Industry Analysis: CyberOne Limited

1. Industry Classification

Sector: Information Technology Consultancy (SIC 62020), with a declared principal activity of cyber security managed services.

Key Characteristics: CyberOne operates within the UK's rapidly expanding Managed Security Service Provider (MSSP) segment—a subsector of the broader IT consultancy market valued at approximately £10+ billion domestically. The UK cyber security sector has experienced sustained growth driven by regulatory compliance demands (GDPR, NIS2 Directive), escalating threat sophistication, and the structural shift toward outsourced security operations following pandemic-era digital transformation. This is an asset-light, people-intensive industry where recurring revenue models (managed services contracts) are the benchmark for quality earnings. The company's June 2024 rebrand from Comtact Limited to CyberOne Limited signals a deliberate strategic pivot toward brand positioning within the cybersecurity vertical rather than generic IT services—a common trajectory in this space as firms seek to command premium valuations and differentiate in an increasingly crowded market.

2. Relative Performance

Net Asset Erosion—A Critical Concern:

CyberOne's financial trajectory diverges materially from sector norms. The UK IT/cyber consultancy market has generally seen strong top-line growth and margin stability through 2021-2026, yet CyberOne has experienced a 74% decline in net assets over five years (from £1.09M to £284K). This is atypical for a sector where established operators typically maintain or grow equity positions through retained profitability.

Working Capital Distortion: The balance sheet reveals a concerning structural issue. While net current assets appear healthy at £2.54M, this figure is substantially inflated by £2.29M in accrued and deferred income—a liability that represents services yet to be delivered. Stripping this out, the operational working capital position is materially weaker than headline numbers suggest.

Cash Volatility: The cash position has swung dramatically—£800K (2021), dropping to £3K (2018/2019), recovering to £467K (2025), then falling to £55K (2026). This volatility is inconsistent with the predictable cash generation typical of well-run MSSPs with contracted recurring revenue streams.

Debtor Inflation: Debtors surged 27% year-on-year to £2.29M, potentially indicating either revenue growth (positive) or deteriorating collection practices (negative). Without P&L disclosure, this warrants scrutiny—sector norms typically see debtor days of 45-60 for managed service providers.

3. Sector Trends Impact

Positive Tailwinds: - Demand Growth: UK cyber security spending has grown at approximately 10-15% annually, with managed services outpacing product-only segments as organisations face skills shortages - Regulatory Catalyst: NIS2 Directive implementation (October 2024) expanded compliance obligations across more sectors, driving MSSP adoption - Vendor Consolidation: Organisations increasingly prefer single-provider managed services over multi-vendor approaches—benefitting established MSSPs

Headwinds Affecting CyberOne Specifically: - Talent Cost Inflation: UK cybersecurity salaries have risen 15-20% since 2021, compressing margins for smaller operators unable to leverage scale - Competitive Pressure: The MSSP market has seen significant new entrants and consolidation through PE-backed roll-ups (e.g., Bytes, Softcat expansions), intensifying pricing pressure - Working Capital Demands: The growing deferred income balance (£2.29M) suggests the company is taking advance payments for annual service contracts—common in the sector, but the rate of growth relative to retained earnings indicates potential margin compression

The rebrand from Comtact to CyberOne in mid-2024 likely incurred one-off costs while positioning the business to capture cybersecurity premium pricing—a sensible strategic move, but one that appears to have strained near-term finances.

4. Competitive Positioning

Position: Niche/Challenger

CyberOne is a small, owner-managed MSSP (PSC Dominic List holds >75% equity) competing in a market segment dominated by larger players with greater resources. With net assets of only £284K and tangible assets of £40K, this is essentially a people-and-contract business with minimal balance sheet strength—a vulnerable position in a sector where scale increasingly matters.

Strengths: - Nineteen-year trading history (incorporated 2005) demonstrates survival capability through multiple market cycles - Rebrand signals strategic focus on cybersecurity rather than generic IT—a necessary positioning move - Substantial debtor book (£2.29M) suggests an active client base and contracted revenue - Shareholder commitment evidenced by maintained share capital and premium reserves rather than distribution

Weaknesses: - Severely depleted equity base—net assets of £284K against total assets of £2.34M represents a 12% equity ratio, well below the 30-40% typical of healthy IT consultancies - Minimal cash reserves (£55K) provide virtually no buffer for operational disruptions or investment - Heavy reliance on deferred income as a working capital funding mechanism—£2.29M in accruals/deferred income represents 89% of total liabilities, indicating the business is funding operations through client prepayments - No visible profit trajectory—the consistent erosion of retained earnings (from £1.09M in 2021 to £254K in 2026) suggests cumulative losses or significant dividend distributions, though without P&L disclosure this cannot be confirmed - Concentrated ownership under a single PSC creates key-person risk and limits strategic flexibility

Sector Comparison: Typical healthy UK MSSPs of similar vintage maintain net asset positions of £500K-£2M+ with cash reserves covering 2-3 months of operating costs. CyberOne's £55K cash position against what is likely a £2-3M annual cost base suggests less than one month's coverage—a precarious position.