Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

CVE

Nubeva Technologies Ltd

NBVA

3 stories

$8.4M Market cap · 2026-10-06

@StableBread

Fajasy on X

The CEO of Nubeva Technologies $NBVAF (TSXV: $NBVA) owns 25.4% of the shares, and a 12% holder keeps buying more. Investing in Nubeva largely means trusting Randy Chou. He’s been CEO since the 2018 listing and sits on the board. Per the company’s site, he built SSL (web encryption) security at Alteon WebSystems, which Nortel bought for $7.8B in 2000. He then joined the founding team at Aruba Networks, a Wi-Fi company started in 2002 that HP $HPQ bought for $3.0B in 2015. In 2008, he co-founded Panzura, a cloud storage company that private equity firm Profile Capital Management bought in May 2020 for $225M, per Nubeva’s July 2023 investor deck. Granted, Panzura replaced him as CEO with Patrick Harr in May 2016, a month after Nubeva was incorporated, and the sale came four years later under Harr. Regardless, every company Chou helped build before Nubeva ended in a sale, and a partnership or sale is Nubeva’s own fallback if AI doesn’t fix its costs. Canadian insiders report their trades on SEDI, and Nubeva’s file since January 2024 has one active buyer. Clayton Davis, an Edmonton-based individual investor, crossed 10% on September 8, 2025 with 7,038,268 shares (10.03%), per the Form 62-103F1 he filed a year later, on September 10, 2026 (the disclosure Canada requires from anyone who crosses 10%). He then made 96 open-market purchases on 46 trading days through September 4, 2026, buying 1,755,797 shares for ~CAD$306K at CAD$0.09-0.26. Net of four small sales totaling 134,500 shares, he now holds 8,659,565 shares (12.34%). Davis’s latest purchase, on September 4, came a week after Nubeva filed its FY2026 results. In other words, he kept buying after seeing the full-year numbers. Chou hasn’t bought or sold in the open market over the same period, and Nubeva’s annual meeting filings list the same 17,797,741 shares for him in 2024, 2025, and 2026. In April 2024, Chou moved 3,630,000 of those shares into a donor-advised fund he still controls, and in a February 26, 2026 interview on Nubeva’s YouTube channel, he said he’d have to pre-announce any sale by the fund.
@StableBread

Fajasy on X

Revenue at Nubeva Technologies $NBVAF (TSXV: $NBVA) has fallen 76% since 2023, but it still has ~4 years of cash. Since losing Kroll, its biggest customer, Nubeva’s revenue has dropped from its FY2023 high of $2.07M. Expenses fell 66% over the same period, from $4.03M to $1.36M. Nubeva booked $500,586 in FY2026, across three revenue lines: 1) Software licenses ($204,055, 41% of revenue): Attributed in the MD&A “primarily” to NuRR, its ransomware-recovery product. 2) Subscriptions ($90,819, 18%): NuRR, down from $113,356 in FY2025. The December 2025 interim MD&A blamed the decline on fewer customers renewing. 3) Support and maintenance ($205,712, 41%): The last TLS (web-traffic decryption) customer, paying under a source-code and distribution agreement Nubeva kept when it sold its TLS technology in March 2024. Just two customers made up 82% of FY2026 revenue (41% each). While the concentration risk exists, both customers have continued working with Nubeva. The TLS customer has been paying since before the March 2024 sale, and the license customer since FY2025. Nubeva ended FY2026 with $2,489,316 of cash and money-market funds and no debt beyond a $12,262 pandemic-era SBA loan. Cash fell $600,162 over the year, which means runway is ~4 years ($2,489,316 / $600,162) if nothing material changes. CEO Randy Chou didn’t expect Nubeva to burn cash in 2025. In a March 4, 2024 video posted the day the TLS sale closed, he said the sale would make Nubeva cash-flow positive for calendar 2024, with 2025 “targeted to be the same.” Instead, cash fell $457,706 in the 12 months to January 31, 2026, the closest reported period to calendar 2025 ($3,184,879 to $2,727,173). In other words, the TLS sale didn’t make Nubeva self-funding, so the ~4-year runway is how long Chou has to automate support or sell. Even if both top customers churned, cash would still cover ~2.5 years of operations. Nubeva hasn’t raised equity since a CAD$1.59M private placement in February 2022, and the last warrants expired in FY2025, so dilution has been minimal.
@StableBread

Fajasy on X

The ransomware software of Nubeva Technologies $NBVAF (TSXV: $NBVA) passed every test in a month-long third-party lab evaluation in 2023, and its biggest customer, Kroll, walked away anyway. In January 2022, Nubeva launched Ransomware Reversal, or NuRR, the product the company is now built around. It’s a lightweight agent installed on servers, desktops, and laptops that watches for the file encryption a ransomware attack produces, captures copies of the encryption keys as the malware generates them, and stores those keys on the customer’s own network. After the attack, Nubeva uses the captured keys to build a decryptor (a program that reverses the encryption) and hands the customer its data back, without the ransom. The only outside test of NuRR I found was a month-long evaluation in 2023 at DreamPort, a lab in Maryland (the test doesn’t appear to have been commissioned by Nubeva). DreamPort is run by the Maryland Innovation and Security Institute (MISI), a nonprofit that partners with U.S. Cyber Command to connect the military with outside cybersecurity products. Per Nubeva’s July 20, 2023 release, NuRR passed all 17 tests in MISI’s test plan and captured the encryption keys in every attack, including ones using the LockBit, Ragnar Locker, and BlackBasta ransomware strains. But less than two months after the MISI results, Nubeva lost its biggest customer: → January 2023: Nubeva named Kroll, the risk advisory firm that runs more than 3,000 incident-response investigations a year, as a strategic partner using the product in its ransomware cases. → September 2023: Kroll ended the relationship and paid $180,000 to walk away. It had been 86% of FY2023 revenue (~$1.78M of $2.07M). Neither company gave a reason in a filing or press release. But in a July 2024 video on Nubeva’s YouTube channel, CEO Randy Chou said Kroll sometimes brought in 10 ransomware cases on the same weekend, and “neither the partner or us as a complete solution could handle the emergency services.” In an October 2025 video, he explained the constraint further. Each new ransomware variant needs its own decryptor, which Nubeva’s engineers built by hand. With 10 to 30 attacks running at once, “you don’t have enough engineers to go figure out the new decryptor.” Chou added that Nubeva “simply cannot afford to scale” its support, “and that’s still the reality,” so it’s waiting on automation before it grows again. A longtime investor I spoke with, who has followed Nubeva for years and has spoken with people who’ve used NuRR in the field, described the same constraint. He also says Kroll’s exit is why Nubeva stopped trying to grow on its own and bet on AI to write the decryptors.

Tickers on this page

Companies the stories above are also about, besides NBVA.