Allot: Will SECaaS ARR Really Convert Into Revenue And Profit
The main article argued that Allot’s SECaaS engine is now large enough to move mix and margins. This follow-up isolates the harder question: SECaaS ARR of $30.8 million versus recognized SECaaS revenue of $26.8 million is a strong exit signal, but it is not yet a contractual revenue floor that automatically drops into profit.
The main article argued that Allot’s SECaaS engine has become large enough to move mix and margins, but not yet large enough to carry the whole company on its own. This continuation isolates the narrower question: does the ARR figure already give real visibility into revenue and profit, or is it still mainly an exit-rate signal that has not fully proved itself in the income statement?
The common mistake here is to blend three different numbers into one story. Allot ended 2025 with $26.8 million of SECaaS revenue, $30.8 million of SECaaS ARR, and $62.8 million of recurring revenue. Those are not three labels for the same thing. They are three different layers of visibility, and the gap between them is exactly where the analytical work sits.
That matters now because the services engine is already shaping profitability. Services gross margin rose to 77% from 71% a year earlier, and the company explicitly ties part of that improvement to a higher percentage of SECaaS revenue. So the question is not simply whether ARR is growing. The question is how quickly, and how cleanly, it converts into recognized revenue and into earnings quality.
Three Numbers, Three Meanings
| Metric | 2025 | What it does tell you | What it does not tell you |
|---|---|---|---|
| SECaaS revenue | $26.8 million | What Allot actually recognized during 2025 | It does not capture the exit pace at year-end |
| SECaaS ARR | $30.8 million | A current annualized run-rate based on the last month of the period | It is not contracted revenue for the next 12 months |
| Recurring revenue | $62.8 million | SECaaS plus support and maintenance revenue | It is not a pure read on SECaaS alone |
This is the first discipline point. Allot’s ARR is not a clean SaaS-style contracted annual revenue number. The filing defines it explicitly as current annual recurring SECaaS revenue, calculated from estimated SECaaS revenue for the last month of the period multiplied by 12. That makes it a useful exit-rate indicator. It does not make it the same thing as secured forward revenue.
The broader recurring-revenue headline can also mislead if read too quickly. Out of $62.8 million of recurring revenue in 2025, only $26.8 million came from SECaaS. The remaining roughly $36.0 million came from maintenance and support. That is a valid and important recurring revenue base, but it is not the same growth engine investors are trying to measure when they ask whether Allot has become a real SECaaS story.
This chart gives the right framing. Recognized SECaaS revenue rose from $10.6 million in 2023 to $16.5 million in 2024 and then to $26.8 million in 2025. At the same time, SECaaS ARR rose from $12.7 million to $18.2 million and then to $30.8 million. The business is not just growing. It exited 2025 at a faster pace than the full-year P&L captured.
A Higher ARR Does Not Mean Immediate Conversion
In 2025, the gap between SECaaS ARR and recognized SECaaS revenue reached $4.0 million. In 2024, the gap was only $1.7 million, and in 2023 it was $2.1 million. In other words, Allot did not just finish the year at a better pace. It also reopened the distance between the year-end run-rate and what actually made it into the annual revenue line.
That is not automatically a bad sign. Part of what it shows is that the business had stronger momentum by year-end than the annual average implies. But it should not be read as if the gap is already guaranteed to close. Allot’s revenue-recognition model explains why.
The company says that most of its SECaaS contracts contain a single performance obligation satisfied over time. More importantly, consideration under those contracts is based on usage by the operator’s subscribers, and the company allocates the variable consideration to the distinct service periods in which the service is provided. In plain English, even after the contract exists, revenue does not simply land all at once. It depends on deployment, end-user penetration, and the pace at which the service is actually consumed.
That is also why management frames the task the way it does. To reach its goals, the company says it needs both to expand the number of recurring security deals and to increase end-user penetration within existing customers. So the bottleneck is no longer just getting the operator live. It is converting operator deployment into real monetization at the subscriber level.
At the same time, the product clearly is not theoretical. Allot says its solution is already used by about 20 million subscribers globally, and that it has previously achieved high double-digit penetration with some service providers. That is an important distinction. The problem is not lack of product fit. The problem is the speed of economic conversion.
Visibility Has Improved, But It Is Still Not Clean SECaaS Visibility
The filing does provide a real visibility anchor: remaining performance obligations of $102.741 million at the end of 2025. Of that amount, about $75.346 million is expected to be recognized before the end of 2026, and about $27.395 million after that.
That matters because it shows a real contractual base beyond a hopeful pipeline narrative. But this is where the second discipline point matters. The remaining performance obligation figure is for the company as a whole, and it includes both deferred revenue and amounts not yet received that will be recognized in future periods. The company also states that the figure is presented excluding certain variable consideration related to the SECaaS base fee.
So RPO does help separate a real business from a presentation story, but it still does not fully answer the SECaaS conversion question. It does not tell investors how much of the $30.8 million year-end ARR will convert into recognized revenue in 2026, and it certainly does not tell them how much of that will arrive with the timing and margin profile needed to carry the earnings story.
There are really two visibility layers here. The first is contractual visibility: a majority of SECaaS revenue comes from contracts of one year or longer, and the company has a meaningful remaining performance obligation base. The second is usage visibility: in parts of the model, recognition still depends on actual subscriber usage during the service period. Investors who look only at RPO miss the second layer. Investors who look only at ARR miss the first.
The New Strategy Is Aimed First At Conversion Quality
This is where the most interesting forward-looking point sits. Allot says its SECaaS sales strategy is to target strategic accounts with high revenue potential while making sure smaller and medium-sized deals come with customer assurances or minimum revenue thresholds. It goes further and says the number of SECaaS deals will likely decline, even though total sales potential should remain roughly the same as under the prior strategy, and that the emphasis on larger customers with minimum guaranteed revenues should help it reach profitability sooner.
That needs to be read correctly. Management is not chasing logo count here. It is trying to improve the conversion ratio between commercial deployment and actual revenue and profit. Put differently, it is choosing fewer deals with a clearer revenue floor over a larger number of deals that may require real operating effort before the economics become attractive.
But that also has a cost. Allot says initial network deployment for large and medium service providers generally takes between 12 and 24 months. So the shift toward larger strategic accounts can improve revenue quality, but it can also lengthen the time it takes for economics to mature. This is exactly the kind of move that can improve profit quality before it creates a cleaner and faster revenue line.
The P&L link is already visible. Services revenue rose 14% in 2025 to $71.0 million, and the company says the increase was mainly attributable to higher SECaaS recurring revenue from new and existing customers. At the same time, services gross margin rose to 77% from 71%, and the company explicitly links that to a higher percentage of SECaaS revenue. So if the new strategy really closes the conversion gap, the result should not be only more revenue. It should also be more profit per dollar of revenue.
What Has To Happen Next
| Checkpoint | What would strengthen the thesis | What would weaken it |
|---|---|---|
| Gap between ARR and recognized revenue | ARR stays strong, but recognized SECaaS revenue starts catching up | ARR rises, but recognized revenue stays behind and the gap widens further |
| Revenue quality | Larger contracts with revenue floors improve visibility without hurting overall pace | Deal count falls, but the revenue floor does not compensate and actual conversion slows |
| Service profitability | Services gross margin stays near 2025 levels as SECaaS grows | ARR improves, but service and deployment costs absorb too much of the benefit |
| End-user penetration | Operators deepen penetration within existing bases, not just sign initial deployments | Contracts and ARR grow, but end-user adoption remains too slow for timely recognition |
The conclusion of this continuation is fairly sharp. Allot’s SECaaS ARR does say something real. It shows that the company exited 2025 at a stronger SECaaS pace than the full-year revenue line captured, and it sits on top of a product already used by millions of subscribers. But it still does not convert automatically into recognized revenue, and certainly not automatically into profit. As long as parts of recognition depend on actual subscriber usage, and as long as management is deliberately shifting toward fewer deals with higher revenue floors, 2026 remains a conversion test, not just an ARR growth test.
Disclosure: Deep TASE analyses are general informational, research, and commentary content only. They do not constitute investment advice, investment marketing, a recommendation, or an offer to buy, sell, or hold any security, and are not tailored to any reader's personal circumstances.
The author, site owner, or related parties may hold, buy, sell, or otherwise trade securities or financial instruments related to the companies discussed, before or after publication, without prior notice and without any obligation to update the analysis. Publication of an analysis should not be read as a statement that any position does or does not exist.
The analysis may contain errors, omissions, or information that changes after publication. Readers should review official filings and primary sources before making decisions.