TAC Infosec is a product-led cybersecurity company that sells vulnerability management, SOC2 compliance automation, and Web3 security to over 10,000 enterprise customers in 100 countries, including Microsoft, Google, and Anthropic. The core ESOF platform is the largest revenue source, while Socify, launched in September 2025, targets the $4 billion SOC2 compliance market with AI-driven audits. The company reported an EBITDA margin of 53.8% in FY26 (up from 53% in FY25) and a 63.4% H1 FY26 EBITDA margin, reflecting the high operating leverage of a software-only model. Management claims to be the fifth largest vulnerability management company globally and is targeting top three by 2026. This margin level, sustained near 54-63%, is exceptional for software and indicates a strong niche position rather than a scale-commodity game.
The economics persist because of deep customer integration and switching costs. Enterprise security platforms become embedded in clients' workflows, and the cost of replacing them is high due to re-qualification, data migration, and trust. The multi-product approach, with ESOF, Socify, and Cyberscope, creates cross-selling opportunities, and per-client revenue grew 36% YoY to $1,682 in H1 FY26, with an internal goal of 20% quarterly growth. For the new B2C arm, Safehouse, the barrier is less proven, but its 1 million user base and 10 years of experience in consumer security provide a starting advantage. The proposed acquisition, expected to close soon, adds an embedded cyber insurance model, which is a new category in India, but the moat there will depend on distribution partnerships and brand trust rather than technical barriers.
The inflection over the next 18-24 months comes from three parallel drivers. First, Socify is scaling, targeting 10,000 clients by 2026, with pricing increased from $2,700 to $4,500 per customer. Second, Cyberscope's US listing is progressing, with a confidential F-1 filed with the SEC and waiting for NASDAQ response, which, if completed, would provide a public currency and capital for expansion. Third, the Safehouse acquisition will launch a consumer security and insurance product in India by late FY27, capitalizing on the 1.4 billion population and 70% internet penetration, with cybercrime losses of INR 55,659 crore over five years. By mid-2028, TAC Safehouse is expected to have at least 5 million users, Socify to contribute 30% of revenue, and the company to be on track for its $100 million ARR target by 2030, with EBITDA margin remaining above 50%.
Management has a track record of overachieving on stated targets. In the Nov 2025 call, they promised 10,000 clients by 2026; the Aug 2026 call confirms 10,000+ clients already. They also guided Socify to 200+ customers by December 2025; while this is not explicitly confirmed, the overall growth trend is positive. The Cyberscope IPO was expected in December 2025 but is still pending as of August 2026, a slippage of several months, indicating regulatory or market delays. Management remains confident, and they are investing $100 million in AI and cyber R&D by 2030, funded from cash flow and potentially external funding. The Safehouse acquisition is proposed but not yet closed, so integration and funding sources remain uncertain. Capital allocation is disciplined, with high margins and no dilution so far, but external funding may be needed for the acquisition.
The earnings visibility is strong for the existing business, with 10,000 enterprise clients and a 53.8% EBITDA margin, and any further per-client revenue growth flows directly to the bottom line. The path to $100 million ARR by 2030 requires per-client revenue to rise to $10,000, a 6x increase from current levels, which hinges on cross-selling Socify, Cyberscope, and the new insurance product. The kill shot is the successful integration of Safehouse and consumer adoption; if the acquisition fails or the Indian consumer market does not embrace cyber insurance, the B2C revenue stream will be delayed, but the enterprise core will still grow. The falsifier to watch is the Cyberscope IPO; if it does not complete within the next year, it may signal governance or regulatory issues that could hamper the 2030 vision. Overall, the company is a high-margin compounder with a proven enterprise model and a new consumer expansion that, if executed, will diversify revenue and sustain growth beyond the current product cycle.
companyname: TAC Infosec Limited ticker: TAC sector: Cybersecurity (SaaS / AI-driven vulnerability management and compliance automation) TAC Infosec is an India-headquartered cybersecurity software company. Trishneet Arora founded it in 2013, the entity was incorporated in August 2016, and it listed on NSE Emerge in April 2024 as India's first pure-play cybersecurity IPO (FY25 annual report). Management frames the business model explicitly: a product company, not a services company, with revenu...
Read the full report →capex, margin expansion, regulatory approval, new product segment
No guidance
Guidance no_dataGet valuation models, detailed research reports, thematic primers, one-pagers, risk analysis, growth triggers, bear case, capex tracker, walk the talk, and more for TAC Infosec Ltd. and 4,900+ companies.
5-day free pass. No card required.