GWRE · CIK 1528396
What Guidewire Software, Inc. told the SEC could break it.
Guidewire's fortunes are bound to a single vertical: all of its revenue and ARR come from property-and-casualty insurers, so its results track that industry's catastrophe and macroeconomic cycles, and its top ten customers were about 20% of revenue and ARR in fiscal 2025. It also depends on outside technology — it licenses third-party IP, including AI capabilities integrated into certain products, where a loss of access, unfavorable terms, incompatibility or disruption could reduce its products' functionality and appeal. A lower-severity but concrete exposure is geographic: its headquarters and a substantial portion of its operations sit in the San Francisco Bay Area, where an earthquake, wildfire, flood or major power outage could materially disrupt the business.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- P&C insurance industry concentrationmedium
All of Guidewire's revenue and ARR depend on orders from P&C insurers; the top 10 customers were ~20% of revenue/ARR in FY2025, and the customer base is exposed to catastrophe and macroeconomic cycles.
“Our revenue and ARR are dependent on orders from customers in the P&C insurance industry, which may be adversely affected by worldwide economic, environmental, public health, and political conditions. A relatively small number of customers have historically accounted for a significant portion of our revenue. The composition of our individual top customers has varied and will continue to vary from year to year. Our ten largest customers accounted for 20% and 22% of our revenue in fiscal years 2025 and 2024, respectively.”
SEC filing →As of 2025
Supplier concentration
- third-party technology / AI licensing dependencemedium
Guidewire licenses third-party technology and IP — including AI technologies — for certain products; loss of access, unfavorable terms, incompatibility or disruption to that third-party software/infrastructure could reduce product functionality.
“We use technology and intellectual property licensed from unaffiliated third parties in certain of our products, and we may license additional third-party technology and intellectual property in the future. This may include certain AI technologies that are, or may in the future be, integrated into our products and licensed from third parties. Our ability to provide these AI-enabled capabilities may depend on access to specific third-party software or infrastructure, and any loss of access, unfavorable changes in terms, incompatibility, or disruption in such technologies could reduce the functionality of our products, make them less appealing to customers, and harm our reputation and business.”
SEC filing →As of 2025
Climate & physical
- San Francisco Bay Area natural-disaster exposurelow
Guidewire's HQ and a substantial portion of operations are in the San Francisco Bay Area, exposed to earthquakes, wildfires, flooding/rising sea levels and power outages that could materially disrupt the business.
“Our corporate headquarters and a substantial portion of our operations are located in the San Francisco Bay Area, a region known for seismic activity, rising ocean levels, and proximity to areas prone to severe wildfires. A significant natural disaster, such as earthquake, tsunami, wildfire, flood or significant power outage affecting the Bay Area, could have a material adverse impact on our business, results of operations, and financial condition.”
SEC filing →As of 2025
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch