What does Cyber Security Cloud do?
Cyber Security Cloud (CSC) sells subscription security software that protects web applications from cyberattacks and unauthorized access. It has two main products. Shadan-kun is a cloud-based WAF (Web Application Firewall) that detects and blocks attacks on a customer's website. WafCharm automatically manages WAF rules on AWS, saving companies the effort of configuring and maintaining their own security settings.
Customers pay monthly or annual subscription fees, and roughly 90% of CSC's revenue is this recurring "stock" revenue. Monthly churn is 1.03% for Shadan-kun (MRR basis) and 0.94% for WafCharm (user basis). As of Q1 FY2026, annual recurring revenue (ARR) was ¥5.19bn and operating margin was 26.0%. Among approximately 4,000 listed companies in Japan, only two — including CSC — have recorded six consecutive years of 25%+ growth in both revenue and operating profit.
The investment question is straightforward: is CSC building a defensible application-security platform, or is too much of the business dependent on AWS? This report examines the stock's price history, three contentions debated by the market, catalysts for the next twelve months, and a set of valuation scenarios.
Why has the stock moved over the past two years?
The chart below splits the past 24 months into four regimes. From ¥2,300 down to ¥1,300, then back to ¥1,700 — we trace what drove each phase.
01 · PEAK REGIME From May through August 2024, the stock traded in the ¥2,200–2,400 band. FY2023 revenue grew +35% and operating profit +43%, and the combination of a domestic-market-leading cloud WAF share and broader SaaS inflows sustained a PER of 40–50x. Turnover was thin; despite a ~80% free float, active institutional position-building remained limited.
02 · CORRECTION Between September 2024 and April 2025, the BoJ’s signalling of rate hikes and a correction in US tech equities compressed domestic growth stocks across the board. 4493 fell from ¥2,300 to ¥1,300, a decline of −43%. PER compressed below 20x and EV/EBITDA sank to the 13x level. Vector Group International, a major shareholder at FY2024 end, exited during early 2025 (extraordinary report filed February 12, 2025), adding to selling pressure.
03 · MTP-DRIVEN RECOVERY In March 2025, CSC completed a third-party allotment to the JICVGI Opportunity Fund (¥1.85bn, 940,000 shares), signalling its intention to accelerate M&A-led growth. Then, on February 13, 2026, CSC published a medium-term management plan targeting ¥20bn in revenue and ¥4bn in operating profit by FY2030 (4x FY2025 levels). The combination was received as a genuine shift into growth-investment mode. Six consecutive years of revenue and OP growth exceeding +25% underpinned credibility, and the stock recovered to the ¥2,000 zone.
04 · CURRENT The Q1 FY2026 operating margin of 26.0% (exceeding the company guidance of 20.0% by +6pt) and the share buyback announced on 22 May (up to 250,000 shares, or 2.43% of shares outstanding excluding treasury based on the company’s May 21 denominator, capped at ¥450mn) support the downside. However, the full-year OP growth guidance is +8.8%, a sharp deceleration from the prior year’s +42.5%. Over the next four quarters, the verification agenda distils to three questions. First, whether the Q1 26% margin can sustain above 22% for the full year. Second, whether the structural dependence on AWS — ~57% of ARR — is impaired if AWS itself enhances its native WAF management capabilities. Third, whether the MTP target of ¥20bn in 2030 revenue is organically achievable or requires ¥5–10bn in M&A-sourced revenue.
Three questions the market is debating
CSC’s investment case comes down to three questions. For each, we present the bull and bear arguments and identify which disclosures would settle the debate.
What could change over the next twelve months?
Three catalysts that CSC’s management can accelerate — each with its own costs and risks.
What has to be true for the stock to work from here?
The scenarios below are JII estimates, not company guidance. They use the May 27 closing price of ¥1,721, FY2026 company operating-profit guidance of ¥1.2bn, and enterprise value (market capitalisation minus net cash) of ¥14.3bn. Ranges are derived from combinations of ARR growth and operating margin.
- ARR growth stalls at 10–13%
- AWS native WAF auto-management emerges as a competitive threat
- Large-scale M&A integration failure
- Operating margin retreats to 18%
- ARR growth sustains at 16–18%
- Pricing revision contributes modestly from Q3
- Small-scale M&A — 1 deal
- Operating margin lands at 20–22%
- ARR growth accelerates above 20%
- M&A success + Prime Market transfer
- Operating margin entrenched at 22–25%
- EPS exceeds ¥90 · PER 20–25x
This is not investment advice.
Japan Investor Interface Co., Ltd. ("JII") is an investor-relations (IR) consultancy. JII is not a registered investment advisor, financial advisor, broker-dealer, or securities firm in any jurisdiction. JII is not registered as a Financial Instruments Business Operator under Japan's Financial Instruments and Exchange Act. JII does not have an investment advisory registration and does not provide investment advice or solicit the purchase, sale, or holding of any security.
JII Compounders is an editorial publication. Each profile is an analytical study of how publicly disclosed information about a Japanese listed company has been received by the market. It is intended for educational and research purposes for IR professionals, finance students, journalists, and other readers interested in corporate disclosure practice. Nothing in this publication constitutes a recommendation, opinion, suggestion, or solicitation to buy, sell, or hold any security, derivative, or other financial instrument. Price targets, scenario ranges, multiples, and comparable-company references are illustrative of analytical method only and must not be interpreted as JII's investment opinion. JII does not have an investment opinion on any security discussed.
No reliance. The information presented may be incomplete, out of date, or incorrect. Forward-looking statements are inherently uncertain. Past price performance does not indicate future results. Estimates and scenario figures are not predictions and may not be achieved. JII makes no representation or warranty, express or implied, regarding the accuracy, completeness, timeliness, or reliability of any information in this publication.
No fiduciary or advisory relationship. Reading this publication does not create any advisory, fiduciary, or professional relationship between you and JII. Before making any investment, tax, accounting, legal, or other decision, you should consult qualified, licensed advisors in your jurisdiction and conduct your own independent due diligence based on primary disclosures issued by the company concerned.
Conflicts & positions. JII may provide paid IR diagnostic, translation, or interpretation services to Japanese listed companies, including companies discussed in this publication. JII does not trade in or hold positions in the securities of companies profiled. Where a JII engagement exists with a profiled company, that fact will be disclosed at the top of the profile.
Trademarks & data. Company names, logos, tickers, and product names referenced are the property of their respective owners. Share-price data is licensed from third-party providers. TradingView is a trademark of TradingView, Inc. All rights reserved.
本資料は、日本の金融商品取引法に基づく投資助言・代理業ではなく、特定の有価証券の売買その他の取引の勧誘・推奨を目的とするものではありません。本資料は教育・研究を目的とした分析記事であり、JII（株式会社ジャパン・インベスター・インターフェース）は、本資料の内容に基づく投資判断について一切の責任を負いません。投資の判断はご自身の責任と独立した調査に基づいて行ってください。