Akamai Technologies 10-K 2023-12-31

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2023

or

Commission file number: 0-27275

Akamai Technologies, Inc.

(Exact name of registrant as specified in its charter)

145 Broadway

Cambridge, Massachusetts 02142

(Address of principle executive offices) (Zip Code)

Registrant’s telephone number, including area code: (617) 444-3000

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes þ No ¨

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. Yes ¨ No þ

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes þ No ¨

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes þ No ¨

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of "large accelerated filer," "accelerated filer," "smaller reporting company," and "emerging growth company" in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. o

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of

the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C.

7262(b)) by the registered public accounting firm that prepared or issued its audit report. þ

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. o

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). o

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No þ

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the registrant was approximately $13,393.7 million based on the last reported sale price of the Common Stock on the Nasdaq Global Select Market on June 30, 2023.

The number of shares outstanding of the registrant’s Common Stock, par value $0.01 per share, as of February 23, 2024: 151,530,300 shares.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the registrant’s definitive proxy statement to be filed with the Securities and Exchange Commission relative to the registrant’s 2024 Annual Meeting of Stockholders are incorporated by reference into Items 10, 11, 12, 13 and 14 of Part III of this annual report on Form 10-K.

AKAMAI TECHNOLOGIES, INC.

ANNUAL REPORT ON FORM 10-K

FOR THE FISCAL YEAR ENDED DECEMBER 31, 2023

TABLE OF CONTENTS

Table of Contents

Forward-Looking Statements

This annual report on Form 10-K contains “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995 regarding future events and the future results of Akamai Technologies, Inc., which we refer to as “we,” “us,” or the “Company.” All statements other than statements of historical facts are statements that could be deemed forward-looking statements. These statements are subject to risks and uncertainties and are based on the beliefs and assumptions of our management as of the date hereof based on information currently available to our management. Use of words such as “believes,” “could,” “expects,” “anticipates,” “intends,” “plans,” “seeks,” “projects,” “estimates,” “should,” “would,” “forecasts,” “if,” “continues,” “goal,” “likely,” “may,” “will,” variations of such words or similar expressions are intended to identify a forward-looking statement. Forward-looking statements are not guarantees of future performance and involve risks, uncertainties and assumptions. Actual results may differ materially from the forward-looking statements we make as a result of various factors, including, but not limited to: potential slowing revenue growth, global economic and geopolitical conditions, our ability to acquire or develop new solutions, our ability to compete effectively, including our ability to continue to grow our compute solutions, security risks stemming from ineffective information technology systems or cybersecurity breaches, risks of maintaining global operations, regulatory developments, intellectual property claims or disputes, investment related risks and maintaining an effective system of internal controls. See “Risk Factors” elsewhere in this annual report on Form 10-K and in our other reports filed with the Securities and Exchange Commission for a discussion of certain risks associated with our business. We disclaim any obligation to update any forward-looking statements as a result of new information, future events or otherwise, including the potential impact of any mergers, acquisitions, divestitures or other events that may be announced after the date hereof.

PART I

Overview

Akamai's mission is to power and protect life online.

Since 1998, Akamai has developed and provided solutions for global enterprises to build, deliver and secure their digital experiences on our massively distributed worldwide network. This platform, which we refer to as Akamai Connected Cloud, is comprised of an edge and cloud architecture and underlying network for cloud computing, security and content delivery services. Akamai Connected Cloud spans more than 4,100 edge points-of-presence in approximately 130 countries and nearly 750 cities, with roughly 1,200 network partners. With this scale and distribution, Akamai Connected Cloud provides us with visibility and insight into traffic volumes, congestion, attack patterns, vulnerabilities and other activities across the internet's complex intersections of networks and systems. Leveraging these insights, Akamai Connected Cloud offers solutions designed to protect our customers from threats and attacks, while empowering them to securely deliver digital experiences to engage, entertain and interact with their customers. Akamai Connected Cloud also offers a continuum of computing designed to efficiently build, deploy and secure performant applications and workloads that require single-digit millisecond latency and global reach.

Today, billions of people work, learn, shop, bank, communicate and do more online globally. We firmly believe that the internet’s role in transforming the way we exchange ideas and information and conduct business is more vital than ever. Our strategy is to help continue to drive this transformation by offering compute, security and content delivery services on Akamai Connected Cloud that empower our customers to compete and operate with the scale, resilience and efficiency that their businesses demand.

Our Solutions

We provide solutions in three core offerings: security, content delivery and compute. We also provide services and support for our customers as they utilize our solutions.

Security

Our security solutions are designed to keep infrastructure, websites, applications, application programming interfaces ("APIs") and users safe from a multitude of cyberattacks and online threats while improving performance. Our solutions blend robust automation with customizable protections and managed security services to enable businesses to effectively manage risk and maximize the protections of their infrastructure, networks, applications and APIs. Akamai’s security solutions include web

Table of Contents

application and API protection, bot management and mitigation to protect against credential abuse and account takeover, distributed denial of service ("DDoS") mitigation, protection from in-browser threats to protect against supply chain compromise and audience hijacking. We also offer a growing set of solutions designed to help businesses implement a “zero trust” approach to security. Based on the concept of least privilege, which dictates that users, applications and services utilize the bare minimum amount of access needed to perform their function, these tools are intended to shift protections from a legacy approach based on establishing a corporate perimeter, to a more modern, risk-based approach.

Our acquisition of Guardicore Ltd. ("Guardicore") in October 2021 was a significant milestone in positioning Akamai as a leader in implementing "zero trust" methodology. Guardicore’s microsegmentation solution helps our customers prevent malicious lateral movement in their network through precise segmentation policies, visuals of activity within their IT environment and network security alerts. Other solutions in this category include zero trust network access, which replaces legacy virtual private networks, multi-factor authentication, micro-segmentation, which replaces legacy network firewalls and helps protect businesses from the threat of ransomware, and secure internet access, which helps protect against the threat of malware and phishing attacks. In May 2023, Akamai acquired Neosec, Inc. ("Neosec"), which enabled us to offer a solution we refer to as API Security that works to discover and audit APIs and monitor API activity. API Security uses behavioral analytics to detect and respond to threats and abuse detection and operates using a response platform based on data and behavioral analytics. We believe API Security will complement our application and API security portfolio by extending our visibility into the growing API threat landscape.

Content Delivery

Our content delivery solutions consist primarily of web and mobile performance focused solutions and media delivery solutions. Our web and mobile performance solutions are architected to enable dynamic websites and applications to have rapid response times, no matter where the user is, what device or browser they are using or how they are connected to the internet. These services leverage intelligent performance optimization and real-time monitoring, origin offload and network reliability, and insights that enable enterprises to identify and address performance issues. Akamai web and mobile performance capabilities also include global traffic management, site acceleration, application load balancing, large-scale load testing and real-user monitoring.

Our media delivery solutions are designed to enable enterprises to execute their digital media distribution strategies by addressing volume and global reach requirements, improving the end-user experience, boosting reliability and reducing the cost of internet-related infrastructure. Underlying these solutions is technology to address variable connection speeds and device types, facilitate access to disparate locations around the world, accelerate large file downloads, reliably deliver high-quality live content across various devices and platforms, and enable comprehensive insights and real-time online video monitoring. Akamai media delivery solutions include video streaming and video player services, game and software delivery, broadcast operations, authoritative domain name system ("DNS"), resolution and data and analytics.

Compute

Akamai's cloud computing services, which we sometimes refer to as compute, include compute, storage, networking, database and container management services that are required to build, deploy and secure applications and workloads. The cloud computing services running on Akamai Connected Cloud enable companies to distribute workloads and applications across our core to edge infrastructure to help solve the cost, performance and scale challenges that centralized cloud computing platforms present today.

In March 2022, Akamai acquired Linode Limited Liability Company ("Linode"), an established cloud computing platform. This acquisition was a significant milestone in our expansion into cloud computing services. While Linode was traditionally focused on individual developers, we are leveraging the Linode cloud computing services for enterprise customers by building new enterprise-grade core computing regions and connecting them to the Akamai network, which we believe will give Akamai an advantage over its bigger cloud rivals. While many other cloud providers are building their cloud platforms based on a centralized, data center-centric model, Akamai designed its cloud to be massively distributed based on the fundamental belief that modern applications will be comprised of workloads that will need to be automatically and efficiently distributed across a continuum of computing from cloud to edge in order to meet the specific performance and latency needs of that workload.

In 2023, we launched 13 new core computing regions, bringing our total footprint to 24 regions around the world. In order to continue the expansion of our cloud computing services, we plan to continue increasing the number of computing regions on our platform.

Table of Contents

Services and Support

We provide an array of service and support offerings across our core offerings. Through our service and support offerings we work closely with our customers to develop creative and tailored solutions to assist them with integrating, configuring, optimizing and managing our core offerings. Once customers are deployed on Akamai Connected Cloud, they can rely on our professional services and security experts for customized solutions, problem resolution and 24/7 customer support. Additional features are available to enterprises that purchase our premium and managed security solutions, including a dedicated technical account team, proactive service monitoring, custom technical support handling, security traffic monitoring, technical security reviews, threat advisories and emergency support for security events.

Human Capital

Our employees – our human capital – are our most valuable resources as they are fundamental to our innovation, the operation and ongoing enhancement of Akamai Connected Cloud, the fostering and maintenance of relationships with our customers and the management of our operations. The importance of our workforce to our success is underscored by the inclusion of corporate mission critical goals centered on our employees. In 2023, we focused on fostering an inclusive community that supports the success of our employees and continuing to deliver a positive experience for both employees and customers by living our values each day. Different aspects of our human capital management are overseen by our board of directors as well as its Talent, Leadership and Compensation Committee and Environmental, Social and Governance Committee.

As of December 31, 2023, we had over 10,250 employees located in more than 30 countries (with approximately 60% of those employees located outside of the U.S.) and representing over 100 nationalities, which we believe helps bring a global perspective to our operations. Our employees are grouped across the following roles, with the approximate percentage of the overall population noted: engineering and research and development (35%), services and support (27%), sales and marketing (18%) and administrative functions (20%).

Engagement

We continue to believe that an engaged employee workforce is key to having the productive, ethical and high-performing workplace needed to successfully compete in today’s marketplace. We conduct quarterly surveys of our employees to assess a variety of key metrics related to key topics, such as engagement, inclusion and job satisfaction. Results from these surveys have consistently shown a strong sense of engagement and confidence in Akamai’s future. We have been acknowledged in respected publications across the U.S., India and Poland, among other countries, as a great place to work. Continuing in 2023, all employees were able to participate in a company-wide program, developed by a behavioral research organization, that was intended to help us increase inclusivity, become more open to change and accelerate our innovation. In addition, we work closely with the Akamai Foundation to provide community service and charitable matching fund opportunities for Akamai employees, endeavors that have been shown to increase employee engagement. The Akamai Compassion Fund, created in 2020 by employees for employees with support from the Akamai Foundation, continued to provide a way for Akamai employees to unite and support global colleagues and their families during times of unexpected hardships following a catastrophic event, such as the ongoing war in Ukraine.

Diversity

Akamai is an equal opportunity employer that values the strength that diversity brings to the workplace. We do not tolerate discrimination on the basis of gender, gender identity, sexual orientation, race or ethnicity, protected veteran status, disability, or other protected group status. Akamai supports varied programs and practices designed to promote a diverse and inclusive working environment. We have eight employee resource groups ("ERGs") that offer opportunities for employees to come together for mutual support, education and development. ERGs encompass different racial and ethnic groups, persons with different physical or cognitive abilities, parents, military veterans, the LGBTQIA+ community and women. We track the diversity of our workforce and report quarterly to the board of directors on our progress to improve our representation. At December 31, 2023, global female representation was 27.4%, up slightly from 27.2.% at the end of 2022. Racial and ethnic minority representation in the U.S. was 41.1%, up from 40.3% at the end of 2022, and since the end of 2021, our Black representation and Hispanic representation have both increased. To help us improve the diversity of our workforce, we participate in or sponsor professional development and recruiting forums. We also train hiring managers to draft inclusive job descriptions intended to broaden the pool of eligible applicants.

Table of Contents

Retention

We have a demonstrated history of investing in our workforce by offering competitive salaries, wages and benefits. Our compensation and benefits philosophy is to maximize the effectiveness of pay and benefits programs to attract and retain the high caliber individuals needed to drive the success of our business, while balancing cost-effectiveness and competitive factors. Our benefits programs (which vary by country and region) include healthcare and insurance benefits, health savings and flexible spending accounts, paid time off, family leave, family care resources, flexible work schedules and locations, adoption and fertility assistance, employee assistance programs, tuition assistance and holistic wellness programs. Our wellness programs include educational offerings on healthy lifestyles, access to mental health experts and access to ergonomic advice and equipment. To foster a stronger sense of ownership and align the interests of employees with shareholders, stock awards are held by the vast majority of our employees under our broad-based stock incentive programs and most employees are eligible to participate in our employee stock purchase plan. We monitor voluntary attrition in assessing our overall human capital. Attrition was down in 2023 when compared to 2022.

As a signatory to the White House Equal Pay Pledge, we are committed to monitoring our pay practices regularly and making adjustments, as necessary, to deliver on this pledge. We currently conduct bi-annual internal pay equity analyses (with the assistance of a nationally-recognized outside consultant), covering gender globally and race and gender in the U.S. We take action to remedy identified discrepancies when we believe it is appropriate. To date, no widespread patterns of disparity have been identified.

In addition, succession planning is an ongoing priority for our leadership. We conduct annual succession planning for senior leadership, which is overseen by our board of directors, including development plans for the next level of our senior leaders. Annual talent reviews focus on both high performers as well as those with high potential to keep our pipeline of tomorrow’s leaders full.

Development

We invest significant resources in professional development, career advancement and training for our global workforce. All employees are eligible to participate in our Akamai Elevation performance review program, which provides guidance around setting annual performance objectives, developing competencies and receiving feedback. For select employees, we offer leadership training workshops, 360-degree feedback and succession planning exercises to encourage and enable internal promotion and advancement. As a result of these investments and others, approximately 20% of open positions were filled with internal candidates in 2023. All employees are required to complete annual ethics and compliance and data security trainings. In addition to these required trainings, nearly all of our employees and contractors completed at least one training in our Akamai University program during 2023.

FlexBase

In May 2022, we launched FlexBase, which is a flexible workspace arrangement that allows over 95% of employees to choose to work from their home office, a Company office or a combination of both. We believe that flexible workforce positions and a focus on employee choice, make us a more attractive employer, increase productivity, enable us to recruit from a more diverse pool of applicants and present additional growth and development opportunities for our employees. Since 2022, we have rolled out a number of tools and resources to support this program, such as supporting employees with guidance on maximizing our internal tools to deliver great virtual meeting experiences.

Customers

Our customers include many of the world's leading corporations, such as Adobe, Airbnb, Alibaba, Autodesk, Capital Group, Carnival Corporation, The Coca-Cola Company, Comcast, Crate & Barrel, eBay, Electronic Arts, Epic Games, FedEx, Fidelity Investments, Honda, IKEA, Japan Airlines, Liberty Mutual, Lufthansa, Maersk Transportation & Logistics, Marriott, NBCUniversal, Panasonic, Panera Bread, Paramount Global, Philips, Rabobank, Riot Games, Sony Interactive Entertainment, Spotify, Telefonica, Toshiba, Ubisoft, WarnerMedia and The Washington Post. We also actively sell to government agencies. As of December 31, 2023, our public-sector customers included the U.S. Census Bureau, the U.S. Department of Defense, the U.S. Department of Labor, the U.S. Department of Transportation and the U.S. Department of the Treasury.

No customer accounted for 10% or more of total revenue for any of the years ended December 31, 2023, 2022 and 2021. Less than 10% of our total revenue in each of the years ended December 31, 2023, 2022 and 2021 was derived from contracts

Table of Contents

or subcontracts terminable at the election of the federal government, and we do not expect such contracts to account for more than 10% of our total revenue in 2024.

Sales, Services and Marketing

We market and sell our solutions globally through our field sales and services organization and through many channel partners, including AT&T, Avant, BV Tech, Carahsoft, Deutsche Telecom, Kyndryl, Microsoft Azure and Telefonica Group. In addition to entering into agreements with resellers, we have several other types of sales and marketing focused alliances with entities such as system integrators, application service providers, technology solution distributors, referral partners and marketplaces. By aligning with these partners, we believe we are better able to market our solutions and leverage partners to add valuable services to complement our offerings and improve the customer experience. Our sales, services and marketing professionals are based in locations across the Americas, Europe, the Middle East and Asia-Pacific and focus on direct and channel sales, sales operations, professional services, account management and technical consulting.

To support our sales efforts and promote the Akamai brand, we conduct comprehensive marketing programs to shape perception and drive awareness and consideration of our solutions. Our marketing strategies include public relations, digital programmatic advertising, paid search and SEO marketing, content marketing, social media, strategic alliances, e-mail marketing programs, events and webinars, participation at industry trade shows and ongoing training and sales enablement.

Competition

The market for our solutions is intensely competitive and characterized by rapidly changing technology, evolving industry standards and frequent new product and service innovations. We expect competition for our offerings to increase both from existing competitors and new market entrants. We compete primarily on the basis of:

• the performance and reliability of our solutions;

• massive distribution and availability of our network;

• return on investment in terms of cost savings and new revenue opportunities for our customers;

• reduced infrastructure complexity;

• sophistication and functionality of our offerings;

• our long-term product roadmaps;

• scalability;

• security;

• ease of implementation and use of service;

• customer support; and

• price.

We compete with companies offering products and services that provide internet content delivery and hosting services, security and cloud computing solutions, technologies used by carriers to improve the efficiency of their systems, streaming content delivery services and equipment-based solutions for internet performance problems, such as load balancers and server switches. Other companies offer online distribution of digital media assets through advertising-based billing or revenue-sharing models that may represent an alternative method for charging for the delivery of content and applications over the internet. In addition, existing and potential customers may decide to purchase or develop their own hardware, software or other technology solutions rather than rely on a third-party provider like us. Our security solutions compete with those offered by both hardware and software providers. While our Linode-based solutions have historically competed with alternative cloud computing platforms focused on individual developers, we anticipate that going forward our cloud computing solutions will increasingly compete with the large so-called “hyper-scaler” cloud computing providers.

We believe that we compete favorably with other companies in our industry through the global scale of Akamai Connected Cloud, which we believe provides the most effective means of meeting the needs of enterprise customers and is unique to us. In our view, we also benefit from the high quality of our offerings, our customer service and the information we can provide to our customers about their online operations and value.

Government Regulation

As a global technology company, Akamai is subject to complex foreign and U.S. laws and regulations in areas such as data privacy and localization, cybersecurity, liability for content delivered over our network, various internet regulations, bribery, sanctions, export controls, competition, tax and foreign exchange controls.

Table of Contents

Privacy laws, such as the European Union General Data Protection Regulation and the California Consumer Privacy Act of 2018, impact how we use data generated from our network as well as our ability to reach current and prospective customers, understand how our solutions are being used, transfer data about our employees and respond to customer requests allowed under the applicable laws. Other laws and regulations that apply to the internet related to, among other things, content liability, security and disclosure requirements, critical infrastructure designations, internet resiliency, law enforcement access to information, net neutrality, so-called "fair share" or internet content taxes, data localization requirements, industry regulations applicable to key suppliers to some of our customers and restrictions on social media or other content can have an impact on our business. For instance, regulations have been enacted or proposed in a number of countries that limit the delivery of certain types of content into those countries. As an example, restrictions were adopted in India in 2020 prohibiting access to identified Chinese applications. Enactment and expansion of such laws and regulations in other jurisdictions would negatively impact our revenues or cause us to incur costs to redesign our systems to ensure compliance.

We are subject to the U.S. Foreign Corrupt Practices Act and similar anti-bribery laws, which generally prohibit companies and their intermediaries from offering payments or inducements to foreign government officials for the purpose of obtaining or retaining business. To the extent we export technical services, data, products or other technology outside of the U.S., we are subject to U.S. and international laws and regulations governing international trade and exports, including, but not limited to, the International Traffic in Arms Regulations, the Export Administration Regulations, and sanctions against embargoed countries and other designated entities and individuals.

Many of these laws and regulations are evolving and could be interpreted and applied in a manner that is inconsistent from country to country and inconsistent with our current policies and practices and in ways that could harm our business. For example, while we are generally not subject to regulations applicable to telecommunications companies, new or different interpretations of laws or regulations could subject us to regulatory supervision. In general, the nature and breadth of laws and regulations governing the internet may increase in the future; accordingly, we are unable to assess the possible effect of compliance with future requirements or whether our compliance with such regulations will materially impact our business, results of operations or financial condition.

For further discussion of how government regulations may affect our business, see the related discussion below in Item 1A. Risk Factors – Financial and Operational Risks – We face risks associated with global operations that could harm our business; – Legal and Regulatory Risks – Evolving privacy regulations could negatively impact our profitability and business operations; and – Legal and Regulatory Risks – Other regulatory developments could negatively impact our business.

Intellectual Property

Our success and ability to compete are dependent on developing and maintaining the proprietary aspects of our technology and operating without infringing on the proprietary rights of others. We rely on a combination of patent, trademark, trade secret and copyright laws and contractual restrictions to protect the proprietary aspects of our technology. As of December 31, 2023, we owned, or had exclusive rights to, over 550 U.S. patents covering our technology as well as patents issued by other countries. Our U.S.-issued patents have terms extendable to various dates between 2024 and 2042. We do not believe that the expiration of any particular patent in the near future would be materially detrimental to our business. We seek to limit disclosure of our intellectual property by requiring employees and consultants with access to our proprietary information to execute confidentiality agreements with us and by restricting access to our source code.

Additional Information

Our internet website address is www.akamai.com. We make available, free of charge, on or through our internet website, our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and amendments thereto that we have filed or furnished with the Securities and Exchange Commission (the "Commission") as soon as reasonably practicable after we electronically file them with the Commission. We are not, however, including the information contained on our website, or information that may be accessed through links on our website, as part of, or incorporating such information by reference into, this annual report on Form 10-K.

Table of Contents

The following are important factors that could cause our actual operating results to differ materially from those indicated or suggested by forward-looking statements made in this annual report on Form 10-K or presented elsewhere by management from time to time.

Financial and Operational Risks

Slowing revenue growth has in the past and may continue to negatively impact our profitability and stock price.

The overall revenue growth we have enjoyed in recent years may not continue in future periods and could decline, which could negatively impact our profitability and stock price. Our ability to generate revenue depends on the amount of services we deliver, continued growth in demand for our security, delivery and compute solutions and our ability to maintain the prices we charge for them.

Revenue we generate from our delivery solutions is impacted by pricing pressure due to competition and fluctuations in content traffic as a result of, among other factors, changes in the popularity of our customers' content including video delivery and gaming. For example, revenue from our delivery solutions increased significantly in 2020 due in large part to greater consumption of online media and games during the onset of the COVID-19 pandemic and the associated stay-at-home orders across the globe. However, as these orders were lifted and more return-to-work policies were adopted, our revenue from delivery solutions declined. We have continued to experience revenue declines in our delivery solutions and expect this trend to continue in the near future.

Our security solutions currently generate the largest portion of our revenue. Our ability to generate revenue in our security business depends on our ability to increase our industry recognition as a provider of security solutions, develop or acquire new solutions in a rapidly-changing environment where security threats are constantly evolving and ensure that our solutions operate effectively and are competitive with products offered by others.

In addition, an increasing proportion of our revenue has been generated by our compute solutions. Our ability to generate revenue in our compute business is dependent on our ability to successfully continue building our compute infrastructure, attract a customer base that has traditionally partnered with more established companies in the compute industry and develop effective, price competitive and attractive solutions.

If we are unable to increase revenues, our profitability and stock price could suffer. See the risk factor titled, "Global conditions have in the past and may in the future harm our industry, business and results of operations" below.

Global conditions have in the past and may in the future harm our industry, business and results of operations.

We operate globally and as a result, our business, revenues and profitability are impacted by global macroeconomic conditions. The success of our activities is affected by general economic and market conditions, including, among others, inflation, interest rates, tax rates, economic uncertainty, political instability, warfare, changes in laws, trade barriers, the actual or perceived failure or financial difficulties of financial institutions, reduced consumer confidence and spending and economic and trade sanctions. For example, approximately 1% of our 2021 revenue had been generated from traffic into Russia, Belarus and Ukraine, and we experienced a decline in revenue in 2022 and 2023 related to the war in Ukraine due to a decrease in traffic in these countries. In addition, due to changes in international tax laws, we expect our effective income tax rate will increase in 2024. The U.S. capital markets have experienced and may continue to experience extreme volatility and disruption in the recent past. Furthermore, inflation rates in the U.S. have recently increased to levels not seen in decades. Such economic volatility has in the past and could in the future adversely affect our business, financial condition, results of operations and cash flows and future market disruptions could negatively impact us. For example, these unfavorable economic conditions could increase our operating costs, which could negatively impact our profitability. Geopolitical destabilization and warfare have impacted and could continue to impact global currency exchange rates, resources from our suppliers, and our ability to operate or grow our business. In addition, we have recently experienced rising energy costs in areas in which we operate, particularly in Europe.

Additionally, we have offices and employees located in regions that historically have and may again experience periods of political instability, warfare, changes in laws, trade barriers and economic and trade sanctions. Adverse conditions in these countries have in the past and may in the future affect our operations, including disruptions to our workforce, supply chains, networks, financial systems and other critical infrastructure, which could adversely affect our business, results of operations, financial condition and cash flows. For example, approximately five percent of our global employees are located in Tel Aviv,

Table of Contents

Israel and some of our employees have been mobilized as members of the Israeli military reserves. The ongoing war could cause harm to our employees or otherwise impair their ability to work for extended periods of time.

Failure to control expenses could reduce our profitability, which would negatively impact our stock price.

Maintaining or improving our profitability depends both on our ability to increase our revenue and limit our expenses. We base our decisions about expense levels and investments on estimates of our future revenue and future anticipated rates of growth and may incur varying levels of expense based on strategic initiatives, including acquisitions and the build out of our network to support our compute solutions. In addition, many of our expenses are fixed costs for a certain amount of time which may impact our ability to reduce costs in a timely manner or without incurring additional costs. If we are unable to increase revenue and limit expenses, our results of operations will suffer. We have in the past and may in the future take certain steps to reduce expenses, however, there are no assurances that we will be able to effectively reduce our expenses and such actions may negatively affect our ability to invest in our business for innovation, systems improvements and other initiatives.

If we do not develop or acquire new solutions that are attractive to our customers, our revenue and operating results could be adversely affected.

Innovation is important to our future success. In particular, as security and compute solutions have become, and are expected to continue to be, an important part of our business, we must be particularly adept at developing new security solutions that meet the constantly-changing threat landscape and compute and compute-to-edge solutions that meet the needs of professional users and enterprises looking to increase the utility of the internet for their business.

The process of developing new solutions and product enhancements is complex, lengthy and uncertain and has become increasingly complex due to the sophistication of our customers’ needs. The development timetable is uncertain and we may commit significant resources to developing solutions for which a viable market may not ultimately develop. For example, with the acquisition of Linode, we are investing significant resources in our compute solutions and platform, working on expanding the capacity of these facilities, adding additional sites and developing increased compute features and functionality. Success in these efforts is not guaranteed and will largely depend on our ability to create products that are competitive in the e

Showing the first 8K of 79K characters. Open the full section

None.

Our customers rely upon Akamai to power and protect the online experiences of their end user customers. We provide security, content delivery and compute services through Akamai Connected Cloud and maintain internal systems and other data associated with running our business. We have implemented cybersecurity risk management programs and procedures designed to identify and address threats to both internal and customer facing data and systems that are subject to ongoing compliance assessments, certifications and testing.

Under the oversight and direction of the Akamai executive management team and the Audit Committee of Akamai’s board of directors, the Chief Security Officer (the “CSO”) has primary responsibility for overseeing Akamai’s management of cybersecurity risks. Reporting to the Chief Executive Officer through the Company's Executive Vice President and General Manager of the Security Technology Group, the CSO leads Akamai’s Information Security Committee, which works cross-functionally with other Akamai departments, including legal, business, policy and technical functions, as appropriate, to exchange information related to cybersecurity. Our current CSO is an accomplished security professional with 15 years of experience in building and leading information security teams at both public and private companies. Akamai’s information security team is comprised of senior ranking staff who have experience in a broad range of security domains, including security operations, software security, risk management and auditing.

The CSO and Akamai’s information security team regularly communicate the nature and state of security risks to senior business leaders across the organization. In addition, the CSO meets on a regular basis with the Information Security Committee to provide cybersecurity program updates and to discuss potential risks and changes in the cyber threat landscape in which we operate. On a quarterly basis and as needed, the CSO reports to the Audit Committee to provide information on, as applicable and appropriate, cybersecurity risk management programs, risk mitigation, cybersecurity incidents and related disclosure obligations, if any, information on new or changing threats and other cybersecurity matters. The Audit Committee

Table of Contents

Chair reports to our board at least quarterly on our cybersecurity risk management program, including risk mitigation, cybersecurity incidents and other relevant developments in our cyber threat landscape. In addition to formal reporting, the CSO takes part in informal meetings as needed and requested with Akamai's management, including the Chief Executive Officer and the board of directors.

The information security team, under the authority of the CSO, has developed a cybersecurity risk management program that addresses four primary operational pillars:

• researching, monitoring and identifying significant cybersecurity threats and risks across Akamai Connected Cloud and the larger internet ecosystem taking into account malicious actors, software vulnerabilities and other threat sources;

• assessing designated risks applicable to Akamai’s assets and systems, including those associated with third-party vendors and suppliers, and planning and tracking efforts to address significant risks;

• managing cybersecurity incidents and associated reporting and communications obligations; and

• ongoing compliance assessments through internal and external audits and assessments, certifications and the penetration and vulnerability testing of certain systems.

These operational pillars and the programs established from them are informed by cybersecurity industry standards.

Our programs are designed to identify and categorize cybersecurity threats and risks through different sources. We conduct assessments of threat models to determine which risks are most likely to impact us. Akamai’s information security team gathers threat and risk data and updates through various sources, such as systems reviews, security research activities, product development processes, diligence efforts in acquisitions and internal and external security scans and alerts, as appropriate. As applicable, in certain circumstances, we also collaborate with industry partners in the security community, our peers and law enforcement agencies, to support our cybersecurity threat intelligence capabilities. This information is collected, categorized and assessed to identify, prioritize and manage significant cybersecurity risks. As a result, our process is continually evaluated and evolves as the threat landscape changes.

In addition to ongoing risk management procedures, we have implemented a cybersecurity incident procedure designed to identify and address security incidents through various channels. As part of this process, cybersecurity incidents are evaluated, as appropriate, by a cross-functional team to assess the impact of the incident or threat to Akamai from a financial, reputational and operational perspective, and to determine notification obligations to customers and regulators and disclosure obligations to investors, as applicable. The results of such evaluation are discussed with the board of directors as appropriate. On a regular basis, our cybersecurity professionals conduct internal assessments of this process. Additionally, we have implemented an incident response plan that is reviewed by the Audit Committee and the board of directors from time to time.

We also incorporate security practices into employee training. We have a process for employees to formally acknowledge their review and understanding of security obligations, and the information security and legal teams conduct periodic security and data protection training aimed to emphasize the importance of security and data protection. In addition, we have implemented a review process to assess the security profile and data protection practices of certain third-party service providers that have exposure to Akamai’s systems, including, as appropriate, review of vendor security policies and procedures and contractually required security commitments.

Although risks from cybersecurity threats have to date not materially affected us, our business strategy, results of operations or financial condition, we have, from time to time, experienced threats to and breaches of our and our third-party vendors’ data and systems. For more information, see "Risk Factors" included elsewhere in this annual report on Form 10-K.

Since May 2022 we have operated as a flexible workplace, where employees can choose to work from their home office, a Company office or a combination of both. However, our headquarters is located in Cambridge, Massachusetts where we lease approximately 659,000 square feet, of which approximately 285,000 square feet is currently subleased to third parties. We also have offices in other locations in the United States and other countries, the largest of which are Bangalore, India; Krakow, Poland; and Tel Aviv, Israel. All of our facilities are leased. We are continuing to evaluate our facility footprint in light of our FlexBase program, including our plans and ability to sublease excess space. We believe our facilities are sufficient to meet our needs.

Table of Contents

We are party to various litigation matters, governmental proceedings, investigations, claims and disputes that we consider routine and incidental to our business. We do not currently expect the results of any of these matters to have a material effect on our business, results of operations, financial condition or cash flows.

Not applicable.

PART II

Our common stock, par value $0.01 per share, trades under the symbol “AKAM” on the Nasdaq Global Select Market.

As of February 23, 2024, there were 157 holders of record of our common stock.

We have never paid or declared any cash dividends on shares of our common stock or other securities and do not anticipate paying or declaring any cash dividends in the foreseeable future. We currently intend to retain all future earnings, if any, for use in the operation of our business.

Issuer Purchases of Equity Securities

The following is a summary of our repurchases of our common stock in the fourth quarter of 2023 (in thousands, except share and per share data):

(1)Information is based on settlement dates of repurchase transactions.

(2)Consists of shares of our common stock, par value $0.01 per share.

(3)Includes commissions paid, but excludes any estimated excise taxes payable on share repurchases.

(4)Effective January 2022, our board of directors authorized a $1.8 billion share repurchase program through December 2024.

During the year ended December 31, 2023, we repurchased 7.8 million shares of our common stock for an aggregate purchase price of $654.0 million.

Not applicable.

Table of Contents

This Management’s Discussion and Analysis of Financial Condition and Results of Operations ("MD&A"), should be read in conjunction with our consolidated financial statements and notes thereto that appear elsewhere in this annual report on Form 10-K. See “Risk Factors” elsewhere in this annual report on Form 10-K for a discussion of certain risks associated with our business. The following discussion contains forward-looking statements. The forward-looking statements do not include the potential impact of any mergers, acquisitions, divestitures or other events that may be announced after the date hereof.

Overview

We provide solutions to power and protect life online through our massively distributed edge and cloud platform, which we refer to as Akamai Connected Cloud. Akamai Connected Cloud underpins our cloud computing, security and content delivery solutions, and is central to our financial success. The key factors that influence our financial success are our ability to build on recurring revenue commitments for our security and performance offerings, increase traffic on our network, continue to develop, scale and successfully bring to market our cloud computing platform and compute-to-edge solutions that meet the needs of professional users and enterprises, effectively manage the prices we charge for our solutions, develop new products and appropriately manage our capital spending and other expenses. The purpose of this discussion and analysis section is to provide material information relevant to an assessment of our financial condition and results of operations from management’s perspective, including to describe and explain key trends, events and other factors that impacted our reported results and that are likely to impact our future performance.

Revenue

We primarily derive revenue from the sale of services to customers executing contracts having terms of one year or longer, which allows us to have a consistent and predictable base level of revenue. Services included in our contracts consist of security solutions, the delivery of content, applications and software over the internet, cloud computing solutions and professional services. In addition to a base level of revenue, we are also dependent on our ability to increase our product offerings and to cross-sell additional services to our new and existing customers, particularly for our security and compute solution portfolios. Our revenue is also impacted by customer renewals, the rate of adoption and timing of customer offerings, variability of one-time events, usage of cloud computing services and the amount of traffic we serve on our network. Geopolitical, economic and other developments that impact our customers' businesses can also impact our ability to attract new customers or continue to cross-sell additional services to existing customers. Over the longer term, our ability to expand our product portfolio and to effectively manage the prices we charge for our solutions are key factors impacting our revenue growth.

We have observed the following trends related to our revenue in recent years:

• Increased sales of our security solutions, led by application security solutions and segmentation solutions from our acquisition of Guardicore Ltd., and increased sales of our compute solutions, primarily attributable to our acquisition of Linode in early 2022, have made a significant contribution to revenue growth. During 2023, security represented the largest share of revenue with security and compute revenue representing over half of our total revenue. We plan to continue to invest in these areas with a focus on further advancing our product portfolios.

• Traffic on our network continues to grow at a modest pace as compared to prior years, and is impacted by a number of external factors. Most recently, as we and our customers manage through a time of economic headwinds and uncertainty, traffic growth rates have been impacted. Conversely, our rate of traffic growth increased significantly during the onset of the COVID-19 pandemic and the associated stay-at-home orders across the globe. However, as these orders were lifted and more return-to-work policies were adopted, our traffic growth rates declined. These traffic fluctuations may continue to impact our delivery revenue.

• The prices paid by some of our delivery and security customers have declined in recent years due to competition and contract renewals, which negatively impacts our revenue growth rates. We have been able to mitigate some of the negative impacts to our revenue growth rates by upselling incremental solutions to our existing delivery and security customers. We are taking steps upon contract renewals to optimize how we charge certain high-volume traffic delivery customers, including charging a premium for higher-cost destinations and continuing to maintain alignment between customer traffic volumes and unit pricing.

• Revenue from our international operations has generally been growing at a faster pace in recent years than from our U.S. operations, particularly from new customer acquisition and cross-selling of incremental solutions. Because we

Table of Contents

publicly report in U.S. dollars, our reported revenue results are negatively impacted when the dollar strengthens and benefit when the dollar weakens.

• We have experienced variations in certain types of revenue from quarter-to-quarter. In particular, we typically experience higher revenue in the fourth quarter of each year for some of our solutions as a result of holiday season activity. In addition, we experience quarterly variations in revenue attributable to, among other things, the timing of large customer contract renewals; the frequency and timing of purchases of custom solutions or licensed software; the nature and timing of software and gaming releases by our customers; and whether there are large live sporting or other events or situations that impact the amount of media traffic on our network.

Expenses

Our level of profitability is impacted by our expenses, including direct costs to support our revenue such as bandwidth and co-location costs, which includes energy to power our network. We have observed the following trends related to our profitability in recent years:

• Network bandwidth costs represent a significant portion of our cost of revenue. Historically, we have been able to mitigate increases in these costs by reducing our network bandwidth costs per unit and investing in internal-use software development to improve the performance and efficiency of our network. We will need to continue to effectively manage our bandwidth costs to maintain or improve current levels of profitability.

• Co-location costs are also a significant portion of our cost of revenue. As we continue to build out our new compute locations to provide us with the ability to scale our platform, we expect to enter into longer term leases that include certain financial commitments in order to achieve more favorable unit economics. The costs of the financial commitments are expensed ratably over the life of the lease, and, as a result, in some cases, we are incurring costs in advance of these compute locations being fully utilized. We continue to improve our internal-use software and remain disciplined in managing our hardware deployments, particularly for our delivery platform, which enables us to use servers more efficiently. With these efficiencies we have been able to moderate the impact of rising energy costs. We expect to continue to scale our network in the future, which we believe will allow us to effectively manage our co-location costs to maintain or improve current levels of profitability.

• Network build-out and supporting service costs represent another significant portion of our cost of revenue. These costs include maintenance and supporting services incurred as we co

Showing the first 8K of 109K characters. Open the full section

Interest Rate Risk

Our portfolio of cash equivalents and short- and long-term investments is maintained in a variety of securities, including money market funds, time deposits, commercial paper, corporate bonds, U.S. government agency obligations and mutual funds. The majority of our investments are classified as available-for-sale securities and carried at fair market value with cumulative unrealized gains or losses recorded as a component of accumulated other comprehensive loss within stockholders' equity. A sharp rise in interest rates could have an adverse impact on the fair market value of certain securities in our portfolio. We do not currently hedge our interest rate exposure and do not enter into financial instruments for trading or speculative purposes. If market interest rates were to increase by 100 basis points from December 31, 2023 levels, the fair value of our available-for-sale portfolio would decline by approximately $19.2 million.

In August 2023, we issued $1,265 million in aggregate principal amount of 1.125% convertible senior notes due 2029. In August 2019, we issued $1,150.0 million aggregate principal amount of 0.375% convertible senior notes due 2027. In May 2018, we issued $1,150.0 million aggregate principal amount of 0.125% convertible senior notes due 2025. These notes have a fixed annual interest rate, so they do not give rise to financial or economic interest exposure associated with changes in interest rates. However, the fair value of fixed rate debt instruments fluctuates when interest rates change. Additionally, the fair value

Table of Contents

can be affected when the market price of our common stock fluctuates. We carry the notes at face value less an unamortized discount on our consolidated balance sheet, and we present the fair value for required disclosure purposes only.

Our exposure to risk for changes in interest rates relates primarily to any borrowings under our 2022 Credit Agreement, which has a variable rate of interest. There were no outstanding borrowings under the 2022 Credit Agreement as of December 31, 2023.

Foreign Currency Risk

Growth in our international operations will incrementally increase our exposure to foreign currency fluctuations as well as other risks typical of international operations that could impact our business, including, but not limited to, differing economic conditions, changes in political climate, differing tax structures and other regulations and restrictions. Due to the strengthening U.S. dollar, our revenue results have been negatively impacted. The strengthening U.S. dollar has the opposite effect on expenses that are denominated in foreign currencies, but only partially offsets the impact to our revenue. A hypothetical 10% strengthening or weakening in the value of the U.S. dollar relative to the foreign currencies in which our revenues and expenses are denominated would not result in a material impact to our consolidated financial statements.

Transaction Exposure

Foreign exchange rate fluctuations may adversely impact our consolidated results of operations as exchange rate fluctuations on transactions denominated in currencies other than functional currencies result in gains and losses that are reflected in our consolidated statements of income. We enter into short-term foreign currency forward contracts to offset foreign exchange gains and losses generated by the re-measurement of certain assets and liabilities recorded in non-functional currencies. Changes in the fair value of these derivatives, as well as re-measurement gains and losses, are recognized in our consolidated statements of income within other income (expense), net. Foreign currency transaction gains and losses from these forward contracts were determined to be immaterial during the years ended December 31, 2023, 2022 and 2021. We do not enter into derivative financial instruments for trading or speculative purposes.

Translation Exposure

To the extent the U.S. dollar weakens against foreign currencies, the translation of these foreign currency-denominated transactions will result in increased revenue and operating expenses. Conversely, our revenue and operating expenses will decrease when the U.S. dollar strengthens against foreign currencies.

Foreign exchange rate fluctuations may also adversely impact our consolidated financial condition as the assets and liabilities of our international operations are translated into U.S. dollars in preparing our consolidated balance sheet. These gains or losses are recorded as a component of accumulated other comprehensive loss within stockholders' equity.

Credit Risk

Concentrations of credit risk with respect to accounts receivable are limited to certain customers to which we make substantial sales. Our customer base consists of a large number of geographically dispersed customers diversified across numerous industries. We believe that our accounts receivable credit risk exposure is limited. As of December 31, 2023, no customer had an accounts receivable balance greater than 10%, and as of December 31, 2022, there was one customer with an accounts receivable balance greater than 10% of our accounts receivable. We believe that at December 31, 2023, the concentration of credit risk related to accounts receivable was insignificant.

Table of Contents

REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM

To the Board of Directors and Stockholders of Akamai Technologies, Inc.

Opinions on the Financial Statements and Internal Control over Financial Reporting

We have audited the accompanying consolidated balance sheets of Akamai Technologies, Inc. and its subsidiaries (the “Company”) as of December 31, 2023 and 2022, and the related consolidated statements of income, of comprehensive income, of stockholders’ equity and of cash flows for each of the three years in the period ended December 31, 2023, including the related notes (collectively referred to as the “consolidated financial statements”). We also have audited the Company’s internal control over financial reporting as of December 31, 2023, based on criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).

In our opinion, the consolidated financial statements referred to above present fairly, in all material respects, the financial position of the Company as of December 31, 2023 and 2022, and the results of its operations and its cash flows for each of the three years in the period ended December 31, 2023 in conformity with accounting principles generally accepted in the United States of America. Also in our opinion, the Company maintained, in all material respects, effective internal control over financial reporting as of December 31, 2023, based on criteria established in Internal Control - Integrated Framework (2013) issued by the COSO.

Change in Accounting Principle

As discussed in Note 2 to the consolidated financial statements, the Company changed the manner in which it accounts for convertible instruments in 2022.

Basis for Opinions

The Company’s management is responsible for these consolidated financial statements, for maintaining effective internal control over financial reporting, and for its assessment of the effectiveness of internal control over financial reporting, included in Management’s Annual Report on Internal Control over Financial Reporting appearing under Item 9A. Our responsibility is to express opinions on the Company’s consolidated financial statements and on the Company’s internal control over financial reporting based on our audits. We are a public accounting firm registered with the Public Company Accounting Oversight Board (United States) (PCAOB) and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the consolidated financial statements are free of material misstatement, whether due to error or fraud, and whether effective internal control over financial reporting was maintained in all material respects.

Our audits of the consolidated financial statements included performing procedures to assess the risks of material misstatement of the consolidated financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the consolidated financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the consolidated financial statements. Our audit of internal control over financial reporting included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design and operating effectiveness of internal control based on the assessed risk. Our audits also included performing such other procedures as we considered necessary in the circumstances. We believe that our audits provide a reasonable basis for our opinions.

Definition and Limitations of Internal Control over Financial Reporting

A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (ii) provide reasonable assurance that transactions are recorded as necessary to permit

Table of Contents

preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Critical Audit Matters

The critical audit matter communicated below is a matter arising from the current period audit of the consolidated financial statements that was communicated or required to be communicated to the audit committee and that (i) relates to accounts or disclosures that are material to the consolidated financial statements and (ii) involved our especially challenging, subjective, or complex judgments. The communication of critical audit matters does not alter in any way our opinion on the consolidated financial statements, taken as a whole, and we are not, by communicating the critical audit matter below, providing a separate opinion on the critical audit matter or on the accounts or disclosures to which it relates.

Revenue Recognition

As described in Notes 2 and 16 to the consolidated financial statements, the Company’s total revenue was $3.8 billion for the year ended December 31, 2023. The Company primarily derives revenue from the sale of services to customers executing contracts having terms of one year or longer. Services included in the Company’s contracts consist of security solutions, the delivery of content, applications and software over the internet, cloud computing solutions and professional services. Revenue is recognized upon transfer of control of promised services in an amount that reflects the consideration the Company expects to receive in exchange for those services. Most security, delivery and compute services represent stand-ready obligations that are satisfied over time as the customer simultaneously receives and consumes the benefits provided by the Company. Accordingly, revenue for those services is recognized over time, generally ratably over the term of the arrangement due to consistent monthly usage commitments that expire each period. A small percentage of the Company’s contracts are satisfied at a point in time, such as one-time professional services contracts, integration services and most license sales where the primary obligation is delivery of the license at the start of the term. In these cases, revenue is recognized at a point in time of delivery or satisfaction of the performance obligation.

The principal considerations for o

Showing the first 8K of 177K characters. Open the full section

None.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer (our principal executive officer and principal financial officer, respectively), evaluated the effectiveness of our disclosure controls and procedures as of December 31, 2023. The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended ("the Exchange Act"), means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosures. Based on the evaluation of our disclosure controls and procedures as of December 31, 2023 our Chief Executive Officer and Chief Financial Officer concluded that, as of such date, our disclosure controls and procedures were effective at the reasonable assurance level.

Management’s Annual Report on Internal Control over Financial Reporting

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is defined in Rules 13a-15(f) and 15d-15(f) promulgated under the Exchange Act as a process designed by, or under the supervision of, the company's principal executive and principal financial officers and effected by the company’s board of directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles and includes those policies and procedures that:

• pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the company;

• provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and

• provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the company’s assets that could have a material effect on the financial statements.

Our management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2023. Based on this assessment, our management concluded that as of December 31, 2023, our internal control over financial reporting was effective based on those criteria at the reasonable assurance level. In making this assessment, our management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control — Integrated Framework (2013).

Table of Contents

The effectiveness of the Company’s internal control over financial reporting as of December 31, 2023 has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in its report, which is included in Item 8 of this annual report on Form 10-K.

Remediation of Previously Reported Material Weakness

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis.

A material weakness in internal control over financial reporting related to income taxes was identified in the Company’s internal control over financial reporting as of December 31, 2022. Specifically, the Company did not design and maintain effective controls over the adoption and application of new accounting standards related to income taxes.

This material weakness resulted in immaterial errors to net deferred tax assets and provision for income taxes for the interim periods ended March 31, 2022, June 30, 2022 and September 30, 2022. These immaterial errors also resulted in a revision to previously issued quarterly financial statements for each of these periods.

Our management, under the oversight of the Audit Committee, has designed and implemented changes to remediate the material weakness. We have enhanced the design and precision of our process and control for evaluating the adoption and application of new accounting standards in the area of income taxes. Our enhanced design includes the involvement of external tax advisors, as applicable. The material weakness was remediated as of December 31, 2023 as the enhanced control has been implemented for a sufficient period of time and is operating effectively.

Changes in Internal Control over Financial Reporting

No change in our internal control over financial reporting occurred during the fourth quarter ended December 31, 2023 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Table of Contents

(b) Director and Officer Trading Arrangements

The following table describes, for the quarterly period ending December 31, 2023, each trading arrangement for the sale or purchase of Company securities adopted, terminated or for which the amount, pricing or timing provisions were modified by our directors and officers that is either (1) a contract, instruction or written plan intended to satisfy the affirmative defense conditions of Rule 10b5-1(c) (a “Rule 10b5-1 trading arrangement”) or (2) a “non-Rule 10b5-1 trading arrangement” (as defined in Item 408(c) of Regulation S-K):

(1) The Rule 10b5-1 trading arrangement provides for the sale of a percentage of shares to be received upon future vesting of certain outstanding equity awards, net of any shares withheld by us to satisfy applicable taxes. The number of shares to be withheld, and thus the exact number of shares to be sold pursuant to Mr. McGowan's Rule 10b5-1 trading arrangement, can only be determined upon the occurrence of future vesting events. For purposes of this disclosure, we have reported the maximum aggregate number of shares to be sold without subtracting any shares to be withheld upon future vesting events.

(2) The Rule 10b5-1 trading arrangement provides for the sale of a percentage of shares to be received upon future vesting of certain outstanding equity awards, net of any shares withheld by us to satisfy applicable taxes. The number of shares to be withheld, and thus the exact number of shares to be sold pursuant to Mr. Karon's Rule 10b5-1 trading arrangement, can only be determined upon the occurrence of future vesting events. For purposes of this disclosure, we have reported the maximum aggregate number of shares to be sold without subtracting any shares to be withheld upon future vesting events.

(3) The Rule 10b5-1 trading arrangement provides for the sale of a percentage of shares to be received upon future vesting of certain outstanding equity awards, net of any shares withheld by us to satisfy applicable taxes. The number of shares to be withheld, and thus the exact number of shares to be sold pursuant to Mr. Ahola's Rule 10b5-1 trading arrangement, can only be determined upon the occurrence of future vesting events. For purposes of this disclosure, we have reported the maximum aggregate number of shares to be sold without subtracting any shares to be withheld upon future vesting events.

Not applicable.

Table of Contents

PART III

The complete response to this Item regarding the backgrounds of our executive officers and directors and other information required by Items 401, 405 and 407 of Regulation S-K will be contained in our definitive proxy statement for our 2024 Annual Meeting of Stockholders under the sections captioned “Executive Compensation Matters,” “Delinquent Section 16(a) Reports” and “Corporate Governance Highlights” and is incorporated by reference herein.

Our executive officers and directors and their positions as of February 28, 2024, are as follows:

We have adopted a written code of business ethics, as amended, that applies to our principal executive officer, principal financial officer and principal accounting officer or persons serving similar functions and all of our other employees and members of our board of directors. The text of our amended code of ethics is available on our website at www.akamai.com. If we amend, or grant a waiver under, our code of business ethics that applies to our principal executive officer, principal financial officer and principal accounting officer, or persons performing similar functions, we intend to post information about such amendment or waiver on our website at www.akamai.com.

The information required by this Item is incorporated by reference herein to our definitive proxy statement for our 2024 Annual Meeting of Stockholders under the sections captioned “Executive Compensation Matters,” “Corporate Governance Highlights,” “Compensation Committee Interlocks and Insider Participation” and “Director Compensation.”

The information required by this Item is incorporated by reference herein to our definitive proxy statement for our 2024 Annual Meeting of Stockholders under the sections captioned “Executive Compensation Matters,” “Security Ownership of Certain Beneficial Owners and Management” and “Securities Authorized for Issuance Under Equity Compensation Plans.”

The information required by this Item is incorporated by reference herein to our definitive proxy statement for our 2024 Annual Meeting of Stockholders under the sections captioned “Certain Relationships and Related Party Transactions; Code of

Table of Contents

Ethics; Interest in Annual Meeting Matters,” “Corporate Governance Highlights” and “Compensation Committee Interlocks and Insider Participation.”

The information required by this Item is incorporated by reference herein to our definitive proxy statement for our 2024 Annual Meeting of Stockholders under the section captioned “Ratification of Selection of Independent Auditors.”

PART IV

(a)Documents Filed as Part of this Annual Report on Form 10-K

1.Financial Statements (included in Item 8 of this Annual Report on Form 10-K):

• Report of Independent Registered Public Accounting Firm

• Consolidated Balance Sheets as of December 31, 2023 and 2022

• Consolidated Statements of Income for the years ended December 31, 2023, 2022 and 2021

• Consolidated Statements of Comprehensive Income for the years ended December 31, 2023, 2022 and 2021

• Consolidated Statements of Cash Flows for the years ended December 31, 2023, 2022 and 2021

• Consolidated Statements of Stockholders' Equity for the years ended December 31, 2023, 2022 and 2021

• Notes to Consolidated Financial Statements

2.Financial Statement Schedules

Financial statements schedules are omitted as they are either not required or the information is otherwise included in the consolidated financial statements.

(b)Exhibits

EXHIBIT INDEX

Table of Contents

Table of Contents

Table of Contents

Table of Contents

None.

Table of Contents

SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.