10-Q: SideChannel Reports Mixed Q3, Cites Internal Control Weaknesses

SideChannel, Inc. reported a 1.3% revenue increase for the nine months ended June 30, 2025, but faced a decline in vCISO services and disclosed material weaknesses in internal controls.

Summary

• Total revenue for the nine months ended June 30, 2025, increased by $69 thousand, or 1.3%, to $5.578 million compared to $5.509 million in the prior year.
• Net loss for the nine months ended June 30, 2025, improved to $(510) thousand from $(645) thousand in the prior year.
• Operating loss for the nine months ended June 30, 2025, improved to $(535) thousand from $(673) thousand in the prior year.
• vCISO Services revenue decreased by $363 thousand, or 10.1%, to $3.248 million for the nine months ended June 30, 2025, due to new client acquisition not exceeding churn.
• Cybersecurity Software and Services revenue increased by $432 thousand, or 22.8%, to $2.330 million for the nine months ended June 30, 2025.
• For the three months ended June 30, 2025, revenue decreased by $70 thousand, or 3.8%, to $1.776 million compared to $1.846 million in the prior year.
• Gross margin remained flat at 47.5% for the nine months ended June 30, 2025, but decreased to 47.0% for the three months ended June 30, 2025, from 48.9% in the prior year.
• Selling and marketing expenses increased significantly by 76.6% for the three months and 31.0% for the nine months ended June 30, 2025.
• Cash used in operating activities was $(46) thousand for the nine months ended June 30, 2025, a decline from $117 thousand provided in the prior year.
• The company reported material weaknesses in its disclosure controls and procedures and internal control over financial reporting as of June 30, 2025.
• Revenue retention rates for the trailing twelve months ended June 30, 2025, declined across all categories: vCISO Services (56.8% from 67.7%), Cybersecurity Software & Services (70.5% from 72.2%), and Total (61.4% from 69.2%).
• Deferred revenue increased to $882 thousand as of June 30, 2025, from $515 thousand at September 30, 2024.

Sentiment

Score: 4

Explanation: The sentiment is slightly negative due to declining revenue in the most recent quarter, a significant drop in vCISO services revenue, negative cash flow from operations, and a notable decline in revenue retention rates. The disclosed material weaknesses in internal controls also add a layer of concern, despite an overall improvement in net loss for the nine-month period and growth in the Cybersecurity Software & Services segment.

Positives

• Overall revenue for the nine-month period increased by 1.3%.
• Cybersecurity Software and Services revenue showed strong growth, increasing by 22.8% for the nine-month period.
• Net loss significantly improved for the nine-month period, reducing by $135 thousand.
• Operating loss also improved for the nine-month period, reducing by $138 thousand.
• General and administrative expenses decreased for both the three and nine-month periods, reflecting cost reduction efforts.
• The increase in deferred revenue indicates a growing base of prepaid contracts and future revenue recognition.
• The company has no debt, indicating a healthy balance sheet in terms of leverage.

Negatives

• Revenue for the most recent three-month period (Q3 2025) decreased by 3.8%.
• vCISO Services revenue declined by 10.1% for the nine-month period, indicating client churn exceeding new client acquisition in this segment.
• Gross margin decreased for the three-month period, primarily due to lower employee utilization and growth in lower-margin third-party software and services.
• Operating loss and net loss worsened for the three-month period ended June 30, 2025.
• Selling and marketing expenses increased substantially, by 76.6% for the three months and 31.0% for the nine months, impacting profitability.
• Cash flow from operating activities turned negative, using $46 thousand for the nine months ended June 30, 2025, compared to providing $117 thousand in the prior year.
• Working capital declined to $1.1 million as of June 30, 2025, from $1.3 million at September 30, 2024.
• Accumulated deficit increased to $20.353 million as of June 30, 2025.
• Revenue retention rates declined across all service categories for the trailing twelve months.
• One client accounted for approximately 13% of revenue during the three months ended June 30, 2025, indicating customer concentration risk.
• Two clients accounted for approximately 30% of accounts receivable at June 30, 2025, indicating concentration risk in receivables.
• Approximately $899 thousand of cash and cash equivalents and $100 thousand of short-term investments were uninsured by the FDIC as of June 30, 2025.

Risks

• Material weaknesses exist in disclosure controls and procedures and internal control over financial reporting, including a lack of formal accounting policies, inconsistent practices, and insufficient qualified finance and accounting staff.
• The company's ability to meet its financial reporting obligations and produce accurate financial information is at risk due to identified internal control deficiencies.
• Reliance on a few clients for a significant portion of revenue and accounts receivable exposes the company to concentration risk.
• A substantial portion of cash and short-term investments exceeds federally insured limits, posing a risk in case of financial institution failure.
• The success of operations, global economic outlook, and the pace of sustainable growth in markets could impact the business and liquidity.
• The outcome of litigation is inherently uncertain, and adverse resolutions could materially affect financial condition and operating results.

Future Outlook

The company anticipates that its target customers will continue to need cost-effective security solutions and plans to expand its catalogue of services and solutions to address these needs. Management believes that existing cash, cash equivalents, and anticipated cash flows from operations will be sufficient to meet working capital, expenditure, and contractual obligation requirements for the next 12 months and the foreseeable future. The company intends to renew its office lease for another twelve-month period beginning January 1, 2026.

Management Comments

• Our mission is to make cybersecurity simple and accessible for mid-market and emerging companies, a market that we believe is currently underserved.
• We believe that our cybersecurity product and service offerings provide cybersecurity and privacy risk management solutions for our customers.
• We anticipate that our target customers will continue to need cost-effective security solutions.
• We believe that our existing cash, cash equivalents, and our anticipated cash flows from operations will be sufficient to meet our working capital, expenditure, and contractual obligation requirements for the next 12 months.
• Although we believe we have adequate sources of liquidity for the next 12 months and the foreseeable future, the success of our operations, the global economic outlook, and the pace of sustainable growth in our markets could impact our business and liquidity.

Industry Context

SideChannel operates in the cybersecurity market, specifically targeting underserved mid-market and emerging companies. The company's strategy to expand its service catalog, including vCISO services, cyber program strategy, zero trust, and proprietary software like Enclave for microsegmentation, aligns with the growing demand for comprehensive and accessible cybersecurity solutions. The focus on combining zero trust network access with certificate management and machine identity through Enclave addresses a critical need for robust security with simplified management, reflecting broader industry trends towards advanced threat protection and streamlined security operations.

Management Changes

Corporate Governance

Legal Proceedings

• Settled a lawsuit filed in April 2021 by Eric Marquez, former Secretary/Treasurer and CFO of Cipherloc Corporation, and other plaintiffs, against Cipherloc and Michael De La Garza.
• A settlement agreement was executed on December 13, 2024, leading to the lawsuit's dismissal with prejudice on January 2, 2025.
• The settlement required the company to issue 356,400 shares of common stock and pay $95 thousand in cash in six equal quarterly installments, beginning January 1, 2025, and ending April 1, 2026.
• As of June 30, 2025, three payments totaling approximately $47 thousand have been made.
• The company is currently not involved in any other litigation believed to have a material adverse effect on its financial condition or results of operations.

Related Party Transactions

• Paid RealCISO Inc. (where CEO Brian Haugli is a principal shareholder) $77 thousand for software licensing fees during the nine months ended June 30, 2025 (compared to $35 thousand in the prior year).
• Invoiced RealCISO Inc. $17 thousand for software development services provided during the nine months ended June 30, 2025 (compared to $119 thousand in the prior year).
• The Association of the US Army (AUSA), whose President joined the company's Board, signed an agreement for recurring vCISO Services on July 8, 2024, generating $54 thousand in revenue during the nine months ended June 30, 2025.
• Paid AUSA $8 thousand for booth space at the AUSA Global Force Symposium in March 2025.

Stakeholder Impact

• Shareholders: Dilution from RSU vesting and legal settlement shares issued. Continued accumulated deficit and declining revenue retention rates may impact future share value. Material weaknesses in internal controls pose a risk to financial reporting reliability.
• Employees: Increased personnel costs in selling and marketing and research and development. Stock-based compensation remains a significant component of compensation.
• Customers: Expansion of service offerings and proprietary software (Enclave) aims to provide more comprehensive cybersecurity solutions. However, the decline in vCISO client acquisition and churn indicates challenges in customer retention within that segment.
• Creditors: The company has no debt, which is favorable. However, negative cash flow from operating activities and declining working capital could be a concern if these trends persist, potentially affecting future creditworthiness.

Next Steps

• Increase adoption of Enclave, the proprietary software product.
• Secure new vCISO Services clients to offset churn.
• Add new Cybersecurity Software and Services offerings.
• Remediate identified material weaknesses in disclosure controls and procedures and internal control over financial reporting.
• Renew the office lease for another twelve-month period beginning January 1, 2026.

Key Dates

Recommendation

While SideChannel, Inc. demonstrated growth in its Cybersecurity Software & Services segment and reduced its net loss for the nine-month period, the decline in its core vCISO Services revenue, negative cash flow from operations, and a notable drop in overall revenue retention rates are significant concerns. The disclosed material weaknesses in internal controls also introduce uncertainty regarding financial reporting reliability. Given these mixed signals, a 'hold' recommendation is appropriate, allowing investors to observe if the company can reverse the negative trends in vCISO services and cash flow, and effectively remediate its internal control deficiencies, before making a more definitive investment decision.

Keywords

Cybersecurity, vCISO, Enclave, Zero Trust, Microsegmentation, SEC Filing, 10-Q, Financial Report, Software Services, Risk Management, Internal Controls