Corero Network Security plc (DDOSF) Presents at IAccess Alpha Virtual Best Ideas Fall Investment Conference 2026 Transcript

Corero Network Security presented its anti-DDoS cybersecurity strategy at the IAccess Alpha Virtual Best Ideas Fall Investment Conference. CEO Carl Herberger said the company is gaining market share in a large addressable market, emphasizing its autonomous, real-time and hardware-agnostic DDoS protection platform. The presentation contains positive strategic claims but no new financial results, guidance, or quantified operating metrics.

Analysis

The investable signal is not the presentation itself but whether Corero can convert its product positioning into recurring software revenue and lower customer-acquisition costs. For CNS, even modest enterprise wins can create outsized percentage growth because of its small base, but this cuts both ways: a few delayed renewals, channel losses, or higher support costs would quickly challenge the implied operating-leverage thesis. The OTCQX line is likely too illiquid for institutional execution; AIM-listed CNS is the relevant vehicle, subject to UK small-cap liquidity and governance discounts.

RDWR is the cleaner competitive read-through rather than an automatic short: Corero's alleged share gains matter only if they appear in Radware's DDoS-related bookings, renewal rates, or gross-margin trajectory over the next 1-3 quarters. A price-led competitive response by larger vendors could pressure CNS before it has sufficient scale, while hyperscaler-native security offerings from Cloudflare (NET), Akamai (AKAM), AWS and Microsoft remain the larger structural substitution risk over 6-18 months. Consensus may overvalue the differentiated-technology narrative while underweighting distribution; in security infrastructure, procurement reach and bundled platform economics often matter more than point-product performance.

Near-term upside requires independently verifiable evidence of accelerating ARR, expanding gross margin, positive operating cash flow, and customer concentration improvement—not management assertions. Falsification for a constructive CNS view would be flat or declining recurring revenue growth over the next two reporting periods, material cash burn, or evidence that discounting is required to win deployments. Until those metrics are available, this is a watch-list catalyst rather than a high-conviction trade.

Key Decisions for Investors

• No immediate position in CNS/DDOSF following the conference appearance; establish an alert for the next earnings release and reassess only if recurring revenue growth accelerates, gross margin expands, and cash burn narrows simultaneously.
• For accounts able to trade AIM liquidity, consider a small starter long in CNS only after independently verified contract/ARR disclosure; size as a venture-style satellite position given likely liquidity constraints. Exit if the following reporting period shows recurring-revenue deceleration or a material increase in operating cash burn.
• Monitor RDWR's next two quarterly reports for DDoS-security bookings, renewal performance and gross-margin commentary. A deterioration in these metrics alongside confirmed CNS growth supports a relative long CNS / short RDWR research case, but do not initiate without evidence because RDWR's broader platform and distribution can absorb isolated competitive losses.
• Use NET and AKAM as structural-competing benchmarks rather than direct shorts: sustained pricing pressure or bundled-security wins at either provider would weaken the standalone DDoS thesis for CNS over the next 6-18 months.