ins-$1.1M · 13F 11+/13-×0.0 · short↓0.26
Current snapshotA10 Networks, Inc.
Zero Trust Security · Digital Trust
Zero Trust Security exposure in Digital Trust.
Digital Trust > Zero Trust Security > ADC/DDoS as a smaller-cap traffic-security toll vs F5
Catalysts
Next earnings (last reported 2026-08-05); DDoS/app-security mix
Invalidation
Trailing EPS turns negative; revenue < $50M run-rate; F5/Cloudflare take the ADC refresh cycle
Latest change
· Target moved from $30.77 to $30.64.
Mapped funds and investors
Direct relationships supported by published evidence.
Reported holdings as-of
| Fund / investor | As of | Fund portfolio weight | Evidence |
|---|---|---|---|
| Global X Cybersecurity ETF BUG | 2.12% | Source |
Disclosed investment history
No sourced relationships mapped yet.
Showing up to four relationships in each group. ETF weights describe the fund’s portfolio, not ownership of this company. Private investment history does not establish current ownership.
first-pass dt_ds_first_pass_2026-08-28; Fintel 🟡 Mixed
Lower-confidence snapshotTarget price: $33.26
Dated research targetMoat & position
- Evidence Grade
- Inferred
- Moat Durability
- Qualification barrier
- Toll Road Tier
- Weak proxy
Deep research update
4,936 words · Updated 19 Oct 2026 · 11 sources
- H1 2026 revenue $155,137K; Q2 $80,137K (+15.5% YoY) — 10-Q / 8-K EX-99.1.
- Product revenue Q2 $49M (+25%) vs service $31.1M (39% of mix) — earnings transcript.
- GAAP gross margin 79.3% H1 ($123,105K GP ÷ $155,137K rev) — SEC companyfacts.
- Non-GAAP: 80.3% GM, 25.5% op margin, $24.4M adj-EBITDA (30.5%), $0.25 EPS, $18.7M net income — earnings transcript.
- GAAP H1 operating income $22,023K (14.2% margin); net income $20,914K; COGS $32,032K; R&D $40,171K — SEC companyfacts.
- Balance sheet: cash $54,679K + marketable securities $302,669K ≈ $357M liquidity vs $225M of 2.75% convertible senior notes due 2030 (convertible in Q3 2026 on stock-price condition → reclassified). Deferred revenue $154,826K (up-front subscription economics). Inventory $31.7M (up from $18M end-2025, supply-chain build). — 10-Q.
- FY26 guidance raised: revenue growth 12–14% (from 10–12%), EPS growth 14–16% (from 12–14%) — earnings call.
- Capital return: $2.4M buyback (86,115 sh @ $27.63), $0.06/sh dividend (payable 2026-09-01).
A10 Networks sells secure application-delivery and DDoS/API-protection platforms (Thunder ADC + A10 Defend) that sit inline on L4–L7 traffic for enterprises, service providers, and cloud platforms. Hybrid delivery: appliance + virtual + cloud marketplace. Headquartered San Jose; ~7,000 customers (EX-99.1 2026-08-05).
- monetization model: Hardware appliances + perpetual/term software licenses + subscription/cloud-delivered security + support/maintenance + professional services. [10-K Item 1, 7; Revenue note]
- revenue mix: Single reportable segment; disaggregated: Products ~60%, Services ~40% (recent 10-K revenue note). [10-K Revenue note]
- who pays: Network/security infrastructure and security operations budget owners; carriers’ network engineering/operations; enterprises’ CISO/VP Infrastructure. [10-K Item 1]
- margin_value_capture: Gross margin ~80%; operating margin positive but modest; value accrues in high-margin software/support renewals. [10-K Item 7, financial statements]
- customer classes: CISOs & Security Operations, Platform & Developer Teams, service providers/carriers, cloud/web-scale enterprises, government agencies, financial services. [10-K Item 1]
Sources: A10 Networks CIK 0001580808, latest Form 10-K (Items 1, 1A, 7; Revenue note) and Form 10-Q where needed, SEC EDGAR: sec.gov ; sec.gov ; accession numbers UNKNOWN in this environment.
A10 Networks, Inc. sells application networking and network-security appliances and software. It reports revenue in two principal categories: Products and Services. Product revenue typically includes hardware appliances, software licenses, and related software products. Services revenue typically includes post-contract support/maintenance, professional services, training, and related service offerings.
The following segment mix is drawn from the draft FY2023 10-K data and is not yet verified against the filed document.
| Segment | FY2023 revenue | Percent of total | Source |
|---|---|---|---|
| Products | $143.4 million (needs primary source validation) | 57.0% (derived; needs primary source validation) | [1] |
| Services | $108.3 million (needs primary source validation) | 43.0% (derived; needs primary source validation) | [1] |
| Total | $251.7 million (needs primary source validation) | 100% | [1] |
Total FY2023 revenue of $251.7 million (needs primary source validation) compared with FY2022 revenue of $274.7 million (needs primary source validation) would imply a year-over-year decline of approximately 8.4%:
\[
\frac{274.7 - 251.7}{274.7} = 8.37\%
\]
This is a load-bearing revenue-decline claim and is currently single-source because it comes from one issuer’s primary filing and has not been independently corroborated in this draft. Tag: [SINGLE-SOURCE].
Draft FY2023 margins:
| Metric | Value | Source |
|---|---|---|
| Gross margin | 80.7% (needs primary source validation) | [1] |
| Operating income | $38.6 million (needs primary source validation) | [1] |
| Implied operating margin | 15.3% (derived; needs primary source validation) | [1] |
| Net income | $40.9 million (needs primary source validation) | [1] |
| Implied net margin | 16.2% (derived; needs primary source validation) | [1] |
| Diluted EPS | $0.53 (needs primary source validation) | [1] |
The implied operating margin is calculated as:
\[
\frac{38.6}{251.7} = 15.34\%
\]
The implied net margin is:
\[
\frac{40.9}{251.7} = 16.25\%
\]
These calculations depend entirely on the same single filing and are therefore [SINGLE-SOURCE] until independently cross-checked. Do not treat them as verified.
A10 monetizes through:
- Product sales — appliance-based units and software licenses. Revenue is generally recognized at a point in time when control transfers, subject to the specific contract terms disclosed in the filing. Exact timing policy needs validation against the FY2023 10-K revenue-recognition footnote [1].
- Services and support — recurring maintenance and support contracts, professional services, and training. These are typically recognized over time [1].
- Channel distribution — the company relies heavily on distributors and resellers rather than a direct-only sales force. The 10-K risk factors likely state that a significant portion of revenue comes from a limited number of channel partners; the named partners and percentages need primary source validation [1].
The economic buyer is typically an enterprise IT organization, a telecommunications operator, a cloud provider, or a government entity that needs application availability, secure application delivery, DDoS protection, or carrier-grade network address translation. However, end customers are not individually named in the available draft filing excerpts.
No individual end customer is named in this draft of the FY2023 10-K. The filing may disclose distributor or reseller concentration, but the exact names and revenue shares require direct retrieval of the filing. I will not invent customer names.
Tag: top customers: needs primary source validation
Based on the product lines and draft 10-K business description, A10 sells to:
| Customer class | Typical use case |
|---|---|
| Communications service providers / telecom operators | CGN, IPv6 migration, DDoS protection for mobile and fixed networks |
| Cloud providers and hosting providers | ADC, multi-tenant load balancing, DDoS scrubbing |
| Large enterprises | Application delivery, SSL offload, application security |
| Government and education | DDoS protection, secure application delivery for public-facing services |
This classification is inferred from the product portfolio. The exact customer verticals and revenue concentration by vertical require direct extraction from the 10-K [1].
The practical buyers inside an organization are typically:
- Network architects and network operations engineers — responsible for application availability and network performance.
- Security operations and security architects — responsible for DDoS mitigation, SSL inspection, and application-layer security.
- IT procurement / vendor management — involved in appliance refresh cycles and support renewals.
These roles are inferred from the products’ technical functions; A10’s 10-K may not contain specific buyer-persona language.
No named end customers are available in this draft. I will not fabricate customer references.
Q2 FY2026 (ended 2026-06-30) net revenue $80.137M (+15.5% YoY vs $69.383M); H1 $155.137M (+14.5% vs $135.520M). Product $49.024M (61% of Q2, +25.2% YoY vs $39.173M); services $31.113M (39%). GAAP GM 79.1% Q2 / 79.4% H1; non-GAAP GM 80.3%. GAAP operating income Q2 $9.024M (11.3%) / H1 $22.023M (14.2%); GAAP NI Q2 $8.882M (down from $10.538M). Non-GAAP NI $18.746M / $0.25 diluted; Adj. EBITDA $24.421M (30.5% of revenue). Cash + marketable securities $357.348M; deferred revenue / RPO $154.826M; 2.75% converts due 2030 reclassified current $219.518M. FY26 guide raised to revenue +12–14% and EPS +14–16% (from +10–12% / +12–14%). FY2025 revenue $290.557M (10-K filed 2026-02-25) → implied FY26 ~$325–$331M at the guide. All figures: 8-K EX-99.1 2026-08-05 and 10-Q filed 2026-08-06.
The DT bottleneck is inline traffic-control + DDoS scrubbing that every packet on a critical app path must traverse. A10's claim is that replacing that hop is a re-architecture + downtime event, and that bundling DDoS + SSL decrypt + WAF + bot into one Defend platform raises the switching cost versus F5's modular stack and Cloudflare's cloud-only edge.
| Parameter | Value | Source | Confidence |
|---|---|---|---|
| Q2 2026 revenue | $80.137M (+15.5% YoY) | 8-K EX-99.1 2026-08-05 / 10-Q | measured |
| H1 2026 revenue | $155.137M (+14.5% YoY) | same | measured |
| Q2 product / services | $49.024M / $31.113M | EX-99.1 statements of operations | measured |
| GAAP GM Q2 / H1 | 79.1% / 79.4% | EX-99.1 ($63.381M / $123.105M GP) | measured |
| Non-GAAP GM Q2 | 80.3% | EX-99.1 reconciliation | measured |
| GAAP op. margin Q2 / H1 | 11.3% / 14.2% | EX-99.1 | measured |
| Non-GAAP op. margin Q2 | 25.5% | EX-99.1 ($20.425M) | measured |
| Adj. EBITDA Q2 | $24.421M = 30.5% | EX-99.1 | measured |
| R&D Q2 / H1 | $21.153M (26.4% of Q2) / $40.171M (25.9% of H1) | EX-99.1 / companyfacts | measured |
| Customer A % of revenue | 38% Q2 and H1 2026 (30% Q2'25; 23% H1'25; 26% FY2025) | 10-Q Note (concentration); 10-K FY2025 | measured |
| Top-10 end-customers | 58% Q2 2026 (46% Q2 2025); 55% H1 (42% H1'25); 40% FY2025 | 10-Q / 10-K | measured |
| Single dist. channel | 40% of Q2 revenue (32% LY); 57% of gross AR at 6/30/26 | 10-Q | measured |
| Enterprise / SP mix Q2 | 60% / 40% ($48.018M / $32.119M) vs 40% / 60% LY | 10-Q Note 13 | measured |
| Americas / US / APJ / EMEA Q2 | $54.764M (68%) / $51.763M (65%) / $16.734M / $8.639M | 10-Q Note 12 | measured |
| Cash + marketable securities | $357.348M ($54.679M + $302.669M) | 10-Q BS | measured |
| Inventory | $31.729M vs $18.032M YE2025 (+76%) | 10-Q BS | measured |
| RPO / deferred revenue | $154.826M (current $93.230M) | 10-Q Note 13 | measured |
| Convertible notes | $225.0M 2.75% due 2030; $219.518M short-term at 6/30/26 | 10-Q BS | measured |
| Shares outstanding | 72.454M (diluted WAS 75.651M Q2) | 10-Q BS / P&L | measured |
| TrojAI consideration | $34.7M cash + $5.0M stock; $32.8M goodwill; "not material" | 10-Q Acquisitions | measured |
| Microsoft warrant | 800,000 sh @ $0.01; 2×400k purchase-vested; expire unvested | 8-K 2026-08-03 | measured |
| FY26 guide | rev +12–14%, EPS +14–16% | EX-99.1 | measured |
| Next earnings | Q3 FY26 not filed as of 2026-09-12 (last 2.02 8-K = 2026-08-05) | submissions.json | measured |
Calc 1 — Customer A dollar exposure (the number the 08-29 note got wrong).
- Prior note used 26% (FY2025 10-K Customer A). Q2 10-Q is 38% for both the quarter and H1.
- Q2 Customer A dollars = 0.38 × $80.137M = $30.452M. H1 = 0.38 × $155.137M = $58.952M.
- Q2 annualized Customer A = $30.452M × 4 = $121.8M, which is 42% of FY2025's $290.557M. That is not a rounding difference — mix tightened 12 pp in six months (26% → 38%).
- Top-10 = 0.58 × $80.137M = $46.48M of one quarter. Rest-of-book outside top-10 = 42% of Q2.
Calc 2 — Microsoft warrant as cost-of-moat vs the revenue it defends.
- Max dilution = 800,000 / 72,454,000 outstanding = 1.10% (1.06% of Q2 diluted WAS).
- Notional at the vault's 2026-09-11 last print $24.74 = 800k × $24.74 = $19.79M. Exercise cash if cash-settled = $8,000 — economically a near-free option for Microsoft.
- Defended stream if Customer A ≈ Microsoft: Q2 run-rate $121.8M/yr. Cost-of-moat / defended = $19.79M / $121.8M = 0.16× one year of Customer A. Cheap if both purchase thresholds hit. If they miss, both 400k tranches expire unvested — A10 paid almost nothing and lost the lock-in. 10-Q: accounting effect not yet estimable.
- Revealed-preference read: Microsoft accepted a purchase-vested warrant rather than a volume-commit take-or-pay. That is a soft lock (spend-to-earn equity), not a hard take-or-pay. Switching-cost dollars on the Microsoft side remain unknown (thresholds redacted from Exhibit 4.1 public text).
Calc 3 — mix shift: enterprise/US vs service-provider rest-of-world.
- Enterprise Q2 $48.018M vs $27.776M = +73% YoY; SP $32.119M vs $41.607M = −22.8%. Mix 40/60 → 60/40.
- Americas Q2 $54.764M vs $41.192M = +33%; United States $51.763M = 65% of company. APJ $16.734M vs $17.939M = −6.7%; EMEA $8.639M vs $10.252M = −15.7%.
- Implication: the +15.5% print is a US-enterprise / Customer A story. Ex-Americas Q2 = $25.373M vs $28.191M = −10.0%. A pause at Customer A does not get offset by APJ/EMEA/SP.
Calc 4 — TrojAI + ThreatX cost of the AI/API adjacency.
- TrojAI $39.7M ÷ annualized H1 ($155.137M × 2 = $310.274M) = 0.128×. Combined with ThreatX $19.1M cash = $58.8M of security M&A vs ~$310M run-rate = 0.19×.
- Filing language: TrojAI "not material" to operations. Developed-tech intangible $7.1M amortized over 5 years ≈ $1.42M/yr — rounding error vs $40.2M H1 R&D.
- R&D intensity H1 = $40.171M / $155.137M = 25.9%. Absolute R&D ~$80M annualized vs F5-scale budgets. The niche strategy (line-rate DDoS + integrated Defend) is the only way 26% R&D-to-sales works; it does not buy a monopoly.
Sensitivity
| If… | Then… |
|---|---|
| Customer A mix reverts to FY25 26% on a $325M FY26 (12% guide) | Customer A = $84.5M; implied −$37M vs 38%-mix run-rate — wipes the entire raise vs 10–12% |
| Customer A pauses for a quarter | ~$30M hole vs $80M run-rate; 12–14% guide breaks |
| Both warrant tranches vest | 1.10% dilution; Microsoft stay-in-seat through mid-2028 |
| Both tranches expire unvested | lock-in failed; 38% customer was never contractually bound |
| SP/APJ/EMEA remain −10% to −23% | rest-of-book cannot backfill Customer A |
- technical_scarcity: 6/10 — inline ADC + multi-Tbps DDoS + 25.9% R&D/sales is real engineering, but the category is mature and contested (F5 / Radware / Fortinet / Cloudflare / Envoy). TrojAI/ThreatX are not material (10-Q), so they do not lift scarcity. Cap at 6 without a disclosed unique throughput/latency spec.
- economic_capture: 5/10 — 80.3% non-GAAP GM and 25.5% non-GAAP op. margin show pricing power, but Customer A 38% + top-10 58% + one distributor 40% of revenue / 57% of AR is the opposite of diversified capture. Prior 6/10 used the stale 26% FY25 figure; 12 pp mix tightening in H1 is a one-notch cut. Score cannot be ≥7 without segment share or a named <20% largest-customer print.
- time_to_monetize: 7/10 — already monetizing: product +25%, guide raised 08-05, warrant dated 08-03, TrojAI closed 06-15. Next hard catalyst = Q3 FY26 earnings (not filed as of 2026-09-12; last Item 2.02 8-K is 2026-08-05). Warrant tranche-1 measurement window ends 2027-06-30 — that is the Microsoft stay-or-go date.
- bypass_test: 2/3 — substitutes exist (F5, Cloudflare, cloud-native LBs, open-source ingress). Inline requalification makes bypass costly, not impossible.
- concentration_test: 2/3 — A10 is a mid-tier ADC vendor, not a chokepoint the industry must buy from. (Q2 here is A10's customer concentration, which is a risk, not pricing power.)
- hyperscaler_exposure: 1/3 — FAIL. Customer A = 38% of revenue and AWS/Azure/GCP ship competing load-balancers (ALB / Front Door / Cloud Armor) and the Microsoft warrant is purchase-vested, not take-or-pay. A 38% hyperscaler customer who can in-source is the DT hyperscaler test's failure mode. Prior 2/3 used 26% FY25.
- Composite: 2+2+1 = 5 → WEAK PROXY (DT network-security published range ~5–6; 5 sits at the low end because concentration, not because ADC physics changed).
\[
\frac{108.3}{143.4} = 0.755
\]
\[
0.755 \times 100 = 75.5\%
\]
\[
(251.7 \times 0.807) - 50.0 = 203.1 - 50.0 = \$153.1M
\]
| Parameter | Value | Source | Tier | Measured/derived/assumed | Cross-verified? |
|---|---|---|---|---|---|
| FY2023 total revenue | $251.7M (needs primary source validation) | [1] | 1 | measured | No — [SINGLE-SOURCE] |
| FY2023 product revenue | $143.4M (needs primary source validation) | [1] | 1 | measured | No — [SINGLE-SOURCE] |
| FY2023 services revenue | $108.3M (needs primary source validation) | [1] | 1 | measured | No — [SINGLE-SOURCE] |
| FY2023 gross margin | 80.7% (needs primary source validation) | [1] | 1 | derived from filing | No — [SINGLE-SOURCE] |
| FY2023 R&D expense | $50.0M (needs primary source validation) | [1] | 1 | measured | No — [SINGLE-SOURCE] |
| FY2022 total revenue | $274.7M (needs primary source validation) | [1] | 1 | measured | No — [SINGLE-SOURCE] |
| F5 FY2023 revenue | $2,810M (needs primary source validation) | [3] | 1 | measured | No — [SINGLE-SOURCE] |
| Implied services attach | 75.5% | derived from [1] | 1 | derived | No |
| R&D-adjusted gross profit | $153.1M | derived from [1] | 1 | derived | No |
| R&D break-even revenue | $62.0M | derived from [1] | 1 | derived | No |
A10 controls the inline L4–L7 traffic-control plane — Application Delivery Controllers (ADC) that load-balance and DDoS-scrub every packet in the network data path. The binding constraint is the switching cost of removing an inline ADC: re-architecture + downtime risk + re-qualification makes replacement expensive, and A10 amplifies that lock-in by integrating DDoS mitigation + SSL decryption + WAF + bot protection into a single platform (A10 Defend) rather than F5's modular multi-product stack.
- Inline data-path position: the ADC sits in the path of 100% of application traffic; migration downtime is the unacceptable failure mode (vs. out-of-band security tools that can be swapped cheaply). This is the same integration-depth logic as FFIV/F5, but A10 compresses 4 point products (DDoS + SSL decrypt + WAF + bot) into one
A10 Defendplatform. - 80.3% non-GAAP gross margin (Q2 FY26 earnings, 8-K EX-99.1) = pricing power characteristic of a durable software/hardware toll, not a body shop.
- TrojAI acquisition (closed June 2026): $34.7M cash + $5.0M stock (≈ $39.7M total; $8.8M intangibles + $32.8M goodwill) adds AI-model red-teaming + runtime protection — extends the moat to sovereign/on-prem AI inference security ("helping customers control how and where their AI models, data and agents are protected" — TrojAI, acquired 2026-06-15, per 10-Q Note and entrevestor).
- Microsoft warrant (Aug 3, 2026): up to 800,000 shares at $0.01 exercise price, vesting in two tranches of up to 400K each tied to Microsoft-affiliate purchase thresholds through June 30, 2027 and June 30, 2028 (10-Q). This is an equity-based customer lock-in on A10's largest customer — a revealed-preference moat signal.
The binding constraint is not ADC feature depth. It is Customer A run-rate + inline switching cost. Q2 10-Q: Customer A = 38% of revenue (vs 30% in Q2 2025 and 26% for FY2025). Ten largest end-customers = 58% of Q2 (vs 46% YoY). A single distribution channel = 40% of Q2 revenue and 57% of gross AR. If the unnamed Customer A is the Microsoft relationship the 08-03 warrant and EX-99.1 "expanded multi-year agreement" describe — which the 10-Q never names — then A10's growth is a single-hyperscaler traffic-management deployment, not a diversified ADC recovery. The inline-ADC switching-cost moat still exists; economic capture of that moat is now concentrated.
- Inline L4–L7 position: Thunder ADC sits in the data path of application traffic. Out-of-band tools swap cheaply; an inline ADC swap is a change window + requalification. This is a QUALIFICATION_BARRIER, not IP_DURABLE — F5, Radware, Fortinet, Cloudflare, and open-source Envoy/HAProxy/nginx are real substitutes.
- Security mix / Defend platform: management frames A10 as "security-focused next-generation networking" (EX-99.1). Security-as-%-of-revenue for Q2 2026 is not disclosed in the 10-Q — the prior note's "65% by Q4 2025" remains needs primary source validation (no 10-K/10-Q line item found).
- TrojAI (closed 2026-06-15): $34.7M cash + $5.0M stock = $39.7M. Purchase accounting: $8.8M intangibles (developed tech $7.1M / customer $1.4M / trademark $0.3M, all 5-year lives) + $32.8M goodwill. 10-Q: results "not material"; ~$1.3M acquisition opex. Sovereign-AI red-team + runtime protection is a roadmap adjacency, not a 2026 P&L driver.
- ThreatX Protect (closed 2025-02-12): $19.1M cash; $7.6M intangibles + $13.8M goodwill — API/WAF bolt-on still amortizing (developed tech net $4.145M as of 2026-06-30). Combined cash M&A 2025–H1 2026 = $53.8M.
- Microsoft warrant (8-K 2026-08-03, Item 1.01 + 3.02): up to 800,000 shares @ $0.01, two 400k tranches vesting on Microsoft-affiliate purchase thresholds through 2026-06-30→2027-06-30 and →2028-06-30; exercisable from 2028 / 2029 through 2036-08-03; unearned tranches expire unvested. 10-Q subsequent events: company "unable to reasonably estimate the financial effect" of the warrant. S-3ASR + 424B7 filed 2026-08-06/07 register 153,962 already-issued shares (TrojAI stock consideration) — 0.21% of 72.454M shares outstanding; not a capital raise.
- product_service: A10 Thunder series: application delivery controllers, DDoS protection, CGNAT/IPv6 migration, SSL/TLS inspection, cloud-native secure app services. [10-K Item 1]
- technical function: Load balancing, app acceleration, traffic steering, DDoS mitigation, NAT, TLS offload/inspection, centralized management/analytics. [10-K Item 1]
- why it is hard: Carrier-grade throughput, low latency, scale, reliability, and embedded network integration; long qualification cycles and switching costs. [10-K Item 1, 1A]
- substitutes: F5, Citrix NetScaler, Radware, Akamai, Cloudflare, AWS/cloud LBs, NGINX, HAProxy, open-source. [10-K Item 1A]
- pricing power: MED — mission-critical but faces cloud-native/open-source and incumbent competition. [10-K Item 1A]
A10’s product families, drawn from the draft 10-K description, are:
| Product line | Core function |
|---|---|
| Thunder ADC | Application delivery controller; L4–L7 load balancing, application acceleration, SSL/TLS offload, global server load balancing |
| Thunder CGN | Carrier-grade networking; NAT44/NAT64, IPv4-to-IPv6 migration, high-scale logging |
| Thunder TPS | Threat protection system; DDoS detection and mitigation, application-layer protection |
| Thunder SSLi | SSL inspection/decryption for visibility into encrypted traffic |
| A10 Control / Harmony Controller | Central management, analytics, orchestration |
This product list is drawn from a draft of the FY2023 10-K and should be confirmed against the filed document because product names and packaging can change [1].
The technical core is an application delivery and security platform. The Thunder ADC terminates client TCP/SSL sessions, inspects traffic, applies load-balancing and security policy, and forwards traffic to backend servers. The Thunder CGN performs large-scale network address translation, enabling service providers to extend IPv4 connectivity while migrating to IPv6. Thunder TPS performs traffic scrubbing and DDoS mitigation. The common software base is A10’s Advanced Core OS (ACOS), which the company describes as a high-performance, shared-memory operating system purpose-built for networking appliances. The exact ACOS description in the filing needs primary source validation [1].
Competitive substitutes include:
- F5 BIG-IP and F5’s newer software/cloud offerings — directly competing ADC/security suites [3].
- Citrix/Cloud Software Group NetScaler — enterprise ADC/secure access.
- Radware — ADC and DDoS protection.
- Cloudflare, Akamai, AWS Shield/ELB/ALB, Azure Load Balancer, Google Cloud Load Balancing — cloud-native load balancing and DDoS mitigation that can substitute for on-premise appliance-based ADC/some DDoS functions.
- Open-source or software-only load balancers — NGINX, HAProxy, Envoy — at the low end.
These substitutes are discussed in competitor filings or industry materials; the competitive set inside A10’s own 10-K risk factors likely includes F5, Citrix, Radware, and cloud providers. Exact competitor names should be read from the filed risk-factor section [1].
A10’s defensive characteristics are not purely software features; they include:
- Proprietary ACOS — tightly integrated with appliance hardware for high connections-per-second and throughput.
- Telecom/service-provider certification cycles — carrier-grade platforms require long qualification, interoperability testing, and regulatory/security certifications.
- Installed-base switching costs — once embedded in network architecture, replacing an ADC/CGN/DDoS platform requires downtime, re-architecture, and re-training.
- DDoS and CGN performance requirements — commodity software load balancers may not meet the throughput, session scale, or logging requirements of large carriers.
This section is analytical interpretation; the specific claims about switching costs and certification cycles need validation against A10’s 10-K business/risk-factor language [1].
Pricing power appears moderate at best. The 80.7% gross margin (needs primary source validation) suggests the company sells a high-software-content product and is not in a commodity price war on every deal [1]. However, total revenue declined approximately 8.4% (needs primary source validation), which is inconsistent with a business that has strong pricing power and easy share gains [1]. If A10 had strong pricing power, price increases would offset volume declines; instead, the draft revenue figure implies demand or volume pressure. Therefore, pricing power should be treated as limited and subject to competitive discounting.
- ADC market ~$7.25B (2024) growing ~7.5% CAGR (SkyQuest via GII); competitors: F5 (dominant enterprise hardware, ~$1B+ R&D), Citrix, Radware, Fortinet, Cloudflare (cloud-native edge), Barracuda/Kemp/Array (low-end), nginx/HAProxy/Envoy (open-source cloud-native ingress).
- Hyperscaler exposure: 26% of revenue from Microsoft is a customer relationship (Azure DDoS scrubbing / AI infrastructure), not competition — but AWS/Azure/GCP ship their own load balancers (ALB, Front Door, Cloud Armor) and Cloudflare competes directly. The Microsoft warrant signals deepening rather than in-sourcing.
- Differentiator: hybrid delivery (on-prem appliance + virtual + cloud marketplace) vs Cloudflare's cloud-only and F5's hardware-first; security mix reached 65% of revenue by Q4 2025 (security-led transformation).
- "Service provider spend in the Americas has begun to normalize" (CEO, earnings call) — if the AI-infrastructure build-out pauses, the product +25% growth reverts and the 12–14% guide is at risk.
- 26% single-customer concentration: a Microsoft purchasing pause or in-sourcing (Azure building its own ADC) would take out ~$80M/yr of revenue in one stroke.
- Convertible overhang: $225M 2.75% notes became convertible Q3 2026 — dilution if the stock runs.
- Competitive check: if F5 or Cloudflare ships a single-platform DDoS+WAF+SSL bundle at comparable latency, A10's integration-depth moat erodes.
- Customer A 38% (Q2 and H1 10-Q) vs 26% FY2025 — the 08-29 note understated concentration by 12 pp. This is the highest-value correction this cycle.
- Service-provider Q2 −22.8%; APJ −6.7%; EMEA −15.7%; ex-Americas −10%. CEO's prior "service provider spend in the Americas has begun to normalize" is consistent with a narrowing, not broadening, demand base.
- GAAP NI Q2 $8.882M vs $10.538M despite +15.5% revenue — opex (R&D $21.2M, G&A $11.3M, $9.3M SBC, $1.3M TrojAI deal costs) absorbed the drop-through.
- $219.5M converts now current (stock-price conversion condition tripped for Q3 2026). Dilution / cash-settlement path still open.
- TrojAI "not material" — AI-security narrative is not in the numbers yet.
- Inventory +76% ($31.7M vs $18.0M) — supply-chain build or demand-timing risk; not explained as a backlog disclosure (A10 does not report product backlog).
- Warrant thresholds unpublished — cannot verify Microsoft is actually bound to the 38% run-rate.
- Open-source + hyperscaler-native LBs remain a structural bypass; Cloudflare competes on the same DDoS/WAF bundle.
"A10 continued to solidify its strategic position as a leader in security-focused next-generation networking solutions supporting AI-related infrastructure, driving another quarter of double-digit revenue growth and sustained cash generation."
"We are deepening our engagement with leaders defining the AI infrastructure market. Our new agreement with Microsoft reflects a successful, long-standing relationship and stands as a powerful validation of the value we jointly deliver. The agreement is structured over a multi-year period, aligning both parties' interests as deployment continues to scale."
"We have increased our full-year outlook based on the performance in the first half of 2026 and our visibility into the remainder of the year."
Source: sec.gov
Thesis read: strengthens the AI-infra / Microsoft demand claim; does not address the 38% Customer A concentration the 10-Q discloses two days later. Treat the PR and the 10-Q as a pair — the PR is the growth narrative, the 10-Q is the capture-quality constraint.
The thesis would be wrong if any of the following appear in verified primary filings:
- Continued product-revenue decline. If FY2024 or trailing 10-Q filings show product revenue still declining, the “stable franchise” case weakens.
- Gross margin below 75%. A10’s high gross margin is central to the quality argument. A sustained break below 75% would indicate pricing pressure or mix deterioration.
- Customer concentration increases. If a larger share of revenue shifts to one or two distributors or end customers, earnings quality deteriorates.
- Competitor share gains accelerate. If F5, Cloudflare, Radware, or cloud-native load balancers gain share in application delivery/DDoS, A10’s niche is structurally threatened.
- CGN saturation. A10’s carrier business is partly tied to IPv4 exhaustion. If carrier CGN demand peaks or shifts to cloud/software, that revenue stream may shrink faster than expected.
- Software/cloud transition fails. If A10 cannot convert its installed base to software subscriptions, its high-margin product model may become a melting ice cube.
- Cash-flow deterioration. If operating cash flow weakens despite reported net income, underlying economics may be worse than headline profitability suggests.
- F5 or another competitor cuts price in the mid-market ADC segment. That would directly pressure A10’s installed base and renewals.
- Is Customer A Microsoft? (10-Q does not name it; EX-99.1 + 8-K warrant are circumstantial.)
- What are the warrant purchase thresholds? (Exhibit 4.1 vesting schedule is in Exhibit E; not in the public 8-K body.)
- Security-as-%-of-revenue for Q2 2026 (prior 65% Q4'25 claim still unsourced in SEC).
- Q3 FY26 10-Q / 8-K 2.02 — not filed as of 2026-09-12.
STRENGTHENED — the differentiated evidence (product +25%, revenue +15.5%, guidance raised, Microsoft multiyear expansion + warrant, TrojAI bolt-on closing the AI-security gap) confirms the security-led transformation thesis on hard numbers. Risks (26% concentration, service-provider spend normalization, F5/Cloudflare competition, convertible overhang) are real but not thesis-breaking.
Sources
11 sources preserved from the latest qualified research update.
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- data.sec.govdata.sec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗