Allot: Multiple Inflection Points Support An $18.50 SOTP

SECaaS ARR accelerated 69% YoY and DNI bookings are robust, supporting a multi-year growth thesis; company holds $88M net cash and zero debt. CRPO now covers 97% of 2026 DNI revenue guidance versus a historical 52–66%, implying unprecedented forward visibility and that management's outlook is conservative. Analyst assigns an $18.50 SOTP target based on 2025 trailing numbers and cites upside from accelerating Verizon and Vodafone SECaaS adoption.

Analysis

Telco-led SECaaS adoption creates a distribution and data moat that is qualitatively different from enterprise cloud-native security. When carriers bundle security into connectivity they convert a high-churn enterprise product into a sticky inorganic revenue stream with embedded provisioning and billing hooks; that raises lifetime value and makes revenue more predictable over 12–36 months but increases dependency on a handful of commercial launch milestones.

Second-order winners include OSS/BSS integrators and telco cloud providers that will get recurring integration and managed services revenue as deployments scale; traditional enterprise security vendors that lack carrier relationships face margin compression if they must compete on price or distribution. Conversely, hyperscale cloud security players risk displacement for telco-managed use cases, but retain advantages in zero-trust, endpoint, and API-level controls — creating a bifurcated market where network-level DPI/SES capabilities and application-layer security coexist rather than converge.

Execution and contract-structure risk is the key near-term lever: multi-year carrier deals can front-load bookings (improving visibility) but also contain long transition clauses, revenue cliffs, or renegotiation triggers tied to usage metrics and privacy regulations. Watch the cadence of carrier commercial launches and any contingent revenue language; a delayed or resized launch is the fastest path from bullish momentum to a dramatic valuation reset within 1–4 quarters, while clear conversion of backlog into repeatable billings would open optionality for margin expansion and strategic M&A conversations over 12–24 months.

Key Decisions for Investors

• Buy ALLT equity on a confirmed post-announcement sell-off (20–30% pullback) sized to 1–2% of portfolio; hold 12–24 months. Rationale: asymmetric upside from telco rollouts and optionality to strategic bids; protect with a 25–30% stop to account for small-cap volatility.
• Buy a defined-risk long-dated call spread on ALLT (Jan-2026 debit call spread, long lower strike/sell higher strike) sized to 0.5–1% of portfolio. Time horizon 12–18 months. Goal: capture multi-quarter adoption while capping premium; target 3:1 reward-to-risk if carrier rollouts convert to visible revenue.
• Relative-value pair — long ALLT / short ZS (equal notional deltas) for 6–18 months to isolate telco vs cloud-native security exposure. Rationale: hedge broad cybersecurity beta while expressing conviction in telco distribution; trim or unwind if the spread compresses by 20% or if enterprise spend trends diverge materially.
• Event-driven trade: buy a 2–3 month strangle (~ATM put and call) ahead of a confirmed large-carrier commercial launch only if implied volatility is < historical realized. Objective: monetize one-time re-rating on visible deployment while neutral to direction; close on announcement or if IV rises >50%.