Quick Heal Technologies Ltd Q1 FY2025 Concall Summary

Key Takeaways

• 37% YoY revenue growth, Q1 seasonality hit: Revenue grew 37% YoY but declined 12% QoQ, driven by Q1 sluggishness and government deal deferments during central elections.
• Enterprise now 43% of revenue: The enterprise business has scaled from 20% to 43% of revenue over three to four years, with new Horizon-II products (EDR, XDR) beginning to contribute meaningfully.
• Profitability turned positive: EBITDA swung to ₹2.6 crores from negative ₹15 crores in Q1 last year; PAT stood at ₹4 crores, with expenses held steady at ₹68 crores despite increased R&D and sales investments.
• DPDP Act seen as a 4–5% spend tailwind: Management expects the act to drive a 4–5% uptick in cybersecurity spends, based on patterns seen with GDPR and California Privacy Protection Act, though enforcement guidelines are still awaited.
• What to watch next quarter: Whether the pipeline converts at a better rate, the pace of Horizon-II product adoption in the enterprise segment, and any concrete timeline on DPDP Act enforcement.

Enterprise Business & Product Evolution

• Revenue mix shift underway: Enterprise revenue moved from 20% to 43% over three to four years. Within enterprise, Horizon-I (core products) still dominates, but management expects the same mix shift toward Horizon-II over the next 3–4 years that occurred between consumer and enterprise.
• Horizon-II products gaining traction: EDR, XDR, MDR, Zero Touch User Access, and Mobile Security are at different stages of maturity and have started generating revenues. A large customer recently credited Quick Heal for saving them from a major IP outage after switching from a legacy solution.
• On-premises EDR launched: The Q1 launch of on-premises EDR addresses industry demand, particularly from the Indian Government, and expands the addressable use cases beyond cloud-only deployments.
• Horizon-III roadmap defined: Products in development include a threat intel platform (fed by 0.9 crore endpoints), malware analysis platform, data privacy solutions, Zero Trust Network Access (ZTNA), CASB, and secure web gateway, with Gen AI as a common layer to democratize cybersecurity. Some releases are expected within six months, others in 1.5 years.
• Enterprise business still young: Many new products are only 1–1.5 years old, and typical time-to-market-fit in cybersecurity is 18–24 months, so inertia in adoption is expected and factored into the outlook.
• GTM strategy expanding: Quick Heal is partnering with top global system integrators (GSIs) in India to embed its solutions into large deals, alongside its existing distribution network, channel network, and partners.

Salvi: "if you go back to where we were maybe three or four years back, majority of our revenues were coming from consumer and enterprise was just beginning... In the last five years, the enterprise business has become 43% of our revenue. Now, that 43% of the revenue major part right now is our core products, which is Horizon-I. But as we go and see the next 3-4 years, we expect the same story that happened of the mix that we got between consumer and enterprise should happen for Horizon-I and Horizon-II."

Consumer Business Resilience

• 63% jump in retail business: The sharp YoY growth in the consumer segment is the outcome of multiple interventions and investments to counter market headwinds, with the retail team executing on planned go-to-market initiatives.
• Awareness push planned: Management committed to creating consumer awareness through social media platforms and micro-influencers, alongside developing innovative adjacent offerings with new launches expected in the near future.
• Seasonality acknowledged: Q1 is traditionally the weakest quarter due to India-specific end-consumer preferences, a factor management says is partly controllable and partly dictated by market demand.

DPDP Act Opportunity

• 4–5% spend uplift expected: Based on global precedents (GDPR, California Privacy Protection Act), management anticipates a 4–5% increase in cybersecurity spends when the DPDP Act comes into force, tapering over time.
• Every body corporate covered: The act applies universally, with fines up to ₹200 crores for non-compliance if a data breach occurs without adherence to guidelines. Forward-looking and early-mover firms are expected to adopt first.
• Enforcement timeline uncertain: The Government of India has not yet issued enforcement guidelines, and management declined to estimate the number of firms covered or average deal values for MSMEs, citing the need to wait and watch.
• Serviceable addressable market rising: Quick Heal pegs its serviceable addressable market at ₹3,000 crores in FY25, ₹3,500 crores in FY26, and ₹4,000 crores in FY27, inclusive of the DPDP Act opportunity.

Salvi: "What we have seen in other parts of the world is that overall there is 4% to 5% increase in the spends when specifically, the act comes into play and over a period of time it tapers down."

Profitability & Investment Balance

• EBITDA turned positive: EBITDA improved to ₹2.6 crores from negative ₹15 crores in Q1 last year, with PAT at ₹4 crores. Expenses were held steady at ₹68 crores despite increased R&D and sales/marketing investments.
• R&D costs are largely fixed: R&D expenses consist mainly of manpower cost (increments, headcount additions for Horizon-3 products) and AWS cost for cloud-hosted products. These costs will grow but not in the same proportion as revenue.
• Investment posture unchanged: Management will not shy away from necessary investments to build and add products to the portfolio in a timely manner, while keeping sight of costs to remain product-profitable.
• Margin trajectory tied to revenue growth: As new products mature and revenue scales, the gap between revenue and cost is expected to widen, leading to better EBITDA over a three-year horizon. No specific margin guidance was given.

Salvi: "We will not shy away from doing the necessary investments which are required so that we will continue to build and keep on adding more products in our portfolio and in a timely manner, at the same time, we will also keep sight of our cost so that we will also make sure we remain product profitable."

Operational Updates

• Blue screen IT outage had zero impact: None of Quick Heal's customers were affected by the global IT outage. Management pointed to the company's three-decade track record of error-proof systems as evidence of resilience.
• Leadership strengthened: Sathyajith Samuel joined as head of sales, and a new head of digital business for both consumer and enterprise came on board. The sales organization strengthening plan remains underway.
• Brand and culture refreshed: The company refreshed its brand around the core purpose of "Innovate, Simplify and Secure" and launched a culture code representing 11 values.
• Gartner peer review validation: Quick Heal received a 4.6 out of 5 rating from Gartner peer review for its security solutions, a third-party validation from participating customers.
• Partnerships in early days: Partnerships with EET Group and MTech Technologies were announced and are expected to yield revenue growth in the future, though they are still in early stages.
• Attrition declining: Attrition is on a steady decline, though no specific rate was disclosed.

Salvi: "We can confirm that none of our customers got impacted due to this event and we would like to assure our stakeholders, including customers and investors that we constantly strive to keep our systems and processes error-proof and our track record for the past three decades is evidence of that fact."

Disclosure Gaps

• Enterprise client metrics not shared: Management declined or deflected requests for the number of enterprise clients, quarterly client additions, up-selling/cross-selling metrics, and the split between direct Seqrite revenue and dealer/third-party partnership revenue, stating these are either not maintained or will be considered for future disclosure as the company matures.
• No quantitative guidance: Management declined to provide specific margin targets, R&D expense run rates, revenue thresholds for margin improvement, or DPDP-related TAM estimates, citing a policy of not disclosing projections externally at this stage.

Guidance & Commitments

Key Metrics