NASDAQ

Netskope Inc

NTSK

9 stories

$8.8B Market cap · 2026-10-21

@StableBread

Fajasy on X

The patents behind the key-capture technique of Nubeva Technologies $NBVAF (TSXV: $NBVA) now belong to Netskope $NTSK, a ~$7.6B cloud security company. In March 2024, Nubeva sold its web-traffic (TLS) technology for $1M to an unnamed “mid-sized U.S. based cyber security company,” keeping the right to support the product’s one remaining customer (still 41% of FY2026 revenue). USPTO records show Nubeva assigning five patents to Netskope in one filing signed March 1, 2024, three days before the sale closed, and recorded March 19, 2024. Three are cloud-security patents from Nubeva’s first business. The other two cover key extraction: 1) U.S. 11,805,107: The patent behind Session Key Intercept (SKI), Nubeva’s TLS key-copying software, granted October 31, 2023 to co-founders Greig Bannister and Randy Chou. It covers software that pulls an encryption key out of a computer’s memory and forwards it to whatever needs to decrypt. 2) U.S. 11,494,484: Granted November 8, 2022, and announced by Nubeva as its “U.S. Patent for Ransomware Decryption Technology,” with Bannister saying it “underpins Nubeva’s ability to continue as an effective solution against ransomware.” Bannister, the co-inventor on every SKI patent, resigned as CTO and director on March 1, 2024, the same day the patent assignment was signed, and went to Netskope with the patents. Following the TLS sale, Nubeva kept the other half of the process, turning captured keys into a working decryptor. It filed two patents on the decryptor side in 2024, both since granted: 1) U.S. 12,430,438, granted September 30, 2025: It covers running the ransomware in a sandbox (an isolated test machine) against a known file and matching the result to a library of standard encryption methods to find the one the malware used. With the method and the captured key, Nubeva can build the decryptor. 2) U.S. 12,561,431, granted February 24, 2026: It covers ransomware that encrypts scattered pieces of a large data store, like a virtual machine’s disk, from several processors at once. Nubeva’s method maps which pieces were encrypted, then decrypts each piece with the captured keys. When granting the second patent, the patent examiner flagged PayBreak, a 2017 Boston University research system that also copied ransomware’s keys as it ran, as earlier work in the same area. Copying ransomware’s keys mid-attack wasn’t new by 2024. Nubeva’s patents protect the recovery built on top of the captured keys. NuRR, Nubeva’s ransomware product, copies keys the same way SKI does, but Netskope now owns the two key-capture patents. Nubeva hasn’t disclosed any license from Netskope that lets NuRR keep using the patents. Any buyer would want the license question answered first. Chou has said Nubeva needs four AI patents granted before it partners or sells, and two are still pending. In a July 2024 video, he said a buyer wants the patents issued, since “if you are patent pending there’s a significant discount on the technology itself.” The last two are now well past the early-2026 timing he called typical, with no new date from Chou.
@StableBread 4 clicks

Fajasy on X

One of the world’s 10 biggest financial institutions signed a deal in 2024 to deploy software from Nubeva Technologies $NBVAF (TSXV: $NBVA). Nubeva won’t name the bank, but its filings leave a trail. The April 2024 release on the deal said revenue from the first 12 months “is not expected to be material,” and no press release or filing has updated the deal since. Nubeva reports revenue by country, and in FY2026, U.K. revenue was $204,055, the same figure as the license line. Nubeva also discloses what share of revenue its largest customers make up. In both of the last two years, U.K. revenue matched one customer’s share almost exactly. In FY2026, U.K. revenue was 40.8% of the total ($204,055 / $500,586), and the two largest customers were 41% each. In FY2025, U.K. revenue was 36.6% ($193,986 / $530,616), and the second-largest customer was 37%. One of the two 41% customers lines up with the support and maintenance line, 41.1% of FY2026 revenue ($205,712 / $500,586), which the last customer of Nubeva’s old TLS (web-traffic decryption) product pays. That means the license revenue, the U.K. revenue, and the remaining 41% customer all appear to be the same account. The FY2025 statements show the 37% customer at 0% of FY2024 revenue, so it started paying in FY2025, the first full fiscal year after the bank deal. In a June 2024 video, CEO Randy Chou said the bank doesn’t want anyone to know it uses Nubeva. If the U.K. customer is the bank, HSBC $HSBC is the likeliest candidate. It’s based in London, and at eighth by assets, it’s the only U.K.-headquartered bank in S&P Global $SPGI’s top 10. Then there’s Netskope $NTSK. The company that bought Nubeva’s key-capture patents runs a public page titled “Netskope + HSBC” that pitches its platform to the bank. It’s a sales page, with a “Meet with your Netskope team” button and a named Netskope sales rep, and it pitches Netskope against a “Bluecoat / Zscaler hybrid approach,” which reads like HSBC’s current setup. It also shows Netskope courting HSBC, not HSBC buying from Netskope, and nothing on the page mentions Nubeva or ransomware. If the bank is HSBC, Netskope, which owns the key-capture patents Nubeva sold, is already pitching Nubeva’s biggest license customer. None of this proves the bank is HSBC. But in the latest quarter (February-April 2026), instead of growing, revenue from the U.K. customer fell ~70% (vs. a 19% rise in the same quarter a year earlier). License revenue was $18,796 ($204,055 for the year minus $185,259 through January), vs. the ~$62K/quarter it averaged in the first three quarters. The FY2026 MD&A doesn’t say whether the license customer renewed. If it didn’t, Nubeva likely lost the bank (possibly HSBC) behind 41% of its FY2026 revenue. The six-month report due by December 30, 2026 will show whether license revenue came back.
@convequity

Convequity on X

$NTSK began as a CASB vendor, governing how employees use SaaS applications at the point of use. Years of that work gave it application-specific knowledge of user behavior, data movement, and risk inside cloud apps. That knowledge carries over to AI. Netskope inspects prompts, responses, and file transfers inline and in real time, and it can respond with something more precise than a block: preventing a risky copy-and-paste, stepping up authentication for a sensitive interaction, or coaching the user as they work. The part that matters more comes after the prompt. AI adds autonomy and chaining, so a single human interaction can trigger many machine-executed actions across tools, data stores, and services, often outside one user session. If data is over-permissioned and tools are loosely scoped, an agent can stay inside its allowed permissions and still cause harm faster than a person can intervene. The context Netskope gathers at the interaction can be carried forward to constrain that downstream execution: who the user is, what data is involved, which action was taken, and how risky it looks. So Netskope's edge is that it already knows the user, the data and the action at the moment of the prompt, and it can use that context to limit what an agent does next. It is now building the agent side directly. Its Agentic Broker rates agent actions by risk before they run, and its AI posture management for agents built on AWS, Azure and GCP is still in preview. That is the part to watch.
@StableBread

Fajasy on X

Read skeptically, Nubeva Technologies $NBVAF (TSXV: $NBVA) is a shrinking software company living off its cash, with an AI decryptor builder that keeps slipping and a license customer that may not have renewed. Read another way, Nubeva is being prepared for a buyer. Here’s what supports the second read: → In March 2024, Netskope $NTSK, now a ~$7.6B company, bought Nubeva’s TLS (web-traffic decryption) technology and five patents for $1M. Greig Bannister, the CTO who co-invented the key-capture patents, followed the technology to Netskope. → In an August 2024 video, CEO Randy Chou said “partnering and M&A groups” from companies worth $20-30B had reached out after the July 2024 CrowdStrike $CRWD outage. → Chou wants all four AI patents granted before any partnership or sale, and two are still pending. → The FY2026 MD&A says Nubeva is “selectively engaging with lighthouse accounts,” meaning “large, high-profile organizations that serve as validation points for the technology,” to make its offering “more attractive for either future expansion or strategic partnership/M&A.” In a June 2025 video, Chou said lighthouse accounts “matter 100%” in a partnership or M&A talk. → Sales and marketing spend was $14,951 for all of FY2026, with $2.49M of cash on hand. In the same June 2025 video, Chou said Nubeva is “really not marketing” until “the patents and everything else comes in.” → The most recent investor deck is from July 2023, and since then Nubeva has communicated mostly through filings, press releases, and the occasional YouTube interview. In other words, it isn’t pitching investors either, which fits a company waiting on a buyer. A longtime investor I spoke with described Chou as reluctant to spend money, PR included, and called a sale to a larger security company the clear end goal. I’d add that Chou, who makes the call, also owns a quarter of the company.
@convequity 1 click

Convequity on X

Cybersecurity isn’t uniformly exposed to model labs. Host agents (telemetry), inline enforcement, and shift-right ops — humans, live environment, adversaries — stay relatively hard to absorb for the intermediate future. Shift-left and the checkable end (vuln scanning, validators) are already getting hit hardest by stronger codegen and coding agents. Relatively safer (host agents / inline / shift-right): $PANW, $CRWD, $FTNT, $NTSK More exposed (shift-left / scan / checkable): $TENB, $QLYS, $RPD.

Tickers on this page

Companies the stories above are also about, besides NTSK.