Radware (RDWR) Q3 2026 Earnings Call Transcript

Radware reported record Q3 2026 revenue of $84.4 million, up 12% year over year, with cloud ARR rising 21% to approximately $107 million and total ARR up 11% to approximately $266 million. Non-GAAP diluted EPS was $0.32 versus $0.33 a year earlier, while gross margin declined to 81.4% from 82.4%, pressured by foreign exchange, product mix, and supply-chain costs; operating cash flow improved to $15.5 million from negative $2.1 million. Management guided Q4 revenue to $88 million-$90 million and non-GAAP diluted EPS to $0.34-$0.35, citing cloud and on-premise security momentum and new AI-security products.

Analysis

The more investable signal is the split between a currently monetizable security upsell and an AI narrative still largely ahead of scale. Management says AI-driven vulnerability discovery is already driving demand for existing WAF/API defenses and Xploit Shield; by contrast, it frames broader agent-security adoption as a 2027 opportunity. Treat the first large Xploit Shield win as validation of product-market interest, not yet evidence of material revenue contribution. Cloud ARR growing faster than total ARR supports a favorable recurring-mix shift, but the gap also means on-prem refreshes remain important to reported growth and may make quarterly results lumpier. That creates exposure to refresh timing and potential substitution toward cloud offerings, even as the installed-base refresh runway supports near-term demand.

Profitability is less clean than the growth narrative: reported gross margin slipped amid FX, mix, and supply costs, while management's currency-adjusted earnings comparison is not the reported run rate. Shekel strength can continue to pressure U.S.-dollar operating results; lower rates and buybacks also reduce financial income, so cash does not fully offset operating-margin risk. The principal competitive test is whether Radware converts integrated WAF/API/DDoS wins into durable platform expansion against larger security and infrastructure vendors such as Akamai (AKAM), Cloudflare (NET), and F5 (FFIV). Over 1–3 months, Q4 delivery and cloud/total ARR conversion matter more than AI launch headlines; over 6–18 months, agent-security monetization and cloud mix are the structural tests. Contrarian risk: investors may capitalize announced AI capabilities before meaningful recurring revenue appears. Conversely, strong organic cloud growth and an unfinished hardware refresh could leave estimates too cautious; verify valuation and consensus before sizing.

Key Decisions for Investors

• Prefer a measured long RDWR on post-earnings weakness rather than chasing the AI narrative; size against the risk that Q4 execution or cloud ARR decelerates. Reassess after the next ARR and margin update.
• For a relative-value expression, consider long RDWR versus a basket of larger application-security peers only if valuation is not already pricing in 2027 AI adoption; the thesis is faster growth/mix improvement, not a claim of superior scale or margins.
• Track cloud ARR growth versus total ARR, renewal/expansion evidence, and whether Xploit Shield or agent-security products generate identifiable recurring revenue. Failure to sustain cloud growth or evidence that new modules remain immaterial would weaken the structural thesis.
• Monitor reported gross margin, operating margin, and USD/ILS. Continued margin erosion despite revenue growth, or a guidance reduction, would falsify the near-term operating-leverage case; do not rely on management's FX-adjusted earnings presentation as the base case.