Cognyte (CGNT) Q1 2027 Earnings Transcript

Cognyte reported Q1 revenue of $105.5 million, up 10.4% year over year, with recurring revenue rising 10% to $51.9 million and non-GAAP operating income up 41.5% to $10.7 million. Management reaffirmed full-year revenue guidance of about $448 million while lifting recurring revenue expectations, and it maintained FY27 operating income and adjusted EBITDA targets of roughly $56 million and $68 million, respectively. The quarter also featured a new 3-year subscription deal worth over $20 million, a contract expansion above $10 million, and continued buybacks totaling about $35 million since November 2024.

Analysis

CGNT is not really trading like a classic cyber/security software name; it is transitioning from lumpy license economics to a more annuity-like revenue base while still preserving high gross margin. The second-order implication is that valuation should increasingly key off backlog durability and subscription mix rather than headline growth alone, because the cash conversion profile will remain choppy for another few quarters as implementation timing, FX, and inventory normalization work through the P&L.

The underappreciated bullish signal is operating leverage: recurring revenue is still a smaller share of the mix, yet profitability is already expanding faster than sales. That suggests incremental subscription wins should have outsized margin impact once the upfront deployment friction fades. The main risk is that the market may over-interpret near-term free cash flow weakness as demand softness, when the more likely issue is a working-capital bridge tied to contract structure and hardware prebuilds.

Competitively, CGNT appears to be taking share in mission-critical investigative analytics by embedding AI into workflows rather than selling generic AI tools. That matters because agencies buying for security and governance tend to be sticky, which can pressure smaller point-solution vendors and internal-build efforts more than large platform peers. The U.S. opportunity is the key catalyst over the next 2-4 quarters; if federal proof-of-concepts convert, this becomes a multiple re-rating story, not just an execution story.

Contrarian view: the stock may still be under-owned because investors are anchoring on FX noise and negative quarterly cash flow, while missing that the company is de-risking the long-term model by converting one-time deployments into recurring contracts. If management sustains the current booking cadence and keeps buybacks going, downside should compress quickly; if not, the market will punish any sign that subscription growth is cannibalizing cash conversion faster than management expects.

Key Decisions for Investors

• Long CGNT on weakness over the next 2-6 weeks; risk/reward improves if the stock sells off on Q1 free cash flow noise while recurring revenue and RPO continue to trend higher.
• Buy CGNT Jan-2027 call spreads; thesis is a multiple re-rate over 6-12 months as subscription mix lifts visibility and U.S. wins convert into revenue.
• Pair trade: long CGNT / short a lower-quality small-cap cybersecurity software name with weaker gross margin and no balance sheet; the spread should benefit if the market starts paying for recurring revenue quality rather than just top-line growth.
• If already long, hedge event risk with a near-dated put spread into the next quarter; the main near-term downside catalyst is another cash flow miss from FX or inventory buildup, not a demand collapse.
• Add only on confirmation of U.S. deal conversion and sequential RPO stability over the next 1-2 quarters; that is the clearest signal the subscription transition is accretive rather than merely cosmetic.