Symantec-Veritas without the strings

Where Symantec purchased, McAfee will partner. Having watched its major security competitor get bogged down with a storage acquisition, McAfee has opted for a low-risk partnership to tie its security products with storage. The largest stand-alone security vendor said Tuesday that it has struck an alliance with data management software provider CommVault. The initial integrated product, which will put CommVault’s storage resource management tool into McAfee’s ePolicy Orchestrator console, will be available next year.

With modest integration and no bundled products planned, we would characterize McAfee’s loose partnership with CommVault as ‘Symantec-Veritas lite.’ And the two sides have reason to be cautious, given the struggles Symantec has had with its $13.5bn purchase of Veritas. (Although he continues to back the deal, Symantec CEO John Thompson has said the market considers the combination a ‘purple elephant’ and is uncertain of how to value it.) Since the transaction was announced in December 2004, Symantec shares have lost about half of their value, compared to a 20% decline in the Nasdaq and a slight 5% dip in McAfee stock.

Deciphering encryption deals

Exactly a year ago, McAfee announced its $350m acquisition of SafeBoot, which in turn came about a year after Check Point Software made its own purchase of an encryption vendor, Protect Data AB. We mention this bit of history because, in what has seemingly become an annual autumn event, Sophos just closed its own big encryption purchase, the $341m deal for Utimaco.

Although the three encryption vendors shared a home market of Europe and were in the same neighborhood in terms of revenue, the three transactions are very different. For starters, the relative growth rates of the targets were all over the board. Protect Data, or Pointsec as it was more commonly known, was clipping along at 90% year-on-year growth when we spoke to them ahead of the takeout. (Although we have heard that some of that torrid growth came at the expense of margins.) Meanwhile, SafeBoot, which was preparing for a possible public offering, told us sales were likely to grow about 70% in the year leading up to its acquisition. In contrast, 20-year-old Utimaco had increased sales just 20% in its most recent fiscal year.

Also, Check Point inked its acquisition of Protect Data when it was running at about $600m in sales. McAfee was even larger, having topped $1bn in annual revenue when it reached for SafeBoot. That’s not the case for Sophos and its just-closed purchase of Utimaco. With Sophos having finished its fiscal year (ending March) with revenue of $213m, it will be looking to integrate a company that is nearly half its size.

Finally, the returns on the two acquisitions already on the books have varied quite a bit. Check Point, which has traditionally been strong on network security, has struggled to notch sales of Pointsec, which secures the endpoint. On the other hand, McAfee has kept SafeBoot rolling along, with one source indicating that the unit will do about $100m in sales this year. The reason: McAfee already had a strong presence on endpoint security, as well as a management console that has integrated SafeBoot. Of those two contrasting acquirers, Sophos lines up more closely with McAfee, which bodes well for its combination with Utimaco. That’s crucial for Sophos, since we consider its purchase of Utimaco a make-or-break deal for the company.

Significant data encryption deals

Date Acquirer Target Price Target revenue
July 2008 Sophos Utimaco $341m $86m
October 2007 McAfee SafeBoot $350m $60m*
November 2006 Check Point Protect Data (Pointsec) $586m $64m

Source: The 451 M&A KnowledgeBase *451 Group estimate

Preferred gets preference

Even with McAfee’s offer of $5.75 in cash for each share of Secure Computing representing a premium of about 27% over the previous close, many Secure shareholders are underwater. In June, Secure sank to its lowest level in six years, part of a slide that has seen some 40% of its market value erased this year. The decline left the company trading at just 1x revenue. (When it shed its authentication business at the end of July, we noted that the divested unit sold for twice the valuation of the remaining Secure business, a highly unusual situation in corporate castoffs. We also asked if the move wasn’t a prelude to an outright sale of the company.)

It turns out, however, that the stock’s decline didn’t really affect Secure’s largest shareholder, Warburg Pincus. The private equity firm took a $70m stake in Secure in January 2006. (Secure took the money to help it pay for its mid-2005 purchase of CyberGuard.) Yet, because of the way Warburg structured its purchase, the shop ended up making money on its holding. That’s true even though Secure stock, even with McAfee’s offer, is some 60% below where it was when Warburg took its stake. (Shares changed hands at $14.40 each when Warburg picked up its holding, although the conversion price was adjusted slightly six months later to offset the potential dilution caused by Secure’s cash-and-stock purchase of CipherTrust.)

In the end, Warburg pocketed $84m from McAfee for its Secure holdings, which were largely made up of series A preferred shares. Having put $70m into Secure, and then seen the shares sink, we guess Warburg is probably content to book even a slight gain on its investment.