2026 m. pirmąjį pusmetį „NRD Cyber Security“ ir toliau augo

NRD Cyber Security reported first-half 2026 revenue of €6.2 million, up 3.3% year over year, while normalized EBITDA rose 22% to €1.1 million, signaling improved operating efficiency. Growth was driven by an expanding base of recurring CISO and Security Operations Center service clients. The company expects the number of these clients to double by year-end versus the end of 2025.

Analysis

The relevant signal is not top-line growth but mix: expansion in recurring managed-security contracts can raise revenue visibility, utilization, and renewal economics even when project consulting demand remains subdued. For private regional providers, this validates a broader enterprise shift from discretionary security assessments toward outsourced CISO/SOC subscriptions, a demand pool that public platforms such as PANW, CRWD and GEN can address at far greater scale.

Near term, the read-through for listed cybersecurity is modest: a small operator's margin progression is not independently sufficient to alter sector estimates. Over the next 1-3 months, however, it supports monitoring whether managed detection and response (MDR) bookings are outperforming endpoint/software budgets in upcoming results from CRWD, PANW, CHKP and IBM. The second-order implication is pressure on labor-heavy pure consultancies: recurring SOC delivery improves staffing utilization only if automation prevents analyst headcount from rising proportionately.

The contrarian point is that outsourced security growth need not translate into broad public-software upside. Enterprises can substitute lower-cost regional MSSPs for premium platform modules, particularly in Europe, while AI-enabled SOC workflows may compress service pricing before vendors capture the expected operating leverage. The key falsifier is whether public vendors show both accelerating subscription/ARR growth and stable gross margins; bookings growth accompanied by elevated services costs would indicate commoditization rather than a durable sector re-rating.

This is a watch-item rather than a standalone trade catalyst. The article is company-supplied, concerns an unlisted business, and provides no retention, contract duration, backlog, customer concentration, or cash-conversion data—metrics needed to distinguish durable recurring revenue from low-margin outsourced labor.

Key Decisions for Investors

• No immediate position based solely on this release; add MDR/SOC demand and services-margin disclosures to the next earnings checklists for CRWD, PANW, CHKP and IBM, with particular focus on ARR/remaining-performance-obligation growth versus professional-services headcount.
• If CRWD or PANW guides recurring security-platform growth above consensus while maintaining gross-margin guidance, use a 1-3 month long basket in CRWD/PANW versus short CHKP as the lower-growth, appliance/legacy-security hedge; invalidate if either growth leader cuts billings or margin guidance.
• For a European cost-substitution scenario, monitor GEN and CHKP rather than assume premium-platform share gains: sustained MDR pricing pressure or rising services mix would favor a defensive tilt to CHKP over higher-multiple CRWD/PANW over 6-12 months.
• Set a sector alert for evidence that SOC contract growth is driving services revenue faster than software ARR at public peers. If that occurs for two consecutive quarters, reduce cybersecurity multiple exposure; the thesis would shift from operating leverage to labor-intensive revenue growth.