of sales and use tax, value-added tax, and goods and services tax. Should we be assessed with additional taxes, there could be a material adverse effect on our business, results of operations, and financial condition.

Our future effective tax rate may be affected by such factors as changes in tax laws, regulations, or rates, changing interpretation of existing laws or regulations, the impact of accounting for stock-based compensation, the impact of accounting for business combinations, changes in our international organization, and changes in our overall levels of income before tax. In addition, in the ordinary course of our global business, there are many intercompany transactions and calculations where the ultimate tax determination is uncertain. Although we believe that our tax estimates are reasonable, we cannot ensure that the final determination of tax audits or tax disputes will not be different from what is reflected in our historical income tax provisions and accruals. There can be no assurance that the outcomes from these continuous examinations will not have an adverse effect on our results of operations.

Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited.

As of December 31, 2017 and 2018, we had net operating loss carryforwards for U.S. federal income tax purposes of $75.5 million and $122.3 million, net of uncertain tax positions, respectively, available

51

to offset future U.S. federal taxable income. Also as of December 31, 2017 and 2018, we had net operating loss carryforwards for state income tax purposes of $39.9 million and $89.8 million, net of uncertain tax positions, respectively, available to offset future state taxable income. If not utilized, both the federal and state tax credit carryforwards for tax years beginning before December 31, 2017 will begin to expire in 2029. As of December 31, 2018, we had foreign tax credit carryforwards for federal income tax purposes of $1.8 million that will begin to expire, if not utilized, in 2025. Also as of December 31, 2018, we had federal research and development tax credit carryforwards of $5.7 million that will begin to expire in 2029 and state research and development tax credit carryforwards of $4.5 million that can be carried forward indefinitely.

Utilization of our net operating loss carryforwards and other tax attributes, such as research and development tax credits, may be subject to annual limitations, or could be subject to other limitations on utilization or benefit due to the ownership change limitations provided by Sections 382 and 383 of the Internal Revenue Code of 1986, as amended (the Code), and other similar provisions. Under Sections 382 and 383 of the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change attributes, such as research tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by “5-percent shareholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. At this time, we have not completed a study to assess whether such an ownership change has occurred, or whether there have been multiple ownership changes since our formation. We may have experienced various ownership changes, as defined by the Code, as a result of past financing transactions (or other activities), and we may experience ownership changes in the future as a result of subsequent changes in our stock ownership, some of which may be outside our control. Accordingly, our ability to utilize the aforementioned carryforwards may be limited.

Further, the Tax Act changed the federal rules governing net operating loss carryforwards. For net operating loss carryforwards arising in tax years beginning after December 31, 2017, the Tax Act limits a taxpayer’s ability to utilize such carryforwards to 80% of taxable income. In addition, net operating loss carryforwards arising in tax years ending after December 31, 2017 can be carried forward indefinitely, but carryback is generally prohibited. Net operating loss carryforwards generated before January 1, 2018 (which represent the substantial majority of our net operating losses) will not be subject to the Tax Act’s taxable income limitation and will continue to have a twenty-year carryforward period. Nevertheless, our net operating loss carryforwards and other tax assets could expire before utilization and could be subject to limitations, which could harm our business, revenue, and financial results.

We rely on third-party software for certain essential financial and operational services, and a failure or disruption in these services could materially and adversely affect our ability to manage our business effectively.

We rely on third-party software to provide many essential financial and operational services to support our business, including NetSuite, Salesforce, Atlassian, and Workday. Many of these vendors are less established and have shorter operating histories than traditional software vendors. Moreover, these vendors provide their services to us via a cloud-based model instead of software that is installed on our premises. As a result, we depend upon these vendors to provide us with services that are always available and are free of errors or defects that could cause disruptions in our business processes. Any failure by these vendors to do so, or any disruption in our ability to access the Internet, would materially and adversely affect our ability to manage our operations.

52

Our business is exposed to risks associated with credit card and other online payment processing methods.

Many of our customers pay for our service using a variety of different payment methods, including credit and debit cards, prepaid cards, direct debit, and online wallets. We rely on internal systems as well as those of third parties to process payments. Acceptance and processing of these payment methods are subject to certain rules and regulations and require payment of interchange and other fees. To the extent there are increases in payment processing fees, material changes in the payment ecosystem, such as large re-issuances of payment cards, delays in receiving payments from payment processors, changes to rules or regulations concerning payment processing, loss of payment partners, and/or disruptions or failures in our payment processing systems or payment products, including products we use to update payment information, our revenue, operating expenses, and results of operation could be adversely impacted. In addition, from time to time, we encounter fraudulent use of payment methods, which could impact our results of operations and if not adequately controlled and managed could create negative consumer perceptions of our service. If we are unable to maintain our chargeback rate at acceptable levels, card networks may impose fines and our card approval rate may be impacted. If we fail to comply with the rules or requirements applicable to processing payments, or if our data security systems are breached, compromised, or otherwise unable to detect or prevent fraudulent activity, we may be liable for card issuing banks’ costs, subject to fines and higher transaction fees, and lose our ability to accept certain payments from our customers. The termination of our ability to process payments using any major payment method our business, results of operations, and financial condition could be harmed.

Because we recognize revenue from subscriptions for our products over the term of the subscription, downturns or upturns in new business may not be immediately reflected in our results of operations and may be difficult to discern.

We generally recognize revenue from customers ratably over the term of their subscription, which in the case of our enterprise customers range from one to three years and in the case of our self-serve customers is typically monthly. Consequently, any increase or decline in new sales or renewals to these customers in any one period may not be immediately reflected in our revenue for that period. Any such change, however, may affect our revenue in future periods. Accordingly, the effect of downturns or upturns in new sales and potential changes in our rate of renewals may not be fully reflected in our results of operations until future periods. We may also be unable to reduce our cost structure in line with a significant deterioration in sales or renewals. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers must be recognized over the applicable subscription term.

By contrast, a significant majority of our costs are expensed as incurred, which occurs as soon as a customer starts using our platform. As a result, an increase in customers could result in our recognition of more costs than revenue in the earlier portion of the subscription term. We may not attain sufficient revenue to maintain positive cash flow from operations or achieve profitability in any given period.

We are exposed to fluctuations in currency exchange rates, which could negatively affect our results of operations.

Substantially all of our sales contracts are denominated in U.S. dollars and, therefore, substantially all of our revenue is not subject to foreign currency risk. However, a strengthening of the U.S. dollar could increase the real cost of our products to our customers outside of the United States, which could reduce demand for our products and adversely affect our financial condition and results of operations.

As our international operations expand, an increasing portion of our revenue and operating expenses is incurred outside the United States and is denominated in foreign currencies, such as the British

53

pound and Singapore dollar. Accordingly, our revenue and operating expenses are increasingly subject to fluctuations due to changes in foreign currency exchange rates. As we continue to expand our international operations, we may become more exposed to foreign currency risk or remeasurement risk. If we become more exposed to currency fluctuations and are not able to successfully hedge against the risks associated with currency fluctuations, our results of operations could be materially and adversely affected.

If our estimates or judgments relating to our critical accounting policies prove to be incorrect or financial reporting standards or interpretations change, our results of operations could be adversely affected.

The preparation of financial statements in conformity with generally accepted accounting principles in the United States (U.S. GAAP) requires our management to make estimates and assumptions that affect the amounts reported and disclosed in our consolidated financial statements and accompanying notes. We base our estimates and assumptions on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to determination of deferred contract acquisitions costs, the period of benefit generated from our deferred contract acquisition costs, the capitalization and estimated useful life of internal-use software, the assessment of recoverability of intangible assets and their estimated useful lives, useful lives of property and equipment, the valuation and recognition of stock-based compensation, uncertain tax positions, and the recognition and measurement of current and deferred income tax assets and liabilities. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of industry or financial analysts and investors, resulting in a decline in the trading price of our common stock.

Additionally, we regularly monitor our compliance with applicable financial reporting standards and review new pronouncements and drafts thereof that are relevant to us. As a result of new standards, or changes to existing standards, and changes in their interpretation, we might be required to change our accounting policies, alter our operational policies and implement new or enhance existing systems so that they reflect new or amended financial reporting standards, or we may be required to restate our published financial statements. Such changes to existing standards or changes in their interpretation may have an adverse effect on our reputation, business, financial condition, and profit and loss, or cause an adverse deviation from our revenue and operating profit and loss target, which may negatively impact our results of operations.

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.

As a public company, we will be subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the Exchange Act), the Sarbanes-Oxley Act of 2002 (the Sarbanes-Oxley Act), and the rules and regulations of the applicable listing standards of the New York Stock Exchange (the NYSE). We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming, and costly, and place significant strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine

54

our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs, and significant management oversight.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we will eventually be required to include in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the NYSE. We are not currently required to comply with the SEC rules that implement Section 404 of the Sarbanes-Oxley Act and are therefore not required to make a formal assessment of the effectiveness of our internal control over financial reporting for that purpose. As a public company, we will be required to provide an annual management report on the effectiveness of our internal control over financial reporting. In the period ended December 31, 2017, we identified one material weakness in our internal control over financial reporting related to our lack of a formal process over stock administration and lack of adequate controls to ensure that all stock issuances and stock-based compensation transactions were completely and accurately documented, executed, and properly reflected in our consolidated financial statements and our capitalization table. Although the material weakness was remediated as of December 31, 2018, there can be no assurance that we will maintain internal control over financial reporting sufficient to enable us to identify or avoid material weaknesses in the future.

Our independent registered public accounting firm is not required to formally attest to the effectiveness of our internal control over financial reporting until after we are no longer an “emerging growth company” as defined in the JOBS Act. At such time, our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could materially and adversely affect our business, results of operations, and financial condition and could cause a decline in the trading price of our Class A common stock.

Our business is subject to the risks of catastrophic events.

The occurrence of any catastrophic event, including an earthquake, fire, flood, tsunami, or other weather event, power loss, telecommunications failure, software or hardware malfunctions, cyber-attack, war, or terrorist attack, could result in lengthy interruptions in our service. Our corporate headquarters is located in the San Francisco Bay Area and one of our core co-location facilities is located in the U.S. Pacific Northwest, both regions known for seismic activity, and we also have a

55

second core co-location facility in Luxembourg. Our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the Internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver products to our customers would be impaired or we could lose critical data.

Our partners, suppliers, and customers are also subject to the risk of catastrophic events. In those events, our ability to deliver our products in a timely manner, as well as the demand for our products, may be divided on account of factors outside our control.

Future acquisitions, strategic investments, partnerships, or alliances could be difficult to identify and integrate, divert the attention of key management personnel, disrupt our business, dilute stockholder value, and adversely affect our results of operations, financial condition, and prospects.

Part of our business strategy is to make acquisitions of other companies, products, and technologies; however, we have limited experience in making such acquisitions. We may not be able to find suitable acquisition candidates and we may not be able to complete acquisitions on favorable terms, if at all. If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve our goals, and any acquisitions we complete could be viewed negatively by customers, developers, or investors. In addition, we may not be able to integrate acquired businesses successfully or effectively manage the combined company following an acquisition. If we fail to successfully integrate our acquisitions, or the people or technologies associated with those acquisitions, into our company, the results of operations of the combined company could be adversely affected. Any integration process will require significant time and resources, require significant attention from management, and disrupt the ordinary functioning of our business, and we may not be able to manage the process successfully, which could adversely affect our business, results of operations, and financial condition. In addition, we may not successfully evaluate or utilize the acquired technology and accurately forecast the financial impact of an acquisition transaction, including accounting charges.

In order to expand our network and product offerings, we also may enter into relationships with other businesses, which could involve joint ventures, preferred or exclusive licenses, additional channels of distribution, or investments in other companies. Negotiating these transactions can be time-consuming, difficult, and costly, and our ability to close these transactions may be subject to third-party approvals, such as government regulatory approvals, which are beyond our control. Consequently, we cannot assure you that these transactions, once undertaken and announced, will close or will lead to commercial benefit for us.

In connection with the foregoing strategic transactions, we may:

• issue additional equity securities that would dilute our stockholders;

• use cash that we may need in the future to operate our business;

• incur debt on terms unfavorable to us or that we are unable to repay;

• incur large charges or substantial liabilities;

• encounter difficulties integrating diverse business cultures; and

• become subject to adverse tax consequences, substantial depreciation, or deferred compensation charges.

These challenges related to acquisitions or other strategic transactions could adversely affect our business, results of operations, financial condition, and prospects.

56

Certain of our market opportunity estimates, growth forecasts, and key metrics included in this prospectus could prove to be inaccurate, and any real or perceived inaccuracies may harm our reputation and negatively affect our business.

Market opportunity estimates and growth forecasts are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts in this prospectus relating to the size and expected growth of our target market may prove to be inaccurate. Even if the markets in which we compete meet the size estimates and growth forecasted in this prospectus, our business could fail to grow at similar rates, if at all. We also rely on assumptions and estimates to calculate certain of our key metrics, such as dollar-based net retention rate. We regularly review and may adjust our processes for calculating our key metrics to improve their accuracy. Our key metrics may differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology. If investors or analysts do not perceive our metrics to be accurate representations of our business, or if we discover material inaccuracies in our metrics, our reputation, business, results of operations, and financial condition would be harmed.

The requirements of being a public company may strain our resources, divert management’s attention, and affect our ability to attract and retain executive management and qualified board members.

As a public company, we will be subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the listing requirements of the NYSE, and other applicable securities rules and regulations. Compliance with these rules and regulations will increase our legal and financial compliance costs, make some activities more difficult, time-consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly, and current reports with respect to our business and results of operations. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight is required. We are required to disclose changes made in our internal control and procedures on a quarterly basis and we may be required to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could adversely affect our business and results of operations. Although we have already hired additional employees and have engaged outside consultants to assist us in complying with these requirements, we may need to hire more employees in the future or engage additional outside consultants, which will increase our operating expenses.

In addition, changing laws, regulations, and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs, and making some activities more time consuming. These laws, regulations, and standards are subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We intend to invest substantial resources to comply with evolving laws, regulations, and standards, and this investment may result in increased general and administrative expenses and a diversion of management’s time and attention from revenue-generating activities to compliance activities. If our efforts to comply with new laws, regulations, and standards differ from the activities intended by regulatory or governing bodies due to ambiguities related to their application and practice, regulatory authorities may initiate legal proceedings against us and our business may be adversely affected.

57

Being a public company and the aforementioned rules and regulations may make it more expensive for us to maintain director and officer liability insurance, and in the future we may be required to accept reduced coverage or incur substantially higher costs to obtain coverage. These factors could also make it more difficult for us to attract and retain qualified members of our Board of Directors, particularly to serve on our audit committee and compensation committee, and qualified executive officers.

As a result of disclosure of information in our filings with the SEC, our business and financial condition have become more visible, which we believe may result in threatened or actual litigation, including by competitors and other third parties. If such claims are successful, our business and results of operations could be adversely affected, and even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and adversely affect our business and results of operations.

Our management team has limited experience managing a public company.

Most members of our management team have limited experience managing a publicly traded company, interacting with public company investors, and complying with the increasingly complex laws pertaining to public companies. Our management team may not successfully or efficiently manage our transition to being a public company that is subject to significant regulatory oversight and reporting obligations under the federal securities laws and the continuous scrutiny of securities analysts and investors. These new obligations and constituents will require significant attention from our senior management and could divert their attention away from the day-to-day management of our business, which could harm our business, results of operations, and financial condition.

Risks Related to Ownership of Our Class A Common Stock

An active trading market for our Class A common stock may never develop or be sustained.

We have been approved to list our Class A common stock on the NYSE under the symbol “NET.” However, we cannot assure you that an active trading market for our Class A common stock will develop on that exchange or elsewhere or, if developed, that any market will be sustained. Accordingly, we cannot assure you of the likelihood that an active trading market for our Class A common stock will develop or be maintained, the liquidity of any trading market, your ability to sell your shares of our Class A common stock when desired, or the prices that you may obtain for your shares.

The trading price of our Class A common stock may be volatile, and you could lose all or part of your investment.

Prior to this offering, there has been no public market for shares of our Class A common stock. The initial public offering price of our Class A common stock was determined through negotiation among us and the underwriters. This price does not necessarily reflect the price at which investors in the market will be willing to buy and sell shares of our Class A common stock following this offering. In addition, the trading price of our Class A common stock following this offering is likely to be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. These fluctuations could cause you to lose all or part of your investment in our Class A common stock since you might be unable to sell your shares at or above the price you paid in this offering. Factors that could cause fluctuations in the trading price of our Class A common stock include:

• price and volume fluctuations in the overall stock market from time to time;

• volatility in the trading prices and trading volumes of technology stocks;

58

• changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

• sales of shares of our Class A common stock and Class B common stock by us or our stockholders;

• failure of securities analysts to maintain coverage of us, changes in financial estimates by securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

• the financial projections we may provide to the public, any changes in those projections, or our failure to meet those projections;

• announcements by us or our competitors of new products, features, or services;

• the public’s reaction to our press releases, other public announcements, and filings with the SEC;

• rumors and market speculation involving us or other companies in our industry;

• actual or anticipated changes in our results of operations or fluctuations in our results of operations;

• actual or anticipated developments in our business, our competitors’ businesses or the competitive landscape generally;

• litigation involving us, our industry, or both, or investigations by regulators into our operations or those of our competitors;

• developments or disputes concerning our intellectual property or other proprietary rights;

• actual or perceived data security breaches or other data security incidents;

• announced or completed acquisitions of businesses, products, services, or technologies by us or our competitors;

• new laws or regulations or new interpretations of existing laws or regulations applicable to our business;

• changes in accounting standards, policies, guidelines, interpretations, or principles;

• any significant change in our management; and

• general economic conditions and slow or negative growth of our markets.

In addition, in the past, following periods of volatility in the overall market and the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. This litigation, if instituted against us, could result in substantial costs and a diversion of our management’s attention and resources.

We may need additional capital, and we cannot be certain that additional financing will be available on favorable terms, or at all.

Historically, we have financed our operations primarily through the sale of our equity securities as well as payments received from customers using our global cloud platform. Although we currently anticipate that our existing cash, cash equivalents, and marketable securities, and cash flow from operations will be sufficient to meet our working capital and capital expenditure needs for at least the next 12 months, we may require additional financing. We evaluate financing opportunities from time to time, and our ability to obtain financing will depend, among other things, on our development efforts, business plans, and operating performance, and the condition of the capital markets at the time we seek financing. We

59

cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity or equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and, in the case of equity or equity-linked securities, our stockholders may experience dilution.

The dual-class structure of our common stock will have the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of this offering, and it may depress the trading price of our Class A common stock.

Following this offering, our Class B common stock will have 10 votes per share and our Class A common stock, which is the stock we are offering in this offering, will have one vote per share. Following this offering, our directors, executive officers, and holders of more than 5% of our common stock, and their respective affiliates, will hold in the aggregate 84.8% of the voting power of our capital stock. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval. This concentrated control will limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may feel are in your best interest as one of our stockholders.

Future transfers by holders of shares of Class B common stock and the cessation of employment by holders of our Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning purposes and transfers between related entities. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those individual holders of Class B common stock who retain their shares in the long term. See the section titled “Description of Capital Stock—Anti-Takeover Provisions” for additional information.

In July 2017, FTSE Russell and Standard & Poor’s announced that they would cease to include most newly public companies utilizing dual or multi-class capital structures in their indices. Affected indices include the Russell 2000 and the S&P 500, S&P MidCap 400, and S&P SmallCap 600, which together make up the S&P Composite 1500. Under the announced policies, our multi-class capital structure likely makes us ineligible for inclusion in any of these indices, and as a result, mutual funds, exchange-traded funds, and other investment vehicles that attempt to passively track these indices may not invest in our stock. These policies are still new and it is as of yet unclear what effect, if any, they will have on the valuations of publicly traded companies excluded from the indices, but it is possible that they may depress these valuations compared to those of other similar companies that are included.

A substantial portion of the outstanding shares of our Class A common stock and Class B common stock after this offering will be restricted from immediate resale, but may be sold on a stock exchange in the near future. The large number of shares of our capital stock eligible for public sale or subject to rights requiring us to register them for public sale could depress the market price of our Class A common stock.

The market price of our Class A common stock could decline as a result of sales of a large number of shares of our Class A common stock in the market after this offering, and the perception that these sales could occur may also depress the market price of our Class A common stock. Based on 46,360,728 shares of our Class A common stock (after giving effect to the Capital Stock Conversions) and 211,982,959 shares of our Class B common stock (after giving effect to the Capital Stock

60

Conversions) outstanding as of June 30, 2019, we will have 81,360,728 shares of our Class A common stock and 211,982,959 shares of our Class B common stock outstanding immediately after this offering. Our executive officers, directors, and the holders of substantially all of our capital stock and securities convertible into or exchangeable for our capital stock have entered into market standoff agreements with us or have entered into lock-up agreements with the underwriters under which they have agreed, subject to specific exceptions, not to sell any of our stock for 180 days following the date of this prospectus. We refer to such period as the lock-up period. Pursuant to the lock-up agreements with the underwriters, if (i) at least 120 days have elapsed since the date of this prospectus, (ii) we have publicly released our earnings results for the fiscal year ended December 31, 2019, and (iii) the lock-up period is scheduled to end during a broadly applicable period during which trading in our securities would not be permitted under our insider trading policy (a blackout period) or within five trading days prior to a blackout period, the lock-up period will end 10 trading days prior to the commencement of such blackout period. We and the underwriters may release certain stockholders from the market standoff agreements or lock-up agreements prior to the end of the lock-up period.

As a result of these agreements and the provisions of our investors’ rights agreement described further in the section titled “Description of Capital Stock—Registration Rights,” and subject to the provisions of Rule 144 or Rule 701 under the Securities Act of 1933, as amended (the Securities Act), shares of our Class A common stock and Class B common stock will be available for sale in the public market as follows based on the shares of our capital stock outstanding as of June 30, 2019 (after giving effect to the Capital Stock Conversions):

• beginning on the date of this prospectus, all 35,000,000 shares of our Class A common stock sold in this offering will be immediately available for sale in the public market; and

• beginning 181 days after the date of this prospectus (subject to the terms of the lock-up agreements and market standoff agreements described above), an additional 46,360,728 shares of our Class A common stock and 211,982,959 shares of our Class B common stock will be eligible for sale in the public market from time to time thereafter, of which 31,479,639 shares of our Class A common stock and 188,623,161 shares of our Class B common stock will be subject to the volume and other restrictions of Rule 144, as described below.

Upon completion of this offering, stockholders owning an aggregate of up to 150,002,517 shares of our Class B common stock and 31,381,152 shares of our Class A common stock will be entitled, under our investors’ rights agreement, to require us to register shares owned by them for public sale in the United States. In addition, we intend to file a registration statement to register shares reserved for future issuance under our equity compensation plans. Upon effectiveness of the registration statement of which this prospectus forms a part, subject to the satisfaction of applicable exercise periods and the expiration or waiver of the market standoff agreements and lock-up agreements referred to above, the shares issued upon exercise of outstanding stock options or upon settlement of outstanding RSU awards will be available for immediate resale in the United States in the open market.

Sales of our shares as restrictions end or pursuant to registration rights may make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate. These sales also could cause the trading price of our Class A common stock to fall and make it more difficult for you to sell shares of our Class A common stock.

If you purchase our Class A common stock in this offering, you will incur immediate and substantial dilution.

The initial public offering price of the Class A common stock is substantially higher than the pro forma as adjusted net tangible book value per share of our outstanding common stock of $1.98 per share as of June 30, 2019. Investors purchasing shares of our Class A common stock in this offering will pay a price per share that substantially exceeds the book value of our tangible assets after subtracting our

61

liabilities. As a result, investors purchasing Class A common stock in this offering will incur immediate dilution of $11.02 per share, based on the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover of this prospectus.

This dilution is due to the substantially lower price paid by our investors who purchased shares prior to this offering as compared to the price offered to the public in this offering, and any previous exercise of stock options or settlement of RSUs granted to our service providers. In addition, as of June 30, 2019, options to purchase 23,558,731 shares of our Class B common stock, with a weighted-average exercise price of $2.27 per share, and RSUs covering 4,148,564 shares of our Class B common stock were outstanding. The exercise of any of these options or the settlement of any of these RSUs would result in additional dilution. As a result of the dilution to investors purchasing shares in this offering, investors may receive less than the purchase price paid in this offering, if anything, in the event of our liquidation.

We have broad discretion over the use of the net proceeds from this offering and we may not use them effectively.

We cannot specify with any certainty the particular uses of the net proceeds that we will receive from this offering. Our management will have broad discretion in the application of the net proceeds from this offering, including for any of the purposes described in “Use of Proceeds,” and you will not have the opportunity as part of your investment decision to assess whether the net proceeds are being used appropriately. Because of the number and variability of factors that will determine our use of the net proceeds from this offering, their ultimate use may vary substantially from their currently intended use. The failure by our management to apply these proceeds effectively could adversely affect our business, results of operations, and financial condition. Pending their use, we may invest our proceeds in a manner that does not produce income or that loses value. Our investments may not yield a favorable return to our investors and may negatively impact the price of our Class A common stock.

We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make our Class A common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we intend to take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not “emerging growth companies,” including not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, exemptions from the requirements of holding a non-binding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved, and exemptions from complying with new or revised financial accounting standards until private companies are required to comply with the new or revised accounting standards. We may take advantage of these exemptions for so long as we are an “emerging growth company,” which could be as long as five years following the effectiveness of this offering. We expect, however, that we will cease being an “emerging growth company” prior to such time. We cannot predict if investors will find our Class A common stock less attractive to the extent that we rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and the price of our common stock may be more volatile.

Delaware law and provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make a merger, tender offer, or proxy contest difficult, thereby depressing the market price of our Class A common stock.

Our status as a Delaware corporation and the anti-takeover provisions of the Delaware General Corporation Law may discourage, delay, or prevent a change in control by prohibiting us from

62

engaging in a business combination with an interested stockholder for a period of three years after the person becomes an interested stockholder, even if a change of control would be beneficial to our existing stockholders. In addition, our amended and restated certificate of incorporation and amended and restated bylaws, as they will be in effect following this offering, contain provisions that may make the acquisition of our company more difficult, including the following:

• our dual-class common stock structure, which provides Mr. Prince and Ms. Zatlyn with the ability to significantly influence the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the shares of our outstanding Class A common stock and Class B common stock;

• our Board of Directors is classified into three classes of directors with staggered three-year terms and directors are only able to be removed from office for cause;

• vacancies on our Board of Directors will be able to be filled only by our Board of Directors and not by stockholders;

• only the Chair of our Board of Directors, our Chief Executive Officer, or a majority of our entire Board of Directors are authorized to call a special meeting of stockholders;

• certain litigation against us can only be brought in Delaware;

• our amended and restated certificate of incorporation authorizes undesignated preferred stock, the terms of which may be established and shares of which may be issued, without the approval of the holders of Class A common stock;

• advance notice procedures apply for stockholders to nominate candidates for election as directors or to bring matters before an annual meeting of stockholders;

• our stockholders will only be able to take action at a meeting of stockholders and not by written consent; and

• any amendment of the above anti-takeover provisions in our amended and restated certificate of incorporation or amended and restated bylaws will require the approval of two-thirds of the combined vote of our then-outstanding shares of Class A common stock and Class B common stock.

These anti-takeover defenses could discourage, delay, or prevent a transaction involving a change in control of our company. These provisions could also discourage proxy contests and make it more difficult for stockholders to elect directors of their choosing and to cause us to take other corporate actions they desire, any of which, under certain circumstances, could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock, and could also affect the price that some investors are willing to pay for our Class A common stock.

Our amended and restated bylaws will designate a state or federal court located within the State of Delaware as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers or employees.

Our amended and restated bylaws, which will become effective immediately prior to the completion of this offering, will provide that the Court of Chancery of the State of Delaware is the exclusive forum for the following types of actions or proceedings under Delaware statutory or common law: (i) any derivative action or proceeding brought on our behalf; (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders; (iii) any action arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation or our amended and restated bylaws; or (iv) any

63

other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants. The provisions would not apply to suits brought to enforce a duty or liability created by the Exchange Act. Additionally, nothing in our amended and restated bylaws precludes stockholders that assert claims under the Securities Act from bringing such claims in state or federal court, subject to applicable law.

Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to this provision. This exclusive-forum provision may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. If a court were to find the exclusive-forum provision in our amended and restated bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations.

Our Class A common stock market price and trading volume could decline if equity or industry analysts do not publish research or publish inaccurate or unfavorable research about our business.

The trading market for our Class A common stock will depend in part on the research and reports that equity or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts commence coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which might cause the price and trading volume of our Class A common stock to decline.

We do not intend to pay dividends for the foreseeable future.

We have never declared nor paid cash dividends on our capital stock. We currently intend to retain any future earnings to finance the operation and expansion of our business, and we do not expect to declare or pay any dividends in the foreseeable future. As a result, stockholders must rely on sales of their Class A common stock after price appreciation as the only way to realize any future gains on their investment.

64

SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS

This prospectus contains forward-looking statements within the meaning of the federal securities laws, which statements involve substantial risks and uncertainties. Forward-looking statements generally relate to future events or our future financial or operating performance. In some cases, you can identify forward-looking statements because they contain words such as “may,” “will,” “should,” “expects,” “plans,” “anticipates,” “could,” “intends,” “target,” “projects,” “contemplates,” “believes,” “estimates,” “predicts,” “potential,” or “continue,” or the negative of these words, or other similar terms or expressions that concern our expectations, strategy, plans, or intentions. Forward-looking statements contained in this prospectus include, but are not limited to, statements about:

• our ability to retain and upgrade paying customers;

• our ability to attract new customers or convert free customers to paying customers;

• our future financial performance, including trends in revenue, costs of revenue, gross profit or gross margin, operating expenses, paying customers, and free cash flow;

• our ability to achieve or maintain profitability;

• the consequences we may face resulting from the activities of our customers and the actions we take in response, including associated theories of liability;

• the demand for our products or for solutions for security, performance, and reliability in general;

• possible harm caused by significant disruption of service, loss or unauthorized access to customers’ content, or the actual or perceived failure of our products to prevent security incidents;

• our ability to compete successfully in competitive markets;

• our ability to respond to rapid technological changes;

• our ability to continue to innovate and develop new products;

• our expectations and management of future growth;

• our ability to maintain existing co-location relationships, ISP partnerships, and other interconnection arrangements around the world;

• our ability to offer high-quality customer support;

• our ability to manage our global operations;

• our expectations of and ability to comply with applicable laws around the world;

• our ability to correctly estimate our tax obligations around the world;

• our ability to attract and retain key personnel and highly qualified personnel;

• our ability to maintain our brand;

• our ability to prevent serious errors or defects across, and to otherwise maintain the uninterrupted operation of, our network;

• our ability to maintain, protect, and enhance our intellectual property;

• our ability to successfully identify, acquire, and integrate companies and assets;

• the increased expenses associated with being a public company; and

• our anticipated uses of net proceeds from this offering.

We caution you that the foregoing list may not contain all of the forward-looking statements made in this prospectus.

65

You should not rely upon forward-looking statements as predictions of future events. We have based the forward-looking statements contained in this prospectus primarily on our current expectations and projections about future events and trends that we believe may affect our business, financial condition, results of operations, and prospects. The outcome of the events described in these forward-looking statements is subject to risks, uncertainties, and other factors described in the section titled “Risk Factors” and elsewhere in this prospectus. Moreover, we operate in a very competitive and rapidly changing environment. New risks and uncertainties emerge from time to time, and it is not possible for us to predict all risks and uncertainties that could have an impact on the forward-looking statements contained in this prospectus. We cannot assure you that the results, events, and circumstances reflected in the forward-looking statements will be achieved or occur, and actual results, events, or circumstances could differ materially from those described in the forward-looking statements.

The forward-looking statements made in this prospectus relate only to events as of the date on which the statements are made. We undertake no obligation to update any forward-looking statements made in this prospectus to reflect events or circumstances after the date of this prospectus or to reflect new information or the occurrence of unanticipated events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in our forward-looking statements, and you should not place undue reliance on our forward-looking statements. Our forward-looking statements do not reflect the potential impact of any future acquisitions, mergers, dispositions, joint ventures, or investments we may make.

In addition, statements that “we believe” and similar statements reflect our beliefs and opinions on the relevant subject. These statements are based upon information available to us as of the date of this prospectus, and while we believe such information forms a reasonable basis for such statements, such information may be limited or incomplete, and our statements should not be read to indicate that we have conducted an exhaustive inquiry into, or review of, all potentially available relevant information. These statements are inherently uncertain and investors are cautioned not to unduly rely upon these statements.

66

INDUSTRY AND MARKET DATA

This prospectus contains estimates and information concerning our industry, including market size of the markets in which we participate, that are based on industry publications and reports. This information involves a number of assumptions and limitations, and you are cautioned not to give undue weight to these estimates. While we believe that the data we use from third parties are reliable, we have not independently verified the accuracy or completeness of the data contained in these industry publications and reports. The markets in which we operate are subject to a high degree of uncertainty and risk due to a variety of factors, including those described in the section titled “Risk Factors.” These and other factors could cause results to differ materially from those expressed in these publications and reports.

The source of certain statistical data, estimates, and forecasts contained in this prospectus are the following independent industry publications or reports:

• International Data Corporation, Inc.: Worldwide Content Delivery Network Services Forecast, 2018-2022.

• International Data Corporation, Inc.: Worldwide Network Security Forecast, 2018-2022: Hybrid and Multicloud Driving Investment in Core Technologies.

• International Data Corporation, Inc.: Worldwide Web Security Forecast, 2018-2022: Cloud Security Gateways and Web Application Firewalls Drive Market Resurgence.

• International Data Corporation, Inc.: Worldwide DDoS Prevention Products and Services Forecast, 2018-2022.

• International Data Corporation, Inc.: Worldwide Network Security Forecast, 2018-2022: Hybrid and Multicloud Driving Investment in Core Technologies.

• International Data Corporation, Inc.: Application Delivery Qview, 4Q18 Release (March 2019).

• International Data Corporation, Inc.: Datacenter Networks Qview, 4Q18 Release (March 2019).

• Datanyze, Market Share, 2019.

67

USE OF PROCEEDS

We estimate that the net proceeds to us from the sale of shares of our Class A common stock in this offering will be approximately $422.7 million, based upon the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, and after deducting underwriting discounts and commissions and estimated offering expenses. If the underwriters’ option to purchase additional shares of our Class A common stock from us is exercised in full, we estimate that the net proceeds to us would be approximately $486.8 million, after deducting underwriting discounts and commissions and estimated offering expenses.

Each $1.00 increase or decrease in the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, would increase or decrease the net proceeds that we receive from this offering by approximately $32.9 million, assuming that the number of shares offered by us, as set forth on the cover page of this prospectus, remains the same and after deducting the underwriting discounts and commissions. Similarly, each increase or decrease of 1.0 million in the number of shares of our Class A common stock offered by us would increase or decrease the net proceeds that we receive from this offering by approximately $12.2 million, assuming the assumed initial public offering price remains the same and after deducting the underwriting discounts and commissions.

The principal purposes of this offering are to increase our capitalization and financial flexibility, create a public market for our Class A common stock, and enable access to the public equity markets for us and our stockholders.

We intend to use the net proceeds we receive from this offering for general corporate purposes, including working capital, operating expenses, and capital expenditures. Additionally, we may use a portion of the net proceeds we receive from this offering to acquire businesses, products, services, or technologies. However, we do not have agreements or commitments for any material acquisitions at this time. We cannot specify with certainty the particular uses of the net proceeds that we will receive from this offering. Accordingly, we will have broad discretion in using these proceeds. Pending the use of proceeds from this offering as described above, we may invest the net proceeds that we receive in this offering in short-term, investment grade, interest-bearing instruments.

DIVIDEND POLICY

We have never declared or paid any cash dividends on our capital stock. We currently intend to retain any future earnings and do not expect to pay any dividends in the foreseeable future. Any future determination to declare cash dividends will be made at the discretion of our Board of Directors, subject to applicable laws, and will depend on a number of factors, including our financial condition, results of operations, capital requirements, contractual restrictions, general business conditions, and other factors that our Board of Directors may deem relevant.

68

CAPITALIZATION

The following table sets forth cash, cash equivalents, and marketable securities, as well as our capitalization, as of June 30, 2019, as follows:

• on an actual basis;

• on a pro forma basis, giving effect to (i) the Capital Stock Conversions, as if such conversions had occurred on June 30, 2019, (ii) stock-based compensation expense associated with outstanding qualified event options and RSUs subject to a performance condition of $14.7 million for the service period rendered from the date of grant through June 30, 2019 and for the qualified event RSUs for which the service-based condition was satisfied as of June 30, 2019, which we will recognize in connection with this offering, as further described in Note 2 to our consolidated financial statements included elsewhere in this prospectus, and (iii) the filing and effectiveness of our amended and restated certificate of incorporation in Delaware that will become effective immediately prior to the completion of this offering. The pro forma adjustment related to stock-based compensation expense of $14.7 million has been reflected as an increase to additional paid-in capital and accumulated deficit; and

• on a pro forma as adjusted basis, giving effect to (i) the pro forma adjustments set forth above and (ii) the receipt of $422.7 million in net proceeds from the sale and issuance by us of 35,000,000 shares of our Class A common stock in this offering, based upon the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, after deducting underwriting discounts and commissions and estimated offering expenses.

69

The pro forma as adjusted information set forth in the table below is illustrative only and will be adjusted based on the actual initial public offering price and other terms of this offering determined at pricing. You should read this table together with our consolidated financial statements and related notes thereto, and the sections titled “Selected Consolidated Financial and Other Data” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” that are included elsewhere in this prospectus.

	June 30, 2019
	Actual			Pro Forma			Pro Forma as Adjusted(1)
	(in thousands, except share and per share data)
Cash, cash equivalents, and marketable securities	$	124,688		$	124,688		$	547,353
Redeemable convertible preferred stock, par value $0.001 per share: 168,107,981 shares authorized, 165,657,842 shares issued and outstanding, actual; no shares authorized issued and outstanding, pro forma and pro forma as adjusted	$	331,521		$	—		$	—
Stockholders’ (deficit) equity:
Preferred stock, par value $0.001 per share; no shares authorized or issued and outstanding, actual; 225,000,000 shares authorized, no shares issued and outstanding, pro forma and pro forma as adjusted		—			—			—
Class A common stock, par value $0.001 per share: 550,000,000 shares authorized, no shares issued and outstanding, actual; 2,250,000,000 shares authorized, 46,360,728 shares issued and outstanding, pro forma; 2,250,000,000 shares authorized, 81,360,728 shares issued and outstanding, pro forma as adjusted		—			31			66
Class B common stock, par value $0.001 per share: 300,000,000 shares authorized, 92,685,845 shares issued and outstanding, actual; 315,000,000 shares authorized, 211,982,959 shares issued and outstanding, pro forma; 315,000,000 shares authorized, 211,982,959 shares issued and outstanding, pro forma as adjusted		86			220			220
Additional paid-in capital		87,111			433,130			854,791
Accumulated other comprehensive loss		66			66			66
Accumulated deficit		(232,698	)		(247,361	)		(247,361	)
Total stockholders’ (deficit) equity		(145,435	)		186,086			607,782
Total capitalization	$	186,086		$	186,086		$	607,782

⁽¹⁾  Each $1.00 increase or decrease in the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, would increase or decrease, as applicable, the amount of our pro forma as adjusted cash, cash equivalents, and marketable securities, additional paid-in capital, total stockholders’ (deficit) equity, and total capitalization by approximately $32.9 million, assuming that the number of shares offered by us, as set forth on the cover page of this prospectus, remains the same and after deducting underwriting discounts and commissions. An increase or decrease of 1.0 million shares in the number of shares offered by us would increase or decrease, as applicable, the amount of our pro forma as adjusted cash, cash equivalents and marketable securities, additional paid-in capital, total stockholders’ (deficit) equity, and total capitalization by approximately $12.2 million, assuming the assumed initial public offering price remains the same, and after deducting underwriting discounts and commissions.

If the underwriters’ option to purchase additional shares of our Class A common stock were exercised in full, pro forma as adjusted cash, cash equivalents, and marketable securities, additional paid-in capital, total stockholders’ (deficit) equity, total capitalization, and Class A common stock shares outstanding as of June 30, 2019, would be $611.5 million, $918.9 million, $671.9 million, $671.9 million, and 86,610,728 shares, respectively.

The number of shares of our Class A common stock and Class B common stock that will be outstanding after this offering is based on 46,360,728 shares of our Class A common stock (after giving effect to the Capital Stock Conversions) and 211,982,959 shares of our Class B common stock (after giving effect to the Capital Stock Conversions) outstanding as of June 30, 2019, and excludes:

• 23,558,731 shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock outstanding as of June 30, 2019, with a weighted-average exercise price of $2.27 per share;

70

• No shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock granted after June 30, 2019;

• 177,410 shares of our Class B common stock issuable pursuant to warrants to purchase an aggregate of 177,410 shares of our redeemable convertible preferred stock outstanding as of June 30, 2019, with a weighted-average exercise price of $0.34 per share;

• 4,148,564 shares of our Class B common stock subject to RSUs outstanding as of June 30, 2019;

• 2,105,526 shares of our Class B common stock subject to RSUs granted after June 30, 2019; and

• 42,719,132 shares of our Class A common stock reserved for future issuance under our equity compensation plans, consisting of:

• 29,335,000 shares of our Class A common stock to be reserved for future issuance under our 2019 Plan, which will become effective prior to the completion of this offering;

• 7,514,132 shares of our Class B common stock reserved for future issuance under our 2010 Plan, and upon the termination of such 2010 Plan in connection with the effectiveness of the 2019 Plan, up to an equivalent number of shares of our Class A common stock to be added to the shares reserved for future issuance under our 2019 Plan above; and

• 5,870,000 shares of our Class A common stock to be reserved for future issuance under our ESPP, which will become effective prior to the completion of this offering.

Our 2019 Plan and ESPP provide for annual automatic increases in the number of shares of our Class A common stock reserved thereunder, and our 2019 Plan also provides for increases to the number of shares of our Class A common stock that may be granted thereunder based on shares under our 2010 Plan that expire, are forfeited, or otherwise repurchased by us, as more fully described in the section titled “Executive Compensation—Employee Benefits and Stock Plans.”

71

DILUTION

If you invest in our Class A common stock in this offering, your ownership interest will be diluted to the extent of the difference between the initial public offering price per share of our Class A common stock and the pro forma as adjusted net tangible book value per share of our common stock immediately after this offering. Net tangible book value dilution per share to new investors represents the difference between the amount per share paid by purchasers of shares of our Class A common stock in this offering and the pro forma as adjusted net tangible book value per share of our common stock immediately after completion of this offering.

Net tangible book value per share is determined by dividing our total tangible assets less our total liabilities by the number of shares of our common stock outstanding. Our historical net tangible book value as of June 30, 2019 was $159.5 million, or $1.72 per share. Our pro forma net tangible book value as of June 30, 2019 was $159.5 million, or $0.62 per share, based on the total number of shares of our Class A common stock and Class B common stock outstanding as of June 30, 2019, after giving effect to the Capital Stock Conversions.

After giving effect to the sale by us of 35,000,000 shares of our Class A common stock in this offering, at the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, and after deducting underwriting discounts and commissions and estimated offering expenses, our pro forma as adjusted net tangible book value as of June 30, 2019 would have been $581.2 million, or $1.98 per share. This represents an immediate increase in pro forma net tangible book value of $1.36 per share to our existing stockholders and an immediate dilution in pro forma net tangible book value of $11.02 per share to investors purchasing shares of our Class A common stock in this offering at the assumed initial public offering price. The following table illustrates this dilution:

Assumed initial public offering price per share			$	13.00
Pro forma net tangible book value per share as of June 30, 2019	$	0.62
Increase in pro forma net tangible book value per share attributable to new investors purchasing shares of Class A common stock in this offering		1.36
Pro forma as adjusted net tangible book value per share after this offering				1.98
Dilution in pro forma as adjusted net tangible book value per share to new investors in this offering			$	11.02

Each $1.00 increase or decrease in the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, would increase or decrease, as applicable, our pro forma as adjusted net tangible book value per share after this offering by $0.11, and would increase or decrease, as applicable, dilution in pro forma as adjusted net tangible book value per share to new investors purchasing shares of our Class A common stock in this offering by $0.89, assuming that the number of shares offered by us, as set forth on the cover page of this prospectus, remains the same and after deducting underwriting discounts and commissions. Similarly, each increase or decrease of 1.0 million shares in the number of shares of our Class A common stock offered by us would increase or decrease, as applicable, our pro forma as adjusted net tangible book value by approximately $0.03 per share and increase or decrease, as applicable, the dilution in pro forma as adjusted net tangible book value per share to new investors purchasing shares of our Class A common stock in this offering by $0.03 per share, assuming the assumed initial public offering price remains the same, and after deducting underwriting discounts and commissions.

If the underwriters’ option to purchase additional shares of our Class A common stock were exercised in full, the pro forma as adjusted net tangible book value per share of our common stock would be

72

$2.16 per share, and the dilution in pro forma net tangible book value per share to new investors purchasing shares of our Class A common stock in this offering would be $10.84 per share.

The following table summarizes, on a pro forma as adjusted basis, as described above, as of June 30, 2019 after giving effect to the sale of shares of Class A common stock by us in this offering at an assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, the difference between existing stockholders and new investors with respect to the number of shares of common stock purchased from us, the total consideration paid to us and the average price per share paid or to be paid to us at an assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, before deducting the underwriting discounts and commissions and estimated offering expenses:

	Shares Purchased					Total Consideration					Average Price per Share
	Number		Percent			Amount		Percent
	(in thousands)
Existing stockholders		258,344		88.1	%	$	359,397		44.1	%	$	1.39
New public investors		35,000		11.9			455,000		55.9			13.00
Total		293,344		100	%		814,397		100	%

Each $1.00 increase or decrease in the assumed initial public offering price of $13.00 per share, which is the midpoint of the offering price range set forth on the cover page of this prospectus, would increase or decrease total consideration paid by new investors and total consideration paid by all stockholders by $32.9 million, assuming that the number of shares offered by us, as set forth on the cover page of this prospectus, remains the same and after deducting the underwriting discounts and commissions.

Except as otherwise indicated, the above discussion and tables assume no exercise of the underwriters’ option to purchase additional shares of our Class A common stock from us. If the underwriters’ option to purchase additional shares of our Class A common stock were exercised in full, our existing stockholders would own 86.5% and our new investors would own 13.5% of the total number of shares of our common stock outstanding upon completion of this offering.

To the extent that any outstanding options to purchase our common stock are exercised, RSUs are settled or new awards are granted under our equity compensation plans, there will be further dilution to investors participating in this offering.

The number of shares of our Class A common stock and Class B common stock that will be outstanding after this offering is based on 46,360,728 shares of our Class A common stock (after giving effect to the Capital Stock Conversions) and 211,982,959 shares of our Class B common stock (after giving effect to the Capital Stock Conversions) outstanding as of June 30, 2019, and excludes:

• 23,558,731 shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock outstanding as of June 30, 2019, with a weighted-average exercise price of $2.27 per share;

• No shares of our Class B common stock issuable upon the exercise of options to purchase shares of our Class B common stock granted after June 30, 2019;

• 177,410 shares of our Class B common stock issuable pursuant to warrants to purchase an aggregate of 177,410 shares of our redeemable convertible preferred stock outstanding as of June 30, 2019, with a weighted-average exercise price of $0.34 per share;

73

• 4,148,564 shares of our Class B common stock subject to RSUs outstanding as of June 30, 2019;

• 2,105,526 shares of our Class B common stock subject to RSUs granted after June 30, 2019;

• 42,719,132 shares of our Class A common stock reserved for future issuance under our equity compensation plans, consisting of:

• 29,335,000 shares of our Class A common stock to be reserved for future issuance under our 2019 Plan, which will become effective prior to the completion of this offering;

• 7,514,132 shares of our Class B common stock reserved for future issuance under our 2010 Plan, and upon the termination of such 2010 Plan in connection with the effectiveness of the 2019 Plan, up to an equivalent number of shares of our Class A common stock to be added to the shares reserved for future issuance under our 2019 Plan above; and

• 5,870,000 shares of our Class A common stock to be reserved for future issuance under our ESPP, which will become effective prior to the completion of this offering.

Our 2019 Plan and ESPP provide for annual automatic increases in the number of shares of our Class A common stock reserved thereunder, and our 2019 Plan also provides for increases to the number of shares of our Class A common stock that may be granted thereunder based on shares under our 2010 Plan that expire, are forfeited, or otherwise repurchased by us, as more fully described in the section titled “Executive Compensation—Employee Benefits and Stock Plans.”

74

SELECTED CONSOLIDATED FINANCIAL AND OTHER DATA

The following selected consolidated financial and other data should be read in conjunction with “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and the consolidated financial statements and related notes thereto included elsewhere in this prospectus. The selected consolidated statements of operations data presented below for the years ended December 31, 2016, 2017, and 2018 (except for the pro forma share and pro forma net loss per share information) and the consolidated balance sheet data as of December 31, 2017 and 2018, are derived from our audited consolidated financial statements that are included elsewhere in this prospectus. The selected consolidated statements of operations data presented below for the six months ended June 30, 2018 and 2019 and the consolidated balance sheet data as of June 30, 2019 are derived from our unaudited interim consolidated financial statements that are included elsewhere in this prospectus. In management’s opinion, the unaudited interim consolidated financial statements include all adjustments necessary to state fairly our financial position as of June 30, 2019 and the results of operations and cash flows for the six months ended June 30, 2018 and 2019. Our historical results are not necessarily indicative of our future results and our results for the six months ended June 30, 2019 are not necessarily indicative of the results that may be expected for the full year ending December 31, 2019 or any other period. The selected consolidated financial data in this section are not intended to replace the consolidated financial statements and are qualified in their entirety by the consolidated financial statements and related notes thereto included elsewhere in this prospectus.

Consolidated Statements of Operations Data:

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(in thousands, except per share data)
Revenue	$	84,791		$	134,915		$	192,674		$	87,105		$	129,151
Cost of revenue(1)		23,962			28,788			43,537			19,372			29,192
Gross profit		60,829			106,127			149,137			67,733			99,959
Operating expenses:
Sales and marketing(1)		40,122			61,899			94,394			41,744			66,653
Research and development(1)		23,663			33,650			54,463			24,286			36,517
General and administrative(1)		14,073			20,308			85,179			33,041			33,707
Total operating expenses		77,858			115,857			234,036			99,071			136,877
Loss from operations		(17,029	)		(9,730	)		(84,899	)		(31,338	)		(36,918	)
Non-operating income (expense):
Interest income		626			762			1,895			460			1,743
Interest expense		(654	)		(862	)		(992	)		(475	)		(563	)
Other income (expense), net		(208	)		115			(2,091	)		(663	)		(379	)
Total non-operating income (expense), net		(236	)		15			(1,188	)		(678	)		801
Loss before income taxes		(17,265	)		(9,715	)		(86,087	)		(32,016	)		(36,117	)
Provision for income taxes		69			1,033			1,077			472			703
Net loss	$	(17,334	)	$	(10,748	)	$	(87,164	)	$	(32,488	)	$	(36,820	)
Net loss per share attributable to common stockholders, basic and diluted(2)	$	(0.23	)	$	(0.14	)	$	(1.08	)	$	(0.41	)	$	(0.43	)
Weighted-average shares used in computing net loss per share attributable to common stockholders, basic and diluted(2)		75,721			77,147			80,981			78,828			85,382
Pro forma net loss per share, basic and diluted(2)							$	(0.37	)				$	(0.15	)
Weighted-average shares used in computing pro forma net loss per share, basic and diluted(2)								237,322						251,085

75

⁽¹⁾  Includes stock-based compensation expense as follows:

	Year Ended December 31,						Six Months Ended June 30,
	2016		2017		2018		2018		2019
	(in thousands)
Cost of revenue	$	64	$	47	$	119	$	50	$	66
Sales and marketing		381		488		979		388		554
Research and development		1,043		969		1,532		617		823
General and administrative		4,212		1,251		24,717		794		658
Total stock-based compensation expense	$	5,700	$	2,755	$	27,347	$	1,849	$	2,101

⁽²⁾  Refer to Note 11 to our consolidated financial statements included elsewhere in this prospectus for an explanation of the method used to calculate our basic and diluted net loss per share attributable to common stockholders, our basic and diluted pro forma net loss per share attributable to common stockholders, and the weighted-average number of shares used in the computation of the per share amounts.

Consolidated Balance Sheet Data:

	December 31,
	2017			2018			June 30, 2019
	(in thousands)
Cash, cash equivalents, and marketable securities	$	73,407		$	160,657		$	124,688
Working capital(1)	$	64,861		$	135,358		$	88,518
Property and equipment, net	$	51,423		$	73,210		$	84,640
Total assets	$	163,143		$	298,380		$	286,859
Deferred revenue, current and noncurrent	$	12,134		$	17,037		$	27,764
Redeemable convertible preferred stock	$	181,546		$	331,521		$	331,521
Accumulated deficit	$	(108,714	)	$	(195,878	)	$	(232,698	)
Total stockholders’ deficit	$	(59,834	)	$	(113,505	)	$	(145,435	)

⁽¹⁾  Working capital is defined as current assets less current liabilities.

76

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with the section titled “Selected Consolidated Financial and Other Data” and our consolidated financial statements and related notes thereto included elsewhere in this prospectus. This discussion contains forward-looking statements that involve risks and uncertainties. Our actual results could differ materially from those discussed below. Factors that could cause or contribute to such differences include, but are not limited to, those identified below and those discussed in the section titled “Risk Factors” included elsewhere in this prospectus.

Overview

Cloudflare’s mission is to help build a better Internet.

Key Milestones Annualized Billings $250M $200M $150M $100M $50M $0 TechCrunch Disrupt's Most Innovative Company 2010 Launch page views Wan Optimization could WAF First Free SSL Project Galileo Strategic Investments from Google Microsoft, Baidu, and Qualcomm Enter China Virtual DNS Load Balancing Rate Limiting 100th Data Center Serverless Platform Video Services App Platform Smart Routing loT Security IBM Partnership Spectrum Consumer DNS Access 2010 2011 2012 2013 2014 2015 2016 2017 2018 Firewall Network Spans to 100th City Intelligent Routing Zero Trust Security DNS Resolver Multi-Protocol Network Performance and Security

77

We have built a global cloud platform that delivers a broad range of network services to businesses of all sizes and in all geographies—making them more secure, enhancing the performance of their business-critical applications, and eliminating the cost and complexity of managing individual network hardware. Our platform serves as a scalable, easy-to-use, unified control plane to deliver security, performance, and reliability across their on-premise, hybrid, cloud, and software-as-a-service (SaaS) applications.

We started by building an efficient, scalable network. This network forms the basis of our platform on which we can rapidly develop and deploy our products for our customers. Together the development of our network and products create the interconnected flywheels that drive our business and have allowed us to achieve our market position.

Since our inception, our focus on innovation and dedication to customer experience has allowed us to achieve the numerous key milestones displayed above. Over time as we have launched new products on our platform, our Annualized Billings have grown significantly. For additional information on how we calculate Annualized Billings see “—Our Business Model.”

Opportunities, Challenges, and Risks

We believe that the growth of our business and our future success are dependent upon many factors, including growing our customer base, expanding our relationships with existing paid customers, developing and successfully launching new products, expanding into additional market segments, expanding our base of free customers, and developing and maintaining favorable peering and co-location relationships. Each of these factors presents significant opportunities for us, but also poses material challenges and risks that we must successfully address in order to grow our business and improve our operating results. We expect that addressing these challenges and risks will increase our operating expenses significantly over the next several years. The timing of our future profitability, if we achieve profitability at all, will depend upon many variables, including the success of our growth strategies and the timing and size of investments and expenditures that we choose to undertake, as well as market growth and other factors that are not within our control. In addition, we must comply with evolving laws, rules, and regulatory requirements across federal, state, and international jurisdictions. If we fail to successfully address these challenges, risks, and variables, our business, operating results, financial condition, and prospects may be adversely affected. Refer to the sections titled “Risk Factors” and “Business—Growth Strategy” for additional information on the challenges and risks we face.

Our Business Model

Our business model benefits from our ability to serve the needs of all customers ranging from individual developers on free and self-serve plans to the largest enterprises, in a cost-effective manner. Our products are easy to deploy and allow for rapid and efficient onboarding of new customers and expansion of our relationships with customers over time. Given the large customer base we have and the immense amount of Internet traffic that we manage, we are able to negotiate mutually beneficial agreements with Internet Service Providers (ISPs) that allow us to place our equipment directly in their data centers, which dramatically drives down our bandwidth and co-location expenses. This symbiotic relationship that we have with ISPs and the efficiency of our serverless network architecture allows us to introduce new products on our platform at low marginal cost. The cost efficiency of our model has allowed us to grow revenue significantly faster than our cost of revenue. Between the three months ended March 31, 2016 and the three months ended June 30, 2019, our revenue increased by 247% with only a 146% increase in cost of revenue.

78

Quarterly Revenue and Cost of Revenue $80M $60M $40M $20M $0 Q1 2016 Q4 2016 Q4 2017 Q4 2018 Q2 2019 Revenue Cost of Revenue Revenue Growth: 247% Cost of Revenue Growth: 146%

We generate revenue primarily from sales to our customers of subscriptions to access our platform. For our self-serve paying customers, we offer Pro and Business plans per registered domain, and it is common for customers to purchase subscriptions to cover multiple Internet properties (e.g., domains, websites, application programming interfaces (APIs), and mobile applications). Our Pro plan provides basic functionality to improve the security, performance, and reliability of applications, such as enhanced web application firewall and image and mobile optimization. Our Business plan includes additional functionality often required by larger organizations, including service level agreements of 100% uptime, dynamic content acceleration, and enhanced customer support. While our Pro and Business plans offer significant value to customers, customers can subscribe to add-on products and platform functionality we offer to meet their more advanced needs. This includes Cloudflare Argo, which enables intelligent routing using our private network, and Cloudflare Workers, which allows developers to deploy code at the edge of our network to enhance existing, or create new, applications more efficiently and rapidly.

Our pricing model reflects the flexibility and value that our customers have come to expect from our platform. Our self-serve customers typically pay with a credit card on a monthly basis. Our enterprise customers, which consist of customers that sign up for our Enterprise plan, have contracts that range from one to three years and are typically billed on a monthly basis. Our implementation period is extremely short with most self-serve customers implementing our services within a matter of minutes and our enterprise sales cycle typically lasting less than one quarter. Our agreements with enterprise customers are tailored and priced to meet their varying needs and requirements. Enterprise pricing agreements generally include a base subscription and a smaller portion based on usage. We have had an increasing number of customers with Annualized Billings greater than $100,000 and we have customers with Annualized Billings in excess of $3 million.

79

We offer a variety of plans to our free and paying customers depending on their required features and functionality. The below chart is an illustrative view of what we provide our customers as part of the different plans, but is not a full comprehensive list of our product offerings.

FREE PRO BUSINESS ENTERPRISE Multiple custom SSL certificate SSL Shared SSL certificates Shared SSL certificates Custom SSL Certificates uploads Enterprise-grade DDoS DDoS Unmetered DDoS Unmetered DDoS Unmetered DDoS protection Content Delivery DNSSEC AMP Firewall Rules 5 20 100 Unlimited Page Rules 5 20 50 100 Network Prioritization Good Better Best Cloud Firewall Image and Mobile Optimization Image Resizing Dynamic Content Acceleration CNAME Setup Role Based Account Access Single Sign On Support Access to Raw Logs Access to China Data Centers (Additional Cost) SLA 100% uptime SLA 2500% uptime SLA 24x7x365 phone support w/ Support Email only Prioritized email only 24x7x365 chat support named solution engineer

We are uniquely positioned due to our distinct advantages to grow with our customers as they add new Internet properties or expand the usage of our global cloud platform within their organizations. We have grown our Annualized Billings with our paying customer base over time as the needs of those organizations grow and expand as well. To measure Annualized Billings, we take the billings for each customer in the final month of a period and multiply that amount by 12. This measure provides us a view of what our billings would be had the customer been using our platform for an entire calendar year. Our Annualized Billings calculation excludes (i) our strategic agreement with Baidu and (ii) other agreements that were not entered into through our ordinary sales channels and that together represent an insignificant amount of our 2018 revenue. We include both month-to-month subscriptions and contractual agreements in the calculation of Annualized Billings. Our Annualized Billings metric also includes any usage charges by a customer during a period, which represent a small portion of our total billings and may not be recurring. As a result, Annualized Billings may be higher than actual billings over the course of the year. For example, if we signed a new customer that was billed for $200 in

80

December, that customer would account for $2,400 of Annualized Billings for that year. The below chart illustrates the growth in Annualized Billings for cohorts of customers that first became paying customers in each of the years from 2011 to 2018, and demonstrates how we attract new paying customers and expand their Annualized Billings with us over time.

Customer Cohorts Annualized Billings $250M $200M $150M $100M $50M $0 2018 2017 2016 2015 2014 2013 2012 and prior 2012 2013 2014 2015 2016 2017

Our business model has allowed us to grow our paying customers and revenue rapidly over the past several years. In 2016, 2017, and 2018, we generated revenue of $84.8 million, $134.9 million, and $192.7 million, respectively, representing year-over-year growth of 59% and 43%, respectively. In the six months ended June 30, 2018 and 2019, we generated revenue of $87.1 million and $129.2 million, respectively, representing growth of 48%. We generated net losses of $17.3 million, $10.7 million, and $87.2 million for 2016, 2017, and 2018, respectively, and $32.5 million and $36.8 million for the six months ended June 30, 2018 and 2019, respectively.

Key elements of our business model include:

• Free customer base—Free customers are an important part of our business. These customers sign up for our service through our self-serve portal and are typically individual developers, early stage startups, hobbyists, and other users. Our free customers create scale, serve as efficient brand marketing, and help us attract developers, customers, and potential employees. These free customers expose us to diverse traffic, threats, and problems, often allowing us to see potential security, performance, and reliability issues at the earliest stage. This knowledge allows us to improve our products and deliver more effective solutions to our paid customers. In addition, the added scale and diversity of this traffic makes us valuable to a diverse set of global ISPs, improving the breadth and economic terms of our interconnections, bandwidth costs, and co-location expenses. Finally, the enthusiastic engagement of our free customer base represents a “virtual quality assurance” function that allows us to maintain a high rate of product innovation, while ensuring products are extensively tested in real world environments before they are deployed to enterprise customers.

81

• Significant investment in ongoing product development—We invest significantly in research and development. Our focus on research and development allows us to continuously enhance the capabilities and functionality of our global cloud platform with new products that are innovative and powerful and can be quickly adopted by our customers and helps us grow our free and paying customer base, which allows us to serve a greater portion of the world’s Internet traffic. That in turn provides us with greater knowledge and insight into the challenges that Internet users face every day.

• Investments in our network for growth—We believe that the size, sophistication, and distributed nature of our network provide us with a significant competitive advantage and have driven our high revenue growth rate. We intend to continue to make substantial investments in network infrastructure to support the growth of our business. As we invest in our network, we believe the service that we can provide our customers and the insight and knowledge that we can gain will continue to grow.

• Efficient go-to-market model—Since our inception, we have built an efficient go-to market model that reflects the flexibility and ease of use our platform offers to our customers around the world. This has enabled us to acquire new customers as well as to expand within our existing customer base in an extremely rapid and cost-effective manner. In particular, we have invested heavily in our enterprise sales efforts, and as a result of those investments, the number of customers with Annualized Billings of greater than $100,000 grew from 240 as of June 30, 2018 to 408 as of June 30, 2019, a 70% increase year-over-year. This increase was due to new customer acquisitions as well as the expansion of Annualized Billings with existing customers.

• New customer acquisition—We believe that any person or business that relies on the Internet to deliver products, services, or content can be a Cloudflare customer. As such, we are focused on driving an increased number of customers on our platform to support our long-term growth. Through our self-serve offering, a new customer can subscribe to one of our many plans and begin using our platform within minutes, with minimal technical skill and no professional services. This has allowed us to acquire a large portion of paying customers very rapidly and at significantly lower customer acquisition costs. Additionally, we continue to invest to build our direct sales force and improve the sophistication of our sales operations.

• Expansion of existing customers—We believe that our platform enables a large opportunity for growth within our existing customer base given the breadth of products we offer on our platform. Our relationships with customers often start with servicing a portion of their overall network needs and expand over time as they realize the significant value we deliver. Once a customer has adopted one product on our platform it can easily add additional products with a single click. As we add more products and functionality to our platform, we see opportunities to drive upsell as customers seek to consolidate onto one platform to meet all of their security, performance, and reliability network requirements. Over 70% of our enterprise customers already leverage four or more of our products.

• International reach—Our global network, with a presence in 194 cities in over 90 countries, has helped to foster our strong international growth. International markets represented over 50% of our revenue in the years ended December 31, 2017 and 2018, and in the six months ended June 30, 2019, and we intend to continue to invest in our international growth as a strategy to expand our customer base around the world.

82

Key Business Metrics and Non-GAAP Financial Measures

We review a number of operating and financial metrics, including the following key metrics and non-GAAP financial measures to evaluate our business, measure our performance, identify trends affecting our business, formulate business plans, and make strategic decisions.

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(dollars in thousands)
Gross profit	$	60,829		$	106,127		$	149,137		$	67,733		$	99,959
Gross margin		72	%		79	%		77	%		78	%		77	%
Loss from operations	$	(17,029	)	$	(9,730	)	$	(84,899	)	$	(31,338	)	$	(36,918	)
Non-GAAP loss from operations	$	(11,291	)	$	(6,513	)	$	(57,035	)	$	(29,227	)	$	(34,754	)
Operating margin		(20	%)		(7	%)		(44	%)		(36	%)		(29	%)
Non-GAAP operating margin		(13	%)		(5	%)		(30	%)		(34	%)		(27	%)
Net cash provided by (used in) operating activities	$	(13,318	)	$	3,167		$	(43,281	)	$	(17,099	)	$	(12,557	)
Net cash provided by (used in) investing activities	$	(15,256	)	$	9,544		$	(120,795	)	$	15,604		$	27,847
Net cash provided by (used in) financing activities	$	418		$	(149	)	$	168,621		$	3,163		$	2,049
Free cash flow	$	(31,876	)	$	(19,808	)	$	(78,120	)	$	(27,022	)	$	(39,018	)
Net cash provided by (used in) operating activities (as a percentage of revenue)		(16	%)		2	%		(22	%)		(20	%)		(10	%)
Free cash flow margin		(38	%)		(15	%)		(40	%)		(31	%)		(30	%)
Paying customers		35,002			49,309			67,899			56,119			74,873
Paying customers (> $100,000 Annualized Billings)		95			184			313			240			408

Non-GAAP Financial Measures

In addition to our results determined in accordance with generally accepted accounting principles in the United States (U.S. GAAP), we believe the following non-GAAP measures are useful in evaluating our operating performance. We use the following non-GAAP financial information to evaluate our ongoing operations and for internal planning and forecasting purposes. We believe that non-GAAP financial information, when taken collectively, may be helpful to investors because it provides consistency and comparability with past financial performance. However, non-GAAP financial information is presented for supplemental informational purposes only, has limitations as an analytical tool and should not be considered in isolation or as a substitute for financial information presented in accordance with U.S. GAAP. In particular, free cash flow is not a substitute for cash provided by (used in) operating activities. Additionally, the utility of free cash flow as a measure of our liquidity is further limited as it does not represent the total increase or decrease in our cash balance for a given period. In addition, other companies, including companies in our industry, may calculate similarly-titled non-GAAP measures differently or may use other measures to evaluate their performance, all of which could reduce the usefulness of our non-GAAP financial measures as tools for comparison. A reconciliation is provided below for each non-GAAP financial measure to the most directly comparable financial measure stated in accordance with U.S. GAAP. Investors are encouraged to review the related U.S. GAAP financial measures and the reconciliation of these non-GAAP financial measures to their most directly comparable U.S. GAAP financial measures, and not to rely on any single financial measure to evaluate our business.

83

Non-GAAP Loss from Operations and Non-GAAP Operating Margin

We define non-GAAP loss from operations and non-GAAP operating margin as U.S. GAAP loss from operations and U.S. GAAP operating margin, respectively, excluding stock-based compensation expense and amortization of acquired intangible assets. We exclude stock-based compensation expense, which is a non-cash expense, from certain of our non-GAAP financial measures because we believe that excluding this item provides meaningful supplemental information regarding operational performance. We exclude amortization of intangible assets, which is a non-cash expense, related to business combinations from certain of our non-GAAP financial measures because such expenses are related to business combinations and have no direct correlation to the operation of our business.

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(dollars in thousands)
Loss from operations	$	(17,029	)	$	(9,730	)	$	(84,899	)	$	(31,338	)	$	(36,918	)
Add:
Stock-based compensation expense		5,700			2,755			27,347			1,849			2,101
Amortization of acquired intangible assets		38			462			517			262			63
Non-GAAP loss from operations	$	(11,291	)	$	(6,513	)	$	(57,035	)	$	(29,227	)	$	(34,754	)
Operating margin		(20	%)		(7	%)		(44	%)		(36	%)		(29	%)
Non-GAAP operating margin (non-GAAP loss from operations as a percentage of revenue)		(13	%)		(5	%)		(30	%)		(34	%)		(27	%)

Free Cash Flow and Free Cash Flow Margin

Free cash flow is a non-GAAP financial measure that we calculate as net cash provided by (used in) operating activities less cash used for purchases of property and equipment and capitalized internal-use software. Free cash flow margin is calculated as free cash flow divided by revenue. We believe that free cash flow and free cash flow margin are useful indicators of liquidity that provide information to management and investors about the amount of cash generated from our operations that, after the investments in property and equipment and capitalized internal-use software, can be used for strategic initiatives, including investing in our business, and strengthening our financial position. We believe that historical and future trends in free cash flow and free cash flow margin, even if negative, provide useful information about the amount of cash generated (or consumed) by our operating activities that is available (or not available) to be used for strategic initiatives. For example, if free cash flow is negative, we may need to access cash reserves or other sources of capital to invest in strategic initiatives. One limitation of free cash flow and free cash flow margin is that they do not reflect our future contractual commitments. Additionally, free cash flow does not represent the total increase or decrease in our cash balance for a given period.

84

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(dollars in thousands)
Net cash provided by (used in) operating activities	$	(13,318	)	$	3,167		$	(43,281	)	$	(17,099	)	$	(12,557	)
Less: Purchases of property and equipment		(15,898	)		(19,031	)		(25,466	)		(6,307	)		(18,990	)
Less: Capitalized internal-use software		(2,660	)		(3,944	)		(9,373	)		(3,616	)		(7,471	)
Free cash flow	$	(31,876	)	$	(19,808	)	$	(78,120	)	$	(27,022	)	$	(39,018	)
Net cash provided by (used in) investing activities	$	(15,256	)	$	9,544		$	(120,795	)	$	15,604		$	27,847
Net cash provided by (used in) financing activities	$	418		$	(149	)	$	168,621		$	3,163		$	2,049
Net cash provided by (used in) operating activities (as a percentage of revenue)		(16	%)		2	%		(22	%)		(20	%)		(10	%)
Less: Purchases of property and equipment (as a percentage of revenue)		(19	%)		(14	%)		(13	%)		(7	%)		(15	%)
Less: Capitalized internal-use software (as a percentage of revenue)		(3	%)		(3	%)		(5	%)		(4	%)		(5	%)
Free cash flow margin		(38	%)		(15	%)		(40	%)		(31	%)		(30	%)

Key Business Metrics

Paying Customers

We believe our ability to grow the number of paying customers on our platform provides a key indicator of the growth of our business and our future business opportunities. We define a paying customer at the end of any period as a person or entity who has been billed for our services in the last month of the period, excluding (i) Baidu and (ii) other customers that were not acquired through ordinary sales channels. An entity is defined as a company, a government institution, a non-profit organization, or a distinct business unit of a large company that has an active contract with us or one of our partners. The number of paying customers was 35,002, 49,309, and 67,899 as of December 31, 2016, 2017, and 2018, respectively, and 56,119 and 74,873 for the six months ended June 30, 2018 and 2019, respectively.

Paying Customers (> $100,000 Annualized Billings)

While we continue to grow customers across all sizes, over time, our large customers have contributed an increasing share of our revenue. We view the number of customers with Annualized Billings greater than $100,000 as indicative of our penetration within large enterprise accounts. The number of paying customers with Annualized Billings greater than $100,000 was 95, 184, and 313 as of December 31, 2016, 2017, and 2018, respectively, and 240 and 408 for the six months ended June 30, 2018 and 2019, respectively. We believe this trend will continue as customers increasingly adopt cloud technology and we are able to supplant an increasing share of our customers’ legacy hardware solutions by adding new capabilities to our global cloud platform.

85

Dollar-Based Net Retention Rate

Our ability to maintain long-term revenue growth and achieve profitability is dependent on our ability to retain and grow revenue generated from our existing paid customers. We believe that we will achieve these objectives by continuing to focus on customer loyalty and adding additional products and functionality to our platform. Our dollar-based net retention rate is a key way we measure our performance in these areas. Dollar-based net retention measures our ability to retain and expand recurring revenue from existing customers. To calculate dollar-based net retention for a period, we compare the Annualized Billings from paid customers 12 months prior to the Annualized Billings from the same set of customers in the last month of the current period. Our dollar-based net retention includes any expansion and is net of contraction and attrition, but excludes Annualized Billings from new customers in the current period. Our dollar-based net retention excludes the benefit of free customers which upgrade to a paid subscription between the prior and current periods, even though this is an important source of incremental growth. We believe this provides a more meaningful representation of our ability to add incremental business from existing paid customers as they renew and expand their contracts. Our dollar-based net retention rates over the trailing eight quarters for the period ended June 30, 2019 were 111.7%, 113.1%, 114.4%, 113.6%, 114.4%, 110.5%, 115.6%, and 111.3%, respectively.

Components of Our Results of Operations

Revenue

We generate revenue primarily from sales to our customers of subscriptions to access our platform, together with related support services. Arrangements with customers generally do not provide the customer with the right to take possession at any time of our software operating our global cloud platform. Instead, customers are granted continuous access to our platform and products over the contractual period. A time-elapsed output method is used to measure progress because we transfer control evenly over the contractual period. Accordingly, the fixed consideration related to subscription and support revenue is generally recognized on a straight-line basis over the contract term beginning on the date that the service is made available to the customer. Usage-based consideration is primarily related to fees charged for our customer’s use of excess bandwidth when accessing our platform in a given period and is recognized as revenue in the period in which the usage occurs.

The typical subscription and support term for our enterprise customers is one year and subscription and support term lengths range from one to three years. Most of our contracts with enterprise customers are non-cancelable over the contractual term. Customers typically have the right to terminate their contracts for cause if we fail to perform in accordance with the contractual terms. For our self-serve customers, subscription and support terms are typically monthly.

Cost of Revenue

Cost of revenue consists primarily of expenses that are directly related to providing our service to our paying customers. These expenses include expenses related to operating in co-location facilities, network and bandwidth costs, depreciation of our equipment located in co-location facilities, certificate authority services costs for paying customers, related overhead costs, the amortization of our capitalized internal-use software, and the amortization of acquired developed technologies. Cost of revenue also includes employee-related costs, including salaries, bonuses, benefits, and stock-based compensation for employees whose primary responsibilities relate to supporting our paying customers and delivering paid customer support. Other costs included in cost of revenue include credit card fees related to processing customer transactions and allocated overhead costs.

As our customers expand and increase the use of our global cloud platform driven by additional applications and connected devices, we expect that our cost of revenue will increase due to higher

86

network and bandwidth costs and expenses related to operating in additional co-location facilities. However, we expect to continue to benefit from economies of scale as our customers increase the use of our global cloud platform. We intend to continue to invest additional resources in our global cloud platform and our customer support organizations as we grow our business. The level and timing of investment in these areas could affect our cost of revenue in the future.

Gross Profit and Gross Margin

Gross profit is revenue less cost of revenue and gross margin is gross profit as a percentage of revenue. Our gross profit and gross margin have and are expected to continue to fluctuate from period to period due to the timing of acquisition of new customers and our renewals with existing customers, expenses related to operating in co-location facilities and network and bandwidth costs to operate and expand our global cloud platform, and amortization of costs associated with capitalized internal-use software. We expect our gross profit to increase in absolute dollars and our gross margin to remain consistent over the long term, although our gross margin could fluctuate from period to period depending on the interplay of all of these factors.

Operating Expenses

Sales and Marketing

Sales and marketing expenses consist primarily of employee-related costs, including salaries, benefits, and stock-based compensation expense, sales commissions that are recognized as expenses over the period of benefit, marketing programs, certificate authority services costs for free customers, travel-related expenses, bandwidth and co-location costs for free customers, and allocated overhead costs. Sales commissions earned by our sales force and the associated payroll taxes that are direct and incremental to the acquisition of channel partner and direct customer contracts are deferred and amortized over an estimated period of benefit of three years for the initial acquisition of a contract and over the contractual term of the renewals for renewal contracts. We plan to continue to invest in sales and marketing to grow our customer base and increase our brand awareness, including marketing efforts to continue to drive our self-serve business model. As a result, we expect our sales and marketing expenses to increase in absolute dollars for the foreseeable future. We also anticipate a significant increase in sales and marketing expenses from the stock-based compensation expense related to RSUs that have both service-based and performance vesting conditions. However, we expect our sales and marketing expenses to decrease as a percentage of our revenue over the long term, although our sales and marketing expenses may fluctuate as a percentage of our revenue from period to period due to the timing and extent of these expenses.

Research and Development

Research and development costs consist primarily of employee-related costs, including salaries, bonuses, benefits, and stock-based compensation expense, consulting costs, depreciation of equipment used in research and development, and allocated overhead costs. Research and development costs support our efforts to add new features to our existing offerings and to ensure the security, performance, and reliability of our global cloud platform. We expect our research and development expenses to increase in absolute dollars for the foreseeable future as we continue to invest in research and development efforts to enhance the functionality of our global cloud platform. We also anticipate a significant increase in research and development expenses from the stock-based compensation expense related to RSUs that have both service-based and performance vesting conditions. However, we expect our research and development expenses to decrease as a percentage of our revenue over the long term, although our research and development expenses may fluctuate as a percentage of our revenue from period to period due to the timing and extent of these expenses.

87

General and Administrative

General and administrative expenses consist primarily of employee-related costs, including salaries, bonuses, benefits, and stock-based compensation expense for our finance, legal, human resources, and other administrative personnel, professional fees for external legal services, accounting, and other consulting services, bad debt expense, and allocated overhead costs. We expect our general and administrative expenses to continue to increase in absolute dollars for the foreseeable future to support our growth as well as due to additional costs associated with legal, accounting, compliance, insurance, investor relations, and other costs as we become a public company. We also anticipate a significant increase in general and administrative expenses from the stock-based compensation expense related to RSUs that have both service-based and performance vesting conditions. However, we expect our general and administrative expenses to decrease as a percentage of our revenue over the long term, although our general and administrative expenses may fluctuate as a percentage of our revenue from period to period due to the timing and extent of these expenses.

Non-Operating Income (Expense)

Interest Income

Interest income consists primarily of interest earned on our cash, cash equivalents, and marketable securities.

Interest Expense

Interest expense consists primarily of interest related to interest on our built-to-suit lease financing obligation and interest on our outstanding notes payable.

Other Income (Expense), Net

Other income (expense), net consists primarily of expenses resulting from the revaluation of our redeemable convertible preferred stock warrant liability and foreign currency transaction gains and losses.

Provision for Income Taxes

Provision for income taxes consists primarily of income taxes in certain foreign jurisdictions in which we conduct business, as well as state income taxes in the United States. We maintain a full valuation allowance on our federal and state deferred tax assets as we have concluded that it is more likely than not that the deferred tax assets will not be realized.

88

Results of Operations

The following tables set forth our consolidated results of operations for the periods presented in dollars and as a percentage of our revenue for those periods:

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
	(dollars in thousands)
Revenue	$	84,791		$	134,915		$	192,674		$	87,105		$	129,151
Cost of revenue(1)		23,962			28,788			43,537			19,372			29,192
Gross profit		60,829			106,127			149,137			67,733			99,959
Operating expenses:
Sales and marketing(1)		40,122			61,899			94,394			41,744			66,653
Research and development(1)		23,663			33,650			54,463			24,286			36,517
General and administrative(1)		14,073			20,308			85,179			33,041			33,707
Total operating expenses		77,858			115,857			234,036			99,071			136,877
Loss from operations		(17,029	)		(9,730	)		(84,899	)		(31,338	)		(36,918	)
Non-operating income (expense):
Interest income		626			762			1,895			460			1,743
Interest expense		(654	)		(862	)		(992	)		(475	)		(563	)
Other income (expense), net		(208	)		115			(2,091	)		(663	)		(379	)
Total non-operating income (expense), net		(236	)		15			(1,188	)		(678	)		801
Loss before income taxes		(17,265	)		(9,715	)		(86,087	)		(32,016	)		(36,117	)
Provision for income taxes		69			1,033			1,077			472			703
Net loss	$	(17,334	)	$	(10,748	)	$	(87,164	)	$	(32,488	)	$	(36,820	)

⁽¹⁾  Includes stock-based compensation expense as follows:

	Year Ended December 31,						Six Months Ended June 30,
	2016		2017		2018		2018		2019
	(dollars in thousands)
Cost of revenue	$	64	$	47	$	119	$	50	$	66
Sales and marketing		381		488		979		388		554
Research and development		1,043		969		1,532		617		823
General and administrative		4,212		1,251		24,717		794		658
Total stock-based compensation expense	$	5,700	$	2,755	$	27,347	$	1,849	$	2,101

89

	Year Ended December 31,									Six Months Ended June 30,
	2016			2017			2018			2018			2019
Percentage of Revenue Data:
Revenue		100	%		100	%		100	%		100	%		100	%
Cost of revenue		28			21			23			22			23
Gross margin		72			79			77			78			77
Operating expenses:
Sales and marketing		47			46			49			48			52
Research and development		28			25			28			28			28
General and administrative		17			15			44			38			26
Total operating expenses		92			86			121			114			106
Loss from operations		(20	)		(7	)		(44	)		(36	)		(29	)
Non-operating income (expense):
Interest income		1			1			1			1			1
Interest expense		(1	)		(1	)		(1	)		(1	)		—
Other income (expense), net		—			—			(1	)		(1	)		—
Total non-operating income (expense), net		—			—			(1	)		(1	)		1
Loss before income taxes		(20	)		(7	)		(45	)		(37	)		(28	)
Provision for income taxes		—			1			1			—			1
Net loss		(20	%)		(8	%)		(46	%)		(37	%)		(29	%)

Comparison of Six Months Ended June 30, 2018 and 2019

Revenue

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
Revenue	$	87,105	$	129,151	$	42,046		48	%

Revenue increased by $42.0 million, or 48%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. Of this increase, 56% was due to sales to new customers, and the remaining increase was due to increased sales to existing customers.

Cost of Revenue and Gross Margin

	Six Months Ended June 30,						Change
	2018			2019			$		%
	(dollars in thousands)
Cost of revenue	$	19,372		$	29,192		$	9,820		51	%
Gross margin		78	%		77	%

Cost of revenue increased by $9.8 million, or 51%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase in cost of revenue was primarily due to an increase of $3.7 million in expenses related to operating in co-location facilities and network and bandwidth costs for operating our global cloud platform for our expanded customer base as well as

90

increased capacity to support our growth, and an increase of $1.7 million related to the amortization of capitalized internal-use software costs. The remainder of the increase was primarily attributable to an increase of $1.6 million in depreciation expense related to purchases of equipment located in co-location facilities, an increase of $1.3 million in employee-related costs due to a 55% increase in headcount in our customer support and technical operations organizations, and an increase of $0.5 million related to third-party technology services and payment processing fees.

Gross margin decreased from 78% during the six months ended June 30, 2018 to 77% during the six months ended June 30, 2019. The decrease in gross margin was driven by higher network and bandwidth costs and expenses related to operating in co-location facilities, as we invested in additional co-location facilities and additional equipment within existing co-location facilities to support our global cloud platform. Our gross margin may fluctuate or decline in the near-term as we seek further expansion of our global cloud platform.

Operating Expenses

Sales and Marketing

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
Sales and marketing	$	41,744	$	66,653	$	24,909		60	%

Sales and marketing expenses increased by $24.9 million, or 60%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase was primarily driven by $14.7 million in increased employee-related costs due to a 57% increase in headcount in our sales and marketing organization from June 30, 2018 to June 30, 2019, including an increase of $2.6 million in sales commissions expense including the amortization of contract acquisition costs. The remainder of the increase was due primarily to increased expenses of $4.6 million in marketing programs due to investments in brand awareness advertising, third-party industry events, and digital performance marketing, aimed at driving overall revenue growth, $4.3 million related to increased travel-related costs, allocated overhead costs, and third-party technology services, and an increase of $1.5 million in co-location and bandwidth expenses for free customers.

Research and Development

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
Research and development	$	24,286	$	36,517	$	12,231		50	%

Research and development expenses increased by $12.2 million, or 50%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase was primarily driven by $12.4 million in increased employee-related costs due to a 45% increase in headcount in our research and development organization from June 30, 2018 to June 30, 2019, $1.8 million of increased allocated overhead costs primarily related to rent and office-related expenses due to expansion of office space, and $1.3 million of increased travel-related costs and consulting expenses. These increases were partially offset by decreased expenses of $3.9 million as a result of increased capitalized internal-use software development costs.

91

General and Administrative

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
General and administrative	$	33,041	$	33,707	$	666		2	%

General and administrative expenses increased by $0.7 million, or 2%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase was primarily driven by $4.6 million in increased employee-related costs. The increase in employee-related costs was driven by a 56% increase in headcount in our general and administrative organization from June 30, 2018 to June 30, 2019 as we prepared to operate as a public company. The remainder of the increase was primarily due to an increase of $1.9 million of increased travel and company-wide event costs, $1.4 million of increased depreciation expense, and $1.0 million of increased third-party technology services costs. These increases were partially offset by $5.4 million of decreased professional fees for third-party accounting, consulting, and legal services, $2.5 million of decreased allocated overhead costs, and $0.5 million of decreased bad debt expense.

Non-Operating Income (Expense)

Interest Income

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
Interest income	$	460	$	1,743	$	1,283		279	%

Interest income increased by $1.3 million, or 279%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase was primarily driven by a higher invested balance in cash and cash equivalents and marketable securities.

Interest Expense

	Six Months Ended June 30,						Change
	2018			2019			$			%
	(dollars in thousands)
Interest expense	$	(475	)	$	(563	)	$	(88	)		19	%

Interest expense did not significantly fluctuate during the six months ended June 30, 2019 as compared to the six months ended June 30, 2018.

Other Income (Expense), Net

	Six Months Ended June 30,						Change
	2018			2019			$			%
	(dollars in thousands)
Other income (expense), net	$	(663	)	$	(379	)	$	(284	)		(43	%)

Other income (expense), net decreased by $0.3 million, or 43%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The decrease was primarily driven by an

92

increase of $0.3 million in rental income from sublease activities and $0.3 million in decreased foreign currency transaction gains and losses. This decrease was partially offset by increased expense of $0.3 million as a result of the increased fair value of our redeemable convertible preferred stock warrant liability.

Provision for Income Taxes

	Six Months Ended June 30,				Change
	2018		2019		$		%
	(dollars in thousands)
Provision for income taxes	$	472	$	703	$	231		49	%

The provision for income taxes increased by $0.2 million, or 49%, for the six months ended June 30, 2019 compared to the six months ended June 30, 2018. The increase was primarily driven by changes in our jurisdictional mix of earnings.

Comparison of the Years Ended December 31, 2017 and 2018

Revenue

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
Revenue	$	134,915	$	192,674	$	57,759		43	%

Revenue increased by $57.8 million, or 43%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. Of this increase, 42% was due to increased sales to existing customers, and the remaining increase was due to sales to new customers.

Cost of Revenue and Gross Margin

	Year Ended December 31,						Change
	2017			2018			$		%
	(dollars in thousands)
Cost of revenue	$	28,788		$	43,537		$	14,749		51	%
Gross margin		79	%		77	%

Cost of revenue increased by $14.7 million, or 51%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The increase in cost of revenue was primarily due to an increase of $6.4 million in expenses related to operating in co-location facilities and network and bandwidth costs for operating our global cloud platform for our expanded customer base as well as increased capacity to support our growth, and an increase of $2.5 million in depreciation expense related to purchases of equipment located in co-location facilities. The remainder of the increase was primarily attributable to an increase of $2.3 million related to the amortization of capitalized internal-use software costs, an increase of $1.9 million in employee-related costs due to a 60% increase in headcount in our customer support and technical operations organizations, and an increase of $1.1 million related to third-party technology services and payment processing fees.

Gross margin decreased from 79% during the year ended December 31, 2017 to 77% during the year ended December 31, 2018. The decrease in gross margin was driven by higher network and bandwidth costs and expenses related to operating in additional co-location facilities, as we invested in

93

additional co-location facilities and additional equipment within existing co-location facilities to support our global cloud platform. Our gross margin may fluctuate or decline in the near-term as we seek further expansion of our global cloud platform.

Operating Expenses

Sales and Marketing

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
Sales and marketing	$	61,899	$	94,394	$	32,495		52	%

Sales and marketing expenses increased by $32.5 million, or 52%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The increase was primarily driven by $24.6 million in increased employee-related costs due to a 61% increase in headcount in our sales and marketing organization from December 31, 2017 to December 31, 2018, including an increase of $5.4 million in sales commissions expense including the amortization of contract acquisition costs. The remainder of the increase was due primarily to increased costs of marketing programs of $4.6 million due to investments in brand awareness advertising, third-party industry events, and digital performance marketing, aimed at driving overall revenue growth, increased expenses of $3.1 million related to co-location and bandwidth expenses for free customers due to an increase in free customers, $2.2 million of increased allocated overhead costs primarily related to rent and office-related expenses due to expansion of office space, increased expenses of $2.1 million related to third-party technology services, consulting services, and company-wide event costs, and $1.9 million of increased travel-related costs. These increases were partially offset by decreased expenses of $6.3 million as a result of decreased certificate authority services costs for free customers due to re-negotiating rates with vendors.

Research and Development

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
Research and development	$	33,650	$	54,463	$	20,813		62	%

Research and development expenses increased by $20.8 million, or 62%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The increase was primarily driven by $20.9 million in increased employee-related costs due to a 58% increase in headcount in our research and development organization from December 31, 2017 to December 31, 2018, $2.9 million of increased allocated overhead costs primarily related to rent and office-related expenses due to expansion of office space, $1.0 million of increased travel-related costs, and $1.0 million of increased third-party services and technology costs. These increases were partially offset by decreased expenses of $5.4 million as a result of increased capitalized internal-use software development costs.

General and Administrative

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
General and administrative	$	20,308	$	85,179	$	64,871		319	%

94

General and administrative expenses increased by $64.9 million, or 319%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The increase was primarily driven by $32.1 million in increased employee-related costs, inclusive of an increase of $23.3 million in non-cash stock-based compensation expense related to the secondary stock sales during the year ended December 31, 2018 described in Note 14 to our consolidated financial statements included elsewhere in this prospectus. The increase in employee-related costs was also driven by a 63% increase in headcount in our general and administrative organization from December 31, 2017 to December 31, 2018 as we prepared to operate as a public company. The remainder of the increase was primarily due to an increase of $22.8 million of professional fees for third-party accounting, consulting, and legal services as we invested in preparing to be a public company, $8.0 million of professional fees for information technology as we scaled our systems to operate as a public company, $1.9 million of increased recruiting, travel, and company-wide event costs, $1.1 million of bad debt expense, $1.0 million of increased third-party technology services costs, and $0.8 million of increased depreciation expense. These increases were partially offset by $3.0 million of decreased allocated overhead costs.

Non-Operating Income (Expense)

Interest Income

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
Interest income	$	762	$	1,895	$	1,133		149	%

Interest income increased by $1.1 million, or 149%, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The increase was primarily driven by a higher invested balance in cash and cash equivalents and marketable securities.

Interest Expense

	Year Ended December 31,						Change
	2017			2018			$			%
	(dollars in thousands)
Interest expense	$	(862	)	$	(992	)	$	(130	)		15	%

Interest expense did not significantly fluctuate during the year ended December 31, 2018 as compared to the year ended December 31, 2017.

Other Income (Expense), Net

	Year Ended December 31,					Change
	2017		2018			$			%
	(dollars in thousands)
Other income (expense), net	$	115	$	(2,091	)	$	(2,206	)		*

* not meaningful

Other income (expense), net decreased by $2.2 million, for the year ended December 31, 2018 compared to the year ended December 31, 2017. The decrease was primarily driven by increased expense of $1.2 million as a result of the increased fair value of our redeemable convertible preferred stock warrant liability. The remainder of the decrease was primarily driven by fluctuations in foreign currency transaction gains and losses.

95

Provision for Income Taxes

	Year Ended December 31,				Change
	2017		2018		$		%
	(dollars in thousands)
Provision for income taxes	$	1,033	$	1,077	$	44		4	%

Provision for income taxes did not significantly fluctuate during the year ended December 31, 2018 as compared to the year ended December 31, 2017.

On December 22, 2017, the Tax Cuts and Jobs Act of 2017 (the Tax Act) was enacted. The Tax Act contains several key tax provisions that affect us, including, but not limited to, reducing the U.S. federal corporate tax rate from 34% to 21% for tax years beginning after December 31, 2017, imposing a one-time repatriation tax on deemed repatriated earnings and changing rules related to uses and limitations of net operating loss carryforwards created in tax years beginning after December 31, 2017. We have reflected the impact of the Tax Act in our consolidated financial statements in accordance with our understanding of the Tax Act and guidance available as of the date of this prospectus. The primary effect of the Tax Act on our financial results was a reduction of our deferred tax assets resulting from the reduction in the U.S. federal corporate income tax rate. Because we have established a full valuation allowance against our U.S. deferred tax assets the remeasurement of the deferred tax assets and related valuation allowance did not have a material impact on our consolidated financial statements. Refer to Note 12 to our consolidated financial statements included elsewhere in this prospectus for further information regarding income taxes.

While we believe our current valuation allowance is sufficient, we assess the need for an adjustment to the valuation allowance on a quarterly basis. The assessment is based on our estimates of future sources of taxable income for the jurisdictions in which we operate and the periods over which our deferred tax assets will be realizable. In the event we determine that we will be able to realize all or part of our net deferred tax assets in the future, the valuation allowance will be reversed in the period in which we make such determination. The release of a valuation allowance against deferred tax assets may cause greater volatility in the effective tax rate in the periods in which it is reversed.

Comparison of the Years Ended December 31, 2016 and 2017

Revenue

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
Revenue	$	84,791	$	134,915	$	50,124		59	%

Revenue increased by $50.1 million, or 59%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. Of this increase, 45% was due to increased sales to existing customers, and the remaining increase was due to sales to new customers.

Cost of Revenue and Gross Margin

	Year Ended December 31,						Change
	2016			2017			$		%
	(dollars in thousands)
Cost of revenue	$	23,962		$	28,788		$	4,826		20	%
Gross margin		72	%		79	%

96

Cost of revenue increased by $4.8 million, or 20%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase in cost of revenue was primarily due to an increase of $1.1 million in expenses related to operating in co-location facilities and network and bandwidth costs for operating our global cloud platform for our expanded customer base as well as increased capacity to support our growth, and an increase of $1.5 million in depreciation expense related to purchases of equipment located in co-location facilities. The remainder of the increase was primarily attributable to an increase of $0.8 million related to the amortization of capitalized internal-use software costs, an increase of $0.7 million in employee-related costs due to a 24% increase in headcount in our customer support and technical operations organizations, an increase of $0.4 million related to the amortization of acquired developed technology, and an increase of $0.3 million related to third-party technology services and payment processing fees.

Gross margin increased from 72% during the year ended December 31, 2016 to 79% during the year ended December 31, 2017. The increase in gross margin was driven by an increase in revenue as our customers expanded their use of our global cloud platform, as well as decreased costs of our technology and infrastructure.

Operating Expenses

Sales and Marketing

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
Sales and marketing	$	40,122	$	61,899	$	21,777		54	%

Sales and marketing expenses increased by $21.8 million, or 54%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by $14.2 million in increased employee-related costs due to a 58% increase in headcount in our sales and marketing organization from December 31, 2016 to December 31, 2017, including an increase of $2.5 million in sales commissions expense including the amortization of contract acquisition costs. The remainder of the increase was due primarily to increased costs of marketing programs of $3.9 million due to our commencement of digital performance marketing to drive growth and brand awareness advertising, increased expenses of $2.2 million related to increased certificate authority services costs for free customers, travel-related costs, and allocated overhead costs, and increased expenses of $1.3 million related to co-location and bandwidth expenses for free customers due to an increase in free customers.

Research and Development

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
Research and development	$	23,663	$	33,650	$	9,987		42	%

Research and development expenses increased by $10.0 million, or 42%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by $10.9 million in increased employee-related costs due to a 36% increase in headcount in our research and development organization from December 31, 2016 to December 31, 2017 and increased third-party technology services costs of $0.3 million. These increases were partially offset by decreased expenses of $1.1 million as a result of increased capitalized internal-use software development costs.

97

General and Administrative

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
General and administrative	$	14,073	$	20,308	$	6,235		44	%

General and administrative expenses increased by $6.2 million, or 44%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by $5.2 million in increased employee-related costs due to a 71% increase in headcount in our general and administrative organization from December 31, 2016 to December 31, 2017. The expense increases were partially offset by $3.0 million of decreased stock-based compensation expense related to the secondary stock sale during the year ended December 31, 2016 described in Note 14 to our consolidated financial statements included elsewhere in this prospectus. The remainder of the increase was primarily due to $1.7 million of professional fees for third-party accounting, consulting, and legal services, $1.3 million of third-party technology services costs, travel, company-wide event costs, and other expenses, and $0.7 million of increased allocated overhead costs primarily related to rent and office-related expenses due to expansion of office space.

Non-Operating Income (Expense)

Interest Income

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
Interest income	$	626	$	762	$	136		22	%

Interest income did not significantly fluctuate during the year ended December 31, 2017 as compared to the year ended December 31, 2016.

Interest Expense

	Year Ended December 31,						Change
	2016			2017			$			%
	(dollars in thousands)
Interest expense	$	(654	)	$	(862	)	$	(208	)		32	%

Interest expense increased by $0.2 million, or 32%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by an increase of interest expense from the build-to-lease financing obligation.

Other Income (Expense), Net

	Year Ended December 31,					Change
	2016			2017		$		%
	(dollars in thousands)
Other income (expense), net	$	(208	)	$	115	$	323		155	%

Other income (expense), net increased by $0.3 million, or 155%, for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by fluctuations in foreign currency transaction gains and losses.

98

Provision for Income Taxes

	Year Ended December 31,				Change
	2016		2017		$		%
	(dollars in thousands)
Provision for income taxes	$	69	$	1,033	$	964		*

* not meaningful

Our provision for income taxes increased by $1.0 million for the year ended December 31, 2017 compared to the year ended December 31, 2016. The increase was primarily driven by income taxes in foreign tax jurisdictions due to income from foreign operations.

Quarterly Results of Operations

The following tables set forth our unaudited quarterly statements of operations data for each of the quarters indicated, as well as the percentage that each line item represents of our revenue for each quarter presented. The unaudited quarterly statements of operations data set forth below have been prepared on the same basis as our audited consolidated financial statements, and in the opinion of management, include all adjustments, which consist only of normal recurring adjustments, that are necessary for the fair statement of such data. Our historical results are not necessarily indicative of our future results, and the results for any quarter are not necessarily indicative of the results to be expected for a full year or any other period. The following quarterly financial data should be read in conjunction with our consolidated financial statements and related notes thereto included elsewhere in this prospectus.

	Three Months Ended
	March 31, 2017			June 30, 2017			September 30, 2017			December 31, 2017			March 31, 2018			June 30, 2018			September 30, 2018			December 31, 2018			March 31, 2019			June 30, 2019
	(in thousands)
Revenue	$	25,036		$	28,804		$	42,405		$	38,670		$	41,824		$	45,281		$	50,070		$	55,499		$	61,727		$	67,424
Cost of revenue(1)		6,301			6,788			7,252			8,447			9,007			10,365			11,209			12,956			14,360			14,832
Gross profit		18,735			22,016			35,153			30,223			32,817			34,916			38,861			42,543			47,367			52,592
Operating expenses:
Sales and marketing(1)		12,958			14,866			16,620			17,455			18,895			22,849			24,462			28,188			30,817			35,836
Research and development(1)		7,472			8,326			8,380			9,472			11,263			13,023			14,827			15,350			17,649			18,868
General and administrative(1)		3,679			4,233			5,184			7,212			13,512			19,529			36,040			16,098			16,048			17,659
Total operating expenses		24,109			27,425			30,184			34,139			43,670			55,401			75,329			59,636			64,514			72,363
Income (loss) from operations		(5,374	)		(5,409	)		4,969			(3,916	)		(10,853	)		(20,485	)		(36,468	)		(17,093	)		(17,147	)		(19,771	)
Non-operating income (expense):
Interest income		166			174			214			208			234			226			387			1,048			913			830
Interest expense		(181	)		(224	)		(226	)		(231	)		(232	)		(243	)		(251	)		(266	)		(273	)		(290	)
Other income (expense), net		48			45			(22	)		44			(446	)		(217	)		(1,240	)		(188	)		(293	)		(86	)
Total non-operating income (expense), net		33			(5	)		(34	)		21			(444	)		(234	)		(1,104	)		594			347			454
Income (loss) before income taxes		(5,341	)		(5,414	)		4,935			(3,895	)		(11,297	)		(20,719	)		(37,572	)		(16,499	)		(16,800	)		(19,317	)
Provision for (benefit from) income taxes		569			577			(537	)		424			171			301			417			188			314			389
Net income (loss)	$	(5,910	)	$	(5,991	)	$	5,472		$	(4,319	)	$	(11,468	)	$	(21,020	)	$	(37,989	)	$	(16,687	)	$	(17,114	)	$	(19,706	)

99

⁽¹⁾  Includes stock-based compensation expense as follows: