WillItSurvive

BBSec (Broadband Security Inc.)

Tokyo-listed firm doing PCI DSS/SWIFT security audits, vulnerability scans, and 24/7 SOC monitoring.

Losing its protection
Assessed 26 July 2026 · Evidence as of 26 July 2026
The structural protection is eroding.
On the recordSince 26 July 2026 · Checkable from Aug/Sept 2026 · Every call on the record Checkpoint: FY2026 full-year results reveal if 9.9% margin target and revenue stabilization hold
The call

BBSec holds real regulated-audit credentials but is watching AI-priced scanning tools eat the cheap end of its business faster than OT and compliance work can replace it.

BBSec does security audits and vulnerability checks for banks and manufacturers in Japan, especially work that requires certified auditors under strict payment and financial rules. Rivals like GMO Cybersecurity are selling cheap, automated AI scanning tools that do the same basic job without needing expensive people, which is eating into BBSec's profits; meanwhile, larger firms like LAC and NRI Secure can do everything BBSec does and more. The company's survival depends on whether its high-end regulated compliance work and new manufacturing security projects can grow fast enough to make up for the money it is losing on routine scanning jobs that machines now handle better and cheaper.

Why
01
AI pressure: GMO Cybersecurity by Ierae. GMO already sells fixed-price AI Quick Tool Diagnosis, undercutting BBSec's lower-end vulnerability scanning business. Could AI do the core job? Only partly.
02
Bigger players: NRI Secure (Nomura Group). NRI Secure and LAC run equally credentialed, larger-scale diagnosis and SOC operations competing for the same enterprise contracts. Could a giant copy it? Yes, easily.
03
What protects it. PCI DSS QSA and SWIFT CSP certifications plus the DNP capital tie-up opening OT and manufacturing security work.
What would change this call
BBSec's FY2026 full-year results (due Aug/Sept 2026) show operating margin at or near the guided 9.9%. Would show regulated/OT work is offsetting commodity-scanning erosion, supporting a turnaround.
BBSec discloses DNP/OT alliance revenue as a named material P&L line item in FY2026 filings. Would show the manufacturing/OT channel is becoming a real growth engine, not just a partnership announcement.
BBSec's revenue continues declining or margin compresses again in FY2026 despite the 9.9% target. Would show AI-driven commodity scanning from GMO Cybersecurity and LAC is spreading into mid-tier work faster than new business replaces it.
Key numbers
  • FY2025 revenue fell 5.5% YoY to JPY 6.10 billion (2025-06-30)
  • FY2025 net income dropped 68.8% YoY to JPY 142 million (2025-06-30)
  • Q2 FY2026 operating margin rose to 9.0% from 7.7% (2026-03-05)
Named risks
  • AI-driven fixed-price vulnerability scanning tools from rivals compress margins on BBSec's low-end diagnostic business. Severity: high
  • FY2026 revenue and margin targets depend on back-loaded Q3+ project conversion flagged in March 2026 earnings call. Severity: medium
  • Net income fell 68.79% in FY2025 despite flat headcount, indicating cost or pricing pressure. Severity: high
  • Regulated certifications like PCI QSA and SWIFT CSP are shared with larger, equally credentialed rivals, limiting differentiation. Severity: medium
  • Small market cap (~JPY 5.4-5.9 billion) and mid-tier position leave limited scale to absorb commoditization shocks. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
GMO Cybersecurity by Ieraelosing toSells fixed-price AI Quick Tool Diagnosis and AI Remote Vulnerability Diagnosis packages as of July 2026
LAC Co., Ltd.contestingRuns JSOC and Cyber Emergency Center, claims Japan's first commercial security diagnosis since 1995
NRI SecurecontestingNomura group affiliate with equally strong diagnostic and consulting credentials
NTT Data / Fujitsulosing toLarger diversified integrators could bundle security services if they chose to focus, per structural analysis
Questions people ask
Is BBSec (Broadband Security Inc.) profitable in 2026?
Yes but shrinking. FY2025 (ended June 2025) net income was JPY 142 million, down 68.79% year over year, though Q2 FY2026 operating margin improved to 9.0% versus 7.7% a year earlier, with a full-year target of 9.9% as of March 2026.
Is BBSec's revenue growing or declining?
Declining. FY2025 revenue was approximately JPY 6.10 billion, down 5.48% from JPY 6.46 billion the prior year, per stockanalysis.com. Trailing-twelve-month revenue was around JPY 6.50 billion as of mid-2026, suggesting only partial stabilization.
Could AI replace BBSec's security diagnosis services?
AI is commoditizing the low end. Competitor GMO Cybersecurity by Ierae already sells fixed-price 'AI Quick Tool Diagnosis' packages per FQDN as of July 2026, pressuring BBSec's basic vulnerability scanning, while its PCI DSS QSA and SWIFT CSP compliance audit work remains harder to automate.
Who are BBSec's biggest competitors?
Key Japanese rivals include LAC Co. (Japan's first commercial security diagnosis service since 1995, runs JSOC), NRI Secure (Nomura Research Institute group), and GMO Cybersecurity by Ierae, which markets fixed-price AI-driven vulnerability scanning as of 2026.
Who owns BBSec / Broadband Security Inc.?
BBSec is an independent public company listed on the Tokyo Stock Exchange (ticker 4398) since its IPO on September 26, 2018, with no controlling parent. Institutional holders include Samarang UCITS SICAV and Sumitomo Mitsui DS Asset Management as of mid-2024.
What is BBSec's market capitalization?
Roughly JPY 5.4 to 5.9 billion (about USD 36 to 40 million equivalent) as of July 25, 2026, according to gurufocus.com, reflecting its status as a small-cap Japanese security specialist rather than a market leader.
Timeline
  • 2025-11Launched 'Security-First Aid' rapid endpoint-response service built on SentinelOne's Singularity Endpoint EDR
  • 2025-11Partnered with Kanematsu Electronics for APAC security-certification support
  • 2025-10Launched overseas-site security evaluation service, expanding APAC reach
  • 2025-06FY2025 ended: revenue down 5.48% YoY to ~JPY 6.10 billion, net income down 68.79% to JPY 142 million
  • 2024-07Launched NIST CSF 2.0-aligned assessment service citing generative-AI risk as driver
  • 2024-04Took capital/business stake in video-compression startup TMF Earth for AI-era video security
  • 2018-09-26IPO on Tokyo Stock Exchange under ticker 4398
  • 2006-05Renamed Broadband Security after 2004 merger with IRI Communications
  • 2000-11Founded as BroadBand Exchange (BBX)
Revision history
26 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources