← Deep analysesHome
mttssn research · Nordic Deep Dive
F-Secure (FSECURE.HE)
Teknik & IT · Finsk konsument-cybersäkerhet/SaaS · LTM Q1 2026
Analysis date: 2026-07-09
Price at analysis: €1.95
Method: mttssn_streamlined_v1
Conviction: MEDIUM
HOLD
Conviction: MEDIUM
F-Secure creates modest value — adjusted ROIC 10.6% > 8% WACC, positive economic profit ~EUR 4.9m, FCF EUR 30.8m — but a Lookout-heavy, debt-funded balance sheet (net debt EUR 142.3m, 2.8x) and negative near-term margin momentum (Q1 EBIT -38.5%) cap it. Reverse-DCF on conservative NOPAT only reaches the EUR 1.95 price at ~4% perpetual growth: the market already prices the Tier-1 embedded ramp. HOLD.
Adj. ROIC
10.6%
WACC 8% → spread +2.6pp
Economic Profit
+€5M
Positive ~EUR 4.9m but thin on a EUR 186m capital base
FCF Yield
n/a
EUR 30.8m LTM; supports deleveraging + dividend
Price / Target
€1.95 → €2.00
+3% base; HOLD
Revenue (LTM)
€145.0B
LTM Q1 2026 EUR 145.0m; -2.1% reported / +2.1% currency-neutral
EBIT Margin
22.0%
Adjusted EBIT ours 16.8%; keeps PPA amort + SBC in opex, below company Adjusted EBITA
EV / IC
n/a
Enterprise value / invested capital
Net Debt
n/a
EUR 142.3m; 2.8x, EUR 202m term loan to 2028
Thesis

F-Secure is a Finnish consumer-cybersecurity/SaaS franchise selling security through telco/CSP partner channels (76% of revenue, currency-neutral +4.6% in Q1) plus a deliberately shrinking direct book. Adjusted ROIC of 10.6% against an 8% WACC clears the cost of capital and generates positive but thin economic profit (~EUR 4.9m) — genuine value creation, modest for software.

The balance sheet is dominated by the 2023 Lookout consumer acquisition: goodwill EUR 87m + acquired intangibles EUR 99m = 3.5x equity, funded by a EUR 202m term loan maturing 2028. Our adjusted EBIT (EUR 24.3m) keeps PPA amortization (EUR 7.9m/yr) and SBC in opex, so it sits far below the company's Adjusted EBITA (EUR 48.7m LTM) — the two are structurally non-comparable and the headline flatters cash economics.

The swing factor is the Tier-1 CSP embedded launch (expected Q2 2026), the lever behind the medium-term Rule-of-40 / EUR 200m-revenue target. Until it converts to revenue, mix shift to lower-margin Embedded, FX drag and a EUR 1.7m restructuring charge are pushing margins the wrong way (Q1 EBIT margin 15.9% vs 25.3%).

Valuation · reverse-DCF & scenarios

Capitalizing adjusted NOPAT of EUR 19.7m at WACC-minus-g and bridging through EUR 142.3m net debt and 174.7m shares, per-share fair value runs ~EUR 0.60 (zero growth), ~EUR 1.07 (GDP ~2%) and ~EUR 2.01 (4% growth). The EUR 1.95 price is only justified at ~4% perpetual growth — i.e. the market is paying for the Tier-1 embedded ramp and the Rule-of-40 trajectory, not for trailing conservative NOPAT.

Base EUR 2.00 (roughly flat) assumes GDP-plus growth with the embedded ramp offsetting direct-channel decline; bull EUR 2.70 if Tier-1 deals scale toward the EUR 200m / ~40% Adjusted-EBITA-margin target and leverage falls; bear EUR 1.35 if the launch slips, mix compresses margins further and covenant/refinancing pressure builds into the 2028 maturity.

Market-implied growth
≥-50.0%
model ceiling — EV implies more than constant-ROIC sustains
No-growth value / share
€1,544
79185% of price; rest = priced-in growth
ROIC − WACC
+2.6 pp
ROIC 10.6% vs WACC 8.0% — positive = value creation
CAP (priced-in)
0.0 yrs
years of excess returns the price implies (fades to WACC)

At today’s enterprise value the constant-ROIC reverse-DCF maxes out: even at its sustainable-growth ceiling (~-50.0%, limited by ROIC 11% ≈ WACC 8%) it cannot reach the current EV. No-growth value is €1,544/share (79185% of price); the market prices in growth and/or a higher ROIC than booked — richly valued on this lens. Read the sensitivity grid.

Scenario24m targetImpl. gUpsideProb.Driver
Bull€3≥-50%+38%30%Tier-1 embedded scales toward EUR 200m / ~40% margin; leverage falls
Base€2≥-50%+3%45%GDP-plus growth; embedded offsets direct decline; ~flat vs price
Bear€1≥-50%-31%25%Embedded launch slips; margin compression; covenant/2028 refi pressure
Prob-weighted€2+5%100%Scenario-weighted expected value

Sensitivity — fair value / share at WACC × growth

WACC \ g0%3%5%8%10%15%
6.50%2,0822,2372,3452,5152,6342,950
7.25%1,7711,8791,9542,0692,1482,350
8.00% (base)1,5441,6201,6711,7461,7961,918
8.75%1,3711,4231,4561,5021,5321,594
9.50%1,2351,2681,2871,3121,3251,343

Green = fair value above the current price of €1.95. The reverse-DCF conclusion is dominated by WACC and growth — see the whole surface, not a single fair value.

Method & data. NOPAT €19,715, invested capital and ROIC 10.6% are observed (adjustments.json); WACC 8.0% and terminal g 2.5% are assumptions. EV→equity uses net debt €142. The model holds ROIC constant (no fade) over the explicit horizon; the CAP figure instead fades excess returns to WACC.

⤓ Download the full model (.xlsx) — formula-driven sheets; flex the blue input cells and the model cascades in Excel.

Key drivers

1. Above-WACC returns

Adjusted ROIC 10.6% vs 8% WACC with positive EP ~EUR 4.9m — value-creating, if thinly.

2. Partner-channel stickiness

Security embedded in telco/CSP subscriber bases; currency-neutral partner revenue +4.6% in Q1.

3. Tier-1 embedded launch

Q2 2026 CSP embedded ramp is the swing factor for the Rule-of-40 / EUR 200m-revenue target.

4. Strong cash conversion

LTM FCF EUR 30.8m supports deleveraging and a >=50%-of-net-profit dividend policy.

5. Deleveraging path

Net debt down to EUR 142.3m (2.8x) from EUR 157.1m YoY — leverage trending the right way.

Key risks
Conclusion

F-Secure is a value-creating consumer-cyber franchise (ROIC 10.6% > WACC 8%, EP +EUR 4.9m, FCF EUR 30.8m) but the EUR 1.95 price already discounts the Tier-1 embedded growth story, and a Lookout-heavy, 2.8x-levered balance sheet with negative near-term margin momentum leaves no clear margin of safety. HOLD, medium conviction; base target EUR 2.00.

The upgrade trigger is evidence the Tier-1 CSP embedded deals are converting to revenue and lifting margins toward the Rule-of-40 target while leverage falls; the downgrade trigger is a launch slip with continued margin compression into the 2028 debt maturity.

Footnote evidence & sources

Every adjustment traces to the cited note/page in the source filing — click to open it there. Annual report / 10-K: 📄 open  ·  Latest interim: 📄 open

Adjustment / figureValueSourceWhy mttssn treats it this way
Revenue (FY2025 anchor)145,739Statement of comprehensive income 📄 p.47FY revenue anchor for LTM; reported flat YoY (-0.4%), currency-neutral +0.6%.
EBIT (FY2025 anchor)35,538Statement of comprehensive income 📄 p.47FY operating profit before net financial items; LTM EBIT recomputed = 31,919 after swapping Q1 2025 for Q1 2026.
Capitalized development additions (FY2025)11,707Note 14 Non-current assets — Capitalized development, Additions 📄 p.49Core software adjustment: F-Secure capitalizes development under IAS 38; mttssn expenses these additions (reverses the capitalization).
Amortization of capitalized development (FY2025)4,047Note 14 — Capitalized development, Depreciation for the period 📄 p.49Only this prior-capitalization amortization is added back; net R&D reversal is negative because additions >> amortization.
PPA amortization (FY2025)7,919APM bridge Adjusted EBITA → EBIT; Note 14 acquired intangibles 📄 p.6Lookout technology + customer-relationship amortization; mttssn KEEPS this in opex (does not add back), unlike the company's Adjusted EBITA.
Q1 2026 EBIT5,768Income Statement 1-3/2026 📄 p.16Latest-quarter EBIT added to LTM; fell -38.5% YoY on mix shift to lower-margin Embedded + EUR 1.7m restructuring IAC.
Q1 2026 restructuring IAC-1,700Items affecting comparability (IAC) 📄 p.8Organizational restructuring in sales/services; normalized (added back) net of FY2025 EUR +75k credit.
Total equity (Q1 2026)53,484Statement of financial position 31 Mar 2026 📄 p.17IC equity base from latest quarter snapshot; no NCI.
Interest-bearing liabilities (Q1 2026)156,086Statement of financial position — IB liabilities non-current 124,490 + current 31,596 📄 p.17Bank loans EUR 151.4m + lease liabilities EUR 4.7m; net debt EUR 142.3m after cash.
Cash and equivalents (Q1 2026)13,808Statement of financial position — Cash and cash equivalents 📄 p.17Excess cash (cash − 2% revenue operational) removed from IC.
Capitalized development carrying (Q1 2026 proxy)17,300Note 14 — Capitalized development 11,406 + Advance payments & incomplete development 5,906 (FY-end) 📄 p.49Removed from IC to mirror R&D expensing in NOPAT; Q1 2026 carrying approximated from FY-end book value.
Quality · Buffett tenets8 / 15
Understandable business
Finnish consumer cybersecurity/SaaS: partner-channel security bundled through telco/CSPs plus a shrinking direct-to-consumer book — model is legible, LTM revenue EUR 145.0m, gross margin ~85%.
Durable moat
Sticky partner-channel distribution (embedded in telco/CSP subscriber bases) and brand give switching-cost/distribution edge, but consumer AV faces platform-bundled competition; a real but contested moat, not best-in-class.
Management & capital allocation
One large debt-funded roll-up (Lookout consumer, 2023) drives goodwill EUR 87m + acquired intangibles EUR 99m = 3.5x equity and EUR 202m term loan; headline APM (Adjusted EBITA EUR 48.7m LTM) excludes all amortization and SBC, flattering true economics vs our adjusted EBIT EUR 24.3m.
Financial strength & returns
Adjusted ROIC 10.6% > 8% WACC, positive EP ~EUR 4.9m, FCF EUR 30.8m LTM — but net debt EUR 142.3m at 2.8x, 21.5% equity ratio, covenant-tested quarterly; returns positive yet thin for software.
Margin of safety
Reverse-DCF on adjusted NOPAT EUR 19.7m at WACC 8% only reaches the EUR 1.95 price near ~4% perpetual growth; zero/GDP-growth fair value EUR 0.60-1.07 sits below price — no clear discount, price already embeds the Rule-of-40 growth case.