Allot in 2025: The SECaaS Engine Is Strengthening, but the Legacy Core Still Sets the Pace

Getting To Know The Company

Allot is not a clean, pure-play cybersecurity software story. It sells a mix of network intelligence and network-based security solutions to telecom operators, and to parts of the enterprise market. What really worked in 2025 was the services side: services revenue rose to $71.0 million, or 69.6% of total revenue, and the company returned to operating income of $3.6 million and net income of $3.7 million. What can mislead on first read is the idea that this already makes Allot a recurring-security company. It does not. Security solutions accounted for 37% of revenue in 2025, while network intelligence still accounted for 63%.

That is the core issue. Allot proved in 2025 that it can improve mix, cut costs, and extract more profit from each dollar of services revenue. It has not yet proved that the new engine is large enough to carry the company through the lower-visibility parts of the legacy business. SECaaS, meaning security as a service sold through telecom operators, reached $26.8 million of revenue. That is meaningful, but it still sits inside a company with $102.0 million of total revenue and a legacy product base exposed to competitive pressure, public-cloud migration, and 5G architecture shifts.

There is also an early balance-sheet filter. In June 2025, Allot raised equity, repaid $31.41 million of the Lynrock convertible note, and converted the remainder into shares. That left the company with a much cleaner capital structure and year-end liquid resources of $17.1 million of cash, $48.7 million of marketable securities, and $15.1 million of short-term deposits. But that flexibility was not free. Outstanding shares ended the year at 48.6 million, up from 39.5 million a year earlier.

That is why 2026 looks like a proof year, not a victory lap. If SECaaS keeps scaling, if service margins hold, and if the strategy of pursuing fewer but larger accounts with minimum revenue thresholds actually improves revenue quality instead of simply lengthening sales cycles, the read on Allot will improve. If not, the market may go back to treating it as a company that cleaned up the balance sheet before it fully proved the business model transition.

The Economic Map

Events And Triggers

The Strategic Reset

In 2024, Allot redefined itself as a security-first company operating under a single unified business unit. That is more than branding. The company is explicitly trying to use its existing network intelligence assets to push a more integrated security layer across mobile, fixed, and 5G environments. This also came with management refresh: a new CEO in May 2024, a new CFO in July 2024, a new Chief Product Officer in November 2024, and a new SVP of R&D in December 2024. Put together with tighter cost discipline, 2025 reads like a year of strategic reset rather than just a year of temporary cost cutting.

The Financing Trigger

The most important financial event of the year did not happen in the P&L. It happened in the capital structure. In June 2025, Allot entered a private placement for 5.0 million shares at $8 per share. Another 1.25 million shares were issued as part of extinguishing the Lynrock note, and a further 750 thousand shares were issued in July through the option exercise. The immediate result was shareholders’ equity rising to $113.4 million, convertible debt falling from $40.0 million to zero, and a $1.41 million loss on extinguishment.

This is a two-sided move. It sharply improves balance-sheet flexibility and removes a real overhang. But it also transfers the cost of the cleanup to shareholders through dilution. Anyone reading only “cleaner balance sheet” and skipping the equity layer is missing the economics of the move.

The Commercial Trigger

Allot also rewrote its SECaaS sales logic. It now says the strategy is to target strategic accounts with high revenue potential while requiring customer assurances or minimum revenue thresholds for smaller deals. It also says the number of deals is likely to decline even if total sales potential stays roughly the same.

That matters. It probably improves revenue quality and the odds of more stable profitability. But it also narrows the funnel, lengthens selling cycles, and increases reliance on landing a smaller number of larger operator accounts.

Efficiency, Profitability, And Competition

What Actually Drove The Improvement

The 2025 story is not that everything improved evenly. It is much narrower than that. Product revenue rose only 3% to $31.0 million, while services revenue rose 14% to $71.0 million. That means the improvement in profitability came mainly from the services side, not from a broad-based product acceleration.

The margins make that even clearer. Product gross margin fell to 59% from 64% because product deals carried higher costs in 2025. Services gross margin rose to 77% from 71%, mainly because SECaaS represented a larger share of revenue and service costs were lower. Total gross margin rose to 71.1% from 69.1%, but this was not a uniform improvement across the business. It was largely a mix shift.

Operating expenses were also held in check. R&D fell 6% to $24.5 million, sales and marketing was essentially flat at $30.8 million, and G&A rose 7% to $13.6 million, mainly due to legal and other general expenses. So the move back to operating profit came from a combination of better mix and tighter cost structure, not just from stronger demand.

The SECaaS Engine Is Real, But It Still Does Not Carry The Whole Company

This is the single most important point in the filing. SECaaS revenue rose to $26.8 million from $16.5 million in 2024 and $10.6 million in 2023. SECaaS ARR, the annualized run-rate based on the last month of the period, rose to $30.8 million from $18.2 million a year earlier. Total recurring revenue rose to $62.8 million.

Those are good numbers, in some respects very good numbers. They show that the security engine is real, not theoretical, and large enough to move margins and move the conversation around the company. But two details matter:

First, SECaaS still accounts for only about 26% of total revenue. Even if one adds maintenance and support, this is still not a pure recurring-security model.

Second, management explicitly says that growth in the SECaaS recurring revenue model has been slower than originally anticipated. In other words, the numbers improved, but the full ambition has still not been reached.

Where The Competitive Pressure Still Sits

This is where investors should be careful not to over-read the company’s own repositioning. Allot is still materially dependent on network intelligence. The filing says network intelligence represented 63% of revenue in 2025, and it also says the DNI market has lower long-term visibility and therefore lower visibility for growth in 2026.

There are several structural frictions here.

First: in the enterprise market, the company explicitly says it does not anticipate additional growth, partly because datacenter infrastructure is moving to public cloud.

Second: in 5G, the TDF function that Allot used to sell as a standalone element is being folded into the UPF, which is controlled by large network equipment providers. That is a direct architectural pressure point.

Third: Allot competes both against cybersecurity vendors that sell directly to end users and against infrastructure vendors that integrate functionality at the platform level. Its real advantage is therefore not “better cybersecurity” in the abstract. It is network-native security delivered through the telecom operator, with zero-touch end-user experience and operator-scale deployment.

The implication is straightforward. For the Allot story to get cleaner, security has to grow fast enough to offset the lower-visibility parts of the legacy business.

Cash Flow, Debt, And Capital Structure

The Full Picture, Not Just The Cash Line

If Allot is framed through all-in cash flexibility, meaning available liquid resources against actual cash obligations, the year-end 2025 picture is much better than a year earlier. The company ended 2025 with $17.1 million of cash, $48.7 million of marketable securities, and $15.1 million of short-term deposits. Together that is about $80.9 million of unrestricted liquidity, before restricted deposits. Working capital stood at $77.8 million.

Against that, there is no longer convertible debt, future minimum lease commitments are only $5.7 million, of which $0.8 million is due in the next twelve months, and non-cancelable inventory purchase obligations were just $0.3 million. This is not a company facing immediate financing stress.

But investors should not confuse “no near-term balance-sheet stress” with “balance-sheet repair funded organically.” The flexibility at the end of 2025 is real, but it rests on a major equity event. Both truths need to be held at the same time.

How Cash Flow Was Built

Cash from operations reached $17.8 million, far above net income of $3.7 million. That is a good headline, but it also needs to be unpacked.

What helped: $4.0 million of depreciation and amortization, $5.0 million of share-based compensation, a $6.4 million increase in deferred revenue, a $2.9 million increase in other payables and accrued expenses, and another $1.0 million from employee accruals. In other words, a large part of operating cash flow came from accounting add-backs and from getting paid ahead of performance.

What hurt: inventory rose by $4.6 million and trade receivables rose by $1.0 million. That matters, because even after the receivables cleanup, Allot still runs a business that needs working capital and equipment. This is not a weightless software engine.

Shareholders Paid For The Cleanup

This is the point that changes how 2025 should be read. Financing cash inflow was $42.3 million from issuing shares, while $31.4 million went out to redeem convertible debt. In other words, the shareholders, not the organic cash engine alone, are what cleaned up the capital structure.

In the short term, that was the right move. Without the convertible note, Allot looks materially less fragile and has more tactical flexibility. In the medium term, it raises the bar. After dilution on this scale, the company now has to prove that the fresh equity created a better business, not only a cleaner balance sheet.

Forecasts And The Road Ahead

Before going into the detail, five non-obvious findings should sit together:

1. The exit rate looks better than the year itself. SECaaS ARR of $30.8 million is above 2025 SECaaS revenue of $26.8 million, meaning the company exited the year at a stronger run-rate than the revenue recognized during the full year.
2. Visibility improved, but not completely. Remaining performance obligations were $102.7 million, of which $75.3 million is expected to be recognized before the end of 2026. That is far more useful than the generic statement that backlog is strong. But the metric excludes certain variable consideration elements in SECaaS, so it does not capture the full usage-driven story.
3. The receivables book looks cleaner, but part of that cleanup already happened through write-offs. The allowance for credit losses fell to $9.6 million from $25.3 million, partly after $15.5 million of write-offs. Current-period provision was only $67 thousand, and only $0.9 million was past due at year-end.
4. The new sales strategy improves quality, not necessarily speed. The company is explicitly choosing fewer deals and more strategic accounts with minimum thresholds, so 2026 will be judged on both closure pace and revenue quality.
5. This is a proof year. Not a breakout year. As long as 63% of revenue still comes from the lower-visibility legacy core, the transition cannot be declared complete.

What Allot Actually Has To Prove

The first task is to show that SECaaS is not just an add-on growth pocket but a model large enough to carry a bigger share of the company. The filing says the solution already serves about 20 million subscribers globally and has achieved high double-digit penetration with some service providers. That means the product works. What remains open is the pace of economic conversion: how quickly new operators launch, and how quickly existing operators deepen penetration and monetization.

The second task is to preserve the quality of profitability. Services at 77% gross margin are an excellent engine, but if product margin keeps slipping, and every increase in AllotSmart product deals comes with heavier costs, part of the improvement will leak away. Put simply, security has to be more than a revenue add-on. It has to be the layer that protects margins against weakness in the legacy product stack.

The third task is to prove that growth is not being funded through weaker customer quality. After the receivables problem of 2023, that point matters more than it normally would. In 2025, the company reports new credit-limit procedures, immaterial current-period credit provision, and only $0.9 million of past-due receivables. That is clearly positive. But it also means that if growth looks slower, part of the explanation may simply be tighter discipline. That improves business quality, even if it does not maximize deal count.

Where Visibility Exists, And Where It Still Does Not

Remaining performance obligations of $102.7 million are an important anchor. They tell investors there is a real contractual base, not just a hopeful pipeline. More than that, $75.3 million is expected to be recognized before the end of 2026. That supports the argument that 2025 was not a one-off year.

But even here, investors need to separate what is contractually visible from what still depends on subscriber usage and operator execution. Some SECaaS contracts are based on revenue share or monthly fees per user. So even when the contract exists, the actual economics still depend on end-user penetration and operator go-to-market execution. The filing is explicit on this point.

What Kind Of Year 2026 Looks Like

2026 looks like a proof year for three reasons.

First, Allot has already executed the balance-sheet reset. It can no longer hide behind “once we have financing flexibility.” The financing flexibility is already there.

Second, 2025 established a real base for comparison. After reaching $30.8 million of SECaaS ARR and returning to positive operating income, the market will expect follow-through, not just stability.

Third, the risks in the legacy side of the business have not disappeared. The company explicitly says it does not expect additional growth in enterprise, and that DNI has lower long-term visibility. So the new side of the story has to be strong enough to compensate for that.

What needs to happen over the next 2 to 4 quarters for the thesis to improve:

The implication is clear. Allot has already passed the “can it stabilize?” phase. It is now entering the “can it build a better business?” phase. That is a much harder test, and also a much more relevant one.

Risks

SECaaS Execution Risk

Management itself says growth in the recurring SECaaS engine has been slower than originally anticipated. That is not a footnote. If operators fail to push the service effectively to end users, or if penetration does not rise enough, even a good product can remain too small relative to what the company needs.

Legacy-Core Risk

On the network-intelligence side, the company faces an uncomfortable mix of competition and market change. Public-cloud migration weighs on enterprise demand, and the 5G architecture reduces the space for a standalone TDF function. This is not an immediate collapse scenario, but it does raise the burden on the security side of the house.

Supply-Chain And Hardware Risk

Allot explicitly says that demand for hardware driven by the AI industry has created shortages, higher prices, longer lead times, and pressure to order earlier. The company keeps roughly three to nine months of inventory of key components. That helps explain the inventory increase and is also a reminder that, despite the recurring-security narrative, Allot is still tied to hardware logistics and working capital.

Regulatory Risk

In June 2025, the company submitted an initial voluntary self-disclosure to the U.S. BIS regarding possible export-control violations linked to software upgrades, one expansion card provided to a small number of customers in Russia, and access to parts of its software and technology by Belarus-based subcontractor engineers. The final submission was made in March 2026, and the company says it cannot assure investors regarding the regulator’s response or potential penalties. That is a real external warning signal, not boilerplate risk language.

Customer Concentration And Sales-Cycle Risk

The ten largest customers represented 40.7% of revenue in 2025. The largest customer and the second-largest customer each accounted for 7%. That is not extreme single-customer concentration, but it is still a business built around larger accounts, longer sales cycles, and customer acceptance milestones. As the company pushes toward larger strategic accounts, that risk does not disappear. It just changes shape.

---

Conclusions

Allot now looks much cleaner, more disciplined, and more focused than it did a year ago. The SECaaS engine is real, services are pushing margins higher, and the balance sheet is no longer sitting under a $40 million convertible note. But the legacy core has not disappeared, and one strong year does not yet prove a full business-model transition.

Current thesis: Allot has moved from survival repair into quality proof.
What changed: the recurring engine is larger, the balance sheet is cleaner, and the customer book looks healthier.
Counter-thesis: 2025 may still prove to be mainly a year of cost discipline, favorable mix, and dilution-driven cleanup, while the legacy core remains lower-visibility and structurally weaker.
What could change the market reading in the short to medium term: SECaaS ARR, service margins, and discipline around receivables and inventory in the next few reports.
Why this matters: because 2025 set the proof point for whether Allot is becoming a recurring-security platform, or simply buying time with a cleaner balance sheet.

What has to happen from here is fairly straightforward: SECaaS needs to keep growing faster than the company, service margins need to hold, and the legacy core at minimum must not deteriorate. What would weaken the thesis is a combination of slower ARR, further product-margin erosion, and a return of receivables or working-capital problems. That is the real difference between a successful transition year and a durable business-model reset.