Back to GetFilings.com



Table of Contents

 
 
UNITED STATES SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
 
Form 10-K
     
þ
  ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
    For the Fiscal Year Ended December 31, 2004
 
or
 
o
  TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
    For the Transition Period from           to
Commission File Number: 001-31216
McAfee, Inc.
(Exact name of registrant as specified in its charter)
     
Delaware   77-0316593
(State or other jurisdiction
of incorporation or organization)
  (I.R.S. Employer
Identification Number)
 
3965 Freedom Circle
Santa Clara, California
(Address of principal executive offices)
  95054
(Zip Code)
Registrant’s telephone number, including area code:
(408) 988-3832
Securities registered pursuant to Section 12(b) of the Act:
None
Securities registered pursuant to Section 12(g) of the Act:
Common Stock, $0.01 Par Value,
together with associated Rights
      Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.     Yes þ          No o
      Indicate by check mark if disclosure of delinquent filers pursuant to Item 405 of Regulation S-K is not contained herein, and will not be contained, to the best of the registrant’s knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K.     o
      Indicate by check mark whether the registrant is an accelerated filer (as defined in Rule 12b-2 of the Act).     Yes þ          No o
      The aggregate market value of the voting stock held by non-affiliates of the issuer as of the last business day of the Registrant’s most recently completed second fiscal quarter (June 30, 2004) was approximately $2.8 billion. The number of shares outstanding of the issuer’s common stock as of February 28, 2005 was 163,500,000.
DOCUMENTS INCORPORATED BY REFERENCE
      Items 10, 11, 12, 13 and 14 of Part III are incorporated by reference from the Registrant’s Proxy Statement for the Annual Meeting of Stockholders to be held on May 25, 2005.
This document contains 126 pages.
 
 


MCAFEE INC.
FORM 10-K
For the fiscal year ended December 31, 2004
TABLE OF CONTENTS
             
        Page
         
 PART I        
   Business     2  
   Properties     25  
   Legal Proceedings     25  
   Submission of Matters to a Vote of Security Holders     25  
 
 PART II        
   Market for the Registrant’s Common Equity and Related Stockholder Matters     26  
   Selected Financial Data     28  
   Management’s Discussion and Analysis of Financial Condition and Results of Operations     29  
   Quantitative and Qualitative Disclosure about Market Risk     57  
   Financial Statements and Supplementary Data     58  
   Changes In and Disagreements with Accountants on Accounting and Financial Disclosure     59  
   Controls and Procedures     59  
   Other Information     63  
 
 PART III        
   Directors and Executive Officers of the Registrant     64  
   Executive Compensation     64  
   Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters     64  
   Certain Relationships and Related Transactions     64  
   Principal Accountant Fees and Services     64  
 
 PART IV        
   Exhibits and Financial Statement Schedules     65  
 Signatures     122  
 2005 Independent Director Cash Compensation Plan
 Subsidiaries
 Consent of Deloitte & Touche LLP
 Consent of PricewaterhouseCoopers LLP
 Certification of CEO and CFO Pursuant to Section 302
 Certification of CEO and CFO Pursuant to Section 906

1


Table of Contents

PART I
Item 1. Business
General
      This Annual Report on Form 10-K contains forward-looking statements that involve risks and uncertainties. The statements contained in the Report on Form  10-K that are not purely historical are forward-looking statements within the meaning of Section 27A of the Securities Act and Section 21E of the Exchange Act, including, without limitation, statements regarding our expectations, beliefs, intentions or strategies regarding the future. All forward-looking statements included in this Report on Form 10-K are based on information available to us on the date hereof. These statements involve known and unknown risks, uncertainties and other factors, which may cause our actual results to differ materially from those implied by the forward-looking statements. In some cases, you can identify forward-looking statements by terminology such as “may,” “will,” “should,” “could,” “expects,” “plans,” “anticipates,” “believes,” “estimates,” “predicts,” “potential,” “targets,” “goals,” “projects,” “continue,” or variations of such words, similar expressions, or the negative of these terms or other comparable terminology. Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee future results, levels of activity, performance or achievements. Therefore, actual results may differ materially and adversely from those expressed in any forward-looking statements. Neither we nor any other person can assume responsibility for the accuracy and completeness of forward-looking statements. Important factors that may cause actual results to differ from expectations include, but are not limited to, those discussed in “Risk Factors” beginning on page 10 in this document. We undertake no obligation to revise or update publicly any forward-looking statements for any reason.
      We were incorporated in 1992. In June 2004, we changed our name to McAfee, Inc. from Network Associates, Inc. We previously changed our name from McAfee Associates, Inc. to Network Associates, Inc. in conjunction with our December 1997 merger with Network General Corporation. In July 2004, we completed the sale of the Sniffer business assets acquired in the Network General merger. In 1999, our subsidiary McAfee.com sold to the public its Class A common stock as a part of its initial public offering. In September 2002, we repurchased the 25% minority interest in McAfee.com and merged McAfee.com with and into us.
      This report includes registered trademarks and trade names of McAfee and other corporations. Trademarks or trade names owned by McAfee and/or its affiliates include: “McAfee” and “Network Associates.”
      McAfee, Inc. is headquartered at 3965 Freedom Circle, Santa Clara, California, 95054, and the telephone number at that location is (408) 988-3832. The McAfee web site is www.mcafee.com.
OVERVIEW
      We are a leading supplier of computer security solutions designed to prevent intrusions on networks and protect computer systems from a large variety of threats and attacks. We offer two families of products, McAfee System Protection Solutions and McAfee Network Protection Solutions. Our computer security solutions are offered primarily to large enterprises, governments, small and medium-sized businesses and consumer users. We operate our business in five geographic regions: North America; Europe, Middle East and Africa, (collectively referred to as “EMEA”); Japan; Asia-Pacific (excluding Japan) and Latin America. See Note 19 to the consolidated financial statements for a description of revenues, operating income and assets by geographic region.
      Our McAfee Protection-in-Depth Strategy is designed to provide a complete set of system and network protection solutions differentiated by intrusion prevention technology that can detect and block known and

2


Table of Contents

unknown attacks. To more effectively market our products in our various geographic sales regions, as more fully described below, we have combined complementary products into separate product groups as follows:
  •  McAfee System Protection Solutions, which delivers anti-virus and security products and services designed to protect systems such as desktops and servers and
 
  •  McAfee Network Protection Solutions, which offers products designed to maximize the performance and security of networks and network intrusion prevention with McAfee IntruShield and McAfee Foundstone. We sold our Sniffer Technologies product line to Network General Corporation on July 16, 2004. Previously, this product line included products designed to capture data, monitor network traffic and collect and report on key network statistics, and comprised a significant portion of our revenue.
      The majority of our net revenue has historically been derived from our McAfee Security anti-virus products and our Sniffer Technologies network fault identification and application performance management products, which we sold in July 2004. We have also focused our efforts on building a full line of complementary network and system protection solutions. On the system protection side, we strengthened our anti-virus lineup by adding complementary products in the anti-spam and host intrusion prevention categories. On the network protection side, we have added products in the network intrusion prevention and detection category, and through our October 2004 Foundstone acquisition, vulnerability management products and services. We continuously seek to expand our product lines.
      In 2004, our net revenue was $910.5 million and net income was $225.1 million. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations.”
McAfee System Protection Solutions
      McAfee System Protection Solutions help large enterprises, small/medium businesses, consumers, government agencies and educational organizations assure the availability and security of their desktops, application servers and web service engines. The McAfee System Protection Solutions portfolio features a range of products including anti-virus, anti-spyware, managed services, application firewalls and McAfee Entercept for host-based intrusion prevention. Each is backed by the McAfee Anti-Virus Emergency Response Team, a leading threat research organization. A substantial majority of our net revenue has historically been derived from our McAfee Security anti-virus products.
      McAfee System Protection Solutions also includes McAfee Consumer Security, offering both traditional retail products and our on-line subscription services. Our consumer retail and on-line subscription applications allow users to protect their PCs from malicious code and other attacks, repair PCs from damage caused by viruses and spyware and block spam and other undesirable content. Our retail products are sold through retail outlets, including Best Buy, CompUSA, Costco, Dixons, Fry’s, Office Depot, Office Max, Staples, Wal-Mart and Yamada, to single users and small home offices in the form of traditional boxed product. These products include for-fee software updates and technical support services. Our on-line subscription services are delivered through the use of an Internet browser at our McAfee.com web site and through multiple on-line service providers, such as AOL and Comcast, and original equipment manufacturers, or OEMs, such as Apple, Dell, Gateway/eMachines and NEC.
      Our McAfee System Protection Solutions previously included our Magic Service Solutions product line, offering management and visibility of desktop and server systems. In January 2004, we sold our Magic Solutions product line to BMC Software.
McAfee Network Protection Solutions
      McAfee Network Protection Solutions helps enterprises, small businesses, government agencies, educational organizations and service providers maximize the availability, performance and security of their network infrastructure. The McAfee Network Protection Solutions portfolio features a range of products including IntruShield for network intrusion detection and prevention and Foundstone for intrusion detection and prevention and vulnerability management.

3


Table of Contents

      We acquired Foundstone on October 1, 2004. We intend to integrate Foundstone’s products with our intrusion prevention technologies and systems management capabilities to deliver enhanced risk management of prioritized assets, automated shielding and risk remediation, and automated policy enforcement and compliance.
Expert Services and Technical Support
      We have established Expert Services and Technical Support to provide professional assistance in the design, installation, configuration and implementation of our customers’ networks and acquired products. Expert Services is focused on two service markets: Consulting Services and Education Services.
      Consulting Services support product integrations and deployment with an array of standardized and custom offerings. Consulting Services also offer other services in both the security and networking areas, including early assessment and design work, as well as emergency outbreak and network troubleshooting assistance. Our consulting services organization is organized around our product groups. The majority of our consulting services are now delivered through the consulting resources acquired in the Foundstone acquisition.
      Education Services offer customers an extensive curriculum of web and classroom-based training focused on the deployment and operation of McAfee’s security products.
      The PrimeSupport program provides our customers on-line and telephone-based technical support in an effort to ensure that our products are installed and working properly. To meet customers’ varying needs, PrimeSupport offers a choice of the on-line ServicePortal or the telephone-based Connect, Priority and Enterprise. All PrimeSupport programs include software updates and upgrades. PrimeSupport is available to all customers worldwide from various regional support centers.
  •  PrimeSupport ServicePortal — Consists of a searchable, knowledge base of technical solutions and links to a variety of technical documents such as product FAQs and technical notes.
 
  •  PrimeSupport Connect — Provides toll-free telephone access to technical support during regular business hours and access to the on-line ServicePortal.
 
  •  PrimeSupport Priority — Provides priority, unlimited, toll-free (where available) telephone access to technical support 24 hours a day, 7 days a week and access to the on-line ServicePortal.
 
  •  PrimeSupport Enterprise — Offers proactive, personalized service and includes an assigned technical support engineer from our Enterprise support team, proactive support contact (telephone or email) with customer-defined frequency, election of five designated customer contacts and access to the on-line ServicePortal.
      In addition, we also offer our consumer users technical support services made available at our mcafee.com website on both a free and fee-based basis, depending on the support level selected.
Research and Development
      We are committed to malicious code and vulnerability research through our McAfee Anti-virus and Vulnerability Emergency Response Team (AVERT). AVERT conducts research in the areas of host intrusion prevention, network intrusion prevention, wireless intrusion prevention, malicious code defense, security policy and management, high-performance assurance and forensics and threats, attacks, vulnerabilities and architectures.
      In December 2004, we agreed to sell the assets of McAfee Labs, our research and development organization focused on exploiting government research, to SPARTA, Inc. The transaction is expected to close in the first half of 2005. McAfee will remain as the general contractor on certain of its government contracts until government approval is obtained for SPARTA as the general contractor.

4


Table of Contents

Strategic Alliances
      From time to time, we enter into strategic alliances with third parties to support our future growth plans. These relationships may include joint technology development and integration, research cooperation, co-marketing activities and sell-through arrangements. For example, we have an alliance with America Online under which, among other things, our on-line PC anti-virus services are offered to AOL members as part of their basic membership. We also provide our host-based email scanning services and personal firewall services as a value-added service to AOL. As part of our NTT DoCoMo alliance, we are jointly developing technology to provide built-in anti-virus protection against mobile threats to owners of 3G FOMA handsets. Other alliances involve Comcast, Dell, NEC, Telecom Italia, Telefonica and Wanadoo.
Product Licensing Model
      We typically license our products to corporate and government customers on a perpetual basis. Most of our licenses are sold with maintenance contracts, and typically these are sold on an annual basis. As the maintenance contracts near expiration, we contact customers to renew their contracts, as applicable. We typically sell perpetual licenses in connection with sales of our hardware-based products in which software is bundled with the hardware platform.
      For our largest customers (over 2,000 nodes) and government agencies, we also offer two-year term-based licenses. Our two-year term licensing model also creates the opportunity for recurring revenue through the renewal of existing licenses. By offering two-year licenses, as opposed to traditional perpetual licenses, we are also able to meet a lower initial cost threshold for customers with annual budgetary constraints. We also offer one-year licensing arrangements in Japan. The renewal process provides an opportunity to cross-sell new products and product lines to existing customers.
On-Line Subscriptions and Managed Applications
      For our on-line subscription services, customers essentially “rent” the use of our software. Because our on-line subscription services are “version-less,” or self-updating, customers subscribing to these services are assured of using the most recent version of the software application, eliminating the need to purchase product updates or upgrades. Our on-line subscription consumer products and services are found at our www.mcafee.com web site where consumers download our anti-virus application using their Internet browser which allows the application to detect and eliminate viruses on their PCs, repair their PCs from damage caused by viruses, optimize their hard drives and update their PCs’ virus protection system with current software updates and upgrades. Our www.mcafee.com web site also offers customers access to McAfee Personal Firewall Plus, McAfee SpamKiller and McAfee Privacy Service, as well as combinations of these services through bundles. Our on-line subscription services are also available to customers and small business through various relationships with internet service providers (“ISP’s”), such as AOL and Comcast. Our business model allows for ISP’s to make McAfee subscription services available as either a premium service or as a feature included in the ISP’s service. At December 31, 2004, we had approximately 8.5 million McAfee consumer on-line subscribers, which includes on-line customers obtained through our alliances with ISP’s and OEM’s.
      Similarly, our small and medium sized business on-line subscription products and services, or our Managed VirusScan offerings, provide these customers the most up-to-date anti-virus software. Our Managed VirusScan service provides anti-virus protection for both desktops and file servers. In addition, McAfee Managed Mail Protection screens emails to detect and quarantine viruses and infected attachments, and Spam and Desktop Firewall ASaP blocks unauthorized network access and stops known network threats. Our McAfee Managed Small Business service has approximately 2.2 million active subscriptions as of December 31, 2004.
      We also make our on-line subscription products and services available over the Internet in what we refer to as a managed environment. Unlike our on-line subscription service solutions, these managed service providers, or MSP, solutions are customized, monitored and updated by networking professionals for a specific customer.

5


Table of Contents

Sales and Marketing
      To augment and capitalize upon our marketing efforts, our sales and marketing activities are directed primarily at large corporate and government customers, small and medium-sized accounts, as well as resellers, distributors, system integrators, internet service providers and OEM’s worldwide through the channels listed below.
      United States Sales
      Our United States sales force is organized by type of customer product line supported. Some of our largest accounts are handled by a direct sales organization. Other medium to large customers are served primarily through reseller partners, and the sales organizations supporting these partners are also organized by product line. One set of sales representatives focuses on the McAfee anti-virus installed base. A second focuses on our newer intrusion prevention products and risk management. Small business customers are served exclusively through our reseller partners with a telesales organization responsible for lead generation and a channel support team responsible for partner training and contract management.
      International Sales
      We have sales and support operations in EMEA, Japan, North America, Asia-Pacific (excluding Japan) and Latin America. In 2004, 2003, and 2002 based on net revenue in our regions, revenues outside of North America accounted for approximately 39%, 35% and 37% of our net revenues, respectively. Within our international sales regions, sales forces are organized by country when and where local demand and sales force considerations make it advisable.
      Resellers and Distributors
      The majority of our products are sold through partners, including corporate resellers, retailers and, indirectly, through distributors in all of our geographic regions. In addition, our channel efforts include strategic alliances with complementary manufacturers and publishers to expand our reach and scale. We currently utilize corporate resellers, including ASAP Software, CDW, Dell, Insight, Softmart, Software House International and Software Spectrum, as well as network integrators who offer our solutions and sell site licenses of our software to corporate, small business and government customers.
      Independent software distributors who currently supply our products include GE Access, Ingram Micro, MOCA and Tech Data. Our relationship with Merisel America terminated during 2004. These distributors supply our products primarily to large retailers, value-added resellers, or VARs, mail order and telemarketing companies. Both through our authorized distributors and directly with certain retail resellers either through a consignment model or a non-consignment model, we sell our retail packaged products to several of the larger computer and software retailers, including Best Buy, CompUSA, Costco, Dixons, Fry’s, Office Depot, Office Max, Staples, Wal-Mart and Yamada. Members of our channel sales force work closely with our major reseller and distributor accounts to manage demand generating activities, training, order flow, and affiliate relationship management.
      Our top ten distributors typically account for between 49% and 63% of our net revenues in any quarter. Our agreements with our distributors are not exclusive and may be terminated by either party without cause. Terminated distributors may not continue to represent our products. If one of our significant distributors terminated its relationship with us, we could experience a significant interruption in the distribution of our products.
      We utilize a sell-through business model for distributors under which we recognize revenue on products sold through distributors at the time our distributors resell the products to their customers. Under this business model, our distributors are permitted to purchase software licenses at the same time they fill customer orders and to pay for hardware and retail products only when these products are resold to the distributors’ customers. In addition, prior to the resale of our products, our distributors are permitted unlimited, unconditional rights of

6


Table of Contents

return. After sale by the distributor to its customer, there is generally no right of return from the distributor to us with respect to such product, unless we approve the return from the final customer to the distributor.
Original Equipment Manufacturers
      OEMs license our products for resale to end users or inclusion with their products. For example, we are a security services provider for PC hardware manufacturers such as Apple, Dell, Gateway/eMachines and NEC. Depending on the arrangement, OEMs may sell our software bundled with the PC or related services, pre-install our software and allow us to complete the sale, or sublicense a single version of our products to end users who must register the product with us in order to receive updates.
Other Marketing Activities
      Channel marketing is the means by which we market, promote, train and incent our resellers and distributors to promote our products to their end-user customers. We offer our resellers and distributors technical and sales training classes, marketing and sales assistance kits. We also provide specific cooperative marketing programs for end-user seminars, catalogs, demand creation and sales events.
      One of the principal means of marketing our products and services is through the Internet. In addition to the www.mcafee.com website, each of our product groups has their own individual websites. A number of these websites are localized to serve the various geographic regions in which we operate. Not only does each of these websites contain various marketing materials and information about our products, but website visitors may download and purchase products or obtain free trials of our products or trial subscriptions for on-line subscription products and services. We also promote our products and services through advertising activities in trade publications, direct mail campaigns and strategic arrangements. In addition, we attend trade shows, sponsor conferences and publish a quarterly newsletter, which is mailed to existing and prospective customers.
      We also market our products through the use of rebate programs. Within most countries we typically offer two types of rebate programs, volume incentive rebates to channel partners and promotional rebates to end-users. The channel partner earns a volume incentive rebate primarily based upon its sale of our products to end-users. From time to time, we also make rebates available to individual users of various products purchased through multiple channels.
Customers
      We primarily market our products to large corporate and government customers through resellers and distributors, except for the very largest companies where we sell direct. A majority of our products are distributed indirectly through resellers and distributors. During 2004, Ingram Micro and TechData accounted for approximately 22% and 11% of our net revenue, respectively.
      We market our products to individual consumers directly through on-line distribution channels and indirectly through traditional distribution channels, such as retail stores and OEMs. McAfee Consumer is responsible for on-line distribution of our products sold to individual consumers over the Internet or for Internet-based products, including products distributed by our on-line partners, and for the licensing of technology to strategic distribution partners for sale to individual consumers, with certain exceptions.
Product Development, Investments, and Acquisitions
      We believe that our ability to maintain our competitiveness depends in large part upon our ability to successfully enhance existing products, develop and acquire new products and develop and integrate acquired products. The market for computer software includes low barriers to entry, rapid technological change, and is highly competitive with respect to timely product introductions. As part of our growth strategy, we have made and expect to continue to make investments in complementary businesses, products and technologies.
      In addition to developing new products, our internal development staff is focused on developing upgrades and updates to existing products and modifying and enhancing any acquired products. Future upgrades and updates may include additional functionality, respond to user problems or address compatibility problems with new or changing operating systems and environments.

7


Table of Contents

      For 2004, 2003 and 2002, we expensed $172.7 million, $184.6 million and $148.8 million, respectively, on research and development. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations.”
Manufacturing and Suppliers
      Our manufacturing operations consist primarily of assembly, testing and quality control of materials, components, subassemblies and systems for our IntruShield, E-ppliance and Foundstone products. We use a limited number of third-party manufacturers for these manufacturing operations. Reliance on third-party manufacturers, including software replicators, involves a number of risks, including the lack of control over the manufacturing process and the potential absence or unavailability of adequate capacity. The loss of one of our third-party manufacturers could disrupt our business. Hardware-based products entail other risks, such as the unavailability of critical components that are supplied by a limited number of parties and greater obsolescence risks.
Competition
      The markets for our products are intensely competitive and are subject to rapid changes in technology. We also expect competition to increase in the near-term. We believe that the principal competitive factors affecting the markets for our products include, but are not limited to:
  •  performance
 
  •  quality
 
  •  breadth of product group
 
  •  integration of products
 
  •  brand name recognition
 
  •  price
 
  •  functionality
 
  •  innovation
 
  •  customer support
 
  •  frequency of upgrades and updates
 
  •  manageability of products
 
  •  reputation
      We believe that we compete favorably against our competitors in each of these areas. However, some of our competitors have longer operating histories, greater brand recognition, stronger relationships with channel partners, larger technical staffs, established relationships with hardware vendors and/or greater financial, technical and marketing resources. These factors may provide our competitors with an advantage in penetrating markets with their network security and management products.
      Anti-Virus. Our principal competitors in the anti-virus market are Symantec and Computer Associates. Trend Micro remains the strongest competitor in the Asian anti-virus market. Dr. Ahn’s, F-Secure, Hauri, Panda, and Sophos are also showing growth in their respective markets. Microsoft continues to execute on its announced plans to enter all segments of the anti-virus market and in furtherance of these plans has recently acquired anti-virus providers GeCAD Software and Sybari Software and anti-spyware provider Giant Company Software.
      Network Security and Intrusion Detection and Protection. Our principal competitors in the security market vary by product type. For intrusion detection and prevention products, we compete with Cisco Systems, Fortinet, Internet Security Systems, Juniper Networks, Symantec and 3Com.

8


Table of Contents

      Other Competitors. In addition to competition from large technology companies such as EMC, HP, IBM, Intel, Microsoft, and Novell that may offer network and system protection products as enhancements to their operating systems, we also face competition from smaller companies and shareware authors that may develop competing products.
Proprietary Technology
      Our success depends significantly upon proprietary software technology. We rely on a combination of patents, trademarks, trade secrets and copyrights to establish and protect proprietary rights to our software. However, these protections may be inadequate or competitors may independently develop technologies or products that are substantially equivalent or superior to our products. Often, we do not obtain signed license agreements from customers who license products from us. In these cases, we include an electronic version of an end-user license in all of our electronically distributed software and a printed license in the box for our products. Since none of these licenses are signed by the licensee, many legal authorities believe that such licenses may not be enforceable under the laws of many states and foreign jurisdictions. In addition, the laws of some foreign countries either do not protect these rights at all or offer only limited protection for these rights. The steps taken by us to protect our proprietary software technology may be inadequate to deter misuse or theft of this technology. For example, we are aware that a substantial number of users of our anti-virus products have not paid any license or support fees to us.
Employees
      As of December 31, 2004, we employed approximately 2,950 individuals worldwide. With limited exceptions, none of our employees are represented by a labor union. We consider the relationships with our employees to be positive. Competition for qualified management and technical personnel is intense in the software industry. Our continued success depends in part upon our ability to attract and retain qualified personnel. To date, we believe that we have been successful in recruiting qualified employees, but there is no assurance that we will continue to be successful in the future.

9


Table of Contents

RISK FACTORS
      Investing in our common stock involves a high degree of risk. The risks described below are not the only ones facing our company. Additional risks not presently known to us or that we deem immaterial may also impair our business operations. Any of the following risks could materially adversely affect our business, operating results and financial condition and could result in a complete loss of your investment.
Our Financial Results Will Likely Fluctuate.
      Our revenues and operating results have varied significantly in the past. We expect fluctuations in our operating results to continue. As a result, we may not sustain profitability. Also, we believe that period-to-period comparisons of our financial results should not be relied upon as an indicator of our future results. Our historical operating results include revenues and expenses related to our Magic and our Sniffer product lines for periods prior to their disposition in January 2004 and July 2004, respectively. For 2004, Magic and Sniffer accounted for $2.9 million and $90.9 million, or less than 1% and approximately 10%, respectively, of our total revenues. Our expenses are based in part on our expectations regarding future revenues and our post-Sniffer support obligations, making expenses in the short term relatively fixed. We may be unable to adjust our expenses in time to compensate for any unexpected revenue shortfall.
Operational Factors
      Operational factors that may cause our revenues, gross margins and operating results to fluctuate significantly from period to period, include, but are not limited to:
  •  introduction of new products, product upgrades or updates by us or our competitors;
 
  •  volume, size, timing and contractual terms of new licenses and renewals of existing licenses;
 
  •  our “perpetual plus” licensing program, in the near term;
 
  •  the mix of products we sell and services we offer and whether (i) our products are sold directly by us or indirectly through distributors, resellers, ISP’s such as AOL, and others, (ii) the product is hardware or software based and (iii) in the case of software licenses, the licenses are perpetual licenses or time-based subscription licenses;
 
  •  system, supply of manufactured products and personnel limitations may adversely impact our ability to process the large number of orders that typically occur near the end of a fiscal quarter;
 
  •  costs or charges related to our acquisitions or dispositions, including our acquisitions of Foundstone in 2004 and of Entercept Security Technologies and IntruVert Networks in 2003, the dispositions of our Magic and Sniffer product lines and the announced disposition of our McAfee Labs assets;
 
  •  the components of our revenue that are deferred, including our on-line subscriptions and that portion of our software licenses attributable to support and maintenance;
 
  •  stock-based compensation charges;
 
  •  costs and charges related to certain events, including our ongoing cost reduction and profitability plan, Sarbanes-Oxley compliance efforts, litigation, reductions in force, relocation of personnel and previous financial restatements; and
 
  •  factors that lead to substantial drops in estimated values of long-lived assets below their carrying value.
Seasonal and Macroeconomic Factors
      Our net revenue is typically lower in the first quarter when many businesses experience lower sales, flat in the summer months, due in part to the European holiday season, and higher in the fourth quarter as customers typically complete annual budgetary cycles.

10


Table of Contents

It Is Difficult for Us to Accurately Estimate Operating Results Prior to the End of a Quarter.
      Although a significant portion of our revenue in any quarter comes from previously deferred revenue, a meaningful part of our revenue in any quarter depends on contracts entered into or orders booked and shipped to end-user customers in that quarter. Historically, we have experienced a trend toward more product orders, and therefore, a higher percentage of revenue shipments, in the last month of a quarter. Some customers believe they can enhance their bargaining power by waiting until the end of a quarter to place their order. Because we expect this trend to continue, any failure or delay in the closing of new orders in a given quarter could have a material adverse effect on our quarterly operating results. Furthermore, because of this trend, it is difficult for us to accurately estimate operating results prior to the end of a quarter.
Our Business Transformation, Dispositions and Cost Reduction Plan, Expose Us to Significant Risks.
      In 2003, we continued our business transformation with the IntruVert and Entercept acquisitions, followed by the sale of our Magic Solutions and Sniffer Technologies product lines in January and July 2004, respectively, the Foundstone acquisition in October 2004, the announced sale of our McAfee Labs assets in January 2005 and the changing of our name back to McAfee. Early in 2004, we also began our ongoing cost reduction and profitability plan with an objective of significantly improving our operating margins by mid-2005. In January 2005 we completed the move of our European finance and sales order operations organization from the Netherlands to Ireland. These activities are intended to, among other things, streamline our business, better leverage the McAfee brand, better position us as the leading provider of intrusion prevention solutions, and help accelerate profit and growth. Risks related to these activities include:
  •  our growth and/or profitability may not increase in the near-term or at all and we may fail to achieve desired savings or performance targets on a timely basis or at all;
 
  •  an increased dependence on our channel and other partners to sell our products, particularly to enterprise and small to medium sized business (SMB) customers, following the transfer of a significant portion of our direct sales force in the Sniffer transaction;
 
  •  our strategic positioning may result in our competing more directly with larger, more established competitors, such as Cisco Systems and Microsoft;
 
  •  our business, including internal finance and IT operations, has been and may continue to be disrupted and strained due to, among other things, our cost saving measures, our Sniffer post-closing support obligations (including our obligation to produce stand-alone audited historical Sniffer financial statements) and personnel losses;
 
  •  we have centralized our order processing operations from Latin America to Plano, Texas and we have also moved the EMEA shared services center and our localization operations from Amsterdam to Cork, Ireland. We have also transitioned a significant portion of our research and development personnel to our research facility in Bangalore, India. These events could result in the loss of personnel unwilling to relocate, reduced service levels due to time zone differences, difficulties in finding personnel with sufficient language capabilities and loss of direct, on-the-ground finance and accounting oversight in the sales regions being serviced on a remote basis;
 
  •  we may experience an undesired loss of sales, research and development, finance and other personnel and it may be difficult for us to find suitable replacements;
 
  •  we have installed a new customer relationship management system, providing our finance and sales teams information in a different format than previously available and, in some cases, with less information. During the transition period to our new system, we may experience, among other things, related reduced operational efficiencies, losses of information and a decreased ability to monitor or forecast our business;
 
  •  we may be unable to successfully expand our McAfee brand significantly beyond our anti-virus products;

11


Table of Contents

  •  many of our products and service capabilities were recently acquired and the income potential for these products and services is unproven and the market for these products is volatile;
 
  •  there may be customer confusion around our strategy.
We Are Subject to Intense Competition in the System and Network Protection Markets, and We Expect to Face Increased Competition in the Future.
      The markets for our products are intensely competitive and we expect both product and pricing competition to increase. Some of our competitors have longer operating histories, greater name recognition, larger technical staffs, established relationships with hardware vendors and/or greater financial, technical and marketing resources. We face competition in specific product markets. Principal competitors include:
  •  in the anti-virus product market, Symantec and Computer Associates. Trend Micro remains the strongest competitor in the Asian anti-virus market. F-Secure, Dr. Ahn’s, Panda and Sophos are also showing growth in their respective markets. Microsoft has continued to make acquisitions and has announced its intention to enter all segments of the anti-virus market at the end of 2005; and
 
  •  in the market for our other intrusion detection and protection products, Cisco Systems, Computer Associates, Internet Security Systems, Juniper Networks, Symantec and 3Com Corporation.
      Other competitors for our various products could include large technology companies. We also face competition from numerous smaller companies and shareware authors that may develop competing products.
      Increasingly, our competitors are large vendors of hardware or operating system software. These competitors are continuously developing or incorporating system and network protection functionality into their products. For example, Juniper Networks acquired Netscreen and, through its acquisitions of Okena, Riverhead and NetSolv, Cisco Systems may incorporate functionality that competes with our content filtering and anti-virus products. Similarly, Microsoft continues to execute on its announced plans to boost the security of its Windows platform with related acquisitions including its acquisition of anti-virus providers GeCAD Software and Sybari Software and anti-spyware provider Giant Company Software. The widespread inclusion of products that perform the same or similar functions as our products within computer hardware or other companies’ software products could reduce the perceived need for our products or render our products obsolete and unmarketable. Furthermore, even if these incorporated products are inferior or more limited than our products, customers may elect to accept the incorporated products rather than purchase our products. In addition, the software industry is currently undergoing consolidation as firms seek to offer more extensive suites and broader arrays of software products, as well as integrated software and hardware solutions. This consolidation may negatively impact our competitive position.
We Face Risks in Connection With The Material Weaknesses Resulting From Our Sarbanes-Oxley Section 404 Management Report and Any Related Remedial Measures That We Undertake.
      In the first quarter of 2004, we restated previously reported quarters of 2003; and in the second quarter of 2004, we restated the previously reported first quarter of 2004. These matters were identified by us and reported to our auditors. In conjunction with these restatements, our former auditors and our current auditors, respectively, reported that the underlying control issues giving rise to the respective restatement should be considered a material weakness under standards established by the Public Company Accounting Oversight Board. In response to these restatements, we implemented additional controls over financial reporting.
      In conjunction with (i) our ongoing reporting obligations as a public company and (ii) the requirements of Section 404 of the Sarbanes-Oxley Act that management report as of December 31, 2004 on the effectiveness of our internal control over financial reporting and identify any material weaknesses in our internal control over financial reporting, we engaged in a process to document, evaluate and test our internal controls and procedures, including corrections to existing controls and additional controls and procedures that we may implement. As a result of this evaluation and testing process, our management identified material weaknesses in our internal control over financial reporting relating to accounting for income taxes, revenue accounting, and the financial close and reporting process. See Item 9A in this Annual Report on Form 10-K

12


Table of Contents

for additional disclosure about these material weaknesses. In response to these material weaknesses in our internal control over financial reporting, we have implemented, and may be required to further implement, additional controls and procedures. In addition, in response to these material weaknesses, we may have to hire additional personnel, possibly requiring significant time and expense. As a result of the material weaknesses identified in this Annual Report on Form 10-K, even though our management believes that our efforts to remediate and re-test certain internal control deficiencies have resulted in the improved operation of our internal control over financial reporting, we cannot be certain that the measures we have taken or that are planning to take will sufficiently and satisfactorily remediate the identified material weaknesses in full. Furthermore, we intend to continue improving our internal control over financial reporting, and the implementation and testing of these continued improvements could result in increased cost and could divert management attention away from operating our business.
      In future periods, if the process required by Section 404 of the Sarbanes-Oxley Act reveals further material weaknesses or significant deficiencies, the correction of any such material weakness or significant deficiency could require additional remedial measures which could be costly and time-consuming. In addition, the discovery of further material weaknesses could also require the restatement of prior period operating results. If a material weakness exists as of a future period year-end (including a material weakness identified prior to year-end for which there is an insufficient period of time to evaluate and confirm the effectiveness of the corrections or related new procedures), our management will be unable to report favorably as of such future period year-end to the effectiveness of our control over financial reporting. If we are unable to assert that our internal control over financial reporting is effective in any future period (or if our independent auditors are unable to express an opinion on the effectiveness of our internal controls), or if we continue to experience material weaknesses in our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, which would have an adverse effect on our stock price and potentially subject us to litigation.
We Face Risks Related to the Pending Formal Securities and Exchange Commission and Department of Justice Investigations and Our Accounting Restatements.
      In the first quarter of 2002, the SEC commenced a “Formal Order of Private Investigation” into our accounting practices. In the first quarter of 2003, we became aware that the DOJ had commenced an investigation into our consolidated financial statements. In April and May 2002, we announced our intention to file, and in June 2002 we filed with the SEC, restated consolidated financial statements for 2000, 1999 and 1998 to correct certain discovered inaccuracies for these periods.
      As a result of information obtained in connection with the ongoing SEC and DOJ investigations, we concluded in March 2003, that we would restate our consolidated financial statements to, among other things, reflect revenue on sales to our distributors for 1998 through 2000 on a sell-through basis (which is how we reported sales to distributors since the beginning of 2001).
      The filing of our restated consolidated financial statements in October 2003 did not resolve the pending SEC inquiry or DOJ investigation into our accounting practices. We are engaged in ongoing discussions with, and continue to provide information regarding our consolidated financial statements for calendar year 2000 and prior periods. The resolution of the SEC inquiry and DOJ investigation into our prior accounting practices could involve the imposition of fines or penalties or other remedies.
Critical Personnel May Be Difficult to Attract, Assimilate and Retain.
      Our success depends in large part on our ability to attract and retain senior management personnel, as well as technically qualified and highly-skilled sales, consulting, technical and marketing personnel. Personnel related issues include:
Competition for Personnel; Need for Competitive Pay Packages
      Competition for qualified individuals in our industry is intense. To attract and retain critical personnel, we believe that we must maintain an open and collaborative work environment. We also believe we need to

13


Table of Contents

provide a competitive compensation package, including stock options. Increases in shares available for issuance under our stock option plans require stockholder approval. Institutional stockholders, or our other stockholders generally, may not approve future requests for option pool increases. For example, at our 2003 annual meeting held in December 2003, our stockholders did not approve a proposed increase in shares available for grant under our employee stock option plans. Additionally, beginning in July 2005, accounting standards will require corporations to include a compensation expense in their statement of income relating to the issuance of employee stock options. As a result, we may decide to issue fewer stock options, possibly impairing our ability to attract and retain necessary personnel. Conversely, issuing a comparable number of stock options could adversely impact our results of operations when compared with periods prior to the effectiveness of these new rules.
Impact of Personnel Reductions
      In recent periods, we have sought to rationalize the size of our employee base (including through the Sniffer sale). On December 31, 2004, we had approximately 2,950 employees, down from approximately 3,800 and 3,700 at the end of 2002 and 2003, respectively. Reductions in personnel, including as a result of the Sniffer sale, may harm our business, employee retention or our ability to attract new personnel by, among other things, reducing overall employee morale, requiring remaining personnel to perform a greater amount of, or new and different, responsibilities or result in the loss of personnel otherwise critical to our business.
Reduced Productivity of New Hires; Senior Management Additions
      Notwithstanding our ongoing efforts to reduce our general personnel levels, we continue to hire in key areas and have added a number of new employees in connection with our IntruVert, Entercept and Foundstone acquisitions and increased hiring activities in India. We increased our hirings in Bangalore, India in connection with the relocation of a significant portion of our research and development operations to India.
      Several members of our senior management were only added in the last year, and we may add new members to senior management. In January 2005, we hired Eric Brown as our new executive vice president and chief financial officer, and in 2004, we promoted Jake Pyles to the position of vice president of finance. In June 2004, we promoted Christopher Bolin to the position of executive vice president and chief technology officer.
      For new employees or management additions, there also may be reduced levels of productivity as recent additions or hires are trained or otherwise assimilate and adapt to our organization and culture.
Senior Management and Critical Personnel Losses
      Other than executive management who have “at will” employment agreements, our employees are not typically subject to an employment agreement or non-competition agreement. In December 2004, Stephen Richards, our previous chief operating officer and chief financial officer, retired and in November 2004 our controller resigned to pursue other opportunities. In addition, in recent months we have experienced significant turnover in our finance organization worldwide and replacing these personnel remains difficult given the competitive market for these skill sets.
      It could be difficult, time consuming and expensive to replace any key management member or other critical personnel. Integrating new management and other key personnel also may be difficult and costly. Changes in management or other critical personnel may be disruptive to our business and might also result in our loss of unique skills and the departure of existing employees and/or customers. It may take significant time to locate, retain and integrate qualified management personnel.
We Face Risks Associated with Past and Future Acquisitions.
      We may buy or make investments in complementary companies, products and technologies. For example, in October 2004, we acquired Foundstone to bolster our risk assessment and vulnerability management capabilities. We have not previously acquired a company such as Foundstone, which offers high-end security

14


Table of Contents

consulting services as part of their business model. We may not realize the anticipated benefits from the Foundstone acquisition. In addition to the risks described below, acquisitions of professional services organizations present unique employee retention and integration challenges as well as customer retention challenges.
Integration
      Integration of an acquired company or technology is a complex, time consuming and expensive process. The successful integration of an acquisition requires, among other things, that we:
  •  integrate and retain key management, sales, research and development, and other personnel;
 
  •  integrate the acquired products into our product offerings both from an engineering and sales and marketing perspective;
 
  •  integrate and support preexisting supplier, distribution and customer relationships;
 
  •  coordinate research and development efforts; and
 
  •  consolidate duplicate facilities and functions and integrate back office accounting, order processing and support functions.
      The geographic distance between the companies, the complexity of the technologies and operations being integrated and the disparate corporate cultures being combined may increase the difficulties of integrating an acquired company or technology. Management’s focus on the integration of operations may distract attention from our day-to-day business and may disrupt key research and development, marketing or sales efforts. In addition, it is common in the technology industry for aggressive competitors to attract customers and recruit key employees away from companies during the integration phase of an acquisition.
Internal Controls, Policies and Procedures
      Acquired companies or businesses are likely to have different standards, controls, contracts, procedures and policies, making it more difficult to implement and harmonize company-wide financial, accounting, billing, information and other systems.
Open Source Software
      Products or technologies acquired by us may include so-called “open source” software. Open source software is typically licensed for use at no initial charge, but imposes on the user of the open source software certain requirements to license to others both the open source software as well as the software that relates to, or interacts with, the open source software. Our ability to commercialize products or technologies incorporating open source software or otherwise fully realize the anticipated benefits of any such acquisition may be restricted because, among other reasons:
  •  open source license terms may be ambiguous and may result in unanticipated obligations regarding our products;
 
  •  competitors will have improved access to information that may help them develop competitive products;
 
  •  open source software cannot be protected under trade secret law;
 
  •  it may be difficult for us to accurately determine the developers of the open source code and whether the acquired software infringes third party intellectual property rights; and
 
  •  open source software potentially increases customer support costs because licensees can modify the software and potentially introduce errors.

15


Table of Contents

Use of Cash and Securities
      Our available cash and securities may be used to acquire or invest in companies or products, possibly resulting in significant acquisition-related charges to earnings and dilution to our stockholders. For example, in October 2004 we used approximately $84.7 million, net of cash assumed, to acquire Foundstone. Moreover, if we acquire a company, we may have to incur or assume that company’s liabilities, including liabilities that may not be fully known at the time of acquisition.
We Face Risks Related to Our International Operations.
      During 2004 net revenue in our operating regions outside of North America represented approximately 39% of our net revenue. We intend to focus on international growth and expect international revenue to remain a significant percentage of our net revenue.
      Related risks include:
  •  longer payment cycles and greater difficulty in collecting accounts receivable;
 
  •  increased costs and management difficulties related to the building of our international sales and support organization;
 
  •  the acceptance of our business strategy and the reorganization of our international sales forces by regions;
 
  •  the ability to successfully localize software products for a significant number of international markets;
 
  •  our ability to effectively provide service and support for our hardware based products from the U.S.;
 
  •  our ability to successfully establish, manage and staff shared service centers for worldwide sales and finance and accounting operations centralized from locations in the U.S. and Europe;
 
  •  our ability to adapt to sales practices and customer requirements in different cultures;
 
  •  compliance with more stringent consumer protection and privacy laws;
 
  •  currency fluctuations, including recent weakness of the U.S. dollar relative to other currencies, or the strengthening of the U.S. dollar in future periods that may have an adverse impact on revenues, and risks related to hedging strategies;
 
  •  political instability in both established and emerging markets;
 
  •  tariffs, trade barriers and export restrictions;
 
  •  a high incidence of software piracy in some countries; and
 
  •  international labor laws and our relationship with our employees and regional work councils.
      Additionally, our sales forces are organized by geographic region. This structure may lead to sales force competition for sales to multinational customers and may reduce our ability to effectively market our products to multinational customers.
We May Incur Significant Stock-Based Compensation Charges Related to Repriced Options, Assumed McAfee.com Options, IntruVert Restricted Stock and Options, Foundstone Options and Compensation Expenses Related to the Sniffer Bonus Plan and Foundstone Retention Payments.
      We may incur stock-based compensation charges related to (i) employee options repriced in April 1999 (“Repriced Options”), (ii) McAfee.com options we assumed in the acquisition of the publicly traded McAfee.com shares in September 2002 (“McAfee.com Options”) (iii) unvested IntruVert options that were cancelled in May 2003 related to this acquisition (the “IntruVert Options”) and exchanged for cash placed in escrow, (iv) unvested IntruVert restricted stock that was cancelled in May 2003 related to this acquisition (the “IntruVert Restricted Stock”), and exchanged for monthly cash payments as the former employees provide services to us, (v) unvested Foundstone options assumed by us as part of the acquisition, (vi) the

16


Table of Contents

Sniffer Bonus Plan and (vii) Foundstone key employee retention payments. The size of the charges related to the Repriced Options and McAfee.com Options could be significant depending on the movements in the market value of our common stock. As a result of Financial Accounting Standards Board Interpretation No. 44, effective July 1, 2000, Repriced Options and McAfee.com Options are subject to variable accounting treatment. The stock-based compensation charge (or credit) for the Repriced Options is determined by the excess of our closing stock price at the end of a reporting period over the fair value of our common stock on July 1, 2000, equivalent to $20.375. The stock-based compensation charge (or credit) for the McAfee Options is determined by the excess of our closing stock price over the exercise price of the option minus $11.85 payable upon exercise of the option. Remeasurement of the charge continues until the earlier of the date of exercise, forfeiture or cancellation without replacement. The resulting compensation charge (or credit) to earnings will be recorded over the remaining life of the options subject to variable accounting treatment.
      For 2004 and 2003, stock-based compensation charges of approximately $6.7 million and $3.4 million, respectively, were recorded for McAfee.com Options, and a stock-based compensation charge of approximately $3.3 million was recorded in 2004 for the Repriced Options.
      During the remaining life of both the McAfee.com Options and Repriced Options, we may record additional stock-based compensation charges or credits. Such charges or credits cannot be forecasted. We estimate that a $1 increase in our stock price at December 31, 2004 would increase our future stock compensation charge by approximately $0.7 million.
      For the cash paid to cancel the IntruVert Options that was placed in escrow, we have been recognizing compensation expense as the former IntruVert employees provide services to us. For 2005, we expect to recognize $1.2 million in expense related to these payments, and an additional $0.8 million through 2007. For the IntruVert Restricted Stock, we have been recognizing compensation expense monthly since the acquisition and will continue to do so through 2006 as the former IntruVert employees provide services to us. For 2005, we expect the expense to be approximately $0.4 million with respect to the IntruVert Restricted Stock.
      In connection with the Foundstone acquisition, we exchanged McAfee stock options for Foundstone stock options. Approximately $1.4 million in compensation expense may be recorded through 2008 related to unvested McAfee options which were exchanged for unvested Foundstone options. We expect to record approximately $0.6 million in compensation expense in 2005.
      In connection with the Sniffer disposition, we implemented the Sniffer Bonus Plan primarily to encourage Sniffer’s management to assist us in the sales process and remain with the business through the sale. Subject to reduction in certain cases, we expect total related cash payments of approximately $7.7 million, of which approximately $5.3 million was paid in 2004 and the balance is payable in the first quarter of 2006.
      Approximately $25.0 million of the amount paid to acquire Foundstone was placed into escrow accounts. Of this amount, approximately $5.6 million was placed into a key employee escrow account and is being paid to four Foundstone employees as they provide services to us through September 2007. The Foundstone employees forfeit any unvested amounts if their employment is terminated under provisions in the escrow agreements. Any forfeited amounts will be returned to us. We recognized compensation expense of approximately $0.3 million in 2004, and expect to record approximately $2.9 million of expense in 2005.
We Depend on Revenue from Our Flagship Anti-Virus Products.
      Our McAfee anti-virus software products account for a substantial majority of our net revenues. Because of this revenue concentration, our business could be harmed by a decline in demand for, or in the prices of, our McAfee anti-virus so