Michael & the Quiet $2B Exit

There is a particular kind of executive who signs two of the most consequential checks in their industry and then declines to write a memoir about it. Michael Walsh is that kind of executive. He spent twelve years inside CyberSource, the Foster City payment gateway most internet shoppers will never name and could not live without. He arrived in 1998, when ecommerce was still a marketing word with a hyphen. He left after handing the keys to Visa for two billion dollars, and even then he stayed - running merchants and acquirers for the buyer because the work, presumably, was still interesting.

The shorthand on Walsh is that he was the CyberSource CEO who got bought. The longer version is more useful. He took over North American sales in 2000, ran global sales and services by 2004, became president and chief executive in January 2010, and closed the Visa deal by July. In between he engineered the $660 million acquisition of Authorize.Net in 2007, the deal that effectively bolted small-business payments onto an enterprise gateway and doubled the company's footprint. Two deals. Two and a half billion dollars. One political science degree from UC Irvine.

If that sounds like an unfair advantage, consider the more boring explanation: he stayed in one place long enough to see how it actually worked.

What he actually built

CyberSource sells the pipes. It is the gateway that sits between a merchant's checkout button and the card networks - tokenization, fraud screening, payment data vaulting, the parts of a transaction that consumers should never have to think about and merchants think about constantly. Under Walsh the product set widened to include risk management, multi-currency support, payment orchestration, and the unglamorous logistics of global tax and compliance. By the time Visa came shopping, CyberSource was processing for a quarter of all internet retailers in the United States.

The Authorize.Net acquisition is worth pausing on. In 2007, Authorize.Net was the dominant brand for small-business payment processing and CyberSource was the dominant gateway for the enterprise. Buying it meant inheriting both ends of the merchant market - the corner shop with a Shopify storefront and the multinational with a global cart. Most enterprise software companies have looked at that move and failed. Walsh, who was head of global sales at the time, helped execute it cleanly. The two brands were preserved. The customer bases were not collapsed into each other. Three years later, that combined footprint is what Visa bought.

The Visa deal

By spring 2010, Visa had decided that ecommerce risk was a problem worth owning rather than reselling. Walsh, six months into the CEO chair, ran point on the negotiation. The agreement closed at roughly $2 billion. In a contemporaneous interview, he kept the message simple. "This deal is about driving growth in ecommerce and delivering value to merchants and financial institutions in the ecommerce ecosystem," he said, which is the kind of sentence that says nothing and everything at once.

He was more revealing on the question of independence. "Both companies are aligned around the fact that the openness of the CyberSource platform has been a key to our success, and we're committed to maintaining that approach." Translation: Visa was not buying a gateway in order to close it. Merchants would still get to route to other networks. Other gateways would still get to do business with Visa. The product would survive its acquisition - which, in software, is the only promise that counts.

That promise has largely held. Fifteen years later, CyberSource is still the brand merchants integrate, still publishes APIs developers use, and still anchors Visa's merchant-services strategy. The 900-person headcount in Foster City is recognisable to anyone who saw the org chart in 2010. Continuity at this scale is a kind of achievement on its own.