---
ticker: GTLB
company: GTLB
filing_type: 10-K
year_current: 2024
year_prior: 2023
risks_added: 1
risks_removed: 2
risks_modified: 10
risks_unchanged: 52
source: SEC EDGAR
url: https://riskdiff.com/gtlb/2024-vs-2023/
markdown_url: https://riskdiff.com/gtlb/2024-vs-2023/index.md
generated: 2026-05-10
---

# GTLB: 10-K Risk Factor Changes 2024 vs 2023

> Source: U.S. Securities and Exchange Commission (EDGAR)  
> Generated: 2026-05-10  
> All data extracted directly from official filings. No hallucinated content.

> **[AI-Generated Summary]** The paragraph below was produced by a language
> model and may contain errors. All other content on this page is deterministically
> extracted from the original SEC filing.

> GTLB's risk profile shifted to address emerging technology concerns, with the removal of growth management and acquisition integration risks offset by a new disclosure regarding AI and machine learning implementation risks. The company maintained 52 unchanged risk factors while substantively modifying 10 others, including material weaknesses in internal controls and customer conversion challenges. This net change of one additional risk factor suggests GTLB is recalibrating its risk disclosures toward operational and technology governance issues rather than growth-related execution risks.

---

## Summary

| Status | Count |
|--------|-------|
| New risks added | 1 |
| Risks removed | 2 |
| Risks modified | 10 |
| Unchanged | 52 |

---

## New in Current Filing: The implementation of AI and machine learning technologies in our services may result in reputational harm, liability, increased expenditures, or other adverse consequences to our business operations.

We are implementing AI features, including generative AI features, throughout our services. The technologies underpinning these features are in the early stages of commercial use and exist in a nascent regulatory environment which presents regulatory, litigation, ethical, reputational, and financial risks. Many states, regions, and supranational bodies, including the European Union, have proposed new regulations related to the use of AI and machine learning technologies. The final form of these may impose onerous obligations related to our, and our vendors', development, offering, and use of AI technologies and expose us to an increased risk of regulatory enforcement and litigation. Additionally, issues relating to intellectual property rights in AI-generated content have not been fully addressed by the courts, laws, or regulations. Accordingly, the implementation of generative AI technologies into our services may result in exposure to claims related to copyright infringement or other intellectual property misappropriation. Furthermore, many of our generative AI features involve the processing of personal data and may be subject to laws, policies, legal obligations, and codes of conduct related to privacy and data protection. While there is current uncertainty about the extent to which privacy and data protection laws apply to AI technologies, any delay in addressing privacy or data protection concerns relating to our AI features may result in liability or regulatory investigations and fines, as well as damage to our sales and reputation. Our generative AI features may also generate output that is misleading, insecure, inaccurate, harmful, or otherwise flawed, which may harm our reputation, business, or customers, or expose us to legal liability. 31 31 31 Table of Contents Table of Contents We rely on third-party vendors for the provision of the AI models which power many of our AI features. In the event those vendors encounter service disruption, materially and adversely change the terms on which they provide access to the models, or otherwise cease providing or change the basis on which they provide access to the models such that we can no longer obtain access, our ability to provide AI-powered features may be adversely affected. Further, developing, testing, and offering AI-powered features may lead to greater than expected expenditures for our company because deploying AI systems involves high computing costs, which could adversely affect our gross margin, profitability, financial position, and cash flow.

---

## No Match in Current: We have experienced rapid growth in recent periods. If we fail to manage our growth effectively, we may be unable to execute our business plan, maintain high levels of service, or adequately address competitive challenges.

*This section from the 2023 filing does not have a high-confidence textual match in 2024. It may have been removed, merged, or substantially reworded.*

We have experienced a period of rapid growth in our operations and headcount. We anticipate that we will continue to expand our operations and responsibly grow our headcount in the near term. This growth has placed, and future growth will place, a significant strain on our management and administrative, operational and financial infrastructure. Our success will depend in part on our ability to manage this growth effectively. To manage the responsible growth of our operations, we will need to continue to improve our operational, financial and management controls and our reporting systems and procedures. Failure to effectively manage growth could result in difficulty or delays in deploying customers, declines in quality or customer satisfaction, increases in costs, difficulties in introducing new features or other operational difficulties, and any of these difficulties could adversely impact our business performance and results of operations. Furthermore, there is no assurance that our rate of growth will continue at its current pace, if at all. Our rate of growth may also be impacted as a result of global business or macroeconomic conditions, including inflation and rising interest rates, and investment decisions by our customers.

---

## No Match in Current: Future acquisitions, strategic investments, partnerships or alliances could be difficult to identify and integrate, divert the attention of key management personnel, disrupt our business, dilute stockholder value and adversely affect our business, operating results and financial condition.

*This section from the 2023 filing does not have a high-confidence textual match in 2024. It may have been removed, merged, or substantially reworded.*

As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire complementary companies, services or technologies. Our ability as an organization to acquire and integrate other companies, services or technologies in a successful manner in the future is not guaranteed. We may not be able to find suitable acquisition candidates, and we may not be able to complete such acquisitions on favorable terms, if at all. If we do complete acquisitions, we may not ultimately strengthen our competitive position or ability to achieve our business objectives, and any acquisitions we complete could be viewed negatively by our end customers or investors. In addition, if we are unsuccessful at integrating such acquisitions, or the technologies associated with such acquisitions, into our company, the revenue and operating results of the combined company could be adversely affected. Any integration process may require significant time and resources, and we may not be able to manage the process successfully. We may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt or issue equity securities to pay for any such acquisition, each of which could adversely affect our financial condition and the market price of our Class A common stock. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. Additional risks we may face in connection with acquisitions include: •diversion of management time and focus from operating our business to addressing acquisition integration challenges; 52 52 52 Table of Contents Table of Contents •coordination of research and development and sales and marketing functions; •integration of product and service offerings; •retention of key team members from the acquired company; •changes in relationships with strategic partners as a result of product acquisitions or strategic positioning resulting from the acquisition; •integration of customers from the acquired company; •cultural challenges associated with integrating team members from the acquired company into our organization; •integration of the acquired company's accounting, management information, human resources and other administrative systems; •the need to implement or improve controls, procedures and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies; •additional legal, regulatory or compliance requirements; •financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we do not adequately address and that cause our reported results to be incorrect; •liability for activities of the acquired company before the acquisition, including intellectual property infringement claims, violations of laws, commercial disputes, tax liabilities and other known and unknown liabilities; •unanticipated write-offs or charges; and •litigation or other claims in connection with the acquired company, including claims from terminated team members, customers, former stockholders or other third parties. Our failure to address these risks or other problems encountered in connection with acquisitions and investments could cause us to fail to realize the anticipated benefits of these acquisitions or investments, cause us to incur unanticipated liabilities, and harm our business generally.

---

## Modified: The dual class structure of our common stock may adversely affect the trading market for our Class A common stock.

**Key changes:**

- Reworded sentence: "Several stockholder advisory firms and large institutional investors oppose the use of multiple class structures."

**Prior (2023):**

Certain stock index providers, such as S&P Dow Jones, exclude companies with multiple classes of shares of common stock from being added to certain stock indices, including the S&P 500. In addition, several stockholder advisory firms and large institutional investors oppose the use of multiple class structures. As a result, the dual class structure of our common stock may prevent the inclusion of our Class A common stock in such indices, may cause stockholder advisory firms to publish negative commentary about our corporate governance practices or otherwise seek to cause us to change our capital structure, and may result in large institutional investors not purchasing shares of our Class A common stock. Any exclusion from stock indices could result in a less active trading market for our Class A common stock. Any actions or publications by stockholder advisory firms or institutional investors critical of our corporate governance practices or capital structure could also adversely affect the value of our Class A common stock.

**Current (2024):**

Several stockholder advisory firms and large institutional investors oppose the use of multiple class structures. As a result, the dual class structure of our common stock may cause stockholder advisory firms to publish negative commentary about our corporate governance practices or otherwise seek to cause us to change our capital structure, and may result in large institutional investors not purchasing shares of our Class A common stock. Any actions or publications by stockholder advisory firms or institutional investors critical of our corporate governance practices or capital structure could also adversely affect the value of our Class A common stock.

---

## Modified: Customers may choose to stay on our free self-managed or SaaS product offerings instead of converting into a paying customer.

**Key changes:**

- Reworded sentence: "Our future success depends, in part, on our ability to convert users of our free self-managed or SaaS product offerings into paying customers by selling additional products, and by upselling additional 32 32 32 Table of Contents Table of Contents subscription services."

**Prior (2023):**

Our future success depends, in part, on our ability to convert users of our free self-managed or SaaS product offerings into paying customers by selling additional products, and by upselling additional subscription services. The total number of users of our free product may decline as a result of, or due to, the limitations on the number of users for a product and limitations on storage and transfers applicable to the free product offering (all of which were announced in the first quarter of fiscal year 2023 and is expected to be implemented in fiscal year 2024). As a result of our investment in new capabilities and improvements to our free product offering, users of our free product may decline to purchase additional products or subscription services if they perceive the free product to be more attractive as compared to our paid offerings. Converting users of our free product offering may require increasingly sophisticated and costly sales efforts and may not result in additional sales. In addition, the rate at which our end-customers purchase additional products and services depends on a number of factors, including the perceived need for additional products and services, the limitations on the number of users and limitations on storage and transfers applicable to the free product offering as well as general economic conditions. If our efforts to sell additional products and services to our end-customers are not successful, our business may suffer.

**Current (2024):**

Our future success depends, in part, on our ability to convert users of our free self-managed or SaaS product offerings into paying customers by selling additional products, and by upselling additional 32 32 32 Table of Contents Table of Contents subscription services. The total number of users of our free SaaS product may decline as a result of, or due to, our enforcement of user limits and our plan to implement in the future storage and transfer limits for our free SaaS product offering. As a result of our investment in new capabilities and improvements to our free product offering, users of our free product may decline to purchase additional products or subscription services if they perceive the free product to be more attractive as compared to our paid offerings. Converting users of our free product offering may require increasingly sophisticated and costly sales efforts and may not result in additional sales. In addition, the rate at which our end-customers purchase additional products and services depends on a number of factors, including the perceived need for additional products and services, the limitations on the number of users and limitations on storage and transfers applicable to the free product offering as well as general economic conditions. If our efforts to sell additional products and services to our end-customers are not successful, our business may suffer.

---

## Modified: We have identified a material weakness in our internal controls over financial reporting and if our remediation of such material weakness is not effective, or if we fail to develop and maintain an effective system of disclosure controls and internal controls over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable laws and regulations could be impaired.

**Key changes:**

- Reworded sentence: "The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting."
- Reworded sentence: "As disclosed in our Annual Report on Form 10-K for the year ended January 31, 2023, we had identified material weaknesses in our internal control over financial reporting."
- Reworded sentence: "The ineffective design and operation of IT general controls resulted in the ineffective operation of automated controls and manual controls using reports and information from the impacted information systems used in the financial reporting processes related to revenue."
- Reworded sentence: "Because we are a large accelerated filer, our independent registered public accounting firm is required to annually audit the effectiveness of our internal control over financial reporting, which has, and will continue to, require increased costs, expenses, and management resources."
- Reworded sentence: "To comply with the requirements of being a public company, we have undertaken, and may need to further 52 52 52 Table of Contents Table of Contents undertake in the future, various actions, such as implementing new internal controls and procedures and hiring additional accounting staff."

**Prior (2023):**

As a public company, we are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the Nasdaq Global Select Market. 49 49 49 Table of Contents Table of Contents The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and improve the effectiveness of our internal controls and procedures, we have expended, and anticipate that we will continue to expend, significant resources, including accounting related costs and significant management oversight. We have identified material weaknesses in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. As of January 31, 2023, we determined that the following material weaknesses exist due to a lack of policies and procedures related to the operation of control activities and inadequate communication of information to control owners and operators related to the objectives and responsibilities for internal control in a manner which supports the internal control environment at the company. As a result, the following material weaknesses exist: •We did not design and maintain effective controls over certain information technology, or IT, general controls for information systems that are relevant to the preparation of our consolidated financial statements. In particular, we did not design and maintain effective (i) program change management controls to ensure that IT programs, data changes and migrations affecting financial IT applications and underlying records are identified, tested, authorized and implemented appropriately and (ii) user access controls to ensure appropriate segregation of duties, restricted user and privileged access to our financial applications, data and programs to the appropriate personnel. The ineffective design and operation of IT general controls resulted in the ineffective operation of automated controls and manual controls using reports and information from the impacted information systems used in all financial reporting processes, •We did not retain sufficient contemporaneous documentation to demonstrate the operation of controls over manual journal entries, •We did not retain sufficient contemporaneous documentation to demonstrate the operation of review controls over stock-based compensation at a sufficient level of precision and such controls relied on reports, and •As previously reported, we did not design and maintain effective and timely review procedures over the accounting for and disclosure of non-routine transactions. This material weakness has not been remediated, as the new controls designed rely on reports and information adversely impacted by the IT general control deficiencies. The aforementioned material weaknesses did not result in a material misstatement to our annual or interim financial statements, however, the deficiencies, when aggregated, could result in misstatements potentially impacting all financial statements accounts and disclosures that would not be prevented or detected. Therefore we concluded that the deficiencies represent material weaknesses in the Company's internal control over financial reporting and our internal control over financial reporting was not effective as of January 31, 2023. Our independent registered public accounting firm, KPMG LLP, who audited the consolidated financial statements included in this Annual Report on Form 10-K, issued an adverse opinion on the effectiveness of the Company's internal control over financial reporting for the year ended January 31, 2023. To address our material weaknesses, we have commenced certain steps to enhance our internal control environment and remediate these material weaknesses. See the section entitled "Controls and Procedures - Remediation Plan for Material Weaknesses" below for additional information. However, we cannot guarantee that the measures we have taken to date, and actions we may take in the future, will be sufficient to remediate the control deficiencies that led to our material weaknesses in our internal control over financial reporting or that they will prevent or avoid potential future material weaknesses. Our current controls and any new controls we develop may become inadequate because of 50 50 50 Table of Contents Table of Contents changes in conditions in our business. Further, additional weaknesses in our internal controls may be discovered in the future. Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or improvement, could harm our operating results, may result in a restatement of our financial statements for prior periods, cause us to fail to meet our reporting obligations, and could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in the periodic reports we will file with the SEC. Because we are a large accelerated filer as of January 31, 2023, our independent registered public accounting firm is required to annually audit the effectiveness of our internal control over financial reporting commencing with the year ended January 31, 2023, which has, and will continue to, require increased costs, expenses, and management resources. Undetected material weaknesses in our internal control over financial reporting could lead to financial statement restatements and require us to incur the expense of remediation. We are also required to disclose changes made in our internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, internal control over financial reporting on a quarterly basis. To comply with the requirements of being a public company, we have undertaken, and may need to further undertake in the future, various actions, such as implementing new internal controls and procedures and hiring additional accounting staff. As a public company, significant resources and management oversight are required. As a result, management's attention may be diverted from other business concerns, which could harm our business, financial condition and operating results.

**Current (2024):**

As a public company, we are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the Nasdaq Global Select Market. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and improve the effectiveness of our internal controls and procedures, we have expended, and anticipate that we will continue to expend, significant resources, including accounting related costs and significant management oversight. As disclosed in our Annual Report on Form 10-K for the year ended January 31, 2023, we had identified material weaknesses in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be 51 51 51 Table of Contents Table of Contents prevented or detected on a timely basis. As of January 31, 2024, while we had successfully remediated certain prior material weaknesses, we determined that the following material weakness continued to exist due to a lack of policies and procedures related to the operation of control activities and inadequate communication of information to control owners and operators related to the objectives and responsibilities for internal control in a manner which supports the internal control environment at the company. As a result, the following material weakness exists as of January 31, 2024: •We did not design and maintain effective controls over certain information technology ("IT") general controls for information systems used in the financial reporting processes related to revenue. In particular, we did not design and maintain effective (i) program change management controls to ensure that IT programs, data changes and migrations affecting financial IT applications and underlying records are identified, tested, authorized and implemented appropriately and (ii) user access controls to ensure appropriate segregation of duties, restricted user and privileged access to our financial applications, data and programs to the appropriate personnel. The ineffective design and operation of IT general controls resulted in the ineffective operation of automated controls and manual controls using reports and information from the impacted information systems used in the financial reporting processes related to revenue. Although the aforementioned material weakness did not result in a material misstatement to our annual or interim financial statements, the deficiency could result in misstatements potentially impacting the financial reporting processes related to revenue and related disclosures that would not be prevented or detected. Therefore, we concluded that the deficiency represents a material weakness in our internal control over financial reporting and our internal control over financial reporting was not effective as of January 31, 2024. Our independent registered public accounting firm, KPMG LLP, who audited the consolidated financial statements included in this Annual Report on Form 10-K, issued an adverse opinion on the effectiveness of the Company's internal control over financial reporting. KPMG LLP's report appears in Item 8 of this Annual Report on Form 10-K. To address our material weakness, we have commenced certain steps to enhance our internal control environment and remediate these material weaknesses. See the section entitled "Controls and Procedures - Remediation Plan for Un-Remediated Material Weaknesses" for additional information. However, we cannot guarantee that the measures we have taken to date, and actions we may take in the future, will be sufficient to remediate the control deficiencies that led to our material weakness or that they will prevent or avoid potential future material weaknesses. Our current controls and any new controls we develop may become inadequate because of changes in conditions in our business. Further, additional weaknesses in our internal controls may be discovered in the future. Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or improvement, could harm our operating results, may result in a restatement of our financial statements for prior periods, cause us to fail to meet our reporting obligations, and could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in the periodic reports we will file with the SEC. Because we are a large accelerated filer, our independent registered public accounting firm is required to annually audit the effectiveness of our internal control over financial reporting, which has, and will continue to, require increased costs, expenses, and management resources. Undetected material weaknesses in our internal control over financial reporting could lead to financial statement restatements and require us to incur the expense of remediation. We are also required to disclose changes made in our internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, internal control over financial reporting on a quarterly basis. To comply with the requirements of being a public company, we have undertaken, and may need to further 52 52 52 Table of Contents Table of Contents undertake in the future, various actions, such as implementing new internal controls and procedures and hiring additional accounting staff. As a public company, significant resources and management oversight are required. As a result, management's attention may be diverted from other business concerns, which could harm our business, financial condition and operating results.

---

## Modified: We are dependent on sales and marketing strategies to drive our growth in our revenue. These sales and marketing strategies may not be successful in continuing to generate sufficient sales opportunities. Any decline in our customer renewals and expansions could harm our future operating results.

**Key changes:**

- Reworded sentence: "Our business model depends on generating and maintaining a large user base that is satisfied with The DevSecOps Platform."
- Reworded sentence: "While we have implemented user limits on our free SaaS product (and plan to implement in the future storage and transfer limitations on our free SaaS product), we have limited historical data with respect to the number of current and previous free users and the rates in which customers convert to paying customers, so we may not accurately predict future customer purchasing trends."
- Reworded sentence: "Paying customers 28 28 28 Table of Contents Table of Contents may decline or fluctuate as a result of a number of factors, including their satisfaction with our services and our end-customer support, the frequency and severity of product outages, our product uptime or latency, their satisfaction with the speed of delivering new features, the pricing of our, or competing, services, and the impact of macroeconomic conditions on our customers and their corporate spending."
- Reworded sentence: "Our customer expansions and renewals may decline or fluctuate, and conversely, contractions and downtiers may increase, or fluctuate, as a result of a number of factors, including: quality of our sales efforts, customer usage, customer satisfaction with our services and customer support, our prices (including price increases for our Premium tier that were generally implemented in the first quarter of fiscal year 2024), the prices of competing services, mergers and acquisitions affecting our customer base, the effects of global economic conditions, including inflation, volatile interest rates, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, or reductions in our customers' spending levels generally (including, our customers that have or may have to downsize their operations or headcount)."
- Reworded sentence: "In addition, an increase in the use of online and social media for product promotion and marketing may increase the burden on us to monitor compliance of such materials and increase the risk that such materials could contain problematic product or marketing claims in violation of applicable regulations."

**Prior (2023):**

Our business model depends on generating and maintaining a large user base that is extremely satisfied with The DevSecOps Platform. We rely on satisfied customers to expand their footprint by buying new products and services and onboarding additional users. The model is based on the assumption that we will convert non-paying users to paying users. We have limited historical data with respect to the number of current and previous free users and the rates in which customers convert to paying customers, so we may not accurately predict future customer purchasing trends. In future periods, our growth could slow or our profits could decline for several reasons, including decreased demand for our product offerings and our professional services, increased competition, a decrease in the growth of our overall market, a decrease in corporate spending, including as a result of global business or macroeconomic conditions, including inflation, rising interest rates, or otherwise, or our failure, for any reason, to continue to capitalize on growth opportunities. We may be forced to change or abandon our subscription based revenue model in order to compete with our competitors' offerings. It could also become increasingly difficult to predict revenue and timing of collections as our mix of annual, multi-year and other types of transactions changes as a result of our expansion into cloud-based offerings. Our failure to execute on our revenue projections could impair our ability to meet our business objectives and adversely affect our results of operations and financial condition. Our future success also depends in part on our ability to sell more subscriptions and additional services to our current customers. Even if customers choose to renew their current subscriptions with us, they may decline to purchase additional services or they may choose to downtier or otherwise decrease the number of seats in their subscription. If our customers do not purchase additional subscriptions and services from us, our revenue may decline and our operating results may be harmed. Paying customers may decline or fluctuate as a result of a number of factors, including their satisfaction with our services and our end-customer support, the frequency and severity of product outages, our product uptime or latency, their satisfaction with the speed of delivering new features, the pricing of our, or competing, services, and the impact of macroeconomic conditions on our customers and their corporate spending. We have limited historical data with respect to rates of paying customers buying more seats, uptiering, downtiering and churning, so we may not accurately predict future customer trends. Our customer expansions and renewals may decline or fluctuate, and conversely, contractions and downtiers may increase, or fluctuate, as a result of a number of factors, including: quality of our sales efforts, customer usage, customer satisfaction with our services and customer support, our prices (including price increases for our Premium tier that we announced in the first quarter of fiscal year 2024 and which are generally effective in the same fiscal quarter depending on whether it is a new or existing customer), the prices of competing services, mergers and acquisitions affecting our customer base, the effects of global economic conditions, including increased interest rates and inflation, or reductions in our customers' spending levels generally (including, our customers that have or may have to downsize their operations or headcount). If we cannot use our marketing strategies in a cost-effective manner or if we fail to promote our services efficiently and effectively, our ability to acquire new customers or expand the services of our existing customers may suffer. In addition, an increase in the use of online and social media for product promotion and marketing may increase the burden on us to monitor compliance of such 24 24 24 Table of Contents Table of Contents materials and increase the risk that such materials could contain problematic product or marketing claims in violation of applicable regulations. Further, we have discontinued our starter and bronze tier product offerings, and users of these products will be required to switch to another paid offering, switch to our free product or discontinue using our products. Additionally, in the first quarter of fiscal year 2023, we announced a user limit for our SaaS Free tier, which is expected to be implemented in fiscal year 2024 followed by storage and transfer limitations. We also announced in the first quarter of fiscal year 2023 storage and transfer limitations, the extent and implementation of which varies depending on the tier. We cannot assure you that our customers will purchase our products, and if our end customers do not purchase our products, our revenues may grow more slowly than expected or decline.

**Current (2024):**

Our business model depends on generating and maintaining a large user base that is satisfied with The DevSecOps Platform. We rely on satisfied customers to expand their footprint by buying new products and services and onboarding additional users. While we have implemented user limits on our free SaaS product (and plan to implement in the future storage and transfer limitations on our free SaaS product), we have limited historical data with respect to the number of current and previous free users and the rates in which customers convert to paying customers, so we may not accurately predict future customer purchasing trends. In future periods, our growth could slow or our profits could decline for several reasons, including decreased demand for our product offerings and our professional services, increased competition, a decrease in the growth of our overall market, a decrease in corporate spending, including as a result of global business or macroeconomic conditions, including inflation, volatile interest rates, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, volatility of the global debt and equity markets, actual or perceived instability in the global banking sector, or otherwise, or our failure, for any reason, to continue to capitalize on growth opportunities. We may be forced to change or abandon our subscription based revenue model in order to compete with our competitors' offerings. It could also become increasingly difficult to predict revenue and timing of collections as our mix of annual, multi-year and other types of transactions changes as a result of our expansion into cloud-based offerings. Our failure to execute on our revenue projections could impair our ability to meet our business objectives and adversely affect our results of operations and financial condition. Our future success also depends in part on our ability to sell more subscriptions and additional services to our current customers. Even if customers choose to renew their current subscriptions with us, they may decline to purchase additional services or they may choose to downtier or otherwise decrease the number of seats in their subscription. If our customers do not purchase additional subscriptions and services from us, our revenue may decline and our operating results may be harmed. Paying customers 28 28 28 Table of Contents Table of Contents may decline or fluctuate as a result of a number of factors, including their satisfaction with our services and our end-customer support, the frequency and severity of product outages, our product uptime or latency, their satisfaction with the speed of delivering new features, the pricing of our, or competing, services, and the impact of macroeconomic conditions on our customers and their corporate spending. We have limited historical data with respect to rates of paying customers buying more seats, uptiering, downtiering and churning, so we may not accurately predict future customer trends. Our customer expansions and renewals may decline or fluctuate, and conversely, contractions and downtiers may increase, or fluctuate, as a result of a number of factors, including: quality of our sales efforts, customer usage, customer satisfaction with our services and customer support, our prices (including price increases for our Premium tier that were generally implemented in the first quarter of fiscal year 2024), the prices of competing services, mergers and acquisitions affecting our customer base, the effects of global economic conditions, including inflation, volatile interest rates, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, or reductions in our customers' spending levels generally (including, our customers that have or may have to downsize their operations or headcount). If we cannot use our marketing strategies in a cost-effective manner or if we fail to promote our services efficiently and effectively, our ability to acquire new customers or expand the services of our existing customers may suffer. In addition, an increase in the use of online and social media for product promotion and marketing may increase the burden on us to monitor compliance of such materials and increase the risk that such materials could contain problematic product or marketing claims in violation of applicable regulations. Further, we have previously discontinued certain lower priced product offerings, requiring users of these products to switch to another paid offering, switch to our free product or discontinue using our products. Additionally, we have implemented user limits on our free SaaS product, and plan to implement in the future storage and transfer limitations on our free SaaS product offering. We also announced in the first quarter of fiscal year 2023 storage and transfer limitations on our paid product offerings, the extent and implementation of which varies depending on the tier. To the extent we discontinue or add additional limits on our free or lower-priced product offerings, we cannot assure you that our customers will purchase our products, and if our end customers do not purchase our products, our revenues may grow more slowly than expected or decline.

---

## Modified: Any failure to offer high-quality technical support services, including lifecycle services, or adequately sell such services, may adversely affect our relationships with our customers and our financial results.

**Key changes:**

- Reworded sentence: "We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services, and customers may not purchase the lifecycle services that we offer."

**Prior (2023):**

Once our products are deployed, our customers depend on our technical support organization to resolve technical issues. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services. We also may be unable to modify the format of our support services to compete with changes in support services provided by our competitors. Increased customer demand for these services, without corresponding revenues, could increase costs and adversely affect our operating results. In addition, our sales process is highly dependent on our services and business reputation and on positive recommendations from our existing customers. Any failure to maintain high-quality technical support, or a market perception that we do not maintain high-quality support, could adversely affect our reputation, our ability to sell our services to existing and prospective customers, and our business, operating results and financial position.

**Current (2024):**

Once our products are deployed, our customers depend on our technical support organization to resolve technical issues. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services, and customers may not purchase the lifecycle services that we offer. We also may be unable to modify the format of our support services to compete with changes in support services provided by our competitors. Increased customer demand for these services, without corresponding revenues, could increase costs and adversely affect our operating results. In addition, our sales process is highly dependent on our services and business reputation and on positive recommendations from our existing customers. Any failure to maintain high-quality technical support, or a market perception that we do not maintain high-quality support, could adversely affect our reputation, our ability to sell our services to existing and prospective customers, and our business, operating results and financial position.

---

## Modified: Our business and operations have experienced rapid growth, and if we do not appropriately and effectively manage future growth, if any, or are unable to improve our systems, processes and controls, our business, financial condition, results of operations, and prospects will be adversely affected.

**Key changes:**

- Reworded sentence: "We anticipate that we will continue to expand our operations and responsibly grow our headcount in the near term, and our success will depend in part on our ability to manage that growth effectively, although there is no assurance that our rate of growth will continue at its current pace."
- Added sentence: "Our rate of growth may also be impacted as a result of global business or macroeconomic conditions, including inflation, volatile interest rates, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, and investment decisions by our customers."
- Reworded sentence: "Failure to effectively manage growth or improve our systems, processes, and controls, or the failure to operate in the intended manner could result in the following adverse impacts to our business: difficulty or delays in deploying customers, declines in quality or customer satisfaction, increases in costs, difficulties in introducing new features or other operational difficulties, inability to manage the growth of our business and to forecast our revenue, expenses, and earnings accurately, or to prevent losses."

**Prior (2023):**

We have experienced rapid growth, both in terms of employee headcount and customer growth, as well as increased demand for our products. Our total number of Base Customers has grown to 7,002 as of January 31, 2023 from 4,593 as of January 31, 2022. The growth and expansion of our business places a continuous significant strain on our management and operational and financial resources. In addition, as customers adopt our products for an increasing number of use cases, we have had to support more complex commercial relationships. To effectively manage and capitalize on our growth periods, we need to manage headcount capital and processes efficiently, while continuing to make investments to improve and expand our information technology and financial infrastructure, our security and compliance requirements, our operating and administrative systems, our relationships with various partners and other third parties. We may not be able to sustain the pace of improvements to our products successfully or implement systems, processes, and controls in an efficient or timely manner or in a manner that does not negatively affect our results of operations. Our failure to improve our systems, processes, and controls, or their failure to operate in the intended manner, may result in our inability to manage the growth of our business and to forecast our revenue, expenses, and earnings accurately, or to prevent losses.

**Current (2024):**

We have experienced rapid growth, both in terms of employee headcount and customer growth, as well as increased demand for our products. We anticipate that we will continue to expand our operations and responsibly grow our headcount in the near term, and our success will depend in part on our ability to manage that growth effectively, although there is no assurance that our rate of growth will continue at its current pace. Our total number of Base Customers has grown to 8,602 as of January 31, 2024 from 7,002 as of January 31, 2023. The growth and expansion of our business places a continuous significant strain on our management and operational and financial resources. In addition, as customers adopt our products for an increasing number of use cases, we have had to support more complex commercial relationships. To effectively manage and capitalize on our growth periods, we need to manage headcount capital and processes efficiently, while continuing to make investments to improve and expand our information technology and financial infrastructure, our security and compliance requirements, our operating and administrative systems, our relationships with various partners and other third parties. Our rate of growth may also be impacted as a result of global business or macroeconomic conditions, including inflation, volatile interest rates, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, volatility of the global debt and equity markets, and actual or perceived instability in the global banking sector, and investment decisions by our customers. We may not be able to sustain the pace of improvements to our products successfully or implement systems, processes, and controls in an efficient or timely manner or in a manner that does not negatively affect our results of operations. Failure to effectively manage growth or improve our systems, processes, and controls, or the failure to operate in the intended manner could result in the following adverse impacts to our business: difficulty or delays in deploying customers, declines in quality or customer satisfaction, increases in costs, difficulties in introducing new features or other operational difficulties, inability to manage the growth of our business and to forecast our revenue, expenses, and earnings accurately, or to prevent losses.

---

## Modified: We could be subject to securities class action litigation.

**Key changes:**

- Reworded sentence: "Such suits may seek, as applicable, direct, indirect, consequential, punitive or other penalties or monetary damages, injunctive relief, and/or attorneys' fees."

**Prior (2023):**

In the past, securities class action litigation has often been instituted against companies following periods of volatility in the market price of a company's securities. This type of litigation, if instituted, could result in substantial costs and a diversion of management's attention and resources, which could adversely affect our business, operating results, or financial condition. Additionally, the dramatic increase in the cost of directors' and officers' liability insurance may cause us to opt for lower overall policy limits or 60 60 60 Table of Contents Table of Contents to forgo insurance that we may otherwise rely on to cover significant defense costs, settlements, and damages awarded to plaintiffs.

**Current (2024):**

In the past, securities class action litigation has often been instituted against companies following periods of volatility in the market price of a company's securities. Such suits may seek, as applicable, direct, indirect, consequential, punitive or other penalties or monetary damages, injunctive relief, and/or attorneys' fees. This type of litigation, if instituted, could result in substantial costs, adverse publicity, and a diversion of management's attention and resources, which could adversely affect our business, operating results, or financial condition. Additionally, the cost of directors' and officers' liability insurance may increase, which may cause us to opt for lower overall policy limits or to forgo insurance that we may otherwise rely on to cover significant defense costs, settlements, and damages awarded to plaintiffs.

---

## Modified: Customers may demand more customized configuration and integration services, or custom features and functions that we do not offer, which could adversely affect our business and operating results.

**Key changes:**

- Reworded sentence: "Our current and future customers may demand more customized configuration and integration services, which increase our up-front investment in sales and deployment efforts, with no guarantee that these customers will increase the scope of their subscription."

**Prior (2023):**

Our current and future customers may demand more configuration and integration services, which increase our up-front investment in sales and deployment efforts, with no guarantee that these customers will increase the scope of their subscription. As a result of these factors, we may need to devote a significant amount of sales support and professional services resources to individual customers, increasing the cost and time required to complete sales. If prospective customers require customized features or functions that we do not offer, and that would be difficult for them to deploy themselves, then the market for our applications will be more limited and our business could suffer.

**Current (2024):**

Our current and future customers may demand more customized configuration and integration services, which increase our up-front investment in sales and deployment efforts, with no guarantee that these customers will increase the scope of their subscription. As a result of these factors, we may need to devote a significant amount of sales, support, and professional services resources to individual customers, increasing the cost and time required to complete sales. If prospective customers require customized features or functions that we do not offer, and which would be difficult for them to deploy themselves, then the market for our applications will be more limited and our business could suffer. 33 33 33 Table of Contents Table of Contents

---

## Modified: We may engage in merger and acquisition activities and joint ventures, which could require significant management attention, disrupt our business, dilute stockholder value, and adversely affect our operating results.

**Key changes:**

- Reworded sentence: "As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire other companies, products, or technologies."
- Reworded sentence: "We may face additional risks in connection with acquisitions and joint ventures, including: 37 37 37 Table of Contents Table of Contents •diversion of management time and focus from operating our business to addressing acquisition integration challenges; •coordination of research and development and sales and marketing functions; •integration of product and service offerings; •retention of key team members from the acquired company; •changes in relationships with strategic partners as a result of product acquisitions or strategic positioning resulting from the acquisition; •integration of customers from the acquired company; •cultural challenges associated with integrating team members from the acquired company into our organization; •integration of the acquired company's accounting, management information, human resources and other administrative systems; •the need to implement or improve controls, procedures and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies; •additional legal, regulatory or compliance requirements; •financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we do not adequately address and that cause our reported results to be incorrect; •liability for activities of the acquired company before the acquisition, including intellectual property infringement claims, violations of laws, commercial disputes, tax liabilities and other known and unknown liabilities; •unanticipated write-offs or charges; and •litigation or other claims in connection with the acquired company, including claims from terminated team members, customers, former stockholders or other third parties."
- Added sentence: "Our failure to address these risks or other problems encountered in connection with acquisitions activities and joint ventures could cause us to fail to realize the anticipated benefits of these acquisitions, investments or joint ventures, cause us to incur unanticipated liabilities, and harm our business generally."

**Prior (2023):**

As part of our business strategy, we may make investments in other companies, products, or technologies and may seek to acquire other companies, products, or technologies in the future. We may not be able to find suitable acquisition candidates and we may not be able to complete acquisitions on favorable terms, if at all. Even if we complete acquisitions or joint ventures, we may not ultimately strengthen our competitive position or achieve our goals, and any acquisitions or joint ventures we complete could be viewed negatively by users or investors. In addition, if we fail to successfully integrate such acquisitions, or the assets, technologies or talent associated with such acquisitions, into our company, we may have depleted the company's capital resources without attractive returns, and the revenue and operating results of the combined company could be adversely affected. Acquisitions and joint ventures may disrupt our ongoing operations, divert management from their primary responsibilities, dilute our corporate culture, subject us to additional liabilities, increase our expenses, and adversely impact our business, financial condition, operating results, and cash flows. We may not successfully evaluate or utilize the acquired technology and accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition or joint venture, each of which could affect our financial condition or the value of our capital stock and could result in dilution to our stockholders. If we incur more debt it would result in increased fixed obligations and could also subject us to covenants or 36 36 36 Table of Contents Table of Contents other restrictions that would impede or may be beyond our ability to manage our operations. Additionally, we may receive indications of interest from other parties interested in acquiring some or all of our business. The time required to evaluate such indications of interest could require significant attention from management, disrupt the ordinary functioning of our business, and adversely affect our operating results.

**Current (2024):**

As part of our business strategy, we have in the past and expect to continue to make investments in and/or acquire other companies, products, or technologies. We may not be able to find suitable acquisition candidates and we may not be able to complete acquisitions on favorable terms, if at all. Even if we complete acquisitions or joint ventures, we may not ultimately strengthen our competitive position or achieve our goals, and any acquisitions or joint ventures we complete could be viewed negatively by users or investors. In addition, if we fail to successfully integrate such acquisitions, or the assets, technologies or talent associated with such acquisitions, into our company, we may have depleted the company's capital resources without attractive returns, and the revenue and operating results of the combined company could be adversely affected. We may face additional risks in connection with acquisitions and joint ventures, including: 37 37 37 Table of Contents Table of Contents •diversion of management time and focus from operating our business to addressing acquisition integration challenges; •coordination of research and development and sales and marketing functions; •integration of product and service offerings; •retention of key team members from the acquired company; •changes in relationships with strategic partners as a result of product acquisitions or strategic positioning resulting from the acquisition; •integration of customers from the acquired company; •cultural challenges associated with integrating team members from the acquired company into our organization; •integration of the acquired company's accounting, management information, human resources and other administrative systems; •the need to implement or improve controls, procedures and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies; •additional legal, regulatory or compliance requirements; •financial reporting, revenue recognition or other financial or control deficiencies of the acquired company that we do not adequately address and that cause our reported results to be incorrect; •liability for activities of the acquired company before the acquisition, including intellectual property infringement claims, violations of laws, commercial disputes, tax liabilities and other known and unknown liabilities; •unanticipated write-offs or charges; and •litigation or other claims in connection with the acquired company, including claims from terminated team members, customers, former stockholders or other third parties. Further, we may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition or joint venture, each of which could affect our financial condition or the value of our capital stock and could result in dilution to our stockholders. If we incur more debt it would result in increased fixed obligations and could also subject us to covenants or other restrictions that would impede or may be beyond our ability to manage our operations. Additionally, we may receive indications of interest from other parties interested in acquiring some or all of our business. The time required to evaluate such indications of interest could require significant attention from management, disrupt the ordinary functioning of our business, and adversely affect our operating results. Our failure to address these risks or other problems encountered in connection with acquisitions activities and joint ventures could cause us to fail to realize the anticipated benefits of these acquisitions, investments or joint ventures, cause us to incur unanticipated liabilities, and harm our business generally.

---

## Modified: As our product offerings mature and expand our pricing and packaging for new products may result in existing customers purchasing new products on less favorable terms to us to replace the existing products they purchase or subscribe for from us.

**Key changes:**

- Reworded sentence: "As our product offerings and the markets for our services mature, or as new competitors introduce new products or services that are similar to or compete with ours, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically."
- Reworded sentence: "As a result, in the future we may be required to reduce our prices or provide more features without corresponding increases in price, which could adversely affect our revenues, gross margin, profitability, financial position and cash flow."
- Reworded sentence: "Our customers may renew for fewer or other elements of our services or negotiate for different pricing terms."
- Reworded sentence: "For example, we have previously discontinued certain lower priced product offerings, and during fiscal year 2024 we implemented a price increase in our Premium tier product offering, which may cause customers who previously used these tiers to opt for our free version or to cease using our products completely."

**Prior (2023):**

We have limited experience with respect to determining the optimal prices for our services. As the markets for our services mature, or as new competitors introduce new products or services that are similar to or compete with ours, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically. Moreover, some customers may demand greater price concessions or additional functionality at the same price levels. As a result, in the future we may be 26 26 26 Table of Contents Table of Contents required to reduce our prices or provide more features without corresponding increases in price, which could adversely affect our revenues, gross margin, profitability, financial position and cash flow. In addition, our customers have no obligation to renew their subscriptions for our services after the expiration of the initial subscription period. A majority of our subscriptions are on a one-year period. Our customers may renew for fewer elements of our services or negotiate for different pricing terms. We have limited historical data with respect to rates of customer subscription renewals, so we cannot accurately predict customer renewal rates. Our customers' renewal rates may decline or fluctuate as a result of a number of factors, including their dissatisfaction with our pricing or our services, their ability to continue their operations and spending levels, and changes in other technology components used within the customer's organization. Changes in product packaging, pricing strategy, or product offerings, or the implementation or execution of the foregoing, may not be seen favorably by our customers and may have an adverse effect on our ability to retain our current customers and acquire new ones. For example, we have discontinued our starter and bronze tier product offerings, and we recently announced a price increase in our Premium tier product offering, which may cause customers who previously used these tiers to opt for our free version or to cease using our products completely. We may also decide to raise the prices of our product offerings in the future. If our customers do not renew their subscriptions on similar pricing terms, our revenues may decline, and our business could suffer. In addition, over time the average term of our contracts could change based on renewal rates or for other reasons.

**Current (2024):**

As our product offerings and the markets for our services mature, or as new competitors introduce new products or services that are similar to or compete with ours, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically. Moreover, some customers may demand greater price concessions or additional functionality at the same price levels. As a result, in the future we may be required to reduce our prices or provide more features without corresponding increases in price, which could adversely affect our revenues, gross margin, profitability, financial position and cash flow. In addition, our customers have no obligation to renew their subscriptions for our services after the expiration of the initial subscription period. A majority of our subscriptions are on a one-year period. Our customers may renew for fewer or other elements of our services or negotiate for different pricing terms. Our customers' renewal rates may decline or fluctuate as a result of a number of factors, including their dissatisfaction with our pricing or our services, their ability to continue their operations and spending levels, and changes in other technology components used within the customer's organization. Changes in product packaging, pricing strategy, or product offerings, or the implementation or execution of the foregoing, may not be seen favorably by our customers and may have an adverse effect on our ability to retain our current customers and acquire new ones. For example, we have previously discontinued certain lower priced product offerings, and during fiscal year 2024 we implemented a price increase in our Premium tier product offering, which may cause customers who previously used these tiers to opt for our free version or to cease using our products completely. We may also decide to raise the prices of our product offerings in the future. If our customers do not renew their subscriptions on similar pricing terms, our revenues may decline, and our business could suffer. In addition, over time the average term of our contracts could change based on renewal rates or for other reasons.

---

*Data sourced from SEC EDGAR. Last updated 2026-05-10.*