TAC Infosec has delivered rapid growth in a market where cybersecurity spending is becoming increasingly important, but its valuation still depends on the company sustaining that momentum. With the stock having corrected sharply, the focus now shifts to whether stronger customer monetisation, international expansion and operating leverage can translate growth into earnings that support the valuation.
The company has gone through a sharp valuation reset, falling from its 52-week high of Rs.899.65 to around Rs.435, leaving the stock roughly 43% below its peak. Even after that correction, the company has a market capitalisation of around Rs.914.69 crore.
Financials
TAC has already delivered the kind of growth that can justify a premium multiple in theory. FY26 revenue from operations rose 88% to Rs.57.26 crore, EBITDA increased 81% to Rs.30.75 crore and PAT rose 78% to Rs.26.35 crore. EBITDA margin stood at 53.8%, while PAT margin was 46.1%. The momentum has continued into FY27. Q1 revenue reached Rs.19.78 crore, up 103% year-on-year, while net profit increased 182% to Rs.7.79 crore. Operating margin stood at 48.18%.
Management has subsequently set a FY27 revenue target of approximately Rs.100 crore, with quarterly revenue expectations of Rs.24 crore in Q2, Rs.26.4 crore in Q3 and Rs.31.6 crore in Q4. It is also working with an operating-margin objective of around 40%. That guidance changes the valuation debate. TAC no longer needs to prove that it can grow. It needs to show that it can sustain rapid growth while turning that expansion into a much larger and recurring earnings base.
The correction has not removed the earnings requirement
At a market capitalization of approximately Rs.914.69 crore, TAC is valued at roughly 35 times FY26 reported PAT of Rs.26.35 crore. If TAC generates Rs.30 crore of annual PAT while its market capitalisation remains around Rs.914.69 crore, the implied earnings multiple would be about 30 times.
At Rs.40 crore of PAT, it would fall to about 23 times. At Rs.50 crore, it would be around 18 times, while Rs.60 crore of PAT would bring it closer to 15 times. These calculations illustrate the central point: the multiple does not necessarily have to collapse if the earnings denominator expands quickly enough. That makes the transition from Rs.26 crore of FY26 PAT toward Rs.40–60 crore of sustainable annual profit one of the most important financial tests for the stock.
Rs.100 crore revenue is the first milestone, not the endgame
TAC’s FY27 revenue guidance of approximately Rs.100 crore represents a substantial increase from the Rs.57.26 crore generated in FY26. If achieved, revenue would rise by roughly 75% in one year. The quarterly guidance also points to sequential expansion through FY27.
The first test is whether this ramp materialises. The second is more important: how much profit does TAC retain as it scales? FY26 EBITDA margin was 53.8%, while Q1 FY27 margin was about 48%. Management’s FY27 operating-margin objective of approximately 40% therefore implies some moderation.
At Rs.100 crore of revenue and a 40% EBITDA margin, TAC would generate approximately Rs.40 crore of EBITDA. The Rs.100 crore revenue target, therefore, should not be viewed as the valuation trigger on its own. The market ultimately needs to see how much profit TAC can retain from that revenue.
TAC’s FY26 profitability was unusually high. Management has attributed the operating leverage to its automation-led platform model. The business is increasingly software-led, which can theoretically allow revenue to grow faster than operating costs. That scalability is one of the central attractions of the model.
The risk is that margins fall materially below the 40% level as TAC increases spending on sales, international operations, product development and acquisitions. The next few quarters therefore need to be judged on both growth and profitability. A quarter showing 80% revenue growth alongside substantial margin compression would tell a very different story from one showing similar growth with a stable 40%–50% margin.
Customer additions are becoming less important than customer monetisation
TAC has crossed 10,000 clients across more than 100 countries. That is a sizable distribution base for a company generating less than Rs.60 crore of annual revenue. It also highlights why customer additions alone cannot remain the main growth metric.
The company needs to generate substantially more revenue from the customers it already has. Management has previously discussed increasing revenue per customer through upselling and cross-selling. In an earlier earnings discussion, it said revenue per customer had increased from around $1,200 to $1,682 and identified a target of approximately 20% growth in revenue per customer on a half-yearly basis as part of its longer-term plan.
That changes how the business should be evaluated.If TAC keeps adding customers but the average customer remains low value, revenue will continue to depend heavily on acquiring new accounts.
If existing customers begin buying multiple products, revenue can grow much faster than the customer count. That is potentially the more scalable model because TAC can increase revenue without having to build an entirely new customer relationship for every incremental rupee of sales.
ESOF provides the core platform for this strategy
TAC’s ESOF platform sits at the centre of its enterprise cybersecurity proposition, covering vulnerability management and application security. The company’s website currently states that the platform serves more than 10,000 organisations across 100 countries.
TAC is also adding products around that installed base. Socify is particularly relevant because it expands the company’s offering from vulnerability management into compliance automation.
The product was initially priced from $2,700 per year, with management later discussing a price of around $4,500 following strong demand. Management had set an ambitious target of reaching 10,000 Socify customers, using TAC’s existing global client base and distribution partnerships as potential channels.
The latest numbers provide some evidence of early traction. Socify reached 200 customers after its first several months, and TAC announced that it had reached 300 customers in September 2026.
The significance is not the 300 customers by itself. It is the possibility of selling additional products to customers who already use one part of TAC’s cybersecurity ecosystem.
If a customer starts with ESOF and later purchases Socify, TAC increases revenue per customer without having to build a new relationship from scratch. That is the kind of operating leverage the valuation ultimately requires.
International expansion can increase the size of the opportunity
TAC has built a global customer base, with operations and clients spread across multiple international markets. It has also expanded its U.S. presence through CyberSandia, which focuses on cybersecurity opportunities involving government infrastructure and agencies.
The company has identified international partnerships, U.S. operations and enterprise adoption as key drivers of its FY27 growth strategy. The opportunity is not simply geographical diversification.
Higher-value enterprise and government contracts could increase revenue per customer and make the existing customer base more economically valuable. But international expansion also requires investment. Sales teams, partnerships, compliance requirements and local operations can increase costs before revenue scales. The relevant question is therefore whether international expansion increases revenue per customer faster than it expands the cost base.
Safehouse introduces another potential growth engine
TAC has entered into a binding term sheet to acquire 100% of Israel-based Safehouse Technologies, subject to due diligence, regulatory requirements and definitive agreements. The proposed acquisition would take TAC into consumer cybersecurity.
According to TAC, Safehouse’s flagship application has approximately 3 million users globally. TAC plans to build a dedicated consumer cybersecurity platform around the business. The opportunity could be significant because the acquisition would give TAC access to a much larger user base than its traditional enterprise customer model.
What investors should watch
The first number to track is quarterly revenue against the Rs.100 crore FY27 target. The second is EBITDA margin, particularly whether the company can remain around the 40% level while continuing to invest.
The third is revenue per customer. With more than 10,000 customers, there is significant scope for cross-selling, but that potential needs to show up in actual revenue. The fourth is Socify’s customer growth and, more importantly, how many of those customers become recurring paying accounts.
The fifth is the mix between platform revenue and services. The valuation case depends heavily on TAC maintaining a scalable, technology-led model. The sixth is the contribution from international operations and whether overseas expansion increases average contract values without materially increasing the cost base.
The seventh is cash conversion. FY26 operating cash flow was Rs.12.06 crore against PAT of Rs.26.35 crore, so the gap between accounting profit and operating cash generation deserves close attention as the business scales.
The Bottom Line
TAC Infosec’s 43% decline from its peak does not by itself settle the valuation debate. The company’s FY26 performance and Q1 FY27 results show that the underlying business is still growing rapidly, while management is targeting Rs.100 crore of revenue in FY27.
The bigger challenge is converting that growth into a much larger and more durable earnings base. TAC already has more than 10,000 customers, so the next stage cannot depend entirely on customer acquisition. It needs higher revenue per customer, greater adoption of multiple products, continued growth in Socify and ESOF, and international expansion that does not materially dilute margins.
At the same time, the FY26 EBITDA margin of 53.8% should not simply be extrapolated. Management’s approximately 40% operating-margin objective provides a more useful benchmark for assessing whether the business can scale while retaining healthy profitability.
At the current market capitalisation, the valuation becomes progressively less demanding as PAT moves from Rs.30 crore toward Rs.40–60 crore. The critical issue is therefore not whether TAC can grow; it has already demonstrated that it can. The question is whether it can sustain that growth at sufficient margins and convert its expanding customer base into substantially higher earnings.
For TAC, the next phase of the story is less about proving demand for cybersecurity and more about proving monetisation, operating leverage and earnings durability.