NCC Group Reports £151.3 Million in Revenue for First Half of Fiscal Year

NCC Group (NCC.L), a British cybersecurity firm, reported revenue of £151.3 million for the first half of its current fiscal year, down from £155.4 million in the same period a year earlier. The results reflect a tough market where corporate clients have been cutting back on cybersecurity spending, squeezing the company's adjusted operating profit to £8.7 million from £15.2 million the prior year. MarketScreener reported the revenue figure in a results flash published this week.
Alongside the results, NCC Group confirmed it has completed the sale of its Escode software escrow unit and plans a £170 million tender offer, signaling a major shift in how the company plans to use its capital going forward, according to Investing.com.
The drop in adjusted operating profit — from £15.2 million to £8.7 million — is the starkest number in the report. Gross margin improved slightly to 38.6%, suggesting the company is getting more out of its staff. But net debt rose to £43.4 million from £23.2 million, as NCC spent heavily on its internal overhaul, known as the "Next" program. The company kept its dividend at 1.50p per share to reassure investors.
CEO Mike Maddison called the performance "resilient" in a challenging market. "We have delivered a resilient performance in a market that remains challenging," he said. "Our focus on the 'Next' strategy is already bearing fruit as we transition from a pure-play consultancy to a high-growth managed services provider." CFO Guy Stallard added that "disciplined cost management" and stable gross margins are key to riding out the downturn.
The most significant news alongside the results is the completed sale of Escode, NCC's software escrow business. Escrow services — where companies store copies of critical software code with a neutral third party — had been a reliable, high-margin source of income for NCC. Selling it marks a clear strategic choice: bet on cybersecurity consulting and managed services, not steady but slow escrow revenue.
NCC plans to return £170 million to shareholders through a tender offer, according to Investing.com. That is a large sum for a company of NCC's size. It signals management believes the best use of the sale proceeds is giving cash back rather than buying new assets. The move may also be designed to support the share price after a difficult stretch of results.
NCC's troubles trace back to a post-pandemic correction. During 2020 to 2022, companies spent heavily on cybersecurity as workers moved home. By late 2023, boards started treating cyber projects as optional spending. Big Tech clients in North America — firms like Google, Meta, and Microsoft — cut budgets and laid off staff, hitting NCC's consulting arm hard. The company issued a major profit warning as far back as February 2023, citing a "lengthening of the sales cycle."
Analysts at Shore Capital called NCC a "recovery play," meaning a stock that could rebound but still has work to do. Investec warned that the consulting arm is still "finding its floor." A separate concern is AI: automated tools can now perform some of the penetration testing and vulnerability scanning that NCC's consultants do by hand, which puts long-term pressure on fees and headcount.
NCC's turnaround plan, called "Next," aims to shift the company from project-based consulting to ongoing managed security services — where clients pay a monthly fee for continuous protection. This model offers more predictable revenue. The company has opened a "Cyber Hub" in Manila, Philippines, to handle lower-level analytical work at a lower cost. Management targets gross margins above 40% by 2027, up from the current 38.6%.
The strategy carries risks. Some analysts at Canaccord Genuity argue that NCC is losing ground to smaller, cheaper boutique cybersecurity firms. Employees have raised concerns about roles being moved offshore. And because NCC handles sensitive work for the UK's Ministry of Defence, any foreign takeover bid — which private equity firms like Thoma Bravo or KKR are rumored to be watching for — would likely face scrutiny under the UK's National Security and Investment Act.
Publishers
4
Articles
2
Reach
4