Cybeats Technologies (CYBT) investor relations material

Product and market

• SaaS platform automates Software Bill of Materials (SBOM) management for software producers and consumers, matching software components against 100+ vulnerability data sources.

• SBOM Studio serves software producers; SBOM Consumer helps assess third-party software risk. Both support continuous monitoring and secure SBOM sharing.

• Products also address emerging AI Bill of Materials, Hardware Bill of Materials and Cryptography Bill of Materials use cases.

• Gartner featured the solution in 11 Hype Cycle reports and recognized it as a reference vendor for AI Bill of Materials.

Market drivers and regulation

• U.S. FDA rules require SBOM submissions for new medical devices and ongoing monitoring for each release; EU Cyber Resilience Act requirements include notifying ENISA within 24 hours of a known vulnerability and determining impact within a week.

• SBOMs are expected to be required for software-enabled products and services sold in Europe by December 2027, with disclosures prepared for ENISA.

• AI adoption, AI-generated code and AI-enabled vulnerability detection and exploitation are increasing urgency and reducing software transparency; vulnerability disclosures are expected to become more frequent.

• Industrial control systems and medical device manufacturing remain core markets; financial services, automotive and telecom are emerging verticals.

Commercial traction and growth

• Last reported ARR was ~CAD 4M in Q2; ARR pipeline exceeded CAD 5M, with 16 high-quality near-term opportunities and a stated 78% likelihood of conversion.

• 11 proof of concepts were in progress or scheduled near term; reported metrics included 111% net revenue retention, 80% gross margins, ~CAD 250K average contract size and 78% POC conversion.

• POCs typically run two weeks with agreed success criteria; sales cycles have ranged from three to 18 months, with POCs generally at the final selection stage.

• Existing blue-chip customers are expanding deployments; management expects more enterprise-scale accounts during 2026.

• The U.S. National Security Agency publicly identified itself as a customer; other security-sensitive customers may not be named.