Part 5: Genians and Korea's Public Security Budget
Cybersecurity Stocks, Five Ways — Part 5 of 5.
The three US names earlier in this series are global subscription platforms. Genians (KOSDAQ: 263860) earns more than half its revenue from the Korean public sector, and its earnings move with Seoul's security budget. That makes it a small, clean case study in how government policy turns into revenue, and where that path breaks. Most of the data here comes from Korean disclosure and procurement records that rarely show up in English coverage.
KEY TAKEAWAYS
1. First-half 2026 revenue was KRW 24.92bn (+19.9%) and operating profit KRW 4.31bn (+294%), the best first half the company has reported. Q2 operating margin was 19.5%, against 9.3% a year earlier.
2. The rebound follows a weak 2025: revenue fell 2.5% to KRW 48.4bn and operating profit fell 28.8% to KRW 7.0bn, which a broker report linked to public-sector budget cuts and delays.
3. Genians says it is still No. 1 in Korean public procurement of EDR, but its share fell from 79% in 2021 to 46% in 2025, according to company statements.
Who Genians is, and what just happened
Genians makes two kinds of security software. NAC (network access control) decides which devices may join an organization's network. EDR (endpoint detection and response) watches what happens on each laptop or server after it joins. It also sells ZTNA (zero trust network access) and, increasingly, cloud-delivered and managed services.
Per its preliminary earnings filing of Aug 4, 2026, Q2 revenue was KRW 13.18bn (+15.4%) and operating profit KRW 2.57bn (+143%). At the Q2 2026 average FRED rate (EXKOUS, 1,500.55 KRW/USD), that revenue is about $8.8 million. The first half came to KRW 24.92bn, or roughly $16.8 million at the 1H 2026 FRED average of 1,482.49. The company said cloud NAC customers passed 299 (+26%) and managed detection and response (MDR) customers more than doubled.
The stock got a jolt this week. After a string of AI-assisted hacking incidents at Korean banks and lenders, Genians closed at KRW 24,650 on Oct 6, 2026, up 20.83% and a year high, according to Korean press reports. That puts market value near KRW 224bn, about $151 million at the July 2026 FRED average of 1,486.01 (the latest month in my FX table). Trading value that day was roughly KRW 51.2bn, or 23% of market cap (my calculation).
How NAC works, and why Korea's policy shift matters
According to Genians' product documentation, Genian NAC has three parts: a policy server, network sensors and an optional agent. When a new device connects, a sensor picks it up from basic ARP and DHCP traffic, fingerprints the device type and operating system, and checks it against policy. Non-compliant devices are isolated through ARP enforcement, without extra inline hardware.
Zero trust extends that logic: user, device and application are re-verified continuously, not trusted once inside. Korean policy now points the same way. The science ministry and KISA issued Zero Trust Guideline 2.0 in December 2024. On Sep 30, 2025, the National Intelligence Service published version 1.0 of N2SF (National Network Security Framework), per Byline Network and Boan News.
N2SF is the piece English readers are least likely to know. Korean public agencies have long relied on physical network separation: internet and internal networks kept on different machines. N2SF instead sorts information into three tiers, Classified, Sensitive and Open, with about 280 security controls (up from about 170 in the draft). If separation gives way to tiered controls, agencies must keep checking who is on which device, accessing what. That is NAC and EDR territory. Genians took part in N2SF pilots, passing device posture data to the policy decision point, per Byline Network (Feb 13, 2026).
The public-sector dependency, in numbers
Annual figures from Korea's DART filing system tell the story. Revenue rose every year from KRW 31.9bn in 2021 to KRW 49.6bn in 2024, then slipped to KRW 48.4bn in 2025. Operating profit fell from KRW 9.8bn to KRW 7.0bn. Eugene Investment & Securities (Nov 20, 2025) pointed to cuts and delays in public information-security budgets.
The customer mix explains the sensitivity. The Korea IR Service (Jan 2025) estimated that 56% of 2023 revenue came from the public sector, while overseas sales are about 3%. Public agencies spend late in the fiscal year, so revenue bunches in Q4: in 2024, Q4 was 41% of the annual total.
That is why the 2026 rebound is worth a closer look. Part of it is budgets normalizing. Part is recurring revenue: services were 16.7% of Q2 sales, per broker data. Still small, but a larger recurring base would cushion year-to-year swings in public spending.
Still No. 1, but with a much smaller share
Korea runs public purchasing through KONEPS, the national e-procurement system, so procurement share is a figure you can rarely get for a security vendor anywhere else. Genians says it ranked No. 1 in EDR public procurement for a seventh straight year in 2025, at 46% share (ZDNet Korea, Apr 28, 2026). It cited 79% for 2021 and 78-86% for 2023.
My reading is that the market changed shape. EDR started as a niche product a few agencies bought. With zero trust and N2SF, it is becoming a baseline item. A bigger market invites vendors that already have antivirus agents on government PCs to add EDR on top. AhnLab, Part 4 of this series, said its EDR sales grew at a triple-digit rate in the first half of 2026.
NAC looks stickier. A 2024 technology assessment report put Genians' 2023 NAC share of public procurement at 62%, with about 2,900 cumulative NAC customers. NAC sits deep in network design and policy, so switching costs are high. The question is how much EDR ground Genians can win back by bundling into that base. Share alone can mislead here: a falling share in a fast-growing market can still mean rising revenue.
What I actually watch
| Checkpoint | Why it matters |
|---|---|
| Q3 results (mid-Nov, expected) | Eugene expects KRW 1.5bn op. profit |
| 2027 public security budget | Do bank-hack reviews become money? |
| Cloud NAC and MDR customers | Pace of recurring revenue |
| Overseas share (about 3%) | Middle East sales grew 50%+ in 1H |
Value chain read-through
| Series part | Key number | Next check |
|---|---|---|
| 1 CrowdStrike | Net new ARR +51% | Early Dec |
| 2 Palo Alto Networks | NGS ARR +63% (incl. deals) | Mid-Nov |
| 3 Fortinet | Product revenue +52% | Oct 28 |
| 4 AhnLab | Q4 = 63% of 2025 op. profit | Late Oct |
| 5 Genians | 1H op. profit +294% | Mid-Nov |
Risks to this view
• Public budget dependence: as 2025 showed, cuts or delayed spending flow straight into annual results.
• Competition: the EDR share slide from 79% to 46% shows how a growing market draws in rivals, and that can turn into price pressure if growth stalls.
• Q4 concentration: extrapolating a full year from the first three quarters is easy to get wrong.
• Theme-driven volatility: market value of about KRW 224bn is roughly 30x 2025 net income of KRW 7.5bn (my calculation, using the Oct 6 close), and one day's trading equaled nearly a quarter of market cap.
• Share figures are company-reported; I have not reconstructed them from raw KONEPS data.
That closes the series: across five companies, the US names hinged on how fast subscription platforms grow, while AhnLab and Genians hinged on the lag between Korean security budgets and booked revenue.
Sources: Genians preliminary earnings filing (Aug 4, 2026); 1H 2026 results coverage (Money Today, Boan News, Byline Network, Aug 4, 2026); DART-based financial summary via Hankyung Market (accessed Oct 7, 2026); Eugene Investment & Securities, Yuanta Securities and Shinyoung Securities reports (Nov 2025 to Aug 2026, posted on Genians' IR page); Korea IR Service company report (Jan 3, 2025); K-TCB technology assessment (Sep 2024); Genian NAC, ZTNA and Insights E product documentation; MSIT/KISA Zero Trust Guideline 2.0 (Dec 3, 2024); NIS N2SF 1.0 coverage (Byline Network, Boan News, Sep 30, 2025); ZDNet Korea and Hankyung (Apr 28, 2026); Money Today and Digital Daily (Oct 6, 2026); FRED EXKOUS.
Comments
Post a Comment