Thursday, October 8, 2026

Back to today

From X

@StableBread 4 clicks

Fajasy on X

One of the world’s 10 biggest financial institutions signed a deal in 2024 to deploy software from Nubeva Technologies $NBVAF (TSXV: $NBVA). Nubeva won’t name the bank, but its filings leave a trail. The April 2024 release on the deal said revenue from the first 12 months “is not expected to be material,” and no press release or filing has updated the deal since. Nubeva reports revenue by country, and in FY2026, U.K. revenue was $204,055, the same figure as the license line. Nubeva also discloses what share of revenue its largest customers make up. In both of the last two years, U.K. revenue matched one customer’s share almost exactly. In FY2026, U.K. revenue was 40.8% of the total ($204,055 / $500,586), and the two largest customers were 41% each. In FY2025, U.K. revenue was 36.6% ($193,986 / $530,616), and the second-largest customer was 37%. One of the two 41% customers lines up with the support and maintenance line, 41.1% of FY2026 revenue ($205,712 / $500,586), which the last customer of Nubeva’s old TLS (web-traffic decryption) product pays. That means the license revenue, the U.K. revenue, and the remaining 41% customer all appear to be the same account. The FY2025 statements show the 37% customer at 0% of FY2024 revenue, so it started paying in FY2025, the first full fiscal year after the bank deal. In a June 2024 video, CEO Randy Chou said the bank doesn’t want anyone to know it uses Nubeva. If the U.K. customer is the bank, HSBC $HSBC is the likeliest candidate. It’s based in London, and at eighth by assets, it’s the only U.K.-headquartered bank in S&P Global $SPGI’s top 10. Then there’s Netskope $NTSK. The company that bought Nubeva’s key-capture patents runs a public page titled “Netskope + HSBC” that pitches its platform to the bank. It’s a sales page, with a “Meet with your Netskope team” button and a named Netskope sales rep, and it pitches Netskope against a “Bluecoat / Zscaler hybrid approach,” which reads like HSBC’s current setup. It also shows Netskope courting HSBC, not HSBC buying from Netskope, and nothing on the page mentions Nubeva or ransomware. If the bank is HSBC, Netskope, which owns the key-capture patents Nubeva sold, is already pitching Nubeva’s biggest license customer. None of this proves the bank is HSBC. But in the latest quarter (February-April 2026), instead of growing, revenue from the U.K. customer fell ~70% (vs. a 19% rise in the same quarter a year earlier). License revenue was $18,796 ($204,055 for the year minus $185,259 through January), vs. the ~$62K/quarter it averaged in the first three quarters. The FY2026 MD&A doesn’t say whether the license customer renewed. If it didn’t, Nubeva likely lost the bank (possibly HSBC) behind 41% of its FY2026 revenue. The six-month report due by December 30, 2026 will show whether license revenue came back.
@convequity

Convequity on X

$NTSK began as a CASB vendor, governing how employees use SaaS applications at the point of use. Years of that work gave it application-specific knowledge of user behavior, data movement, and risk inside cloud apps. That knowledge carries over to AI. Netskope inspects prompts, responses, and file transfers inline and in real time, and it can respond with something more precise than a block: preventing a risky copy-and-paste, stepping up authentication for a sensitive interaction, or coaching the user as they work. The part that matters more comes after the prompt. AI adds autonomy and chaining, so a single human interaction can trigger many machine-executed actions across tools, data stores, and services, often outside one user session. If data is over-permissioned and tools are loosely scoped, an agent can stay inside its allowed permissions and still cause harm faster than a person can intervene. The context Netskope gathers at the interaction can be carried forward to constrain that downstream execution: who the user is, what data is involved, which action was taken, and how risky it looks. So Netskope's edge is that it already knows the user, the data and the action at the moment of the prompt, and it can use that context to limit what an agent does next. It is now building the agent side directly. Its Agentic Broker rates agent actions by risk before they run, and its AI posture management for agents built on AWS, Azure and GCP is still in preview. That is the part to watch.
POST · long

Post Holdings INC

Post Holdings remains a large position after the stock's recent decline.

Publications we follow

Every publication on this site, hand-picked.

109 publications

Newsletters 92

X accounts we follow

Every account on this site, hand-picked.

74 accounts

Investor letters we follow

189 firms

Sectors

Ordered by how often our editor reaches for them.