|Shares Out. (in M):||49||P/E||17.0x||13.7x|
|Market Cap (in M):||1,053||P/FCF||10.8x||9.2x|
|Net Debt (in M):||-298||EBIT||52||74|
Blue Coat Systems, herein referred to as "BCSI" or the "Company", trades at a significant discount to intrinsic value which we estimate at $32/ share under our base case. We believe the Company is a classic example of a turnaround story that is underappreciated as a result of Wall Street's focus on short term results. There are many aspects of the story that we like: strong cash flow, a new and experienced CEO, expanding TAMs, a replenished salesforce, sticky customers, options on accelerating growth, and an active board. At $6.08 net cash / share and 6.4x FCF to the enterprise, we believe current prices make a compelling entry point.
There are 4 key aspects to this story that we believe investors should focus on:
1. The Company's FCF is significant and will substantially exceed earnings for the foreseeable future due to a favorable international tax structure, $259M of NOLs, and depreciation in excess of capex
2. The cloud security business is not understood/discussed but it is a game changer; cloud is gaining substantial traction and can leapfrog WBSN, FTNT, and disintermediate firewall providers such as CHKP. This business is based on a SaaS model and should be valued on bookings.
3. The WAN optimization business has the potential to be $100M in a few years. The product is finally competitive and is gaining momentum in a market that is still greenfield.
4. The turnaround is progressing well, and at 9 months in, we are still early in the re-alignment. In our experience, these turnarounds take time but the street has priced in an expectation that it has already failed.
|Historical Product Snapshot|
|Note: Aside from FY 2010 and 2011, historical product splits are estimated|
|Note: Sales of CacheFlow and ProxyOne are small and not included|
BCSI operates in 3 business segments: security, WAN optimization, and cloud. The security division sells webfiltering, malware, SSL analysis, and data loss prevention tools through its ProxySG, ProxyAV, and webfilter product lines. This business generated $216M of product revenue in the LTM period and sells to Fortune 500, federal, and mid/large enterprise customers though a combination of direct sales and a VAR/reseller channel. Ex-federal and strategic accounts, 30-35% of sales are to the mid/large enterprise customer segment.
The WAN optimization business provides enterprises the ability to accelerate applications over a WAN by eliminating redundant transmissions, staging data in local caches, compressing data, and streamlining chatty protocols. BCSI's Packetshaper, which shapes and prioritizes applications, and Mach 5, which is similar to RVBD's steelhead product line, generated $76M of product revenue in the LTM period; in addition, WAN optimization can also be sold in the ProxySG appliance. BCSI's customers range from mid-market to large enterprises and distribution channels include resellers, VARs, and direct. Unlike RVBD which targets both branch and datacenter to datacenter markets, BCSI specifically targets branch customers.
Cloud security is based on a subscription SaaS model that brings Blue Coat's high end security to public and private clouds to help secure branches and mobile end-points. The feature set includes real-time protection, location aware protection, and application level filtering. BCSI's focus is on small and large businesses and products are sold through a combination of white label OEMs, security VARs, and a direct sales. Launched last April, BCSI already has 100 trials underway that encompass over 70,000 seats. By comparison, BCSI's security appliance user base is currently 60 million. This product is complimentary to the ProxySG for the large enterprise who need hybrid solutions and greenfield for smaller customers that launch directly into the cloud.
Greater than 50% of sales are through 3 major resellers: Computerlinks, Westcon, and Arrow. Several large customer accounts are deemed strategic and are touched by a direct salesforce but over 90% of sales are indirect. The recent reorganization of the salesforce further streamlined teams under security, WAN, and cloud.
|% YoY Total Revenue||71.9%||45.6%||11.6%||-1.8%|
|Total Gross Profit||237.0||336.8||380.5||386.9|
|% GP Total||77.6%||75.7%||76.7%||79.4%|
|Research and Development||46.5||71.4||79.5||75.1|
|% of Sales||15.2%||16.0%||16.0%||15.4%|
|% of Sales||47.0%||47.7%||43.3%||44.6%|
|% of Sales||15.4%||12.0%||17.4%||19.3%|
|% of Sales||17.4%||12.2%||21.5%||24.0%|
|% of Sales||16.1%||8.1%||11.9%||14.1%|
|Diluted EPS, Non GAAP||1.24||0.94||1.29||1.42|
Additional issues also plagued the company. Our research has uncovered that a lethargic salesforce, poor customer support, and increased competitiveness from WBSN and FTNT were critical factors that eroded BCSI presence in the channel.
To address these challenges, BCSI embarked on a turnaround beginning with the appointment of Mike Borman as CEO in September 2010. Following the announcement and Mr. Borman's promise to demonstrate results after 9 months, BCSI's stock began to move off its $18 lows and touched year highs at $32/share.
The restructuring over this period has been significant. The salesforce has been replenished after massive turnover and has been recently stabilized. Many of the sales representatives that customers deal with are new, and they are still ramping on the productivity curve. The organization was also split into 3 business units: security, wan optimization, and cloud. New division heads were assigned to each of these units to create better P&L accountability and clearer go-to-market messages. Heads of sales were replaced geographically in North America, Europe and APAC and a new CMO was brought onboard. In addition, stronger sales incentives, including better margins for the channel versus Riverbed, were put in place to help focus on WAN optimization.
Concurrent with the restructuring, the Company began to release both new and upgraded products. All appliances were refreshed with 64-bit operating systems, bringing densities in line with the market. The Mach 5 WAN appliance was simplified for easier installation (previously a major complaint), and it now boasts leading technology over RVBD in video acceleration and file sharing. The new mid-market ProxyOne appliance was launched last quarter and in April, the cloud based security product was introduced.
Despite these changes, it became clear at the end of FY Q4 that the restructuring efforts would take longer than anticipated. The company pre-announced unfavorable results for the April quarter - 9 months into the CEO's promise to demonstrate results - and the stock traded down on the news. Further, BCSI guided down during its earnings call citing greater competition in the mid/large enterprise security business.
Security Products Are Not Dead
|Proxy SG||-9% 2012, -2% 2013,||-9% 2012, 0% 2013,||-9% 2012, 0% 2013,|
|-2% 2014||0% 2014||0% 2014|
|Cloud Security||No SaaS revenue||433K users at EY||675K users at EY|
Similar to the security business, we believe the WAN optimization business is of higher quality than most analysts believe. Although the Company has provided the Mach 5 product for some time, the first iteration was admittedly sub-par relative to RVBD. As a result, RVBD grew to become the dominant WAN player in the first installation cycle. In 2008, the Company bought Packeteer for $268M which provided application performance visibility, application shaping, and more importantly, a sales channel. However, Packeteer was never fully integrated and the basic Mach5 was still marred with issues including difficult installation and management.
Today, the new WAN optimization product appears to be solid. It is perceived as being just as capable as Riverbed's and even better in some aspects including video acceleration through object caching (RVBD is byte level caching), consolidation of SSL acceleration into the same appliance, and asymmetrical acceleration into the cloud. An independent organization, Broadband Testing, confirmed these results and channel checks confirmed that the new products are highly regarded and more competitive on price.
The issue for BCSI is that they face the reverse problem from high end security; it is difficult to unseat the incumbent, especially when they are already installed within a customer's premise. However, unlike the security market, we believe there is a strong path to growth. Management has taken a strategic angle by focusing specifically on branch offices - rather than the datacenter to datacenter market which is dominated by RVBD and SilverPeak - and is targeting customers to which video and cloud are key decision factors. Moreover, BCSI has significantly increased its marketing spend, focused on providing more test/demo models quickly into customer labs, and began providing the channel with better incentives to push sales. Our checks have commented that the BCSI salesforce now seems refreshed, focused, and aggressive.
There are two macro tailwinds that should also help the Company. First, the WAN market is healthy and growing at a 14% CAGR through 2014. Moreover, RVBD's consensus growth for 2011 and 2012 are 32% and 23% respectively. Driving this growth is a combination of datacenter consolidation and network intensive application upgrades such as Sharepoint and Exchange. Bandwidth is also expensive, so as consolidation occurs, WAN optimization has become a more efficient path for companies to upgrade their networks. Second, we are now approaching the next upgrade cycle for initial WAN optimization installs. Many companies initially bought RVBD appliances for moderate deployments 4-5 years ago and are now architecting for larger build-outs. Our checks have indicated that BCSI has already started displacing RVBD in major accounts like Citibank Retail. There is also a large greenfield opportunity in WAN, especially with mid-enterprise companies who are now adopting the technology as it has matured. VARs, and even RVBD's management, have indicated that a significant portion of the market is still greenfield.
We believe that breaking out the WAN organization will help the company focus on delivering a cleaner message to the market and create much greater accountability in terms of sales performance. Already, the results are beginning to show with sales increasing 82% YoY to $27M. Although these are smaller numbers, we believe BCSI should be able to grow this business in excess of market rates and that it could potentially be a $100M business over several years. Management believes it can get the business to at least double in the short term.
|Mach 5||45% 2012, 32% 2013,||50% 2012, 37% 2013||54% 2012, 38% 2013|
|19% 2014||23% 2014||25% 2014|
|Packeteer||No growth||No growth||No growth|
Cloud Security is the Next Growth Wave
As businesses move to public and private clouds, protecting the cloud and mobile endpoints is becoming a greater priority for CIOs. Currently, only zScaler (~$65M in sales) and CSCO's Scansafe have options on the market, but neither are as robust as Blue Coat's offering. In addition, zScaler's products are not appropriate for large enterprises. The cloud product also bakes in firewall functionality which allows it to be very competitive against players like Checkpoint and UTM players like Fortinet. According to 1 super regional bank, the migration to BCSI's cloud security platform will allow them to "tear down 15 Checkpoint implementations".
Gartner is forecasting that 40% of secure web gateways will be delivered through the cloud by 2015 from 5% today, and Blue Coat's initial uptake seems to support this trend. Since the launch in April, BCSI began 100 trials encompassing over 70,000 seats. At an average price per user of $12 / year and a total security install base of 60M users, the TAM on BCSI's install base alone can be $840M. It is important to note that this TAM does not eliminate the need for the ProxySG appliance but rather compliments existing implementations.
Moveover, because this business is based on a "software as a service" (SaaS) model, the valuation of cloud security should be based on bookings and cash flow. SaaS companies such as SFSF, LOGM, and CSOD trade at forward multiples of 7x bookings. Based on the above install base, we believe at least $50M in bookings should be easily achievable within the next couple years which would add ~$350M of additional market capitalization.
After the end of the Continuing Resolution, government VARs raised federal spend targets; while the DoD budget remains flat, there appears to be a shift in spend away from military equipment towards IT. One large government reseller believes that security based spend will increase this year and another believes that BCSI is the default vendor because it is easier to upgrade rather than re-architect. However, government preference for security vendor depends on the department and some, like education, have historically placed large purchase orders and only fulfilled a fraction of them.
Also of significant importance for shareholders is the magnitude and speed of the recent $50M stock buyback. The repurchase was the first buyback authorized by the Company based on trading levels rather than as an offset for option dilution. This buyback was announced after Q1 2011 earnings and will be completed prior to Q2 2011. At an estimated average cost of $23/share, share count will now be reduced by 5%.
|% of Sales||75.5%||77.6%||75.7%||76.7%||79.4%||78.4%||78.4%||78.8%|
|Research and Development||35.0||46.5||71.4||79.5||75.1||74.0||75.2||84.2|
|% of Sales||19.7%||15.2%||16.0%||16.0%||15.4%||15.0%||14.1%||14.3%|
|% of Sales||46.7%||47.0%||47.7%||43.3%||44.6%||46.5%||44.5%||41.8%|
|% of Sales||9.1%||15.4%||12.0%||17.4%||19.3%||16.9%||19.8%||22.7%|
|% of Sales||11.7%||17.4%||12.2%||21.5%||24.0%||21.0%||23.5%||25.0%|
|% of Sales||10.6%||16.1%||8.1%||11.9%||14.1%||12.1%||14.3%||16.4%|
|Diluted EPS, Non GAAP||0.64||1.24||0.94||1.29||1.42||1.27||1.57||1.97|
Under our base case scenario, we believe BCSI is worth $33/share. The Company closed FY 2011 with $6.08 net cash / share and $2.40 FCF / share and is trading at 6.4x FCF to the enterprise. By contrast, WBSN is trading at 12.3x, RVBD at 45.2x, FTNT at 29.1x, and SYMC at 8.5x.
|Net Cash / Share||1.40||4.10||0.87||3.33||6.08||7.19||9.40||12.23|
|FCF / Share||0.61||1.15||0.73||1.92||2.40||1.99||2.34||3.00|
|Value of FCF||6.1||11.5||7.3||19.2||24.0||19.9||23.4||30.0|
|Value of FCF + Net Cash||7.5||15.6||8.2||22.5||30.0||27.1||32.8||42.2|
Despite a decrease in absolute dollars in cash flow for the next fiscal year (we are assuming the mid-market Proxy SG customers churn), BCSI's FCF yield will remain above 9% and likely climb to 14% by 4/2014 under our base case. There are several structural reasons for this. First, The Company has $259M of NOLs and a favorable tax structure that burdens the US with much of the R&D expense. In FY 2011, BCSI had a 3-5% cash tax rate which will continue into the foreseeable future with NOLs likely to expire sometime in FY 2015. The cash tax rate will be in the 10-15% range after the expiration of NOLs.
Second, the services business is much stronger than most analysts realize. Services and support are tied to each net new product sale with terms of 1.0-1.5 years on average. With 90% retention on service contracts after expiry, each incremental net new product sold increases the deferred revenue stream. Over the past 3 years, deferred revenue has increased from $90M to 178M or 23% to 40% of sales respectively. While this portion of the business is mostly ignored, once cloud security begins to gain momentum, the sell side will have to focus on deferred revenue and backlog.
Finally, capex will continue to be low as a % of sales. The spike in capex to $18M in FY 2010 relates to a facility buildout, and much of the current capex relates to the cloud business. Management expects current run-rates to continue for the foreseeable future at around $3M / quarter. In addition, the Company is amortizing past acquisitions and cloud security investments which will keep D&A greater than capex.
BCSI trades at a discount to its peers in both security and WAN optimization despite superior cash flow characteristics. Based on comparables, we believe the Company is worth $34 / share using separate valuations for security, WAN, and cloud. Security company multiples for WBSN and SYMC trade at 6-9x forward EBITDA, application acceleration vendors trade at 18x forward EBITDA (excluding CSCO), and high growth SaaS companies used to compare the cloud security business trade at 6-8x bookings.
|Closing Price||% of 52 Wk High||Mcap||TEV||LTM TEV/R||TEV/ EBITDA||LTM P/E||NFY TEV/R||TEV/ F EBITDA||NFY P/E|
|LTM TEV/R||TEV / Bookings||NFY TEV/R||TEV / Bookings|
- BCSI must continue to invest in the core to keep 1 step ahead of the competition
- We believe BCSI recognizes this and has allocated resources to continue ProxySG development
- Packetshaper will be integrated into the Mach5 where revenue offset will not be 1 for 1 but should be consistent in gross margin contribution dollars
- Webfiltering is an aging technology that is being bundled into proxy functions or firewalls
- Third party reports and channel checks indicate that BCSI's product is good but needs greater channel support and sales
- In the next transition to cloud acceleration, RVBD's partnership with AKAM may give them an advantage. However, cloud WAN is further off than cloud security.
- We believe the company needs to integrate email and DLP functionality into the cloud product
- Ongoing trials may also take longer than expected
- Cloud adoption for large enterprises will begin in private clouds but mass transition may take years
- With the turnaround and diversity of products, we do not believe the Company should focus on large scale acquisitive activity
- Q4 cost structure can easily support $100M more of revenues. If the turnaround is not working, the Company should re-adjust its cost structure
|Subject||RE: BCSI Price|
|Entry||07/25/2011 04:02 PM|
Cuyler, I typed in the wrong price from a couple weeks ago but it still doesn't change the thesis / recommendation.
|Entry||08/01/2011 08:10 AM|
gary9, FCF is calculated as GAAP net income + non cash + differences in cash tax to book tax (big difference here) - changes in working capital + changes in deferred revenue - capex. I am also assuming seasonality with the working capital so there should be 1 quarter per year that is a gain and the other 3 should be a use of cash. The biggest difference to your model may be the cash/book tax difference and the deferred revenue. Hope that helps.
|Entry||08/01/2011 04:27 PM|
The upside here seems to depend on their ability to grow the WAN optimization biz (or be acquired). Given that Blue Coat is far behind the leader (RVBD) and that there are several other credible competitors, why will Blue Coat gain traction in WAN optimization? Is the play mainly to cross-sell the WAN optimization to existing large-enterprise security customers or do they need to break out beyond the existing security customer base?
Also, does their "cloud" strategy include anything that Websense and others do not already offer? If I understand it, the cloud strategy is simply a product-delivery platform that others have had for some time. If I am correct, I do not see why BCSI would ever get a "cloud" multiple more so than say, Websense.
|Subject||RE: WAN Optimization|
|Entry||08/01/2011 10:00 PM|
Thanks for your questions. Yes, in the short term, the upside is dependant on WAN growth and stabilization of the security business and in the longer run, the upside is based on cloud. RVBD is the leader in WAN at the moment, and I believe they will remain so. However, this market is still growing and, as RVBD's management described on their earnings, still greenfield. BCSI does not need to catch RVBD but if they are competitive with the product, getting 10% of the revenue RVBD generates will be meaningful. BCSI's WAN product is competitive this time around and over the last 3 months, the Company has also expanded its VAR presence by 10% to help sell the product. In addition, RVBD's new acquisition supposedly helps them in acceleration of applications like Sharepoint. In terms of cross-selling, I believe there is opportunity in leveraging the existing user base, but the point of splitting up a WAN division separately was to also target new, standalone opportunities.
WBSN also has a cloud product as does CSCO. However, the difference lies in the robustness and reliability of the features (a fortune 500 customer will tell you that ProxySG is much better than a Triton product) and an ability to leverage 70 million existing ProxySG user through the cloud. Niether CSCO nor WBSN can leverage as large of a user base / database. You have a good point in that WBSN trades at a lower multiple than the cloud comps I used in the writeup. However, when WBSN was ramping up, it commanded 5x revenue and 20x cash flow. Right now, WBSN trades at 12.5x cash flow, but regardless, the street will have to pay attention to the FCF as the product ramps.
|Subject||Thoughts on the quarter??|
|Entry||08/17/2011 12:24 PM|
|Subject||RE: Thoughts on the quarter??|
|Entry||08/17/2011 04:42 PM|
The quarter was dissapointing and especially the guide. It sounds like there are more issues to churn though but this quarter does leave on the table a couple of options. 1) their cost structure is out of line for their run rate and 2) there could be higher activist involvement. The new CEO formerly led Mincom, a former Francisco Partners portfolio company, before selling it to ABB. Francisco Partners also sits on the board of BCSI. These options along with $5.53 of net cash probably provide a floor as long as 1 or both of the options start materializing.
|Subject||RE: RE: Thoughts on the quarter??|
|Entry||08/17/2011 05:26 PM|
Although the revenue numbers were horrible, I was surprised by the cost situation and the drop in deferred revenue.
- Why didn't sales and mktg costs come down at least a little with the drop in sales? Is this a product mix issue?
- On a larger point, is this cost structure almost completely fixed? If so, how confident are you that they can take out costs? Where?
- Were you surprised that deferred revenue came down? If I understand, this is terribly bearish going forward. At this stage in their transition to revenue type, I expected deferred revenue to continue to rise steadily even if there was a drop in actual revenue.
- This is a bit unfair, but why do you see a floor in here? Don't these numbers bring in play the possibility that this company will never make a dollar again? Multiple of cash earnings does not seem to provide guidance any longer as it is near zero. Is it based on the idea that surely someone would buy it for 2x revenue (which would be about $20 per share)? And this is related to whether someone could buy and slash expenses.
|Subject||RE: RE: RE: Thoughts on the quarter??|
|Entry||08/17/2011 09:08 PM|
Thanks for your question. The S&M costs didn't come down because they are still investing in the sales channel and ramping their new products. The cost structure can support up to $100M more in sales and management said if there is not material growth by Q3, they would have to re-evaluate their cost structure. I think this is a positive for the stock and probably one of the biggest reasons for the floor. This is not a fixed cost business; its the software that runs on the hw that is valuable and the cloud security platform is an extension of the same sw that runs in the ProxySG.
Because its the sw thats valuable, the company should be able to keep its gross margins up close to the 80% range. This quarter also had some of the cloud launch costs run through GM.
The decline in deferred was not huge (only a couple million) so its not an immediate concern, especially since 90% of their fortune 500 customers still renew their contracts. Over the long term, if revenues cannot grow, then deferred becomes a larger issue.
At this point, it looks like they are continuing to cycle through their mid-market customers. It should look like a more stable business when the churn is through.
|Subject||Standstill with Elliott|
|Entry||09/14/2011 01:52 PM|
Any thoughts on this? Curious to hear your thoughts on potential acquirors for this business, and what they might pay.
|Subject||RE: RE: Standstill with Elliott|
|Entry||11/06/2011 09:40 AM|
No update at the moment, but I think an LBO is feasible given the FCF the company generates, the cash on the balance sheet, and as you mention, the saturation of its products in the fortune 500 install base. The cost structure is higher than what it should be at the current revenue run rate so private equity may be able to expand the margins.
|Subject||RE: Boom! Congrats.|
|Entry||12/09/2011 09:30 AM|