TAC Infosec Limited (NSE: **TAC**) is a global leader in **Risk-Based Vulnerability Management (RBVM)** and **Cyber Risk Quantification (CRQ)**. Operating under the brand **TAC Security**, the company provides a unified, AI-driven **SaaS (Software-as-a-Service)** platform that enables organizations to identify, prioritize, and mitigate cyber risks in real-time. As of **March 2026**, TAC Security has emerged as the **world’s 5th largest vulnerability management company** by client count, serving a diverse global portfolio across **100 countries**. --- ### **The ESOF Ecosystem: AI-Driven Risk Quantification** The company’s competitive advantage lies in its flagship platform, **ESOF (Enterprise Security in One Framework)**. Unlike traditional scanners, ESOF translates technical vulnerabilities into a **Cyber Score**, allowing executives to understand their security posture through financial and numerical metrics. | Product | Core Functionality & Strategic Value | | :--- | :--- | | **ESOF AppSec** | The company’s "hottest selling" product; provides subscription-based scanning for web and mobile applications. | | **ESOF VMP** | A Vulnerability Management Platform managing over **0.5 crore (5 million) vulnerabilities** using advanced AI. | | **ESOF CRQ** | Quantifies cyber risk into financial metrics for board-level decision-making. | | **Socify.ai** | An automated compliance platform for **SOC 2 readiness**; reduces audit time to **two weeks** and costs by **50%**. | | **ESOF Ensure** | (Upcoming) Focused on **Risk Rating** and integrated **Cyber Insurance** solutions. | --- ### **Global Scale and Market Penetration** TAC Security has transitioned from a niche service provider to a high-velocity global distribution platform. The company utilizes a product-led growth model that has achieved a **Customer Acquisition Cost (CAC) of near zero** through automation and strategic digital onboarding. * **Client Base:** **10,000+ total clients** (6,500+ via TAC; 3,500+ via Cyberscope). * **Geographic Footprint:** Active in **100 countries**, with the **USA** serving as the primary market (**1,465+ clients**). * **Onboarding Efficiency:** Standard SaaS onboarding is completed within a **few hours**, while large enterprise deployments take **3–6 months**. * **Marquee Clientele:** Trusted by global giants including **Apple, Samsung, HSBC, Salesforce, Adobe, Lenovo, PayPal,** and various **United Nations** agencies. --- ### **Web3 Dominance: The CyberScope Acquisition** Through its acquisition of **CyberScope**, TAC Security has established a dominant position in blockchain and decentralized finance (DeFi) security. * **Track Record:** **2,700+ smart contract audits** completed; over **$2 billion** in digital assets secured. * **Cyberscan:** A patented, AI-optimized platform that detects blockchain fraud (e.g., rug pulls) in under **5 seconds**. * **Strategic Milestone:** Subsidiary **Cyberscope Web3 Security Inc.** (Cayman Islands) has filed an **F-1 registration statement** with the **U.S. SEC** for a proposed **Nasdaq** listing under the ticker **'CYSC'**. --- ### **Strategic Partnerships and High-Barrier Accreditations** TAC Security operates as a "gatekeeper" in the cybersecurity ecosystem through exclusive certifications that act as significant moats: * **Google Alliance:** Authorized assessor for the **CASA (Cloud Application Security Assessment)** and **MASA (Mobile Application Security Assessment)** programs. * **IoT Leadership:** One of only **8 companies globally** recognized as an **ioXt Authorized Lab**. * **Technical Standards:** First cybersecurity firm globally to achieve **ISO 17025** certification; holds **CREST** accreditation (3 consecutive years), **PCI ASV**, and **ISO 27001:2022**. --- ### **Financial Performance and Unit Economics** The company’s **100% product-driven** model delivers industry-leading margins and rapid scalability. Following its IPO, TAC has demonstrated triple-digit growth across all key financial metrics. **H1 FY26 vs. H1 FY25 Comparative Results:** | Metric | H1 FY25 | H1 FY26 | YoY Growth | | :--- | :--- | :--- | :--- | | **Total Income** | ₹13.16 Crore | **₹30.36 Crore** | **+130.7%** | | **EBITDA** | ₹6.91 Crore | **₹19.23 Crore** | **+178.3%** | | **Profit After Tax (PAT)** | ₹6.53 Crore | **₹15.57 Crore** | **+138.5%** | | **EBITDA Margin** | 52.5% | **63.4%** | **+10.9 pts** | | **PAT Margin** | 49.6% | **51.3%** | **+1.7 pts** | * **Revenue Quality:** Average revenue per user (ARPU) grew **36%** in H1 FY26 (from **$1,200** to **$1,682**). * **Capital Efficiency:** Product development is funded via **operating cash flow**; IPO proceeds remain largely unutilized for future strategic M&A. * **Shareholder Value:** Executed a **1:1 Bonus Issue** in October 2025, doubling the paid-up equity capital. --- ### **"Bold Vision 2030" and Future Growth Engines** The company’s long-term strategy is codified in its **Vision 2030** roadmap, aiming for global dominance in AI-driven security. * **Financial Target:** **$100 million in Annual Recurring Revenue (ARR)** by 2030. * **R&D Commitment:** **$100 million** planned investment in AI and cybersecurity research. * **Public Sector Expansion:** Acquisition of **CyberSandia** provides a foothold in the US Public Sector, including a state-wide contract with the **State of New Mexico**. * **Global Hubs:** Established **VULMAN Ltd** in the UK and a **Toronto, Canada** HQ for **Socify** to leverage local government wage subsidies (**50-80%**). --- ### **Risk Factors and Governance** Investors should monitor the following operational and regulatory considerations: * **Governance Oversight:** In **March 2026**, the company terminated its engagement with **SCS & Co LLP** due to professional misconduct and replaced its Compliance Officer following unauthorized external assignments. * **Acquisition Execution:** The **CyberSandia** acquisition faced delays due to pending state-level approvals in New Mexico; the company retains the right to rescind if approvals are not secured. * **Taxation:** Successfully resolved a **₹5.03 crore** tax dispute for **AY 2023-24** in February 2026; currently has **zero pending income tax litigation**. * **Market Volatility:** As a SaaS provider, revenue is sensitive to global IT spending cycles, though the company reports minimal impact from current geopolitical "tariff wars" or U.S. visa changes.