There is a specific kind of opportunity that only shows up a few times per market cycle. A fundamentally sound, deeply profitable business gets caught in a wave of narrative fear. The headlines turn ugly. The stock chart looks like a cliff. Retail investors flee. Even some institutional holders give up. |
And then, for a brief window, the stock trades as if the business is in terminal decline. Not slow decline. Terminal decline. The kind where you need to model a company going to zero to justify the price. |
We have found one of those windows. Right now. In cybersecurity. |
Here is what we know |
The company we are profiling this month is 26 years old. It has been publicly traded for 13 years. It serves the majority of the Forbes Global 100. It has never had a down revenue year in its public history. |
Last year, it generated $304 million in free cash flow on $669 million in revenue. That is a 45% free cash flow margin. For context, the average S&P 500 company generates a free cash flow margin of roughly 12%. |
Its gross margin is 83%. Its EBITDA margin is 47%. It is GAAP profitable, earning $198 million in net income last year, up 14% year over year. It has virtually zero debt and sits on nearly $700 million in cash. |
The board just authorized a new share buyback program at these depressed prices. Since 2018, the company has quietly repurchased $1.2 billion of its own stock, retiring over 10.7 million shares. Today they are buying back shares at a 13-year valuation low. |
The stock has lost nearly half its value from its 52-week high. The business has never been stronger. |
The stock trades at approximately 11x free cash flow and 12.6x forward earnings. The 10-year median multiple for this company is 27.7x free cash flow. The 5-year average P/E is over 31x. |
The market darling in this company's sector trades at 73x forward earnings and has never turned a GAAP profit. This company trades at 12.6x and earns nearly $200 million a year. |
One of those valuations is wrong. We know which one. |
So why is it down? |
One word: fear. |
Investors are terrified that artificial intelligence is going to make this company's core product obsolete. A single analyst note in late February triggered a 10% single-session collapse in the stock. The market reacted as if the verdict was already in. |
It is not. Not even close. |
What the market got wrong is a distinction that most investors have not bothered to understand. And that misunderstanding is exactly where the opportunity lives. Our full analysis explains precisely why the bear case rests on a fundamental technical error about what this company actually does and what AI tools actually threaten. |
Here is the short version: the AI tools everyone is afraid of solve a different problem. They scan code before it is deployed. This company protects the real-world attack surface that already exists in the wild, the one your enterprise cannot turn off, the one regulators require you to monitor continuously, the one that legacy systems, third-party software, and cloud misconfigurations create every single day. |
The market sold first and asked questions later. We did the work. |
What the market is missing |
The fear-driven selloff has caused investors to completely miss three legitimate growth catalysts that are playing out right now. |
First: In 2025, this company achieved one of the most difficult government certifications in all of technology. The process takes 12 to 18 months and costs millions of dollars. Only a handful of cybersecurity platforms in the country hold it. It unlocks a federal government market projected to reach $45.5 billion by 2033, with the stickiest customer contracts in the industry. Federal agencies that standardize on a certified platform rarely leave. The company is already winning six-figure federal expansions, and the 2026 federal budget cycle is the first full cycle where this credential is in play. |
Second: The company is sitting on a massive, largely untapped upsell opportunity inside its existing 10,000-customer base. Most of those customers subscribed to the company's original flagship product. A new, significantly more valuable platform has been built on top of it, one that goes far beyond scanning into full risk quantification and autonomous remediation. The upgrade is just beginning. Early bookings data shows it is gaining traction. A new flexible pricing model in beta is removing the last friction point. |
Third: Channel partner revenue grew 17% last year, more than four times faster than direct sales. A newly certified partner network is now bringing the company's highest-value offerings to market. The company has barely had to invest in this engine. It is accelerating on its own. |
None of these catalysts are theoretical. They are already in the financials. They are just invisible to anyone whose only thesis is AI fear. |
A few numbers to sit with |
|
What subscribers get |
The full deep dive is the most thorough analysis we have published this year. It covers: |
The complete financial case, including FCF, margin and balance sheet analysis A detailed breakdown of the valuation across five separate frameworks A peer comparison table showing exactly how absurd the current discount is The FedRAMP High certification: what it is, what it unlocks, and why the moat is real The ETM and QFlex upsell engine: the re-acceleration story hiding inside the existing customer base A thorough, honest dismantling of the AI disruption bear case Insider ownership, buyback mechanics, and what the institutional register tells us The real risks, stated plainly without sugarcoating
|
This is not a summary. It is the full work. Every number sourced from SEC filings and earnings transcripts. Every argument tested against the strongest version of the bear case. |
The bottom line |
We have done this long enough to know that moments like this one are rare. A GAAP-profitable, cash-generating, fortress-balance-sheet cybersecurity business at 11x free cash flow, with a government certification nobody is pricing in, an upsell cycle nobody is modeling, and a bear case built on a technical misunderstanding of what the company actually does. |
These windows close. They close when the next earnings call arrives and the numbers are fine. They close when one institutional analyst publishes the piece we are publishing today and the rest follow. They close when the buyback math becomes too obvious to ignore. |
The full analysis is available now to subscribers. If you have been waiting for a reason to subscribe, this is it. |
 |
Subscribe to our premium content to read the rest. |
Most tech investors are chasing the same crowded names — stocks every hedge fund and index already owns. The easy money is gone. The real edge isn't finding great companies, it's finding them before everyone else does — or spotting ones the market has mispriced and forgotten. That's what this newsletter is built for. Every issue delivers rigorous valuation work on software businesses that don't make headlines: quiet compounders, post-earnings overreactions, niche SaaS players nobody's covering. No hype, no fluff — just clean analysis on where the numbers say the market is wrong. |
|
