šŸ’° Financial Performance

Revenue Growth by Segment

The ESOF (Enterprise Security in One Framework) suite is the primary revenue driver, contributing the largest portion of income. Total operating income grew 137% YoY, reaching INR 30.36 Cr in H1 FY26 compared to INR 13.16 Cr in H1 FY25. This growth is attributed to the scalability of the ESOF solution and increased market visibility post-IPO.

Geographic Revenue Split

The company is expanding globally with a specific focus on the Middle East (UAE and KSA) and North America (Canada and US). While specific % splits per region are not disclosed, the company is heavily investing in its Canadian operational setup and targeting the UAE/KSA regions for its Wholly Owned Subsidiary (WoS) growth.

Profitability Margins

PAT margin improved to 51.3% in H1 FY26 from 49.6% in H1 FY25, representing a 1.7 percentage point increase. This was achieved despite the expiration of a three-year tax rebate and the inclusion of ESOP costs, demonstrating strong underlying profitability from product sales.

EBITDA Margin

EBITDA margin stood at 63.4% in H1 FY26, a significant increase of 10.3 percentage points from 53.1% in H2 FY25. EBITDA grew 178% YoY to INR 19.24 Cr, driven by the high-margin nature of its 100% product-based business model which decouples revenue growth from headcount expansion.

Capital Expenditure

The company has a 'Bold 2030' plan to invest $100 million (approx. INR 840 Cr) in AI and cybersecurity R&D. Current focus includes funding the expansion of subsidiaries like Socify and CyberScope to capture the Web3 security market.

Credit Rating & Borrowing

Not disclosed in available documents; however, the company stated it is not dependent on external funding and is currently exploring organic growth through internal accruals and potential IPO proceeds from its subsidiary.

āš™ļø Operational Drivers

Raw Materials

As a 100% software product company, traditional raw materials like steel or oil are not applicable. The primary 'inputs' are R&D and human capital, specifically focused on AI-driven vulnerability management and Web3 security protocols.

Import Sources

Not applicable for software products; however, the company sources talent and innovation globally, with operational setups in India, Canada, and the US.

Key Suppliers

Not applicable; the company operates as a product developer rather than a manufacturer dependent on physical raw material suppliers.

Capacity Expansion

Current client base is 7,500; the company is expanding its 'capacity' to serve 10,000 clients by 2026. This expansion is supported by the automated nature of the ESOF and Socify platforms which allow for rapid scaling without linear cost increases.

Raw Material Costs

Not applicable; however, direct costs include ESOP expenses and R&D. Despite these, the company maintained a gross margin of 49.3% in H1 FY25 and continues to optimize its cost structure through AI automation.

Manufacturing Efficiency

Efficiency is measured by EBITDA margin growth (up 10.3 pts YoY) and the ability to achieve nearly the entire previous year's income (INR 30.36 Cr) in just the first six months of the current fiscal year.

Logistics & Distribution

Distribution is handled digitally; however, the company is expanding its physical presence in the Middle East and Canada to support local sales and partnership efforts.

šŸ“ˆ Strategic Growth

Expected Growth Rate

20%

Growth Strategy

The company aims to achieve growth through a three-pronged strategy: 1) Upselling to existing clients (achieved 36% increase in per-client revenue to $1,682), 2) Inorganic growth via acquisitions (similar to CyberScope), and 3) Unlocking value through the US IPO of its subsidiary, CyberScope Web3 Security Inc., on Nasdaq.

Products & Services

ESOF (Enterprise Security in One Framework), Socify (AI-driven SOC 2 compliance), and CyberScope (Web3/Smart Contract security audits, KYC, and pentesting).

Brand Portfolio

TAC Security, ESOF, Socify, CyberScope, Cyber Sandia.

New Products/Services

Socify is a new AI-leveraged product designed to disrupt the SOC 2 compliance market, targeting a base of 10,000 clients by 2026.

Market Expansion

Targeting the Middle East (UAE/KSA) and North America. Subsidiary CyberScope has filed for a Nasdaq listing (Ticker: CYSC) to establish a dominant presence in the US Web3 security market.

Market Share & Ranking

Currently ranked as the 5th largest vulnerability management company in the world; targeting a Top 3 position by 2026.

Strategic Alliances

CyberScope entered a strategic partnership with 4EVERLAND (a decentralized AI/Web3 cloud platform) to provide security services to their developer ecosystem.

šŸŒ External Factors

Industry Trends

The industry is shifting toward AI-driven automated vulnerability management and Web3 security. TAC is positioning itself as a '100% product company' to capitalize on the 20-30% global industry growth rate, while personally aiming for triple-digit growth.

Competitive Landscape

Competes with global vulnerability management firms; TAC distinguishes itself by focusing on cloud application security and Web3, where it claims a dominant market position.

Competitive Moat

The moat is built on a pure product model (no services) and the ESOF framework's ability to automate complex security assessments. This is sustainable due to high switching costs and the integration of AI which improves as more data is processed.

Macro Economic Sensitivity

Highly sensitive to global cybersecurity regulations and digital transformation trends. Increased regulatory requirements for SOC 2 and Web3 security act as tailwinds for product demand.

Consumer Behavior

Enterprises are moving away from manual security services toward automated, continuous monitoring products like ESOF to manage increasing volumes of vulnerabilities.

Geopolitical Risks

Expansion into the Middle East (UAE/KSA) and North America exposes the company to regional regulatory changes and trade policies regarding data sovereignty and cybersecurity standards.

āš–ļø Regulatory & Governance

Industry Regulations

Operations are governed by SEBI (LODR) Regulations 2015 in India and US SEC regulations (Form F-1 filing) for its subsidiary's Nasdaq listing. Compliance with global cybersecurity standards (SOC 2, Web3) is a core part of its product offering.

Environmental Compliance

Not applicable for a software-based business model.

Taxation Policy Impact

The company no longer benefits from the tax rebates it held for the previous three years, leading to a higher tax incidence in H1 FY26 which is reflected in the PAT growth being slightly lower than EBITDA growth.

Legal Contingencies

No pending court cases or labor disputes were disclosed in the provided documents.

āš ļø Risk Analysis

Key Uncertainties

The success of the CyberScope IPO on Nasdaq is a key uncertainty that could impact the company's ability to 'unlock real value' and fund its 2030 vision. Potential impact on valuation could be significant.

Geographic Concentration Risk

While expanding, a significant portion of operations and the management team are based in India (Punjab/Mohali), though revenue is increasingly global.

Third Party Dependencies

Dependency on cloud infrastructure providers (like 4EVERLAND for Web3) and the ability to maintain partnerships for distribution in the Middle East.

Technology Obsolescence Risk

High risk in the cybersecurity sector; mitigated by the planned $100 million R&D investment in AI to ensure products like ESOF remain state-of-the-art.

Credit & Counterparty Risk

Not disclosed; however, the shift toward a SaaS/Product model typically results in better receivable quality compared to traditional IT services.