What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2024-02-29 compared with 2023-02-27 · 87 added, 103 removed, 284 unchanged (40% of the section changed)

1 unchanged sentence

Our portfolio supports customers operating in the cloud, on-premise or in hybrid environments providing rapid return on their investment as well as investment protection with best-in-class technical performance.

As cyber-attacks increase in volume and complexity, we integrate security as a key attribute in essentially all our solutions that further enable our customers to continue to adapt to market trends in the cloud, internet of things and the ever-increasing need for more data, building upon our strong global footprint and leadership in application and network infrastructure.

As cyber-attacks increase in volume and complexity, we integrate security as a key attribute in essentially all our solutions that further enable our customers to continue to adapt to market trends in the cloud, internet of things and the ever-increasing need for more efficient data processing, building upon our strong global footprint and leadership in application and network infrastructure.

Our customers include leading service providers (cloud, telecommunications, multiple system operators, cable), government organizations, and enterprises.

3 unchanged sentences

The application networking and security industry is experiencing dynamic shifts in the way applications are developed, delivered, monetized and protected.

Our corporate strategy and technology address these evolving needs of our customers and industry, including:

Innovation in artificial intelligence (“AI”) is driving new ways to gain application delivery efficiency and enhance protection.

Our corporate strategy and technology address these evolving trends and the needs of our customers and industry, including:

Increased Adoption of Cloud Applications .

2 unchanged sentences

Some of these challenges relate to how a business effectively manages secure application services across various data centers and cloud types, whether private, public or hybrid clouds.

Over time, more and more applications may be born in the cloud, while some applications that existed in traditional data centers may migrate to clouds as well.

Over time, more and more applications may be born or provided in the cloud, while some applications that existed in traditional data centers may migrate to clouds as well.

To address this shift, businesses will need solutions that bridge both traditional and cloud-based application environments and centrally manage all secure application services holistically in this multi-cloud world.

1 unchanged sentence

Traditional IT vendors may need to shift from hardware-centric models to software-defined approaches across several operating environments to improve agility for critical applications, and subsequently, their business operations.

Ensuring product portfolios adapt and diversify to include newer virtualized software, container-based software and cloud-based offerings are key factors determining future market leadership and competitive landscapes.

Growing Importance of Automation and Orchestration.

As applications increasingly move to a multi-cloud environment, the deployment of orchestration and automation tools has become essential to efficiently automating the deployment and operations of security and application services.

Enabling product portfolios to adapt and diversify to include newer virtualized software, container-based software and cloud-based offerings are key factors determining future market leadership and competitive landscapes.

Growing Importance of Automation, Orchestration.

As applications increasingly move to a multi-cloud environment, the deployment of orchestration and automation tools enable efficient automation for the deployment and operations of security and application services.

There is a need for increased operational efficiency and agility, improved detection and reporting of security anomalies, enhanced end-user experiences and reduced total cost of ownership (“TCO”), simplified management of distributed application services, improved capacity planning and optimized multi-cloud software lifecycle management.

By deploying newly developed secure application delivery automation and predictive analytics tools, enterprises are able to visualize their application performance, detect anomalous trends and fully automate their application delivery and network security.

The Rise of DDoS Attacks.

The cyberthreat landscape continues to intensify and grow.

By deploying newly developed secure application delivery automation and predictive analytics tools, enterprises can visualize their application performance, detect anomalous trends and automate their application delivery and network security.

The Rise of DDoS Attacks and use of Artificial Intelligence.

The cyberthreat landscape continues to plague enterprises and society as a whole.

Malicious actors and cybercriminals such as hacktivists, amateur hackers, and foreign military and intelligence organizations target data centers of every type.

3 unchanged sentences

Compromised endpoints can be computing devices or “Internet of Things” driven devices like video cameras.

Any internet-connected device can be vulnerable to hackers and utilized as part of a botnet.

Any internet-connected device can be vulnerable to

hackers and utilized as part of a botnet.

Innovations in AI enable security teams to temper the rise in DDoS attack signals and apply techniques that accurately address compromised endpoints in a rapid manner.

Rapid growth of TLS, SSL, Encrypted Applications and Hidden Threats .

3 unchanged sentences

Businesses need a way to decrypt traffic and apply outbound security policies efficiently, and require an effective way to inspect, identify, and remediate malicious traffic, then re-encrypt traffic and deliver it quickly to its destination.

Conducting this process efficiently without placing a “security performance tax” on the user experience is a critical requirement.

Conducting this process efficiently without placing a “security performance tax” on the user experience is a capability valued by our customers.

The Advent of 5G Networks and a Smart World .

The growing deployment of commercial 5G networks will bring massive increases in network throughput and significant new business opportunities for mobile carriers.

The growing deployment of commercial 5G networks will bring massive increases in network throughput and significant new business opportunities for mobile carriers and others.

It will also require a new generation of security infrastructure capable of handling the growing capacity requirements and complex management needs of 5G networks.

2 unchanged sentences

Meanwhile, the scope and size of DDoS attacks may also increase dramatically with the proliferation of connected devices and traffic, due in large part to the expansion of Internet of Things (“IoT”)/Machine-to-Machine traffic coming from new 5G-delivered Smart World applications.

To address these requirements, mobile operators will need new solutions that provide hyperscale and increased performance, richer feature sets, and rich automation, analytics and threat intelligence.

To address these requirements, mobile and other operators will need new solutions that provide hyperscale and increased performance, richer feature sets, and rich automation, analytics and threat intelligence.

Need for Advanced Multi-Cloud Secure Application Service Solutions.

2 unchanged sentences

• Ability to Centrally Manage Traditional and Cloud Environments.

As more applications are born in the cloud, and they operate alongside traditional applications supported by on-premise and appliance-based data centers, application delivery and security solutions will be called upon to span traditional and cloud-based environments.

As more applications are provided in the cloud, and they operate alongside traditional applications supported by on-premise and appliance-based data centers, application delivery and security solutions will be called upon to span traditional and cloud-based environments.

In doing so, solutions must centrally control and manage secure application services across any combination of traditional data centers and a myriad of different clouds.

3 unchanged sentences

The effectiveness of application performance and security depends greatly on the level of visibility a business has into its application traffic.

That visibility must be able to span any number of data centers and cloud types to ensure a holistic view of security threats and performance issues affecting applications.

That visibility should effectively span any number of data centers and cloud types to provide a holistic view of security threats and performance issues affecting applications.

The deeper and clearer the visibility, the better the analytics and actionable information that can be applied to enhancing application performance and protection.

Secure application service solutions must be driven by solid visibility and per-app analytics.

Secure application service solutions should provide solid visibility and per-app analytics.

• Ability to Scale.

Performance and security at scale are paramount in today’s dynamic application environments.

Solutions need to analyze application traffic quickly and enhance performance and security in traditional and cloud-based application environments in a centrally managed manner.

With the rapid adoption of IoT devices, and the advent of 5G, we believe a solution’s ability to perform at scale will be increasingly imperative.

Performance and security at scale are highly desirable to our customers given today’s dynamic application environments.

Customers want solutions that analyze application traffic quickly and enhance performance and security in traditional and cloud-based application environments in a centrally managed manner.

With the rapid adoption of IoT devices, and the advent of 5G, we believe a solution’s ability to perform at scale will be increasingly important.

• Sophisticated Security Functionality.

Secure application service solutions must detect and mitigate sophisticated cybersecurity threats, such as malicious threats hiding in encrypted traffic and DDoS attacks.

To defend against the rising volume of sophisticated cyber-attacks, solutions require exceptional performance and scale without dramatically increasing footprint and total cost of ownership.

Secure application service solutions must leverage machine learning and AI to rapidly detect and mitigate sophisticated cybersecurity threats, such as malicious threats hiding in encrypted traffic and DDoS attacks.

To defend against the rising volume of sophisticated cyber-attacks, customers want solutions that provide exceptional performance and scale without dramatically increasing footprint and total cost of ownership.

Product Portfolio

2 unchanged sentences

Our software solutions are available to be delivered in a variety of form factors, such as embedded in optimized hardware appliances, as bare metal software, containerized software, virtual appliances and cloud-native software.

While our revenue to date has predominantly derived from delivery of our proprietary software on a perpetual license basis embedded in

optimized hardware, this model has begun to evolve in various ways, including among others, term licenses, subscriptions, and software-only models.

While our revenue to date has predominantly derived from delivery of our proprietary software on a perpetual license basis embedded in optimized hardware, this model has begun to evolve in various ways including among others, term licenses, subscriptions, and software-only models.

Our comprehensive and flexible application solutions portfolio, combined with our Harmony Controller, positions us to address the growing need for shifting workloads to a mix of private clouds and public clouds.

3 unchanged sentences

Thunder Application Delivery Controller (“ADC”)

Lightning Application Delivery Controller (“Lightning ADC”)

Thunder Carrier Grade Networking (“CGN”)

Thunder Threat Protection System (“TPS”)

Thunder SSL Insight (“SSLi”)

Thunder Convergent Firewall (“CFW”)

Intelligent management and automation tools:

Intelligent management and automation tool:

Harmony Controller

A10 Defend Suite of Products:

A10 Defend Threat Control

A10 Defend Orchestrator (formerly aGalaxy management system)

A10 Defend Detector

A10 Defend Mitigator (formerly Thunder TPS)

The following is a further overview of our portfolio:

3 unchanged sentences

ADCs are typically deployed in front of a server farm within a data center, including web, application and database servers.

Lightning Application Delivery Controller.

Lightning ADC services ADC functionality in the cloud, increasing the agility and reducing costs for customers.

Introduced after the acquisition of Appcito, Inc.

(“Appcito”) in 2016, Lightning ADC is a cloud-native software-as-a-service (“SaaS”) platform designed to boost the delivery and security of applications and microservices across public, private and hybrid clouds, enabling ADC-as-a-service.

Central to the Lightning ADC is the SaaS-based A10 Harmony Controller, which provides central management, policy configuration, and a big data repository and analytics engine.

Thunder Carrier Grade Networking .

1 unchanged sentence

Our CGN solution is typically deployed in service provider networks to provide standards-compliant address and protocol translation services between varying types of IP addresses.

It has been successfully implemented by many large service providers around the world.

Thunder Threat Protection System .

Thunder TPS solution provides high-volume, large-scale protection for customers’ networks and server resources against massive DDoS attacks.

TPS is typically deployed at the perimeter of the networks to protect internal network resources from large-scale, volumetric and multi-vector attacks.

In 2017, we enhanced the TPS solution with the launch of a dedicated detector function, improved workflow and automation in aGalaxy TPS.

In 2018, we enhanced our TPS detection capabilities with the One-DDoS solution, which enables Thunder ADC, CGN, and CFW solutions to act as in-line detectors to enhance application and infrastructure detection.

We also added TPS Dynamic Attack Pattern Recognition (DAPR) for automatic attack learning, to identify and thwart zero-day attacks, and enhanced machine learning (ML) with always-on adaptive learning.

TPS is augmented by the A10 Threat Intelligence Service which can block known

bad connections (i.e., IP addresses) from entering protected networks.

This service is based on software licensed from ThreatSTOP, Inc.

and A10 threat research.

It has been successfully implemented by many large service providers and enterprises around the world.

Thunder SSL Insight.

Thunder SSLi eliminates the inherent blind spots created by SSL encryption by offloading CPU-intensive SSL decryption functions that enable security devices to inspect and remove malware within encrypted traffic.

Thunder SSLi focuses on the inherent blind spots created by SSL encryption by offloading CPU-intensive SSL decryption functions that enable security devices to inspect and remove malware within encrypted traffic.

Thunder SSLi decrypts SSL-encrypted traffic and forwards it to a third-party security device, such as a firewall, for deep packet inspection (“DPI”).

10 unchanged sentences

• A high-performance IPsec VPN, a security product designed to strengthen security postures and protect application data.

Intelligent Management and Automation Tools

Intelligent Management and Automation Tool

Harmony Controller.

6 unchanged sentences

A10 managed software-as-a-service (“SaaS”), or as a self-managed, on-premise deployment.

a Galaxy TPS multi-device network management solution enables a network administrator to manage multiple Thunder TPS devices.

aGalaxy TPS is designed to help lower operational costs by freeing up staff from repetitive tasks while increasing precision and accuracy with centralized and automated tasks, reducing the potential for human error.

aGalaxy TPS is available as a hardware appliance or a software-only virtual machine.

aGalaxy TPS highlights included advanced workflow and automated defense capabilities.

A10 Defend Suite of Products

A10 Defend Threat Control.

A10 Defend Threat Control is a standalone SaaS platform that proactively establishes a robust first layer of defense by offering actionable analytics and blocklists.

Defend Threat Control is based on proprietary A10 research.

A10 Defend Orchestrator (formerly aGalaxy management system).

A10 Defend Orchestrator integrates with A10 Defend Detector and A10 Defend Mitigator for intelligent and automated DDoS protection, providing a centralized point of control for seamless DDoS defense management and execution.

A10 Defend Orchestrator is designed to help lower operational costs by freeing up staff from repetitive tasks while increasing precision and accuracy with centralized and automated tasks, reducing the potential for human error.

A10 Defend Orchestrator highlights included advanced workflow and automated defense capabilities.

A10 Defend Detector.

A10 Defend Detector is our high-performance Netflow, Sflow, IPFIX-based DDoS detector and is used to easily manage the scale and heterogenous nature of SP networks, resulting in a unified DDoS protection solution.

Defend Detector can be used by SPs to deliver DDoS services to downstream customers.

A10 Defend Mitigator (formerly Thunder TPS).

A10 Defend Mitigator is our h igh precision, automated, scalable, and intelligent DDoS mitigation solution that is delivered as hardware or virtual appliances ranging from 1Gbps to over 1Tbps.

A10 Defend Mitigator is typically deployed at the perimeter of the networks to protect internal network resources from large-scale, volumetric and multi-vector attacks.

In 2017, we enhanced the A10 Defend Mitigator solution with the launch of a dedicated detector function, improved workflow and automation in A10

Defend Orchestrator.

In 2018, we enhanced our detection capabilities with the One-DDoS solution, which enables Thunder ADC, CGN, and CFW solutions to act as in-line detectors to enhance application and infrastructure detection.

We also added A10 Defend Mitigator Dynamic Attack Pattern Recognition (“DAPR”) for automatic attack learning, to identify and thwart zero-day attacks, and enhanced machine learning (“ML”) with always-on adaptive learning.

Defend Mitigator is augmented by the A10 Threat Control and software licensed from ThreatSTOP, Inc., which can block known bad connections (i.e., IP addresses) from entering protected networks.

Product Form Factors

6 unchanged sentences

vThunder virtual appliances operate on all major hypervisor platforms, including VMware, Microsoft Hyper-V and Linux KVM.

vThunder is also available from cloud providers like Amazon Web Services (“AWS”), Microsoft Azure, and service providers.

vThunder is also available from cloud providers like Amazon Web Services (“AWS”), Microsoft Azure, Google Cloud Compute (“GCP”) and service providers.

The vThunder Series products support throughput ranges from 200 Mbps to 100 Gbps.

Thunder for Bare Metal is a software version of our ADC and CGN solutions that is designed to run on a variety of Intel x86 servers, allowing the customer to design and select their own hardware platform.

Lightning is a cloud-native SaaS ADC product designed to boost the delivery and security of applications and microservices across public, private and hybrid clouds.

Our Lightning ADC and the A10 Harmony Controller’s multi-cloud management capabilities allow flexible application deployment across multiple clouds with the ability to maintain and manage diverse workloads.

Our Lightning ADC will run natively on public cloud environments, such as Amazon Web Services, Microsoft Azure, and Google Cloud Platforms.

Our ADC and CGN solutions are available on select older models from the AX Series line.

Thunder container is software that can be deployed as a container for cCGN, cADC and cTPS on customers’ own hardware platforms and OS stacks.

Underlying Technology

14 unchanged sentences

Scalable and Efficient Memory Usage.

To improve the performance of the multi-core processor architecture, we have developed a shared memory technology to allow all processors to share common memory and the state of the system simultaneously.

This avoids the overhead associated with Inter-Processor Communication architectures deployed in first-generation approaches.

We optimize memory to be visible to all cores simultaneously, while minimizing communication overhead and contention among processors for allocated memory space.

To improve the performance of the multi-core processor architecture, we have developed a shared memory technology to allow processors to share common memory and the state of the system simultaneously.

This avoids the overhead associated with Inter-Processor Communication architectures deployed in

first-generation approaches.

We optimize memory to be visible to processor cores simultaneously, while minimizing communication overhead and contention among processors for allocated memory space.

All processors share a common memory pool, which dynamically allocates memory space based on application processing requirements without constraints.

2 unchanged sentences

Once data is processed and placed into a shared memory, a processor can begin to apply ACOS common services and function-specific logic.

To ensure that every processor is utilized to perform every function and thereby achieve greater system utilization, ACOS uses all processor cores

symmetrically for all functions and services.

To enable every processor utilized to perform key functions and thereby achieve greater system utilization, ACOS uses processor cores symmetrically for functions and services.

The ACOS common services perform a set of key operational functions, including configuration management, network I/O, aFleX scripting, Virtual Chassis System (“aVCS”), aXAPI for management integration, Application Delivery Partitions (“ADPs”), virtualization to enable multi-tenancy, and common resource management such as buffer, system memory, timer management and other internal system management tasks.

ACOS features a modular software design, which improves reliability by ensuring that modifications made to one module will not have unwanted side effects on other system functions.

ACOS features a modular software design, which improves reliability by preventing modifications made to one module from causing unwanted side effects on other system functions.

Other noteworthy ACOS Technologies .

13 unchanged sentences

The average maintenance contract term is approximately 18 months.

We invoice channel partners or customers directly for maintenance contracts at the time of hardware purchase, and all maintenance contracts are non-cancellable and are generally renewed through the same channel as originally purchased.

We invoice resellers or customers directly for maintenance contracts at the time of hardware purchase, and all maintenance contracts are non-cancellable and are generally renewed through the same channel as originally purchased.

Software updates are provided to all customers with a current maintenance contract on a when-and-if-available basis.

1 unchanged sentence

Thunder TPS features an enhanced support offering that includes access to the A10 DDoS Security Incident Response Team (“SIRT”).

Augmenting the standard support, the offering includes access to a dedicated team of DDoS mitigation experts specializing in DDoS prevention, offering immediate assistance for mitigating attacks, and a subscription to the A10 Threat Intelligence Service, leveraging collective intelligence to block known threats.

Augmenting the standard support, the offering includes access to a dedicated team of DDoS mitigation experts specializing in DDoS prevention, offering efficient assistance for mitigating attacks, and a subscription to the A10 Threat Intelligence Service, leveraging collective intelligence to block known threats.

Our professional services team provides a full range of fee-based consulting services, including pre-sale network assessment, comprehensive network analysis and capacity planning, post-sale migration and implementation services, on-site installation and ongoing support.

Our customers operate in a variety of industries, including telecommunications, technology, industrial, government, retail, financial, gaming, and education.

As of December 31, 2022, we had sold our products to over 8,000 customers worldwide since our inception.

Our customers include the top two United States wireless carriers, four of the top 10 United States cable providers, and the top four service providers in Japan, in addition to other global enterprises, gaming companies and governmental organizations.

During the years ended December 31, 2023, 2022 and 2021, purchases from our 10 largest end-customers accounted for approximately 33%, 41% and 39% of our total revenue, respectively.

In 2022, two distribution channel partners accounted for 15% and 13% of our total revenue.

In 2023, one distribution channel partner accounted for 19% of our total revenue.

In 2022, two distribution channel partners accounted for 15% and 13% of our total revenue.

In 2021, one distribution channel partner accounted for 12% of our total revenue.

5 unchanged sentences

Our main competitors fall into the following categories:

• Companies that sell network security solutions and services including DDoS protection, such as Arbor Networks Inc., a subsidiary of Netscout Systems, Symantec Corporation (through its acquisition of Blue Coat Systems, Inc.

in 2016), F5 Networks, Inc.

• Companies that sell network security solutions and services including DDoS protection, such as Arbor Networks Inc., a subsidiary of Netscout Systems, F5 Networks, Inc.

(“F5 Networks”) and Radware, Ltd;

4 unchanged sentences

(“Fortinet”);

• Companies that sell products in the traditional application delivery market, such as F5 Networks, Citrix Systems, Inc.

(“Citrix Systems”), Avi Networks Inc.

(“Avi Networks”) as well as many startups.

• Companies that sell products in the traditional application delivery market, such as F5 Networks, NetScaler from Cloud Software Group, Inc., VMware from Broadcom (through its acquisition of Avi Networks) as well as many startups.

The key competitive factors in our markets include:

• Ability to innovate and respond to customer needs rapidly;

• Ability to detect and mitigate large-scale cyber security threats;

• Ability for products to scale with high-speed network traffic;

• Ability to prepare for, detect and mitigate large-scale cyber security threats;

• Ability for products to scale to facilitate high-speed network traffic;

• Ability to address on-premise and cloud application environments in a secure, centrally managed manner;

6 unchanged sentences

Our high-touch sales force engages customers directly and through distribution channels.

Our sales team is comprised of inside sales and field sales personnel who are organized by geography and maintain sales presence in 28 countries as of

December 31, 2022, including in the following countries and regions:

Our sales team is comprised of inside sales and field sales personnel who are organized by geography and maintain sales presence in 28 countries as of December 31, 2023, including in the following countries and regions:

United States, Western Europe, the Middle East, Japan, Taiwan, South Korea, Southeast Asia and Latin America.

Our sales organization includes sales engineers with deep technical domain expertise who are responsible for pre-sales technical support, solutions engineering, proof-of-concept work and technical training for our distribution channel partners.

Our sales team is also comprised of a channel sales organization that is expanding our market reach through partners.

Our sales team is also comprised of a channel sales organization that is expanding our market reach through resellers.

We may continue to grow our sales headcount, including in geographies where we currently do not have a sales presence.

Some customer sales are originated and completed by our Original Equipment Manufacturer (“OEM”) and distribution channel partners with little or no direct engagement with our sales personnel.

We fulfill nearly all orders globally through our distribution channel partners, which include distributors, value added resellers and system integrators.

Revenue fulfilled through our distribution channel partners accounted for 83%, 89% and 91% of our total revenue for the years ended December 31, 2022, 2021 and 2020, respectively.

Some customer sales are originated and completed by our Original Equipment Manufacturer (“OEM”) and distribution channels with little or no direct engagement by our sales personnel.

We fulfill nearly all orders globally through our distribution channels, which include distributors, value added resellers and system integrators.

Revenue fulfilled through our distribution channels accounted for 95%, 83% and 89% of our total revenue for the years ended December 31, 2023, 2022 and 2021, respectively.

Our strategy is focused on driving greater demand for our products and services, and enabling sales to win as that demand broadens.

Our marketing drives global demand generation campaigns, as well as additional awareness and demand via joint marketing campaigns with channel partners and strategic alliance partners worldwide.

Our marketing drives global demand generation campaigns, as well as additional awareness and demand via joint marketing campaigns worldwide.

Our marketing also drives global awareness through industry analyst engagement, media outreach, blogs, social media and events.

5 unchanged sentences

(“AEWIN”) and iBase.

These companies manufacture and assemble our hardware products using design specifications, quality assurance programs and standards established by us.

These companies manufacture and assemble our hardware products using design specifications, quality assurance programs and standards established and owned or licensed by us.

Our manufacturers procure components and assemble our products based on our demand forecasts and purchase orders.

9 unchanged sentences

Orders may be subject to cancellation, rescheduling by customers and product specification changes by customers.

Although we believe that the backlog orders are firm, purchase orders may be canceled by the customer prior to shipment without significant penalty.

Although we believe that the backlog orders are firm, purchase orders may be canceled by the customer prior to shipment without significant cost.

For this reason, we believe that our product backlog at any given date is not a reliable indicator of future revenues.

3 unchanged sentences

We rely on a combination of patent, copyright, trademark and trade secret laws, and restrictions on disclosure to protect our intellectual property rights.

As of December 31, 2022, we had 212 United States (“U.S.”) patents issued and 4 U.S.

patent applications pending, and 77 overseas patents issued and 12 overseas patent applications pending.

As of December 31, 2023, we had 210 United States (“U.S.”) patents issued, 5 U.S.

patent applications pending, 79 overseas patents issued and 9 overseas patent applications pending.

Our issued U.S.

patents, excluding 14 patents that we acquired, expire between 2024 and 2042.

Our issued overseas patents, excluding 5 patents

that we acquired, expire between 2027 and 2037.

Our issued overseas patents, excluding 5 patents that we acquired, expire between 2024 and 2037.

Our future success depends in part on our ability to protect our proprietary rights to the technologies used in our principal products.

17 unchanged sentences

We believe these practices will deliver the highest value for our employees, customers, partners and shareholders.

Our global footprint provides an additional level of sustainability for business performance, and we ensure that we are driving this responsibility across all our global locations.

Our global footprint provides an additional level of sustainability for business performance, and we drive this responsibility across all our global locations.

We use as a guide the code of conduct policies set forth by the Responsible Business Alliance, the world’s largest industry coalition dedicated to corporate social responsibility in global supply chains, and we expect all of our suppliers to do so as well.

54 unchanged sentences

We are committed to maintaining a healthy, safe, and secure work environment that protects our employees and the public from harm.

At the outset of the pandemic, we immediately followed all local shelter-in-place orders in each of the locations where we do business.

As stated below, we permit remote working as conditions of the pandemic continue to fluctuate around the world.

We are aligned with the guidance from the Centers for Disease Control in the U.S.

and all other local requirements where we do business across the globe.

We use a multi-faceted approach to ensure the health and safety of our employees, from our Code of Conduct to our policies governing the way we act within and outside of our company.

We use a multi-faceted approach to ensure the health and safety of our employees, from our Code of Business Conduct and Ethics to our policies governing the way we act within and outside of our company.

We comply with applicable health, safety, and environmental laws as well as related company policies and procedures.

1 unchanged sentence

Moreover, we strive to conduct our everyday business activities in an environmentally sustainable way through wellness programs and webinars through our health insurance providers.

Our Response to COVID-19

The health and well-being of our employees has always been and continues to be a top priority.

To ensure the health and well-being of all of our employees during the COVID-19 pandemic, we have taken the following measures:

• Implemented work-from-home and social distancing policies for our organization;

• Taken steps to ensure employee’s ability to remotely work-from-home when feasible;

• From time to time, placed restrictions on travel by our employees and in-person meetings;

• Prepared our San Jose, CA headquarters facility to be compliant with all local and statewide COVID-19 requirements for those essential workers that are unable to work-from-home.

We will continue to monitor progress in managing the pandemic and will revise our measures in accordance with national and local public health guidance.

Our Board of Directors believes that our board should be a diverse body, and our Nominating and Corporate Governance Committee considers a broad range of backgrounds and experiences when selecting nominees for our board.

5 unchanged sentences

The Company’s governance and code of conduct policies are outlined in the Code of Business Conduct and Ethics, Corporate Governance Guidelines, Whistleblower Policy and the Employee Handbook.

Employees many submit concerns to generalcounsel@a10networks.com or via the company’s third-party hotline as noted the Employee Handbook.

Employees may submit concerns to generalcounsel@a10networks.com or via the Company’s third-party hotline as noted the Employee Handbook.

Corporate Information

4 unchanged sentences

Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, as well as any amendments to such reports and all other filings pursuant to Section 13(a) or 15(d) of the Securities Act.

These filings are also

available for download free of charge on our investor relations website.

These filings are also available for download free of charge on our investor relations website.

Additionally, copies of materials filed by us with the SEC may be accessed at the SEC’s website at www.sec.gov.

We announce material information to the public about A10, our products and services and other matters through a variety of means, including our website ( www.A10networks.com ), the investor relations section of our website (https:// investors.A10networks.com ), press releases, filings with the Securities and Exchange Commission, public conference calls, and social media, including our corporate Twitter account ( @A10Networks) and our corporate Facebook page (https://www.facebook.com/a10networks).

Information provided includes press releases and other information about financial performance, information on environmental, social and governance and details related to the Company’s annual meeting of shareholders.

We announce material information to the public about the Company, our products and services and other matters through a variety of means, including our website ( www.A10networks.com ), the investor relations section of our website (https:// investors.A10networks.com ), press releases, filings with the Securities and Exchange Commission, public conference calls, and social media, including our corporate X (formerly Twitter) account ( @A10Networks) and our corporate Facebook page (https://www.facebook.com/a10networks).

Information provided includes press releases and other information about financial performance, information on environmental, social and governance and details related to the Company’s annual

meeting of shareholders.

The contents of our website and social media contents are not intended to be incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC, and any references to our websites are intended to be inactive textual references only.

2 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business