Webroot provides cybersecurity software and services.
With the acquisition, CARB is expanding its focus from increasingly commoditized storage and backup services into cybersecurity offerings.
Broomfield, Colorado-based Webroot was founded in 1997 to provide endpoint and networks security as well as security awareness education and threat intelligence services.
Management is headed by President & CEO Mike Potts, who has been with the firm since 2017 and was previously managing partner at Tenacity Partners and President and CEO at Lancope.
Below is an overview video of the Webroot WiFi Security VPN:
Webroot's primary offerings include:
- Internet Security Plus
- Internet Security Complete
- WiFi Security
- Endpoint Protection
- DNS Protection
- Security Awareness Training
Company partners or major customers include:
Investors have invested at least $108.9 million in the company and include Accel, Mayfield Fund, and TCV. Source: Crunchbase
Market & Competition
According to a market research report by Global Market Insights, the global endpoint security market was valued at $4.0 billion in 2016 and is projected to grow at a CAGR of 7% between 2017 and 2024.
The main drivers for this expected growth are the rising awareness and adoption of security measures due to increased cybersecurity threats.
Major competitive vendors that provide endpoint security solutions include:
- Cisco (CSCO)
- F-Secure (OTCPK:FSOYF) (DTV.MU)
- IBM (IBM)
- Kaspersky Lab
- Microsoft (MSFT)
- Carbon Black (CBLK)
- Palo Alto Networks (PANW)
Acquisition Terms and Rationale
Carbonite disclosed the acquisition price as $618.5 million in an all-cash transaction that it will fund from available cash on hand and funds from a new credit facility that has been 'fully committed.'
Management said the deal will be 'immediately accretive on an earnings and cash flow basis... based on Webroot's current operating plan and existing customer contract.'
With Webroot's FYE 2018 revenues of $215.0 million, it appears CARB paid price/sale multiple of approximately 2.88x, which appears to be a reasonably low price on a revenue multiple basis, considering many security companies have sold for multiples in the 5-7x range.
A review of the firm's most recent 10-Q filing indicates that as of September 30, 2018, it had $201 million in cash and equivalents and $301 million in total liabilities, of which $267.3 million were current liabilities and $28 million was deferred revenue.
Free cash flow during the nine months ended September 30, 2018, was $24.5 million.
CARB is acquiring Webroot to combine its existing data protection solutions with Webroot's machine learning-optimized endpoint security software to provide customers with a more comprehensive solution.
As Carbonite President and CEO Mohamad Ali stated in the deal announcement:
The acquisition of Webroot dramatically accelerates our progress towards becoming the leading data protection company. With threats like ransomware evolving daily, our customers and partners are increasingly seeking a more comprehensive solution that is both powerful and easy to use. Backup and recovery, combined with endpoint security and threat intelligence, is a differentiated solution that provides one, comprehensive data protection platform.
In the past 12 months, CARB's stock price has dropped 14% vs. the S&P 500 Index rise of 0.42%, as the chart below indicates:
CARB has a recent history of positive earnings surprises between 5% to 30% above analyst estimates:
Source: Seeking Alpha
Analyst ratings continue to remain either positive or neutral, and the consensus price target of $37.11 is approximately 36% above its current price as of press time.
Source: Seeking Alpha
However, research firm Rosenblatt downgraded CARB from Buy to Neutral after its most recent earnings report when the firm announced the acquisition of Webroot. The stock dropped markedly on the news.
Analyst sentiment in recent earnings calls has dropped noticeably, as the linguistic analysis graphic shows below:
With the acquisition, CARB is moving 'up the stack' and away from increasingly commodified SMB storage to now provide endpoint security offerings to its customer base.
Cross-selling opportunities will also exist to sell storage services to Webroot's customer base.
So, that's the story from this acquisition. Webroot's business is all subscription and provides a complementary installed base and security service offerings to Carbonite's base and storage offerings.
One question is whether this deal will make a material difference to Carbonite's core business, which appears to be softening or otherwise feeling the effects of increased commoditization.
We won't know until several quarters after the deal closes, which is expected by the end of Q1 2019.
I write about IPOs and technology M&A deals.
Members of IPO Edge get the latest IPO research, news, market trends, and industry analysis. Get started with a free trial.
Disclosure: I/we have no positions in any stocks mentioned, and no plans to initiate any positions within the next 72 hours. I wrote this article myself, and it expresses my own opinions. I am not receiving compensation for it (other than from Seeking Alpha). I have no business relationship with any company whose stock is mentioned in this article.