What does Allot do?
Allot Ltd. is an Israeli cybersecurity and network-intelligence company listed as ALLT on Nasdaq and the Tel Aviv Stock Exchange. It sells mainly to communications service providers. Operators embed Allot technology in their networks to protect subscribers, analyze applications, control traffic, enforce policies, and launch paid security services. The official company overview summarizes the model as “See, Control, Secure.”
Which products and customers define the company?
Allot Secure is the growth platform, spanning network, home, DNS, business, IoT, off-network, and DDoS protection that operators can brand and sell. AllotSmart covers deep packet inspection, traffic management, policy control, analytics, and quality-of-experience tools. Enterprises, data centers, private networks, and governments also buy Allot products, but telecom operators remain central because they control the network, subscriber relationship, provisioning, and billing.
Why does Allot matter in its market?
Allot’s proposition is to make the communications network a security-distribution channel. Protection can be activated with little subscriber effort, while the operator bundles it with connectivity and collects recurring fees. Existing telecom relationships handle acquisition, billing, and support. The case therefore shows how an infrastructure vendor can use embedded technology and switching costs to pursue a higher-quality recurring-services model.
How does Allot make money, and which engine matters most?
Allot reports product and service revenue, but the economics are better understood by contract type. Products include deployment software and equipment; services include support, maintenance, subscriptions, and SECaaS. Security contracts commonly use operator revenue sharing or a periodic fee linked to subscribers. Most run for at least one year, and the telecom operator—not the end user—is Allot’s customer.
How is the revenue mix changing?
The 2025 filing attributes 63% of revenue to network intelligence and 37% to security, up from a 23% security share in 2023. Although Allot has one reportable segment, the mix shows the transition: intelligence anchors customers and cash flow, while security drives growth. The service-provider security portfolio emphasizes network-native delivery, zero-touch activation, and operator monetization.
Which revenue source is economically most important?
SECaaS matters disproportionately because subscriber additions can compound after deployment. In Q1 2026, recurring revenue—SECaaS plus maintenance and support—exceeded 67% of total revenue. This reduces dependence on equipment orders, but carriers still control marketing, pricing, and subscriber conversion.
What does Allot’s latest quarter show?
The quarter ended March 31, 2026 provided the clearest evidence that the security-first transition is improving growth and profit. The official Q1 2026 results reported $26.4 million of revenue, $8.7 million of SECaaS revenue, and $33.7 million of March SECaaS ARR.
What changed in profitability and cash generation?
GAAP gross profit rose to $18.7 million and gross margin reached 70.9%, versus $16.0 million and 69.3% in Q1 2025. Operating income was $1.5 million, a 5.8% margin, while net income was $1.9 million, or $0.04 per diluted share. Operating cash flow reached $10.6 million, but working-capital timing makes simple annualization inappropriate.
| GAAP metric | Q1 2026 | Q1 2025 | Interpretation |
|---|---|---|---|
| Revenue | $26.4M | $23.2M | Double-digit growth, driven principally by cybersecurity expansion. |
| Gross profit | $18.7M | $16.0M | Profit grew faster than revenue, supporting margin improvement. |
| Gross margin | 70.9% | 69.3% | A richer recurring mix helps, while hardware and deployment mix still matter. |
| Operating income (loss) | $1.5M | ($0.7M) | Operating leverage became visible after the cost reset. |
| Net income (loss) | $1.9M | ($0.3M) | Positive earnings now accompany revenue growth. |
| Operating cash flow | $10.6M | $1.7M | Strong collections and working-capital movement lifted liquidity. |
Is the recurring model becoming visible?
Which turning points shaped Allot’s cybersecurity-first strategy?
Allot began as a network-intelligence vendor, built carrier relationships, and then used that position to distribute subscriber security. The FY2025 Form 20-F shows the shift from traffic management toward a unified cybersecurity-led business.
-
1996
Allot was incorporated in Israel. Its technical foundation was deep network visibility and traffic control.
-
2006
The Nasdaq listing supplied public capital and visibility for a global telecom-equipment business.
-
2010
A Tel Aviv Stock Exchange listing created a dual-market shareholder base and reinforced the company’s Israeli corporate identity.
-
2022
A $40M convertible note from Lynrock strengthened liquidity but later became a capital-structure overhang.
-
2024
Management adopted a cybersecurity-first strategy and combined cybersecurity and network intelligence into one business unit; Eyal Harari became CEO in May.
-
2025
Allot returned to GAAP operating and net profit, raised equity, and fully redeemed the convertible note, removing debt from the year-end balance sheet.
-
2026
Q1 delivered accelerating SECaaS growth and record operating cash flow; the board then authorized a $40M share-repurchase program in June.
What did the 2024 reset change?
The reset recast network intelligence as infrastructure, expertise, and customer access supporting security. A unified organization can cross-sell into the installed base, reuse research and development, and concentrate sales incentives on recurring adoption instead of operating as two small vendors.
The transition is not instant because carrier deployments are complex and legacy orders remain material. Progress is better judged through SECaaS ARR, recurring-revenue share, gross margin, and operating cash flow than through product announcements.
What gives Allot an edge in telecom cybersecurity?
Allot’s strongest resource is placement inside carrier networks. Integration with traffic flows, subscriber identity, provisioning, and billing makes replacement technically disruptive and creates switching costs. One operator contract can reach millions of users, while network, home, business, IoT, and off-network protection broadens the service beyond a single-purpose traffic tool.
Where are the moat and switching costs?
This scorecard interprets disclosed deployments, distribution, and revenue mix. The moat is strongest in deep carrier integration and weakest where buyers can switch to stand-alone endpoint or cloud security.
Who competes with Allot?
Allot’s filing describes competitive categories rather than a ranked peer list because rivals vary by use case. Network intelligence competes with large networking vendors, traffic specialists, and internal carrier development. Security competes with endpoint apps, cloud services, DNS and DDoS specialists, and bundled infrastructure. Buyer power is high in formal carrier procurement; supplier power rises where deployments depend on servers and integration partners.
| Competitive pressure | Allot response | Evidence to monitor |
|---|---|---|
| Large network-infrastructure vendors | Deep packet intelligence, carrier-grade integration, and a focused security layer | Renewals, major deployments, and gross margin |
| Consumer endpoint and app security | Zero-touch, operator-branded protection across devices and network types | Subscriber adoption and SECaaS ARR |
| Cloud and DNS security services | Network-native visibility plus converged mobile, fixed, home, and off-net coverage | Security revenue growth and product breadth |
| Carrier-built alternatives | Faster deployment, specialist R&D, and monetization support | Sales-cycle length and channel conversion |
How strong are profitability, cash flow, and the balance sheet?
Allot’s financial profile changed materially from 2023 to 2025 as costs fell and losses turned into profit. The FY2025 results release reported $102.0 million of revenue, $3.6 million of GAAP operating income, $3.7 million of net income, and $17.8 million of operating cash flow.
| Fiscal year | Revenue | Operating income (loss) | Net income (loss) | Operating cash flow |
|---|---|---|---|---|
| FY2023 | $93.2M | ($64.9M) | ($62.8M) | ($29.7M) |
| FY2024 | $92.2M | ($6.0M) | ($5.9M) | $4.8M |
| FY2025 | $102.0M | $3.6M | $3.7M | $17.8M |
Why did cash flow improve faster than accounting profit?
Prepaid maintenance and subscriptions can generate cash before revenue recognition. Allot ended FY2025 with $30.6 million of deferred revenue. Free cash flow—operating cash flow minus capital expenditure—was about $15.5 million. Analysts should still normalize receivables, deferred revenue, and contract timing across several periods.
How did capital allocation change?
In 2025, Allot issued 5.75 million shares, repaid $31.4 million of the Lynrock note in cash, and converted the remaining $8.6 million into shares. The redemption left $88 million of year-end cash and no debt; cash reached $98 million by March 2026. In June 2026, the board authorized an up-to-$40 million repurchase program.
| Capital decision | Period and amount | Analytical implication |
|---|---|---|
| Equity issuance | 5.75M shares in June–July 2025 | Raised liquidity but increased the share count and diluted prior holders. |
| Convertible-note redemption | $31.4M cash repayment plus $8.6M conversion in June 2025 | Removed refinancing risk and simplified enterprise-value analysis. |
| Share repurchase authorization | Up to $40M authorized in June 2026 | Signals confidence, but execution must be weighed against growth investment and liquidity needs. |
Who owns Allot stock, and why does governance matter?
Allot has one ordinary-share class with one vote per share and no controlling shareholder. Ownership is nevertheless concentrated enough to influence elections and capital allocation. The annual filing reported 48.9 million shares outstanding on March 6, 2026. Cynthia Paul’s beneficial ownership includes Lynrock shares, and the directors-and-officers group includes attributed holdings, so these figures must not be added together.
| Holder or group | Reported shares | Reported stake | Source period | Why it matters |
|---|---|---|---|---|
| Lynrock Lake Master Fund LP | 10.01M | 20.5% | March 6, 2026 | Largest disclosed economic block; formerly provided the convertible note. |
| QVT Family Office Fund LP | 5.06M | 10.3% | March 6, 2026 | A second concentrated institutional block. |
| David Kanen | 4.16M | 8.5% | March 6, 2026 | Meaningful outside holder with potential governance influence. |
| Eyal Harari, CEO | 0.46M | About 1.0% | March 6, 2026 | Management has direct equity exposure, supplemented by incentive awards. |
| Directors and executive officers as a group | 11.29M | 23.07% | March 6, 2026 | Includes attributed Lynrock holdings; it is not an additional independent block. |
Does any shareholder control the company?
The six-member board was described as fully independent under Nasdaq standards. David Reis is chairman and Eyal Harari is CEO. This separation supports oversight, although a 20.5% holder remains influential. The official SEC filings page provides newer Schedule 13D, Schedule 13G, and insider filings after the annual-report date.
Where can Allot grow from here?
The clearest growth path is deeper penetration of subscriber bases already connected to Allot. After launch, revenue can rise through adoption, additional devices, premium packages, and expansion into fixed, home, business, IoT, or off-network use cases. This is more efficient than acquiring every user directly, although carrier sales and deployment resources remain necessary.
Which growth vectors deserve the most attention?
In April 2025, Allot launched OffNetSecure, extending carrier-branded protection beyond the operator’s network. It closes a coverage gap that otherwise favors stand-alone endpoint products.
What risks could weaken Allot’s outlook?
Telecom integration creates switching costs after deployment but lengthens procurement, testing, and launch cycles. Under revenue sharing, Allot can deliver the technology yet miss expectations if the operator markets it poorly. Security must therefore scale without destabilizing the larger network-intelligence base.
Which filing risks have the clearest financial transmission?
| Risk | How it reaches the financial statements | What to monitor |
|---|---|---|
| Carrier sales and launch execution | Delayed contracts, slower subscriber adoption, deferred revenue timing, and weaker ARR conversion | SECaaS ARR, launches, revenue growth, and receivables |
| Technology competition and encryption | Higher R&D needs, pricing pressure, reduced network visibility, or product obsolescence | R&D intensity, gross margin, and renewal activity |
| Hardware and integration supply chain | Longer deployments, higher equipment cost, and inventory commitments | Product margin, inventory, and project timing |
| Cybersecurity failure or service outage | Remediation cost, claims, lost renewals, and damage to carrier trust | Incident disclosures, support cost, and customer retention |
| Israel and foreign-exchange exposure | Operational disruption and higher dollar-reported salary expense when the shekel strengthens | Operating expense, hedging effects, and continuity disclosures |
| Privacy, AI, and lawful-interception regulation | Compliance expense, product restrictions, litigation, or reputational pressure | Regulatory changes, legal provisions, and product design |
Why does Allot’s business model matter for valuation?
Allot is neither a conventional hardware vendor nor a mature subscription company. A model should start with the installed network-intelligence base, add SECaaS ARR growth, estimate revenue conversion, and test whether gross profit outpaces operating expense. Because Allot is small, a few contracts or deployment delays can materially move annual results.
Which drivers belong in a DCF or comparable-company analysis?
| Valuation driver | Current official anchor | Model implication |
|---|---|---|
| Top-line growth | Q1 2026 revenue growth: 14% | Separate recurring security growth from project-based intelligence revenue. |
| Recurring engine | March 2026 SECaaS ARR: $33.7M | Model contract activation, adoption ramps, churn, and revenue-share economics. |
| Gross margin | Q1 2026 GAAP gross margin: 70.9% | Test whether security mix offsets hardware and deployment costs. |
| Operating leverage | Q1 2026 GAAP operating margin: 5.8% | Small changes in revenue and hiring can materially alter operating profit. |
| Cash conversion | FY2025 free cash flow: about $15.5M | Normalize working capital and deferred-revenue timing over multiple years. |
| Capital structure | $98M cash at March 31, 2026; no funded debt | Use net cash in enterprise value, then model repurchases and dilution consistently. |
Terminal assumptions require caution because technology cycles are rapid, carrier bargaining power is significant, and R&D remains necessary. A higher recurring share improves visibility but does not guarantee pricing power. The key question is whether embedded distribution and subscriber growth can sustain free cash flow after normalized operating and capital needs.
What is the key takeaway from Allot analysis?
Allot is a network-intelligence company pursuing a business-model migration, not yet a fully transformed subscription-security platform. Legacy technology supplies carrier relationships and installed infrastructure; SECaaS turns those assets into recurring monetization. Q1 2026 showed progress through double-digit revenue growth, faster security growth, positive GAAP operating profit, and strong cash generation.
Support comes from global deployments, net cash, improving margins, and a rising security run rate. Pressure comes from carrier-controlled execution, long sales cycles, a 63% legacy mix, rapid technology change, supply-chain dependencies, and Israeli exposure. The repurchase authorization adds a capital-allocation test: returning cash versus funding products and launches.
For strategy analysis, Allot shows how installed infrastructure can create switching costs and recurring monetization. Financial research should follow the chain from ARR to revenue, operating leverage, and sustainable free cash flow. Governance combines concentrated but non-controlling holders with an independent board. The next phase depends on operator activation, subscriber adoption, and durable cash generation—not the number of products in the portfolio.
5-Year Financial Model
40+ Charts & Metrics
DCF & Multiple Valuation
Free Email Support
Disclaimer
All information, articles, and product details provided on this website are for general informational and educational purposes only. We do not claim any ownership over, nor do we intend to infringe upon, any trademarks, copyrights, logos, brand names, or other intellectual property mentioned or depicted on this site. Such intellectual property remains the property of its respective owners, and any references here are made solely for identification or informational purposes, without implying any affiliation, endorsement, or partnership.
We make no representations or warranties, express or implied, regarding the accuracy, completeness, or suitability of any content or products presented. Nothing on this website should be construed as legal, tax, investment, financial, medical, or other professional advice. In addition, no part of this site—including articles or product references—constitutes a solicitation, recommendation, endorsement, advertisement, or offer to buy or sell any securities, franchises, or other financial instruments, particularly in jurisdictions where such activity would be unlawful.
All content is of a general nature and may not address the specific circumstances of any individual or entity. It is not a substitute for professional advice or services. Any actions you take based on the information provided here are strictly at your own risk. You accept full responsibility for any decisions or outcomes arising from your use of this website and agree to release us from any liability in connection with your use of, or reliance upon, the content or products found herein.
