Table of Contents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

FORM 10-K

COMMISSION FILE NUMBER 0-20191

Intrusion Inc.

(Exact name of registrant as specified in its charter)

Registrant’s telephone number, including area code: (972) 234-6400

Securities registered pursuant to Section 12(b) of the Act:  None

Securities registered pursuant to Section 12(g) of the Act:

Common Stock, $0.01 par value

(Title of class)

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.

Yes o  No ý

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Exchange Act.

Yes o  No ý

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Exchange Act during the past 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.                                                                                                                                                                                             Yes ý  No o

Indicate by check mark whether the registrant has submitted electronically and posted on its corporate website, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files).                                                                                                                                             Yes ý  No o

Indicate by check mark if disclosure of delinquent filers in response to Item 405 of Regulation S-K is not contained herein, and will not be contained, to the best of the registrant’s knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K.                                                                                                                                                       ý

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company.  See definition of “large accelerated filer,”  “accelerated filer” and “smaller reporting company” in Rule 12b-2 of the Exchange Act:

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).

Yes o  No ý

State the aggregate market value of the voting and non-voting common equity held by non-affiliates computed by reference to the price at which the common equity was last sold, or the average bid and asked price of such common equity, as of June 30, 2012:  $5,401,000.

As of March 28, 2013, 12,172,017 shares of the issuer’s Common Stock were outstanding.

Table of Contents

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the Registrant’s definitive Proxy Statement filed in connection with the Registrant’s 2013 Annual Meeting of Stockholders are incorporated by reference into Part III of this Annual Report on Form 10-K.

INTRUSION INC.

INDEX

2

Table of Contents

PART I

Item 1.         Description of Business.

In addition to the historical information contained herein, the discussion in this Annual Report on Form 10-K contains certain forward-looking statements, within the meaning of the Private Securities Litigation Reform Act of 1995, that involve risks and uncertainties, such as statements concerning:

·                                          growth and anticipated operating results;

·                                          developments in our markets and strategic focus;

·                                          new products and product enhancements;

·                                          potential acquisitions and the integration of acquired businesses, products and technologies;

·                                          strategic relationships and future economic and business conditions.

The cautionary statements made in this Form 10-K should be read as being applicable to all related forward-looking statements whenever they appear in this Form 10-K. Our actual results could differ materially from the results discussed in the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those discussed under the section captioned “Risk Factors” in Item 1A of this Form 10-K as well as those cautionary statements and other factors set forth elsewhere herein.

General

We develop, market and support a family of entity identification, high speed data mining, regulated information compliance, data privacy protection and network intrusion prevention/detection products.  Our product families include:

·                                          TraceCop™ for identity discovery and disclosure,

·                                          Savant™ for network data mining,

·                                          Compliance Commander™ for regulated information and data privacy protection, and

·                                          SecureNet™ for network intrusion prevention and detection.

We market and distribute our products through a direct sales force to:

·                                          end-users,

·                                          value-added resellers,

·                                          system integrators,

·                                          managed service providers, and

·                                          distributors.

Our end-user customers include:

·                                          U.S. federal government entities,

·                                          foreign government entities,

·                                          local government entities,

·                                          banks,

·                                          credit unions,

·                                          other financial institutions,

·                                          hospitals and other healthcare providers, and

·                                          other customers.

Essentially, our end-users can be defined as any end-users requiring network security solutions for protecting their mission critical data.

We were organized in Texas in September 1983 and reincorporated in Delaware in October 1995.  Our principal executive offices are located at 1101 East Arapaho Road, Suite 200, Richardson, Texas 75081, and our telephone number is (972) 234-6400.  Our website URL is www.intrusion.com.  References to the “Company”, “we”, “us”, “our”, “Intrusion” or “Intrusion Inc.” refer to Intrusion Inc. and its subsidiaries.  Compliance Commander, SecureNet, TraceCop and Savant are trademarks of Intrusion Inc.

3

Table of Contents

On March 29, 2006, we entered into a Loan and Security Agreement with Silicon Valley Bank (“SVB”) to establish a $1.0 million line of credit (the “2006 Credit Line”).  On June 30, 2008, we entered into an Amended and Restated Loan and Security Agreement with SVB to, among other things, replace the 2006 Credit Line with a $2.5 million line of credit (the “2008 Credit Line”).  On June 25, 2012, we entered into the Fourth Amendment to the Amended and Restated Loan and Security Agreement (as amended, the “Loan Agreement”) with SVB to replace our expiring line with a $0.625 million line of credit (the “Current Line of Credit”).  Our obligations under the Loan Agreement are secured by substantially all of our assets, including all of our intellectual property.  In addition, G. Ward Paxton, the Company’s Chairman, President and Chief Executive Officer, has established a Guaranty Agreement with SVB securing all outstanding balances under the Current Line of Credit.  Borrowings under the Current Line of Credit are based on advances (each an “Advance”) against certain of our accounts receivable that are approved by SVB (each an “Eligible Account”).  SVB may make an Advance of up to eighty percent (80%) of each Eligible Account, or such other percentage SVB may determine in its sole discretion.  Each Advance is subject to a finance charge calculated as a daily rate that is based on a 360-day annual rate of the greater of the prime rate plus 2.0% or 7.0%.  Finance charges are payable at the same time its related Advance is due.  Each Advance is also subject to a monthly collateral handling fee of 0.5% of all outstanding Advances, depending on certain qualifying financial factors specified in the Loan Agreement.  The collateral handling fee is payable at the same time its related Advance is due.  Each Advance must be repaid at the earliest of (a) the date that the Eligible Account related to the Advance is paid, (b) the date the Eligible Account is no longer eligible under the Loan Agreement, or (c) the date on which any “Adjustment” (as defined in the Loan Agreement) is asserted to the Eligible Account.  On June 24, 2013, the Loan Agreement terminates and all outstanding Advances, accrued but unpaid finance charges, outstanding collateral handing fees, and other amounts become due under the Loan Agreement and related documents.  We have certain non-financial and financial covenants, including a liquidity coverage ratio and a rolling EBITDA computation, as defined in the Loan Agreement.

On February 9, 2012, the Company entered into an unsecured revolving promissory note to borrow up to $2,200,000 from G. Ward Paxton, the Company’s Chief Executive Officer.  Under the terms of the note, the Company may borrow, repay and reborrow on the loan as needed up to an outstanding principal balance due of $2,200,000 at any given time through March 2013.

On February 7, 2013, the Company entered into an unsecured revolving promissory note to borrow up to $2,200,000 from G. Ward Paxton, the Company’s Chief Executive Officer.  Under the terms of the note, the Company may borrow, repay and reborrow on the loan as needed up to an outstanding principal balance due of $2,200,000 at any given time through March 2014.

Amounts borrowed from this officer accrue interest at a floating rate per annum equal to SVB’s prime rate plus 1% (5% at December 31, 2012).  All outstanding borrowings and accrued but unpaid interest is due on March 31, 2014.  As of December 31, 2012, the borrowings outstanding totaled $1,530,000 and accrued interest totaled $130,000.

Government Sales

Sales to U.S. government customers accounted for 40.5% of our revenues for the year ended December 31, 2012, compared to 38.4% of our revenue in 2011.  We expect to continue to derive a substantial portion of our revenues from sales to governmental entities in the future as we continue to market our entity identification products, our data mining products, our regulated compliance and data leakage prevention products and our network intrusion prevention products to the government.  Sales to the government present risks in addition to those involved in sales to commercial customers that could adversely affect our revenues, including potential disruption due to irregularities in or interruptions to appropriation and spending patterns, delays in approving a federal budget and the government’s reservation of the right to cancel contracts and purchase orders for its convenience.

Generally, we make our sales under purchase orders and contracts.  Our customers, including government customers, may cancel their orders or contracts with little or no prior notice and without penalty.  Although we transact business with various government entities, we believe that the cancellation of any particular order in itself could have a material adverse effect on our financial results.  Because we derive and expect to continue to derive a substantial portion of our revenue from sales to government entities, a large number of cancelled or renegotiated government orders or contracts could have a material adverse effect on our financial results.  Currently, we are not aware of any proposed cancellation or renegotiation of any of our existing arrangements with government entities.

Industry Background

We develop, market and support a family of entity identification products, data mining, regulated information compliance and data privacy protection, and network intrusion prevention/detection products.  Our product families include:

4

Table of Contents

·                                          TraceCop for identity identification;

·                                          Savant for data mining;

·                                          Compliance Commander for regulated information compliance and data privacy protection; and

·                                          SecureNet for network intrusion prevention and detection.

Intrusion’s products help protect critical information assets by quickly detecting, protecting, analyzing and reporting attacks or misuse of classified, private and regulated information for government and enterprise networks.

Products

TraceCop

Our TraceCop product family includes a database of worldwide IP addresses which are regularly updated.  In addition, other information and analysis results, such as geo-location data, may also be included.  Customers use the TraceCop data to aid in the identification and location of individuals involved in cyber crime.  In addition to the IP database, the TraceCop family includes analysis software and a GUI interface to assist analysts in locating the bad guys.  We license TraceCop to our customers for a fee and offer continuing maintenance and upgrade services for the TraceCop database.  We either install and service the database at the Intrusion facility or install the TraceCop database on a customer server onsite.

Savant

Savant, a new product offering announced in the first quarter of 2010, is a high-speed network data mining product which organizes the data into networks of relationships.  Savant operates on networks with data flows of up to 20 gigabits (10 gigabits at full duplex).  Savant can read and record up to 20 gigabits without dropping packets.  Some of the unique features include analysis which determines associations.  Uses of the Savant product include data mining and internet habits of the customer’s network users.  The Savant solution provides real-time access and insight into a company’s own indisputable and quantifiable network data for more effective, unbiased decision making.  We believe this new insight can provide the ability to address many of today’s major challenges faced by corporations, such as company infrastructure issues, performance issues, and identifying the true “Wizards” or recognized experts within their organization.  Savant provides deep inspection of network traffic recording interesting data and relationships.  Savant is a software product which we license to our customers and for which we sell maintenance and upgrades.  We also re-sell the server required to implement Savant into the customer’s network.

Compliance Commander

Compliance Commander is our data leak prevention product family.  Compliance Commander is a software product which operates on a standard computer or server and connects in-line to the customers’ network.  We license the Compliance Commander software to our customers and sell software maintenance and upgrades.  We also resell standard computers for implementation of the software.

SecureNet

SecureNet is our Network Intrusion/Detection product family.  SecureNet is a software product that operates on a standard computer or server and connects in-line to the customer’s network.  We license the SecureNet software to our customers and additionally sell software maintenance and upgrades.  We also resell standard computers for implementation of the software.

5

Table of Contents

Third-Party Products

We currently resell standard commercially available computers and servers from various vendors which we integrate with our different software products for implementation into our customer networks.  We do not consider any of these third party relationships to be material to the Company’s business or results of operations.

Customer Services

In addition to offering our listed products, we also offer a wide range of services, including design and configuration, project planning, training, installation and maintenance.

Product Development

The network security industry is characterized by rapidly changing technology, standards and customer demands all shaped by the current state of the economy.  We believe that our future success depends in large part upon the timely enhancement of existing products as well as the development of new technologically advanced products that meet industry standards, perform successfully and simplify the users’ tasks so that they can do more with fewer resources.  We are currently marketing TraceCop, Savant, Compliance Commander and SecureNet products to meet emerging market requirements and are continuously engaged in testing to ensure that our products interoperate with other manufacturers’ products, which comply with industry standards.

During 2012 and 2011, our research and development expenditures were approximately $1.7 and $1.6 million, respectively.  All of our expenditures for research and development have been expensed as incurred.  At December 31, 2012, we had 19 employees engaged in research, product development and engineering.

Manufacturing and Supplies

Our internal manufacturing operations consist primarily of replication of software on CDs, packaging, testing and quality control of finished units.

The hardware we sell are standard off-the-shelf products, which we sell directly to OEM customers or resell from our suppliers.

Intellectual Property and Licenses

Our success and our ability to compete are dependent, in part, upon our proprietary technology.  We principally rely on a combination of contractual rights, trade secrets and copyright laws to establish and protect our proprietary rights in our products. In addition, we have recently applied for two patents with one being successfully issued and the other remaining in process.  We have also entered into non-disclosure agreements with our suppliers, resellers and certain customers to limit access to and disclosure of proprietary information. There can be no assurance that the steps taken by us to protect our intellectual property will be adequate to prevent misappropriation of our technology or that our competitors will not independently develop technologies that are substantially equivalent or superior to our technology.

We have entered into software and product license agreements with various suppliers. These license agreements provide us with additional software and hardware components that add value to our security products. These license agreements do not provide proprietary rights that are unique or exclusive to us and are generally available to other parties on the same or similar terms and conditions, subject to payment of applicable license fees and royalties.  We do not consider any of the product license, software or supplier agreements to be material to our business, but rather complementary to our business and product offerings.

Sales, Marketing and Customers

Field Sales Force.  Our direct sales organization focuses on major account sales, channel partners including distributors, value added resellers (VARs) and integrators; promotes our products to current and potential customers; and monitors evolving customer requirements. The field sales and technical support force provides training and technical support to our resellers and end users and assists our customers in designing secure data networking solutions.  We currently conduct sales and marketing efforts from our principal office in Richardson (Dallas), Texas.  In addition, we have sales personnel, sales engineers or sales representatives located in California, Europe and Asia.

6

Table of Contents

Distributors.  We have signed distribution agreements with distributors in the United States, Europe and Asia. In general, these relationships are non-exclusive.

Resellers.  Resellers such as domestic and international system integrators and VARs sell our products as stand-alone solutions to end users and integrate our products with products sold by other vendors into network security systems that are sold to end users. Our field sales force and technical support organization provide support to these resellers. Our agreements with resellers are non-exclusive, and our resellers generally sell other products that may compete with our products. Resellers may place higher priority on products of other suppliers who are larger and have more name recognition, and there can be no assurance that resellers will continue to sell and support our products.

Foreign Sales.  We believe that rapidly evolving international markets are important sources of future sales. Our export sales are currently being made through an indirect sales force comprised of international resellers in Europe and Asia.  Export sales accounted for approximately 0.1% of total revenue in 2012 compared to 0.2% in 2011.  See “Management’s Discussion and Analysis of Financial Condition and Results of Operations” included in this report for a geographic breakdown of our revenue in 2012 and 2011. Sales to foreign customers and resellers generally have been made in United States dollars.

Marketing.  We have implemented several methods to market our products, including participation in trade shows and seminars, telemarketing, distribution of sales literature and product specifications and ongoing communication with our resellers and installed base of end-user customers.

Customers.  Our end-user customers include U.S. federal government entities, foreign government entities, banks, credit unions, other financial institutions, hospitals and other healthcare providers.  Sales to certain customers and groups of customers can be impacted by seasonal capital expenditure approval cycles, and sales to customers within certain geographic regions can be subject to seasonal fluctuations in demand.

In 2012, 40.5% of our revenue was derived from a variety of U.S. government entities through direct sales and indirectly through system integrators and resellers.  In 2012, 38.2% of our total revenues are attributable to four U.S. Government customers through direct and indirect channels, two of which exceeded 10% of total revenue individually in 2012.  Comparatively, sales to the U.S. Government through direct and indirect channels totaled 38.4% of total revenues for 2011 and 34.2% of our total revenues in 2011 were attributable to three customers, one of which exceeded 10% of our total revenues individually.  A reduction in our sales to U.S. government entities could have a material adverse effect on our business and operating results if not replaced.

Backlog.  We believe that only a small portion of our order backlog is non-cancelable and that the dollar amount associated with the non-cancelable portion is immaterial. We purchase, or contract for the purchase of, our inventory based upon our forecast of customer demand and we maintain inventories in advance of receiving firm orders from customers. Commercial orders are generally fulfilled within two days to two weeks following receipt of an order. Certain government orders may be scheduled over several months, generally not exceeding one year.

Customer Support, Service and Warranty.  We service, repair and provide technical support for our products. Our field sales and technical support force works closely with resellers and end-user customers on-site and by telephone to assist with pre- and post-sales support services such as network security design, system installation and technical consulting. By working closely with our customers, our employees increase their understanding of end-user requirements and provide input to the product development process.

We warrant all of our products against defects in materials and workmanship for periods ranging from 90 days to 12 months. Before and after expiration of the product warranty period, we offer both on-site and factory-based support, parts replacement and repair services. Extended warranty services are separately invoiced on a time and materials basis or under an annual maintenance contract.

Competition

The market for network and data protection security solutions is intensely competitive and subject to frequent product introductions with new technologies, improved price and performance characteristics. Industry suppliers compete in areas such as conformity to existing and emerging industry standards, interoperability with networking and other security products, management and security capabilities, performance, price, ease of use, scalability, reliability, flexibility, product features and technical support.   The market for identity identification and data mining is more fragmented and thus allows more opportunities for small companies to compete in.

7

Table of Contents

There are numerous companies competing in various segments of the data security markets. At this time, we have limited competitors for TraceCop; however, we expect competitors to emerge in the future.  These competitors perform some of the functions that we perform with TraceCop but not all of the functions.  Also, we have been collecting the TraceCop data continuously for more than six years.  We believe that none of our current or future competitors have the ability to provide this historical data.  In our newest market segment, data mining, we compete with several small companies including Niksun and NetScout. Our competitors in the regulated information compliance market include Vontu (Symantec), Port Authority (Websense), Vericept, Reconnex (McAfee Inc.), Tablus (RSA Security) and a small number of start-up companies that entered the space within the last two years.  Our principal competitors in the network intrusion prevention and detection market include Internet Security Systems, Inc. (IBM), Cisco Systems, Inc., Symantec, Inc., Netscreen  (Juniper Networks, Inc.), McAfee Inc., Tipping Point Technologies, a division of 3Com Corporation, and NFR Security (Checkpoint).

Furthermore, some of our competitors have substantially greater financial, technical, sales and marketing resources, better name recognition and a larger customer base than we do. Even if we do introduce advanced products that meet evolving customer requirements in a timely manner, there can be no assurance that our new products will gain market acceptance.

Certain companies in the network security industry have expanded their product lines or technologies in recent years as a result of acquisitions. Further, more companies have developed products which conform to existing and emerging industry standards and have sought to compete on the basis of price. We anticipate increased competition from large networking equipment vendors, which are expanding their capabilities in the network security market. In addition, we anticipate increased competition from private “start-up” companies that have developed, or are developing, advanced security products. Increased competition in the security industry could result in significant price competition, reduced profit margins or loss of market share, any of which could have a material adverse effect on our business, operating results and financial condition. There can be no assurance that we will be able to compete successfully in the future with current or new competitors.

Employees

As of December 31, 2012, we employed a total of 31 full time persons, including 8 in sales, marketing and technical support, 19 in research, product development and engineering, and 4 in administration and finance.

None of our employees are represented by a labor organization, and we are not a party to any collective bargaining agreement. We have not experienced any work stoppages and consider our relations with our employees to be good.

Competition in the recruiting of personnel in the networking and data security industry is intense. We believe that our future success will depend in part on our continued ability to hire, motivate and retain qualified management, sales, marketing, and technical personnel. To date, we have not experienced significant difficulties in attracting or retaining qualified employees.

Item 1A. Risk Factors

In addition to the other information in this Form 10-K, the following factors should be considered in evaluating Intrusion Inc. and our business.

We may not have sufficient cash to operate our business and may not be able to maintain certain liquidity requirements under our existing debt instruments.  Additional debt and equity offerings to fund future operations may not be available and, if available, may significantly dilute the value of our currently outstanding common stock.

As of December 31, 2012, we had cash and cash equivalents of approximately $52,000, down from approximately $308,000 as of December 31, 2011.  We generated net loss of $246,000 for the year ended December 31, 2012 compared to a net loss of $933,000 for the year ended December 31, 2011.  As of December 31, 2012, in addition to cash and cash equivalents of $52,000, we had $456,000 in funding available under our $0.625 million line of credit at Silicon Valley Bank (“SVB”) and $0.67 million funding available from a promissory note to borrow up to $2.2 million from G. Ward Paxton, the Company’s Chief Executive Officer.   We are currently obligated to make payments of accrued dividends on all our outstanding shares of preferred stock in aggregate amount equal to $279,000 that will reduce our future cash resources if and as when we become legally able to pay these accrued dividends under Delaware law.   Based on projections of growth in revenue and net income in the coming quarters, and the borrowings available previously mentioned, we believe that we will have  sufficient cash resources to finance our operations and expected capital expenditures for the next twelve months.  We expect to fund our operations through Company profits, our line of credit, borrowings from the Company’s CEO, and

8

Table of Contents

possibly additional investments of private equity and debt, which, if we are able to obtain, will have the effect of diluting our existing common stockholders, perhaps significantly.  Any equity or debt financings, if available at all, may be on terms which are not favorable to us and, in the case of equity financings, may result in dilution to our stockholders. If our operations do not generate positive cash flow in the upcoming year, or if we are not able to obtain additional debt or equity financing on terms and conditions acceptable to us, if at all, we may be unable to implement our business plan, fund our liquidity needs or even continue our operations.

We had a net loss of $0.2 million for the year ended December 31, 2012 and have an accumulated deficit of $59.0 million as of December 31, 2012.  To achieve sustainable profitability, we must generate increased revenue.

For the year ended December 31, 2012, we sustained a net loss of $0.2 million and had an accumulated deficit of approximately $59.0 million as of December 31, 2012, compared to a net loss of $0.9 million and an accumulated deficit of approximately $58.8 million as of December 31, 2011.  We need to generate greater revenue from the sales of our products if we are to sustain profitability.  If we are unable to generate greater revenue, net losses may continue and we may never be able to sustain profitability or generate positive cash flow from operations in the future.

If our newer products do not achieve market acceptance, our revenue growth may suffer.

Our new network security products and entity identification products have been in the market place for a limited period of time and may have longer sales cycles than our previous products.  Accordingly, we may not achieve the meaningful revenue growth needed to sustain operations.  We can provide no assurances that sales of our newer products will continue to grow or generate sufficient revenues to sustain our business.  If we are unable to recognize revenues due to longer sales cycles or other problems, our results of operations will be adversely affected, perhaps materially.

We have not yet received broad market acceptance for our newer products.  We cannot assure you that our present or future products will achieve market acceptance on a sustained basis.  In order to achieve market acceptance and achieve future revenue growth, we must introduce complementary security products, incorporate new technologies into our existing product lines and design, develop and successfully commercialize higher performance products in a timely manner.  We cannot assure you that we will be able to offer new or complementary products that gain market acceptance quickly enough to avoid decreased revenues during current or future product introductions or transitions.

A large percentage of our revenues are received from U.S. government entities, and the loss of any one of these customers could reduce our revenues and materially harm our business and prospects.

A large percentage of our revenues result from sales to U.S. government entities.  If we were to lose one or more of these key relationships, our revenues could decline and our business and prospects may be materially harmed. We expect that even if we are successful in developing relationships with non-governmental customers, our revenues will continue to be concentrated among government entities. For the years ended December 31, 2010, 2011 and 2012, sales to U.S. government entities collectively accounted for 60.3%, 38.4% and 40.5% of our total net revenues, respectively. The loss of any of these key relationships may send a negative message to other U.S. government entities or non-governmental customers concerning our product offering.  We cannot assure you that U.S. government entities will be customers of ours in future periods or that we will be able to diversify our customer portfolio to adequately mitigate the risk of loss of any of these customers.

Government customers involve unique risks, which could adversely impact our revenues.

We expect to continue to derive a substantial portion of our revenues from U.S. government customers in the future.  Sales to the government present risks in addition to those involved in sales to commercial customers, including potential disruption due to appropriation and spending patterns, delays in approving a federal budget and the government’s right to cancel contracts and purchase orders for its convenience.  General political and economic conditions, which we cannot accurately predict, directly and indirectly may affect the quantity and allocation of expenditures by federal departments.  In addition, obtaining government contracts may involve long purchase and payment cycles, competitive bidding, qualification requirements, delays or changes in funding, budgetary constraints, political agendas, extensive specification development and price negotiations and milestone requirements.  Each government entity also maintains its own rules and regulations with which we must comply and which can vary significantly among departments.  As a result, cutbacks or re-allocations in the federal budget or losses of government sales due to other factors could have a material adverse effect on our revenues and operating results.

9

Table of Contents

We are highly dependent on sales made through indirect channels, the loss of which would materially adversely affect our operations.

For the years ended December 31, 2010, 2011 and 2012, we derived 61.0%, 39.3% and 33.1% of our revenues from sales through indirect sales channels, such as distributors, value-added resellers, system integrators, original equipment manufacturers and managed service providers.  We must expand our sales through these indirect channels in order to increase our revenues.  We cannot assure you that our products will gain market acceptance in these indirect sales channels or that sales through these indirect sales channels will increase our revenues.  Further, many of our competitors are also trying to sell their products through these indirect sales channels, which could result in lower prices and reduced profit margins for sales of our products.

The payment of dividends on our preferred stock may strain our cash resources.

On March 25, 2004, we completed a $5,000,000 private placement pursuant to which we issued 1,000,000 shares of our 5% Convertible Preferred Stock (the “Series 1 Preferred Stock”) and warrants to acquire 556,619 shares of our common stock.  The conversion price for the Series 1 Preferred Stock is $3.144 per share.  As of February 28, 2013, there were 220,000 shares of the Series 1 Preferred Stock outstanding, representing approximately 349,873 shares of common stock upon conversion.

On March 28, 2005, we completed a $2,663,000 private placement pursuant to which we issued 1,065,200 shares of our Series 2 5% Convertible Preferred Stock (the “Series 2 Preferred Stock”) and warrants to acquire 532,600 shares of our common stock.  The conversion price for the Series 2 Preferred Stock is $2.50 per share.  As of February 28, 2013, there were 460,000 shares of the Series 2 Preferred Stock outstanding, representing 460,000 shares of common stock upon conversion.

On December 2, 2005, we completed a $1,230,843 private placement pursuant to which we issued 564,607 shares of our Series 3 5% preferred stock  (the “Series 3 Preferred Stock”) and warrants to acquire 282,306 shares of our common stock.  The conversion price for the Series 3 Preferred Stock is $2.18 per share.   As of February 28, 2013, there were 354,056 shares of Series 3 Preferred Stock outstanding, representing 354,056 shares of common stock upon conversion.

If we are unable to pay scheduled dividends on shares of our preferred stock it could potentially result in additional consequences, some of them material.

Delaware law provides that we may only pay dividends out of our capital surplus or, if no surplus is available, out of our net profits for the fiscal year the dividend is declared and/or the preceding fiscal year.  We currently have dividend payments that are past due because we do not currently have a capital surplus or fiscal year net profits.  We cannot assure you that our net assets will exceed our stated capital or that we will have sufficient net profits in order to pay these dividends in the future.  These dividends continue to accrue on all our outstanding shares of preferred stock, regardless of whether we are legally able to pay them.  If we continue to be unable to pay dividends on our preferred stock, we will be required to accrue an additional late fee penalty of 18% per annum on the unpaid dividends for the Series 2 Preferred Stock and Series 3 Preferred Stock.  Our CEO, CFO and one outside board member who are invested in Series 2 and Series 3 Preferred Stock have waived any possible late fee penalties.  In addition to this late penalty, the holders of our Series 2 Preferred Stock and Series 3 Preferred Stock could elect to present us with written notice of our failure to pay dividends as scheduled, in which case we would have 45 days to cure such a breach.  In the event that we failed to cure the breach, the holders of these shares of preferred stock would then have the right to require us to redeem their shares of preferred stock for a cash amount calculated in accordance with their respective certificates of designation.  If we were required to redeem all shares of Series 2 Preferred Stock and Series 3 Preferred Stock as of February 28, 2013 the aggregate redemption price we would owe would be $2.0 million.

You will experience substantial dilution upon the conversion or redemption of the shares of preferred stock or in the event we raise additional funds through the issuance of new shares of our common stock or securities convertible or exercisable into shares of common stock.

On March 28, 2013, we had 12,172,017 shares of common stock outstanding.  Upon conversion of all outstanding shares of preferred stock, we will have 13,335,946 shares of common stock outstanding, approximately a 9.6% increase in the number of shares of our common stock outstanding.

In addition, management may issue additional shares of common stock or securities exercisable or convertible into shares of common stock in order to finance our continuing operations.  Any future issuances of such securities would have

10

Table of Contents

additional dilutive effects on the existing holders of our Common Stock.

Further, the occurrence of certain events could entitle holders of our Series 2 Preferred Stock and Series 3 Preferred Stock to require us to redeem their shares for a certain number of shares of our common stock.  Assuming (i) we have paid all liquidated damages and other amounts to the holders, (ii) paid all outstanding dividends, (iii) a volume weighted average price of $0.31, which was the ten-day volume weighted average closing price of our common stock on March 8, 2013, and (iv) our 12,172,017 shares of common stock outstanding on March 8, 2013, upon exercise of their redemption right by the holders of the Series 3 Preferred Stock and the Series 2 Preferred Stock, we would be obligated to issue approximately 11,524,000 shares of our common stock.  This would represent an increase of approximately 95.5% in the number of shares of our common stock as of March 8, 2013.

The conversion of preferred stock we issued in the private placements may cause the price of our common stock to decline.

The holders of the shares of our 5% Preferred Stock may freely convert their shares of preferred stock and sell the underlying shares of common stock pursuant to Rule 144 of the Securities and Exchange Commission.  As of February 28, 2013, 780,000 shares of our 5% Preferred Stock had converted into 1,240,457 shares of common stock.

The holders of the shares of Series 2 5% Preferred Stock may freely convert their shares of preferred stock and sell the underlying shares of common stock pursuant to Rule 144 of the Securities and Exchange Commission.  As of February 28, 2013, 605,200 shares of Series 2 Preferred Stock had converted into 605,200 shares of common stock.

The holders of the shares of Series 3 5% Preferred Stock may freely convert their shares of Series 3 Preferred Stock and sell the underlying shares of common stock pursuant to Rule 144 of the Securities and Exchange Commission.  As of February 28, 2013, 210,551 shares of Series 3 Preferred Stock had converted into 210,551 shares of common stock.

For the four weeks ended on March 8, 2013, the average daily trading volume of our common stock on the OTCBB was 4,470 shares.  Consequently, if holders of preferred stock elect to convert their remaining shares and sell a material amount of their underlying shares of common stock on the open market, the increase in selling activity could cause a decline in the market price of our common stock.  Furthermore, these sales, or the potential for these sales, could encourage short sales, causing additional downward pressure on the market price of our common stock.

Certain rights of the holders of our preferred stock and the terms of our secured credit line may hinder our ability to raise additional financing.

Under the terms of our preferred stock instruments, we cannot issue shares of capital stock with rights senior to those of our existing 5% Preferred Stock, Series 2 5% Preferred Stock or Series 3 5% Preferred Stock without the approval of at least a majority of the holders of our 5% Preferred Stock, all of the holders of our Series 2 5% Preferred Stock, and holders of at least 75% of our Series 3 5% Preferred Stock voting or acting as separate classes.  We also cannot incur certain indebtedness without the approval of at least a majority of the holders of each class of our Preferred Stock.  Furthermore, the terms of our secured credit line with SVB include covenants which restrict our ability to incur additional debt and pay certain dividends.  The combination of these provisions could hinder or delay our ability to raise additional debt or equity financing.

You will experience substantial dilution upon the exercise of stock options currently outstanding.

On March 8, 2013, we had 12,172,017 shares of common stock outstanding.  Upon the exercising of current options issued at or below the exercise price of $0.50, we will have 13,347,199 shares of common stock outstanding, approximately an 11.5% increase in the number of shares of our common stock outstanding.

We resemble a developmental stage company and our business strategy may not be successful.

From our founding in 1983 until 2000, we derived substantially all of our revenue from the design, manufacture and sale of local area networking equipment.  In order to permit us to focus our resources solely on developing and marketing our network security products, we sold our local area networking assets and related networking divisions.  We now depend exclusively on revenues generated from the sale of our network security products, which have received limited market acceptance.  We have recently introduced our entity identification and data mining products, and the market for these products has only begun to emerge.  We can provide no assurances that our newly introduced products will ever achieve widespread market acceptance or that an adequate market for these products will ever emerge.  Consequently, we resemble a

11

Table of Contents

developmental stage company and will face the following inherent risks and uncertainties:

·                                          the need for our entity identification and data mining products to achieve market acceptance and produce a sustainable revenue stream;

·                                          our ability to manage costs and expenses;

·                                          our dependence on key personnel;

·                                          our ability to obtain financing on acceptable terms; and

·                                          our ability to offer greater value than our competitors.

Our business strategy may not successfully address these risks.  If we fail to recognize significant revenues from the sales of our entity identification and data mining products, our business, financial condition and operating results would be materially adversely affected.

Our management and larger stockholders exercise significant control over our company and have the ability to approve or take actions that may be in conflict to your interests.

As of February 28, 2013, our executive officers, directors and preferred stockholders beneficially own approximately 28% of our voting power.  In addition, other related parties control approximately 30% of our voting power.  As a result, these stockholders will be able to exercise significant control over all matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, which could delay or prevent someone from acquiring or merging with us.  These stockholders may use their influence to approve or take actions that may be adverse to the interests of holders of our Common Stock.  Further, we contemplate the possible issuance of shares of our Common Stock or of securities exercisable or convertible into shares of our Common Stock in the future to our Chief Executive Officer and Chief Financial Officer.  Any such issuance will increase the percentage of stock our Chief Executive Officer, Chief Financial Officer and our management group beneficially hold.

We face intense competition from both start-up and established companies that may have significant advantages over us and our products.

The market for our products is intensely competitive. There are numerous companies competing with us in various segments of the data security markets, and their products may have advantages over our products in areas such as conformity to existing and emerging industry standards, interoperability with networking and other security products, management and security capabilities, performance, price, ease of use, scalability, reliability, flexibility, product features and technical support.

Our principal competitors in the data mining market include Niksun and NetScout.  Our principal competitors in the network intrusion prevention and detection market include Internet Security Systems, Inc. (IBM), Cisco Systems, Inc., Symantec, Inc., Juniper Networks, Inc., McAfee Inc., Tipping Point Technologies, a division of 3Com Corporation, and NFR Security, Inc.  Our competitors in the regulated information compliance market include Vontu (Symantec), Port Authority (Websense), Vericept, Reconnex (McAfee Inc.), Tablus (RSA Security) and a small number of start-up companies that entered the space within the last two years. Our current and potential competitors may have one or more of the following significant advantages over us:

·              greater financial, technical and marketing resources;

·              better name recognition;

·              more comprehensive security solutions;

·              better or more extensive cooperative relationships; and

·              larger customer base.

We cannot assure you that we will be able to compete successfully with our existing or new competitors.  Some of our competitors may have, in relation to us, one or more of the following: longer operating histories, longer-standing relationships with OEM and end-user customers and greater customer service, public relations and other resources. As a

12

Table of Contents

result, these competitors may be able to more quickly develop or adapt to new or emerging technologies and changes in customer requirements, or devote greater resources to the development, promotion and sale of their products. Additionally, it is likely that new competitors or alliances among existing competitors could emerge and rapidly acquire significant market share.

If we fail to respond to rapid technological changes in the network security industry, we may lose customers or our products may become obsolete.

The network security industry is characterized by frequent product introductions, rapidly changing technology and continued evolution of new industry standards.  We must also introduce upgrades to our products rapidly in response to customer needs such as new computer viruses or other novel external attacks on computer networks.  In addition, the nature of the network security industry requires our products to be compatible and interoperable with numerous security products, networking products, workstation and personal computer architectures and computer and network operating systems offered by various vendors, including our competitors.  As a result, our success depends upon our ability to develop and introduce in a timely manner new products and enhancements to our existing products that meet changing customer requirements and evolving industry standards. The development of technologically advanced network security products is a complex and uncertain process requiring high levels of innovation, rapid response and accurate anticipation of technological and market trends.  We cannot assure you that we will be able to identify, develop, manufacture, market or support new or enhanced products successfully in a timely manner.  Further, we or our competitors may introduce new products or product enhancements that shorten the life cycle of our existing products or cause our existing products to become obsolete.

Our products are highly technical and if they contain undetected errors, our business could be adversely affected and we might have to defend lawsuits or pay damages in connection with any alleged or actual failure of our products and services.

Our products are highly technical and complex, are critical to the operation of many networks and, in the case of our security products, provide and monitor network security and may protect valuable information. Our products have contained and may contain one or more undetected errors, defects or security vulnerabilities. Some errors in our products may only be discovered after a product has been installed and used by end customers. Any errors or security vulnerabilities discovered in our products after commercial release could result in loss of revenues or delay in revenue recognition, loss of customers and increased service and warranty cost, any of which could adversely affect our business and results of operations. In addition, we could face claims for product liability, tort or breach of warranty. Defending a lawsuit, regardless of its merit, is costly and may divert management’s attention. In addition, if our business liability insurance coverage is inadequate or future coverage is unavailable on acceptable terms or at all, our financial condition could be harmed.

A breach of network security could harm public perception of our security products, which could cause us to lose revenues.

If an actual or perceived breach of network security occurs in the network of a customer of our security products, regardless of whether the breach is attributable to our products, the market perception of the effectiveness of our products could be harmed. This could cause us to lose current and potential end customers or cause us to lose current and potential value-added resellers and distributors. Because the techniques used by computer hackers to access or sabotage networks change frequently and generally are not recognized until launched against a target, we may be unable to anticipate these techniques.

If our products do not interoperate with our customers’ networks, installations will be delayed or cancelled and could harm our business.

Our products are designed to interface with our customers’ existing networks, each of which have different specifications and utilize multiple protocol standards and products from other vendors. Many of our customers’ networks contain multiple generations of products that have been added over time as these networks have grown and evolved. Our products will be required to interoperate with many or all of the products within these networks as well as future products in order to meet our customers’ requirements. If we find errors in the existing software or defects in the hardware used in our customers’ networks, we may have to modify our software or hardware to fix or overcome these errors so that our products will interoperate and scale with the existing software and hardware, which could be costly and negatively impact our operating results. In addition, if our products do not interoperate with those of our customers’ networks, demand for our products could be adversely affected, orders for our products could be cancelled or our products could be returned. This could hurt our operating results, damage our reputation and seriously harm our business and prospects.

13

Table of Contents

Our products can have long sales and implementation cycles, which may result in us incurring substantial expenses before realizing any associated revenues.

The sale and implementation of our products to large companies and government entities typically involves a lengthy education process and a significant technical evaluation and commitment of capital and other resources.  This process is also subject to the risk of delays associated with customers’ internal budgeting and other procedures for approving capital expenditures, deploying new technologies within their networks and testing and accepting new technologies that affect key operations.  As a result, sales and implementation cycles for our products can be lengthy, and we may expend significant time and resources before we receive any revenues from a customer or potential customer.  Our quarterly and annual operating results could be materially harmed if orders forecast for a specific customer and for a particular period are not realized.

Consolidation in the network security industry may limit market acceptance of our products.

Several of our competitors have acquired security companies with complementary technologies in the past.  We expect consolidation in the network security industry to continue in the future.  These acquisitions may permit our competitors to accelerate the development and commercialization of broader product lines and more comprehensive solutions than we currently offer.  Acquisitions of vendors or other companies with which we have a strategic relationship by our competitors may limit our access to commercially significant technologies.  Further, business combinations in the network security industry are creating companies with larger market shares, customer bases, sales forces, product offerings and technology and marketing expertise, which may make it more difficult for us to compete.

We must adequately protect our intellectual property in order to prevent loss of valuable proprietary information.

We rely primarily on a combination of patent, copyright, trademark and trade secret laws, confidentiality procedures and non-disclosure agreements to protect our proprietary technology.  However, unauthorized parties may attempt to copy or reverse-engineer aspects of our products or to obtain and use information that we regard as proprietary.  Policing unauthorized use of our products is difficult, and we cannot be certain that the steps we have taken will prevent misappropriation of our intellectual property.  This is particularly true in foreign countries where the laws may not protect proprietary rights to the same extent as the laws of the United States and may not provide us with an effective remedy against unauthorized use.  If our protection of our intellectual property proves to be inadequate or unenforceable, others may be able to use our proprietary developments without compensation to us, resulting in potential cost advantages to our competitors.

We may incur substantial expenses defending ourselves against claims of infringement.

There are numerous patents held by many companies relating to the design and manufacture of network security systems.  Third parties may claim that our products infringe on their intellectual property rights.  Any claim, with or without merit, could consume our management’s time, result in costly litigation, cause delays in sales or implementations of our products or require us to enter into royalty or licensing agreements. Royalty and licensing agreements, if required and available, may be on terms unacceptable to us or detrimental to our business.  Moreover, a successful claim of product infringement against us or our failure or inability to license the infringed or similar technology on commercially reasonable terms could seriously harm our business.

Fluctuations in our quarterly revenues may cause the price of our common stock to decline.

Our operating results have varied significantly from quarter to quarter in the past, and we expect our operating results to vary from quarter to quarter in the future due to a variety of factors, many of which are outside of our control.  Significant portions of our expenses are not variable in the short term and we cannot reduce them quickly to respond to unexpected decreases in revenues.  Therefore, if revenues are below our expectations, this shortfall is likely to adversely and disproportionately affect our operating results.  Accordingly, we may not attain positive operating margins in future quarters.  Any of these factors could cause our operating results to be below the expectations of securities analysts and investors, which likely would negatively affect the price of our common stock.

The price of our common stock has been volatile in the past and may continue to be volatile in the future due to factors outside of our control.

The market price of our common stock has been highly volatile in the past and may continue to be volatile in the future.  For example, in fiscal year 2012, the market price of our common stock on the Over The Counter Bulletin Board (“OTCBB”) market fluctuated between $0.18 and $0.75 per share.  The market price of our common stock may fluctuate significantly in the future in response to a number of factors, many of which are outside our control, including:

14

Table of Contents

·      variations in our quarterly operating results;

·      changes in estimates of our financial performance by securities analysts;

·      changes in market valuations of our competitors;

·      thinly traded common stock;

·                  announcements by us or our competitors of new products, significant contracts, acquisitions, strategic relationships, joint ventures or capital commitments;

·      product or design flaws, product recalls or similar occurrences;

·      additions or departures of key personnel;

·      sales of common stock in the future; and

·                  fluctuations in stock market prices and volume, which are relatively typical for high technology companies.

Our acquisition of complementary products or businesses may adversely affect our financial condition.

We have made acquisitions in the past and, in the future we may acquire or invest in additional companies, business units, product lines or technologies to accelerate the development of products and sales channels complementary to our existing products and sales channels.  Negotiation of potential acquisitions and integration of acquired products, technologies or businesses could divert our management’s time and resources.  Future acquisitions could cause us to issue equity securities that would dilute your ownership of us, incur debt or contingent liabilities, amortize intangible assets or write off in-process research and development, goodwill and other acquisition-related expenses that could seriously harm our financial condition and operating results.  Further, if we are not able to properly integrate acquired products, technologies or businesses with our existing products and operations, train, retain and motivate personnel from the acquired business or combine potentially different corporate cultures, we may not receive the intended benefits of our acquisitions, which could adversely affect our business, operating results and financial condition.

Compliance with export regulations may hinder our sales to foreign customers.

Certain of our data security products incorporate encryption and other technology that may require clearance and export licenses from the U.S. Department of Commerce under United States export regulations.  Any inability to obtain these clearances or licenses or any foreign regulatory approvals, if required, on a timely basis could delay sales and have a material adverse effect on our operating results.

Item 2.         Properties.

Our headquarters are located in a two-story building in Richardson, Texas.  We occupy approximately 28,000 square feet of floor space in this facility. This facility houses our corporate administration, operations, marketing, research and development, engineering, sales and technical support personnel.  The lease for this facility extends through April 2017.

Approximately thirty percent of our security software research and development and engineering staff is located in two separate small facilities in San Diego, California.  The leases for these facilities are currently set to expire in March 2014.

We believe that the existing facilities at December 31, 2012 will be adequate to meet our operational requirements through 2013.  We believe that all such facilities are adequately covered by appropriate property insurance.  See Note 4 to our Consolidated Financial Statements for additional information regarding our obligations under leases.

Item 3.         Legal Proceedings.

We are subject to legal proceedings and claims that arise in the ordinary course of business.  We do not believe that any claims exist where the outcome of such matters would have a material adverse affect on our consolidated financial position, operating results or cash flows.  However, there can be no assurance such legal proceedings will not have a material impact on future results.

15

Table of Contents

PART II

Item 5.         Market for Common Equity and Related Stockholder Matters and Business Issuer Purchases of Equity Securities.

Our common stock trades on the OTCBB, where it is currently listed under the symbol “INTZ.”  As of February 28, 2013, there were approximately 125 registered holders of record of our common stock. The following table sets forth, for the periods indicated, the high and low closing price per share of our common stock, as reported by the OTCBB.  These quotations reflect inter-dealer prices, without retail mark-up, mark-down or commission and may not represent actual transactions.

We have not declared or paid cash dividends on our common stock in our two most recent fiscal years. We intend to retain any earnings for use in our business and do not anticipate paying any cash dividends on our common stock in the foreseeable future. Future dividends on common stock, if any, will be determined by our Board of Directors. However, shares of our 5% convertible preferred stock accrue cash dividends equal to $0.25 per share per annum, payable in arrears on March 31 and September 30 of each year, and shares of our Series 2 5% and Series 3 5% convertible preferred stock accrue cash dividends equal to $0.125 and $0.109 per share per annum, respectively, payable in arrears on the first business day of March, June, September and December of each year. During the fiscal year ended December 31, 2012, we accrued $55,000 in dividends to the holders of our 5% Preferred Stock, $58,000 in dividends to the holders of our Series 2 5% Preferred Stock and $39,000 in dividends to the holders of our Series 3 5% Preferred Stock. Delaware law provides that we may only pay dividends out of our capital surplus or, if no surplus is available, out of our net profits for the fiscal year the dividend is declared and/or the preceding fiscal year.

All stock option plans under which our common stock is reserved for issuance have previously been approved by our stockholders. The following table provides summary information as of December 31, 2012 for all of our equity compensation plans (in thousands, except per share data). See Note 9 to our consolidated financial statements for additional discussion.

(1)         Included in the outstanding options are 2,573,500 from the 2005 Stock Incentive Plan, 188,175 from the 1995 Stock Option Plan and 17,500 from the 1995 Non-Employee Director Stock Option Plan.

16

Table of Contents

Item 7.         Management’s Discussion and Analysis of Financial Condition and Results of Operations.

“Safe Harbor” Statement under the Private Securities Litigation Reform Act of 1995

This Annual Report on Form 10-K, including the sections entitled “Risk Factors,” “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and “Description of Business,” contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995 .  These statements relate to future events or to our future financial performance, and involve known and unknown risks, uncertainties and other factors that may cause our actual results, levels of activity, performance, or achievements to be materially different from any future results, levels of activity, performance or achievements expressed or implied by these forward-looking statements. In some cases, you can identify forward-looking statements by the use of words such as “may,” “could,” “expect,” “intend,” “plan,” “seek,” “anticipate,” “believe,” “estimate,” “predict,” “potential,” “continue,” or the negative of these terms or other comparable terminology.  You should not place undue reliance on forward-looking statements since they involve known and unknown risks, uncertainties and other factors which are, in some cases, beyond our control and which could materially affect actual results, levels of activity, performance or achievements.  Factors that may cause actual results to differ materially from current expectations, which we describe in more detail elsewhere in this Annual Report on Form 10-K under the heading “Risk Factors,” include, but are not limited to:

·                  failure to respond to rapid technological changes in the network security industry;

·                  failure of our network intrusion detection, regulated information compliance, and entity identification products to achieve market acceptance;

·                  our status as a developmental stage company;

·                  our need to generate substantially greater revenues from sales in order to sustain and increase our profitability;

·                  intense competition from both start-up and established companies that may have significant advantages over us and our products;

·                  disruption to our business due to military actions;

·                  long sales and implementation cycles of our products;

·                  insufficient cash to operate our business;

·                  the effect of consolidation in the network security industry;

·                  risks involved with Government and international customers;

·                  our inability to expand our sales;

·                  failure to adequately protect our intellectual property; or

·                  the rights of the holders of our preferred stock and the terms of our secured credit line.

If one or more of these or other risks or uncertainties materialize, or if our underlying assumptions prove to be incorrect, actual results may vary significantly from what we projected. Any forward-looking statement you read in this filing reflects our current views with respect to future events and is subject to these and other risks, uncertainties and assumptions relating to our operations, results of operations, growth strategy and liquidity. We assume no obligation to publicly update or revise these forward-looking statements for any reason, or to update the reasons actual results could differ materially from those anticipated in these forward-looking statements, even if new information becomes available in the future.

17

Table of Contents

Overview

We develop, market and support a family of entity identification products, data mining, regulated information compliance and data privacy protection, and network intrusion prevention/detection products.  Our product families include:

·                                          TraceCop for identity identification;

·                                          Savant for data mining;

·                                          Compliance Commander for regulated information compliance and data privacy protection; and

·                                          SecureNet for network intrusion prevention and detection.

Intrusion’s products help protect critical information assets by quickly detecting, protecting, analyzing and reporting attacks or misuse of classified, private and regulated information for government and enterprise networks.

Our revenues have been fairly consistent over the past few years due primarily to our focus on our TraceCop product line.  To date, we have not encountered significant competition in the TraceCop market that has caused us to decrease our sales prices when compared to sales prices in previous years.  To help keep our operation expenses under control, we held our employee headcount at a reasonable level in 2012 compared to 2011.  At December 31, 2011 we employed 31 employees and at December 31, 2012 we employed 31 employees.  As a result of our TraceCop sales efforts, our margins have remained consistent at 61.5% in 2011, and 59.6% in 2012.

In order for us to operate and grow our business, we must generate and sustain sufficient operating profits and cash flow in future periods.  This will require us to counteract reduced sales of our SecureNet products by generating additional revenues from sales of our entity identification software and data mining products.  In order to obtain these sales, our products must gain acceptance in intensely competitive industry.  We believe our ability to market and sell our TraceCop and Savant products into the marketplace in a timely manner and our efforts to effectively control spending levels will help us achieve these results.

Critical Accounting Policies and Estimates

Management’s discussion and analysis of financial condition and results of operations are based upon our consolidated financial statements, which have been prepared in accordance with accounting principles generally accepted in the United States. The preparation of these financial statements requires us to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosure of contingent assets and liabilities. On an on-going basis, we evaluate our estimates, including those related to product returns, bad debts, inventories, income taxes, warranty obligations, maintenance contracts and contingencies. We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances, the results of which form the basis for making judgments about the carrying values of assets and liabilities that are not readily apparent from other sources. Actual results may differ from these estimates under different assumptions or conditions.

We believe the following critical accounting policies affect our more significant judgments and estimates used in the preparation of our consolidated financial statements.

Revenue Recognition

We generally recognize product revenue upon shipment.  These products include both hardware and perpetual software licenses, as we do not currently offer software on a subscription basis.  We accrue for estimated warranty costs and sales returns at the time of shipment based on our experience.  There is a risk that technical issues on new products could result in unexpected warranty costs and returns.  To the extent that our warranty costs exceed our expectations, we will increase our warranty reserve to compensate for the additional expense expected to be incurred.  We review these estimates periodically and determine the appropriate reserve percentage.  However, to date, warranty costs and sales returns have not been material.  The customer may return a product only under very limited circumstances during the first thirty days from delivery for a replacement if the product is damaged or for a full refund if the product does not perform as intended.  Historically, most or our sales returns were related to hardware-based products.  As we continue to migrate away from such hardware-based products, these returns have declined.

We recognize software revenue from the licensing of our software products in accordance with FASB ASC Topic 605 whereby revenue from the licensing of our products is not recognized until all four of the following have been met:

18

Table of Contents

i) execution of a written agreement; ii) delivery of the product has occurred; iii) the fee is fixed and determinable; and iv) collectability is probable.  Bundled hardware and software product revenue is recognized at time of delivery, as our licenses are not sold on a subscription basis.  Product sales which include maintenance and customer support allocate revenue in an arrangement using estimated selling prices of the delivered goods and services based on a selling price hierarchy using the relative selling price method.  All of our product offering and service offering market values are readily determined based on current and prior stand-alone sales.  We defer and recognize maintenance and support revenue over the term of the contract period, which is generally one year.

Service revenue, primarily including maintenance, training and installation are recognized upon delivery of the service and typically are unrelated to product sales.  To date, training and installation revenue has not been material.  These revenues are included in net customer support and maintenance revenues in the statement of operations.

Our normal payment terms offered to customers, distributors and resellers are net 30 days domestically and net 45 days internationally.  We do not offer payment terms that extend beyond one year and rarely do we extend payment terms beyond our normal terms.  If certain customers do not meet our credit standards, we do require payment in advance to limit our credit exposure.

Shipping and handling costs are billed to the customer and included in product revenue.  Our costs of shipping and handling are included in cost of product revenue.

Allowances for Doubtful Accounts

We maintain allowances for doubtful accounts for estimated losses resulting from the inability of our customers to make required payments. Our receivables are uncollaterized, and we expect to continue this policy in the future.  If the financial condition of our customers were to deteriorate, resulting in an impairment of their ability to make payments, additional allowances may be required.  Historically, our estimates for sales returns and doubtful accounts have not differed materially from actual results.

Inventory

We write down our inventory for estimated obsolescence or unmarketable inventory equal to the difference between the cost of inventory and the estimated market value based upon assumptions about future demand and market conditions. If actual market conditions are less favorable than those projected by management, additional inventory write-downs may be required.  Historically, our estimates for inventory obsolescence have not differed materially from actual results.

Fair Value of Financial Instruments

We calculate the fair value of our assets and liabilities which qualify as financial instruments and include additional information in the notes to consolidated financial statements when the fair value is different than the carrying value of these financial instruments.  The estimated fair value of accounts receivable, accounts payable and accrued expenses, and dividends payable approximate their carrying amounts due to the relatively short maturity of these instruments.  The carrying value of the line of credit payable approximates fair value since this instrument bears market interest rates.  Loans payable to officer are with a related party and as a result do not bear market rates of interest.  Management believes based on its current financial position that it could not obtain comparable amounts of third party financing, and as such cannot estimate the fair value of the loans payable to officer.  None of these instruments are held for trading purposes.

19

Table of Contents

Results of Operations

The following tables set forth, for the periods indicated, certain financial data as a percentage of net revenue.

2012 compared with 2011

Net Revenue

Total revenue increased 25.2% to $6.7 million in 2012 from $5.3 million in 2011.  The increase in revenue is related to increased sales from our TraceCop product lines.  Our customer support and maintenance revenue decreased 17.9% from $0.16 million in 2011 to $0.13 million in 2012.  This decline is mainly due to the expiration of maintenance contracts related to our SecureNet product line.  Our product revenues increased 26.5% from $5.2 million in 2011 to $6.6 million in 2012.   We expect our product revenues to increase in the future as the market acceptance of our TraceCop and Savant product lines increase.

Export sales in 2012 remained constant $5 thousand, or 0.1% of net revenue, compared to $11 thousand, or 0.2% of net revenue in 2011 primarily due to our focus on domestic revenue sales.  Sales of our products internationally may be subject to currency exchange risk, which may cause our products to effectively increase in price, if the exchange rate moves significantly and the dollar gains value over the foreign currency.

Historically, due to the timing of our sales cycle, a significant portion of our monthly sales occurs in the second half of the month.  Accordingly, our receivables increase at the end of each month, which causes a higher accounts receivable

20

Table of Contents

balance at month end. This monthly trend also causes an inflated comparative relationship between revenue and accounts receivable. We believe that this monthly trend will continue because monthly sales forecast and planning meetings are held in the first week of every month, the middle of the month is focused on sales calls to customers and the latter half of the month on closing sales.

Gross Profit

Gross profit increased 21.2% to $4.0 million in 2012 from $3.3 million in 2011. As a percentage of net revenue, gross profit decreased from 61.5% in 2011 to 59.6% in 2012.  Gross profit on products decreased from 60.8% in 2011 to 59.1% in 2012.  Gross profit declined in 2012 compared to 2011 because of changes in the product mix and slightly higher labor cost associated with TraceCop sales.  Gross profit on customer support and maintenance decreased from 86.2% in 2011 to 82.8% in 2012.

Gross profit as a percentage of net revenue is impacted by several factors, including shifts in product mix, changes in channels of distribution, sales volume, fluctuations in manufacturing costs, pricing strategies, and fluctuations in sales of integrated third-party products.

Sales and Marketing

Sales and marketing expenses decreased slightly to $1.3 million or 19.7% of net revenue in 2012, compared to $1.4 million or 25.9% of net revenue in 2011.  We expect sales and marketing expenses to increase as net revenue levels increase in 2013.

Research and Development

Research and development expenses increased slightly to $1.7 million or 24.8% of net revenue in 2012 compared to $1.6 million or 29.1% of net revenue in 2011.  Our research and development costs are expensed in the period in which they are incurred. We expect research and development expenses to increase as net revenue levels increase in 2013.

General and Administrative

General and administrative expenses remained constant at $1.1 million, or 17.1% of net revenue in 2012 compared to $1.1 million or 20.6% of net revenue in 2011 as a result of continuing efforts to keep spending under control.  We expect general and administration expenses to increase as net revenue levels increase in 2013.

Interest Expense

Interest expense increased to $116 thousand in 2012 compared to $66 thousand in 2011.  Interest expense increased because of accounting for capital leases and an increase in average monthly debt in 2012 compared to 2011.  Interest expense will vary in the future based on our cash flow and borrowing needs.

Income Taxes

Our effective income tax rate was 0% in 2012 and 2011 as valuation allowances have been recorded for the entire amount of the net deferred tax assets due to uncertainty of realization.

Liquidity and Capital Resources

Our principal source of liquidity at December 31, 2012 was $52 thousand of cash and cash equivalents. As of December 31, 2012, we do not hold investments with a stated maturity beyond one year. Working capital deficiency at December 31, 2012 was $(0.2) million compared to $(0.1) million at December 31, 2011.

Net cash used in operations in 2012 was $276 thousand, due to a net loss of $246 thousand and the following uses of cash: $466 increase in accounts receivable for the year and a $44 thousand decrease in deferred revenue. This was partially offset by the following sources of cash and non-cash items: a $78 thousand increase in accounts payable and accrued expenses, a $34 thousand increase in prepaid expenses and other assets, $213 thousand in stock-based compensation, $106 thousand in amortization expense of capital leases, and $49 thousand in depreciation expense. Net cash used in operations in 2011 was $1.4 million, primarily due to a net loss of $933 thousand and an $886 thousand decrease in deferred revenue for the year and the following uses of cash: $258 thousand increase in accounts receivable and a $68 thousand increase in

21

Table of Contents

prepaid expenses and other assets. This was partially offset by the following sources of cash and non-cash items: a $102 thousand increase in accounts payable and accrued expenses, $220 thousand in stock-based compensation, and a $119 thousand write-off of a foreign subsidiary’s cumulative translation adjustment, a $56 thousand decrease in inventories, and $109 thousand in depreciation expense. Future fluctuations in accounts receivable, inventory balances and accounts payable will be dependent upon several factors, including quarterly sales, timely collection of accounts receivable, and the accuracy of our forecasts of product demand and component requirements.

Net cash used in investing activities in 2012 was $21 thousand for purchases of property and equipment.  Net cash used in investing activities in 2011 was $29 thousand for purchases of property and equipment.

Cash provided by financing activities in 2012 was $41 thousand, primarily consisting of $944 thousand in payments to the line of credit and payments of principal on capital leases of $101 thousand. This was offset with $994 thousand proceeds from the line of credit, $32 thousand exercise of stock options of, $44 thousand exercise of warrants, and $16 thousand of penalties and waived penalties on dividends. Cash provided by financing activities in 2011 was $1.3 million, primarily consisting of net financing proceeds from a loan by an officer of $1.3 million, as well as these other items: proceeds from line of credit of $80 thousand, exercise of stock options of $25 thousand, exercise of warrants of $26 thousand, and waived penalties on dividends of $4 thousand.  This was offset with payments of dividends of $51 thousand and payments of principal on capital leases of $42 thousand.

At December 31, 2012, we had a commitment of $229 thousand for future capital lease expenditures. Operating lease commitments of $1.7 million are detailed in the Contractual Obligations section below. During 2012, we funded our operations through the use of available cash, cash equivalents and investments, our line of credit and loans from our Company’s CEO.

As of December 31, 2012, we had cash, cash equivalents and investments in the amount of approximately $0.1 million, decreasing from $0.3 million as of December 31, 2011.  Throughout 2012, we continued to realize the benefit of cost-cutting actions taken in previous years.

On February 9, 2012, the Company entered into an unsecured revolving promissory note to borrow up to $2,200,000 from G. Ward Paxton, the Company’s Chief Executive Officer.  Under the terms of the note, the Company may borrow, repay and reborrow on the loan as needed up to an outstanding principal balance due of $2,200,000 at any given time through March 2013.

On February 7, 2013, the Company entered into an unsecured revolving promissory note to borrow up to $2,200,000 from G. Ward Paxton, which replaced the February 9, 2012 unsecured promissory note which was previously entered into between the Company and G. Ward Paxton.  Under the terms of the note, the Company may borrow, repay and reborrow on the loan as needed up to an outstanding principal balance due of $2,200,000 at any given time through March 2014.

Amounts borrowed from this officer accrue interest at a floating rate per annum equal to SVB’s prime rate plus 1% (5% at December 31, 2012).  All outstanding borrowings and accrued but unpaid interest is due on March 31, 2014.  As of December 31, 2012, the borrowings outstanding totaled $1,530,000 and accrued interest totaled $130,000.

On March 29, 2006, we entered into a Loan and Security Agreement with Silicon Valley Bank (“SVB”) to establish a $1.0 million line of credit (the “2006 Credit Line”).  On June 30, 2008, we entered into an Amended and Restated Loan and Security Agreement with SVB to, among other things, replace the 2006 Credit Line with a $2.5 million line of credit (the “2008 Credit Line”).  On June 25, 2012, we entered into the Fourth Amendment to the Amended and Restated Loan and Security Agreement (as amended, the “Loan Agreement”) with SVB to replace our expiring line with a $0.625 million line of credit (the “Current Line of Credit”).  Our obligations under the Loan Agreement are secured by substantially all of our assets, including all of our intellectual property.  In addition, G. Ward Paxton, the Company’s Chairman, President and Chief Executive Officer, has established a Guaranty Agreement with SVB securing all outstanding balances under the Current Line of Credit.  Borrowings under the Current Line of Credit are based on advances (each an “Advance”) against certain of our accounts receivable that are approved by SVB (each an “Eligible Account”).  SVB may make an Advance of up to eighty percent (80%) of each Eligible Account, or such other percentage SVB may determine in its sole discretion.  Each Advance is subject to a finance charge calculated as a daily rate that is based on a 360-day annual rate of the greater of the prime rate plus 2.0% or 7.0%.  Finance charges are payable at the same time its related Advance is due.  Each Advance is also subject to a monthly collateral handling fee of 0.5% of all outstanding Advances, depending on certain qualifying financial factors specified in the Loan Agreement.  The collateral handling fee is payable at the same time its related Advance is due.  Each Advance must be repaid at the earliest of (a) the date that the Eligible Account related to the Advance is paid, (b) the date the Eligible Account is no longer eligible under the Loan Agreement, or (c) the date on which any “Adjustment” (as defined in

22

Table of Contents

the Loan Agreement) is asserted to the Eligible Account.  On June 24, 2013, the Loan Agreement terminates and all outstanding Advances, accrued but unpaid finance charges, outstanding collateral handing fees, and other amounts become due under the Loan Agreement and related documents.  We have certain non-financial and financial covenants, including a liquidity coverage ratio and a rolling EBITDA computation, as defined in the Loan Agreement.

As of December 31, 2012, we had cash and cash equivalents of approximately $52,000, down from approximately $308,000 as of December 31, 2011.  We generated net loss of $246,000 for the year ended December 31, 2012 compared to a net loss of $933,000 for the year ended December 31, 2011.  As of December 31, 2012, in addition to cash and cash equivalents of $52,000, we had $456,000 in funding available under our $0.625 million line of credit at Silicon Valley Bank (“SVB”) and $0.67 million funding available from a promissory note to borrow up to $2.2 million from G. Ward Paxton, the Company’s Chief Executive Officer.   We are obligated to make payments of accrued dividends on all our outstanding shares of preferred stock that will reduce our available cash resources.   Based on projections of growth in revenue and net income in the coming quarters, and the borrowings available previously mentioned, we believe that we will have  sufficient cash resources to finance our operations and expected capital expenditures for the next twelve months.  We expect to fund our operations through Company profits, our line of credit, borrowings from the Company’s CEO, and possibly additional investments of private equity and debt, which, if we are able to obtain, will have the effect of diluting our existing common stockholders, perhaps significantly.  Any equity or debt financings, if available at all, may be on terms which are not favorable to us and, in the case of equity financings, may result in dilution to our stockholders. If our operations do not generate positive cash flow in the upcoming year, or if we are not able to obtain additional debt or equity financing on terms and conditions acceptable to us, if at all, we may be unable to implement our business plan, fund our liquidity needs or even continue our operations.

We may explore the possible acquisitions of businesses, products and technologies that are complementary to our existing business.  We are continuing to identify and prioritize additional security technologies, which we may wish to develop, either internally or through the licensing, or acquisition of products from third parties.  While we may engage from time to time in discussions with respect to potential acquisitions, there can be no assurances that any such acquisitions will be made or that we will be able to successfully integrate any acquired business.  In order to finance such acquisitions and working capital it may be necessary for us to raise additional funds through public or private financings.  Any equity or debt financings, if available at all, may be on terms, which are not favorable to us and, in the case of equity financings, may result in dilution to our stockholders.

Contractual Obligations

The following table sets forth certain information concerning the future contractual obligations under our leases at December 31, 2012.  We had no other significant contractual obligations at December 31, 2012.

Future minimum lease obligations consisted of the following at December 31, 2012 (in thousands):

Off-Balance Sheet Arrangements

As of December 31, 2012, we did not have any significant off-balance sheet arrangements, as defined in Item 303(a)(4)(ii) of Regulation S-K.

Item 9.         Changes In and Disagreements with Accountants on Accounting and Financial Disclosure.

None.

23

Table of Contents

Item 9A.                        Controls and Procedures

Evaluation of Effectiveness of Disclosure Controls and Procedures

The Company’s management, under the supervision and with the participation of the Chief Executive Officer and Chief Financial Officer, conducted an evaluation of the effectiveness of the design and operation of the Company’s disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”).  Based on this evaluation, the Chief Executive Officer and Chief Financial Officer concluded that, as of the end of the period covered by this report, the Company’s disclosure controls and procedures are effective to provide reasonable assurance that information required to be disclosed by the Company in reports that it files or submits under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the Securities and Exchange Commission, and is accumulated and communicated to management, including the Company’s principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure.

Management Report on Internal Control over Financial Reporting

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) to provide reasonable assurance regarding the reliability of the Company’s financial reporting and the preparation of consolidated financial statements for external purposes in accordance with U.S. generally accepted accounting principles.

The Company’s management, under the supervision and with the participation of the Chief Executive Officer and Chief Financial Officer, conducted an evaluation of the effectiveness of the Company’s internal control over financial reporting based on criteria established in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission.  Management’s evaluation included an assessment of elements such as the design and operating effectiveness of key financial reporting controls, process documentation, accounting policies, and the Company’s overall control environment.  Based on its evaluation, management concluded that the Company’s internal control over financial reporting was effective as of the year ended December 31, 2012 to provide reasonable assurance regarding the reliability of the Company’s financial reporting and the preparation of consolidated financial statements for external reporting purposes in accordance with U.S. generally accepted accounting principles.  The Company reviewed the results of management’s assessment with the Audit Committee of the Board of Directors.

This Annual Report does not include an attestation report of the Company’s registered public accounting firm regarding internal control over financial reporting.  Management’s report was not subject to attestation by the Company’s registered public accounting firm pursuant to rules of the Securities and Exchange Commission that permit the Company to provide only management’s report in this Annual Report.  This report shall not be deemed to be filed for purposes of Section 18 of the Exchange Act or otherwise subject to the liabilities of that section, and is not incorporated by reference into any filing of the Company, whether made before or after the date hereof, regardless of any general incorporation language in such filing.

Inherent Limitations on Effectiveness of Controls

The Company’s management, including the Chief Executive Officer and Chief Financial Officer, does not expect that the Company’s disclosure controls or internal control over financial reporting will prevent or detect all errors and all fraud.  A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met.  The design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs.  Further, because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, have been detected.  The design of any system of controls is based in part on certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions.  Projections of any evaluation of the effectiveness of controls to future periods are subject to risks.  Over time, controls may become inadequate because of changes in conditions or deterioration in the degree of compliance with policies or procedures.

24

Table of Contents

Changes in Internal Control over Financial Reporting

During the quarter ended December 31, 2012, there were no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

PART III

Certain information required by Part III is omitted from this Form 10-K because we will file a definitive Proxy Statement for our 2012 annual meeting of stockholders pursuant to Regulation 14A (the “Proxy Statement”) no later than 120 days after the end of the fiscal year covered by this Annual Report on Form 10-K, and certain information to be included therein is incorporated herein by reference.

Item 10.                          Directors, Executive Officers and Corporate Governance.

The information called for by this item is incorporated herein by reference to the Proxy Statement.

Item 11.                          Executive Compensation.

The information called for by this item is incorporated herein by reference to the Proxy Statement.

Item 12.                          Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters.

The information called for by this item is incorporated herein by reference to the Proxy Statement.

Item 13.                          Certain Relationships and Related Transactions, and Director Independence.

The information called for by this item is incorporated herein by reference to the Proxy Statement.

Item 14.                          Principal Accounting Fees and Services.

The information called for by this item is incorporated herein by reference to the Proxy Statement.

Item 15.                          Exhibits and Financial Statement Schedules.

(a)                                 1.   Consolidated Financial Statements.

The following consolidated financial statements of Intrusion Inc. and subsidiaries, are submitted as a separate section of this report (See F-pages):

(b)                                 Exhibits

The following Exhibits are filed herewith pursuant to Item 601 of Regulation S-K or incorporated herein by reference to previous filings as noted:

25

Table of Contents

26

Table of Contents

(1)                                 Filed as an Exhibit in the Registrant’s Registration Statement on Form S-1, as amended (File No. 33-6899), which was declared effective on May 21, 1992, by the Securities and Exchange Commission, which Exhibit is incorporated herein by reference.

(2)                                 Filed as an Exhibit to the Registrant’s Definitive Proxy Statement on Schedule 14A in connection with the solicitation of proxies for its 2002 Annual Meeting of Stockholders, which Exhibit is incorporated herein by reference.

(3)                                 Filed as an Exhibit to the Registrant’s Definitive Proxy Statement on Schedule 14A in connection with the solicitation of proxies for its 2002 Annual Meeting of Stockholders, which Exhibit is incorporated herein by reference.

(4)                                 Filed as an Exhibit to the Registrant’s Annual Report on Form 10-K, for the fiscal year ended December 31, 2000.

(5)                                 Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated June 15, 2010, which Exhibit is incorporated herein by reference.

(6)                                 Filed as an Exhibit to the Registrant’s Quarterly Report on Form 10-Q for the quarter ended March 31, 2002, which Exhibit is incorporated herein by reference.

(7)                                 Filed as an Exhibit to the Registrant’s Definitive Proxy Statement on Schedule 14A in connection with the solicitation of proxies for its Special Meeting of Stockholders held March 18, 2004, which Exhibit is incorporated herein by reference.

(8)                                 Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated March 26, 2004 (as amended), which Exhibit is incorporated by reference.

(9)                                 Filed as an Exhibit to the Registrant’s Annual Report on Form 10-K for the fiscal year ended December 31, 2003 (as amended), which Exhibit is incorporated herein by reference.

(10)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated March 29, 2005, which Exhibit is incorporated herein by reference

27

Table of Contents

(11)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated December 6, 2005, which Exhibit is incorporated herein by reference.

(12)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated June 15, 2005, which Exhibit is incorporated herein by reference.

(13)                          Filed as an Exhibit to the Registrant’s Quarterly Report on Form 10-Q for the quarter ended September 30, 2004, which Exhibit is incorporated herein by reference.

(14)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated March 29, 2006, which Exhibit is incorporated herein by reference.

(15)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated January 4, 2007, which Exhibit is incorporated herein by reference.

(16)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated March 16, 2007, which Exhibit is incorporated herein by reference.

(17)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated June 28, 2007, which Exhibit is incorporated herein by reference.

(18)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated September 27, 2007, which Exhibit is incorporated herein by reference.

(19)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated January 31, 2008, which Exhibit is incorporated herein by reference.

(20)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated July 1, 2008, which Exhibit is incorporated herein by reference.

(21)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated November 13, 2008, which Exhibit is incorporated herein by reference.

(22)                          Filed as an Exhibit to the Registrant’s Annual Report on Form 10-K for the fiscal year ended December 31, 2008, which Exhibit is incorporated herein by reference.

(23)                          Filed as Appendix A to the Registrant’s Definitive Proxy Statement on Schedule 14A in connection with the solicitation of proxies for its 2009 Annual Meeting of Stockholders, which Appendix is incorporated herein by reference.

(24)                          Filed as an Exhibit to the Registrant’s Definitive Proxy Statement on Schedule 14A in connection with the solicitation of proxies for its 1995 Annual Meeting of Stockholders, which Exhibit is incorporated herein by reference.

(25)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated June 5, 2009, which Exhibit is incorporated herein by reference.

(26)                          Filed as an Exhibit to the Registrant’s Current Report on Form 8-K dated September 16, 2009, which Exhibit is incorporated herein by reference.

(27)                          Filed herewith.

(28)                          Furnished herewith as an Exhibit.

28

Table of Contents

SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.

29

Table of Contents

ANNUAL REPORT ON FORM 10-K

ITEM 7

FINANCIAL STATEMENTS

YEARS ENDED DECEMBER 31, 2012 and 2011

INTRUSION INC.

RICHARDSON, TEXAS

F-1

Table of Contents

REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM

To the Board of Directors and Stockholders of

Intrusion Inc.

We have audited the accompanying consolidated balance sheets of Intrusion Inc. and subsidiaries (the “Company”), as of December 31, 2012 and 2011, and the related consolidated statements of operations, changes in stockholders’ deficit, and cash flows for the years then ended. The Company’s management is responsible for these consolidated financial statements.  Our responsibility is to express an opinion on these consolidated financial statements based on our audits.

We conducted our audits in accordance with the standards of the Public Company Accounting Oversight Board (United States). Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement.  The Company is not required to have, nor were we engaged to perform, an audit of its internal control over financial reporting.  Our audit included consideration of internal control over financial reporting as a basis for designing audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Company’s internal control over financial reporting.  Accordingly, we express no such opinion.  An audit also includes examining, on a test basis, evidence supporting the amounts and disclosures in the financial statements, assessing the accounting principles used and significant estimates made by management, as well as evaluating the overall financial statement presentation. We believe that our audits provide a reasonable basis for our opinion.

In our opinion, the consolidated financial statements referred to above present fairly, in all material respects, the consolidated financial position of Intrusion Inc. and subsidiaries, as of December 31, 2012 and 2011, and the consolidated results of their operations and their cash flows for the years then ended, in conformity with accounting principles generally accepted in the United States of America.

/s/ Whitley Penn LLP

Dallas, Texas

March 28, 2013

F-2

Table of Contents

INTRUSION INC. AND SUBSIDIARIES

CONSOLIDATED BALANCE SHEETS

(In thousands, except par value amounts)

See accompanying notes.

F-3

Table of Contents

INTRUSION INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF OPERATIONS

(In thousands, except per share amounts)

See accompanying notes.

F-4

Table of Contents

INTRUSION INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF CHANGES IN STOCKHOLDERS’ DEFICIT

(In thousands)

See accompanying notes.

F-5

Table of Contents

INTRUSION INC. AND SUBSIDIARIES

CONSOLIDATED STATEMENTS OF CASH FLOWS

(In thousands)