cyan AG: High-Risk Cybersecurity Turnaround Poised for Scalability and Growth
cyan AG is a business-to-business-to-consumer (B2B2C) provider of white-label cybersecurity solutions. The company's primary market consists of Mobile Network Operators (MNOs), Mobile Virtual Network Operators (MVNOs), and other service providers who integrate cyan's technology to offer security products to their end customers. Its core offerings include network-integrated security (OnNet Security) and device-based applications (OnDevice Security), which protect users from threats such as phishing, malware, and online scams.
The company is at a critical inflection point following a multi-year restructuring that culminated in the December 2023 sale of its i-new BSS/OSS (Business/Operations Support System) segment. This strategic divestiture has transformed cyan AG into a pure-play cybersecurity firm, allowing it to focus exclusively on its higher-margin, scalable, and recurring revenue business. This strategic pivot has yielded immediate results, with the company achieving a successful operational turnaround in the first half of 2025. For the first time in its recent history, cyan reported a positive EBITDA, driven by a 37% year-over-year increase in revenue and improved cost discipline.
The core investment thesis is centered on this turnaround. The case rests on cyan's ability to leverage its proprietary, AI-driven technology and established partnerships with major telecommunication firms, such as the Orange Group and Claro Chile, to rapidly scale its subscriber base. If successful, the company's highly scalable SaaS model is positioned to generate significant operating leverage, driving substantial margin expansion and shareholder value from a currently depressed valuation.
However, the investment is not without considerable risks. These include the company's micro-cap status, a history of unprofitability, a reliance on key partners for a significant portion of its revenue, and a recent transition in executive leadership. The outlook depends entirely on management's ability to execute its focused growth strategy and translate strong top-line momentum into sustainable free cash flow.
cyan AG operates on a Software-as-a-Service (SaaS) model designed to generate high-quality, recurring revenues, which accounted for an impressive 97% of total revenue in the first half of 2025. This model is implemented through a B2B2C go-to-market strategy, where cyan partners with large service providers who then offer the security solutions to their extensive end-customer bases. This approach utilizes two primary monetization strategies:
Revenue Share: In this model, the partner, such as a telco, offers cyan's security solution as a value-added, optional product to its subscribers for a monthly fee. cyan then receives a significant portion of that fee, with examples suggesting a revenue share of around 40%.
Licensing: Alternatively, a partner can integrate cyan's security solution directly into its standard tariffs and products, using it as a key differentiator to enhance its core offering. In this case, the partner pays cyan a recurring licensing fee.
The B2B2C model is a powerful and capital-efficient engine for customer acquisition. By leveraging the established brands, marketing channels, and massive subscriber bases of its telco partners, cyan effectively bypasses the high sales and marketing expenses that are typical for direct-to-consumer software companies. This structure is the fundamental driver of the business's scalability. The company demonstrated this by growing its subscriber base by 86% in 2024 and another 24% in the first half of 2025 without a corresponding surge in operating expenses. This dynamic allows revenue to grow substantially faster than the associated costs, creating a clear path to significant margin expansion and profitability as the company scales.
cyan's competitive position is anchored by its proprietary threat intelligence engine. This core technology is powered by artificial intelligence and machine learning algorithms that have been trained for over 15 years, continuously analyzing a massive data flow of over one trillion anonymized data requests per month to proactively identify and neutralize cyber threats. The company highlights several "unfair advantages" that stem from this technological foundation:
Hybrid Security Offering: A key differentiator is the ability to provide both on-net (network-level) and on-device security, offering comprehensive protection that many competitors do not.
Ease of Integration: The company's white-label solutions are designed for rapid deployment, allowing partners to go to market in as little as six weeks. This reduces implementation friction and accelerates the timeline for revenue generation.
Predictive Capabilities: The AI-driven platform is engineered not only to react to existing threats but also to predict and protect against potential future threats before they emerge.
In the specialized market of telco security, key competitors include firms like Allot and Spirent. cyan differentiates itself not through size but through its specialized focus on seamless, white-label integration tailored to the needs of MNOs and MVNOs. The recent multi-year extension of its global contract with the Orange Group serves as powerful third-party validation of its technology and business model, demonstrating its ability to win and retain tier-one partners in a competitive field.
cyan has articulated a clear, multi-pronged growth strategy designed to leverage its core technology across various markets and customer segments.
Core Business Expansion (Telco): The primary strategic focus remains on the telco sector. This involves deepening relationships with existing partners by rolling out services to additional geographies (e.g., more countries within the Orange Group) and aggressively pursuing new MNO and MVNO contracts, with a stated focus on untapped markets in Asia and the Americas. The global market for mobile subscribers is vast, and with many telcos still lacking a robust cybersecurity offering, the runway for growth in this core segment is substantial.
New Customer Segments (Non-Telco): A second strategic pillar is the expansion into adjacent high-value verticals, including banking, insurance, and e-commerce. These industries face escalating cyber threats and have an urgent need for security solutions. cyan plans to penetrate these markets by offering its threat intelligence engine as an on-device solution embedded via a Software Development Kit (SDK) into the partners' existing applications.
New Product (cyan Guard 360 for SMEs): The company recently launched "cyan Guard 360," a comprehensive cybersecurity solution specifically designed for the historically underserved Small and Medium-sized Enterprise (SME) market. This product represents a new growth pillar and will be distributed through a channel partner strategy focused on Managed Service Providers (MSPs).
Future Opportunities (Data Monetization): Looking further ahead, the company has identified the potential to monetize the vast and valuable cybersecurity insights and threat data collected by its global platform.
This strategy represents a logical and phased approach to maximizing the value of its core technology. The telco business provides a foundation for predictable, scalable growth. Meanwhile, the expansion into new verticals and the launch of the SME-focused product act as valuable call options on future growth that could significantly accelerate the company's revenue trajectory if executed successfully. Management has prudently guided that the revenue contribution from cyan Guard 360 is expected to be minimal in 2025 and will materialize gradually, an important consideration for near-term financial models.
To appreciate the current investment case, it is essential to understand cyan AG's challenging financial history. The period from 2021 to 2023 was marked by revenue volatility and significant operating losses. After posting revenues of €8.5 million in 2022, sales declined sharply to €4.7 million in 2023, accompanied by an EBITDA loss of €4.5 million. This performance was heavily influenced by the capital-intensive and lower-margin i-new BSS/OSS segment, which has since been divested. This difficult period necessitated a comprehensive restructuring, culminating in the strategic pivot to a pure-play cybersecurity model.
The positive effects of this new focus became immediately apparent in the company's financial results for fiscal year 2024 and the first half of 2025.
Fiscal Year 2024: The company demonstrated a strong recovery, with revenues increasing by 50% year-over-year to €7.1 million. More importantly, the EBITDA loss narrowed substantially to €1.5 million from €4.5 million in the prior year. The reported operating cash flow of €-3.8 million was skewed by a €2.0 million negative impact from the discontinued i-new segment; adjusting for this, the core cybersecurity business operated at near cash-flow neutrality, signaling a fundamental improvement in operational efficiency.
First Half 2025: The first six months of 2025 marked a pivotal milestone. Revenue continued its strong trajectory, growing 37% year-over-year to €4.4 million. This growth, combined with disciplined cost management, allowed the company to achieve positive EBITDA of €0.5 million, a remarkable €1.6 million improvement from the €-1.1 million loss in H1 2024. Gross margin expanded to 85.0%, and adjusted operating cash flow was near break-even at €-0.2 million, confirming the financial viability of the new model.
For the full fiscal year 2025, management has issued guidance for revenues between €8.8 million and €9.2 million, with an expectation of a "slightly positive" EBITDA for the full year. The guidance for full-year EBITDA to not significantly exceed the H1 level, despite continued revenue growth, signals a deliberate strategy to reinvest gross profits back into the business, primarily through hiring in sales and technical functions to support future scaling. This approach will temper near-term profitability but is a necessary investment to capture the long-term market opportunity.
As of October 2025, cyan AG has a market capitalization of approximately €50.3 million. Based on its trailing twelve-month (LTM) performance, the company trades at an Enterprise Value-to-Revenue multiple of approximately 6.6x. Due to historical losses, its LTM EV/EBITDA and Price-to-Earnings ratios are not meaningful.
A comparison to a curated peer group of publicly traded cybersecurity companies highlights cyan's relative valuation. While a direct comparison is challenging due to differences in scale and profitability, it provides important context.
Source:. Data as of late 2025.
cyan AG trades at a significant premium to the median EV/Revenue multiple of this peer group. This premium reflects the market's anticipation of high future growth and the recent positive inflection to profitability. The investment thesis is predicated on the company growing into this valuation and warranting an even higher multiple as its financial profile strengthens and aligns more closely with high-growth, profitable SaaS companies.
An investment in cyan AG carries several company-specific risks that must be carefully considered.
Financial Risk: Despite the recent turnaround, the company's financial position remains delicate. It has a history of significant losses and ended fiscal year 2024 with a low cash position of €0.8 million. While operating cash flow is improving, any unexpected operational setbacks or delays in customer payments could strain liquidity and potentially necessitate dilutive capital raises.
Execution and Scaling Risk: The entire investment thesis is contingent upon management's ability to successfully scale its subscriber base and revenue. Failure to execute on planned rollouts with existing partners, or an inability to win new, significant telco clients, would severely undermine the growth narrative and the company's ability to achieve sustainable profitability.
Customer Concentration Risk: The company relies heavily on a few large partners, most notably the Orange Group, for a substantial portion of its revenue. The loss of, or a significant reduction in business from, a key partner would have a material and immediate negative impact on the company's financial performance and investor sentiment.
Management Risk: The recent departure of CEO Thomas Kicker, who was instrumental in leading the successful restructuring, introduces a degree of uncertainty. Although the long-tenured CTO has stepped in as interim CEO to ensure operational continuity, the strategic direction under a future permanent leader is unknown.
Competitive Risk: cyan AG operates within the large and intensely competitive cybersecurity industry. While it has carved out a defensible niche in white-label telco solutions, there is a persistent risk that larger, better-capitalized competitors could develop similar offerings and leverage their scale to compete for cyan's target customers.
While company-specific risks are significant, cyan AG benefits from powerful secular tailwinds in the cybersecurity market.
Surging Demand for Cybersecurity: The global cybersecurity market is experiencing robust structural growth, with various forecasts projecting a compound annual growth rate (CAGR) between 9% and 13% through 2030, potentially reaching a market size of over $500 billion. This creates a rising tide of demand for security solutions.
Accelerated Growth in Telco Security: The IT & Telecom cybersecurity sub-segment is growing even faster, with a projected CAGR of 14.2%. This growth is fueled by the global rollout of 5G networks, the proliferation of Internet of Things (IoT) devices, and the increasing sophistication of cyberattacks targeting critical telecommunications infrastructure.
Regulatory Drivers: Stricter data protection regulations worldwide, such as the GDPR in Europe, are compelling companies, including telcos, to increase their investments in advanced security solutions to ensure compliance and avoid substantial penalties.
These strong macro tailwinds provide a favorable backdrop for cyan's growth strategy. The company is not attempting to create a new market but is instead aiming to capture a small share of a very large and rapidly expanding one. This de-risks the investment case to a degree, as the fundamental demand for its services is structurally increasing. The critical question for investors is not whether a market exists, but whether cyan can execute effectively to win its share.
This section presents a five-year scenario analysis to project potential shareholder returns through the end of fiscal year 2030. The valuation is based on a projection of revenue and EBITDA, with a terminal Enterprise Value (EV) calculated using a conservative EV/EBITDA multiple appropriate for a more mature software company. The projected share price is derived by adjusting the terminal EV for projected net cash and dividing by the current number of shares outstanding (21.68 million).
The following table outlines the key assumptions driving the Low, Base, and High case scenarios.
| Metric | Low Case | Base Case | High Case | Rationale / Source |
| Revenue Growth (CAGR '25-'30) | 15% | 25% | 35% | Base case aligns with analyst estimates and macro trends; other cases reflect execution variance. |
| Terminal EBITDA Margin (2030E) | 15% | 25% | 35% | Reflects varying degrees of operating leverage as the SaaS model scales. |
| Gross Margin | 80% | 85% | 88% | H1 2025 gross margin was 85%; scenarios reflect potential pricing power or pressure. |
| Opex as % of Revenue | Declines to 65% | Declines to 60% | Declines to 53% | Key driver of operating leverage, assuming revenue growth outpaces cost growth. |
| Terminal EV/EBITDA Multiple | 8.0x | 12.0x | 16.0x | Conservative range for a mature security/SaaS company, below many current high-growth peers. |
This scenario assumes management successfully executes its current strategic plan. Revenue grows at a 25% CAGR, driven by continued subscriber growth from existing partners like Orange and the signing of two to three new mid-sized telco clients over the period. The company achieves sustained profitability, with the highly scalable SaaS model delivering significant operating leverage and expanding EBITDA margins to a mature level of 25% by 2030. The new SME segment begins to contribute modestly to revenue from 2027 onwards.
Under these assumptions, the projected 2030 Enterprise Value would be approximately €91.2 million (). Assuming the company generates €10 million in net cash by 2030, the resulting market capitalization would be €101.2 million, translating to a share price of €4.67.
This optimistic scenario assumes flawless execution and accelerated market adoption. Revenue grows at an aggressive 35% CAGR, fueled by deeper penetration with existing partners, a major US telco win by 2027, and faster-than-expected traction in the SME segment following a successful launch on the AWS Marketplace. Exceptional operating leverage drives terminal EBITDA margins to 35%.
This would result in a 2030 Enterprise Value of €248.0 million (). With an estimated €20 million in net cash, the market cap would reach €268.0 million, implying a share price of €12.36.
This conservative scenario models a situation where growth stalls due to execution challenges or increased competition. Revenue grows at a sluggish 15% CAGR as key partners do not expand rollouts and new customer wins are minimal. The SME product fails to gain meaningful traction. The company struggles to achieve significant operating leverage, with terminal EBITDA margins reaching only 15%.
The 2030 Enterprise Value would be €24.8 million (). Assuming the company remains cash-neutral with zero net cash, the market cap would equal the EV, resulting in a share price of €1.14.
The table below summarizes the potential outcomes and assigns subjective probabilities to each scenario.
The probability-weighted analysis suggests a potential 5-year price target of €4.77, representing a significant potential return from the current share price. This outcome is heavily skewed by the base and high cases, underscoring the binary, success-or-failure nature of this turnaround investment.
Turnaround Play
This scorecard provides a qualitative assessment of cyan AG across ten key metrics, rated on a scale of 1 to 10.
Management Alignment (3/10): Share ownership is heavily dominated by public and retail investors (98.45%), with extremely low institutional ownership (1.55%), indicating a lack of validation from professional asset managers. Insider trading data is dated (pre-2023) and reveals significant selling by management and affiliated entities in 2021 and 2022 at much higher price levels, which is not a strong signal of alignment. The recent departure of the turnaround CEO adds further uncertainty.
Revenue Quality (8/10): The quality of revenue is excellent. A high percentage of sales (95-97%) are recurring and subscription-based, which provides strong visibility and predictability. The B2B2C model with major telco partners suggests a sticky customer base with low churn risk.
Market Position (6/10): The company appears to be gaining share within its specific niche. The impressive subscriber growth (86% in 2024, 24% in H1 2025) and the contract extension with the Orange Group validate its product and strategy. However, it remains a very small "micro-cap" player in the vast global cybersecurity market.
Growth Outlook (8/10): The outlook for growth is very strong. The company is well-positioned in a high-growth sub-segment (telco security) and has multiple levers for expansion, including signing new partners, entering new industry verticals, and launching its new SME product.
Financial Health (3/10): The company's financial health is weak but clearly improving. The balance sheet remains fragile due to a history of losses and a thin cash position. However, the recent achievement of positive EBITDA and near-breakeven adjusted operating cash flow marks a significant and positive inflection point.
Business Viability (6/10): The strategic pivot to a pure-play cybersecurity model has substantially improved the long-term viability of the business. The strategy appears sound, focusing on a scalable, high-margin product. Viability now hinges entirely on successful execution and scaling revenue to a level that generates sustainable free cash flow.
Capital Allocation (4/10): The decision to divest the cash-burning i-new business was an excellent and necessary act of capital allocation. However, the company has no history of returning capital to shareholders via dividends or buybacks. Capital allocation is currently, and appropriately, focused on funding operations and growth investments. The potential need for future capital raises remains a risk.
Analyst Sentiment (8/10): Analyst sentiment is positive. The consensus recommendation is a "Buy," with average price targets in the €3.71 to €4.30 range, suggesting analysts see significant upside from the current share price.
Profitability (4/10): Profitability is just now emerging. After years of substantial losses, the company has reached EBITDA profitability on a quarterly basis. The path to sustainable net income and free cash flow generation is still ahead and requires significant revenue growth. The very high gross margins of ~85% are a strong positive indicator of future profit potential.
Track Record (2/10): The company has a poor track record of shareholder value creation. From its 2018 IPO through early 2024, the stock price collapsed, destroying significant capital. The current investment thesis is predicated on the belief that the new focused strategy and management approach represent a fundamental break from this past performance.
Overall Blended Score: 5.2 / 10
High-Risk Turnaround
The overall outlook for cyan AG has fundamentally improved following its strategic transformation into a focused, pure-play cybersecurity provider. The company stands at a critical inflection point, having demonstrated the initial success of its turnaround by achieving positive EBITDA and establishing strong top-line momentum. The investment case is a high-risk, high-reward opportunity centered on management's ability to scale its validated, high-margin, recurring revenue model within a structurally growing market. Success in this endeavor would unlock significant operating leverage and likely lead to a substantial re-rating of the company's valuation.
New Telco Partnerships: The announcement of a new MNO partner, particularly a significant one in the Americas or Asia, would serve as powerful validation of the geographic expansion strategy and act as a major growth accelerant.
Accelerated Subscriber Growth: Quarterly reports that continue to show strong subscriber growth (e.g., above 20% annually) would confirm the scalability of the B2B2C model and likely lead to revenue results that exceed market expectations.
Sustained Profitability: Delivering consecutive quarters of positive and, eventually, growing EBITDA and free cash flow would materially de-risk the company's financial profile and could attract a new class of institutional investors.
Traction in New Segments: Any early, tangible signs of success with the cyan Guard 360 SME product or a notable customer win in the banking or insurance verticals would provide proof of concept for the diversification strategy.
Execution Failure: The primary risk is an inability to convert the pipeline of potential partners into tangible, recurring revenue growth, causing the company to fall short of its scaling targets.
Financial Fragility: A return to significant cash burn, whether due to operational missteps or a need for higher-than-expected investment, could force a dilutive equity raise at depressed prices, harming existing shareholders.
Customer Concentration: Any negative development related to the key partnership with the Orange Group, such as a delayed rollout or reduced scope, would have an outsized negative impact on revenue and investor confidence.
Speculative Inflection
As of its last close, cyan AG's share price of €2.32 is trading approximately 5.9% below its 200-day simple moving average. This key technical indicator suggests that the long-term trend remains neutral to bearish, despite recent positive fundamental developments. The stock experienced a significant positive move in late September following the release of its strong H1 2025 results, which confirmed the successful turnaround. While the one-month trend is positive, the six-month trend remains negative, reflecting the stock's weak performance earlier in the year. The short-term outlook is cautiously optimistic, driven by fundamentals, but a decisive and sustained break above the 200-day moving average is required to confirm a technical trend reversal.
Testing Resistance
View cyan AG (CYR.DE) stock page
Loading the interactive version of this report…