2014 ANNUAL REPORT FIREEYE THREAT INTELLIGENCE Intelligence to identify, block EAT IN E THR TELLI and respond to attacks EEY GEN FIR CE MOBILE NETWORK MOBILE NETWORK Identiffy, analyze and Combat web-based block mobile attacks cyber attacks ENDPOINT Detect, analyze and EMAIL Identiffy, analyze and resolve incidents on EMAIL block email attacks the endpoint ENDPOINT POWEREDD BBY ANALYTICS CONTENT Identify threats and MVX TECHNOLOGTECHNOLOGY Combat malware in improve response in data centers and file real time servers ANALYTICS CONTENT FORENSICS F IREEY VICE E AS A SER FORENSICS Actionable intelligence to improve incident response FIREEYE AS A SERVICE Security managed by you, with you orr forr you -8' @',8'!;8'='2ধ32£!Ĥ381 FireEye solutions protect an organization’s valuable assets from the consequences of the most damaging cyber attacks, including advanced persistent threats and targeted multi-vector attacks. The combination of our threat prevention produts, dynamic and contextual threat intelligence, DQGDGYDQFHGVHFXULW\H[SHUWLVHKHOSVRUJDQL]DWLRQVĆQGDQGVWRSDWWDFNHUVDWHYHU\VWDJHRIWKH attack, in the shortest possible time. As an integral piece of our Adaptive Defense strategy, our state-of-the-art network, endpoint and cloud security products detect and block cyber attacks that bypass legacy signature-based security products, such as anti-virus software, intrusion prevention/ GHWHFWLRQV\VWHPV ,36,'6 DQGQHWZRUNĆUHZDOOV FireEye | 2014 ANNUAL REPORT 1 Our goal is to protect our customers from advanced cyber attacks. Dear Stockholders, I am pleased to report that 2014 was a very strong year for FireEye. Our passion for our mission – to protect our customers from advanced persistent threats (APTs) and targeted attacks – continues to fuel our growth. By year-end, the powerful synergies of FireEye and Mandiant were generating new business and delivering strong growth in the sales of security platforms and VHUYLFHV)LUH(\HDFKLHYHGLWVĆUVWPLOOLRQELOOLQJVTXDUWHULQWKHVHFRQG TXDUWHURIDQGPRUHWKDQGRXEOHGWKDWDPRXQWWRRYHUPLOOLRQLQWKH IRXUWKTXDUWHU)RUWKH\HDUELOOLQJVLQFUHDVHGSHUFHQWRYHUWR PLOOLRQDQGUHYHQXHLQFUHDVHGSHUFHQWWRPLOOLRQ1 :HDGGHGPRUHWKDQQHZFXVWRPHUVGXULQJWKH\HDULQFOXGLQJDVLJQLĆFDQW number of global 2000 organizations. We also extended our reach into new market segments and expanded our channel partner programs worldwide. Finally, we improved our non-GAAP operating margin while continuing to invest in establishing our market, expanding our platform and increasing our global presence. 1 %LOOLQJVDUHDQRQ*$$3PHWULFPDWKHPDWLFDOO\HTXLYDOHQWWRUHY HQXHSOXVFKDQJHLQGHIHUUHGUHYHQXH A reconciliation of billings to revenue can be found in the table at the end of this publication. 2 FireEye | 2014 ANNUAL REPORT Security Reimagined Customers We set out to reimagine security with our MVX™ technology 3,100 and Adaptive Defense™ security model, and build a scalable and sustainable growth engine based on our technology, expertise, and intelligence. Looking back on 2014, I believe 2,000 we “crossed the chasm” and delivered on both objectives. From threat research to incident response, no other company did more than FireEye to address the most serious breaches the world saw unfold last year. 900 500 We continued to reimagine cyber security throughout the year with new and enhanced security platforms, advanced ‘11 ‘12 ‘13 ‘14 analytics and forensics tools, and value-added services. Perhaps most important was the introduction of FireEye As of 12/31. Rounded to nearest 100. as a Service™, which combined our products, people, and 2013 includes Mandiant SURFHVVHVLQWKHLQGXVWU\èVĆUVWJOREDOVHFXULW\DVDVHUYLFH solution. FireEye as a Service delivers protection from APTs and targeted attacks around the clock, around the world, to FXVWRPHUVRIDOOVL]HVLQDQ\QHWZRUNFRQĆJXUDWLRQ,WLV Employees relevant to any organization with valuable data to protect, 2,400 regardless of industry or geographic region. Our ability to deliver FireEye technology as subscription- 1,700 based services created new partnership opportunities with some of the world’s leading managed security service providers. In 2014, we signed agreements with Singapore Telecommunications Limited (Singtel), Deutsche Telekom’s 76\VWHPVDQG9HUL]RQ(QWHUSULVH6ROXWLRQV,QWKHĆUVWKDOI 400 200 RIZHDGGHG7HOHIRQLFD%XVLQHVV6ROXWLRQVDQG%ULWLVK Telecom to the roster of FireEye managed service provider ‘11 ‘12 ‘13 ‘14 partners. These partnerships complement our internal sales teams and value-added reseller network to extend our reach As of 12/31. Rounded to nearest 100. 2013 includes Mandiant into new regions and customer segments. FireEye | 2014 ANNUAL REPORT 3 TODAY’S REALITY of organizations were breached Today’s attackers have evolved their 97% Source: FireEye Cybersecurity’s Maginot Line: A Real-World tactics from just a few years ago. Assessment of the Defense-in-Depth Model. Broad, opportunistic attacks designed for mischief have been eclipsed by median number sophisticated attacks that are advanced, of days to detect targeted, stealthy, and persistent. 205 a breach Source: Mandiant 2015 M-Trends Report FireEye Adaptive Defense is a new cyber security model that leverages our of victims learn they technology, expertise, and intelligence to were breached from 69% a third party protect against these attacks. Source: Mandiant 2015 M-Trends Report The Opportunity Ahead FireEye is delivering a powerful value proposition – one that goes beyond detection to address the entire threat management cycle. Our Threat Prevention platforms protect all major attack points, including web and email gateways, data centers, Windows and Mac OS X endpoints, and Android and Apple mobile devices. Our security experts span the world with a direct presence in every major region, and our threat intelligence platform integrates attack data from more than nine million virtual machines and four million endpoint agents. I would like to thank our partners and our more than 2,400 FireEye employees for their commitment and hard work. Together, we have built FireEye into the world’s leader in protecting against and responding to advanced cyber attacks. I also want to thank our customers and our stockholders for their continued support. We’ve had an incredible journey so far, and I believe even greater opportunity lies ahead. ,ORRNIRUZDUGWRUHSRUWLQJRXUSURJUHVVLQ Sincerely, David G. DeWalt &KDLUPDQRIWKH%RDUGDQG&KLHI([HFXWLYH2IĆFHU 4 FireEyeE e | 2014 ANNUAL REPORT SELECTED FINANCIAL DATA FireEye completed the acquisition of Mandiant on 12/30/13. Balance sheet metrics for year-end 2013 include the net assets, deferred revenue, cash and cash equivalents, and stockholders’ equity of Mandiant. Dollars in thousands, except employee data 2011 2012 2013 2014 Revenue $33,658 $83,316 $161,552 $425,662 Deferred revenue $30,102 $76,406 $187,514 $352,543 Cash and cash equivalents $10,676 $60,200 $173,918 $402,208 Total assets $35,646 $125,273 $1,376,313 $1,758,881 Total stockholders’ equity $(14,651) $5,390 $1,048,102 $1,250,828 Employees 183 416 1,679 2,418 $426 Revenue Deferred $353 (millions) Revenue (millions) $188 $162 $83 $76 $34 $30 ‘11 ‘12 ‘13 ‘14 ‘11 ‘12 ‘13 ‘14 Proxy Statement 2015 PROXY STATEMENT FIREEYE, INC. 1440 McCarthy Blvd. Milpitas, California 95035 NOTICE OF ANNUAL MEETING OF STOCKHOLDERS To Be Held at 11:00 a.m. Pacific Time on Thursday, June 11, 2015 Dear Stockholder: You are cordially invited to attend the 2015 annual meeting of stockholders (the “Annual Meeting”) of FireEye, Inc., a Delaware corporation (“FireEye”). The Annual Meeting will be held on Thursday, June 11, 2015 at 11:00 a.m. Pacific Time, at 1390 McCarthy Blvd., Milpitas, California 95035, for the following purposes, as more fully described in the accompanying proxy statement: 1. To elect two Class II directors to serve until the 2018 annual meeting of stockholders or until their successors are duly elected and qualified; 2. To ratify the appointment of Deloitte & Touche LLP as our independent registered public accounting firm Proxy Statement for our fiscal year ending December 31, 2015; and 3. To transact such other business as may properly come before the Annual Meeting or any adjournments or postponements thereof. Our board of directors has fixed the close of business on April 13, 2015 as the record date for the Annual Meeting. Only stockholders of record on April 13, 2015 are entitled to notice of and to vote at the Annual Meeting. Further information regarding voting rights and the matters to be voted upon is presented in the accompanying proxy statement. On or about April 24, 2015, we expect to mail to our stockholders a Notice of Internet Availability of Proxy Materials (the “Notice”) containing instructions on how to access our proxy statement and our annual report. The Notice provides instructions on how to vote via the Internet or by telephone and includes instructions on how to receive a paper copy of our proxy materials by mail. The accompanying proxy statement and our annual report can be accessed directly at the Internet address listed on the Notice. YOUR VOTE IS IMPORTANT. Whether or not you plan to attend the Annual Meeting, we urge you to submit your vote via the Internet, telephone or mail as soon as possible so that your shares can be voted at the Annual Meeting in accordance with your instructions. Thank you for your continued support of FireEye. By order of the Board of Directors, David G. DeWalt Chief Executive Officer and Chairman of the Board Milpitas, California April 24, 2015 [THIS PAGE INTENTIONALLY LEFT BLANK] TABLE OF CONTENTS Page QUESTIONS AND ANSWERS