BBSec (Broadband Security Inc.)
Tokyo-listed firm doing PCI DSS/SWIFT security audits, vulnerability scans, and 24/7 SOC monitoring.
BBSec holds real regulated-audit credentials but is watching AI-priced scanning tools eat the cheap end of its business faster than OT and compliance work can replace it.
BBSec does security audits and vulnerability checks for banks and manufacturers in Japan, especially work that requires certified auditors under strict payment and financial rules. Rivals like GMO Cybersecurity are selling cheap, automated AI scanning tools that do the same basic job without needing expensive people, which is eating into BBSec's profits; meanwhile, larger firms like LAC and NRI Secure can do everything BBSec does and more. The company's survival depends on whether its high-end regulated compliance work and new manufacturing security projects can grow fast enough to make up for the money it is losing on routine scanning jobs that machines now handle better and cheaper.
BBSec discloses DNP/OT alliance revenue as a named material P&L line item in FY2026 filings. Would show the manufacturing/OT channel is becoming a real growth engine, not just a partnership announcement.
BBSec's revenue continues declining or margin compresses again in FY2026 despite the 9.9% target. Would show AI-driven commodity scanning from GMO Cybersecurity and LAC is spreading into mid-tier work faster than new business replaces it.
- FY2025 revenue fell 5.5% YoY to JPY 6.10 billion
- FY2025 net income dropped 68.8% YoY to JPY 142 million
- Q2 FY2026 operating margin rose to 9.0% from 7.7%
- AI-driven fixed-price vulnerability scanning tools from rivals compress margins on BBSec's low-end diagnostic business.
- FY2026 revenue and margin targets depend on back-loaded Q3+ project conversion flagged in March 2026 earnings call.
- Net income fell 68.79% in FY2025 despite flat headcount, indicating cost or pricing pressure.
- Regulated certifications like PCI QSA and SWIFT CSP are shared with larger, equally credentialed rivals, limiting differentiation.
- Small market cap (~JPY 5.4-5.9 billion) and mid-tier position leave limited scale to absorb commoditization shocks.
| Rival | Direction | Evidence |
|---|---|---|
| GMO Cybersecurity by Ierae | losing to | Sells fixed-price AI Quick Tool Diagnosis and AI Remote Vulnerability Diagnosis packages as of July 2026 |
| LAC Co., Ltd. | contesting | Runs JSOC and Cyber Emergency Center, claims Japan's first commercial security diagnosis since 1995 |
| NRI Secure | contesting | Nomura group affiliate with equally strong diagnostic and consulting credentials |
| NTT Data / Fujitsu | losing to | Larger diversified integrators could bundle security services if they chose to focus, per structural analysis |
- Is BBSec (Broadband Security Inc.) profitable in 2026?
- Yes but shrinking. FY2025 (ended June 2025) net income was JPY 142 million, down 68.79% year over year, though Q2 FY2026 operating margin improved to 9.0% versus 7.7% a year earlier, with a full-year target of 9.9% as of March 2026.
- Is BBSec's revenue growing or declining?
- Declining. FY2025 revenue was approximately JPY 6.10 billion, down 5.48% from JPY 6.46 billion the prior year, per stockanalysis.com. Trailing-twelve-month revenue was around JPY 6.50 billion as of mid-2026, suggesting only partial stabilization.
- Could AI replace BBSec's security diagnosis services?
- AI is commoditizing the low end. Competitor GMO Cybersecurity by Ierae already sells fixed-price 'AI Quick Tool Diagnosis' packages per FQDN as of July 2026, pressuring BBSec's basic vulnerability scanning, while its PCI DSS QSA and SWIFT CSP compliance audit work remains harder to automate.
- Who are BBSec's biggest competitors?
- Key Japanese rivals include LAC Co. (Japan's first commercial security diagnosis service since 1995, runs JSOC), NRI Secure (Nomura Research Institute group), and GMO Cybersecurity by Ierae, which markets fixed-price AI-driven vulnerability scanning as of 2026.
- Who owns BBSec / Broadband Security Inc.?
- BBSec is an independent public company listed on the Tokyo Stock Exchange (ticker 4398) since its IPO on September 26, 2018, with no controlling parent. Institutional holders include Samarang UCITS SICAV and Sumitomo Mitsui DS Asset Management as of mid-2024.
- What is BBSec's market capitalization?
- Roughly JPY 5.4 to 5.9 billion (about USD 36 to 40 million equivalent) as of July 25, 2026, according to gurufocus.com, reflecting its status as a small-cap Japanese security specialist rather than a market leader.
- 2025-11Launched 'Security-First Aid' rapid endpoint-response service built on SentinelOne's Singularity Endpoint EDR
- 2025-11Partnered with Kanematsu Electronics for APAC security-certification support
- 2025-10Launched overseas-site security evaluation service, expanding APAC reach
- 2025-06FY2025 ended: revenue down 5.48% YoY to ~JPY 6.10 billion, net income down 68.79% to JPY 142 million
- 2024-07Launched NIST CSF 2.0-aligned assessment service citing generative-AI risk as driver
- 2024-04Took capital/business stake in video-compression startup TMF Earth for AI-era video security
- 2018-09-26IPO on Tokyo Stock Exchange under ticker 4398
- 2006-05Renamed Broadband Security after 2004 merger with IRI Communications
- 2000-11Founded as BroadBand Exchange (BBX)
- 株式会社ブロードバンドセキュリティ (history page)
- 4398 Stock Price and Chart, TSE
- gurufocus.com (2026-07-25)
- 4398 Stock Price & Overview
- BroadBand Security Inc, 4398:TYO profile (2026-07-15)
- Q&A Summary for the Second Quarter of Fiscal Year Ending June 2026 (2026-03-05)
- BroadBand Security, Inc. (4398.T) company profile and facts (2025-05-13)
- BroadBand Security Company Profile (4398) (2026-07-14)
- 「NIST Cybersecurity Framework 2.0対応アセスメントサービス」の提供を開始 (2024-07-12)
- 動画の超圧縮技術ベンチャー企業との資本業務提携に関するお知らせ (2024-04-12)
- Products, Competitors, Financials, Employees, Headquarters Locations (2025-11-17)
- 総合的ランサムウェア対策