NCC Group reports 5% revenue rise, plans £185m capital return

NCC Group reported first-half revenue up 5.0% year over year to £151.3 million, with adjusted EBITDA rising 27.7% to £23.5 million and pretax profit of £10.7 million. Management cited margin improvement in Cyber Security, stronger larger-client contract contribution, and growth in the UK and Asia-Pacific, while also announcing a £170 million tender offer and £15 million buyback after the Escode sale. The company expects mid- to low-single-digit Cyber Security revenue growth in FY2026 and mid-teens EBITDA margin by FY2028.

Analysis

The key read-through is not the modest near-term growth, but the step-change in capital intensity and cash return policy after the Escode disposal. By swapping a lower-growth asset for a cleaner, higher-margin cyber business, management is effectively signaling that the market has been undervaluing the remaining platform on an earnings quality basis; that tends to compress the discount rate more than it changes near-term revenue estimates. The tender offer plus buyback also creates a technical bid for the shares over the next several months, which can matter more than fundamentals in a small-cap where liquidity is limited.

The second-order effect is competitive: NCC is leaning harder into larger multi-service contracts and managed services, which usually implies better retention but also more exposure to enterprise budget scrutiny if macro weakens. That mix shift pressures smaller point-solution vendors more than large incumbents, because buyers will favor vendors that can bundle consulting, testing, and recurring services under one procurement motion. The margin commentary suggests the operating lever is mix, not just cost cutting, which is healthier and more durable than a one-off efficiency push.

The main risk is that the market may over-rotate on the buyback/tender as a near-term EPS catalyst while ignoring that mid-single-digit organic growth is still not enough to fully justify a premium multiple absent sustained margin expansion. If cyber spending normalizes or procurement cycles lengthen, the company’s “faster-than-revenue EBITDA” thesis can slip quickly over the next 2-4 quarters. The contrarian angle is that this is more of a capital-allocation story than a true acceleration story: if the buyback gets priced in too aggressively, upside may be capped once the transaction closes and the market refocuses on the underlying growth rate.

Key Decisions for Investors

• Go long NCC Group on pullbacks, with a 3-6 month horizon into execution of the tender/buyback; expect multiple support from capital returns plus margin expansion, but size modestly because the fundamental growth rate is still mid-single-digit.
• Use NCC as a relative-value long versus lower-quality cyber services names or small-cap IT consultancies with weaker recurring revenue mix; the cleaner post-divestiture profile should win in a risk-off tape.
• If liquidity allows, buy short-dated call spreads into the tender announcement window to capture the technical bid; risk/reward is attractive if the market starts pricing the capital return before the cash actually hits.
• Fade an aggressive rerating after the first post-transaction rally: take profits if the stock prices in the full buyback/tender benefit before FY26 guidance is proven, since the next leg needs execution, not just capital allocation.