Personal blog of Yzmir Ramirez

Jamf, the Apple device management company, filed to go public today. Jamf might not be a household name, but the Minnesota company has been around since 2002 helping companies manage their Apple equipment.

In the early days, that was Apple computers. Later it expanded to also manage iPhones and iPads. The company launched at a time when most IT pros had few choices for managing Macs in a business setting.

Jamf changed that, and as Macs and other Apple devices grew in popularity inside organizations in the 2010s, the company’s offerings grew in demand. Notably, over the years Apple has helped Jamf and its rivals considerably, by building more sophisticated tooling at the operating system level to help manage Macs and other Apple devices inside organizations.

Jamf raised approximately $50 million of disclosed funding before being acquired by Vista Equity Partners in 2017 for $733.8 million, according to the S-1 filing. Today, the company kicks off the high-profile portion of its journey towards going public.

Apple device management takes center stage

In a case of interesting timing, Jamf is filing to go public less than a week after Apple bought mobile device management startup Fleetsmith. At the time, Apple indicated that it would continue to partner with Jamf as before, but with its own growing set of internal tooling, which could at some point begin to compete more rigorously with the market leader.

Other companies in the space managing Apple devices besides Jamf and Fleetsmith include Addigy and Kandji. Other more general offerings in the mobile device management (MDM) space include MobileIron and VMware Airwatch among others.

Vista is a private equity shop with a specific thesis around buying out SaaS and other enterprise companies, growing them, and then exiting them onto the public markets or getting them acquired by strategic buyers. Examples include Ping Identity, which the firm bought in 2016 before taking it public last year, and Marketo, which Vista bought in 2016 for $1.8 billion and sold to Adobe last year for $4.8 billion, turning a tidy profit.

Inside the machine

Now that we know where Jamf sits in the market, let’s talk about it from a purely financial perspective.

Jamf is a modern software company, meaning that it sells its digital services on a recurring basis. In the first quarter of 2020, for example, about 83% of its revenue came from subscription software. The rest was generated by services and software licenses.

Now that we know what type of company Jamf is, let’s explore its growth, profitability and cash generation. Once we understand those facets of its results, we’ll be able to understand what it might be worth and if its IPO appears to be on solid footing.

We’ll start with growth. In 2018 Jamf recorded $146.6 million in revenue, which grew to $204.0 million in 2019. That works out to an annual growth rate of 39.2%, a more than reasonable pace of growth for a company going public. It’s not super quick, mind, but it’s not slow either. More recently, the company grew 36.9% from $44.1 million in Q1 2019 to $60.4 million in revenue in Q1 2020. That’s a bit slower, but not too much slower.

Turning to profitability, we need to start with the company’s gross margins. Then we’ll talk about its net margins. And, finally, adjusted profits.

Gross margins help us understand how valuable a company’s revenue is. The higher the gross margins, the better. SaaS companies like Jamf tend to have gross margins of 70% or above. In Jamf’s own case, it posted gross margins of 75.1% in Q1 2020, and 72.5% in 2019. Jamf’s gross margins sit comfortably in the realm of SaaS results, and perhaps even more importantly are improving over time.

Getting behind the curtain

When all its expenses are accounted for, the picture is less rosy, and Jamf is unprofitable. The company’s net losses for 2018 and 2019 were similar, totalling $36.3 million and $32.6 million, respectively. Jamf’s net loss improved a little in Q1, falling from $9.0 million in 2019 to $8.3 million this year.

The company remains weighed down by debt, however, which cost it nearly $5 million in Q1 2020, and $21.4 million for all of 2019. According to the S-1, Jamf is sporting a debt-to-equity ratio of roughly 0.8, which may be a bit higher than your average public SaaS company, and is almost certainly a function of the company’s buyout by a private equity firm.

But the company’s adjusted profit metrics strip out debt costs, and under the heavily massaged adjusted earnings before interest, taxes, depreciation and amortization (EBITDA) metric, Jamf’s history is only one of rising profitability. From $6.6 million in 2018 to $20.8 million in 2019, and from $4.3 million in Q1 2019 to $5.6 million in Q1 2020. with close to 10% adjusted operating profit margins through YE 2019.

It will be interesting to see how the company’s margins will be affected by COVID, with financials during the period still left blank in this initial version of the S-1. The Enterprise market in general has been reasonably resilient to the recent economic shock, and device management may actually perform above expectations given the growing push for remote work.

Completing the picture

Something notable about Jamf is that it has positive cash generation, even if in Q1 it tends to consume cash that is made up for in other quarters. In 2019, the firm posted $11.2 million in operational cash flow. That’s a good result, and better than 2018’s $9.4 million of operating cash generation. (The company’s investing cash flows have often run negative due to Jamf acquiring other companies, like ZuluDesk and Digita.)

With Jamf, we have a SaaS company that is growing reasonably well, has solid, improving margins, non-terrifying losses, growing adjusted profits, and what looks like a reasonable cash flow perspective. But Jamf is cash poor, with just $22.7 million in cash and equivalents as of the end of Q1 2020 — some months ago now. At that time, the firm also had debts of $201.6 million.

Given the company’s worth, that debt figure is not terrifying. But the company’s thin cash balance makes it a good IPO candidate; going public will raise a chunk of change for the company, giving it more operating latitude and also possibly a chance to lower its debt load. Indeed Jamf notes that it intends to use part of its IPO raise to “to repay outstanding borrowings under our term loan facility…” Paying back debt at IPO is common in private equity buyouts.

So what?

Jamf’s march to the public markets adds its name to a growing list of companies. The market is already preparing to ingest Lemonade and Accolade this week, and there are rumors of more SaaS companies in the wings, just waiting to go public.

There’s a reasonable chance that as COVID-19 continues to run roughshod over the United States, the public markets eventually lose some momentum. But that isn’t stopping companies like Jamf from rolling the dice and taking a chance going public.

A big problem for companies these days is finding ways to connect various data sources to their data repositories, and Fivetran is a startup with a solution to solve that very problem. No surprise then that even during a pandemic, the company announced today that it has raised a $100 million Series C on a $1.2 billion valuation.

The company didn’t mess around, with top flight firms Andreessen Horowitz and General Catalyst leading the investment, with participation from existing investors CEAS Investments and Matrix Partners. Today’s money brings the total raised so far to $163 million, according to the company.

Martin Casado from a16z described the company succinctly in a blog post he wrote after its $44 million Series B in September 2019, in which his firm also participated. “Fivetran is a SaaS service that connects to the critical data sources in an organization, pulls and processes all the data, and then dumps it into a warehouse (e.g., Snowflake, BigQuery or RedShift) for SQL access and further transformations, if needed. If data is the new oil, then Fivetran is the pipes that get it from the source to the refinery,” he wrote.

Writing in a blog post today announcing the new funding, CEO George Fraser added that in spite of current conditions, the company has continued to add customers. “Despite recent economic uncertainty, Fivetran has continued to grow rapidly as customers see the opportunity to reduce their total cost of ownership by adopting our product in place of highly customized, in-house ETL pipelines that require constant maintenance,” he wrote.

In fact, the company reports 75% customer growth over the prior 12 months. It now has more than 1,100 customers, which is a pretty good benchmark for a Series C company. Customers include Databricks, DocuSign, Forever 21, Square, Udacity and Urban Outfitters, crossing a variety of verticals.

Fivetran hopes to continue to build new data connectors as it expands the reach of its product and to push into new markets, even in the midst of today’s economic climate. With $100 million in the bank, it should have enough runway to ride this out, while expanding where it makes sense.

Hunters, a Tel Aviv-based cybersecurity startup that helps enterprises defend themselves from intruders and analyze attacks, today announced that it has raised a $15 million Series A funding round from Microsoft’s M12 and U.S. Venture Partners. Seed investors YL Ventures and Blumberg Captial also participated in this round, as well as new investor Okta Ventures, the venture arm of identity provider Okta. With this, Hunters has now raised a total of $20.4 million.

The company’s SaaS platform basically automates the threat-hunting processes, which has traditionally been a manual process. The general idea here is to take as much data from an enterprise’s various networking and security tools to detect stealth attacks.

“Hunters is basically this layer, a cognitive layer or connective tissue that you put on top of your telemetry stack,” Hunters co-founder and CEO Uri May told me. “So you have your [endpoint detection and response], your firewalls, cloud, production environment sensors — and all of those are shooting telemetry and detections all over the organization, generating huge amounts of data. And, basically, our place in the world depends on our ability to generate that delta. So without being able to find things that you can’t see with a single point solution or without really expediting response procedures and workflows by correlating things in a nontrivial way, we don’t have any excuse to exist. But we got pretty good at those — at showing that delta — and we onboarded customers — nice logos — and that was a very strong validation.”

Hunters’ first customer was actually data management service Snowflake, which functioned as the company’s design partner. In addition to being a customer, Snowflake now also features Hunters in its partner marketplace, as does security service CrowdStrike. May also noted that Crowdstrike is a good example for the kind of customer Hunters is going after.

“Not necessarily Global 2000 or Fortune 500. It’s really high-end mid-market organizations, not necessarily tens of thousand employees, but billions of dollars in revenues, a lot of value at risk, born to the cloud, super mature tech stack, not necessarily a big security operation center, but definitely CISO and a team of security engineers and analysts, and they’re looking for the solution, that on-top solution that can make sense of a lot of the data and give them the confidence and also give them results in terms of cybersecurity, posture and their detection and response capabilities.”

Microsoft already has a large security development center in Israel and so it’s no surprise that Hunters appeared on the company’s radar. Hunters also spent some time proactively looking at the Microsoft ecosystem, May told me, but the company’s VCs also made some introductions. All of this culminated in a number of meetings at the Tel Aviv CyberTech conference in January and the RSA Conference in San Francisco in February, just before the coronavirus pandemic essentially shut down travel.

Hunters says it will use the new funding to build out its go-to-market capabilities in the U.S. and expand its R&D team in Israel. As for the product itself, the company will look to broaden its product integration and machine learning capabilities to help it generate better attack stories. May also noted that it plans to give its users capabilities to customize the system for their needs by allowing them to develop their own signals and detections to augment the company’s default tools. This, May argued, will allow the company to go after higher-end enterprise customers that already have threat-hunting teams but that are looking to automate more of the process. With that, it will also look to partner with other security firms to leverage its system to provide better services to their customers as well.

API management platform Kong today announced that it is donating its open-source Kuma control plane technology to the Cloud Native Computing Foundation (CNCF). Since Kong built Kuma on top of the Envoy service mesh — and Envoy is part of the CNCF’s stable of open-source projects — donating it to this specific foundation was likely an obvious move.

The company first open-sourced Kuma in September 2019. In addition to donating it to the CNCF, the company also today launched version 0.6 of the codebase, which introduces a new hybrid mode that enables Kuma-based service meshes to support applications that run on complex heterogeneous environments, including VMs, Kubernetes clusters and multiple data centers.

Kong co-founder and CTO Marco Palladino says that the goal was always to donate Kuma to the CNCF.

“The industry needs and deserves to have a cloud native, Envoy-based control plane that is open and not governed by a single commercial entity,” he writes in today’s announcement. “From a technology standpoint, it makes no sense for individual companies to create their own control plane but rather build their own unique applications on proven technologies like Envoy and Kuma. We welcome the broader community to join Kuma on Slack and on our bi-weekly community calls to contribute to the project and continue the incredible momentum we have achieved so far.”

Kuma will become a CNCF Sandbox project. The sandbox is the first stage that projects go through to become full graduated CNCF projects. Currently, the foundation is home to 31 sandbox projects, and Kong argues that Kuma is now production-ready and at the right stage where it can profit from the overall CNCF ecosystem.

“It’s truly remarkable to see the ecosystem around Envoy continue to develop, and as a vendor-neutral organization, CNCF is the ideal home for Kuma,” said Matt Klein, the creator of the Envoy proxy. “Now developers have access to the service mesh data plane they love with Envoy as well as a CNCF-hosted Envoy-based control plane with Kuma, offering a powerful combination to make it easier to create and manage cloud native applications.”

There’s a lot of complexity around managing data lakes in the cloud that often requires expensive engineering expertise. Upsolver, an early-stage startup, wants to simplify all of that, so that a database administrator could handle it. Today the startup announced a $13 million Series A.

Vertex Ventures US was lead investor, with participation from Wing Venture Capital and Jerusalem Venture Partners. Today’s investment brings the total raised to $17 million, according to the company.

Co-founder and CEO Ori Rafael says that as companies move data to the cloud and store it in data lakes, it becomes increasingly difficult to manage. The goal of Upsolver is to abstract away a lot of those management tasks and allow users to query the data using SQL, making it a lot more accessible.

“The main criticism of data lakes over the years is they become data swamps. It’s very easy to store data there very cheaply, but making it [easy to query] and valuable is hard. For that you need a lot of engineering, which turns the lake into a swamp. So we take the data that you put into a lake and make it easier to query, and we take the biggest disadvantage of using a lake, which is the complexity of doing that process, and we make that process easy,” Rafael explained.

Investor In Sik Rhee, who is general partner and co-founder at Vertex Ventures US, sees a company that’s creating a cloud-native standard for data lake computing. “Upsolver succeeded in abstracting away the engineering complexity of data pipeline management so that enterprise customers can quickly solve their modern data challenges in real time and at any scale without having to build another silo of expertise within the organization,” he said in a statement.

The company currently has 22 employees spread out between San Francisco, New York and Israel. Rafael says they hope to expand to 50 employees by the end of next year, including adding new engineers for their R&D center in Israel and building sales and customer success teams in the U.S.

Rafael says he and his co-founder sat down early on and wrote down the company’s core values, and they see a responsibility of running a diverse company as part of that, as they search for these new hires. Certainly the pandemic has shown them that they can hire from anywhere and that can help contribute to a more diverse workforce as they grow.

He said running the company and raising money has been stressful during these times, but the company has continued to grow through all of this, adding new customers while staying relatively lean, and Rafael says that the investors certainly recognized that.

“We had high revenue compared to the low number of employees with [sales] acceleration during COVID — that was our big trio,” he said.

AWS today announced that CodeGuru, a set of tools that use machine learning to automatically review code for bugs and suggest potential optimizations, is now generally available. The tool launched into preview at AWS re:Invent last December.

CodeGuru consists of two tools, Reviewer and Profiler, and those names pretty much describe exactly what they do. To build Reviewer, the AWS team actually trained its algorithm with the help of code from more than 10,000 open source projects on GitHub, as well as reviews from Amazon’s own internal codebase.

“Even for a large organization like Amazon, it’s challenging to have enough experienced developers with enough free time to do code reviews, given the amount of code that gets written every day,” the company notes in today’s announcement. “And even the most experienced reviewers miss problems before they impact customer-facing applications, resulting in bugs and performance issues.”

To use CodeGuru, developers continue to commit their code to their repository of choice, no matter whether that’s GitHub, Bitbucket Cloud, AWS’s own CodeCommit or another service. CodeGuru Reviewer then analyzes that code, tries to find bugs and, if it does, it will also offer potential fixes. All of this is done within the context of the code repository, so CodeGuru will create a GitHub pull request, for example, and add a comment to that pull request with some more info about the bug and potential fixes.

To train the machine learning model, users can also provide CodeGuru with some basic feedback, though we’re mostly talking “thumbs up” and “thumbs down” here.

The CodeGuru Application Profiler has a somewhat different mission. It is meant to help developers figure out where there might be some inefficiencies in their code and identify the most expensive lines of code. This includes support for serverless platforms like AWS Lambda and Fargate.

One feature the team added since it first announced CodeGuru is that Profiler now attaches an estimated dollar amount to the lines of unoptimized code.

“Our customers develop and run a lot of applications that include millions and millions of lines of code. Ensuring the quality and efficiency of that code is incredibly important, as bugs and inefficiencies in even a few lines of code can be very costly. Today, the methods for identifying code quality issues are time-consuming, manual, and error-prone, especially at scale,” said Swami Sivasubramanian, vice president, Amazon Machine Learning, in today’s announcement. “CodeGuru combines Amazon’s decades of experience developing and deploying applications at scale with considerable machine learning expertise to give customers a service that improves software quality, delights their customers with better application performance, and eliminates their most expensive lines of code.”

AWS says a number of companies started using CodeGuru during the preview period. These include the likes of Atlassian, EagleDream and DevFactory.

“While code reviews from our development team do a great job of preventing bugs from reaching production, it’s not always possible to predict how systems will behave under stress or manage complex data shapes, especially as we have multiple deployments per day,” said Zak Islam, head of Engineering, Tech Teams, at Atlassian. “When we detect anomalies in production, we have been able to reduce the investigation time from days to hours and sometimes minutes thanks to Amazon CodeGuru’s continuous profiling feature. Our developers now focus more of their energy on delivering differentiated capabilities and less time investigating problems in our production environment.”

Over the past six months we have touched on Drupal 9, today we are all Drupal 9.0. We talk about what’s here now and what’s coming.

www.talkingdrupal.com/253

Topics

• Stephen – Hamilton
• John – Helping on Drupal Stack
• Nic – Garden
• Story
• Drupal 8.9 and Drupal 9.0
• Drupal 9 Requirements
• What’s new?
• What is being removed from Drupal 9
• Drupal 7 Support
• Drupal 8 EoL
• Drupal 9 EoL
• The Maintainers Initiative

Resources

America Is Reopening. Coronavirus Tracing Apps Aren’t Ready.

What changes are there for third-party dependencies?

How and why we deprecated code on the way to Drupal 9

Fixing Composer issues with a Drupal 9 upgrade

Maintainer Support

Hosts

Stephen Cross – www.stephencross.com @stephencross

John Picozzi – www.oomphinc.com @johnpicozzi

Nic Laflin – www.nLighteneddevelopment.com @nicxvan

When Apple confirmed it had acquired Fleetsmith, a mobile device management vendor, on Wednesday, it seemed like a straightforward purchase, but Fleetsmith customers quickly learned a key piece of functionality had stopped working  — and many weren’t happy about it.

Apple systems administrators began complaining on social media on the morning of the acquisition announcement that the company was no longer allowing them to connect to third-party applications.

“Primarily Fleetsmith maintained a third-party app catalog, so you could deploy things like Chrome or Zoom to your Macs, and Fleetsmith would maintain security updates for those apps. This was the main reason we purchased Fleetsmith,” a Fleetsmith customer told TechCrunch.

The customer added that the company described this functionality as a major feature in a company blog post:

For apps like Chrome, which are managed through the Fleetsmith Catalog, we handle all aspects of testing, packaging, triage, and deployment automatically. Whenever there’s an update (including security patches), we quickly add them to the Catalog so that our customers can enforce the latest version. In this case, we had the Chrome 78.0.3904.87 patch up within a couple hours of the update dropping.

As one system administrator pointed out, being able to manage Chrome browser security in an automated way was a huge part of this, and that was also removed along with third party app support.

As it turned out, Apple had made it clear that it was discontinuing this feature in an email to Fleetsmith customers on the day of the transition. The email included links to several help articles that were supposed to assist admins with the transition. (The email is included in full at the end of this article.)

The general consensus among admins that I spoke to was that these articles were not terribly helpful. While they described a way to fix the issues, they said that Apple has turned what was a highly automated experience into a highly manual one, effectively eliminating the speed and ease of use advantage of having the update feature in the first place.

Apple did confirm that it had responded to some help ticket requests after the changes this week, saying that it would soon restore some configurations for Catalog apps, and was working with impacted customers as needed. The company did not make clear, however, why they removed this functionality in the first place.

Fleetsmith offered a couple of key features that appealed to Mac system administrators. For starters, it let them set up new Macs automatically out of the box. This allows them to ship a new Mac or other Apple device, and as soon as the employee powers it up and connects to Wi-Fi, it connects to Fleetsmith, where systems administrators can track usage and updates. In addition, it allowed System Administrators to enforce Apple security and OS updates on company devices.

What’s more, it could also do the same thing with third-party applications like Google Chrome, Zoom or many others. When these companies pushed a new update, system administrators could make sure all users had the most recent version running on their machines. This is the key functionality that was removed this week.

It’s not clear why Apple chose to strip out these features outlined in the email to customers, but it seems likely that most of this functionality isn’t coming back, other than restoring some configurations for Catalog apps.

Email that went out to Fleetsmith customers the day of the acquisition outlining the changes:

 

Attempts to reach Fleetsmith founders for comment were unsuccessful. Should that change we will update the article.

Up until 2013, Adobe sold its software in cardboard boxes that were distributed mostly by third party vendors.

In time, the company realized there were a number of problems with that approach. For starters, it took months or years to update, and Adobe software was so costly, much of its user base didn’t upgrade. But perhaps even more important than the revenue/development gap was the fact that Adobe had no direct connection to the people who purchased its products.

By abdicating sales to others, Adobe’s customers were third-party resellers, but changing the distribution system also meant transforming the way the company developed and sold their most lucrative products.

The shift was a bold move that has paid off handsomely as the company surpassed an $11 billion annual run rate in December — but it still was an enormous risk at the time. We spoke to Adobe CIO Cynthia Stoddard to learn more about what it took to completely transform the way they did business.

Understanding the customer

Before Adobe could make the switch to selling software as a cloud service subscription, it needed a mechanism for doing that, and that involved completely repurposing their web site, Adobe.com, which at the time was a purely informational site.

“So when you think about transformation the first transformation was how do we connect and sell and how do we transition from this large network of third parties into selling direct to consumer with a commerce site that needed to be up 24×7,” Stoddard explained.

She didn’t stop there though because they weren’t just abandoning the entire distribution network that was in place. In the new cloud model, they still have a healthy network of partners and they had to set up the new system to accommodate them alongside individual and business customers.

She says one of the keys to managing a set of changes this immense was that they didn’t try to do everything at once. “One of the things we didn’t do was say, ‘We’re going to move to the cloud, let’s throw everything away.’ What we actually did is say we’re going to move to the cloud, so let’s iterate and figure out what’s working and not working. Then we could change how we interact with customers, and then we could change the reporting, back office systems and everything else in a very agile manner,” she said.

Even before the pandemic pushed most employees to work from home, sales people often worked outside of the office. Salesforce introduced a new tool today at the Trailheadx Conference called Salesforce Anywhere that’s designed to let teams collaborate and share data wherever they happen to be.

Salesforce VP of product, Michael Machado says that the company began thinking about the themes of working from anywhere pre-COVID. “We were really thinking across the board what a mobile experience would be for the end users that’s extremely opinionated, really focuses on the jobs to be done and is optimized for what workers need and how that user experience can be transformed,” Machado explained.

As the pandemic took hold and the company saw how important collaboration was becoming in a digital context, the idea of an app like this took on a new sense of urgency. “When COVID happened, it really added fuel to the fire as we looked around the market and saw that this is a huge need with our customers going through a major transformation, and we wanted to be there to support them in Salesforce with kind of a native experience,” he said.

The idea is to move beyond the database and help surface the information that matters most to individual sales people based on their pipelines. “So we’re going to provide real time alerts so users are able to subscribe to their own alerts that they want to be notified about, whether it’s based on a list they use or a report that they work off of [in Salesforce], but also at the granularity of a single field in Salesforce,” he said.

Employees can then share information across a team, and have chats related to that information. While there are other chat tools out there, Machado says that this tool is focused on sharing Salesforce data, rather than being general purpose like Slack or any other business chat tool.

 

Salesforce sees this as another way to remove the complexity of working in CRM. It’s not a secret that sales people don’t love entering customer information into CRM tools, so the company is attempting to leverage that information to make it worth their while. If the tool isn’t creating a layer of work just for record keeping’s sake, but actually taking advantage of that information to give the sales person key information about their pipeline when it matters most, that makes the record keeping piece more attractive. Being able to share and communicate around that information is another advantage.

This also creates a new collaboration layer that is increasingly essential with workers spread out and working from home. Even when we return to some semblance of normal, sales people on the road can use Anywhere to collaborate, communicate and stay on top of their tasks.

The new tool will be available in beta in July. The company expects to make it generally available some time in the fourth quarter this year.