What is the biggest risk to SecureMetric?

The biggest risk is losing ground to local licensed rivals eMudhra, MSC Trustgate, and Pos Digicert during what should be its strongest demand period under Malaysia's e-invoicing mandate. eMudhra is actively expanding into the Malaysian PKI market as of mid-2026, and Pos Digicert is named as a growing eID and certificate alternative. Revenue has fallen over 20% for two straight periods, FYE2025 down 22% and Q1 FYE2026 down 24.3% year over year, despite the mandate expanding the overall market.

Is SecureMetric in financial trouble?

SecureMetric's numbers point to sustained decline rather than a single bad quarter. FYE2025 group revenue was RM49.90M, down 22% from RM64.01M (as of 2025-12-31), and Q1 FYE2026 revenue fell a further 24.3% year over year to RM11.11M (as of 2026-03-31). Trailing twelve month revenue stood at RM46.34M as of the same date, confirming the downward trend has continued into the newest quarter.

Who are SecureMetric's biggest competitors?

SecureMetric's main competitive pressure comes from fellow Malaysian licensed certificate authorities eMudhra, MSC Trustgate, and Pos Digicert, all of which are named as actively taking share as of mid-2026. Unlicensed foreign players like DigiCert are kept out of the core certificate-issuing market by Malaysia's licensing rules, but that barrier does not apply to these local rivals. SecureMetric ranks 9th of 12 companies in its A4 cohort, largely because these three competitors are winning the new e-invoicing-driven demand instead.

Is SecureMetric at risk from AI?

The risk from AI is rated as partial rather than a full replacement threat. DigiCert had already shipped agentic AI in certificate lifecycle management by November 2025, a tool that automates tasks SecureMetric historically billed for and squeezes service margins. SecureMetric's own move to ship an AI-augmented certificate management or SigningCloud feature by the end of 2026 is a dated watch-item worth checking.

Does SecureMetric have any real protection from competitors?

SecureMetric holds an MCMC-licensed certificate authority status under Malaysia's Digital Signature Act, which blocks unlicensed foreign players like DigiCert from issuing certificates in Malaysia. However, this license does nothing to stop local licensed rivals like eMudhra, MSC Trustgate, and Pos Digicert from taking share, as shown by SecureMetric's continued revenue declines, down 22% in FYE2025 and a further 24.3% year over year in Q1 FYE2026, even as the e-invoicing mandate expands the overall market.

What should I watch next for SecureMetric?

The next concrete checkpoint is the Q2 FYE2026 revenue print, due by 2026-10-31, which will show whether the year-over-year decline seen in FYE2025 and Q1 FYE2026 continues. It's also worth tracking whether SecureMetric ships an AI-augmented certificate management or SigningCloud feature by the end of 2026, given that competitor DigiCert already shipped comparable agentic AI tools by November 2025.

Cybersecurity companies · Singapore

SecureMetric

securemetric.com ↗

ASEAN PKI and digital signature vendor selling trust services to governments.

Protection under test

Assessed 30 July 2026 · Evidence as of 30 July 2026

Something worth protecting exists and is being tested right now.

On the recordSince 30 July 2026 · Checkable from August 2026 · Every call on the record Checkpoint: Q2/H1 2026 earnings, watched for a third straight double-digit revenue decline

The call

SecureMetric still holds its government trust relationships, but revenue keeps sliding as cloud providers absorb crypto services and AI reshapes the standards it consults on.

SecureMetric sells certificates and encryption tools to governments and banks across Southeast Asia. It is hard to replace because it has long-standing contracts with local governments and works with regional certificate authorities that big U.S. cloud companies like Google and Amazon cannot simply copy overnight. However, the company's sales fell 22% last year and are dropping even faster this year, partly because Google and Amazon are now offering similar basic encryption tools themselves, and artificial intelligence is making old encryption standards obsolete so quickly that SecureMetric's plan to shift into quantum-safe encryption consulting may be outdated before it launches. The one thing that could change the picture is if SecureMetric's next earnings report in August 2026 shows sales have stopped falling, but if the decline continues, it signals the company's protective advantages are crumbling faster than they can defend the business.

Why

AI pressure: AI-driven cryptanalysis (e.g. Anthropic's Claude forcing HAWK PQC withdrawal). AI-assisted cryptanalysis is rewriting post-quantum standards, undercutting the PQC consulting pivot SecureMetric is betting its growth on. Could AI do the core job? Yes, likely.

Bigger players: Google Cloud KMS, AWS, Microsoft. Google Cloud KMS went live with post-quantum key management on 29 Jul 2026, commoditizing the crypto layer SecureMetric resells. Could a giant copy it? Probably.

What protects it. Its ASEAN government licensing ties and local CA integrations, which hyperscalers and Chinese rivals cannot quickly replicate.

What would change this call

Securemetric's Q2/H1 2026 results, due around August 2026. A third straight double-digit revenue decline would confirm structural loss of business, not a temporary dip.
Whether Securemetric signs a multi-year ASEAN government framework deal in 2026. Would show it can still lock in recurring government business against local CA rivals.
SEALSQ's reported growth (66%) and Quantum Secure Encryption Corp's Malaysia MOU progress in 2026. Would show new entrants capturing PQC and government trust business Securemetric is targeting.

Key numbers

FY2025 revenue fell 22% to RM49.90M (2025-12-31)
Q1 2026 revenue down 24.3% to RM11.11M (2026-03-31)
Market cap near RM63-69M, stock at multi-year lows (2026-07-30)

Named risks

Two consecutive periods of double-digit revenue decline, FY2025 -22.0% and Q1 2026 -24.3%. Severity: high
AI-driven cryptanalysis reshaping PQC standards Securemetric's consulting pivot depends on, e.g. HAWK withdrawal 2026-07-29. Severity: high
Well-funded new entrants SEALSQ and Quantum Secure Encryption Corp targeting Securemetric's home ASEAN PQC market. Severity: medium
Ownership concentration in founder and Chinese-listed Feitian stake exposes strategy to geopolitical or governance shifts. Severity: medium
Share price near multi-year lows, RM0.10 to RM0.17 as of 2026-07-22, down about 59% since 2018 IPO. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Google Cloud KMS	gaining on	GA of managed post-quantum signatures ML-DSA/SLH-DSA on 2026-07-29 absorbs commodity crypto layer
SEALSQ (NASDAQ: LAES)	gaining on	66% FY2025 revenue growth to ~US$18.3M, announced Southeast Asia PQC push on 2026-07-23
Quantum Secure Encryption Corp (CSE: QSE)	contesting	Signed MOU with unnamed Malaysia-based digital trust provider for PQC localization, 2026-07-23
MSC Trustgate and Pos Digicert	contesting	Established licensed Malaysian Certification Authorities competing on digital certificates and e-signatures
Feitian Technologies	contesting	Minority shareholder and ~15-year supplier as of 2019, also a competing authentication hardware vendor

Questions people ask

What is the biggest risk to SecureMetric?: The biggest risk is losing ground to local licensed rivals eMudhra, MSC Trustgate, and Pos Digicert during what should be its strongest demand period under Malaysia's e-invoicing mandate. eMudhra is actively expanding into the Malaysian PKI market as of mid-2026, and Pos Digicert is named as a growing eID and certificate alternative. Revenue has fallen over 20% for two straight periods, FYE2025 down 22% and Q1 FYE2026 down 24.3% year over year, despite the mandate expanding the overall market.
Is SecureMetric in financial trouble?: SecureMetric's numbers point to sustained decline rather than a single bad quarter. FYE2025 group revenue was RM49.90M, down 22% from RM64.01M (as of 2025-12-31), and Q1 FYE2026 revenue fell a further 24.3% year over year to RM11.11M (as of 2026-03-31). Trailing twelve month revenue stood at RM46.34M as of the same date, confirming the downward trend has continued into the newest quarter.
Who are SecureMetric's biggest competitors?: SecureMetric's main competitive pressure comes from fellow Malaysian licensed certificate authorities eMudhra, MSC Trustgate, and Pos Digicert, all of which are named as actively taking share as of mid-2026. Unlicensed foreign players like DigiCert are kept out of the core certificate-issuing market by Malaysia's licensing rules, but that barrier does not apply to these local rivals. SecureMetric ranks 9th of 12 companies in its A4 cohort, largely because these three competitors are winning the new e-invoicing-driven demand instead.
Is SecureMetric at risk from AI?: The risk from AI is rated as partial rather than a full replacement threat. DigiCert had already shipped agentic AI in certificate lifecycle management by November 2025, a tool that automates tasks SecureMetric historically billed for and squeezes service margins. SecureMetric's own move to ship an AI-augmented certificate management or SigningCloud feature by the end of 2026 is a dated watch-item worth checking.
Does SecureMetric have any real protection from competitors?: SecureMetric holds an MCMC-licensed certificate authority status under Malaysia's Digital Signature Act, which blocks unlicensed foreign players like DigiCert from issuing certificates in Malaysia. However, this license does nothing to stop local licensed rivals like eMudhra, MSC Trustgate, and Pos Digicert from taking share, as shown by SecureMetric's continued revenue declines, down 22% in FYE2025 and a further 24.3% year over year in Q1 FYE2026, even as the e-invoicing mandate expands the overall market.
What should I watch next for SecureMetric?: The next concrete checkpoint is the Q2 FYE2026 revenue print, due by 2026-10-31, which will show whether the year-over-year decline seen in FYE2025 and Q1 FYE2026 continues. It's also worth tracking whether SecureMetric ships an AI-augmented certificate management or SigningCloud feature by the end of 2026, given that competitor DigiCert already shipped comparable agentic AI tools by November 2025.

Timeline

2026-07-29Claude AI cryptanalysis forces NIST PQC candidate HAWK's withdrawal, threatening PQC standards Securemetric advises on
2026-07-29Google Cloud KMS reaches general availability for post-quantum signatures ML-DSA and SLH-DSA
2026-07-23SEALSQ and Quantum Secure Encryption Corp both announce Southeast Asia PQC market entry
2026-06-08Securemetric wins RM15M application development platform contract in Philippines
2026-03-31Q1 2026 revenue reported at RM11.11M, down 24.3% year over year
2026-03-01Securemetric announces Keyfactor partnership and joins PQC Connect Series 2026
2025-12-31FY2025 revenue reported at RM49.90M, down 22.0%, net profit RM2.08M, down 58.9%
2024-01-01Securemetric Mobile Security Sdn Bhd incorporated, signaling pivot to mobile security
2018-10-23Securemetric IPOs on Bursa Malaysia ACE Market, 68M shares at RM0.25 each
2007-01-01Securemetric founded by Law Seeh Key and Nioo Yu Siong

Revision history

30 July 2026

First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.

In the same band

Sangfor Technologies Beijing Topsec Technology ESTsecurity