CISONasdaqServices-Management Consulting ServicesUS GAAP · USD

CISO Global, Inc.

CISO Global, Inc. is a U.S.-based cybersecurity services and software company organized around managed security operations, professional cybersecurity services, and internally developed security software. Its managed offerings include compliance support, SOC services, and virtual CISO services, while its project work covers technical assessments, incident response, forensics, and training. The company also sells a small portfolio of proprietary tools such as CHECKLIGHT, ARGO, CISO Edge, DISC Net Gen VPN, and the Skanda Breach Assessment Tool. In its recent filings, CISO Global emphasized liquidity pressure and disclosed substantial doubt about its ability to continue as a going concern, making financing and operating discipline central to the business profile.

Revenue26.6m USD
−13.5 %y/y
Operating profit (EBIT)-8.8m USD
+39.8 %y/y
EBIT margin-33.0%
+14.4 ppy/y
Net income-8.1m USD
+66.7 %y/y
Free cash flow-8.0m USD
−103.3 %y/y

Fiscal year 2025 · change from previous year

Development 2020–2025

-75-50-2502550m USD2020: 7.2 m USD2020: EBIT -3.4 m USD20202021: 15 m USD2021: EBIT -40 m USD20212022: 47 m USD2022: EBIT -33 m USD20222023: 34 m USD2023: EBIT -63 m USD20232024: 31 m USD2024: EBIT -15 m USD20242025: 27 m USD2025: EBIT -8.8 m USD202527-8.8
RevenueOperating profit (EBIT)

Business

Share of revenue
Security Managed Services90 %

Recurring outsourced security operations, compliance support, SOC services, and virtual CISO services delivered under service contracts.

Professional Services8 %

Project-based cybersecurity work including technical assessments, incident response, forensics, training, and related advisory services.

Cybersecurity Software2 %

Internally developed software products sold on a ratable basis over the service period, including endpoint monitoring and cloud security tools.

Products

Reported · share of revenue
89.4%8.4%FY2025100 %
  • Security Managed Services89.4 %
  • Professional Services8.4 %
  • Cybersecurity Software2.2 %

Source: 10-K FY2025, revenue the company reports per product line (SEC XBRL). Shares are of the lines shown and add up to 100 %.

Customers

CISO Global serves organizations that need outsourced cybersecurity capability rather than building a full internal security team. Its managed services are aimed at customers seeking ongoing compliance, monitoring, and virtual CISO support, which suggests a mix of small and mid-sized businesses and resource-constrained enterprises. Professional services customers typically buy the company for discrete, higher-intensity needs such as incident response, forensics, or technical assessments after a security event or audit finding. The software products appear to be sold directly to customers that want specific point solutions for endpoint monitoring, security management, VPN, or breach assessment. Because the company’s contracts are generally service-based and relatively short to medium term, customer retention and repeat engagements are important to revenue stability.

Managed security clients

Buy compliance, SOC, and vCISO services to outsource ongoing security oversight and reduce the need for in-house security staffing.

Professional services clients

Buy technical assessments, incident response, forensics, and training for discrete projects or urgent security events.

Software customers

Buy proprietary cybersecurity tools such as CHECKLIGHT, ARGO, CISO Edge, DISC Net Gen VPN, and Skanda for specific security functions.

Strategy

Management’s near-term priority is to secure additional funding and stabilize liquidity, as the company disclosed substantial doubt about its ability to continue as a going concern. The filings indicate that financing options may include equity issuance, debt, or other arrangements, alongside restructuring to grow revenue and reduce expenses. Operationally, the company is trying to improve gross profit and control SG&A, which is important because its service-heavy model depends on efficient utilization of labor and project delivery. The software portfolio provides a potential path to more scalable revenue, but the current disclosures suggest the business is still primarily dependent on services and cash preservation. Execution risk remains high because the company must balance growth investment with the need to maintain enough liquidity to operate.

Secure financingShort term

The company disclosed substantial doubt about its ability to continue as a going concern, so liquidity is the immediate constraint on execution.

Restructure operationsShort term

Reducing expense intensity is necessary to support cash flow in a service business with labor-heavy cost structure.

Grow recurring cybersecurity revenueMedium term

Managed services and software can provide more durable revenue than one-off project work.

Geography

Q1/2024

The filings provided do not disclose a country-by-country revenue split, so the business profile is best understood as U.S.-centered with no quantified international mix available from the excerpted disclosures. CISO Global is a Delaware corporation and reports in U.S. dollars, which indicates that its operating and reporting base is in the United States. The company’s customer contracts are described as service agreements with relatively short durations, which typically supports domestic delivery and lower geographic complexity than a multinational software vendor. Because no geographic revenue table was provided, investors should treat any international exposure as unquantified from the available materials. The main geographic risk is therefore less about foreign operations and more about concentration in the U.S. cybersecurity services market and the company’s ability to fund domestic growth.

United States68 %
Chile31 %
Other countries (US filing)0.8 %

Share of the revenue the company reports by geography.

Risks

The most immediate company-specific risk is liquidity, because management explicitly states that substantial doubt exists about the company’s ability to continue as a going concern. The business also relies on service contracts and labor-intensive delivery, so revenue and margins can move quickly with utilization, staffing, and customer demand. Cybersecurity providers face competitive pressure from larger vendors and specialized boutiques, which can compress pricing and make customer retention harder. The company also depends on successful execution of its financing and restructuring plans, and failure to obtain capital on acceptable terms could force further dilution or operational contraction. More broadly, cybersecurity demand is resilient but still exposed to budget cycles, procurement delays, and customer concentration in a small-cap services model.

Sorted by severity
LowMediumHighLowMediumHighImpact →Likelihood →Going concern and liquidity shortfall1Financing and dilution risk2
Impact is the risk’s severity and likelihood how probable it is over the next few years, both assessed from the company’s reports. Numbers match the list.
  1. Going concern and liquidity shortfallImpact: CriticalLikelihood: High

    Management states that substantial doubt exists about the company’s ability to continue as a going concern and it is actively seeking funding.

    Exposure: Corporate liquidity and operating continuity

  2. Financing and dilution riskImpact: HighLikelihood: High

    The company may need equity, debt, or restructuring transactions to fund operations, which can dilute shareholders or add costly obligations.

    Exposure: Capital structure

  3. Labor-intensive delivery and margin volatilityImpact: High

    Managed services and professional services depend on billable personnel, so utilization and payroll efficiency directly affect profitability.

    Exposure: Operating margins

  4. Cybersecurity market competitionImpact: Medium

    The company competes in a crowded market where customers can choose larger platform vendors or specialized service firms.

    Exposure: Pricing and customer retention

Accounting

Judgemental items
Revenue recognition by service line

Different recognition patterns for managed services, professional services, and software affect quarterly comparability and revenue timing.

Impact: Can shift revenue between periods depending on contract mix and delivery timing

Stock-based compensation

Management uses Black-Scholes inputs and forfeiture assumptions, which can materially change expense as estimates evolve.

Impact: Affects operating expenses and reported profitability

Goodwill and intangible asset impairment

Impairment testing relies on fair value and cash flow assumptions, which are sensitive in a loss-making business.

Impact: Can trigger large non-cash charges to operating income

Long-lived asset recoverability

The company must assess whether assets are recoverable based on undiscounted future cash flows.

Impact: May result in impairment losses if expected cash flows weaken

Publicly listed companies with a comparable business focus.

Last updated: 24/09/2026

CISO Global, Inc. (CISO) Revenue, Earnings & Financials 2025 – Clarifo