GlobalScape Inc.
Annual Report 2010

Plain-text annual report

UNITED STATES SECURITIES AND EXCHANGE COMMISSION Washington, D.C. 20549 FORM 10-K ⌧ (cid:2) ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(D) OF THE SECURITIES EXCHANGE ACT OF 1934 For the fiscal year ended December 31, 2010 OR TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(D) OF THE SECURITIES EXCHANGE ACT OF 1934 For the transition period from to . Commission File No. 001-33601 GlobalSCAPE, Inc. (Exact name of registrant as specified in its charter) Delaware (State or other jurisdiction of incorporation or organization) 4500 Lockhill-Selma, Suite 150 San Antonio, Texas (Address of Principal Executive Office) 74-2785449 (I.R.S. Employer Identification No.) 78249 (Zip Code) (210) 308-8267 (Registrant’s Telephone Number, Including Area Code) Securities registered pursuant to Section 12(b) of the Act: Common Stock, par value $0.001 per share (Title of Class) Securities registered pursuant to Section 12(g) of the Act: None Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. (cid:0) (cid:0) ⌧ ⌧ Yes No Yes No Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. ⌧ (cid:0) Yes No Indicate by check mark whether the registrant has submitted electronically and posted on its corporate Web site, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files). (cid:0) (cid:0) Yes No Indicate by check mark whether disclosure of delinquent filers pursuant to Item 405 of Regulation S-K (§ 229.405 of this chapter) is not contained herein, and will not be contained, to the best of registrant’s knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K. (cid:0) Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer or a smaller reporting company. See definition of “accelerated filer”, “large accelerated filer” and “smaller reporting company” in Rule 12b-2 of the Exchange Act (check one): Large Accelerated filer (cid:0) Non-Accelerated filer (Do not check if a smaller reporting company) Accelerated filer Smaller Reporting Company ⌧ (cid:0) (cid:0) Indicate by check mark if the registrant is a shell company (as defined in Rule 12b-2 of the Act). (cid:0) ⌧ Yes No The aggregate market value of the registrant’s outstanding common stock held by non-affiliates was approximately $24,653,371 as of the last business day of the registrant’s most recently completed second fiscal quarter, based upon the closing sales price of $2.58 per share on such date on the NYSE Amex Stock Exchange. As of March 11, 2010 there were 17,943,401 shares of common stock outstanding. Documents Incorporated by Reference Portions of the Registrant’s Proxy Statement for the 2011 Annual Meeting of Stockholders to be held on June 2, 2011, are incorporated by reference in Part III hereof.  Business Item 1. Item 1A. Risk Factors Item 1B. Unresolved Staff Comments Item 2. Item 3. Item 4. (Removed and Reserved) Legal Proceedings Properties TABLE OF CONTENTS PART I PART II Market for Registrant’s Common Equity and Related Stockholder Matters and Issuer Purchases of Equity Management’s Discussion and Analysis of Financial Condition and Results of Operation Financial Statements and Supplementary Data Changes in and Disagreements with Accountants on Accounting and Financial Disclosure Selected Financial Data Item 5. Item 6. Item 7. Item 8. Item 9. Item 9A. Controls and Procedures Item 9B. Other Information PART III Item 10. Directors, Executive Officers and Corporate Governance Item 11. Executive Compensation Item 12. Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters Item 13. Certain Relationships and Related Transactions, and Director Independence Item 14. Principal Accountant Fees and Services. Item 15. Exhibits, Financial Statement Schedules PART IV Page 3 17 29 30 30 30 31 31 32 53 73 74 74 75 75 75 75 75 76 Preliminary Notes GlobalSCAPE , CuteFTP , CuteFTP Pro Enhanced File Transfer Server and design, Mail Express , Availl and CuteSendIt ® ® ® ® ® ® ® are registered trademarks of GlobalSCAPE, Inc. Secure FTP Server , WAFS , CDP , DMZ Gateway , Advanced Workflow Engine , AS2 , AWE , CuteFTP Lite , Mail Express , Total Path Security and appShield are trademarks of ™ GlobalSCAPE, Inc. Other trademarks and trade names in this Annual Report are the property of their respective owners. ™ ™ ™ ™ ™ ™ ™ ™ ™ ™ In this report, we use the following terms: “Cloud” or “cloud computing” refers to pooled computing resources, delivered on-demand, over the Internet. In the same manner that electricity is delivered on-demand from large scale power plants, cloud computing is delivered from centralized data centers to users all over the world. “FTP” or File Transfer Protocol is a protocol used to exchange or manipulate files over a computer network such as the Internet. “HTTP” or Hyper Text Transfer Protocol is a protocol commonly used to transfer hypertext documents between a web server and a web browser. “HTTPS” or Hyper Text Transfer Protocol Secure is a combination of HTTP and a network security protocol such as Secure Sockets Layer or Transport Layer Security. “MFT” or Managed File Transfer refers to software solutions that facilitate the secure transfer of data from one computer to another through a network. “RFC” or Request for Comment is a memorandum published by the Internet Engineering Task Force describing methods, research, or innovations applicable to the working of the Internet and Internet-connected systems. “SaaS” or Software-as-a-Service uses hosted, cloud computing approaches in which the customer additionally does not need to install the underlying software on its own computer systems to access the application. “S/KEY” is a security system in which a one-time challenge-response password scheme is used to authenticate access to data. The purpose of S/Key is to eliminate the need for the same password to be sent over a network each time a password is needed for access. “SNMP” is a User Datagram Protocol-based network protocol primarily used in network management systems to monitor network-attached devices for conditions that warrant administrative attention. “SQL” or Structured Query Language is a database computer language. “SSH2” or Secure Shell is a protocol that provides encrypted network communications between two computers. “SSL” or Secure Sockets Layer and “TLS” or Transport Layer Security uses cryptography to encrypt data between the web server and the web browser. “XML” or Extensible Markup Language is a set of rules for encoding documents electronically usually for usability over the internet. 1 Forward-Looking Statements This Annual Report on Form 10-K and the documents incorporated by reference herein contain “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities and Exchange Act of 1934, as amended. “Forward-looking statements” are those statements that are not of historical fact, but describe management’s beliefs and expectations. We have identified many of the forward-looking statements in this Annual Report by using words such as “anticipate,” “believe,” “could,” “estimate,” “may,” “expect,” and “intend.” Although we believe these expectations are reasonable, our operations involve a number of risks and uncertainties, including those described in the “Risk Factors” section of this Annual Report and other documents filed with the Securities and Exchange Commission. Therefore, GlobalSCAPE’s actual results could differ materially from those discussed in this Annual Report. 2 Item 1. Business PART I Company Overview We provide secure information exchange capabilities for consumers and enterprises through the development and distribution of software, delivery of managed and hosted solutions, and provision of associated services. Since our organization in 1996, we have evolved from a company focused primarily on personal file transfer products, sold over the Internet, to a solution provider deriving over 90 percent of revenue from sales to small and medium business, or SMB, and enterprise customers worldwide. Today, we have thousands of enterprise customers and more than one million individual consumers in over 150 countries. In addition, our solutions are used by more than 20,000 U.S. Army users deployed worldwide. We operate primarily in the Managed File Transfer, or MFT, industry. Directly, and through partner infrastructure, we also operate in the cloud services industry and, in February 2011, announced our entry into the antivirus segment of the endpoint security market with the development of a consumer “whitelisting” product, appShield. With the recent solution additions described in this report, we are continuing our evolution from an ‘MFT company’ into adjacent solution spaces applicable to Total Path Security. The Total Path Security framework addresses data and information security in motion (for example, with traditional MFT solutions delivered as on-premises software or as a cloud service) and at rest (for example, with endpoint security solutions like appShield). Our solution portfolio facilitates delivery of critical information such as financial data, medical records, customer files and other similar documents while supporting a range of information protection approaches to meet privacy and other security requirements. In addition, these solutions help customers comply with government regulations relating to the protection of information while allowing users to reduce IT costs, increase efficiency, track and audit transactions and automate processes. Our solutions also provide data replication, acceleration of file transfer, sharing/collaboration and continuous data backup and recovery to our customers. We believe that we are strongly positioned to provide secure transfer, sharing, and replication of files that need to be transmitted inside the user’s firewall to distributed offices, or outside the user’s firewall to business and trading partners. Our initial product, CuteFTP, a file transfer protocol client program used mostly by individuals and small businesses, was first distributed in 1996 over the Internet and achieved significant success and popularity. Since then, we have continued to enhance our portfolio of products to meet the increasing demand for secure information exchange, primarily in the MFT industry. Our capabilities have evolved from personal and small business MFT products to include standard and enterprise versions of our Enhanced File Transfer Server software, with an increasing number of add-on modules that provide additional capabilities such as ad hoc file transfer, advanced auditing and reporting, government-validated cryptography, and workflow automation. We have also developed Wide-Area File Services (“WAFS”), and Continuous Data Protection (“CDP”) software which further enhances the ability to replicate, share and backup files within a wide area network or local area network (“WAN or LAN”), at WAN and LAN speeds. Most recently, we have launched managed e-mail attachment, software-as-a-service (SaaS), and cloud-based subscription solutions for information sharing solutions. Our managed e-mail attachment solution addresses the needs of customers who are constrained by the typical limits on e-mail attachment size or who require additional security, auditing, and reporting for file attachments shared through e-mail. Our SaaS and cloud-based subscription solutions allow customers to reduce their upfront and total cost of ownership and achieve other recognized benefits of cloud-based solutions, including service elasticity and strong service level agreements for IT infrastructure reliability and performance. 3 The addition of managed cloud-based subscription solutions to our portfolio in the third quarter of 2010 is a significant change in our manner of conducting business because it provides recurring revenue which builds over time, as compared to sales of on- premises software licenses which must be reconstituted every period. While we are in the very early stages of growing our subscription services, we continue to define, develop, and deliver additional solutions such as the Hosted Enhanced File Transfer Server (“Hosted EFT Server”) offering, announced in February 2011. Hosted EFT Server is a scalable and tiered service, structured for the SMB market, that also allows customers of all sizes to outsource all or part of their complex and demanding secure information exchange needs. Also in February 2011, we announced development of appShield, a consumer “whitelisting” solution designed to defeat malicious software applications by allowing only designated applications and executables (i.e., those on the “whitelist”), to run on protected systems. This approach changes the paradigm of traditional “blacklisting” solutions, such as antivirus software, which typically use signature-based approaches to identify, quarantine, or block execution of an exponentially growing number of malware threats. Industry Background Our primary industry is known as managed file transfer. Through the Total Path Security framework, directly and with partners, we also operate in the cloud services industry and (with development of appShield) in the antivirus segment of the endpoint security market. The MFT and endpoint security markets grew from mainstream adoption of the Internet, the subsequent exponential growth in data and information sharing, and the growing realization that information is a significant business currency requiring appropriate security, management, auditing, and reporting, and also subject in many cases to regulatory and privacy requirements. Similarly, the cloud services market arose from recognition that the Internet allows ubiquitous, global access to data and information services. By leveraging Internet technologies, and delivering services through appropriately secured and managed shared resources, cloud-based solutions allow businesses and other organizations to achieve economies of scale and greater operational agility. Cloud solutions also can support individual consumer needs for information access and sharing at very affordable costs. The Internet has become an integral part of daily operations for individual users and companies of all sizes, not only for e- commerce, but also as a means of managing information between central and remote locations and with associates, employees, partners, suppliers, and customers. Corporate information managers must protect business assets, ensure that policies and processes meet regulations governing the management of sensitive information, and ensure that the right people have access to the right information at the right time. Global operations, diverse business partners and networks further emphasize the need for common standards to ensure compatibility, scalability privacy, security and cost-effective integration. The MFT industry has its technical origin in the file transfer protocol. FTP dates back to 1980 (RFC 765, later superseded by RFC 959), with even earlier RFCs guiding prior attempts to establish standards for file transfer protocols. The use of file transfer protocols increased dramatically with the explosive growth of the Internet and the World Wide Web during the 1990s. The MFT industry arose from recognition that FTP, alone, does not provide adequate security and management capabilities for file transfers. MFT solutions offer a greater degree of security and control than FTP. Features available in MFT solutions now include integrated security, auditing capabilities, performance monitoring, and reporting. The MFT industry includes low cost, or even free, solutions that offer basic capabilities. However, businesses and even individuals procure more advanced solutions that provide scalability, enhanced security options, automated workflow, dedicated maintenance and support, and other features that facilitate high- confidence, cost effective file transfers. Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned, released, and scaled to meet requirements. The movement to cloud services is analogous to the 4 telecommunications shift from dedicated point-to-point circuits to a delivery model in which the entire telecommunications infrastructure potentially can be used to establish, maintain, and manage individual connections on an as-needed basis. Cloud implementations may be public, private, community or a hybrid combination. In a private cloud, the cloud infrastructure is operated solely for an organization. Within a community cloud the cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns (e.g., mission, security requirements, policy, and compliance considerations). Conversely, in a public cloud the cloud infrastructure is made available to the general public or a large industry group. A hybrid cloud is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technologies that enable data and application portability (for example, cloud bursting for load-balancing between clouds). The endpoint security market includes solutions implemented to protect individual host systems (known within the IT industry as endpoints). Specific solution categories include antivirus (including anti-spyware and anti-adware), behavior-blocking, firewall, and intrusion prevention software. While even early mainframe systems included basic user access controls, the Internet and resulting extension of computing systems to exponentially growing numbers of endpoints launched the current endpoint security market. Computer viruses, and other malware, have increased significantly in number and sophistication since the 1990s. The same Internet infrastructure that facilitates legitimate personal and business operations potentially allows malware to spread with remarkable speed and damaging effect. Antivirus software has evolved from definition, detection, and blocking of specific malware ‘signatures’ to more sophisticated heuristic and reputation-based approaches that attempt to address the variability of malware and, specifically, malware authoring techniques that allow malicious software to change signatures automatically over time. These polymorphic viruses and other newly created malware programs constitute the “zero day” threat that evades detection by traditional signature-based antivirus software. In recent years, application whitelisting has emerged as a technique for countering the most sophisticated malware. With application whitelisting, only applications and specific executables on an administrator or user-defined list of approved programs (the whitelist) are permitted to run on the protected system. Whitelisting solutions have been deployed on a limited scale in enterprises, and some consumer antivirus products now also have some whitelisting features. The need for MFT and endpoint security solutions is particularly strong for organizations faced with a daunting array of privacy and security challenges stemming from various regulatory and business requirements for data privacy and confidentiality. Regulatory and privacy requirements include federal legislation and regulations such as the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach-Bliley Act (GLBA),the Federal Trade Commission Red Flags Rules, as well as state legislation and regulations in the U.S such as California Senate Bill (SB) 1386 and the data security regulations issued by the Massachusetts Office of Consumer Affairs and Business, as well as the extraterritorial requirements such as the European Union’s Privacy Directive, some of which impose severe penalties for improper disclosure of confidential information. Additionally, industry best-practices such as the Payment Card Industry Data Security Standard (PCI DSS) and self-imposed business requirements lead to the need for consumer information, intellectual property and trade secret protection and controls. These measures offer protection against disclosure of proprietary information and also reduce corporate risks associated with the potentially devastating consequences of security breaches. Software Products Managed File Transfer Solutions — Our MFT solutions are best known for the CuteFTP product line. They primarily consist of products that help users securely move and copy files on the Internet. FTP, along with more secure protocols such as SFTP, FTP/S, and HTTP/S, requires two software programs: a client program to start a transfer and a server program to accept the connection. Our MFT product line includes CuteFTP Pro, CuteFTP Home, CuteFTP Lite, and Enhanced File Transfer Server. A substantial portion of our revenues is derived from licensing our file management products, especially Enhanced File Transfer Server. 5 Cute FTP Programs CuteFTP. CuteFTP is a “client-side” program, meaning that it permits a user to request a file from or send a file to an FTP server or host computer. The user base for this program ranges from corporate IT professionals who use it to transfer data between locations via the Internet to individual Web site operators who use it to upload their Web pages to their Web hosting provider. CuteFTP simplifies use of file transfer protocol by hiding the technical processes behind a user-friendly, graphical user interface, which allows users to “drag and drop” files between computers. CuteFTP has won several awards, including the CNet Editors’ Choice award, and has been favorably reviewed in leading online and print trade journals such as PC Magazine, WindowsNT, Yahoo Internet Life, CNet’s Download.com and Tucows, as being the most powerful, easy-to-use file transfer protocol program available. We offer CuteFTP in German, French, Spanish, Japanese, Traditional and Simplified Chinese, Russian, Portuguese and Turkish. CuteFTP was first distributed as a commercial product by GlobalSCAPE in April 1996. In October 2003, we released CuteFTP Mac, our easy-to use FTP client for the Macintosh operating system. CuteFTP Mac incorporates many of the popular features of CuteFTP for Windows, while adhering to Apple’s Aqua interface and usability guidelines. In 2008, we delivered the initial release of CuteFTP Lite, adding an entry-level FTP product to our solution portfolio. ® CuteFTP Pro. CuteFTP Pro is a secure FTP client program designed for advanced users and information technology professionals. CuteFTP Pro incorporates standards for encrypting data during transport and at rest, accelerating transfer of large files, and automating common file transfer tasks. It includes various features attractive to advanced users such as multi-part and concurrent file transfers to maximize transfer speed, additional secure protocols, scheduled file transfers, automated site backups and scripting ability for automating FTP tasks. CuteFTP Pro has been favorably reviewed by leading online publications including CNet’s Download.com, ZDNet and PC Review. CuteFTP Pro was released in March 2001. Server-Based Managed File Transfer Programs Our server software programs are designed to provide businesses with increased security, automation, and performance when compared to traditional FTP-based and e-mail delivery systems. Our server solutions also offer substantial ease-of-use advantages compared to competitive products. During 2009, we introduced Enhanced File Transfer Server, or EFT Server, Version 6, a rebranded version of our Secure FTP Server software with many new features and enhancements. Our legacy Secure FTP Server and EFT Server solutions are now available as EFT Server and EFT Server Enterprise, respectively. With the rebranding, we adopted a common, scalable solution platform that accommodates a broad family of add-on modules to support our customers’ complex information sharing needs, while also maintaining appropriate backward compatibility with our legacy solutions. During 2010, we released a new multi-platform version of the DMZ Gateway solution that replaces the previous Windows-only version Enhanced File Transfer Server. Enhanced File Transfer Server complements CuteFTP Pro and other third party FTP clients by enabling encrypted transfers using SSL, SSH2 and advanced S/KEY password encryption. When used with CuteFTP Pro, Enhanced File Transfer Server offers a complete digital certificate management system, giving system administrators the ability to manage digital certificates, as well as initiate back-end processes with other customer systems. The latter functionality can be used as a partial or total replacement for more complex enterprise-level electronic data interchange systems, or EDI. Additional features include remote management capability, the ability to operate multiple FTP sites with unique user management from a single server, and the ability to manage user accounts with advanced settings for maximum security and control. With the release of Version 6, Enhanced File Transfer Server supports add-on modules and software such as the Auditing and Reporting module, High-Security Payment Card Industry module, OpenPGP module, Web 6 Transfer Client, Secure Ad hoc Transfer module, DMZ gateway, and FIPS 140-2 validated cryptographic libraries. Enhanced File Transfer Server Version 6 and the latest version of CuteFTP Pro also received the Certificate of Networthiness (CoN) from the U.S. Army Network Technology Command (NETCOM) during 2009. Our receipt of this certificate enables Army installations worldwide to install and operate these server and client-based secure information exchange solutions. The availability of add-on modules, and migration to a common software code base with Enhanced File Transfer Server Enterprise have dramatically increased the capabilities of EFT Server, as compared to the legacy Secure FTP Server. Enhanced File Transfer Server was first released in January 2002, as Secure FTP Server. Secure FTP Server has been favorably reviewed by leading publications including Server Watch and File Forum. Enhanced File Transfer Server Enterprise. Enhanced File Transfer Server Enterprise is an enterprise file server, building on the base features of Enhanced File Transfer Server. Enhanced File Transfer Server Enterprise supports large-enterprise installations and is compatible with the Advanced Workflow Engine (AWE) module released by GlobalSCAPE in 2009. The AWE Module provides over 200 built-in “drag and drop” workflow actions, including sending SNMP traps, communicating with mainframe computers, redirecting or relocating files, integrating SQL and XML capabilities, and executing third-party applications, custom programs, and batch files. Enhanced File Transfer Server Enterprise also supports the Applicability Statement 2 (AS2) protocol, encrypting file system (EFS), the multi-site (and, as of early 2010, multi-platform) version of DMZ Gateway, two-factor authentication, active directory administration, Oracle DBMS, and many more enterprise capabilities. Enhanced File Transfer Server Enterprise was first released in November 2004 and has been favorably reviewed by leading publications including Server Watch and Network Products Guide, which named EFT Server a winner of a 2010 Product Innovation Award for Managed File Transfer. Wide-Area File Services and Continuous Data Protection Solutions — Our Wide Area File Services, or WAFS, software provides a file sharing, collaboration, and replication solution over multiple sites. WAFS technology can have our CDP product added to it to provide enterprises with a file access and data protection combination that centralizes data storage and IT administration facilities but doesn’t compromise data sharing and protection. Wide Area File Services. Our WAFS software delivers a unified and accelerated file access system, instant file-sharing and server-to-server mirroring across any distance, with full coherency and at near-LAN access speeds. WAFS delivers a true wide area file solution for collaboration. Continuous, real-time multi-directional acceleration and mirroring technology ensures that data exists in multiple places simultaneously and in complete synchronization, no matter where a change in any file is made. The data is mirrored between servers on the LAN, virtual private network, or across firewalls in real time, with full support for file locking ensuring coherency. Our WAFS product ensures bandwidth efficient WAN utilization, and that users have access to the most recent data. The off-line mode ensures continued data access in the event of WAN or server outage. Our WAFS software is easy to deploy and manage remotely. During 2009, we announced a significantly enhanced version of WAFS, including support for the Autodesk Revit ® Architecture construction and design application, along with broader enhancements that improve data replication performance and collaboration capabilities. During 2010, we announced additional performance enhancements to the WAFS solution, focused on file upload and download time improvements. ® CDP. Our CDP continuous backup software transparently and continuously captures data from local and remote servers, eliminating the backup window and restoring data rapidly. Our software-only solution supports the ability to backup any number of branch servers or remote laptops to one or more centrally located systems. As files change, file servers backup in real time to the customer’s backup site which can be at the same or a remote location. The backup server can keep any number of past versions of each file (and deleted files) which 7 gives the customer immediate restore, as well as the ability to perform point-in-time snapshots. Bandwidth requirements are minimal since only file differences are transferred to the backup system. Managed E-mail Attachment Solution — Mail Express. Not all customers will use FTP or even traditional MFT solutions, to transfer large files. Some customers prefer using their familiar e-mail application to send and receive large files such as images, video, data files, etc. However, e-mail traditionally has been ill-suited to delivery of certain attachments due to typical infrastructure and administrator-defined limitations on e-mail attachment size. In many cases, these limitations preclude sending or receiving e-mail attachments larger than even 10 or 20 MB. Mail Express is a software add-in (also sometimes referred to as a plug-in) compatible with Microsoft Outlook. The add-in transparently redirects e-mail attachments, up to 25 GB in size, for delivery in accordance with administrator-defined policies. Attachments specified in the policy (for example, by type or size) are replaced in the e-mail message with a hyperlink; the files are transferred securely to the Mail Express server. The e-mail recipient clicks the hyperlink and is able to download the files from the Mail Express server using standard web-based download procedures with all communications using HTTPS (SSL or TLS encryption). This approach can ease the load on the e-mail infrastructure and the long-term storage requirements associated with e- mail attachments. Mail Express also allows enhanced tracking and auditing of the file attachments through read receipts and log files. Mail Express requires little or no user training because the add-in is transparent from the perspective of the sender and the recipient is able to use a familiar web browser for downloading the attachments. Mail Express was first released in December 2008. During 2010, we released Mail Express 3, a significant improvement over prior versions. The improvements in Mail Express 3 introduced two-way file sharing and collaboration and also improved the administrator experience through enhanced workflow in the user interface and a simplified deployment process. Endpoint Security Solution — appShield. In February 2011 we announced ongoing development of appShield, a consumer endpoint security solution to protect computers against the rapid growth of viruses and other malicious software. The appShield solution is based on proven enterprise-level application whitelisting technology from CoreTrace Corporation, the recognized leader in dynamic and client-based application whitelisting. Previously, in 2010, we entered into a reseller agreement with CoreTrace, under which we resell CoreTrace’s BOUNCER enterprise whitelisting solution. Unlike traditional “blacklisting” solutions, such as antivirus software, that attempt to detect and remove infected files and applications running on a computer, whitelisting allows users to lock servers, personal computers, and other devices into a known, trusted state and allows only approved applications to run. By ensuring that only approved applications can run, appShield automatically blocks unauthorized applications—including viruses and rogue applications that may have been inadvertently downloaded from email, websites, or social media, for example. Maintenance and Support We offer maintenance and support, or M&S, contracts for all of our software products. These M&S contracts entitle the licensee to software upgrades and technical support services in accordance with the terms of our M&S contract. Standard technical support services are provided via e-mail and telephone during our regular business hours. Optionally, for Enhanced File Transfer Server Enterprise and WAFS software we offer a Platinum M&S contract which provides access to emergency technical assistance 24 hours per day 7 days a week. 8 Cloud-based Services GlobalSCAPE Managed Solutions — During 2010, we announced that we had executed a partner agreement with Rackspace Hosting, Inc., a world leader in the hosting and cloud computing industry. Through Rackspace’s infrastructure, GlobalSCAPE delivers cloud-based managed file transfer solutions for the secure exchange of business-to-business data, including large files and sensitive data. Our cloud-based solutions allow customers to outsource all or part of their complex and demanding information exchange needs to reduce costs, improve operational efficiencies, track and audit transactions, and provide a greater level of security. Managed Information Xchange. Our Managed Information Xchange, or MIX, service delivers a hosted and managed MFT solution that enables cost effective, secure exchange of business-to-business data, including large files and sensitive data. MIX is a fully GlobalSCAPE-managed solution for companies seeking complete support for the contracted services. The tiered service allows customers to outsource all or part of their complex and demanding information exchange needs to reduce costs, improve operational efficiencies, track and audit transactions, and provide a greater level of security. Available solution tiers range from trial and proof-of- concept implementations to enterprise-scale managed services. Key benefits and features of the Managed Information Xchange offering include: “pay as you go,” flexible pricing that helps customers eliminate upfront capital expenditures; reduced ongoing maintenance expenses, including hardware, software, personnel, utility services, and backup costs; improved IT infrastructure reliability and performance enabled by the Rackspace global infrastructure.; easy and rapid deployment with scalable processing and storage capabilities; the market-leading features and security capabilities of our Enhanced File Transfer Server solution adopted by thousands of customers worldwide; and operation of the cloud- based secure file transfer capability by our technical resources, in accordance with service level agreements. We introduced our MIX solution in July 2010. In February 2011, Info Security Products Guide a leading information security advisory guide, recognized MIX as the winner of the 2011 Global Excellence Award in the Cloud category. The Info Security Product Guide recognition, together with previous awards received for Enhanced File Transfer Server, establishes an initial portfolio of industry and market validations for our cloud-based solutions. Hosted Enhanced File Transfer Server. In February 2011, we announced availability of our Hosted Enhanced File Transfer Service. This service expands our cloud-based solution portfolio by integrating a hosted version of our market- Enhanced File Transfer Server solution with infrastructure from Rackspace Hosting. This scalable and tiered service is structured for the SMB market, and also allows customers of all sizes to outsource all or part of their complex and demanding secure information exchange needs. Through such outsourcing, customers can greatly reduce costs, increase efficiencies, track and audit transactions, and provide a greater level of security and compliance, at affordable price points. The Hosted EFT Server offering delivers these benefits while allowing direct customer management of the Enhanced File Transfer Server solution (as contrasted with the fully managed MIX service) Software as a Service Solution — CuteSendIt. A SaaS, solution delivers a software application over the Internet, or across other networks, to users on an on-demand basis. The SaaS delivery model allows central administration and maintenance of the application with user access provided through a provider hosted website. SaaS appeals to many prospective customers because it uses cloud computing approaches in which the customer does not need to install special software on the computer systems accessing the application. Also, SaaS eliminates the need for the customer to purchase, install and maintain servers and other IT infrastructure to use and maintain the software. Our SaaS solution, CuteSendIt, is a file transfer service for individuals, professionals, and businesses. CuteSendIt uses cloud computing approaches to deliver files through a hosted web portal. This solution approach meets the needs of users who do not have, or wish to invest in, file transfer infrastructure such as FTP servers or 9 even client application software. The solution scales from single-user to multi-user licensing with varying file transfer capabilities based, for example, on a maximum number of files, the aggregate data volume for files transferred each month, and the amount of long-term online storage required for the files. Depending on the necessary level of service, CuteSendIt is available in plans ranging from a free plan up to a multi-user plan for $79.99 per month. Users access the CuteSendIt web portal at www.cutesendit.com which is also accessible from the GlobalSCAPE site. From there the portal users can upload files to a CuteSendIt hosted server managed by GlobalSCAPE or its partners for delivery in accordance with the previously selected licensing. CuteSendIt delivers the files, using SSL encryption for the paid plans, by sending an e-mail message to the recipients. The body of the e-mail message contains text entered by the sender through the portal. The e-mail messages also include hyperlinks to the files. The e-mail recipient clicks the hyperlink and is able to download the files from the CuteSendIt server using standard web-based download procedures. CuteSendIt was first released in July 2008. Professional Services We offer a range of professional services to complement our software and cloud-based solutions. These professional services include product customization and system integration, solution “quickstart” implementations, business process and workflow, policy development, and education and training. In addition, we may provide longer-term engineering services, including supporting multi- year contracts, if necessary to support certain solution implementations and integrations. Product Customization and System Integration — Through our product customization and system integration services, we customize the branding, reporting, and administration capabilities of our solutions to meet specific customer requirements. Typical deliverables include customized implementations, documentation for installations and customizations, and the installer programs necessary to install or reinstall the applicable solutions, drivers, and other software included in the customization and systems integration project. Custom Branding. Custom branding services allow customers to incorporate logos, different fonts, colors, hyperlinks, and additional text within the Web Transfer Client and the SAT Module used with our Enhanced File Transfer Server solution. Custom Reporting. Custom reporting services leverage the flexibility and power of the ARM Module, to deliver customer- specific formatting and content, using data tracked within the Enhanced File Transfer Server solution. Custom reporting services also can provide customers with a web browser-accessible reporting module for the Enhanced File Transfer Server solution. This module allows users to generate reports without requiring administrative access to the Enhanced File Transfer Server. Custom Administration and System Integration. Custom administration and system integration services provide web-based administration and development capabilities for our Enhanced File Transfer Server solution. A browser-accessible administrative module facilitates sub-domain administration of Enhanced File Transfer Server through separation of duties. The web-based user provisioning does not require full administrative access to the Enhanced File Transfer Server and provides convenient access without the need to install client software. Other web services-based customizations expose much of the functionality within the Enhanced File Transfer Server component object model (COM) application programming interface (API). Exposure of the COM API allows integration with a customer’s existing IT infrastructure via open standards. Solution Quickstart Implementation — Our Quickstart Implementation services accelerate implementation of our file transfer solutions within customer IT environments. Our engineers lead the product installation and configuration and provide training and knowledge transfer to customer administrators. Quickstart Implementation services are available for the Enhanced File Transfer Server and WAFS secure information 10 exchange solutions. Typical deliverables include requirements documentation, implementation plans, and configuration documentation. Business Process and Workflow — Business Process and Workflow services include workflow site surveys and implementation of the AWE Module used with our Enhanced File Transfer Server solution. The workflow site surveys assist customers with documenting business processes as they pertain to information delivery and sharing associated with file transfers. Typical deliverables include business process documentation for file transfers, recommendations for process automation, workflow implementation and use documentation, and installation of the AWE Module for use with the Enhanced File Transfer Server solution. Policy Development — Policy Development services help customers establish and implement file transfer policies that address regulatory requirements and comply with corporate policies. Typical deliverables include a map or census of existing file transfer policies, standards, and procedures; recommended improvements based on our best practices; and updated policy documentation with customer-approved improvements. Education and Training — Education and Training services provide classroom and hands-on instruction for implementing, maintaining, and optimizing our secure information exchange solutions. Intermediate and advanced classes cover the use of our Enhanced File Transfer Server solution. We also provide business process instruction tailored to the AWE Module. We can deliver training at customer facilities or from our San Antonio location. Typical deliverables include the instruction hours plus training materials and solution documentation. Longer-Term Engineering Services—In addition to the previously described professional services, we have developed our capacity to deliver longer-term engineering services. During the third quarter of 2010 we announced that we are a subcontractor on the McLane Advanced Technologies (MAT) industry team that won a $52.3 million re-compete contract for the U.S. Army Standard Army Maintenance System (SAMS-E). Work on this three-year contract began late in 2010. As part of the MAT industry team, we are providing professional and technical services to support the SAMS-E program, including the Enhanced File Transfer Server (known as Secure FTP Server before the release of Enhanced File Transfer Server 6 in early 2009) and CuteFTP solutions integrated into the SAMS-E environment. We have deployed several engineers onsite at the MAT facility in Temple, TX, and potentially may adjust the size of this team as required to best support contract requirements. Our increased capacity to deliver longer-term professional services also may be applicable to the commercial sector as we work closely with our enterprise customers to help them best sustain their secure information exchange solutions and infrastructure. Sales and Marketing In recent years, we have increased our emphasis on developing our direct sales staff and reseller channels to capture those sales that require individual attention. For example, sales of our more complex enterprise solutions, such as Enhanced File Transfer Server, WAFS and Mail Express, sales to larger enterprises, and sales of managed solutions and M&S contracts are delivered by our direct sales staff and resellers. We provide both our sales staff and our resellers with training and professional development opportunities to ensure that they are capable of meeting the needs of our prospects and customers. These sales team development activities focus on technical and process- oriented topical areas to enhance the ability of our sales team to identify prospects, best position our solutions, and develop pipeline opportunities into sales. Our reseller and distributor relationships allow us to increase our market reach, including pursuing international sales. We have established such relationships within specific industries, such as the government sector, and in multiple geographies outside of North America, for example in Europe, Australia, Asia, Latin America, and Africa. 11 We also sell our file transfer client programs, such as CuteFTP, as well as Enhanced File Transfer Server and certain of our enterprise solution add-on modules via download from our Web site, www.globalscape.com. Prospective buyers may use certain of our software products for free during an evaluation period of up to thirty days. The programs are automatically disabled if a license is not purchased by the end of the trial period. Our software is also available for download from a variety of independent Internet software sites such as CNet’s Download.com, as well as sites in Western Europe, Canada, Australia, and Asia. Post-sale, we provide customers with both free and contracted support. To facilitate self-help for common inquiries and issues, we provide free customer support via a searchable knowledge base on our website. We also sell maintenance and support plans to customers requiring assistance from our support services team. Our marketing activity during 2010 consisted primarily of online paid advertising (for example, Google AdWords), improvement of natural search-engine results, marketing communications initiatives such as press releases and increased media outreach, and attendance at occasional industry trade shows, such as the RSA Security Conference. Our reliance on online paid advertising has declined in recent years as we have transitioned to a more strategic business development and sales approach, as reflected in the substantial increase in our enterprise sales. We also have reduced our reliance on online paid advertising by conducting periodic search-engine optimization to enhance our ranking for particular key words in natural search results of major search engines. We also leverage our website for certain marketing communication activities. The CuteFTP products, in particular, are well known and easy to install and use. This makes them good products for attracting users to our website. We implemented a major redesign of our website in 2010 to provide a more solution-oriented perspective of our business, improve site navigation, and provide additional opportunities for visitors to contact us through the website. Customers Our solutions have been sold to most of the Fortune 100. Our customers are international, with our products having been sold into more than 150 countries. No single customer accounts for more than 10 percent of our revenue. We derive most of our revenue from commercial customers in the U.S., U.K., Canada, and Australia. Our primary commercial vertical markets include finance, health care, energy, retail, manufacturing, and engineering. We also have a significant customer base in the local, state, and federal government spaces. We continue to pursue additional government business by leveraging our certifications and industry validations. Seasonality Our products are marketed to individuals as well as large organizations. As a result of this mix within our customer base, we did not experience significant seasonality in our sales during 2010, nor do we expect seasonality to have a significant impact on sales in 2011. Network and Equipment We have contracted with various network providers for Internet access. Our arrangements provide for redundancy in the event of a failure, and also for expansion of available bandwidth in the event that there is a dramatic increase in demand. To protect critical customer data, GlobalSCAPE’s Internet shopping cart utilizes SSL encryption. During 2009, we completed an internal project to implement other technical and physical 12 measures and procedures compliant with the PCI DSS. As part of this project, we retained the services of a certified Approved Scanning Vendor and verified our compliance with the PCI DSS. We have dedicated servers on and off site and expansion plans in place to allow rapid and cost effective scalability. Our offsite servers and data backup procedures provide a warm backup to our onsite servers for contingency purposes. The backups are performed in accordance with our disaster recovery plan. Research and Development Our internal software engineers are responsible for software design, managing the development process, testing and quality assurance. We utilize offshore developers for a portion of the coding phase of software development for certain products. Our use of external developers allows us to tap into a highly skilled labor pool, maintain a 24-hour development schedule, decrease time to market, and minimize programming costs. All phases of development, including scope approval, functional and implementation design, object modeling and programming, are subject to extensive internal quality assurance testing. During 2010, we continued our prior focus on improving our quality assurance testing infrastructure and practices. Technical reporting, for example through WinQual, and customer support feedback during 2010 confirmed the continuing positive effect of our enhanced R&D and quality assurance processes. For the years 2010, 2009 and 2008, we spent approximately $3.0 million, $2.8 million and $2.8 million, respectively, on research and development all of which was expensed. We expect to continue to increase our research and development spending in 2011 as we focus on improving our current products and introducing new products. Competition The file management, content management and Web development software market sectors are intensely competitive, subject to rapid change and are significantly affected by new product introductions and other activities of market participants. Our primary competitors vary by product and are listed below. We have limited information regarding our products’ market shares in their respective categories. Many of our competitors have substantially greater financial, technical, sales, marketing, personnel, and other resources, as well as greater name recognition and a larger customer base than we do. Significant competition characterizes the markets for our traditional MFT products and we anticipate that we will continue to face increasing pricing pressures from competitors in the future. Moreover, given that there are low barriers to entry into the software market, and the market is rapidly evolving and subject to rapid technological change, we believe that competition will persist and intensify in the future. With these market forces we have experienced price decreases on some products and faced price pressure from free and low cost competitors over the last several years. A reduction in the price of our products would negatively affect gross margin percentage, and would require us to increase software unit sales, in order to maintain net revenues at existing levels. For more discussion on the risks associated with our competition, you should read the information under “Risk Factors — Risks Related to Operations.” CuteFTP Home and Lite. CuteFTP exists in a highly competitive environment with numerous FTP software utilities available on the Internet. We believe our primary competitors are WS_FTP from Ipswitch, Inc. and FTP Voyager by Rhino Software, Inc. CuteFTP was the second Windows-based FTP client to market and is consistently among the most frequently downloaded FTP clients on popular download sites. CuteFTP Mac, our FTP client for the Macintosh platform, competes with Fetch, by Fetch Softworks, Interachry, by Stairways Software Pty Ltd., and Transmit FTP, by Panic Inc. 13 CuteFTP Pro. CuteFTP Pro competes in the higher end of the same market as CuteFTP, targeting the security-minded IT professional. CuteFTP Pro is positioned as one of the only secure FTP client programs that support a wide range of security standards related to the FTP protocol. Competitors in the general FTP market offer products that support a smaller subset of these security standards and address a narrower segment of the secure FTP market. Competitors include Van Dyke, Inc., Ipswitch, Inc., and Rhino Software, Inc. Enhanced File Transfer Server. EFT Server competes against a limited number of secure Windows-based FTP servers. We believe our primary competitors are WS_FTP Server, Serv-U, and JSCAPE. EFT Server has the advantage of leveraging the success of CuteFTP Pro through product integration, offering proprietary extensions to the FTP protocol, and cross-marketing efforts to an existing customer base. Enhanced File Transfer Server Enterprise. EFT Server Enterprise competes in the managed file transfer server market. We believe our primary competitors are Axway (Tumbleweed), IBM-Sterling Commerce, Proginet-Tibco, SSH’s Tectia and Ipswitch (with their purchase of MOVEIt DMZ). EFT Server Enterprise has the advantage of being very cost effective in its market while leveraging and extending the security and file management features of our other FTP products. WAFS. WAFS competes in the Wide Area File Services/Storage market. We believe our primary competitors are Riverbed, Blue Coat (Packeteer) and Cisco, who are delivering proprietary based appliances. We believe that WAFS has the advantage of being a software only solution which leverages corporate infrastructure and minimizes the total cost of ownership. CDP. CDP competes in the highly competitive continuous data protection market. We believe our primary competitors are CA XOsoft, Doubletake and Symantec/Veritas. We believe that CDP has the advantage of transparently and continuously capturing data from local and remote servers, eliminating the backup window and restoring data rapidly. Mail Express. Mail Express competes in areas of the file transfer market associated with e-mail attachment offloading. We believe our primary competitors are Accellion, Proginet-Tibco, Leapfile, and Biscom. Mail Express has the advantage of centralized policies for outbound file attachments and a transparent end-user experience, which allows for rapid customer deployments. CuteSendIt. CuteSendIt competes in the SaaS, segment of the file transfer market. There are a large number of competitors, but we believe our primary competition includes YouSendIt, LeapFILE, Dilbert Files, Dropbox, DropSend, SendThisFile, Box.net, and Pando. CuteSendIt has the advantage of supporting multiple users, allowing larger files to be sent, and providing additional file tracking. However, some of the competitors offer significant capabilities for free. Cloud-based Managed Solutions for Secure Information Exchange. Our MIX and Hosted Enhanced File Transfer Server solutions compete with MFT SaaS solutions. We believe our primary competitors are Ipswitch, Axway, IBM-Sterling Commerce and Accellion. MIX and Hosted Enhanced File Transfer Server have the advantage of leveraging cost effective, secure hosting and cloud infrastructures, as well as Enhanced File Transfer Server management services provided by GlobalSCAPE’s experts. Governmental Regulation Export Control Regulations. All of our products are subject to U.S. export control laws and applicable foreign government import, export and/or use requirements. The level of control generally depends on the nature of the goods and services in question. For example, the level of control is impacted by the nature of the software and encryption incorporated into our products. Where controls apply, the export of our products may require an export license or authorization or that the transaction qualify for a license exception or the equivalent, and may 14 also be subject to corresponding reporting requirements. For the export of some of our products, we may be subject to various post- shipment reporting requirements. Minimal U.S. export restrictions apply to all of our products, whether or not they perform encryption functions. Additionally, because GlobalSCAPE is a Department of Defense contractor, there are certain registration requirements that may be triggered by our sales. In addition, certain GlobalSCAPE items and/or transactions may be subject to the International Traffic in Arms Regulations (ITAR) if our software or services are specifically designed or modified for defense purposes. Companies engaged in manufacturing or exporting ITAR-controlled goods and services (even if these companies do not export such items) are required to register with the U.S. State Department. Enhancements to existing products may, and new products will, be subject to review under the Export Administration Act to determine what export classification they will receive. In light of the ongoing discussions regarding anti-terrorism legislation in the U.S. Congress, there continue to be discussions regarding the correct level of export control. Export regulations may be modified at any time. Modifications to the export regulations could reduce or eliminate our ability to export some or all of our products from the U.S. without a license in the future, which could put us at a disadvantage in competing for international sales compared to companies located outside of the U.S. that would not be subject to these restrictions. Modifications to the export regulations could prevent us from exporting our existing and future products in an unrestricted manner without a license or make it more difficult to receive the desired classification. If export regulations were to be modified in such a way, we may be put at a competitive disadvantage with respect to selling our products internationally. We are working on enhancing our systems to address the impact of these regulations on our products and services and understand the need to comply. We will complete technical reviews on any new products that we acquire or develop that may be subject to the requirements before we can export them. Privacy Laws. As our business evolves to incorporate more cloud and SaaS solutions, we will receive, transmit, and store more and more information and as a result we may be subject to various federal and State regulations regarding the protection of personally identifying information. Applicable laws may include, without limitation, federal laws such as the GLBA and HIPAA, as well as state and regulations in the U.S., as international laws and regulations including the European Union’s Privacy Directive. In the event our systems are compromised by an unauthorized party, many of these privacy laws require that we provide notices to our customers whose personally identifiable data we reasonably believe may have been compromised. To mitigate the risk of compromised information, we use encryption and other security to protect our databases. Intellectual Property We regard some of the features of our internal operations, software, and documentation as proprietary and rely on copyright, patent, and trademark and service mark laws and trade secret protection, such as confidentiality procedures, contractual arrangements, non-disclosure agreements and other measures to protect our proprietary information. Our intellectual property is an important and valuable asset that enables us to gain recognition for our products, services, and technology and enhance our competitive position and market value. As part of our confidentiality procedures, we generally enter into non-disclosure agreements with our employees and independent contractors, resellers, and corporate partners, and we enter into license agreements with respect to our software, documentation, and other proprietary information. Our standard license agreements are transferable only in limited circumstances and have a perpetual term and our hosted solutions restrict access and have a definite term. We also educate our employees on trade secret protection and employ measures to protect our facilities, equipment, and networks. Our trademarks, copyrights and technology are central to our business. We have U.S. federal trademark registrations for GlobalSCAPE and design, CuteFTP, CuteFTP Pro, CuteSendIt and design, Enhanced File Transfer Server and design, Mail Express, Availl and SnapEdit and pending U. S. federal trademark applications for appShield and design, Mail Express and design, CuteSendIt and design, DMZ Gateway, Stop Tomorrow’s 15 Viruses Today, Total Path Security, Stop to Ask and other products on our roadmap. We have trademarks registered in the European Union for GlobalSCAPE and pending in Canada. We have obtained twenty-seven United States copyright registrations for all but the most recent versions of our software applications, and have applied for registration for the most recent versions. We also currently have one patent and one patent application in the U.S. Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy aspects of our products or to obtain and use information that we regard as proprietary. Policing unauthorized use of our products, which are licensed by the thousands and sold world-wide, is difficult. While we are unable to determine the extent to which piracy of our software products exists, software piracy is a persistent problem. In selling our products, we rely primarily on click-wrap licenses which are not signed in writing by licensees, and may be unenforceable under the laws of certain jurisdictions. In addition, the laws of some foreign countries do not protect our proprietary rights to as great an extent as do the laws of the United States. Companies in the software industry, and other patent and trademark holders seeking to profit from royalties in connection with grants of licenses, own large numbers of patents, copyrights, trademarks, service marks, and trade secrets and frequently enter into litigation based on allegations of infringement or other violations of intellectual property rights. We have received, and may receive in the future, communications from third parties asserting that our products infringe, or may infringe, the proprietary rights of third parties, seeking damages resulting from such infringement or indicating that we may be required to obtain a license or royalty from such third parties. For more discussion on the risks associated with our intellectual property, you should read the information under “Risk Factors,” especially “Risks Related to Legal Uncertainty.” As of February 28, 2011, we had 83 full-time and 1 part-time employee organized within eight functional areas. The employee distribution according to function is as follows: Employees Department Management and Administration Research and Development Quality Assurance Marketing Information Services Professional Services Sales Customer Support Total Number of Employees 12 16 4 3 8 5 19 17 84 None of our employees are covered by collective bargaining agreements and we believe our employee relations are good. Available Information We file annual, quarterly and current reports, proxy statements and other information with the Securities and Exchange Commission. You may read and copy any document we file with the SEC at the SEC’s public reference room at 100 F Street, NE, Room 1580, Washington, D.C. 20549. Please call the SEC at 1-800-SEC-0330 for information on the public reference room. The SEC maintains an internet web site that contains annual, quarterly and current reports, proxy statements and other information that issuers (including GlobalSCAPE) file electronically with the SEC. The SEC’s web site is www.sec.gov. Our Annual Report on 16 Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and other reports and amendments filed with the Securities and Exchange Commission are available free of charge on our web site at www.globalscape.com in the Investor Relations section as soon as practicable after such reports are filed. Information on our website is not incorporated by reference into this Form 10-K and should not be considered part of this report or any other filing that we make with the SEC. Item 1A. Risk Factors We have described below risks that we are aware of that could have a material adverse effect on your stock ownership and our business. Risks Related to Our Operations Our addition of subscription services, such as our cloud-based Managed Information Xchange and Hosted Enhanced File Transfer Server solutions announced in 2010 and early 2011, may adversely impact our prior revenue growth in the near term as some opportunities that otherwise would have materialized as software license sales potentially shift to subscription-based sales. Much of our revenue growth in recent years has been derived from sales of software licenses for our enterprise solutions, especially Enhanced File Transfer Server. Software license sales typically are intended for implementations on customer premises and are recognized into revenue when delivery of the software has occurred and collection of fees from the customer is deemed probable. In practice, software sales typically are recognized into revenue within 30 to 90 days of the sale. Subscription services, on the other hand, are recognized into revenue as the services are delivered (assuming collection is deemed probable), typically on a monthly basis. Therefore, only a fraction of the total value of a subscription services sale is recognizable into revenue each month. This fraction becomes less as the contract term increases from 12 to 24, or even 36 months. The impact of subscription services on prior revenue growth trends depends on several key factors, including the number of customers who may shift from software licenses to subscription services, the subscription term and fees, and the comparative value of the opportunity had it materialized as a software license sale instead of as a subscription service. Generally, for a fixed number of opportunities (that is, without considering the possibility that a new service offering may result in additional sales opportunities), addition of subscription services reduces revenue growth rates for several quarters for the associated solutions until cumulative subscription revenue increases and, potentially, surpasses comparable software license revenue. The revenue impacts are particularly pronounced early in the introduction of subscription services because there has been only a short time period for accumulation of the recurring revenue stream. Because we announced our subscription services relatively recently, in the third quarter of 2010, there is no historical basis for quantifying some of these key risk factors or assessing the extent to which availability of our new subscription services may increase the total number of sales opportunities. Therefore, it is difficult to predict the impact of our cloud-based subscription services on our prior revenue growth trends. However, revenue derived from sales of our Enhanced File Transfer Server solution, the comparable on- premises software solution in our portfolio, is most subject to transitory risk from the introduction of these subscription services. Entry into adjacent markets with new solutions is a significant element of our business strategy. Our future growth may be limited if our new solutions do not achieve significant market traction or achieve traction more slowly than anticipated. We have announced several new solutions since the beginning of 2010, including our Managed Information Exchange and Hosted Enhanced File Transfer Server cloud-based solutions, the appShield consumer security 17 solution, and a new version of Mail Express. Through introduction of these solutions, we are entering the cloud services and endpoint security markets and, with the new release of Mail Express, extending our capabilities in the MFT market. We believe the cloud services and endpoint security markets potentially provide significant upside to our historical MFT business results. However, entering and gaining traction in such markets will require that we market, sell, and support these solutions effectively. Each of these success factors has inherent risks due to, for example, our limited corporate expertise in the adjacent markets and the possibility that the specific buyers of solutions in these adjacent markets may be different from the buyers with whom we interact throughout our traditional MFT sales cycle. In addition, entering, obtaining traction, and sustaining growth in these markets requires investments in engineering, marketing, sales, customer support, and internal business systems. Because our experience suggests that it may take several quarters, or even longer, to obtain market traction with a new solution and identify the trends necessary to develop projections of future business performance, it is difficult to determine when, or if, these investments will be offset by increased sales and revenue. Therefore, entry into new markets like cloud services and endpoint security may adversely impact our financial results in the future. Fluctuations in professional services revenue may be greater than experienced in previous reporting periods and have a disproportionate impact on our financial results. For example, increased professional services sales, especially to the government, may result in lower earnings as a percentage of revenue. Our solution portfolio includes software licenses, subscription services, and professional services. Because they are relatively labor intensive, professional services typically have substantially lower margins than software solutions and subscription services. However, these services represent a strategic capability that helps customers plan, implement, and sustain our solutions and also provide us with the demonstrated past performance necessary to participate in certain procurements. Professional services historically have been an immaterial contributor to our revenue and earnings, typically representing much less than five percent of our revenue. However, since the third quarter of 2010 we have added several engineers to the McLane Advanced Technology (MAT) industry team supporting the US Army’s Standard Army Maintenance System—Enhanced (SAMS-E) program. We also may adjust, up or down, our professional services support to the Army, and to other customers within the government and commercial sectors, in a given reporting period. Depending on our mix of software licenses, subscription, and professional services revenue in a given reporting period, our earnings as a percentage of revenue may fluctuate from historical norms. For example, if we were to derive a relatively large (compared to historical norms) component of our revenue from professional services in a reporting period, earnings as percentage of revenue may decline in that period due to lower margin contribution from the labor-intensive services as compared to software license and subscription service revenue. If we are unable to develop and deliver new and enhanced products and services that achieve widespread market acceptance, or if we are unable to continually improve the performance, features, and reliability of our existing products and services, our business and operating results could be adversely affected. Our future success depends on our ability to respond to the rapidly changing needs of our customers by developing or introducing new products, product upgrades, and services on a timely basis. We have in the past incurred, and we believe that we will continue to incur, significant research and development expenses as we strive to remain competitive. Innovation, new product development, and go-to-market activities involve a significant commitment of time and resources and are subject to a number of risks and challenges including: • Developing, sustaining, and appropriately leveraging market intelligence to identify areas of market need that offer potentially high return on investment for solution development; 18 • • • • • • • • Managing the length of the development cycle for new products and product enhancements, which may be longer than originally expected; Adapting to emerging and evolving industry standards and to technological developments by our competitors and customers; Extending the operation of our products and services to new platforms and operating systems; Entering into new or unproven markets with which we have limited experience; Managing new product and service strategies, including integrating our various security and file replication technologies, management solutions, customer service, and support into unified enterprise security and file replication solutions; Incorporating acquired products and technologies; Developing or expanding efficient sales channels; and Obtaining sufficient licenses to technology and technical access from operating system software vendors on reasonable terms to enable the development and deployment of interoperable products, including source code licenses for certain products with deep technical integration into operating systems. If we are not successful in managing these risks and challenges, or if our new products, product upgrades, and services are not technologically competitive or do not achieve market acceptance, we could have expended substantial resources and capital without realizing sufficient revenues in return, and our business and operating results could be adversely affected. We have grown, and may continue to grow, through acquisitions that give rise to risks and challenges that could adversely affect our future financial results. We have in the past acquired, and we may acquire in the future, other businesses, business units and technologies or intellectual property. Acquisitions involve a number of special risks and challenges, including: • Complexity, time, and costs associated with the integration of acquired business operations, workforce, products, and technologies into our existing business, sales force, employee base, product lines, marketing and technology. The possibility exists that the integration ultimately may not be successful; • • • • • • • Diversion of management time and attention from our existing business and other business opportunities during the due diligence activities and throughout the integration; Loss or termination of employees, including costs associated with the termination or replacement of those employees; Assumption of debt or other liabilities of the acquired business, including litigation related to alleged liabilities of the acquired business; The incurrence of additional acquisition-related debt as well as increased expenses and working capital requirements; Dilution of stock ownership of existing stockholders, or earnings per share; Increased costs and efforts in connection with compliance with Section 404 of the Sarbanes-Oxley Act; and Substantial accounting charges for restructuring and related expenses, write-off of in-process research and development, impairment of goodwill, amortization of intangible assets, and stock-based compensation expense. 19 If integration of our acquired businesses is not successful, we may not realize the potential benefits of an acquisition or undergo other adverse effects that we currently do not foresee. To integrate acquired businesses, we must determine and leverage the actual market synergies, sustain and even extend the business performance of the acquired entity, implement our technology systems in the acquired operations and integrate and manage the personnel of the acquired operations. We also must effectively integrate the different cultures of acquired business organizations into our own in a way that aligns various interests. Through the acquisition, we also may need to enter new adjacent markets in which we have no or limited experience and where competitors in such markets have stronger market positions. The time and expense to market, sell and support new solutions introduce additional risk to current operations. Any of the foregoing, and other factors, could harm our ability to achieve anticipated levels of profitability from acquired businesses or to realize other anticipated benefits of acquisitions. In addition, because acquisitions of high technology companies are inherently risky, no assurance can be given that our previous or future acquisitions will be successful and will not adversely affect our business, operating results, or financial condition. We may not be able to compete effectively with larger, better-positioned companies, resulting in lower margins and loss of market share. We operate in intensely competitive markets that experience rapid technological developments, market consolidation, changes in industry standards, changes in customer requirements, and frequent new product introductions and product improvements by existing and new competitors. If we are unable to anticipate or react to these competitive challenges or if existing or new competitors take or gain additional market share in any of our markets, our competitive position could weaken and we could experience a drop in revenues that could adversely affect our business and operating results. To compete successfully, we must maintain a successful research and development effort to develop new products and services and enhance existing products and services, effectively adapt to changes in the technology or product rights held by our competitors, appropriately respond to competitor strategies as such strategies become apparent, and effectively adapt to technological changes and changes in the ways that our information is accessed, used, and stored within our enterprise and consumer markets. If we are unsuccessful in responding to our competitors or to changing technological and customer demands, we could experience a negative effect on our competitive position and our financial results. We compete with a variety of companies who have significantly greater revenues and financial resources, partners, resellers and distribution channels than GlobalSCAPE as well as greater personnel and technical resources. For example, CuteFTP and CuteFTP Pro compete with products offered by Ipswitch, Inc. and Microsoft Corporation, EFT Server competes with products from Sterling Commerce, Axway and several other vendors, and WAFS competes with Riverbed Technology and Cisco. Large companies may be able to develop new technologies, across multiple solution spaces, and on more operating systems, more quickly than we can, to offer a broader array of products, and to respond more quickly to new opportunities, industry standards or customer requirements. For example, Sterling Commerce receives substantial maintenance contract revenue annually, providing them with significant resources for product research, development and marketing. Additional competitors may enter the market and also may have significantly greater capabilities and resources than we do. Some existing competitors also may be able to adopt more aggressive pricing strategies. For example, Ipswitch provides an older version of its file transfer protocol program for free for non-commercial use, and Microsoft includes file transfer protocol functionality in its Internet browser, which it also distributes for free. Increased competition may result in lower operating margins and loss of market share. Turmoil and uncertainty in U.S. and international economic markets could adversely affect our business and operating results. Demand for our products depends in large part upon the level of capital and maintenance expenditures by many of our customers. The recent economic downturn has adversely impacted spending on information 20 technology projects as prospects and customers reduce, sometimes greatly, their discretionary spending to focus on preserving mandatory spending budgets. These adverse impacts to customer spending may be directly, and adversely, reflected in our future business and operating results because we believe a substantial part of the MFT spending budget is considered discretionary by our prospects and customers. The perception of MFT solutions spending as discretionary is further reinforced by the existence of low cost, or even free, products that deliver some subset of the capabilities found in our solutions. Given the recent economic downturn, some customers may have decided to defer spending for our solutions or may have elected to obtain low cost or free “good enough” products as an interim measure. The potential adverse impacts of such decisions may persist for an extended period of time, even well into a period of economic recovery, given that many prospects will not change their IT infrastructure for a considerable period of time once that infrastructure has been installed and is operating adequately. Adverse financial results from another economic downturn and uncertainty could include flat, or even decreasing, sales, lower gross and net margins, and impairment of current or future goodwill and long-lived assets. In addition, some of our customers could delay paying their obligations to us. Potentially reduced sales and margins and customer payment problems could limit our ability to fund research and development, marketing, sales, and other activities necessary to sustain and expand our market position. Finally, like many other companies, our stock price decreased during the onset of the recent economic downturn. If investors have concerns that our business, financial condition and results of operations will be negatively impacted by a continued or worsened worldwide economic downturn, our stock price could decrease again. Regardless of economic conditions, fluctuations in demand for our products and services are driven by many factors and a decrease in demand for our products could adversely affect our financial results. We are subject to fluctuations in demand for our products and services due to a variety of factors, including competition, product obsolescence, technological change, budget constraints of our actual and potential customers, level of broadband usage, awareness of security threats to IT systems, and other factors. While such factors may, in some periods, increase product sales, fluctuations in demand can also negatively impact our product sales. If demand for our products declines, our revenues as well as our gross and net margins could be adversely affected. CuteFTP, in particular, competes in some ways with social media services for image and video sharing. As social media has increased exponentially in popularity, sales of our CuteFTP product line have continued to decline. Sales to the U.S. Government make up a portion of our business and changes in government defense spending could have consequences on our financial position, results of operations and business. In some recent years (2007 and 2009, for example) Government sales have accounted for 10% or more of our total sales. Our revenues from the U.S. Government largely result from contracts awarded to us under various U.S. Government programs, primarily defense-related programs with the Department of Defense (“DoD”). The funding of our programs is subject to the overall U.S. Government budget and appropriation decisions and processes which are driven by numerous factors, including geo-political events and macroeconomic conditions, and are beyond our control. The overall level of U.S. defense spending has increased in recent years for numerous reasons, including increases in funding of operations in Iraq and Afghanistan and the DoD’s modernization initiatives. Looking forward, we expect overall defense spending to possibly increase in the near term, albeit at lower rates than in recent years. However, projected defense spending levels are uncertain and become increasingly difficult to predict for periods beyond the near- term due to numerous factors, including the external threat environment, funding for ongoing operations in Iraq and Afghanistan, future priorities of the Administration and the overall health of the U.S. and world economies and the state of governmental finances. 21 Significant changes in defense spending could have long-term consequences for our size and structure. In addition, changes in government priorities and requirements could impact the funding, or the timing of funding, of our programs which could negatively impact our results of operations and financial condition. Larger government contracts, such as the Army contracts we were awarded in 2007 and 2009, typically have long sales cycles. Therefore, closure of such contracts is difficult to predict, increasing uncertainty in our projections. U.S. Government contracts generally also permit the government to terminate the contract, in whole or in part, without prior notice, at the government’s convenience or for default based on performance. If one of our contracts is terminated for convenience, we would generally be entitled to payments for our allowable costs and would receive some allowance for profit on the work performed. If one of our contracts is terminated for default, we would generally be entitled to payments for our work that has been accepted by the government. A termination arising out of our default could expose us to liability and have a negative impact on our ability to obtain future contracts and orders. Furthermore, on contracts for which we are a subcontractor and not the prime contractor, the U.S. Government could terminate the prime contract for convenience or otherwise, irrespective of our performance as a subcontractor. Finally, because we are a DoD contractor, certain GlobalSCAPE items and/or transactions may be subject to the International Traffic in Arms Regulations (“ITAR”) if our software or services are specifically designed or modified for defense purposes. Companies engaged in manufacturing or exporting ITAR-controlled goods and services (even if these companies do not export such items) are required to register with the U.S. State Department. Failure to comply with these requirements could result in fines and sanctions which could negatively impact our results of operations and financial condition. If we fail to manage our sales and distribution channels effectively or if our partners choose not to market and sell our products to their customers, our operating results could be adversely affected. We sell our products to customers primarily through our direct sales force and through resellers. Sales through these different channels involve distinct risks, including the following: Direct Sales. Most of our revenue is derived from sales by our direct sales force to end-users. Special risks associated with this sales channel include: • • • • Longer sales cycles associated with direct sales efforts; Difficulty in hiring, retaining, and motivating our direct sales force; Substantial amounts of training for sales representatives to become productive, including regular updates to cover new and revised products; and Reliance on leads obtained from paid advertising (for example, Google ads) could materially impact direct sales should advertising effectiveness decline due to non-attributable declines in leads, unforeseen search engine algorithm changes, or other occurrences that may adversely impact the lead generation aspects of the direct sales cycle. In addition, increased competition may materially impact the costs associated with such advertising. Indirect Sales Channels. A significant portion of our revenue is derived from sales through indirect channels, including distributors and partners that sell our products to end-users and other resellers. This channel involves a number of risks, including: • • • Our lack of control over the timing of delivery of our products to end-users; Our resellers and distributors currently are not subject to minimum sales requirements or any obligation to market our products to their customers; Our reseller and distributor agreements are generally nonexclusive and may be terminated at any time without cause; and 22 • Our resellers and distributors frequently market and distribute competing products and may, from time to time, place greater emphasis on the sale of these products due to pricing, promotions, and other terms offered by our competitors. We cannot be certain that our distribution channel partners will continue to market or sell our products effectively. If we are not successful, we may lose sales opportunities, customers and revenues. We may incur losses as we attempt to expand our business. We intend to expand our business and therefore expect to expend significant additional resources on continuing research and development, developing our sales force and a more robust reseller program, marketing, and potentially entering new or adjacent markets. If we do not successfully develop and introduce the new solutions to the market, are unable to improve our direct and channel sales results, or are unable to enter expected new markets, we may not be able to achieve the revenue growth associated with the business expansion expenditures and may not be profitable. Maintenance revenue growth could decline Our services revenues arising from maintenance services have increased over the last three years as a result of a growing base of installed products. Declines in our license bookings, adverse changes in our foreign currency exchange rates, increased discounting in maintenance renewal bookings and/or a reduction in the extent to which our customers renew maintenance contracts would lead to declines in our maintenance revenue growth rates. As maintenance revenue makes up a substantial portion of our total revenue, any decline in our maintenance revenue could have an adverse impact on our business and financial results. If we lose key personnel we may not be able to execute our business plan. Our future success depends on the continued services of key members of our management team. These individuals are difficult to replace because of the intense competition for similarly skilled people. In addition, new members of the management team may not be productive for weeks or months as they learn about our solutions, our personnel, and the administrative practices within GlobalSCAPE. Our ability to develop our software will be seriously impaired if we are not able to use our foreign subcontractors. We rely on foreign subcontractors to help us develop some aspects of some of our software. If these programmers decided to stop working for us, or if we were unable to continue using them because of political or economic instability, we would have difficulty finding comparably skilled developers in a timely manner. In addition, we would likely have to pay considerably more for the same work, especially if we used U.S. personnel. If we could not replace the contract programmers, it would take us significantly longer to develop certain products and product upgrades. It may be difficult for us to recruit and retain software developers and other technical and management personnel because we are a relatively small company. We compete intensely with other software development and distribution companies internationally and IT departments supporting larger businesses to recruit and hire from a limited pool of qualified personnel. Some qualified candidates prefer to work for larger, better known companies or in another geographic area. In order to attract and retain personnel in a competitive marketplace, we believe that we must provide a competitive compensation package, including cash and equity-based compensation. The volatility in our stock price may from time to time adversely affect our ability to recruit or retain employees. In addition, we may be unable to 23 obtain required stockholder approvals of future increases in the number of shares available for issuance under our equity compensation plans. Also, accounting rules require us to treat the issuance of employee stock options and other forms of equity-based compensation as compensation expense. As a result, we may decide to issue fewer equity-based incentives and may be impaired in our efforts to attract and retain necessary personnel. If we are unable to hire and retain qualified employees, or conversely, if we fail to manage employee performance or reduce staffing levels when required by market conditions, our business and operating results could be adversely affected. Key personnel have left our Company in the past and there likely will be additional departures of key personnel from time to time in the future. The loss of any key employee could result in significant disruptions to our operations, including adversely affecting the timeliness of product releases, the successful implementation and completion of company initiatives, the effectiveness of our disclosure controls and procedures and our internal control over financial reporting, and the results of our operations. In addition, hiring, training, and successfully integrating replacement sales, engineering, and other personnel could be time consuming, may cause additional disruptions to our operations, and may be unsuccessful, which could negatively impact future revenues. We utilize “open source” software in some of our products. The open source software community develops software technology for free use by anyone. We incorporate a limited amount of open source code software into our products. For example, we have relied on open source technology for the encryption features in our CuteFTP Pro, EFT Server, and Mail Express solutions. We may use more open source code software in the future. Our use, in some instances, of open source code software may impose limitations on our ability to commercialize our solutions and may subject us to possible intellectual property litigation. Open source code may impose limitations on our ability to commercialize our products because, among other reasons, open source license terms may be ambiguous and may result in unanticipated obligations regarding our solution, and open source software cannot be protected under trade secret law. In addition, it may be difficult for us to accurately determine the developers of the open source code and whether the acquired software infringes third-party intellectual property rights. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software. From time to time companies that incorporate open source software into their products have been subject to such claims. Claims of infringement or misappropriation against us could be costly for us to defend and could require us to re-engineer our solution or to seek to obtain licenses from third parties in order to continue offering our solution. We also might need to discontinue the sale of our solution in the event re-engineering could not be accomplished on a timely or cost-effective basis. If any such claim, attempted remediation, or solution discontinuance occur, our business and operating results could be harmed. Our products are complex and operate in a wide variety of computer configurations, which could result in errors or product failures. Addressing MFT, WAFS, CDP, Managed E-mail Attachment, cloud services and endpoint security market needs typically requires very complex products. Therefore, undetected errors, failures, or bugs may occur, especially when products are first introduced or when new versions are released. Our products are often installed and used in large-scale computing environments with different operating systems, system management software, and equipment and networking configurations, which may cause errors or failures in our products or may expose undetected errors, failures, or bugs in our products. Our customers’ computing environments also are often characterized by a wide variety of standard and non-standard configurations that make pre-release testing for programming or compatibility errors very difficult and time-consuming. In addition, despite testing by us and others, errors, failures, or bugs may not be found in new products or releases until after commencement of 24 commercial shipments. In the past, we have discovered software errors, failures, and bugs in certain of our product offerings after their introduction and have experienced delayed or lost revenues during the time required to correct these errors. Errors, failures, or bugs in products released by us could result in negative publicity, product returns, loss of or delay in market acceptance of our products, loss of competitive position, or claims by customers or others. Many of our end-user customers use our products in applications that are critical to their businesses and may have a greater sensitivity to defects in our products than to defects in other, less critical, software products. In addition, if an actual or perceived breach of information integrity or availability occurs in one of our end-user customer’s systems, regardless of whether the breach is attributable to our products, the market perception of the effectiveness of our products could be harmed. Alleviating any of these problems could require significant expenditures of our capital and other resources and could cause interruptions, delays, or cessation of our product licensing, which could cause us to lose existing or potential customers and could adversely affect our operating results. For example, it took longer than originally expected to make the necessary improvements to our WAFS solution and therefore WAFS revenues through 2009 were lower than originally anticipated. Increased customer demands on our technical support services may adversely affect our relationships with our customers and our financial results. We offer technical support services with many of our products. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services. We also may be unable to modify the format of our support services to compete with changes in support services provided by competitors or successfully integrate support for our customers. Further customer demand for these services could increase our costs and, without corresponding increasing revenues, adversely affect our operating results. Our operations potentially are vulnerable to security breaches that could harm the quality of our products and services or disrupt our ability to deliver our products and services. Information security is a dynamic discipline that historically has faced a threat that develops and emerges in sometimes- unpredictable ways. Third parties may breach our system and information security and damage our products and services or misappropriate confidential customer information. This might cause us to lose customers, or even cause customers to make claims against us for damages. In addition, we may be required to expend significant resources to protect against potential or actual security breaches and/or to address problems caused by such breaches. Our products may expose customers to invasion of privacy, causing customer dissatisfaction. Our EFT Server and Mail Express solutions are intended to facilitate information sharing, sometimes by providing outsiders access to a customer’s computer. Such access potentially may make the customer vulnerable to security breaches, which could result in the loss of their privacy or property. Similarly, appShield is intended to block execution of malicious software, typically serving as a last line of defense alongside traditional antivirus solutions. Invasions of privacy or other customer harm occurring in an environment where our solutions are operating could result in customer dissatisfaction and possible claims against us for any resulting damages. We are subject to governmental export and import controls that could subject us to liability or impair our ability to compete in international markets. All products that are exported, re-exported or that are worked on by foreign nationals are subject to export controls. Such controls include prohibitions on end uses, end users and country prohibitions. In addition, incorporation of encryption technology into our products can increase the level of U.S. export controls. The encryptions export controls were modified last year. We are subject to these requirements as certain of our products include the ability for the end user to encrypt data. Therefore, our products may be exported outside the 25 United States or revealed to foreign nations only with the required level of export controls/restrictions. Restrictions applicable to our products may include: the requirement to have a license to export the technology; the requirement to have software licenses approved before export is allowed; and outright bans on the licensing of certain encryption technology to particular end users or to all end users in a particular country. In addition, various countries regulate the import of certain technology and have enacted laws that could limit our ability to distribute our products or could limit our customers’ ability to implement our products in those countries. There can be no assurance that we will be successful in obtaining or maintaining the licenses and other authorizations required to export our products from applicable government authorities. Any change in export or import regulations or related legislation, shift in approach to the enforcement or scope of existing regulations, or change in the list of countries to which we cannot export, changes in persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Changes in our products or changes in export and import regulations may create delays in the introduction of our products in international markets, prevent our customers with international operations from deploying our products throughout their global systems or, in some cases, prevent the export or import of our products to certain countries altogether. Any change in export or import regulations or related legislation, shift in approach to the enforcement or scope of existing regulations, or change in the countries, persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Export laws and regulations can be extremely complex in their application. If we are found not to have complied with applicable export control laws, we may be sanctioned, fined or penalized by, among other things, having our ability to obtain export licenses curtailed or eliminated, possibly for an extended period of time. Our failure to receive or maintain any required export licenses or authorizations or our penalization for failure to comply with applicable export control laws would hinder our ability to sell our products, could result in financial penalties, and could materially adversely affect our business, financial condition, and results of operations. Any failure on our part or the part of our distributors to comply with encryption or other applicable export control requirements which could harm our business and operating results. Finally, import and export regulations of encryption/decryption technology vary from country to country. We may be subject to different statutory or regulatory controls in different foreign jurisdictions, and as such, our technology may not be permitted in these foreign jurisdictions. Violations of foreign regulations or regulation of international transactions could prevent us from being able to sell our products in international markets. Our success depends in large part to having access to international markets. A violation of foreign regulations could limit our access to such markets and have a negative effect on our results of operations. Failure to maintain proper and effective internal controls, could affect our ability to produce accurate financial statements, which could result in the restatement of our financial statements or adversely affect our operating results, our ability to operate our business and our stock price. Effective internal controls are necessary for us to provide reliable financial reports and effectively prevent fraud. We maintain a system of internal control over financial reporting, which is defined as a process designed by, or under the supervision of, our principal executive officer and principal financial officer, or persons performing similar functions, and effected by our board of directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. If we are unable to establish appropriate internal financial reporting controls and procedures, it could cause us to fail to meet our reporting obligations, result in the restatement of our financial statements, harm our operating results, subject us to regulatory scrutiny and sanction, cause investors to lose confidence in our reported financial information and have a negative effect on the market price for shares of our Common Stock. 26 As our international sales grow, we could become increasingly subject to additional risks that could harm our business. We conduct significant sales and customer support, in countries outside of the United States. During the year ended December 31, 2010, approximately 31% of our sales were to purchasers outside the United States. Our continued growth and profitability could require us to further expand our international operations. To successfully expand international sales, we must establish additional foreign operations, hire additional personnel and recruit additional international resellers. In addition, there is significant competition for entry into high growth markets, such as China. Our international operations are subject to a variety of risks, which could cause fluctuations in the results of our international operations. These risks include: • • • • • • • • compliance with foreign regulatory and market requirements; variability of foreign economic, political and labor conditions; changing restrictions imposed by regulatory requirements, tariffs or other trade barriers or by U.S. export laws; longer accounts receivable payment cycles; potentially adverse tax consequences; difficulties in protecting intellectual property; burdens of complying with a wide variety of foreign laws; and as we generate cash flow in non-U.S. jurisdictions, if required, we may experience difficulty transferring such funds to the U.S. in a tax efficient manner. Risks Related to Stock Ownership Our stock price is/may be volatile. The trading price of our common stock has been and could continue to be subject to wide fluctuations in response to certain factors, including: • • • • • • • U.S. and global economic conditions leading to general declines in market capitalizations, with such declines not associated with operating performance; Quarter-to-quarter variations in results of operations; Our announcements of new products; Our competitors’ announcements of new products; Our product development or release schedule; General conditions in the software industry; and Investor perceptions and expectations regarding our products, plans and strategic position and those of our competitors and customers. In addition, the public stock markets experience extreme price and trading volume volatility particularly in high-technology sectors of the market. This volatility has significantly affected the market prices of securities of many technology companies for reasons often unrelated to the operating performance of the specific companies. The broad market fluctuations may adversely affect the market price of our common stock. Accounting charges may cause fluctuations in our quarterly financial results. Our financial results may be affected by non-cash and other accounting charges, including: • Amortization of intangible assets, including acquired product rights; 27 • • • • Impairment of goodwill and intangibles; Stock-based compensation expense; Restructuring charges; and Impairment of long-lived assets For example, we recorded both a goodwill and long-lived asset impairment charge related to our WAFS reporting unit in 2008. Anti-takeover provisions in our charter and Delaware law could inhibit others from acquiring us. Some of the provisions of our certificate of incorporation and bylaws and in Delaware law could, together or separately: • Discourage potential acquisition proposals; Delay or prevent a change in control; and Limit the price that investors may be willing to pay in the future for shares of our common stock. • • In particular, our certificate of incorporation and bylaws prohibit stockholders from voting by written consent or calling meetings of the stockholders. We are also subject to Section 203 of the Delaware General Corporation Law, which generally prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any interested stockholder, as defined in the statute, for a period of three years following the date on which the stockholder became an interested stockholder. Our directors and executive officers continue to have substantial control over us. Our directors and executive officers, together with their affiliates and related persons, beneficially owned, in the aggregate, approximately 45% of our outstanding common stock at December 31, 2010. As a result, these stockholders would have the ability to control GlobalSCAPE and direct its policies including the outcome of matters submitted to our stockholders for approval, such as the election of directors and any acquisition or merger, consolidation or sale of all or substantially all of our assets. In addition, our certificate of incorporation and bylaws provide for our Board of Directors to be divided into three classes of directors serving staggered three-year terms. As a result, approximately one-third of our Board of Directors will be elected each year. Stockholders’ ownership of our stock may be significantly diluted, affecting the value of the stock. There were options for 3,294,952 shares outstanding under our employee and director stock option plans as of March 1, 2011, of which 2,018,368 were vested. We have filed a registration statement under the Securities Act, covering stock issued upon the exercise of options by non-affiliates, and we may file a registration statement covering options held by affiliates as well. If we do not file a registration statement covering affiliates, affiliates who exercise their options may choose to sell the stock under an exemption from registration, such as Rule 144 under the Securities Act. The exercise of these options and sale of the resulting stock could depress the value of our stock. Risks Related to Intellectual Property We are vulnerable to claims that our products infringe third-party intellectual property rights particularly because our products are partially developed by independent parties. From time to time we experience claims that our products infringe third-party intellectual property rights. We may be exposed to future litigation based on claims that our products infringe the intellectual property rights of 28 others. This risk is exacerbated by the fact that some of the code in our products is developed by independent parties or licensed from third parties over whom we have less control than we exercise over internal developers. In addition, we expect that infringement claims against software developers will become more prevalent as the number of products and developers grows and the functionality of software programs in the market increasingly overlaps. Companies in the technology industry, and other patent and trademark holders seeking to profit from royalties in connection with grants of licenses, own large numbers of patents, copyrights, trademarks, service marks, and trade secrets and frequently enter into litigation based on allegations of infringement or other violations of intellectual property rights. In addition, we may be the target of aggressive and opportunistic enforcement of patents by third parties, including non-practicing entities. Responding to and defending against such claims may cause us to incur significant expense and divert the time and efforts of our management and employees. Successful assertion of such claims could require that we pay substantial damages or ongoing royalty payments, prevent us from selling our products and services, damage our reputation, or require that we comply with other unfavorable terms, any of which could materially harm our business. In addition, we may decide to pay substantial settlement costs in connection with any claim or litigation, whether or not successfully asserted. While it is not possible to predict the outcome of patent litigation incident to our business, defense costs may be significant and we believe the costs associated with this litigation or other claims of infringement could generally have a material adverse impact on our results of operations, financial position or cash flows. Regardless of the merit of such claims, responding to infringement claims can be expensive and time-consuming. For any intellectual property rights claim against us or our customers, we may have to pay damages and indemnify our customers against damages. Claims of infringement could require us to re-engineer our products or seek to obtain licenses from third parties in order to continue offering its products. In addition, an adverse legal decision affecting our intellectual property, or the use of significant resources to defend against this type of claim could place a significant strain on our financial resources and harm our reputation. We may not be able to protect our intellectual property rights. Our software code, and trade and service marks are some of our most valuable assets. Given the global nature of the internet and our business, we are vulnerable to the misappropriation of this intellectual property, particularly in foreign markets, such as China and Eastern Europe, where laws or law enforcement practices are less developed. The global nature of the internet makes it difficult to control the ultimate destination or security of our software making it more likely that unauthorized third parties will copy certain portions of our proprietary information or reverse engineer the proprietary information used in its programs. If our proprietary rights were infringed by a third-party, and we did not have adequate legal recourse, our ability to earn profits, which are highly dependent on those rights, would be severely diminished. Other companies may own, obtain or claim trademarks that could prevent, limit or interfere with our use of our trademarks. Our various trademarks are important to our business. If we were to lose the use of any of our trademarks, our business would be harmed and we would have to devote substantial resources towards developing an independent brand identity. Defending or enforcing our trademark rights at a local and international level could result in the expenditure of significant financial and managerial resources. Item 1B. Unresolved Staff Comments None. 29 Item 2. Properties Our corporate office is located in an office building in northwest San Antonio. The annual rent on the eleven year lease of the 21,495 square foot facility averages $327,000. We believe the current facility in San Antonio is suitable for our current business needs and that suitable additional space will be available on acceptable terms if needed. Item 3. Legal Proceedings None. Item 4. (Removed and Reserved) 30 Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Our common stock is listed on the NYSE Amex Stock Exchange under the symbol “GSB” The following table sets forth the quarterly high and low closing sale prices for our common stock for the last two fiscal years. PART II First Quarter (ending March 31) Second Quarter (ending June 30) Third Quarter (ending September 30) Fourth Quarter (ending December 31) Annual Common Stock Price 2010 2009 High $1.85 $3.12 $3.01 $2.64 $3.12 Low $1.35 $1.27 $2.06 $1.78 $1.27 High $0.93 $2.20 $2.44 $1.89 $2.44 Low $0.50 $0.55 $1.40 $1.40 $0.50 On March 22, 2011, the last reported sales price of our common stock on the NYSE Amex Stock Exchange was $2.84 per share. The number of shareholders of record of our common stock as of March 22, 2011 was approximately 2,086. We do not intend to declare or pay cash dividends in the foreseeable future. Our management anticipates that all earnings and other cash resources, if any, will be retained for investment in our business. Item 6. Selected Financial Data The following selected financial data is derived from the Financial Statements included in this annual report. This data is qualified in its entirety by and should be read in conjunction with the more detailed Financial Statements and related notes included in this annual report and with Item 8, Financial Statements and Supplementary Data. Historical results may not be indicative of future results. During 2006 we acquired Availl, Inc. This acquisition was accounted for as a business purchase and, accordingly, the operating results of that business have been included in the Financial Statements included in this annual report since the date of acquisition. 31 Statement of Operations Data: ($ in thousands) Total revenues Operating expenses: Cost of revenues Selling, general and administrative Research and development Impairment of goodwill Impairment of long-lived assets Depreciation and amortization Total operating expenses Income (loss) from operations Net income (loss) Net income (loss) per common share—basic Net income (loss) per common share—diluted Balance Sheet Data: ($ in thousands) Cash and cash equivalents Working captial Total assets Long term debt, less current portion 2010 $18,565 2009 $16,451 2008 $15,792 2007 $18,360 2006 $10,974 601 12,815 3,016 0 0 852 17,284 1,281 $ 881 $ 0.05 $ 0.05 336 10,798 2,805 0 0 724 14,663 1,788 $ 1,400 $ 0.08 $ 0.08 189 10,944 2,819 5,773 3,244 957 23,926 (8,134) $ (7,660) $ (0.44) $ (0.44) 250 10,049 1,919 0 0 280 12,498 5,862 $ 3,642 $ 0.21 $ 0.20 469 6,142 1,230 0 0 99 7,940 3,034 $ 1,963 $ 0.13 $ 0.12 2010 $11,087 $ 8,607 $20,547 $ — 2009 $ 7,026 $ 5,540 $16,173 $ — 2008 $ 6,319 $ 4,435 $12,220 $ — 2007 $ 5,214 $ 5,074 $20,362 $ — 2006 $ 4,633 $ 2,749 $16,368 $ 3,077 Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operation The following Management’s Discussion and Analysis of Financial Condition and Results of Operations should be read in conjunction with our financial statements for the years ended December 31, 2010, 2009 and 2008 and related notes included elsewhere in this document. Overview Our solutions provide secure information exchange capabilities, for consumers and enterprises, through software licenses, managed and hosted solutions, and professional services. Since our organization in 1996, we have evolved from a company focused primarily on personal file transfer products, sold over the Internet, to a solution provider deriving over 90 percent of revenue from sales to small and medium business, or SMB, and enterprise customers worldwide. Today, we have thousands of enterprise customers and more than one million individual consumers in over 150 countries. In addition, our solutions are used by more than 20,000 U.S. Army users deployed worldwide. We operate primarily in the Managed File Transfer, or MFT, industry. Directly, and through partner infrastructure, we also operate in the cloud services industry and, in February 2011, announced our entry into the antivirus segment of the endpoint security market with the development of a consumer “whitelisting” product, appShield. With the recent solution additions described in this report, we are continuing our evolution from an ‘MFT company’ into adjacent solution spaces applicable to Total Path Security. The Total Path Security framework addresses data and information security in motion (for example, with traditional MFT solutions delivered as on-premises software or as a cloud service) and at rest (for example, with endpoint security solutions like appShield). 32 Key Business Metrics We have structured our business model to sell an appropriate mix of software licenses (for on-premises use), maintenance and support (“M&S”), cloud-based subscription solutions, and professional services. We review a number of key business metrics on an ongoing basis to help us monitor our performance and to identify material trends which may affect our business. The measures that we believe are the primary indicators of our performance are: • • • • Revenue Growth; Sales and Sales Pipeline Growth; Recurring Revenue Growth; and EBITDA. We have developed an internal management dashboard that summarizes certain business metrics and also supports drill-down analyses of some sales, marketing, and support activities that also provide indicators of our business performance. Revenue Growth We believe annual revenue growth currently is the most significant metric for our business. We have transitioned from a consumer products company (mostly focused on CuteFTP) to an enterprise solutions provider and have established the foundation for further evolution of our solution portfolio to include cloud-based and endpoint security solutions. While we typically have grown revenue sequentially, quarter over quarter, we view annual revenue growth as the more important metric, especially considering our growth history and ongoing evolution of our solution portfolio. For example, our business has grown significantly over the past five years as reflected in our inclusion in the Deloitte Technology Fast 500 for the last two years. However, some of that growth has been the result of non-recurring large contracts like those won in 2007 and 2009 with the U.S. Army. We believe annual “core” revenue growth, excluding very large, exceptional deals, is a key metric for monitoring our continued success in developing our business in future periods. Given our diverse solution portfolio, and especially with the addition of subscription services, we also review our revenue mix and changes in revenue, across all solutions, on a regular basis to identify key trends and adjust resource allocations. Our recent entry into the cloud services market, with subscription contracts, may change our revenue growth rates in the short term, through mid to late 2011. While potentially very beneficial over the long term, subscription sales may slow or even reverse the rate at which software license sales have increased in recent years for solutions like Enhanced File Transfer Server. This impact may be particularly pronounced during 2011 as some software license sales opportunities shift to managed solutions contracts. However, transitioning toward increased subscription revenue as described in the Strategy section of this MD&A has potential long-term benefits that we believe outweigh the possible near-term impacts. Sales and Sales Pipeline Growth Historically, our sales and revenue have tracked very closely because we primarily were selling software licenses, including consumer products where the M&S contracts typically have been adopted at the same rate as for enterprise solutions. With the addition of subscription services, increased sales of professional services, and the preponderance of our sales associated with enterprise products, we believe sales growth may significantly outpace revenue growth in the near term. We believe such sales growth, as potentially presaged by a growing sales pipeline, will underpin, sustain, and even accelerate revenue growth in future periods. 33 Recurring Revenue Growth We have grown recurring revenue in recent years through an increase in the sales of M&S contracts from 31 percent of total revenue in 2008, to 37 percent in 2009, to 42 percent in 2010. We believe the level of deferred revenue is an important indicator of our success. Maintenance and support contracts for our products are sold for fixed periods of time and are typically for one year, although some agreements are for terms in excess of one year. If we do not deliver the support needed by end users of our products, then they may not renew their maintenance and support agreements. If end users stop using our products, they also will not renew their maintenance and support agreements. An increase in deferred revenues thus indicates both growth in our installed base and satisfaction with our products and our maintenance and support services. We review recurring revenue trends to determine the progress of our M&S and cloud solution sales, and customer satisfaction with our ongoing solution development and support activities. We expect deferred revenue to continue to grow in 2011. EBITDA EBITDA or Earnings Before Interest, Depreciation, and Amortization, is not a measure of financial performance under accounting principles generally accepted in the United States (“GAAP”) and should not be considered a substitute for net income, however management does use this metric to monitor spending and profitability of the Company. We monitor and review selling, general, and administrative (“SG&A”) and R&D expenses to assess conformance with established budget expectations and identify specific variances. Identifying and, if necessary, addressing variances above budget is important for the very clear purpose of staying within budget ceilings. However, even variances below budget may indicate imbalances in resource allocations or deviation of operating activities from established expectations. We have increased SG&A expenses in recent years, primarily to enhance our executive team and make other investments necessary to grow our business. Similarly, we have sustained our R&D investments to provide a continuing basis for specifying and developing new solutions like our recently announced cloud-based offerings and appShield. We define EBITDA as Net Income, plus Income Taxes, Total Other Income (Expense), Depreciation and Amortization, and non-cash charges for asset impairments. EBITDA has limitations as an analytical tool, and when assessing our operating performance, EBITDA should not considered in isolation, or as a substitute for net income or other income statement data prepared in accordance with GAAP. See our EBITDA to net income reconciliations in the table below. Net Revenue Income (loss) from operations Net income (loss): Plus: Income taxes Plus: Total other (income) expense Plus: Depreciation and amortization Plus: Goodwill and Intangible asset impairments EBITDA $ $ $ December 31, 2010 18,565 1,281 881 410 (10) 852 — 2,133 $ $ $ $ Year Ended December 31, 2009 16,451 1,788 1,400 321 67 724 — 2,512 $ $ $ $ December 31, 2008 15,792 (8,134) (7,660) (380) (94) 957 9,017 1,840 $ In addition, the investment community evaluates our performance on Adjusted EBITDA, which is also a non-GAAP financial metric. The difference between EBITDA and Adjusted EBITDA is the addition of stock-based compensation. Adjusted EBITDA is only disclosed in our press releases for the benefit of our investors. 34 The following is a summary description of our solutions and associated business trends: Solution Perspective and Trends Managed File Transfer Solutions (On Premises and Cloud-based) Our MFT solutions allow customers to move large files (even multi-terabyte in size) and large numbers of files securely. We also facilitate management, monitoring, and reporting on the file transfers and deliver advanced workflow capabilities to move data and information into and throughout an enterprise. The CuteFTP product is the best known of our file transfer solutions. CuteFTP is a client-side software application that permits users to upload and download files, to or from an FTP server or host computer, with support for various file transfer and security protocols such as FTP, SSL, and SSH, plus open PGP encryption. While CuteFTP still has significant brand recognition in the market, it currently accounts for less than 10 percent of our revenue, down from almost 60 percent as recently as 2005. We believe subsequent market availability of free FTP utilities plus the emergence of social media and proliferation of means for sharing non- sensitive data such as photos and videos, for example, are the proximate cause of the decline in CuteFTP revenue. We derive most, approximately 80 percent, of our revenue from software license sales of our Enhanced File Transfer Server solution suite. The Enhanced File Transfer Server solution suite provides a common, scalable MFT platform that accommodates a broad family of add-on modules to provide SMB and enterprise customers with increased security, automation, and performance when compared to traditional FTP-based and e-mail delivery systems. The add-on modules allow customers to select the solution configuration most applicable to their requirements for auditing and reporting, encryption, ad hoc and web-based file transfers, operability in or through a DMZ network, and integration with back-end business processes, including workflow automation capabilities. We continue to develop the Enhanced File Transfer solution suite, for example to increase performance, provide additional administration flexibility, and support cross-platform implementation with our DMZ Gateway solution. Revenue for this product line has grown on a sustained basis in recent years from approximately $6.7 million per year (or roughly 60 percent of revenue) in 2006 to approximately $14.5 million in 2010. During 2010, we announced that we had executed a partner agreement with Rackspace Hosting that allows us to deliver cloud- based MFT solutions for the secure exchange of business-to-business (“B2B”) data, including large files and sensitive data. Our cloud-based solutions allow customers to outsource all our part of their complex and demanding information exchange needs to reduce costs, improve operational efficiencies, track and audit transactions, and provide a greater level of security. These solutions build on our prior experience with CuteSendIt, a consumer and SMB software-as-a-service solution established in 2008. The cloud-based solutions also establish an additional delivery method for Enhanced File Transfer Server capabilities, and potentially for other solution capabilities. Through our cloud services, we can offer new and existing customers “pay as you go”, flexible pricing under one, two, and three-year contracts that help them eliminate upfront capital expenditures. This subscription revenue provides us with a growing revenue stream visible into future periods. Wide Area File Services and Continuous Data Protection Solution We obtained the original technology used in our Wide Area File Services and Continuous Data Protection software through the acquisition of Availl, Inc in 2006. Together, WAFS and CDP allow users to synchronize files among distributed teams, sending only the changed data, quickly and transparently to end user users, with continuous real-time backup. This approach ensures currency of data at each supported site and also significantly reduces bandwidth usage compared to traditional information sharing process that support collaboration across multiple locations. 35 Through the 2009 timeframe, we devoted considerable attention to improving the performance and overall quality of the WAFS solution after the Availl acquisition. Sales of the WAFS/CDP family of solutions have contributed approximately 10 percent of our revenue in recent years. With the addition of support for the Autodesk Revit Architecture construction and design application in 2009, and ongoing performance improvements through 2010, we believe we have established a basis for sustaining WAFS/CDP sales at near historical levels. Managed E-mail Attachment Solution Our managed e-mail attachment solution, Mail Express, is a client-server application that allows users to send and receive e-mail attachments, up to 25 GB, with enhanced security and visibility compared to typical e-mail solutions. The Mail Express application also provides flexible, customer-defined administration privileges to allow e-mail administrators and even end users to configure specific parameters for handling e-mail attachments in accordance with corporate policy. We initially launched the Mail Express solution in December 2008 and have continued to make enhancements, most recently releasing Mail Express 3 in August 2010. Market adoption of Mail Express has been slower than originally expected, but began to increase in 2010 with the new software release. Going forward, we believe we have developed, and are maintaining, a competitive long-term solution for securely sharing and managing even very large e-mail attachments. Endpoint Security Solution We will enter the consumer antivirus segment of the endpoint security market in 2011 with our appShield solution. The appShield solution uses application whitelisting technology to block execution of malicious software with much greater effectiveness than traditional antivirus software. The traditional approach to antivirus software operation is to develop specific signatures for malware, detect the presence of files matching those defined signatures, and then block or quarantine the assessed malware. Application whitelisting inverts the traditional approach by allowing the end user or an administrator to explicitly designate which software applications will be allowed to run. The resulting ‘whitelist’ then governs software execution privileges. If an executable is not on the whitelist, it will not run. Our appShield solution is the result of a joint development agreement established with CoreTrace Corporation in December 2009. CoreTrace develops and markets an enterprise whitelisting software solution, known as Bouncer, that has been adopted by numerous businesses and agencies in the commercial and government sectors. We have designed and are implementing an easy-to- use interface that integrates with CoreTrace’s enterprise whitelisting technology to deliver this innovative whitelisting solution to the consumer market. Whitelisting currently represents a relatively small share of the served (actually contracted, as opposed to potential) market for antivirus solutions. However, there is growing market awareness that traditional antivirus solutions cannot keep pace with the proliferation of malware threats which are increasing significantly in sophistication and exponentially in number. According to a recent Gartner study, traditional software typically is only 25 to 50 percent effective and also can have substantial adverse performance impacts on the host system. Therefore, we believe application whitelisting has the potential to take increasing market share from traditional antivirus software over the next three to five years. Professional Services Professional services represent an increasing part of our business. We are bundling “packaged” (or relatively tightly prescribed) and custom services with many of our enterprise software sales and also have placed several full-time engineers on a McLane Advanced Technologies (“MAT”) industry team that won a large U.S. Army order during 2010. 36 Professional services typically have significantly lower margins than product sales or subscription services. However, we believe professional services allow us to better establish and maintain our solution implementations, while also providing our customers with the training and education services that help them make more complete use of our solution capabilities. In addition, for large contracts like the engineering services provided to the Army, such professional services provide significant past performance that facilitates additional business. Over time, we believe the return on investment from increased professional services outweighs the potential near-term impacts on operating margins. Strategy Our goal is to build upon our leadership position in the MFT market to provide businesses, other organizations, and individual users with the solutions necessary to meet their growing need for secure information exchange within the Total Path Security framework, which considers protection of data in motion and at rest. From our perspective, more fully addressing this need for secure information exchange requires consideration of capabilities beyond traditional MFT, including managed e-mail attachment, cloud- based, and endpoint security solutions such as whitelisting. Addressable adjacent markets, including those requiring greater B2B integration capability, add significantly to the MFT market as characterized by industry analysts. For example, cloud services, endpoint security, and B2B solution integration are multi-billion dollar markets, as compared to the roughly $500 million MFT market. Our strategic focus centers on: • Leveraging our MFT solutions and expertise to enter, and establish leadership in, broader information exchange markets while maintaining leadership in the MFT industry. Growing recurring revenue Continuing to develop and enhancing our software solutions Entering and extending our presence in the endpoint security market Increasing international and channel sales Growing our government sales Developing our corporate brand and market recognition • • • • • • Enter and Establish Leadership in Broader Markets We have been in the leader’s quadrant of the Gartner Magic Quadrant for Managed File Transfer for the past two years. Gartner has stated that the MFT market is approximately $500 million to $550 million. We believe we can best sustain and potentially increase our growth in future years by extending our market reach beyond the traditional MFT market. Several opportunities and trends lead us to this conclusion. First, we believe there are much larger adjacent markets accessible with our current solutions and possible future offerings. For example, we have entered the cloud services market with our Managed Information Xchange (“MIX”) and Hosted Enhanced File Transfer Server solutions. Industry analysts such as Gartner believe the cloud services market was $68 billion in 2010 and growing at more than 20 percent per year. Our partner agreement with Rackspace and the proven, modular capabilities of our Enhanced File Transfer Server solution suite made this a straightforward market entry from a technical delivery perspective. As we gain additional sales traction and experience in the cloud services market, and possibly develop additional cloud-based solutions, we believe this potentially provides an opportunity broader than the traditional MFT market. 37 Similarly, endpoint security is a multi-billion dollar market where we are developing an innovative consumer and SMB solution, appShield, which can supplement and over time potentially replace the consumer product revenue we traditionally have derived from our CuteFTP product line. From our initial market entry with appShield, we may develop, partner for, or acquire additional endpoint security features or solutions to solidify and potentially broaden our market reach. In addition, building on our MFT capabilities provides a clear opportunity to increase our average transaction size and repeat business through greater scalability, business integration, and application of professional services to support implementation planning and execution. Our enterprise solutions, such as Enhanced File Transfer Server, have increased considerably in capability over the years and these enhanced capabilities directly contribute to increased revenue derived from enterprise customers. In particular, the add-on modules available for Enhanced File Transfer Server, and increased technical performance for other offerings in our portfolio, provide a strong platform for greater business adoption and integration of our solutions. We believe continued focus on capabilities necessary for even broader B2B applicability is a key strategic opportunity for our future business operations. We also have considerably increased our professional services capability in recent years. More customers are contracting for our professional services and seeking repeat consulting engagements to support their business operations. The persistent business presence allowed by our cloud-based subscription services is a strategic development that we believe will reinforce this trend. With MFT capabilities increasingly being integrated into B2B gateway, data integration, service oriented architecture, and other technical solutions, the need to keep evolving our solutions and entering adjacent markets also is clear. We believe the market will continue shifting toward consideration of MFT as more of a “feature” than a solution. This shift may take many years, but we believe early recognition of the trend and appropriate strategic planning increase our potential for evolving our solutions in front of the ongoing market changes. Grow Recurring Revenue Recurring revenue includes M&S contracts and subscriptions for our cloud-based managed and hosted solutions. In the broadest sense, delivery of labor hours on long-duration contracts also fits within this strategy because such “contracted sales” provide a book of sold business that will be recognized into revenue in future periods, with some revenue from these labor contracts potentially visible even two or three years in the future. We believe that execution on this strategy element potentially could provide greater predictability of revenue in future periods and a stronger hedge against future business (or broader economic) downturns. Our recurring revenue, primarily in the form of M&S contracts, grew from 31 percent in 2008 to 42 percent in 2010. We intend to focus on delivering continued growth in deferred revenue, while assessing market traction for the full range of our solutions on an ongoing basis. From this perspective, deferred revenue may continue to grow in absolute terms, and as a percentage of total revenue, for some period of time. However, the long- term proportion of deferred revenue is dependent on the future growth rates of all of our solutions. As discussed under “Key Business Metrics” in “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” subscription sales may change the trajectory of our prior revenue growth. We believe that, due to compounding effects and after a transition period, subscription revenue can grow more quickly than software license revenue, while supporting increased operating margins after the transition. Continue to enhance and develop our solutions We have allocated significant resources to enhancing and developing our solutions in recent years. This strategic focus has delivered substantially more capable releases of our WAFS, Mail Express, and Enhanced File Transfer solutions, plus our cloud- based offerings and professional services. We intend to maintain our focus on developing our solution portfolio and, as appropriate, enhancing our existing solutions. 38 Our solution portfolio may evolve over time, for example, through development of new offerings in adjacent markets or through acquisition. During 2010, and into early 2011, we announced development of several new solutions, including our MIX, Hosted Enhanced File Transfer Server, and appShield. We maintain an active R&D program and work closely with partners and others within industry, to identify new solution opportunities. As an example, we began our original OEM partnership with Network Automation in 2008, embedding Network Automation’s AutoMate product as an Advanced Workflow Engine (“AWE”) module to our Enhanced File Transfer Server solution. During 2010, we expanded our partner agreement to become a worldwide reseller of Network Automation’s software solutions, AutoMate and AutoMate Business Process Automation Server. We also have acquired solutions through merger and acquisition activities in the past, and may do so in the future as well. As we evolve our solution portfolio, we intend to maintain an appropriate balance between legacy and new solutions, including making choices about transitioning, sustaining, or retiring solutions as necessary to best operate under prevailing business conditions. Transitioning or sustaining solutions may involve consolidating capabilities within our solution portfolio, releasing upgrades in response to market or customer needs, or making bug fixes in accordance with our communicated End of Life (“EOL”) Policy. We also will phase out solutions periodically in accordance with the EOL Policy. Enter and Extend our Presence in the Endpoint Security Market We are entering the antivirus segment of the endpoint security market with appShield. The appShield solution provides an opportunity for us to increase sales of our consumer products, which have declined in recent years. The endpoint security market also is attractive because consumer sales typically are relatively low-touch and accomplished largely through our online cart, over the Internet. From this initial market entry with appShield we intend to explore, and potentially develop or acquire, other endpoint security solutions. These additional solutions may be complementary to appShield or to our other solutions. Like appShield, the other solutions also may appeal to SMB or even enterprise customers. Increase International and Channel Sales We have added several channel partners in recent years and also organized our sales force and associated sales processes, to more effectively support our partner network worldwide. Channel partners resell, distribute, or integrate our solutions. Channel partners announced since the beginning of 2009 include Carahsoft Corporation, Lifeboat Distribution, MAT, and multiple system integration companies with whom we have registered as a small business. We also have added other channel partners worldwide in recent years. These channel partners provide us with additional opportunities to penetrate deeper into existing markets and enter new sales territories. Channel sales also can help us establish a lower-touch delivery model through which we train and provision the partners to sell and distribute our solutions. Achieving additional traction in new sales territories potentially can increase our sales in future years, considering we currently derive approximately 87 percent of our sales from just the United States, United Kingdom, Canada, and Australia. Grow Government Sales We are leveraging our prior Army contracts, and other government orders, to gain the insights, establish the past performance, and sustain the credentials necessary to pursue additional government business directly and through channel partners. We are a subcontractor on the McLane Advanced Technologies industry team that won a $52 million contract with the U.S. Army for the Standard Army maintenance System — Enhanced and are supporting that contract with several engineers on a full-time basis. We are also working independently as well as in conjunction with MAT, Carahsoft, and other partners to pursue additional government business. 39 Government sales, particularly large contracts from the U.S. Army, have had a significant positive impact on our growth and market image since 2007; however, these large contracts also cause significant swings in our financial results. We are focused on more deliberate growth in government sales, including software and associated services, potentially augmented by occasional large product orders. Our engineering services activities in support of the SAMS-E contract are part of this long-term focus. We may obtain, sustain, or update government certifications as necessary to compete in this sector. For example, we have received Federal Information Processing Standards (“FIPS”) 140-2 validation of the GlobalSCAPE Cryptographic Module embedded in Enhanced File Transfer Server. In addition, Enhanced File Transfer Server Version 6 and the latest version of CuteFTP Pro received the Certificate of Networthiness from the U.S. Army Network Technology Command during 2009. Our receipt of this certificate enables Army installations worldwide to install and operate these server and client-based secure information exchange solutions. Additional government business opportunities also may arise as a result of the WikiLeaks disclosures during 2010. The resulting bans on removable media within the government raise the profile of solutions like ours for securely moving large files, or large numbers of file. Develop our Corporate Brand GlobalSCAPE traditionally has been better known for CuteFTP than as a corporate brand. Since the late-2008 timeframe, we have made a concerted effort to elevate our corporate profile. We retained New Venture Communications as our marketing communications firm and the Summit IR Group for investor relations support in 2009. We also established a strong, but informal, relationship with America’s Growth Capital, an investment bank focused on emerging growth markets. Through our efforts in this area, we have participated in numerous analyst briefings and non-deal investor conferences that have increased our recognition within the investor and analyst communities. We also have obtained increasing national media coverage. In addition, we have revised our website, logos, and other areas reflecting our corporate brand. Through these activities, we have established a much more consistent, recognizable brand that may better support future growth and market visibility. We also believe we have enhanced our brand through additional national and regional attention resulting from corporate awards received during 2010. We were named a 2010 “Best Places to Work in IT”, a ranking determined by Computerworld of the top 100 work environments for technology professionals. Organizations that are selected are those that challenge their IT staff with exciting projects, offer them access to, and training with, today’s hottest technology, and provide great benefits and compensation. We also were ranked in 2010 among the top 50 workplaces in San Antonio by the San Antonio Express-News and named one of the “Best Places to Work” for 2010 by the San Antonio Business Journal. This award honors companies with the best workplaces in the greater San Antonio area. In addition to these corporate awards, we were named to Deloitte’s Technology Fast 500 for the second year in a row, a ranking that recognizes the fastest growing technology, media, telecommunications, life sciences and clean technology companies in North America on the basis of five-year revenue growth. We believe our corporate, financial, and technical awards in aggregate increase our market visibility and provide a stronger basis for continued development of the GlobalSCAPE brand. Liquidity and Capital Resources The Company has a strong working capital position resulting from net profits from operations over 25 of the last 27 quarters. At December 31, 2010, our net working capital position was approximately $8.6 million. We 40 had cash available of $11.1 million and we continue to generate cash from operating activities. We rely on cash on hand and cash flows from operations to fund our operations and believe that these will be our principal sources of operating capital in 2011. Our capital requirements principally relate to our need to enhance our existing products and to develop new products, which primarily consist of research and development expenses and expenses for people and the elements that support their work. By comparison, we do not spend large sums on capital equipment. Over the past three years, we spent $184,000 in 2010, $530,000 in 2009 and $1.6 million in 2008 for equipment. Capital expenditures were higher in 2008 primarily as a result of the move to new office space in San Antonio. Because our principal sources of capital are cash on hand and cash flow from operations, to the extent that sales decline, our cash flow from operations will also decline. If sales decline or if our liquidity is otherwise under duress, management could substantially reduce personnel and personnel-related costs, reduce or substantially eliminate capital expenditures and/or reduce or substantially eliminate research and development expenditures. We may also sell equity or debt securities or enter into credit arrangements in order to finance future acquisitions or licensing activities, to the extent available. Net cash provided by operating activities was $2.7 million, $4.7 million and $3.7 million in 2010, 2009 and 2008, respectively. The decrease in 2010 was largely due to a non-recurring $2.7 million order from the U.S. Army received in April 2009. Significant non-cash add backs in 2008 include the goodwill and long lived asset impairment, offset by a large non-cash decrease in deferred taxes. The remainder of the change in cash provided by operating activities was due to increases in deferred taxes, accrued expenses and a receivable from CoreTrace. The CoreTrace receivable consists of a working capital loan of $298,000 to CoreTrace plus related interest in 2010. Net cash provided by (used in) investing activities was $1.0 million in 2010, ($4.0) million in 2009 and ($1.6) million in 2008. The cash provided by investing activities for 2010 was from short-term investment redemptions, net of property and equipment purchases. Cash used in investing activities in 2009 was for an investment of $2.3 million in CoreTrace, a $1.2 million net investment in short term certificates of deposit, and $530,000 which was used for additional furniture and fixtures and leasehold improvements as renovations were made to our office. In 2008, cash used in investing activities was used for additional furniture and fixtures and leasehold improvements as we moved into a new office. Our financing activities over the past three years have primarily related to proceeds received from the exercise of stock options and the repurchase of shares of our common stock. During 2010, there was an increase in proceeds the Company received from the exercise of stock options as well as tax benefits related to stock option expense. In 2008, we used our own cash for the repurchase of shares of our common stock in the amount of $978,000. At December 31, 2010, our principal commitments consisted of obligations outstanding under operating leases as well as royalty agreements with third parties, federal income tax and trade accounts payable. The commitments related to royalty agreements are contingent on sales volumes. We plan to continue to expend significant resources on product development in future periods and may also use our cash to acquire or license technology, intellectual property, products or businesses related to our current business strategy. 41 The following table summarizes our contractual obligations at December 31, 2010, consisting of future minimum payments under operating leases: Contractual Obligations Building Lease Equipment Leases New Accounting Pronouncements 2011 $357 7 $364 Payments Due by Fiscal Year 2012 - 2014 2015 - 2017 2018 and thereafter $1,042 2 $1,044 $1,075 $1,075 $ $ 480 480 Total $2,954 9 $2,963 In October 2009, the Financial Accounting Standards Board (“FASB”) amended its guidance regarding the accounting model for revenue arrangements that include both tangible products and software elements. This guidance requires that hardware components of a tangible product containing software components always be excluded from the software revenue recognition. This guidance also provides information on how to allocate consideration to deliverables in an arrangement that includes both tangible products and software. This guidance is effective in fiscal years beginning on or after June 15, 2010. We have evaluated the effect of the adoption of this guidance as of December 31, 2010, and believe that it will have no material effect on our financial statements. In October 2009, the FASB amended its guidance regarding revenue recognition on multiple-deliverable arrangements. This guidance amends the criteria for separating consideration in multiple-deliverable arrangements. This guidance also establishes a selling price hierarchy for determining the selling price of a deliverable. The selling price used for each deliverable will be based on VSOE if available, third-party evidence if VSOE is not available, or estimated selling price if neither VSOE nor third party evidence is available. This amendment also replaces the term fair value in the revenue allocation guidance with selling price to clarify that the allocation of revenue is based on entity-specific assumptions rather than assumptions of a marketplace participant. This guidance eliminates the residual method of allocation and requires arrangement consideration be allocated at the inception of the arrangement to all deliverables using the relative selling price method. The guidance also requires the best estimate of selling price be determined in a manner that is consistent with that used to determine the price to sell the deliverable on a standalone basis. Finally, this guidance significantly expands the disclosures related to multiple-deliverable revenue arrangements. This guidance is effective in fiscal years beginning on or after June 15, 2010. We have evaluated the effect of the adoption of this guidance as of December 31, 2010, and believe that it will have no material effect on our financial statements. Critical Accounting Policies Our financial statements and accompanying notes are prepared in accordance with U.S. GAAP. Preparing financial statements requires management to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue, and expenses. These estimates and assumptions are affected by management’s application of accounting policies. Critical accounting policies for us include revenue recognition, impairment of goodwill, impairment of long-lived assets, accounting for research and development costs, allowance for doubtful accounts, accounting for income taxes, and accounting for stock-based compensation. Revenue Recognition We recognize revenue in accordance with generally accepted accounting principles that have been prescribed for the software industry. 42 Revenue is recognized when persuasive evidence of an arrangement exists, delivery has occurred or service has been rendered, the fee is fixed and determinable, and collectability is probable. In making these judgments, we evaluate these criteria as follows: • • • • Evidence of an arrangement. We consider a non-cancelable written agreement signed by us and the customer to be persuasive evidence of an arrangement. Delivery has occurred. We consider delivery to have occurred when a compact disc or other medium containing the licensed software is provided to a common carrier or in the case of electronic delivery, the customer is given electronic access to the licensed software. If an arrangement includes undelivered products or services that are essential to the functionality of the delivered product, delivery is not considered to have occurred until these products or services are delivered. Fixed or determinable fee. We consider the fee to be fixed or determinable unless the fee is subject to refund or adjustment or is not payable within normal payment terms. If the fee is subject to refund or adjustment, we recognize revenue when the refund or adjustment right lapses or the return is estimable. For arrangements with extended payment terms, we recognize revenue as amounts become due and payable or as cash is collected. We grant a limited right of return to our customers. Collection is deemed probable. We conduct a credit review for all transactions at the inception of an arrangement to determine the creditworthiness of the customer. Collection is deemed probable if, based upon our evaluation; we expect that the customer will be able to pay amounts under the arrangement as payments become due. If we determine that collection is not probable, revenue is deferred and recognized upon cash collection. The Company also enters into perpetual software license agreements through direct sales to customers and indirect sales with distributors and resellers. The license agreements generally include product maintenance and support agreements, for which the related revenue is deferred and recognized ratably over the term of the agreements. In any given period if the amount of revenue that is deferred, which is equal to the total of that period’s maintenance and support sales, is greater than the amount recognized, then revenue will decrease and vice versa. In arrangements that include multiple elements, including perpetual software licenses and maintenance and/or services, and packaged products with content updates, we allocate and defer revenue for the undelivered items based on vendor specific objective evidence, or VSOE, of the fair value of the undelivered elements, and recognize the difference between the total arrangement fee and the amount deferred for the undelivered items as revenue. Our deferred revenue consists primarily of the unamortized balance of enterprise product maintenance, consumer product support, and arrangements where VSOE does not exist. Deferred revenue totaled approximately $6.7 million as of December 31, 2010, of which approximately $1.2 million was classified as “Other long term liabilities” in the balance sheets. VSOE of each element is based on the price for which the undelivered element is sold separately. We determine fair value of the undelivered elements based on historical evidence of our stand-alone sales of these elements to third parties or from the stated renewal rate for the undelivered elements. When VSOE does not exist for undelivered items such as maintenance, then the entire arrangement fee is recognized ratably over the performance period. We recognize hosting revenue, including setup fees on a monthly basis, over the contractual term of the customer contract. We believe customers generally will continue to utilize our services beyond the initial contract term which typically ranges from one to three years. As a result, setup fees are recognized ratably over the estimated average life of a customer relationship. Amounts that have been invoiced are recorded in accounts receivable and either deferred revenue or revenue, depending on whether the revenue recognition criteria have been met. While the above noted accounting standards govern the basis for revenue recognition, judgment and the use of estimates are required in connection with the allocation of revenue between software license revenue and 43 maintenance and support revenue, as well as the amount of deferred revenue to be recognized in each accounting period. Changes to the elements in a software arrangement, the ability to identify VSOE for those elements, the fair value of the respective elements, and increasing flexibility in contractual arrangements could materially impact the amount recognized in the current period and deferred over time. Valuation of goodwill and intangible assets Goodwill. We assess goodwill and intangible assets with indefinite life for impairment within our reporting units annually or more often if events or changes in circumstances indicate that the carrying value may not be recoverable. A two-step impairment test is to be performed on goodwill. In the first step, we compare the fair value of each reporting unit to its carrying value. If the fair value of the reporting unit exceeds the carrying value of the equity assigned to that unit, goodwill is not considered to be impaired and we are not required to perform further testing. If the carrying value of the equity assigned to the reporting unit exceeds the fair value of the reporting unit, then we must perform the second step of the impairment test in order to determine the implied fair value of that reporting unit’s goodwill. If the carrying value of the reporting unit’s goodwill exceeds its implied fair value, then we would record an impairment loss equal to the excess. To determine the reporting units’ fair value in the current year evaluation, we use the income approach under which we calculate the fair value of each reporting unit based on the estimated discounted future cash flows of that unit. Our cash flow assumptions are based on historical and forecasted revenue, operating costs, growth rates and other relevant factors. If management’s estimates of future operating results change, or if there are changes to other assumptions, the estimate of the fair value of our goodwill could change significantly. Such change could result in goodwill impairment charges in future periods, which could have a significant impact on our operating results and financial condition. In 2008, during the performance of our annual impairment test and in conjunction with our budgeting process a review of the projected future sales of our WAFS/CDP products showed a significant decrease in expected future revenues. This decrease was a significant contributing factor in the 2008 goodwill impairment charge of approximately $5.8 million. In December 2010, the Company performed its annual impairment analysis, for the WAFS reporting unit. For this analysis, we estimated the fair value of goodwill using the discounted cash flows methodology. The principal factors used in the discounted cash flow analysis requiring judgment were the projected results of operations, weighted average cost of capital (“WACC”), working capital requirements, and terminal value assumptions. This analysis required the input of several critical assumptions including future growth rates, cash flow projections, WACC, rate of return, and terminal value assumptions. In 2010 a significant change was made in the terminal value assumption. In prior years, it was assumed that the reporting unit would have an end of life in approximately five years. In 2010 the Company re-assessed this assumption and determined that the reporting unit would continue in perpetuity. The WACC takes into account the relative weights of each component of the Company’s capital structure (equity and debt) and represents the expected cost of new capital. The results of the analysis show a carrying value of $2,341,000 as of December 1, 2010, compared to a fair value of $4,893,000. The fair value is more than double the carrying value and thus no impairment was recorded as of December 31, 2010. Intangible Assets. We assess the impairment of other identifiable intangible assets whenever events or changes in circumstances indicate that an asset’s carrying amount may not be recoverable. Based upon the existence of one or more indicators of impairment, we measure any impairment of long-lived assets based on a projected undiscounted cash flow method using assumptions determined by our management to be commensurate with the risk inherent in our current business model. Our estimates of cash flows require significant judgment based on our historical results and anticipated results and are subject to many triggering factors which could change and cause a material impact to our operating results or financial condition. The Availl purchase largely gained us rights to software; the value of the software on our books and goodwill are linked. Therefore the same 44 analysis of future sales that led us to determine there was a goodwill impairment also led to an impairment of the acquired asset. During fiscal 2008 we recorded an impairment charge of approximately $3.2 million primarily for the write down of identified intangible assets related to the Availl acquisition. Allowance for Doubtful Accounts We regularly assess the collectability of outstanding customer invoices and, in so doing; we maintain an allowance for estimated losses resulting from the non-collection of customer receivables. In estimating this allowance, we consider factors such as: historical collection experience; a customer’s current creditworthiness; customer concentration; age of the receivable balance; and general economic conditions that may affect a customer’s ability to pay. Actual customer collections could differ from our estimates and exceed our related loss allowance. Stock-based Compensation We account for stock-based compensation by measuring the fair value of the award at the grant date and recognizing expense over the requisite service period. Determining the fair value of share-based awards at the grant date requires judgment, including estimating expected dividends and measuring volatility. In addition, judgment is also required in estimating the amount of share- based awards that are expected to be forfeited. If actual results differ significantly from these estimates, stock-based compensation expense and our results of operations could be materially impacted. Income Taxes We recognize taxes payable or refundable for the current year and deferred tax liabilities and assets for the future tax consequences of events in our financial statements. Accruals for uncertain tax positions are recognized only if it is more likely than not that the tax position will be sustained on examination by the taxing authorities, based on the technical merits of the position. The tax benefits recognized in the financial statements from such a position are measured based on the largest benefit that has a greater than 50% likelihood of being realized upon ultimate settlement. Judgment is required in assessing the future tax consequences of events that have been recognized in our financial statements or tax returns, including uncertain tax positions and the realizability of deferred tax assets, which is dependent on the timing of the underlying deductions and the Company’s ability to generate future taxable income. Variations in the actual outcome of these future tax consequences could materially impact our financial position, results of operations, or cash flows. Results of Operations Comparison of Year Ended December 31, 2010 to Year Ended December 31, 2009 Total revenues Cost of revenues Selling, general and administrative Research and development Depreciation and amortization Total operating expenses Income from operations Other income (expense), net Income tax expense Net Income 2010 2009 $ Change % Change ($ in thousands) $18,565 $16,451 $ 2,114 601 12,815 3,016 852 17,284 1,281 10 410 881 $ 336 10,798 2,805 724 14,663 1,788 (67) 321 $ 1,400 265 2,017 262 77 2,621 (507) 77 89 $ (519) 13% 79% 19% 9% 11% 18% -28% 28% -37% 45 Revenue. We derive our revenue primarily from sales of our software licenses and from maintenance and support and professional services. We also recognize revenue from delivery of professional services and from subscription-based offerings. Software license revenue primarily consists of revenue from sales of our enterprise solutions, such as Enhanced File Transfer Server and WAFS, and is typically recognized upon shipment. Maintenance and support revenue includes unspecified software license updates and product support. Maintenance and support revenue is recognized ratably over the contractual period, which is typically one year, but can be up to three years. Professional services revenue includes a variety of customization, implementation, and integration services, as well as delivery of education and training associated with our solutions, all of which are recognized as the services are performed. In addition, during 2010 we added subscription revenues related to the sales of our Managed Solutions. Subscription revenue is recognized on a monthly basis as the services are billed over the contract period, which ranges from one to three years. Our professional services and subscription services did not contribute materially to our 2010 revenue, although professional services revenue grew substantially as compared to prior years. Revenues increased from $16.5 million in 2009 to $18.6 million in 2010. The increase of approximately $2.1 million or 13% in revenues was largely due to an increase in average sales price, an increase in maintenance and support sales, and increased contribution from professional services. The following table reflects revenue by product including the related maintenance and support for each product ($ in thousands): Product EFT Server Enterprise EFT Server CuteFTP Professional CuteFTP Home Wide Area File Services/CDP Other Total Revenues Maintenance and support (net of deferred revenues) Revenue for the Year Ended December 31, 2010 2009 $10,913 3,616 1,245 277 1,869 645 $18,565 58.8% 19.5% 6.7% 1.5% 10.1% 3.5% 100.0 $ 7,997 4,518 1,459 443 1,876 158 $16,451 48.6% 27.5% 8.9% 2.7% 11.4% 1.0% 100.0 $ 7,762 41.8% $ 6,026 36.6% Total revenue from our EFT Server and EFT Server Enterprise solutions increased by 16%, to $14.5 million in 2010 from $12.5 million in 2009. This increase in revenue was largely due to an increase in average sales price and an increase in maintenance and support renewal sales for these solutions. We also believe increasing numbers of customers are upgrading from EFT Server to EFT Server Enterprise, in line with the solution suite approach announced with the release of EFT Server 6.0 in 2009. These upgrades and new sales of EFT Server Enterprise increased sales of that solution by 36%, from approximately $8 million in 2009 to almost $11 million in 2010, more than offsetting the 20% decline in revenue from the more entry-level EFT Server. We believe the decline in revenue for EFT Server also reflects a sales promotion we ran in the second half of 2010 during which we delivered EFT Server for free, while upselling add-on modules and M&S contracts. Increased discussion of add-on modules with sales prospects and prior customers also may have contributed to the increased sales of EFT Server Enterprise (which supports a range of add-on modules in addition to those available for use with the base Enterprise File Transfer Server). The year to year increase in total EFT Server sales (including EFT Server Enterprise) is noteworthy because it comes despite the inclusion of a large, non-recurring U.S. Army order for EFT Server in 2009. In total, our EFT Server and EFT Server Enterprise products represented approximately 78% of our total revenues in 2010 as compared to 76% in 2009. Revenues from CuteFTP decreased by 20% from $1.9 million in 2009 to $1.5 million in 2010 and accounted for approximately 12% of total revenues in 2009 and 8% in 2010. This decline continues the general reduction in CuteFTP product revenues, both in absolute terms and as a percentage of revenues, experienced since 2006. The 46 consumer FTP product market has substantial low-cost, and even free, solutions that have put increasing pressure on CuteFTP product revenues. Additional pressure on this product line comes from social media companies and services that allow consumers to share images and video. Our reliance on the current CuteFTP products will continue to decline as we emphasize sales of our enterprise products and potentially achieve greater penetration into adjacent markets such as cloud services and endpoint security. Wide Area File Services and Continuous Data Protection product revenues remained at $1.9 million for 2009 and 2010 and accounted for approximately 11% and 10% of total revenues in 2009 and 2010, respectively. The Wide Area File Services and Continuous Data Protection products are largely used by architecture, engineering and construction firms to transfer large documents between offices. Products and services included in the “Other” revenue category primarily consist of professional services, training and Mail Express product sales. This revenue increased by approximately 308% to $645,000 in 2010 from $158,000 in 2009. Other revenue accounted for 3.5% of total revenue in 2010 as compared to 1% in 2009. This increase was largely due to the introduction of our new Solution Quickstart service which accounted for $224,000 of the total increase. Other notable increases were in Mail Express, training services, and two new professional service offerings: Product Customerization and Systems Integration and Business Process and Workflow. This category also includes the subscription revenue related to our Managed Solutions. Because of the more complex nature of the EFT Server, EFT Server Enterprise, Wide Area File Services and Continuous Data Protection products, and Mail Express, purchasers of those products require increased maintenance and support. Our maintenance and support revenues increased by 29% from $6.1 million in 2009 to $7.8 million in 2010. As our enterprise products become a larger portion of our total revenues, we believe maintenance and support revenues will continue to increase, as well as represent a higher proportion of our total revenue as more enterprise product customers purchase support compared to our consumer product customers. Maintenance and support pricing is reflective of the license cost of the products and the additional support it takes to maintain and support the products and customers. With higher maintenance and support revenues, we will recognize additional deferred revenue as we earn the revenue over the life of the maintenance and support agreement. Cost of Revenues. Cost of revenues consists primarily of royalties, a portion of our bandwidth costs, hosted service expenses for our Managed Solutions, and travel expenses associated with professional services delivery. Cost of revenues increased by approximately 79% between periods from $336,000 in 2009 to $601,000 in 2010. This increase was largely caused by an increase in royalties of $ 131,000, the addition of hosted server expenses of approximately $72,000 and an increase in training expense of approximately $47,000. The increase in royalties was due to increased sales of a licensed technology. The hosted server expenses are associated with the new MIX solution which launched in July, 2010, and the increase in training expenses was mostly due to travel expenses related to customer onsite training. Selling, General and Administrative. Selling, general and administrative expenses consist primarily of personnel and related expenses, marketing, customer support, facility costs, bad debt and professional fees. Selling, general and administrative expenses increased by approximately 19% from $10.8 million in 2009 to $12.8 million in 2010. This increase of approximately $2.0 million was mainly due to increases in several accounts: salaries and wages and related payroll taxes, commission expense, bonus expense, recruiting expense, health insurance, legal fees, consulting fees, travel and bad debt. These increases were offset by decreases in accounting professional fees and advertising expense. As a percentage of revenue, SG&A increased from 66% of revenue in 2009 to 69% of revenue in 2010. The increase of approximately $1.1 million in salaries and wages and related payroll taxes was due to an overall increase in staffing of 11 people, mainly in the sales, support, and marketing departments. The increase in commission expense of approximately $118,000 was due to an overall increase in sales of 11%. In addition, commissions on MIX sales are paid based on the full value of the contract at the time of signing. Bonus expense 47 increased by approximately $200,000 when compared to 2009 due to the addition of three people to the bonus pool and increased salaries, as our bonus plans are typically structured as a percentage of base salary. Recruiting expenses increased by approximately $73,000 from the prior year and consisted of fees paid to external recruiting agencies for the hiring of three software engineers, a systems administrator and a server support analyst. Health insurance increased by approximately $101,000 due to the increase in staffing. The increase of $169,000 in legal fees was largely due to the Uniloc litigation which has been resolved, as well as increased trademark and other intellectual property work. Consulting fees increased by approximately $74,000 due to the hiring of two consultants. One consultant was hired to develop international business and the other consultant was hired to assist with initial development of the MIX solution. Travel expenses increased approximately $88,000 largely due to an increase in international travel. This travel was related to strengthening our channel relationships, attending trade shows, as well as overall business development. The increase in bad debt expense of approximately $181,000 was due to the increase in accounts receivable as well as a slight increase in the percentages used to estimate bad debt. The decrease in accounting professional fees in 2010 of approximately $74,000 was mainly due to additional audit work performed in 2009 for the year 2008 audit which did not recur in 2010 and additional analysis performed regarding goodwill impairment in 2009 which also did not recur in 2010. Advertising expense decreased by approximately $370,000 due to the continued optimization of Google search ads. We have reduced the amount that we spend on search terms without affecting the quality of the of sales leads that are generated by the search results. Research and Development. Research and development expenses increased by approximately 10% from $2.8 million in 2009 to $3.0 million in 2010. The increase of approximately $211,000 mainly consists of a $126,000 increase in external research and development and a $121,000 increase in salaries and wages and related payroll taxes. The increase in external research and development was due to the hiring of a third party to test new software and the hiring of additional offshore developers. The increase in salaries and wages was due to the hiring of new software engineers in 2010 and was offset by a role change for one member of our management team who moved into a more sales-oriented role in October 2009. His compensation was formerly reported within research and development, but is now reported within selling, general, and administrative expenses. Depreciation and Amortization. Depreciation and amortization expense consists of depreciation expense related to our fixed assets and amortization of capitalized development costs and intangible assets. Depreciation and amortization expense increased by approximately $128,000, year over year. Of this increase $77,000 due to property additions in 2010 and the second half of 2009, and $51,000 was due to acceleration of software development costs. Other Income (Expense), Net. Other income/expense increased approximately $77,000 or 115% from 2009 to 2010. Other income in 2010 was from interest on short-term investments and interest on a Texas margins tax refund. Other expense in 2009 was a loss on fixed assets which was offset by interest on short-term investments. The 2009 loss on fixed assets of approximately $85,000 was largely due to not being able to sell the furniture that we removed during the renovation of our office space and having to completely write off the net book value of the property. In addition, we wrote off approximately $32,000 of internal use software which was purchased in 2008 due to a subsequent decision to not implement the software. Income Taxes. Our effective income rates were approximately 32% and 19% for 2010 and 2009, respectively. The effective tax rate was less in 2009 due to a significant deduction received relating to the tax treatment of stock options. For 2010, the most significant item that affected our effective income tax rate relates to the deduction for domestic production activities (“DPAD”) which was offset by non-deductible incentive stock option expense, and state income taxes. The rate on the DPAD deduction increased from 6% to 9% in 2010. 48 Comparison of Year Ended December 31, 2009 to Year Ended December 31, 2008 Total revenues Cost of revenues Selling, general and administrative Research and development Impairment of goodwill Impairment of long-lived assets Depreciation and amortization Total operating expenses Income (loss) from operations Other income (expense), net Income tax (benefit) expense Net (loss) Income 2009 2008 $ Change % Change ($ in thousands) $16,451 336 10,798 2,805 0 0 724 14,663 1,788 (67) 321 $ 1,400 $15,792 189 10,943 2,820 5,773 3,244 957 23,926 (8,134) 94 (380) $ (7,660) $ 659 147 (145) (15) (5,773) (3,244) (233) (9,263) 9,922 (161) 701 $ 9,060 4% 78% -1% -1% -24% -39% -171% 184% 118% Revenue. Revenues increased from $15.8 million in 2008 to $16.4 million in 2009. The increase of approximately $659,000 or 4% in revenues was largely due to the sale to the U.S. Army in April 2009 and increased sales of maintenance and support. The following table reflects revenue by product including the related maintenance and support for each product ($ in thousands): Product EFT Server Enterprise EFT Server CuteFTP Professional CuteFTP Home Wide Area File Services/CDP Other Deferred Revenue adjustment Total Revenues Maintenance and support (net of deferred revenues) Revenue for the Year Ended December 31, 2009 $ 7,997 4,518 1,459 443 1,876 158 — $16,451 $ 6,026 48.6% 27.5% 8.9% 2.7% 11.4% 1.0% 0.0% 100.0 36.6% 2008 $ 7,489 3,364 1,953 796 2,405 330 (545) $15,792 $ 4,890 47.4% 21.3% 12.4% 5.0% 15.2% 2.1% -3.5% 100.0 31.0% Sales of our EFT Server and EFT Server Enterprise solutions increased by 15%, to $12.5 million in 2009 from $10.9 million in 2008. This increase in revenue was primarily attributable to several factors: a sale to the U.S. Army for 20,000 units of the EFT Server software, with FIPS-certified libraries and our SSH module plus related maintenance and support for a total contribution of $1.3 million to 2009 revenue, an increase in EFT Server Enterprise and EFT Server maintenance and support sales and an increase in units sold. With the release of EFT Server 6.0 in March of 2009, customers were able to purchase additional individual add-on modules. With this new flexibility, customers of the more entry level EFT Server solution were able to purchase modules which were not available in the legacy Secure FTP Server product. The Company also released the Advanced Workflow Engine (AWE) module in February 2009, which contributed to the increase in unit sales. In total, our EFT Server and EFT Server Enterprise products represented approximately 76% of our total revenues in 2009 as compared to 69% in 2008, before adjusting for deferred revenues. 49 Revenues from CuteFTP decreased by 31% from $2.7 million in 2008 to $1.9 million in 2009 and accounted for approximately 17% of total revenues in 2008, before adjusting for deferred revenues, and 12% in 2009. This decline continues the general reduction in CuteFTP product revenues, both in absolute terms and as a percentage of revenues, experienced since 2006. The consumer FTP product market has substantial low-cost, and even free, solutions that have put increasing pressure on CuteFTP product revenues. Additional pressure on this product line comes from social media companies and services that allow consumers to share images and video. In addition, we believe the economic downturn reduced the spending capability of our customers. While we are continuing development of CuteFTP products, our reliance on these products likely will continue to decline. Wide Area File Services and Continuous Data Protection product revenues decreased by 22% from $2.4 million in 2008 to $1.9 million in 2009 and accounted for approximately 15% and 11% of total revenues in 2008, before adjusting for deferred revenues, and 2009, respectively. The Wide Area File Services and Continuous Data Protection products are largely used by architecture, engineering and construction firms to transfer large documents between offices. These firms were significantly affected by the economic recession, and as a result sales of Wide Area File Services and Continuous Data Protection software decreased drastically at the beginning of the year as companies cut discretionary spending. With some recovery in the economy and the release of Wide Area File Services version 3.6.1 in June 2009, sales stabilized over the second-half of the year. Because of the more complex nature of the EFT Server, EFT Server Enterprise, Wide Area File Services and Continuous Data Protection products, purchasers of those products require increased maintenance and support. Our maintenance and support revenues increased by 26% from $4.9 million in 2008 to $6.2 million in 2009. Approximately $467,000 of the 2009 increase in maintenance and support revenue was related to the sale to the U.S. Army in April 2009 which will continue into 2012. In addition, maintenance and support revenues increased due to an increase in sales support staff dedicated to selling maintenance and support renewals. As our enterprise products become a larger portion of our total revenues, maintenance and support revenues will continue to increase, as well as represent a higher proportion of our total revenue as more enterprise product customers purchase support compared to our consumer product customers. Maintenance and support pricing is reflective of the license cost of the products and the additional support it takes to maintain and support the products and customers. With higher maintenance and support revenues, we will recognize additional deferred revenue as we earn the revenue over the life of the maintenance and support agreement. Cost of Revenues. Cost of revenues consists primarily of royalties, a portion of our bandwidth costs as well as production, packaging and shipping costs for boxed copies of software products. Cost of revenues increased by approximately 78% between periods from $188,942 in 2008 to $335,961 in 2009. This increase was largely caused by an increase in royalty payments and bandwidth costs, offset by a decrease in payments made to the U.S. General Services Administration (GSA). The approximate $141,000 increase in royalties was due to the addition of royalty payments to two new companies. The approximate $26,000 increase in bandwidth costs was due to a larger portion of these costs being recorded in cost of revenues as opposed to selling, general and administrative expenses. In 2008, all internet fees were recorded as a selling expense; however, as a significant portion of our revenues are from online sales, the Company determined that a portion of those costs should be recognized as a cost of revenue. The approximate $25,000 decrease in GSA payments was due to the Company’s not making sales on a GSA schedule during 2009. Selling, General and Administrative. Selling, general and administrative expenses consist primarily of personnel and related expenses, marketing, customer support, facility costs, bad debt and professional fees. Selling, general and administrative expenses decreased by approximately 1% from $10.9 million in 2008 to $10.8 million in 2009. As a percentage of revenue, SG&A decreased from 69% of revenue in 2008 to 66% of revenue in 2009. This decrease of approximately $146,000 was mainly due to the Company’s concentrated cost control measures in the current year. Accounts with notable decreases were commissions, recruiting expense, business insurance, office rent expense, transition costs, service fees, billing fees, advertising expense, marketing expense 50 and bad debt. These decreases were offset by increases in several accounts including: salaries, bonuses, stock compensation expense, professional fees, consulting fees, public relation fees and product development allocations. The increase of approximately $253,000 in salaries was mainly attributable to the addition of a CEO and COO late in 2008. These positions were filled on an interim basis by one officer during approximately seven of the twelve months of 2008. Bonus expense increased approximately $149,000 from the prior year due to the adoption of a new bonus structure in 2009. The increase of approximately $129,000 in stock compensation expense was due to several large option grants with high grant prices that were forfeited in 2008. The increase of approximately $177,000 in professional fees was due to a change in auditors and work performed on the goodwill impairment, as well as hiring an investor relations firm. The increase of approximately $213,000 in consulting fees was due to the hiring of a consultant to specifically drive sales in the government industry. Public relations fees increased approximately $63,000 due to the hiring of a marketing communications firm earlier in 2009. Finally, in 2008, $66,000 of software development costs were capitalized; no amounts were capitalized in 2009 because there were no projects that were eligible for capitalization. Commission expense decreased approximately $128,000 from the prior year due to a change in commission policy. In January 2008, additional commissions were paid to account for this change in policy. This decrease was offset by the commissions on the U.S. Army order as well as a higher percentage paid on maintenance and support renewals. Recruiting expense was approximately $150,000 higher in 2008 due to the hiring of a senior accountant and several software engineers as well as fees paid for the search for a CEO. The Company was charged approximately $30,000 in 2008 for business insurance. In 2009 the charges for business insurance were not repeated and the Company received a credit of approximately $18,000 related to the prior year amount. The activity resulted in a net decrease to business insurance expense of $40,000. With the closing of the Andover, MA office in December 2008 a reserve was established at that time for all expenses related to the closing. The rent for that office was charged against the reserve established, and therefore, resulted in an approximate $74,000 decrease in rent expense for year 2009 as compared to year 2008. This decrease in rent expense was offset by an increase of approximately $20,000 due to rent expense paid in 2008 for the final payment on the prior office rental space in San Antonio. Restructuring costs were approximately $230,000 higher in 2008 due to the closing of the Andover, Massachusetts office in December 2008. The reduction of approximately $69,000 in service fees was due to a larger portion of internet costs being classified in cost of revenues, as well as reduced fees with the closing of the Andover office. The reduction of billing fees of approximately $36,000 was due to fewer online sales. Advertising expense decreased by approximately $186,000 due to the optimization of Google search ads. The decrease of approximately $55,000 in marketing expense was due to the discontinued use of several marketing firms. The reduction in bad debt expense of approximately $295,000 was primarily due to a change in the methodology of calculation that better estimated our allowance based on the historical collection patterns of our customer base. Research and Development. Research and development expenses decreased by approximately 1% from $2.82 million in 2008 to $2.8 million in 2009. The net decrease consists of reductions in the use of offshore developers by approximately $146,000 and a decrease in training expenses of approximately $29,000. In addition, there was a decrease in recruiting expense of approximately $11,000 due to very high retention and a corresponding reduction in recruiting for employees in the engineering department in 2009, as compared to 2008. These decreases were offset by increased salaries in 2009 of approximately $141,000 and approximately $29,000 of transition costs in 2009 related to the closing of the Andover office. Depreciation and Amortization. Depreciation and amortization expense consists of depreciation expense related to our fixed assets and amortization of capitalized development costs and intangible assets. Depreciation and amortization expense decreased by $232,551, or approximately 24%, year over year. Amortization expense decreased approximately $358,000, largely related to the write down of intangible assets at the end of 2008, which resulted in a smaller amortizable base. Depreciation expense increased by approximately $125,000 due to more property additions in the current year. 51 Impairment. During 2008 we performed an analysis of the future expected cash flows from the sale of the WAFS and CDP products. This analysis revealed a significant decrease in cash flows as compared to original expectations when Availl was purchased in 2006. Therefore in accordance with U.S. GAAP an impairment charge of $5.8 million was recorded against the goodwill and an impairment charge of $3.2 million was recorded against the software intangible asset. We performed the same analysis in 2009 and no impairment was recorded. Other Income (Expense), Net. Other income/expense decreased $161,863 or 172% from 2008 to 2009. This decrease was largely due to an approximate $87,000 decrease in interest income due to lower interest rates in 2009 and the addition of approximately $76,000 relating to the loss on disposal of assets. With the renovation of our office space in the current year and due to the current economic condition, we were not able to sell the furniture that we removed and had to completely write off the net book value of the property. In addition, we wrote off approximately $32,000 of internal use software which was purchased in 2008 due to the decision to not implement the software. Income Taxes. Our effective income rates were approximately 19% and 5% for 2009 and 2008, respectively. The lower tax effective rate in 2008 was largely due to the pre-tax loss caused by the impairment of goodwill and intangible assets, which is not deductible for tax purposes. For both 2009 and 2008, the most significant item that affected our effective income tax rate relates to expense on incentive stock options, for which our recorded expense is generally not deductible. 52 Item 8. Financial Statements and Supplementary Data GlobalSCAPE, Inc. Index to Financial Statements Years ending December 31, 2010, 2009 and 2008 Contents Report of Independent Registered Public Accounting Firm Financial Statements Balance Sheets Statements of Operations Statements of Stockholders’ Equity Statements of Cash Flows Notes to Financial Statements 53 54 55 56 57 58 59 Report of Independent Registered Public Accounting Firm Board of Directors and Shareholders GlobalSCAPE, Inc. We have audited the accompanying balance sheets of GlobalSCAPE, Inc. (a Delaware corporation) as of December 31, 2010 and 2009, and the related statements of operations, stockholders’ equity, and cash flows for each of the three years in the period ended December 31, 2010. These financial statements are the responsibility of the Company’s management. Our responsibility is to express an opinion on these financial statements based on our audits. We conducted our audits in accordance with the standards of the Public Company Accounting Oversight Board (United States). Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement. The Company is not required to have, nor were we engaged to perform an audit of its internal control over financial reporting. Our audit included consideration of internal control over financial reporting as a basis for designing audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Company’s internal control over financial reporting. Accordingly, we express no such opinion. An audit also includes examining, on a test basis, evidence supporting the amounts and disclosures in the financial statements, assessing the accounting principles used and significant estimates made by management, as well as evaluating the overall financial statement presentation. We believe that our audits provide a reasonable basis for our opinion. In our opinion, the financial statements referred to above present fairly, in all material respects, the financial position of GlobalSCAPE, Inc. as of December 31, 2010 and 2009, and the results of its operations and its cash flows for each of the three years in the period ended December 31, 2010 in conformity with accounting principles generally accepted in the United States of America. /s/ GRANT THORNTON LLP Houston, Texas March 29, 2011 54 Balance Sheets (in thousands except share amounts) Assets Current assets: Cash and cash equivalents Short term investments Accounts receivable (net of allowance for doubtful accounts of $237 and $217 in 2010 and 2009, respectively) CoreTrace receivable Federal income tax receivable Current deferred tax asset Prepaid expenses Total current assets Fixed assets, net Investment—CoreTrace Intangible assets, net Goodwill Deferred tax asset Other assets Total assets Liabilities and Stockholders’ Equity Current liabilities: Accounts payable Accrued expenses Deferred revenue Total current liabilities Deferred tax liability Other long term liabilities Commitments and contingencies Stockholders’ equity: Preferred stock, par value $0.001 per share, 10,000,000 authorized, no shares issued or outstanding Common stock, par value $0.001 per share, 40,000,000 authorized, 18,346,982 and 17,686,252 shares issued at December 31, 2010 and December 31, 2009, respectively Additional paid-in capital Treasury stock, 403,581 shares, at cost, at December 31, 2010 and December 31, 2009 Retained earnings Total stockholders’ equity Total liabilities and stockholders’ equity December 31, 2010 December 31, 2009 $ 11,087 — $ 7,026 1,205 3,124 298 94 881 319 15,803 1,286 2,278 531 619 — 30 20,547 250 1,392 5,554 7,196 7 1,185 — — 18 12,137 (1,452) 1,456 12,159 20,547 $ $ $ 2,162 — 37 130 132 10,692 1,653 2,278 832 619 46 53 16,173 316 764 4,071 5,151 — 1,079 — — 18 10,802 (1,452) 575 9,943 16,173 $ $ $ The accompanying notes are an integral part of these financial statements. 55 GlobalSCAPE, Inc. Statements of Operations (in thousands, except per share amounts) Operating Revenues: Software licenses Maintenance and support Other Total Revenues Operating Expenses: Cost of revenues Selling, general and administrative expenses Research and development expenses Depreciation and amortization Impairment of goodwill Impairment of long-lived assets Total operating expenses Income (loss) from operations Other (expense) income: Interest expense Interest income Loss on sale of assets Other income Total other (expense) income Income (loss) before income taxes Provision (benefit) for income taxes Net income (loss) Net income (loss) per common share—basic Net income (loss) per common share—diluted Weighted average shares outstanding: Basic Diluted For the Year Ended December 31, 2009 2008 2010 $10,279 7,788 498 18,565 $10,274 6,026 151 16,451 $10,902 4,890 — 15,792 601 12,815 3,016 852 — — 17,284 1,281 — 10 — — 10 1,291 410 $ 881 $ 0.05 $ 0.05 336 10,798 2,805 724 — — 14,663 1,788 — 18 (85) — (67) 1,721 321 $ 1,400 $ 0.08 $ 0.08 189 10,944 2,819 957 5,773 3,244 23,926 (8,134) (7) 105 (9) 5 94 (8,040) (380) $ (7,660) $ (0.44) $ (0.44) 17,540 18,260 17,248 17,691 17,240 17,240 The accompanying notes are an integral part of these financial statements 56 GlobalSCAPE, Inc. Statement of Stockholders’ Equity Balance at December 31, 2007 Purchase of Treasury Stock Shares issued for goods Shares issued upon exercise of Stock Options Stock-based compensation expense Net Loss Balance at December 31, 2008 Shares issued upon exercise of Stock Options Stock-based compensation expense Net Income Balance at December 31, 2009 Shares issued upon exercise of Stock Options Tax benefit from stock-based compensation Stock-based compensation expense Issuance of vested restricted stock Net Income Balance at December 31, 2010 Common Stock Shares Amount Additional paid-in Capital 17,592,225 $ — — 38,727 — — 17,630,952 55,300 — — 17,686,252 602,650 — 58,080 — 18,346,982 $ 18 $ 8,765 — — (13) — 12 — 974 — — — 9,738 18 43 — 1,021 — — — 10,802 18 232 — 97 1,006 — — — — — 18 $ 12,137 Treasury Stock $ (528) (978) 54 — — — (1,452) — — — (1,452) — — — — $(1,452) Retained (Deficit)/Earnings $ 6,835 — — — — (7,660) (825) — — 1,400 575 — — — 881 1,456 $ Total $15,090 (978) 41 12 974 (7,660) 7,479 43 1,021 1,400 9,943 232 97 1,006 — 881 $12,159 The accompanying notes are an integral part of these financial statements. 57 GlobalSCAPE, Inc. Statements of Cash Flows (in thousands) Operating Activities: Net income (loss) Adjustments to reconcile net income (loss) to net cash provided by operating activities: Bad debt expense (recoveries) Depreciation and amortization Loss on disposition of assets Stock-based compensation Deferred taxes Excess tax benefit from exercise of share based compensation Impairment of goodwill Impairment of long-lived assets Changes in operating assets and liabilities: Accounts receivable CoreTrace receivable Prepaid expenses Federal income taxes Other assets Accounts payable Accrued expenses Deferred revenues Deferred compensation Other long-term liabilities Net cash provided by operating activities Investing Activities: Proceeds from sale of property and equipment Purchase of property and equipment Investment in CoreTrace Purchase of short-term investments Redemption of short-term investments Net cash provided by (used in) investing activities Financing Activities: Purchase of treasury stock Proceeds from exercise of stock options Tax benefit from stock-based compensation Net cash provided by (used in) financing activities Net increase in cash Cash at beginning of period Cash at end of period Supplemental disclosure of cash flow information: Cash paid during the period for: Interest Income taxes Noncash—Shares issued for goods For the Year Ended December 31, 2009 2010 2008 $ 881 $ 1,400 $ (7,660) 121 852 — 1,006 (698) (97) — — (1,083) (298) (187) 40 23 (66) 628 1,483 — 106 2,711 — (184) — (350) 1,555 1,021 — 232 97 329 4,061 7,026 $11,087 (60) 724 85 1,021 (424) — — — 235 957 9 974 (1,422) — 5,773 3,244 (70) (23) (12) (17) (5) (197) 203 2,225 (216) 19 4,676 1 (530) (2,278) (1,705) 500 (4,012) — 43 — 43 707 6,319 $ 7,026 (32) 921 32 182 (182) 565 216 (107) 3,682 5 (1,617) — — — (1,612) (978) 12 — (966) 1,104 5,215 $ 6,319 $ — $ 1,128 $ — $ — 764 $ $ — $ — 770 $ $40,500 The accompanying notes are an integral part of these financial statements. 58 GlobalSCAPE, Inc. Notes to Financial Statements December 31, 2010 and 2009 1. Nature of Business and Corporate Structure GlobalSCAPE, Inc. (“GlobalSCAPE” or the “Company”) provides secure information exchange capabilities for consumers and enterprises through the development and distribution of software, delivery of managed and hosted solutions, and provision of associated services. Since our organization in 1996, we have evolved from a company focused primarily on personal file transfer products, sold over the Internet, to a solution provider deriving over 90 percent of revenue from sales to small and medium business and enterprise customers worldwide. Our MFT products ensure the privacy of critical information such as financial data, medical records, customer files and other similar sensitive documents. In addition, these products ensure compliance with many government and commercial regulations relating to the protection of information while allowing users to reduce IT costs, increase efficiency, track and audit transactions and automate processes. In 2010 we added managed e-mail attachment, software-as-a-service (“SaaS”), and cloud-based subscription solutions. Our managed e-mail attachment solution addresses the needs of customers who are constrained by the typical limits on e- mail attachment size or who require additional security, auditing, and reporting for file attachments shared through e-mail. Our SaaS and cloud-based subscription solutions allow customers to reduce their upfront and total cost of ownership and achieve other recognized benefits of cloud-based solutions, including service elasticity and strong service level agreements for IT infrastructure reliability and performance. Prior to January 1, 2008, the Company’s operations were conducted by GlobalSCAPE Texas, LP, and by Availl, Inc. (“Availl”) a wholly owned subsidiary. The partners of GlobalSCAPE Texas, LP were two Nevada limited liability companies, which were both wholly-owned subsidiaries of GlobalSCAPE. During this period the consolidated financial statements of the Company included all subsidiaries and all inter-company transactions and balances were eliminated. Effective December 31, 2007, Availl and the limited partnership and limited liability corporations mentioned above were either dissolved or effectively merged into GlobalSCAPE. Therefore, since January 1, 2008, the Company has operated as one legal entity. 2. Significant Accounting Policies Revenue Recognition The Company markets and distributes software products; revenue is recognized when the following conditions have been met: • Persuasive evidence of an arrangement exists Delivery has occurred or services have been rendered • • • Fixed or determinable amount Collection is reasonably assured If the Company determines that any one of the four criteria is not met, we will defer recognition of revenue until all the criteria are met. License revenue is derived primarily from the licensing of various products and technology. Generally license revenue is recognized upon delivery of the product, assuming all other conditions for revenue recognition noted above have been met. 59 The Company also enters into perpetual software license agreements through direct sales to customers and indirect sales with distributors and resellers. The license agreements generally include product maintenance and support agreements, for which the related revenue is deferred and recognized ratably over the term of the agreements. In any given period if the amount of revenue that is deferred, which is equal to the total of that period’s maintenance and support sales, is greater than the amount recognized, then revenue will decrease and vice versa. In arrangements that include multiple elements, including perpetual software licenses and maintenance and/or services, revenue is allocated and deferred for the undelivered items based on vendor specific objective evidence (“VSOE”). When VSOE of fair value exists for all elements in a multiple element arrangement, revenue is allocated to each element based on the relative fair value of each of the elements. VSOE of fair value is established by the price charged when the same element is sold separately. In a multiple element arrangement whereby VSOE of fair value of all undelivered elements exists but VSOE of fair value does not exist for one or more delivered elements, revenue is recognized using the residual method. Under the residual method, the fair value of the undelivered elements is deferred and the remaining portion of the arrangement fee is recognized as revenue, assuming collection is probable. Deferred revenue consists primarily of the unamortized balance of product maintenance. We recognize hosting revenue, including setup fees on a monthly basis, over the contractual term of the customer contract. We believe our customers generally will continue to utilize our services beyond the initial contract term which typically ranges from one to three years. As a result, setup fees are recognized ratably over the estimated average life of a customer relationship. Amounts that have been invoiced are recorded in accounts receivable and either deferred revenue or revenue, depending on whether the revenue recognition criteria have been met. These amounts are included in the “Other” line item on the Statement of Operations. Concentrations of Credit Risk and Significant Customers Financial instruments that potentially subject the Company to concentrations of credit risk consist principally of cash and cash equivalents and accounts receivable. Cash is deposited in demand accounts in federally insured domestic institutions to minimize risk. The Company provides credit, in the normal course of business, to a number of companies and performs ongoing evaluations of its credit risk. The Company requires no collateral from its customers. Management estimates the allowance for uncollectible accounts based on their historical experience and credit evaluation. In 2010, no single customer accounted for more than 10% of revenues. In 2009 one customer accounted for approximately 14.9% of revenues. In 2008 no single customer accounted for more than 10% of revenues. In 2010, 2009 and 2008 there were no customers that represented 10% of our outstanding receivables. Other Concentrations Sales in Foreign Markets. In 2010, 2009 and 2008, approximately 31%, 29% and 35%, respectively, of the Company’s revenues were generated from sales to customers who provided addresses in foreign countries. However, the majority of revenues in each of these years were received in U.S. dollars so there is limited exchange rate risk with respect to the sale of our products. The sales to customers with foreign addresses were concentrated mostly in Canada, Australia and Western Europe. In 2010, 2009 and 2008, sales to the United Kingdom accounted for approximately 10%, 9%, and 11%, respectively, of total revenues. Labor. GlobalSCAPE utilizes offshore developers for some portion of the coding phase of software development. If GlobalSCAPE were unable to continue using these developers because of political or economic instability, GlobalSCAPE may have difficulty finding comparably skilled developers or may have to pay considerably more for the same work, which would have a material adverse impact on results of operations. 60 Use of Estimates The preparation of financial statements in accordance with U.S. GAAP requires the use of estimates and assumptions that affect the reported amounts of assets and liabilities, disclosure of contingent assets and liabilities known to exist as of the date the financial statements are published, and the reported amounts of revenues and expenses during the reporting period. Uncertainties with respect to such estimates and assumptions are inherent in the preparation of the Company’s financial statements; accordingly, it is possible that the actual results could differ from these estimates and assumptions, which could have a material effect on the reported amounts of the Company’s financial position and results of operation. Cash and cash equivalents Cash includes all cash and highly liquid investments with original maturities of three months or less. Approximately $9.3 million of our December 31, 2010 cash balance is fully insured by the FDIC through December 2010, under the Temporary Liquidity Guarantee Program. Thereafter, our cash balance will be fully insured through December 2012 under Section 343 of the Dodd-Frank Wall Street Reform and Consumer Protection Act. As of December 31, 2010, approximately $1.8 million of our cash balance was held in an interest bearing account and therefore, uninsured. Subsequent to December 31, these funds were moved to a non-interest bearing checking account. Property and Equipment Property and equipment is comprised of furniture and fixtures, software, computer equipment and leasehold improvements which are recorded at cost and depreciated using the straight-line method over their estimated useful lives. Expenditures for maintenance and repairs are charged to operations as incurred. Furniture, fixtures and equipment have a useful life of 5 to 7 years, computer equipment and software 3 years and leasehold improvements are depreciated over the shorter of the lease term or the estimated useful life of the asset. Royalty Costs Royalties that the Company pays on software products licensed from third parties, which it resells, are expensed as a cost of sale when the software product is sold or earlier if the recoverability of any prepaid royalties is in doubt. The Company has distribution agreements with Xnet Communications GmbH, ComponentOne LLC, Veridis SA, Bitvise Limited, and Network Automation, Inc. The GlobalSCAPE software products associated with each of the companies are Mac FTP, Cute FTP and Enhanced File Transfer Server. The Company incurred approximately $346,000, $215,000, and $73,000 in royalty expense in 2010, 2009 and 2008, respectively. Advertising Costs The Company expenses advertising costs as incurred. Advertising expenses charged to operations for the years ended December 31, 2010, 2009 and 2008 were approximately $624,000, $994,000, and $1.2 million, respectively, and are included in selling, general and administrative expenses. Advertising costs are principally for the purchase of keywords for internet searches, graphic designs and business announcement services. Income Taxes The Company accounts for income taxes using the asset and liability method. The asset and liability method provides that the deferred tax assets and liabilities are recorded based on the difference between the tax bases of assets and liabilities and their carrying amount for financial reporting purposes, as measured by the enacted tax rates and laws that will be in effect when the differences are expected to reverse. Deferred tax assets and liabilities are carried on the balance sheet with the presumption that they will be realizable in future periods when pre-tax income is generated. 61 We must also assess the likelihood that deferred tax assets will be realized from future taxable income and, based on this assessment; establish a valuation allowance, if required. Our determination of our valuation allowance is based upon a number of assumptions, judgments, and estimates, including forecasted earnings, future taxable income, and the relative proportions of revenue and income before taxes in the various domestic jurisdictions in which we operate. To the extent we establish a valuation allowance or change the valuation allowance in a period, we reflect the change with a corresponding increase or decrease to our tax provision in our statement of operations. We account for uncertainty in income taxes using a two-step process to determine the amount of tax benefit to be recognized. First, the tax position must be evaluated to determine the likelihood that it will be sustained upon external examination. If the tax position is deemed “more-likely-than-not” to be sustained, the tax position is then assessed to determine the amount of benefit to recognize in the financial statements. The amount of the benefit that may be recognized is the largest amount that has a greater than 50% likelihood of being realized upon ultimate settlement. Unrecognized tax benefits represent tax positions for which reserves have been established. Research and Development Research and development expenses include all direct costs, primarily salaries for personnel and expenditures with external development sources, related to the development of new products and significant enhancements to existing products and are expensed as incurred until such time as technological feasibility is achieved. For the years 2010, 2009 and 2008, the Company expended approximately $3.1 million, $2.8 million, and $2.8 million, respectively, on research and development. Stock-Based Compensation Compensation cost relating to share-based payment transactions is recognized in the financial statements. The cost is measured at the grant date, based on the calculated fair value of the award, and is recognized as an expense over the employee’s requisite service period (generally the vesting period of the equity award). The fair value of each option award is estimated on the date of grant using the Black-Scholes option-pricing model. Expected volatility is based on historical volatility of GlobalSCAPE stock. The Company uses the simplified method to derive an expected term. The expected term represents an estimate of the time options are expected to remain outstanding. The risk-free rate for periods within the contractual life of the option is based on the U.S. treasury yield curve in effect at the time of grant. The following table sets forth the assumptions used to determine compensation cost for our stock options. Expected volatility Expected annual dividend yield Risk free rate of return Expected option term (years) Year Ended December 31, 2010 Year Ended December 31, 2009 Year Ended December 31, 2008 83% 0 2.60% 5.00 95% 0 2.13% 6.01 95% 0 2.93% 6.01 Refer to Note 7—Stock Options and Stock Based Compensation for additional disclosures regarding our stock compensation programs. Goodwill and Other Intangible Assets Goodwill and certain indefinite-lived assets are not amortized, but are evaluated at least annually for impairment. The determination of whether the carrying value of goodwill and other intangible assets have been impaired requires the Company to make estimates and assumptions about future business trends and growth. If 62 an event occurs that would cause the Company to revise its estimates and assumptions used in analyzing the value of goodwill or other intangibles, such revision could result in an impairment charge that could have a material impact on the Company’s financial condition or results of operations. Goodwill is tested for impairment annually in December or whenever an event occurs or circumstances change that may reduce the fair value of the reporting unit below its book value. The impairment test is conducted for each reporting unit in which goodwill is recorded by comparing the fair value of the reporting unit with its carrying value. Fair value is determined primarily by computing the future discounted cash flows expected to be generated by the reporting unit. If the carrying value exceeds the fair value, goodwill may be impaired. If this occurs, the fair value of the reporting unit is then allocated to its assets and liabilities in a manner similar to a purchase price allocation in order to determine the implied fair value of the goodwill of the reporting unit. The implied fair value is then compared with the carrying amount of the goodwill of the reporting unit and, if it is less, the Company would recognize an impairment loss. Impairment of Long-Lived Assets The Company evaluates its long-lived assets for impairment whenever events or changes in circumstances indicate that the carrying amount of an asset may not be recoverable. Recoverability of these assets is measured by comparison of their carrying amounts to future undiscounted cash flows that the assets are expected to generate. If long-lived assets are considered to be impaired, the impairment to be recognized equals the amount by which the carrying value of the assets exceed their fair market values and is recorded in the period that the determination is made. Capitalized Software Development Costs Capitalization of software development costs for external use begins upon the establishment of technological feasibility and ceases when the product is available for general release. The establishment of technological feasibility and the ongoing assessment of recoverability of capitalized software development costs require considerable judgment by management concerning certain external factors including, but not limited to, technological feasibility, anticipated future gross revenue, estimated economic life and changes in software and hardware technologies. Capitalization of software development costs for internal use begins during the application development stage. These software development costs are amortized using the straight-line method over a three-year period. The Company reviews costs throughout the year and no software development costs were capitalized in 2010 and 2009. During 2008, the Company capitalized $207,000 of software development costs. Other Long-Term Liabilities Other long-term liabilities relate to deferred payments of rent expense and the long term portion of revenue deferred from the sale of maintenance and support agreements. The total amount of base lease payments is being charged to expense on the straight-line method over the term of the lease. Restructuring Costs and Other Charges Restructuring costs include employee severance and relocation costs, and costs related to leased office space abandoned. Severance costs are recognized when the Company’s management with the proper level of authority has committed to a restructuring plan and communicated those actions to employees. The Company’s estimate of severance and benefit costs assumptions is subjective as it is based on estimates of employee attrition. The estimated loss accrued for leased facilities abandoned represents the fair value of the lease liability as measured by the present value of future lease payments subsequent to abandonment. 63 Other exit costs include costs to close facilities. A liability for such costs is recorded at its fair value in the period in which the liability is incurred. At each reporting date, the Company evaluates its accruals for exit costs and employee separation costs to ensure the accruals are still appropriate. Earnings Per Share Earnings per Share—basic and diluted are presented for all periods presented. Earnings per share—basic is computed using the weighted-average number of common shares outstanding during the periods. Earnings per share—diluted is computed using the weighted-average number of common shares outstanding plus the number of common shares that would be issued assuming conversion of all potentially dilutive common shares outstanding. Awards of non vested options are considered potentially dilutive common shares for the purpose of computing earnings per common share. In applying the treasury stock method to non vested options the assumed proceeds include the amount the employee must pay to exercise the option plus the amount of unrecognized cost attributable to future periods less any expected tax benefits. Below is a reconciliation of the numerators and denominators of basic and diluted earnings per share for each of the following years (in thousands except share amounts): Numerators Numerators for basic and diluted earnings per Net income (loss) Denominators Denominators for basic and diluted earnings Weighted average shares outstanding basic Dilutive potential common shares Stock options and awards Common stock warrants Denominator for dilutive earnings per share Net income (loss) per common share—basic Net income (loss) per common share—diluted Year ended December 31, 2010 (1) 2009 (2) 2008 (3) $ 881 $ 1,400 $ (7,660) 17,540 17,248 17,240 720 — 18,260 $ 0.05 $ 0.05 443 — 17,691 $ 0.08 $ 0.08 — — 17,240 $ (0.44) $ (0.44) (1) For the year ended December 31, 2010, 180,972 options and all of the warrants have been excluded in computing dilutive shares, as the effect would be anti-dilutive. (2) For the year ended December 31, 2009, 1,508,496 options and all of the warrants have been excluded in computing dilutive shares, as the effect would be anti-dilutive. (3) For the year ended December 31, 2008, no options or warrants have been included in computing dilutive shares, as the effect would be anti-dilutive. Recent accounting pronouncements In October 2009, the Financial Accounting Standards Board (“FASB”) amended its guidance regarding the accounting model for revenue arrangements that include both tangible products and software elements. This guidance requires that hardware components of a tangible product containing software components always be excluded from the software revenue recognition. This guidance also provides information on how to allocate consideration to deliverables in an arrangement that includes both tangible products and software. This guidance is effective in fiscal years beginning on or after June 15, 2010. We do not expect this guidance to have a material impact on our financial statements. 64 In October 2009, the FASB amended its guidance regarding revenue recognition on multiple-deliverable arrangements. The objective of the guidance is to enable companies to account for products or services separately rather than as a combined unit. Specifically this guidance addresses how to separate deliverables and how to measure and allocate arrangement consideration to one or more units of accounting. This guidance does not affect arrangements for which industry-specific allocation and measurement guidance exists, such as for long-term construction contracts or for software transactions. This guidance is effective in fiscal years beginning on or after June 15, 2010. We do not expect this guidance to have a material impact on our financial statements. In August 2009, the FASB amended its guidance regarding the fair value measurement of liabilities. The guidance provides clarification that in circumstances in which a quoted price in an active market for the identical liability is not available, the entity is required to measure fair value using a valuation technique that uses the quoted price of the identical liability when traded as an asset, the quoted prices for similar liabilities when traded as assets, a present value technique, or a market approach. The guidance also clarifies that when using the quoted price in an active market for the identical liability or the quoted price for the identical liability traded as an asset, these valuations are Level 1 fair value measurements. This guidance is effective as of the date of issuance. The implementation of this guidance did not have a material impact on our financial statements. 3. Financial Instruments and Investments Accounting guidance defines fair value as the price that would be received upon sale of an asset or paid upon transfer of a liability in an orderly transaction between market participants at the measurement date and in the principal or most advantageous market for that asset or liability. The fair value should be calculated based on assumptions that market participants would use in pricing the asset or liability, not an assumption specific to the entity. In addition, the fair value of liabilities should include consideration of non-performance risk, including our own credit risk. The Company’s investments currently consist of an investment in a software company, which is accounted for under the cost method. The current carrying amount of this cost-method investment is $2.3 million. The investment was made on December 30, 2009 and the Company believes that the current carrying amount approximates fair value and has not evaluated it for impairment as there have been no indicators that would indicate the value of the investment has declined below cost. These investments along with accounts receivable and accounts payable are reflected in the accompanying financial statements, at cost, which approximate fair value because of the short term maturity of these instruments. 4. Accounts Receivable Accounts receivable, which are primarily from sales of software licenses, are presented net of an allowance for doubtful accounts. The activity of the Company’s allowance for the years ended December 31, 2010, 2009 and 2008 is presented in the following table: Year Ended 31-Dec 2010 2009 2008 Balance at Beginning of Period 217 $ 331 $ 113 $ Charged to Income or Expense $ $ $ 121 (60) 235 Deductions (1) $ $ $ (101) (54) (17) Balance End of Period $ 237 $ 217 $ 331 (1) Represents amounts written off as uncollectible accounts receivable. 65 5. Fixed Assets Fixed assets, at cost, consist of the following: Furniture and equipment Software Equipment Leasehold improvements Software development costs Less accumulated depreciation December 31, 2010 $ 556 637 638 549 168 2,548 (1,262) $ 1,286 2009 $ 542 594 524 545 219 2,424 (771) $1,653 6. Goodwill and Other Intangible Assets In December 2010, the Company performed its annual impairment test of the WAFS reporting unit, which is the reporting unit where all of the Company’s goodwill is allocated. This analysis required the input of several critical assumptions, including: • • • • Long term earnings and cash flow projections based on the Company’s strategic budgeting process, subject to future revenue growth rates and operating costs. Weighted average cost of capital (“WACC”), which takes into account the relative weights of each component of the Company’s consolidated capital structure (equity and debt). The U.S. Treasury 20-year rate was used as the risk free interest rate. In the current year the Company changed its assumption about the life of the reporting unit. Due to stable sales and increased market acceptance, the Company assumed that the reporting unit would continue as a going concern. The Gordon Growth Model was applied to cash flows past the discrete projections. The Company believes the goodwill amounts reflect the value of the reporting unit given the recent stabilization in product sales and the Company’s future plans for the product. Based on the calculation using the assumptions above, the fair value of the reporting unit exceeded its carrying value and therefore no impairment was recorded. Due to the many variables inherent in the estimation of a business’s fair value and the relative size of the recorded goodwill, differences in assumptions may have a material effect on the results of the Company’s impairment analysis. In December 2008 as part of the Company’s annual impairment test of goodwill, projected decreases in sales indicated a significant decline in the fair value of the Company’s WAFS reporting unit. The Company evaluated the net book value of goodwill within this reporting unit by comparing the fair value of the unit to the related net book value. During the performance of our annual impairment test and in conjunction with our budgeting process, a review of the projected future sales of our WAFS/CDP products showed a significant decrease in expected future revenues. As a result, the Company recorded an impairment loss in 2008 on its goodwill of approximately $5.77 million. In addition in 2008, the Company determined that the WAFS/CDP software and related patent assets would not provide enough future value to recover the amount recorded in the books. As a result, the Company recorded an impairment loss in 2008 on long- lived assets of approximately $3.24 million. 66 Intangible assets, net at December 31, 2010 and 2009, consisted of the following: 2010 Software Customer list Patent Total 2009 Software Customer list Patent Total Life (Years) 5 5 18 Gross Carrying Amount $ $ 1,775 180 7 1,962 Life (Years) Gross Carrying Amount 5 5 18 $ $ 1,775 180 7 1,962 Accumulated Amortization $ (1,311) (117) (3) (1,431) Accumulated Amortization $ (1,047) (81) (2) (1,130) $ $ Net $464 63 4 $531 Net $728 99 5 $832 Estimated future amortization of intangible assets is as follows: Years Ending December 31 2011 2012 2013 2014 2015 Thereafter Total Estimated Amortization Expense 301 $ 226 1 1 1 1 531 $ Acquired intangibles are amortized on a straight-line basis over their weighted average lives. Intangible assets amortization expense was approximately $302,000, $301,000, and $694,000 for the years ended December 31, 2010, 2009, and 2008, respectively. During the fourth quarter of 2008 the Company revised the estimated useful life on its software intangible asset from 10 years to 5 years. This change resulted in an additional $156,000 in amortization expense in 2008. 7. Stock Options and Stock Based Compensation GlobalSCAPE has stock-based compensation plans available to grant incentive stock options, non-qualified stock options and restricted stock to employees and non-employee members of the Board of Directors. In June 2010, GlobalSCAPE’s stockholders approved the GlobalSCAPE, Inc. 2010 Employee Long-Term Equity Incentive Plan (“2010 EIP”). The 2010 EIP authorizes the issuance of up to three million shares of common stock for stock-based incentives including stock options and restricted stock awards. The exercise price, term and other conditions applicable to each stock option or stock award granted under the 2010 EIP are determined by the Compensation Committee of the Board of Directors. The exercise price of stock options is set on the grant date and may not be less than the fair market value per share of our stock on that date (at market close). The stock options will expire after ten years. As of December 31, 2010, there were 195,000 shares issued and outstanding and none are vested under the 2010 EIP. Under the GlobalSCAPE, Inc. 2000 Stock Option Plan (the “Employee’s Plan”), which was approved by the Board of Directors and became effective on May 17, 2001, a maximum of 3,660,000 shares of GlobalSCAPE 67 common stock may be awarded. During the year ended December 31, 2010, 195,000 stock options were granted and on December 31, 2010, a total of 2,905,327 stock options were outstanding of which 1,730,264 were vested. The exercise price, term and other conditions applicable to each stock option granted under the Employee’s Plan are determined by the Board of Directors. The exercise price of stock options is set on the grant date and may not be less than the fair market value per share of our stock on that date (at market close). The Employee’s Plan options generally become exercisable over a three-year period (vesting 33%, 33% and 34% per year, respectively) and expire after ten years. Under the GlobalSCAPE, Inc. 2006 Non-Employee Directors Long-term Equity Incentive Plan (the “Director’s Plan”), which was approved by the stockholders and became effective on June 1, 2007, a maximum of 500,000 shares of GlobalSCAPE common stock may be awarded, of which 228,500 still remain available for issuance as of December 31, 2010. During the year ended December 31, 2010, no stock options were granted and restricted stock awards for 53,420 shares of common stock were granted. At December 31, 2010, a total of 160,000 stock options were outstanding of which 160,000 were vested. The exercise price, term and other conditions applicable to each stock option granted under the Director’s Plan are determined by the Compensation Committee of the Board of Directors. The exercise price of stock options is set on the grant date and may not be less than the fair market value per share of our stock on that date (at market close). The most recently awarded Director’s Plan options become exercisable over a one- year period and expire after ten years. The fair value of the restricted stock awards is based upon the market value of the underlying common stock as of the date of grant. Restricted stock awards are amortized over their applicable vesting period, one year, using the straight-line method. The Director’s Plan provides that each year, at the first regular meeting of the Board of Directors following the Company’s annual stockholders meeting, each non-employee director shall be granted awards of 20,000 shares of common stock for participation in the Board and Committee meetings during the prior year. The maximum annual award for any one person is 20,000 shares of common stock. The following table summarizes information about restricted stock activity through the year ended December 31, 2010. Outstanding at December 31, 2008 2009 Granted Vested Outstanding at December 31, 2009 2010 Granted Vested Outstanding at December 31, 2010 Number of Shares — 58,080 — 58,080 53,420 58,080 53,420 Weighted Average Grant-Date Fair Value 1.24 — 1.24 2.01 1.24 2.01 The total fair value of restricted stock that vested in 2010 and 2009 was $116,000 and $0, respectively. There was approximately $1,006,000, $1,021,000, and $974,000 of compensation cost related to stock options and restricted stock awards recognized in operating results for the years ended December 31, 2010, 2009, and 2008, respectively. The fair value of each option award is estimated on the date of grant using the Black-Scholes option-pricing model. Expected volatility is based on historical volatility of GlobalSCAPE stock. We used the simplified method to derive an expected term. The expected term represents an estimate of the time options are expected to 68 remain outstanding. The risk-free rate for periods within the contractual life of the option is based on the U.S. treasury yield curve in effect at the time of grant. The following table summarizes information about stock option activity through the year ended December 31, 2010. Outstanding at December 31, 2007 2008 Granted Forfeitures Exercised Outstanding at December 31, 2008 2009 Granted Forfeitures Exercised Outstanding at December 31, 2009 2010 Granted Forfeitures Exercised Outstanding at December 31, 2010 Exercisable at December 31, 2010 Number of Options 1,734,528 1,592,500 38,727 362,034 2,926,267 961,760 179,400 55,300 3,653,327 390,000 180,350 602,650 3,260,327 1,890,264 Weighted Average Exercise Price Weighted Average Remaining Contractual Terms (years) $ 1.94 $ 7.64 Average Intrinsic Value ($M) 6.17 $ 1.81 0.32 3.5 1.7 1.27 2.35 0.77 1.57 2.02 1.74 0.39 1.83 2.00 8.31 0 7.89 1.25 7.63 7.04 1.48 The weighted average fair value of options granted during the year ended December 31, 2010 was $1.32. The total intrinsic value of options (which is the amount by which the stock price exceeded the exercise price of the options on the date of exercise) exercised during the year ended December 31, 2010 was $1.2 million. During the year ended December 31, 2010, the amount of cash received from the exercise of stock options was approximately $232,000. At December 31, 2010, there was $1.2 million of total unrecognized compensation cost related to non-vested stock option awards which is expected to be recognized over a weighted-average period of 1.69 years. There were 124,597 options that vested during the year ended December 31, 2010 and the total fair value of these awards was $1.3 million. The following table shows information about outstanding stock options at December 31, 2010. Range of Exercise Prices $0.15 - $0.33 $0.85 - $1.29 $1.35 - $2.14 $2.38 - $4.10 Options Outstanding Options Exercisable Weighted Average Remaining Contractual Life 4.09 7.82 8.10 6.70 Weighted Average Exercise Price $ 0.26 $ 1.03 $ 1.58 $ 3.07 Number of Options 59,400 451,955 693,642 685,267 Weighted Average Exercise Price $ 0.26 $ 1.08 $ 1.62 $ 3.14 Options Outstanding 59,400 846,240 1,439,570 915,117 69 8. Common Stock and Warrants On November 13, 2006, the Company entered into a securities purchase agreement with accredited investors and granted warrants to purchase 1,352,000 shares of our common stock to the investors with an exercise price of $3.15 per share. The warrants have a 5-year term and are currently exercisable. During 2007, the Company issued 35,000 common shares in exchange for warrants for 85,000 shares on a net share settlement for which the Company received no proceeds. 9. Income Taxes The components of income tax expense (benefit) for the years ended December 31, 2010, 2009 and 2008 are as follows: 2010 2009 2008 Current Deferred Total Current Deferred Total Current Deferred Total Federal State Total $ 1,055 (697) 358 $ $ $ 754 (417) 337 $ 1,020 (1,402) $ (382) $ 53 (1) $ 52 $ (9) (7) $(16) $ 22 (20) $ 2 $ 1,108 (698) 410 $ $ $ 745 (424) 321 $ 1,042 (1,422) $ (380) Deferred income taxes reflect the net tax effects of temporary differences between the carrying amounts of assets and liabilities for financial reporting purposes and the amounts used for income tax purposes. Significant components of the Company’s deferred tax assets and liabilities are related to the following: Deferred tax assets: Accrued expenses Allowance for doubtful accounts Compensation and benefits Share based compensation Deferred revenue Other Total gross deferred tax assets Deferred tax liabilities: Intangible assets Depreciation Total gross deferred tax liabilities Net deferred tax asset 70 2010 2009 $ — 81 71 714 356 16 1,238 121 243 364 $ 3 74 53 527 47 11 715 259 280 539 $ 874 $176 In assessing the realizability of deferred tax assets, management considers whether it is more likely than not that some portion or all of the deferred tax assets will not be realized. Based on the expectation of future taxable income and that the deductible temporary differences will offset existing taxable temporary differences, management believes it is more likely than not that we will realize the benefits of those deductible differences, at December 31, 2010 and 2009. A reconciliation of income tax expense (benefit) and the amount computed by applying the statutory federal income rate (34%) to income before income taxes is as follows ($ in thousands): Taxes computed at federal statutory rate Increase (decrease) in taxes resulting from: Goodwill impairment Share based compensation Uncertain tax position Domestic production activities deduction Research and development credit State taxes, net of federal benefit Conversion of ISO’s to NQSO Other Actual tax (benefit) expense A reconciliation of our unrecognized tax benefits is as follows ($ in thousands): Balance at January 1, 2009 Additions for current year tax positions Balance at December 31, 2009 Reduction based on lapse in statute of limitations Balance at December 31, 2010 2010 $428 2009 $ 585 2008 $(2,734) — 74 (90) (98) — 34 — 62 $410 — 100 — (53) — 19 (287) (43) $ 321 1,963 343 90 (83) (1) (5) — 47 $ (380) $ 90 — 90 (90) — $ The full amount of the unrecognized tax benefits disclosed in 2009 were reduced in 2010 due to the lapse of the statute of limitations. We have adopted a policy to record interest and penalty expense related to income taxes as interest and other expense. The Company files a federal income tax return and state income tax returns in New Hampshire, Massachusetts and Texas. The Company is no longer subject to U.S. Federal tax examinations for the years before 2007 and state income tax exams for the years before 2006. Years open to examination for state returns vary based on the jurisdiction. The Company’s tax return for the year ending December 31, 2007 was audited by the Internal Revenue Service during 2009. The audit was completed in January 2010 and no adjustments were required. 10. Employee Benefit Plan The Company has a 401(k) plan that covers substantially all employees with at least six months of service. Under the plan, employees may elect to contribute a percentage of their annual salary subject to the Internal Revenue Code maximum limitations. The plan provides for employer matching and discretionary contributions, the amounts of which are to be determined annually by the Board of Directors. The Company made contributions to the plan of $81,000, $43,000, and $28,000 for the years ended December 31, 2010, 2009 and 2008, respectively. 71 11. Related Party Transaction In September 2010, it was determined that our cost method investee, CoreTrace, would need additional funding of $4 million. This funding would be provided in the form of a bridge loan in two payments of $2 million each. The Company agreed to participate in the additional funding proportionate to its investment interest and in October 2010 loaned CoreTrace approximately $300,000, with 6% interest and a maturity date of December 31, 2011. The second payment of the total funding will be made on April 4, 2011, will also bear interest at 6% and will also be due December 31, 2011. The note also allows for automatic or voluntary conversion into additional equity shares of CoreTrace. In the event of a “Qualified Financing” as defined in the agreement, the loan balance would be automatically converted into shares upon closing. The agreement also allows for voluntary conversion into equity shares in the event of a “Non-Qualified Financing” as defined in the agreement or if the loan remains outstanding on October 15, 2011. 12. Commitments and Contingencies Minimum rental commitments under non-cancelable operating leases at December 31, 2010, are as follows: Years Ending December 31 2011 2012 2013 2014 2015 Thereafter Total $ 364 346 349 349 355 1,200 $2,963 Operating lease expense amounted to approximately $363,000 in 2010, $357,000 in 2009, and $410,000 in 2008. In January 2010, GlobalSCAPE was named as one of a number of defendants by Uniloc USA, Inc. and Uniloc (Singapore) Private Limited in a complaint filed in the United States District Court for the Eastern District of Texas Tyler Division for patent infringement of a single U.S. patent. The complaint alleged that GlobalSCAPE infringed on a patent that utilizes a system for activating software products through a registration process. In September 2010, the complaint was dismissed with prejudice and the Company did not make any payment in conjunction with the dismissal. 72 13. Severance and Restructuring Charges In November 2008, the Company implemented a restructuring plan for its Andover, Massachusetts operations that resulted in the reduction of six positions as well as the closing of the office space. The Company has completed substantially all restructuring activities, except for the relocation of one employee, and recognized all anticipated restructuring charges as of December 31, 2009. The following table summarized activity related to the Company’s restructuring ($ in thousands): Balance at December 31, 2008 Restructuring charge Cash payments Balance at December 31, 2009 Restructuring charge Cash payments Balance at December 31, 2010 14. Quarterly Financial Information (unaudited) Net income (loss) before provision for income taxes Total revenues Total operating expenses Other income (expense) Net income (loss) Net income (loss) per share: Weighted average shares outstanding Total revenues Total operating expenses Other income (expense) Net income Net income per share: Net income before provision for income taxes Weighted average shares outstanding Basic Diluted Basic Diluted Basic Diluted Basic Diluted Employee Costs $ 79 14 (83) 10 — (10) $ — Facility Costs 56 15 (71) $ — — $ — Total 135 29 (154) $ 10 — (10) $ — Fiscal Year 2010 1st Quarter $ 4,413 $ 3,857 1 $ 557 $ 364 $ 2nd Quarter $ $ $ $ $ 4,465 4,281 4 188 133 3rd Quarter 4,769 $ 4,501 $ $ — 268 $ 233 $ 4th Quarter 4,918 $ 4,645 $ $ 4 277 $ 151 $ $ $ 0.02 0.02 $ $ 0.01 0.10 $ $ 0.01 0.01 $ $ 0.01 0.01 17,283 17,876 17,354 18,021 17,652 18,610 17,540 18,260 Fiscal Year 2009 1st Quarter $ 3,240 $ 3,482 11 $ (231) $ (244) $ 2nd Quarter 4,745 $ 3,789 $ (52) $ 904 $ 943 $ 3rd Quarter 4,296 $ 3,414 $ 3 $ 885 $ 576 $ 4th Quarter 4,170 $ 3,977 $ (30) $ 163 $ 125 $ $ $ (0.01) (0.01) $ $ 0.05 0.05 $ $ 0.03 0.03 $ $ 0.01 0.01 17,227 17,227 17,233 17,712 17,254 18,243 17,277 17,845 Item 9. Changes in and Disagreements with Accountants on Accounting and Financial Disclosure None. 73 Item 9A. Controls and Procedures Evaluation of Disclosure Controls and Procedures We maintain disclosure controls and procedures designed to ensure that information required to be disclosed in reports filed under the Securities Exchange Act of 1934, as amended, is recorded, processed summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our Chief Executive Officer and our Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure. No system of controls, no matter how well designed and operated, can provide absolute assurance that the objectives of the system of controls are met, and no evaluation of controls can provide absolute assurance that the system of controls has operated effectively in all cases. Our disclosure controls and procedures however are designed to provide reasonable assurance that the objectives of disclosure controls and procedures are met. As of the end of the period covered by this report, our Chief Executive Officer and Chief Financial Officer evaluated, with the participation of management, the effectiveness of our disclosure controls and procedures. Based on the evaluation, our Chief Executive Officer and Chief Financial Officer concluded that, as of the end of the period covered by this report, our disclosure controls and procedures were effective to provide reasonable assurance that the objectives of disclosure controls and procedures are met. Management’s Report on Internal Control Over Financial Reporting Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rules 13a-15(e). Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 2010 based on the framework in Internal Control — Integrated Framework issued by the Committee of Sponsoring Organization of the Treadway Commission (COSO). Based on that evaluation, our management concluded that our internal control over financial reporting was effective as of December 31, 2010. This annual report does not include an attestation report of our independent registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to audit by our independent registered public accounting firm pursuant to the Dodd-Frank Wall Street Reform and Consumer Protection Act signed into law on July 21, 2010 that permit us to provide only management’s report in this annual report. Changes in Internal Control Over Financial Reporting There were no changes in our internal control over financial reporting during the quarter ended December 31, 2010 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting. Item 9B. Other Information None. 74 PART III Item 10. Directors, Executive Officers and Corporate Governance The information required by this item is incorporated by reference to GlobalSCAPE’s Proxy Statement for its 2011 Annual Meeting of Stockholders to be filed with the SEC within 120 days after the end of the fiscal year ended December 31, 2010. GlobalSCAPE has adopted a Code of Ethics that applies to all its employees, including its President (its chief executive officer) and its CFO and COO. GlobalSCAPE will provide a copy of its Code of Ethics to any person without charge upon written request to: Mendy Marsh Chief Financial Officer GlobalSCAPE, Inc. 4500 Lockhill-Selma, Suite 150 San Antonio, Texas 78249 Item 11. Executive Compensation The information required by this item is incorporated by reference to GlobalSCAPE’s Proxy Statement for its 2011 Annual Meeting of Stockholders to be filed with the SEC within 120 days after the end of the fiscal year ended December 31, 2010. Item 12. Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters The information required by this item is incorporated by reference to GlobalSCAPE’s Proxy Statement for its 2011 Annual Meeting of Stockholders to be filed with the SEC within 120 days after the end of the fiscal year ended December 31, 2010. Item 13. Certain Relationships and Related Transactions, and Director Independence The information required by this item is incorporated by reference to GlobalSCAPE’s Proxy Statement for its 2011 Annual Meeting of Stockholders to be filed with the SEC within 120 days after the end of the fiscal year ended December 31, 2010. Item 14. Principal Accountant Fees and Services. The information required by this item is incorporated by reference to GlobalSCAPE’s Proxy Statement for its 2011 Annual Meeting of Stockholders to be filed with the SEC within 120 days after the end of the fiscal year ended December 31, 2010. 75 Exhibits, Financial Statement Schedules Item 15. (a) (1) Financial Statements and Schedules PART IV The following financial statements of GlobalSCAPE, Inc. are included in Item 8: • Balance sheets—December 31, 2010 and 2009 Statements of operations—Years ended December 31, 2010, 2009 and 2008 Statements of stockholders’ equity—Years ended December 31, 2010, 2009 and 2008 Statements of cash flows—Years ended December 31, 2010, 2009 and 2008 Notes to financial statements—December 31, 2010 and 2009 • • • • (2) Schedules not listed above have been omitted because they are not applicable or required, or the information required to be set forth therein is included in the Financial Statements or Notes thereto. (3) Exhibits Exhibit Number 3.1 3.2 4.1 *10.1 *10.2 *10.3 *10.4 *10.5 *10.6 *10.7 *10.8 *10.9 Description Amended Restated Certificate of Incorporation (Filed as Exhibit 3.1 to Form 8-K filed November 17, 2006). Amended and Restated Bylaws of the Company effective as of October 30, 2008 (Filed as Exhibit 3.2 to Form 8-K filed November 5, 2008). Specimen of Stock Certificate (Filed as Exhibit 4.1 to Form 10-K filed April 2, 2001). 1998 Stock Option Plan as amended May 13, 1999 (Filed as Exhibit 4.2 to Form 10-K filed May 12, 2000). 2000 Stock Option Plan dated May 8, 2000 (Filed as Exhibit 4.3 to Form 10-K filed May 12, 2000). Form of 1998 Stock Option Plan Rights Termination Letter Agreement of Directors to Agree Not to Claim Any Right of Adjustment dated February 4, 2000 (Filed as Exhibit 4.6 to Form 10 filed May 12, 2000). Form of 1998 Stock Option Plan Rights Termination Letter Agreement for Employees and Consultants to Cancel Options dated February 8, 2000 (Filed as Exhibit 4.7 to Form 10, filed May 12, 2000). Form of 1998 Stock Option Plan Rights Termination Letter of Officer to Agree Not to Claim Any Right of Adjustment dated February 8, 2000 (Filed as Exhibit 4.8 to Form 10 filed May 12, 2000). Form of 1998 Stock Option Plan Rights Termination Letter Agreement of Officer to Agree Not to Exercise Options dated February 8, 2000 (Filed as Exhibit 4.9 to Form 10 filed May 12, 2000). Form of 1998 Stock Option Plan Reinstatement and Adjustment Letter for Employees dated December 19, 2000 (Filed as Exhibit 10.17 to Annual Report on Form 10-K filed April 2, 2001). Form of Release and Indemnity Agreement between GlobalSCAPE, Inc. and Employees dated December 19, 2000 (Filed as Exhibit 10.18 to Form 10-K filed April 2, 2001). Form of Incentive Stock Option Agreement under GlobalSCAPE, Inc. 2000 Stock Option Plan (Filed as Exhibit 10.21 to Form 10-K filed April 1, 2002). 76 Exhibit Number 10.10 Description Securities Purchase Agreement dated November 13, 2006 by and among GlobalSCAPE, Inc., the Stockholders named in Schedule I thereto and the Purchasers named therein (Filed as Exhibit 10.1 to Form 8-K filed November 17, 2006). 10.11 Form of Common Stock Purchase Warrant (Filed as Exhibit 10.2 to Form 8-K filed November 17, 2006). *10.12 *10.13 *10.14 *10.15 *10.16 *10.17 *10.18 *10.19 Form of Non-Qualified Stock Option Agreement under the GlobalSCAPE, Inc. 2000 Stock Option Plan (Filed as Exhibit 10.2 to Form 10-Q filed November 13, 2006) GlobalSCAPE, Inc. 2006 Non-Employee Directors Long-Term Equity Incentive Plan (Filed as Exhibit 10.1 to Form 8-K filed June 5, 2007). Form of Non-Statutory Stock Option Agreement under GlobalSCAPE, Inc. 2006 Non-Employee Directors Long-Term Equity Incentive Plan (Filed as Exhibit 10.1 to Form 10-Q filed November 14, 2007). Form of Employment Agreement for Executive Officers at Vice President-level and above (Filed as Exhibit 10.1 to Form 8-K filed August 19, 2009). Amended and Restated Executive Employment Agreement by and between the Registrant and James R. Morris, effective as of October 1, 2009 (Filed as Exhibit 10.1 to Form 8-K filed October 2, 2009). Amended and Restated Executive Employment Agreement by and between the Registrant and Craig Robinson, effective as of October 1, 2009 (Filed as Exhibit 10.2 to Form 8-K filed October 2, 2009). 2010 Employee Long Term Equity Incentive Plan dated June 3, 2010 (Filed as Appendix A to the Definitive Proxy Statement filed April 22, 2010). Employment Agreement by and between the Registrant and Douglas Conyers (Filed as Exhibit 10.1 to Form 8-K filed March 24, 2011). 14.1 Code of Ethics (Filed as Exhibit 14.1 to Form 10-K filed March 27, 2008) 23.1 Consent of Grant Thornton LLP (Filed herewith). 31.1 Certification of Chief Executive Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002 (Filed herewith) 31.2 Certification of Chief Financial Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002 (Filed herewith) 32.1 Certification of Chief Executive and Chief Financial Officer pursuant to Section 906 of the Sarbanes-Oxley Act of 2002 (Filed herewith) * Management Compensatory Plan or Agreement 77 Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized, in San Antonio, Texas on March 29, 2011. Signatures GlobalSCAPE, Inc. By: /s/ JAMES R. MORRIS James R. Morris President and Chief Executive Officer Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant in the capacities indicated on March 29, 2011. Signature Title /S/ THOMAS W. BROWN Thomas W. Brown /S/ DAVID L. MANN David L. Mann /S/ PHILLIP M. RENFRO Phillip M. Renfro /S/ FRANK M. MORGAN Frank M. Morgan /S/ JAMES R. MORRIS James R. Morris /S/ MENDY MARSH Mendy Marsh Chairman of the Board and Director Director Director Director President, Chief Executive Officer, and Director (Principal Executive Officer) Vice President and Chief Financial Officer (Principal Accounting and Financial Officer) 78 CONSENT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM We have issued our report dated March 29, 2011, with respect to the financial statements included in the Annual Report of GlobalSCAPE, Inc. on Form 10-K for the year ended December 31, 2010. We hereby consent to the incorporation by reference of said report in the Registration Statements of GlobalSCAPE, Inc. on Forms S-8 (File No. 333-61180, effective May 17, 2001; File No. 333-61180, effective May 17, 2001; and File No 333-145771, effective August 29, 2007). EXHIBIT 23.1 /s/ Grant Thornton LLP Houston, Texas March 29, 2011 EXHIBIT 31.1 I, James R Morris, certify that: 1. I have reviewed this annual report on Form 10-K of GlobalSCAPE, Inc.; CERTIFICATIONS 2. Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report; 3. Based on my knowledge, the financial statements, and other financial information included in this annual report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report; 4. The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) for the registrant and have: a) designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under my supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to me by others within those entities, particularly during the period in which this report is being prepared; b) evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and c) disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal year that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and 5. The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of registrant’s board of directors (or persons performing the equivalent functions): a) all significant deficiencies and material weaknesses in the design or operation of internal controls over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and b) any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting. Date: March 29, 2011 /s/ JAMES R MORRIS James R Morris President and Chief Executive Officer EXHIBIT 31.2 I, Mendy Marsh, certify that: 1. I have reviewed this annual report on Form 10-K of GlobalSCAPE, Inc.; CERTIFICATIONS 2. Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report; 3. Based on my knowledge, the financial statements, and other financial information included in this annual report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report; 4. The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) for the registrant and have: a) designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under my supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to me by others within those entities, particularly during the period in which this report is being prepared; b) evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and c) disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal year that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and 5. The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of registrant’s board of directors (or persons performing the equivalent functions): a) all significant deficiencies and material weaknesses in the design or operation of internal controls over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and b) any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting. Date: March 29, 2011 /s/ MENDY MARSH Mendy Marsh Vice President and Chief Financial Officer CERTIFICATE PURSUANT TO 18 U.S.C. SECTION 1350, AS ADOPTED PURSUANT TO SECTION 906 OF THE SARBANES-OXLEY ACT OF 2002 Exhibit 32.1 In connection with the Annual Report of GlobalSCAPE, Inc. on Form 10-K for the period ending December 31, 2010 as filed with the Securities and Exchange Commission on the date hereof (the “Report”), the undersigned, James R Morris, Chief Executive Officer and Mendy Marsh, Chief Financial Officer, certify, pursuant to 18 U.S.C. Section 1350, as adopted pursuant to Section 906 of the Sarbanes-Oxley Act of 2002, that: (1) The Report fully complies with the requirements of section 13(a) or 15(d) of the Securities Exchange Act of 1934; and (2) The information contained in the Report fairly presents, in all material respects, the financial condition and results of operations of GlobalSCAPE, Inc. March 29, 2011 /s/ JAMES R MORRIS James R Morris President and Chief Executive Officer /s/ MENDY MARSH Mendy Marsh Vice President and Chief Financial Officer 

Continue reading text version or see original annual report in PDF format above