Allot: The Market Doesn't Appreciate The SECaaS Traction, Providing An Opportunity

Allot reported record Q2 2026 results, with revenue rising 15% year over year and profitability strengthening under its cybersecurity-first strategy. Security-as-a-Service (SECaaS) revenue jumped 47% to $9.4M, reaching 34% of total revenue, while ARR increased 44%. North American revenue grew to 31% of the total from 17% a year earlier, supported by Tera III platform sales and a major U.S. SECaaS customer win.

Analysis

ALLT's valuation should increasingly be framed as a transition from low-growth telecom DPI hardware/software to a recurring security platform, but the key underwriting question is whether SECaaS can sustain growth after the initial large U.S. deployment ramps. At 34% of revenue, the recurring mix is now large enough for incremental ARR growth to matter disproportionately to gross-margin durability and the revenue multiple; however, the remaining legacy business still determines whether consolidated growth can stay above the low-teens.

The North American expansion is strategically more important than the quarterly revenue beat: it provides referenceability in a market where channel access and carrier/customer concentration drive sales cycles. If the Tera III platform is attached to SECaaS deployments, ALLT can improve customer economics and reduce churn; if hardware sales are largely standalone, the revenue mix improvement may be less durable than headline ARR growth implies. Watch deferred revenue, net revenue retention, SECaaS gross margin, and the concentration of the new U.S. customer at the next report.

Near term, the small-cap liquidity profile creates upside on continued guidance raises but also makes the shares vulnerable if management merely reiterates rather than lifts its outlook. Over 6-18 months, the larger risk is competitive: Zscaler, Cloudflare, Palo Alto Networks and carrier-native security offerings have materially deeper distribution, so ALLT needs evidence that its carrier/SMB positioning produces lower customer-acquisition cost rather than only isolated wins. A reversal in SECaaS growth below roughly 30%, or evidence that ARR growth is being purchased through materially higher sales expense, would challenge the rerating thesis.

Key Decisions for Investors

• Initiate or add a small long ALLT only on post-results liquidity/price weakness rather than chase a momentum gap; target a 6-12 month holding period contingent on two further quarters of 30%+ SECaaS growth and positive operating leverage. Size modestly given customer-concentration and micro-cap liquidity risk.
• Use the next earnings release as a catalyst checkpoint: add only if management raises full-year revenue/profit expectations and discloses stable-to-improving SECaaS gross margin, deferred revenue, or retention. A guidance reiteration without supporting ARR quality metrics is a hold/reduce signal, not confirmation.
• For investors seeking sector exposure, express the idiosyncratic thesis as long ALLT versus a partial short in a broad cybersecurity proxy such as HACK or CIBR over 3-6 months; this isolates execution-driven rerating while reducing beta to security-budget sentiment. Avoid a direct short of PANW, ZS, or NET because ALLT's addressable segment is not a clean substitute for their enterprise franchises.
• Set a thesis stop around a material deceleration in SECaaS growth below 30% YoY, loss of profitability/operating leverage, or disclosure that a single U.S. customer represents an outsized share of ARR. These outcomes would imply the recurring-revenue mix is less scalable than the market is likely to price after the quarter.