Enea AB (publ) (ENEA) Earnings Call Transcript & Summary

December 4, 2024

Nasdaq Stockholm SE Information Technology IT Services investor_day 179 min

Earnings Call Speaker Segments

Anders Lidbeck

executive
#1

So good afternoon, everyone, and welcome to this Capital Markets Day. Before it was about time to have another one. The last one Enea had was 5th of November 2019, and after that, came COVID, the war in Ukraine, raising inflation, raising interest rates, Trump lost the election, and then he won the election again a couple of weeks ago. And for Enea, a lot has happened as well. We acquired the Wi-Fi business during COVID. We sold our Global Services Organization. We got fairly well paid for that. And we acquired a global -- or a security business AdaptiveMobile. We also had our issues. And since 18 months or so, I'm back as the interim CEO. So here we are now, 4th of December 2024, stronger than ever, I argue, and that's why I'm so excited to have you all here and be able to share that and invite you into our world for a few hours. I met one of you guys last week and you were limping after Capital Markets Day because the chairs were so bad, and you had to sit for 4 hours and you felt you came out of the event more confused than you walked into the event. I hope that will not be the case here. And if you feel that the chairs are too bad, we have stools, we have high stools and we have sofas. And we will really try to be transparent and tell you about our business. That's our sincere intention here to discuss the things that we feel important. So we've only -- we chose to make this half a day, and the reason for that is what I just described. But based on that, we will not go through our entire business. We will spend some time on the totality, but then we'll [ home in ] on our security business. And that's really one of the key objectives I have for this afternoon is to be able to explain a very different position that Enea has today compared to 2019 or 2022 or when I was CEO in 2018. All that we've talked about today about the firewall side, we could not have talked about before we acquired AdaptiveMobile. So what you have at your fingertips actually is a leader in cybersecurity, a leader in the firewall business. 2016, we acquired a company called the Qosmos, DPI functionality, that's also security and representative from that entity will be here today. So that becomes our security business, and that's one of the objectives today. The other objective I have is to talk about our revenues, so given everything that's happening in the world and given the fact that when I started here, which is quite some years ago now, in 2009, our software business was 95% OSE. And when we divested our Nordic consulting business, the business was OSE and then we had some weird software called Netbricks and [ ElementCenter ] that never was anything, so it was OSE. That business is almost gone. So we have reinvented Enea in this 15 years to something completely different. But we've done that with high profitability, with good cash flows or strong cash flows. So what you see on the top line, there is actually a lot of changes underneath that, that I also hope to be able to discuss a bit more in detail. Our financial ambition that we've had for a few years now, I want to discuss that as well. It's well within reach. And the smaller the OS business becomes, the bigger portion, obviously, the focus areas are and the bigger probability that, that entire ambition will be the ambition of the company. I also have a fourth objective with this afternoon, and that is to introduce some members of my management team. These guys, I will not be able to introduce everyone, but these guys are key. First of all, they're super fun to work with. They're super skilled individuals, but they're also super important for the investors, because they are the people that make our ambitions and our promises come reality. So I want to introduce them. I want you to have the opportunity to ask some questions and interact with them. And then I have a fifth objective, and that is to introduce you to SS7. And SS7, anyone but [ Daniel and Per ] that knows what SS7 is. Great -- because we'll spend a few minutes on SS7 because it's important for our business. So that's -- again, don't walk away here more confused than you came. And if not anything else, I hope that you will be able to talk about SS7 at the Christmas table, all right. With that, we -- to achieve this, we will follow this agenda. And what is carved in stone here is the wrap-up. We will end at 5:00, at half past 4 a bit more than that or around that time. We will have an online introduction, Teemu Salmi, the incoming CEO, will call in from an event in Helsinki, and you will be able to hear him and maybe ask 1 or 2 questions. And we will also fit in the coffee break in the middle of the this agenda. So without further ado, let's jump into the agenda. And I would like to say while Osvaldo comes up on stage here. So we are online. I will have, on this monitor here, questions online. There is a mic behind you. So if you have a pressing question that you want to ask, during the presentation, don't be shy or don't feel that you're interrupting, it's actually good that it becomes interactive. Ask the question. If not, we'll make room during the different sessions here for questions. Okay. So Osvaldo, some of you have known Osvaldo, met Osvaldo. Osvaldo was one of the guys that I promoted fairly quickly when I came back as an interim CEO into Enea. Enea is a software company. And you all know Northvolt. If you're a production company of electric batteries, you know -- you need to understand and know how to produce batteries. Manufacturing is important. As software company, sometimes people think, especially at Board level, that the software is just happening. It's something that you take for granted but that is actually absolutely not the case. The software has to be built. And when you are in a competitive situation with the customer, you either win or lose also based on the quality of your software. And your salespeople need to feel really reinsured that the software we're sending them out with is top-notch quality software, competitive, right priced and quality in the build of the software. So promoting Osvaldo and making sure that we had the CTO, Chief Technology and Product Officer, was very important for me. But you might have experience this yourself. Sometimes when you have a CTO, these guys create their own reality almost. They have their own budget and they start doing things that might not be super connected to the business. So for me, one of the absolute very most amazing qualities of Osvaldo is that he has the commercial background. He actually once upon a time was awarded salesperson of the year in his native Argentina before he chose to go on a technology career. So I'm very happy to have Osvaldo and Osvaldo, please share a bit of your background.

Osvaldo Aldao

executive
#2

Okay. Thank you very much. So my journey to the current role have been shaped by 30 years of telco experience. I started in the mid-90s. At that time, the mobile phones has the size of the brick. And probably you still remember that to connect to the Internet, you had some sketchy noises before you get there. Since then, I have the privilege to work in some of the most transformative technologies in the industry, where I have contributed some of that. I've been 25 years working in Ericsson, having different roles, heading different position, but mainly around the intersection between technology, sales and product development. So in addition to technology competence or experience that Anders mentioned, I have a global sales experience. I have the privilege also to work and live in different places in Latin America, Europe and also China. So I'd like to combine these 2 things, not -- my goal is to put Enea in the forefront of the technology, but not for the sake of technology, having very clear sight of the business and the return of investments of those.

Anders Lidbeck

executive
#3

So Osvaldo why did you choose to join Enea?

Osvaldo Aldao

executive
#4

The very first thing that I saw when I look at Enea was this company making the transformation from a service-led into a product-centric. So then I saw that with my background of technical and sales roles, this was a perfect opportunity for me to contribute in that journey. For me to shape the vision about where we want to go to scale the operation in order to have reusability, and to be able to have tools in the hands of our salespeople to grow that business is an amazing opportunity. So I saw that I can make a contribution. Also, what I really liked was that I saw this small medium company from Sweden with headquarters in Stockholm, but with a truly global operation scale. We have customers all around the world. I connect very well to my broad understanding of different cultures and doing business in different ways. So I saw that's something that also resonate with me. And finally, the focus that Anders mentioned about cybersecurity and network performance. I truly believe that in security, privacy and reliability as the foundation for modern communications. So I think for me, it's not only buzzwords. I think it's essential for the business or the communications that we rely on today and also the generations coming where my kids even depend on. So for me, Enea is an inspiring mission, and it's also an opportunity to get progress with scale.

Anders Lidbeck

executive
#5

Yes. Thank you for that, Osvaldo and thank you for being here.

Osvaldo Aldao

executive
#6

Thank you.

Anders Lidbeck

executive
#7

So before you take control, where I give you control now. So please invite us into our product portfolio with focus on cybersecurity and also you're in charge of the crash course in SS7.

Osvaldo Aldao

executive
#8

Okay. There will be some questions at the end, maybe. So thank you very much. Let's getting started into Enea. I think one probably good way to start to understand who we are is basically to look at which are the markets that we serve, so which are our customers. So I will start with that angle. So Enea is today serving 3 main market segments. The first one is the telecom operators. Telecom operators are the ones building infrastructure and delivering the service to end users like mobile communications. The second segment is called Communications Platform as a Service. It's a complicated name, but this is a group of players or companies that they play a role in between telecom operators and enterprise. In this domain, we call enterprise, we call it brands. But basically, it's about when PostNord send you a message that you can pick up your package. The CPaaS vendors are the ones that are routing that message from PostNord into all telecom operators. And the third segment here is the cybersecurity vendors and large enterprise. Here, what we do is we embed our technology into the products that many cybersecurity companies they have. Something around 70 companies are taking our technology and embedding this into either for creating or delivering a product or service or for their own use as we will see some examples. So that's the market we serve. If we now have a look into our portfolio, and I know this is one of the difficult slides because we gave a full picture about what we are doing. I will try to break it down into pieces and see if I can pick up some examples to make it easier to understand. If we start on the top left part, this is what our customers they call the brain of the network. The reason why they call it brain is because this is where we have the definition of the users and the services that the user is allowed to do. If you look down there is this traffic management. This is where we accelerate network. So we help our customers to make sure that their networks perform better than anyone else, that the content like a video, it downloads faster than if you don't have this solution. Then if we move top on the more right side, then you see in the middle network security. This is where -- it's important SS7 because this is where we have our firewalls, where we protect the signaling, we protect the control channels of communications and also we protect users about scam with messages. So we filter those messages, so it doesn't reach the user. And then you see the embedded security. That is the technology that we do not sell directly to the end user, but we sell it to companies that integrate that into their own products and services. And then finally, you see operating systems. So operating system is something that Anders mentioned in the introduction. It has been in the company for many, many years. It has been the operating system from mobile phones and radio stations. Today, some of those radio base stations are still in production, and we are having royalties because we are expanding some of that installed base with our public reference, Ericsson and Nokia. So that is the portfolio. Let me now pick up one example just to see if I can break this into something more easy to understand. Every time that I need to pick up one example that is easy, I pick up my mother. So -- but let's suppose that my mother sent me a message. So when my mother connects to the network, she gets authenticated. So basically, the data management access part, look at her number, what are the services that she's allowed to do. And then she will send me a message. So she will send me a text message. That text message will go into our firewalls. The firewalls will scan in real time based on AI technology. They will scan the URL, let's say that she put a URL for a link to watch something. So even if I trust my mother, our firewalls will scan that and will check that there is no malware or malicious link. And then if I click that link and I start to watch that video, the video -- the traffic management will optimize the video delivery. So we'll make sure that I have the best customer experience to download this and to watch this movie. And if this will not be a text message, but it will be an e-mail that is sent to my company, then I think, of course, that will go into this embedded security because embedded security will scan the e-mail that I get in my computer, and then it will look like if that doesn't contain any malware, for instance. That is where we are looking at the scanning threats. And of course, as you need mobility and connectivity, I think OS is there for -- in the radio base stations providing that connectivity. Hope that it was a little bit more easier or clear. Working in technology, I have two roles. One is to deliver results. The other one is to explain to my mother, why her phone doesn't work. Then moving into connecting the 2 things that I have -- we have seen so far. We look at the market we serve, we look at the portfolio. So very quickly here, on the left side, basically, that is the portfolio that we sell to telecom operators. In the middle network security, we sell it to both telecom operators and CPaaS providers. While embedded security, we sell it mainly to both cybersecurity vendors and large enterprise. And of course, operating systems, we are selling only to large enterprise like Ericsson, Nokia, Fujitsu. Those are using this part of the portfolio. Now switching gears into another layer of information that we want to put on, it's the concept of business focus areas. When we talk to the market, we talk to you, we try to describe the dynamics, the underlying dynamics of our portfolio or business. We'll try to describe it under something that is called business focus areas. So what is that? Well, it's basically the whole portfolio, except the operating systems. So we are carving out the operating systems. We know that, that is in a trajectory that we have expected declines in sales. And that's why we don't take it into when we talk about business focus areas where we look at where we see growth. And to describe that type of growth, we see it in 2 motions, in 2 dynamics, and that's what we have. When we talk about business focus areas, we talk about networks and securities. And the reason why we split these 2 things is because they have followed different dynamics. They follow different CAGRs or growth in the market. And that's why we want to measure and we want to compare what we are doing in these 2 parts of the portfolio. Now I will go one step further into the -- what we are doing on the right side here on the security side. To describe that, I would like to start again with the angle of where we are in terms of our market position. So today, we are serving a global scale. As I mentioned before, we are in more than 80 countries where we are serving more than 100 operators or networks. We serve Tier 1 operators in -- here in the Nordics, you will hear soon from Telia, but we also have Tier 1 players in North America in all key markets. And we have these 3 segments that I mentioned before. In terms of operation, we run an operation at a very large scale. We have 2.4 billion subscriptions or users that are getting protected by our software. In order to give that protection, we analyze this huge number of events. So we process real-time analysis around 50 billion events that we continuously scan, look at for threats and block if there is any kind of threat to the user. To do that, we work on a global intel base. So basically, we have a combination of experts plus AI tools that we combined in order to build this type of global analysis about where are the threats and where are the incoming threats for our country. In addition to that, we are a reference, we write in specifications of -- in the specific bodies, there is an organization called GSMA. That is where we write our recommendation specifications. But in addition to that, we are also referenced in the broader media. When the media need to cover topics around security for communications, typically, we are providing insights of that. That's about the market -- our market presence or credentials. If we switch gears into our portfolio, our portfolio is designed to protect 3 things, protect users, people, countries and data. So if we look at -- start with people, imagine having at your control or your disposal, the experts and the technology to be able to protect your privacy. What we do here is like a digital shield. We protect users for that important information like your location information that you are not here today, photographies can be set. It's not leakage to other players, other actors, especially foreign actors trying to attack some country networks. We also do a protection about that you don't receive fake calls. That is something you will hear from my colleagues later, CLI spoofing, but it's basically manipulation of the number to pretend that it's the bank that is calling you instead of an international call for another country. And we also protect users from receiving fake messages or messages that include a threat like a link to a malicious malware that can do an exfiltration of data. We also -- when we talk about protecting companies, it's very much about protecting the borders. What we do with our firewalls is to protect the international calls coming to our country. The reason why we are doing this is because networks are a matter of national security. So there are actors that are attacking and we have received even state-sponsored attacks into some other countries. And what we do here is to have a line of defense where we protect all incoming traffic into any of the country where we serve with our firewalls. So what we do here is to protect that traffic doesn't leakage information or that doesn't create like a following location for a specific user or implanting some malware in your phone. We will come back to a little bit more details about that. And then finally is data. And what we do here is if you think in the environment of the company, I guess everyone gives take for granted that you cannot only protect the perimeter in your companies because if someone wants to get in, most likely will get in. So what we have to do is to have the mechanism inside the network to be able to detect if there is an activity and to be able to follow up that. And that's what we do when we talk about threat detection. What we do is to understand if there is any actor coming inside the network and implanting some kind of software that it could be a malware, that it can be dormant for a while, but then after that, we'll extract data. So we have the technology here to be able to detect those type of events. So now I would like to tell you a little bit that kind of story, and this is more an introduction for what Anders mentioned before about this SS7. Maybe you recognize the young guys in the picture. And probably you recognize them from the Apple Computer Company. But do you know what they have done before that. That was not the first start-up that they did. The first start-up they did was something that was called blue box back in the 70s. Blue box was a DTMF or it was a box that it was a very simple thing. It was just sending tons into a speaker. And what this was doing basically is to hijack the mobile telephony network. So this was the very first case where they have seen a flow in the telephony system. And it was basically because at that time, you could have an international call -- the international calls were pretty expensive. But they wanted to prove that they could call someone in Europe for free. And what they did was to use this blue box, which was sending these tones in the line, and you could hear the tones. And that was routing information. It was establishing the call to the other end. So with this, they managed to call for free the pop. And you can probably follow this interview. I think there's a very funny story where they have been trying to wake up the pop because they -- he was sleeping at that time. And then they realized it was a fake call. But this was the very first time that it was proven that how easy was to manipulate those networks. And of course, they realized that, that flow was very much based on that, that control communication was sent in the channel where you could listen that. With the introduction of mobile phones back in the '90s, this technology came, which was called outbound control, which was basically to split these 2 things. On one channel, you send the information like the control information to establish the call, on the other channel, you send the voice. And with that, we have introduced this what we call SS7. SS7 is done for signaling system #7 and it's the way to be able to tell to the other end that I need to call this number. And then the call gets routed to that. It's like -- in an IP network, it's like the IP address that is sent into this specific channel. The reason why this is important for us to be able to explain to you what -- a little bit more what we do is because this is not a problem from the 90s. This is very much here now. What I'm showing to you is a letter sent from Senator Ron Wyden to the Biden administration that highlights the risk that the U.S. has today in terms of threats and attacks into U.S. citizens from foreign actors, which is recognized as a national security matter because there have been incidents where foreign actors have followed the location of people in the U.S. And that is something that is not only happening in that part of the world. It's also something that is this type of events, unfortunately, happened all over. And this is very much the problem that we are trying to solve. We are providing the technology to be able to protect users about against these type of attacks. You could wonder why we have so many of these attacks and why no one has done anything before. And the reason is because if you look back, Anders would like to talk about this global village. Telecom world was a global village. It was based on trust. So the interconnection between operator was based on trust and it was only in a very small community that those connections have been done. Over the years, I think there was more and more players coming in. And with that, a lot of more threats. But it was never considered from the very beginning in the design of these networks that you need to have a firewall for signaling to protect about this. So today what we are doing is basically to provide that to the market. We provide the technology to protect these communications. And we are one of the few in the industry that has a very strong position to provide this SS7 firewalls. Let's listen now. I think Anders and I, we have met Nicolas. So let's -- I will invite you to listen directly from him what he thinks about this. [Presentation]

Anders Lidbeck

executive
#9

Sorry for that. Let's try to see this from the beginning.

Nicolas Passaquin

attendee
#10

Hi, everyone. When you're in security there is always a lot of opportunities to address. So what is then the current state. The whole digitalization is going in a speed that increases on a daily basis. If you go back like a decade in time, it feels like a few months at that time, it's like 2 days today, especially having in mind that the AI is coming in with full effect or full force. AI is definitely something that you can use in order to become smarter or become quicker on your end. But definitely, AI is something that also the threat actor will use against you potentially. There is also some other things going on, the geopolitical situation, and as I said, the speed of digitalization also brings forward something when I talk to my colleagues in the industries, new vulnerabilities and that brings forward these vulnerabilities in a speed or in pace that has not been seen before, which is also seen that when a vulnerability becomes public until it actually gets exploited, the time period is just getting shorter and shorter. When you are a telco, you also among a lot of other things need to look into the signaling security side, the SS7, the diameter, the GRx, et cetera. And we have, during the last years, been together with Enea, been revisiting, updating, tweaking this area in order for us to be able to detect potential threats a lot earlier. We have also been subscribing to the threat intel feeds. This feeds actually makes us a lot smarter because these feeds might be new threats coming in, might be new indicators of compromise, and it's not only coming from one source, but it's actually coming from a global source of companies and in the end, it's all about the speed that gives us an advantage to be able to react. The teams that has been part of this program, they are constantly saying that they really appreciate the deep professionalism for sure, in a company like Enea, but also the ways of working. The ways of challenging us to say, hey, having in mind the new threats coming in or having in mind the new models, you need to look into the people dimension and potentially you need to educate the people in certain areas. You might need to update the processes or in the end, you might need to do the tuning of the tooling in a new way. And this also has -- this always has been done with a good spirit. And the spirit comes the whole way from the sales organization into the engineering and also in a few cases that we have had also in Enea's R&D team. I wish a great continuation of the day and thanks also for a great cooperation.

Anders Lidbeck

executive
#11

We have a number of customer interviews that we've done, and we've done them online, and we were going to present them here instead of inviting the customer here. But Osvaldo, what's your main takeaway from this interview with Nicolas?

Osvaldo Aldao

executive
#12

Very good. So Nicolas began explaining that industries are getting digitalized and that mobile telephony is the backbone for many of those digitalizations. He also pointed that the number of threats are increasing. And this is also something that we see. What we do together with Telia is to do an analysis of all the incoming traffic and to scan for threats. We bring that data, we compare it to a global view we have about all threats. And then we block all traffic in all Nordic operations. So we are deploying our firewalls around the 6 operations that they have around the Nordics. So we are providing that protection to Telia. And what he also said is that there is a need to keep tools updated, education and fine-tuning processes because what we see is that this number of threats and issues are scaling. And that type of need for security is also something that we see not only in Telia, but we see it all around the world. And that connects very well also to what we see market analysts are describing. So if we have a look on the outlook for next year, what you -- our job is basically to understand and identify where we see pockets of growth. And as you see here on this, there is a significant growth in the intersection between telecom and security. That's why we are positioned and serving that market. There is also growth in the IT security that we do through our embedded solution. And we have growth also related to communication service providers that will also drive some of our AI tools that we use in our firewalls. And this is what you see here in this summary. So from those pockets of growth, we also see that there are market drivers that they are putting growth or possibility for us to do more in these domains. And how we bring this into our strategy for growth, this is what we do here. So of course, we want to capitalize or to use the opportunity to be able to grow in our business in both network security. And the way we do this is based on this strategy, which is based on 3 pillars. We call it the EEE. The first one is about enhance. Enhance is very much to improve the existing product offerings by looking into how we can do things better and also to work very close to customers in order to get feedback about what are the things that they want to do next. And here, you see things like the CLI protection on the voice farewell to prevent fake calls. You will see the threat detections in malwares in DPI, but also you will see this cyber defense that later [ jump here ] we're talking in government. The next one is about expand. And what it means is that based on our strong foothold that we have today what we want is to expand into an adjacent area. That will be an adjacent market or it could be an adjacent solution. So basically, we are topping up what we are doing today with extra functionalities and offering. And what we see then is mainly around the introduction of AI for a number of things. One is about what I described before, the message, classification and filtering. We also introduced AI in the signaling networks in order to understand what is the reputation of that communication coming from another country where we do a reputation base and we analyze on AI patterns what is the type of threat coming associated with that information. And also, we want to take a step forward into -- we have been embedding our technology into some of the other companies that they are putting this into some products. We also want to take one step into giving a product ready-made solution for cyber defense, mainly targeting the managed service -- managed security service providers. And then in evolve, it's not only about what is the business we have here now. We also want to invest, do cautious investments into areas where we see growth and potential evolution in the future. And that is things like very much the -- what I mentioned before, you should not only protect a defense line. We should also have something that is -- we call it Zero Trust protection, which is basically also to have the mechanism inside the signaling network to be able to detect if there is a player, how -- what the player is doing and how to protect you even behind these firewalls. Also, we think that there is a unification needed in order to be done in IT versus telecom when we meet our customers. Typically, when we meet the CSOS organizations, they are really good at IT security. Telecom has been a little bit more a niche or more secret. So what we are doing here is to bring our threat detection from the telecom world into the IT space. And by that, what we will do is basically to bring Enea more visible into the CSOS organizations, which are very good, well versed in IT securities, but not so much in telecom. And of course, that is something that I think Jean-Pierre will talk later, which is that we are doubling down with our capabilities on AI-based for classification of traffic. And that is because there is a number of technologies coming along the way. One is TLS 1.3, which is a complete encryption, total blind of the communication. And what we are doing is basically to be one step ahead to be able to work with AI to classify that traffic before that happened. Those 3 Es, I think, is setting up for us the agenda for where we see the potential for expanding where we are doing today, growing from our current business and also evolving this for future offerings.

Anders Lidbeck

executive
#13

Thank you, Osvaldo.

Osvaldo Aldao

executive
#14

My pleasure.

Anders Lidbeck

executive
#15

So now I would like to invite John Hughes up on stage. John has worked more than 10 years in the firewall security business. He is coming here from Dublin, Ireland, where we are running that operation and John, how come you ended up in the security business when your family is all into horses?

John Hughes

executive
#16

Yes, I suppose my family might laugh at that question because whilst I grew up loving horses and my family loved horses, I'm not so sure the same could be said from the horses loving me, and I think that was especially the case when I grew to be over 2 meters tall. It just -- I needed to pursue a different passion. I had an uncle involved in the electronic industry around the same time as Steve Jobs and Wozniak founded a company in the U.S. called Telematics and successfully sold it and that intrigued me, and 25 years or more later, as I got into the mobile telecom industry and now into security, I still find it fascinating, and it's something that excites me and drives me every day.

Anders Lidbeck

executive
#17

Yes. Thank you for making that choice, and I can really sympathize with the horses. So you know the ins and the outs of this business, but you're also in coming to Enea through an acquisition. Can you please share some views and thoughts on how it is to come into Enea through an acquisition?

John Hughes

executive
#18

Sure. So at the time, we were -- I suppose we were looking around as a management team for an acquirer. We had plenty of different options available to us. We've spoken to a number of different companies. And I have to say, we were excited about the prospect of joining Enea. We felt it was time for us to take that next step. We needed the solid foundation that Enea brings. And, yes, it was everyone in the leadership team thought it was a really good choice. I remember it being said to us that it's okay if 1 plus 1 equals 2. Our biggest fear was that the value and integrity of what we had built up over many years might be diluted if it was private equity or something else. And I just thought the synergies, and it's true today. We thought it at the time. It's true today, 3 years later, the synergies between what we were doing and what Enea does really solidified what we were doing.

Anders Lidbeck

executive
#19

So that's great to hear. Thank you for that, John. So I'll give you the control. Please take us through your business group.

John Hughes

executive
#20

Thank you. So as Anders said, John Houghes. I am based in Dublin, Ireland, where AdaptiveMobile was originally founded over 20 years ago. I've been with Adaptive for 18, almost 19 years now, joining Enea just approximately 3 years ago. As Osvaldo described a little earlier, the markets that we serve, so that my business group is referred to as the network security business group and the markets we serve are the telecoms operators and the CPaaS players, Communications Platform as a Service players. Just to quickly describe again what CPaaS is. It's -- they are the companies that enable businesses to send messages. So it's your dentist wanting to send you your appointment reminder, but it's also at much larger scale. In the U.S. recently, the CPaaS providers were used extensively by political campaigns to send messages at mass and at scale. Our value proposition. So we're focused on cybersecurity in telecoms. And specifically, what we primarily do is we sell firewalls to protect the operators and CPaaS networks. So we have messaging firewalls for operators, messaging firewalls for CPaaS, and there is distinctions between the two, which is why we decided to separate them. And then there's signaling firewalls voice and 5G. And maybe I'll just briefly touch on signaling to again explain how I explain it at the dinner table, which is -- with my family, which is if you imagine the postal network, and letters are coming in and out to the main sorting office. Well, the core network of the operator is like that sorting office. And we sit right in the heart of that, and we're checking that the source of the messages or the letters -- the messages are legitimate. We're checking that the destination is legitimate. We're checking that the person is paying the right price for what they're sending, et cetera, et cetera. So we're validating all of the signaling flows as they fly through the network in real time, and the same time with voice and now moving into 5G. How we go to market, primarily direct to our customers, the operators and CPaaS. In some cases, indirect, that would mostly be in the cases where we need a local in-country partner. Maybe they hold the contract or the operator wants us to work with a local partner, and then we've got monetization partners, and I'll come back to this in a little bit. I'll explain further what this means later in my presentation. The majority of our go-to-market is perpetual license sales to operators and to CPaaS and then term and volume-based pricing with CPaaS. Quick breakdown of the network security organization. The 125 number there, I won't go through all of this. You can see it there for yourself. The 125 number does not include the corporate functions in gray. And also, there's some shared sales resources with another business group, the Network Performance business group because we are selling to the same customer and there's upsell and cross-sell opportunities that we take advantage of in that way. Okay. So we are world leaders in security. We're very well known in the industry, and we built that up at AdaptiveMobile, and we've spent the last 3 years transpositioning that name and that brand and that reputation to Enea, and I think quite successfully. Signaling, messaging and 5G will be what we're best known for. Voice, which I mentioned, is more of a greenfield market, and we're building our name in that space, and that's a target for us. And threat intelligence is another area that we would be very well known for. It's a big differentiator for us from our competition. So this threat intelligence is a community-based knowledge that we gather from all of our customers around the world, and we can use it to enhance the security of networks in the Americas when we see something happening in the APAC region and vice versa. And then we're building and continue to build AI and ML into our offerings to enable the experience for the customers. And as I said, we sit in the heart of the network. We're known as a very stable solution, very fast. It needs to be real time. Like in milliseconds, we need to be making these decisions and delivering the messages. And we've won many industry awards over the years in recognizing our leadership position in this space, most recent one from the [ Kaleido ] industry analyst team. So I'll change flow for just a second, and I'd like to talk about some use cases with our customers. where we're deployed and how they use us. And just before I do, to set the scene, I think everyone knows that your mobile phone, it's your identity, everything we do these days is on our mobile phone. Scam calls and scam texts are, I would call, a scourge on society. They are a real pain and people just hate them. But more than that, they cause a lot of damage. 25% of the global population has been defrauded and the numbers they have been defrauded are astronomical in the trillions. 78% of the people in this survey that I'm quoting from experienced at least one scam in the last year. And I think that's even probably underestimating. I think everyone here in the room has probably experienced many more than that in recent times. And where these scams proliferate, it's primarily on your phone, through calls and through text messages at 61% and 58% respectively. So it's a big, big problem that we're trying to solve here and that the industry is trying to solve. And a good example of where we've done this in the last few years is in the Middle East. It's with Telecom Egypt. So we were working with Telecom Egypt and they came to us and explained that they had a big problem. This is actually how we got into the voice protection space. They said they had a big problem in the voice space. They were coming under huge pressure from the regulator locally. They were seeing subscribers move off their network, turning off their network and their brand and reputation was being badly damaged. It was in tatters and they needed a solution and needed it fast. So they explained what their problem was. We had built our software recently to be more flexible and configurable. So we said, let's see what we can do. We'll do a proof of concept for you. So we did that proof of concept within weeks, and it worked. And what was a little bit scary about, it was the customer who said we want to leave that proof of concept in the network. And that's -- that was a little bit nerve-racking because, like I said, we need to do this at scale with full redundancy and -- but it worked and we built the redundancy in over time. 8% is something we realized afterwards, and we were able to show them proof of 8% of the voice traffic on their network was scam, so that's almost 1 in 10 of the calls on their network. When we solved this problem, we reduced that down to less than 1% very quickly. And then over time, we reduced it down even further. And of course, that brought back trust in their network. It meant people were using the voice channel. They're making phone calls more because now they could trust them. They weren't looking at the number and going, I'm not answering that. They were looking at the number and going, yes, I think I can trust this. I'm going to talk to this person now and that increases revenue for the operator. Another example, switching to messaging this time. So in Africa, we work with a Tier 1 operator group in Africa. And what we do with them is we provide a service that we call gray route or this is back to the A2P monetization. So how will I describe this? So gray routs, if we go back to our post-office analogy, this is where someone tries to send a letter and pay for a national standpoint. They're sending international and they're able to bypass the checks in the post office. Similarly, in the mobile operator, if somebody is trying to send a message from a person to a person, they might be charged a cheaper rate. But if it's a business sending to a person, they will be charged a higher rate. And what's very common is that the businesses are using channels that use the lower rates or no rate at all. And operators are losing out to the tune of millions as a result of this. So what do we do? We put our firewalls into the network, and we corral that traffic. We force that traffic down the correct routes. And again, all in real time, all in milliseconds. And by doing so, the operators are now charging their customers at the correct rates, which naturally drives up their revenue. So this is a -- it's a real no-brainer for the operators. And we're uniquely positioned to do that as a firewall vendor. This particular operator group in Africa are saving over $50 million per annum by doing this. So there's a real strong business case here for this solution. Our key competition. So on the left-hand side, you'll see the messaging. So our key competitors. Proofpoint would probably be the strongest one in the messaging space. Proofpoint are well known for e-mail protection. They have division formerly Cloudmark that were acquired and they're still working as Cloudmark within Proofpoint. They will be our key competition in this space. They're mainly focused in North America. And that's probably where we see the biggest threat from them because if they're selling to the North American market, they can claim that we're American. But I think we have a strong base, a much stronger base than Proofpoint in North America, and I think that serves us well. And I think we've proven ourselves over the years in that space. Mobileum and Cellusys work in this space also -- sorry, I should say Proofpoint don't really focus on that monetization piece, the A2P piece that I mentioned before. They're more focused on the anti-spam protection. So we have a wider breadth of offerings than Proofpoint. Similarly, Mobileum and Cellusys, they are probably more known for working in the A2P monetization space, application to person monetization space, more so than the anti-spam or anti-scam area. On the signaling side, again, I'll mention Mobileum. Mobileum probably are strongest competitor on this side. They have an equal portfolio or similar to us. They ran into difficulties earlier this year. So they're Indian backed, U.S. headquartered and they actually went into Chapter 11 earlier this year. They've come back from it, but it certainly shook them and shook the confidence of some of their customers. So you'll see in the opportunity section that this is something we're looking to target and focus on. And then Cellusys, a small Irish company. It's probably better known for roaming, steering in the mobile space and also signaling, more so than messaging. But they are also a competitor along with [ SecGen ]. [ SecGen ], they were resurrected from a company that was on the U.S. embargo list because of the Russian links. Cellusys and [ SecGen ] will probably be bigger competitors in the Tier 2 and lower markets, whereas Mobileum work with us in the Tier 1 space. Okay? So why do we win? We win because we don't provide -- security is not a tick box service. A lot of our competitors like to go in and deliver solutions that comply with the standards, comply with the protocols. But as we say to our customers, the bad actors don't care about standards. We go beyond the standard. We want to provide them a full hardened security solution, and I think our customers respect that. We provide a consolidated firewall. So what does that mean that that's a firewall that covers everything from 2G to 5G and voice and messaging, and it's all on one platform. So it's one piece of software, one screen to administrate everything, one reporting module that's a competitive advantage we have over all of our competitors. They generally have to deploy different software for different solutions. We're a public company. This is even more important for us this year because that's seen as offering stability and trustworthiness. Mobileum, one of the reasons they went into Chapter 11 was because of some scandals, fraud-related scandals on a takeover that occurred there a number of years ago. Companies trust us, and they can see it, and we're transparent like we're being today. Research. We have many experts built up over many years. And Osvaldo mentioned, the GSMA, the standard body that governs the telecoms industry. Many of our experts have actually contributed to the writing of the standards, in particular, in the signaling space. And I think that proves that we are the thought leaders in this space, and we're always trying to be innovative and predict the next step and stay ahead of the game. Intelligence that I mentioned, a lot of the operators, they need this intelligence. They want to know what's happening. And they just don't have the people to invest the time. They also don't have a global view something that we were able to give them, we were able to tell them what's going on in the industry and how well are they performing? Because it's -- like security is when is the job done. We're able to give them kind of feedback on what's happening elsewhere in the world and how you're performing and we give them insights and advice in that area as well. And then we have a very flexible platform. We invested in the last few years on this flexibility. And you saw with Telecom Egypt, how that helped us to react very quickly. Security needs that. This is why we did it. The bad actors, their full-time job is to get around our firewalls. Their full-time job is to exploit the mobile networks. That's what we're there to do. We need a very flexible platform where we can react quickly to help our customers to close off those vulnerabilities in real time. Okay. So we're going to hear from one of our customers just now. And just before you do, I'll just quickly explain, give some background and context. So I mentioned anti-spam, messaging abuse protection. I would describe this as unwanted traffic. Nobody wants this. Nobody wants those scam hitting your inbox. That's one type of messaging. On the right-hand side, you'll see commercial messaging. This is where we enforce -- so in certain countries, there are certain regulations around how you can message customers. So you can't send marketing messages at 2:00 a.m., for example, and many more use cases. We help customers enforce those regulatory controls, but also their own terms and conditions to make sure customers are abiding by the terms and conditions. So in the middle, you've got the gray route controls, which I mentioned. So this is wanted traffic. The customer -- like I want to know my DHL message that my package is arriving tomorrow or my dentist appointment or whatever it might be. This is wanted traffic, but the senders, and it's not always the brands, it can be the aggregators in the middle that are trying to find the cheapest routes. And sometimes they use routes they shouldn't be using to reduce cost. So this is the gray routs traffic, and we help monetize and enforce that. tyntec, German company. They are deployed globally there, a CPaaS player. But we partner with them specifically around this gray routs area. And now I'll hand over to their CTO, Thorsten Trapp, and he'll tell you a little bit about how Enea work with them.

Thorsten Trapp

attendee
#21

Thank you very much for having me. Absolutely. I am Thorsten Trapp. I'm the co-founder of tyntec. tyntec is 22 years old now. We founded in 2002 and are deeply rooted in the messaging industry. We are currently, I would say, SMS wholesale aggregator plus a CPaaS player. In the last 5 years, we've seen different contradicting movements in the market. We've seen the rise of the over-the-top players for the like of WhatsApp, Viber, Telegram, now Google's RCS is trying to play a role in this area as well. So all the over-the-top players are putting pressure on the classical telecommunications infrastructure play, like as Skype did in the voice world, it did the mobile -- it did hit the mobile operators hard. And this happens with messaging currently or since the last 5 years. In the last few years, where the enterprise solutions of the over-the-top players gotten professional, RCS for Business, WhatsApp for Business, Telegram, Viber, the pressure increased. But the pressure also increased from the monetization point of view of mobile network operators. They still need to invest into their networks. They need to build it up, and they need to make sure that their revenue actually stays there and is not completely replaced by over-the-top messengers that they are not able to monetize. In the end, the operators are writing RFPs or calling us directly when it comes to monetization because historically, we've been transporting the traffic of all the big hyperscalers to them, so they know us. And a natural conversation is to talk to the guys who have the traffic anyway to ask what can you do to monetize it better because they are also aware that there is leakage in their revenue. So the discussion is normally, okay, we have a network. You guys have the traffic. Can you help us to do this? And this normally goes in a way that we need to monitor all aspects of the network because the leakage comes from their network setup, which has grown over the last 20 years, and this is all not, I would say, not picture perfect. So when the operator comes in, there certainly is this commercial thing. The questions are, hey, are you connected directly to the Tier 1s, which we are. So all big hyperscalers are directly connected to us. We are connected to the aggregator ecosystem. So that is not the problem. This is what we bring to the table. The operators inner working, meaning their own network, their own security issues is done by a, I would say, consultancy job of us. We look into the network diagrams. We look into the gateways they have. We look into the signaling path for the different technologies. And this is when we bring Enea because most of the time, there is an underlying network security issue that needs to be fixed first before you can begin the monetization job. This comes with a 3GPP home router. So all the technical stuff, the carriers might have and might not be at the right point in the network. So this has to be redone. And in some cases, also basic network security needs to be implemented. And this is where Enea comes into play because they are specializing in security, they are specializing in monetization. They aren't an aggregator. So therefore, they cannot fulfill the other part of the equation. And this is why the partnership of us works that great because we bring the connectivity, the customers and in the end the network, but Enea brings the technology to secure the network so that the entire business case works. So basically, we've we are firewall agnostic as a company. This is how it started off. We were working what either the carrier has or what the carrier's demands were. And it turned out that Enea was just the best fit to our business because we can build that business case together as partners to the operator so that there is no extra charge for it. So it's one thing. And Enea has this portfolio of services that works for us, so there's cyber signaling security, there is monetization aspects, there's preemptive security in place. So all those modules are there. And depending on what the operator has and needs, we can stick that solution tailored for that operator and for that specific business together with Enea quite easy because they have it in their own portfolio. We wanted a partner that has the entire portfolio together with us to [ not ] need to manage to other suppliers because that will end up in an operational nightmare. So for us, Enea is the natural go-to option when we have new prospects or when there is security projects in play that we have to take a look, but Enea is our go-to partner since I think 6 years now.

John Hughes

executive
#22

Okay. So this is a space I am really passionate about. It's a space I really believe, and it's something we've moved into in the last number of years. It's important for our growth. For tyntec and for our customers, it's an easy sell. There's a clear return on investment. What Thorsten didn't explain there is that they put a business case together for the operators, and they've got certain terms and conditions that they need the operator to sign up to. And then they walk in and they put the business case down and they say, we will pay you for this business. And then any profits above that, tyntec will take and we will take a share of. And that's almost a no-brainer for the operators. They're being given money upfront and a guarantee of profits upfront for the duration of the contract. So there's a clear ROI. It's revenue share, as I said, between tyntec and Enea. And it's recurring. For me, this is something I am trying to do, striving to do all the time is build our recurring base and then time to market, it's all fully in our control and tyntec's control. So we can get it deployed really quickly, get the solution up and running really quickly and start generating that revenue. So the market outlook, the mark-to-market dynamics. So we're seeing an increase in regulatory influence in messaging and signaling and that's globally. In particular, in Europe, we're seeing a lot of activity in this space. And the regulators are finally acting and enforcing operators to put solutions in place. Voice fraud, as I said, it's prolific. It's a huge problem, and it's causing big issues for operators and for people who have mobile phones, which is very much everyone. And then we're seeing multiple communication channels in the RCS space. So this is a rich communication services. So if you haven't seen this on your phone already, Apple have adopted a Google technology called RCS, rich communication services. It's essentially SMS boosted up so that you can get much richer content on your SMS channel. And Apple have finally come into this space alongside Google and we're going to see that change the market dynamic. Challenges. Biggest challenge for us is the evolving threat landscape. So you heard Nicolas from Telia earlier saying that the AI is everywhere. All you need to do is Google it, ask AI, and it will do it for you these days. You don't need to be -- it's not just the governments or a big business or the really smart teenager in his bedroom who are doing these things anymore. It's anyone can do it. If you want to do it, you can figure out how to do it in 10 minutes on the Internet. And we have to keep up with that and actually stay ahead of it. Opportunities, the CPaaS A2P space is expected to grow, and it's expected to grow further because of this adoption by Apple of those rich communication services, which will enhance rich media messaging and we have solutions available for that today. Voice firewall opportunities, as I said, driven by consumers' demands and by regulators. And then we have opportunities to replace competitors that are financially challenged globally. So finally, objectives for 2025. So we want to be recognized as the leading messaging firewall for rich media messaging, and we want to continue to invest in AI/ML in the messaging space. And I think we're really well positioned. We're the only vendor in the CPaaS space. We have many CPaaS customers already and our competitors in that area are playing catch-up. So we want to really solidify that. As per point two, we want to consolidate our position in the CPaaS space with the addition of more Tier 1 logos and more monetization partners such as tyntec. We want to be the leader in voice CLI spoofing. As I said earlier, it's a greenfield segment for us, and we really want to seize on that now and make it known that this is our space. We know what we're doing here and take control of this greenfield segment. We want to position Enea's single firewall. So this one single firewall, it's a big competitive advantage we have. It's operationally cheaper for customers to use just one firewall as Thorsten said, instead of having to go out to tender on multiple different solutions to solve one problem, and we can do that today. And then we want to focus on driving recurring revenue growth and build on that stable and predictable base. And we want to do that because that will position us strongly to achieve the double-digit growth that we're striving for and that we want to achieve. And that's it for me, Anders.

Anders Lidbeck

executive
#23

Thank you so much, John. Thank you. So I now want to invite Jean-Pierre from Paris, running our Embedded Security Business Group.

Jean-Pierre Coury

executive
#24

Hello. [Foreign Language] I'm happy to be here today.

Anders Lidbeck

executive
#25

But you're actually not from Paris, are you?

Jean-Pierre Coury

executive
#26

Actually not. Actually, I left to Paris in 2,000, like 24 years, but I left to France in 1996 to be precise.

Anders Lidbeck

executive
#27

So Jean-Pierre told me the story many times, but I think it's a fascinating story, and I would like you to share it with a crowd here. So tell me, how do you come to France?

Jean-Pierre Coury

executive
#28

Yes. So my story, so I'm originally Lebanese. And I finished my studies in Lebanon and I told my parents, I want to discover the world. I want to live my dream. I have a lot of dreams. They said, my lovely parents, this is all our economics, we give you -- we give it to you. And so go ahead, live your dreams and we give you our values, your education, but we will be always here with you. So I look to economics when I left to France in 1996, I tried to do like the budget forecasted for 5 years. It's 5 years and after per year, so I learned how to manage my own budget. And I figured out one thing that I can't call my friends every day. It's so expensive. 1996, no Internet, no phones, nothing. And in my budget, I was only allowed to call them once a month. I was struggling, as you know, probably the Lebanese community that spread over the world. So I have a lot of cousins, brothers. I need to connect to them. I was so frustrated every day, I was feeling this pain inside of me. So I decided that day that first year said, I ask myself, what I want to do for the future? How can I be useful for this community? How can connect better the people, connecting people. So I study networking and telecommunication in Toulouse together. I was very involved in the Motorola Airbus, all my professors coming from this world. And I said, my driver in the professional life, it's to work all the time to help people to connect together and in a safer world, safer communication, good communication. So I started my professional word or experience, working for Nortel Networks, Canadian company, UMTS, GPLS, it was a dream for me. I was living my dream. And after switching to voice over IP to our French start-ups in 2003, where, again, voice over IP, we can call for cheap every day. I was calling my mom every day saying, hey, it's cheap, we can connect together. And in 2010, I decided to move to Qosmos in the Deep Packet Inspection world because now we know how to connect but how we can enable more actually security for this connection? How we can make the world more secure? And 2016 we were acquired by Enea. And we announced it publicly at the end of transaction at December 13, which is a very good day for Enea. I think it's a public order. I don't know if it is the Lighting Day or Santa Lucia. Yes, which is my mom's name, by the way. So I -- it was the first good sign for me that, oh, I'm enjoying -- I will enjoy this company in a very good day.

Anders Lidbeck

executive
#29

So how was that being acquired and you're still here?

Jean-Pierre Coury

executive
#30

We were scared. I was scared at the beginning when Anders arrived and my French CEO, my new [ strategic ] CEO, it was like a super discovery. We discovered a company that they care about people. They care about technology. They care about us. And they said, we are with us, and we are relying on you. We trust you. This is the magic word when you said, we trust you and we want you to give the best of yourself. So Enea opened up not only for me, for Qosmos at that time, a wider actually way to do our career differently, more global coverage, global mindset. And at the end, the trust. We are trusted in Enea. We feel trusted and supported.

Anders Lidbeck

executive
#31

I'm happy to hear, Jean-Pierre, and I'm happy to have you here. So please take control and take us through your business unit.

Jean-Pierre Coury

executive
#32

Thank you. So Embedded Security. So as Osvaldo mentioned before, we are targeting the cybersecurity vendors and large enterprises. Let's discover what we do actually our value proposition today. So we are the leader in the embedded security space. And also now we can say also in threat detection because we launched this product last year. So last September, we go public with it. And of course, we want -- we are the expert in the network protocols and applications. And in our -- my business group, we have also the old Enea, the operating system as well, portfolio and business. How we are going to market? We are going direct and indirect, but we are talking again and again the network and security solution vendors. And you will see late later on, our customers actually video talking about us and how we operate with them. And of course, we have the cloud service providers. We are seeing more and more need in this space. And last, we have also a use case, more oriented cyber defense with the government, where we have directly dealing with the government today to secure their internal infrastructure. So this is -- I wanted to share with you the story actually about this project where we are really proud of it. It's 1 of the 7 magnificent today. We won it and we landed this year. So the story is this -- what is behind -- the drivers behind this project. So the customer called us. He told us, we know you very good Enea Qosmos. And I have issues. I have pains everywhere. So we try to discover the pain that our customer is facing. So the first is related to the malware detection. It doesn't have our DPI. So the accuracy issues, he can detect in a very good way actually the malwares in his network. So he has more and more threat exposure and after he said, "I need to have more visibility. I don't have enough visibility of my network. I need you guys." Performance, he did try to build it in-house alone. He didn't succeed to scale. So he said, you need to help me on the performance side and the flexibility, we are known as OEM, of course, DPI supplier, but he knows also that we are using also -- we have also threat detection capabilities using the same DPI engine for both actually features, visibility and detection, also threat detection. And of course, on the TCO side, on the -- he was -- the cost is very high if you do it himself, and he can't. It's not sustainable on the long term. So he has a lot of issues. He said, help me, please, Enea. And we started working with him and to upgrade. Of course, he was expecting a very good quality of the product, efficient, of course. And on the cost side, it should also fit with his expectations. So we work on with this customer or partner today. And this is what we did. Of course, we have improved this visibility. This is our main feature about the [ OMDPI]. So better coverage, precision and inside everything into the whole area. And on the functionality side, we have deep packet inspection and threat detection in a single solution. So for him, it's easy. I have only one supplier. I can supply both things. And of course, flexibility. Today, we also have, as you know, probably in our portfolio, we have definite add-ons. And he said, today, I need this one. I will integrate it in your solution. It is very flexible and this is what I like. And strong customer support. We are delivering local support, and this is one of our key strengths actually. We want to be close to our customers to understand their challenges and their pains at the end of the day. And he did work with us and he was amazed by the strong support that we delivered. Lower TCO comparing to him, he said, it's exactly what we need to see. It's a win-win partnership. And of course, Enea is known as a global DPI supplier. We are the leader. So we have also a strong position also saying this is our product and it is recognized for the past 20 years now, and we want to deal with the leader of the market. So talking about being the leader of the market, of course, we have competitions. I selected 2 competitors today. We have the first one, [indiscernible]. They're competing with us only on pricing because they don't have any other feature in their product. So only hitting us -- trying to hitting us on or competing with us on the pricing. Well, they're pushing price-based selling, and we are pushing the value-based selling because we have more value to create for our customers. And in some situation, we have also the in-house DPI, we saw threat detection solutions. Where the customer for reason, probably internal reasons, he tries to do it in-house. So he starts doing in-house, using probably sometimes open source solution. But few years after when he got issues and challenges, and if you want to move to cybersecurity space, you need to update actually more frequently the signatures. When I say signatures, all you have to hear it like WhatsApp, Facebook, all this, we call it signatures or protocols. So he's calling us and saying I need now to integrate you guys. But still, we are not running from day 1 because he will take more time to discuss with us. And probably in some situations, some use cases, he will just keep it the open source of his in-house development and that's it. So now we want to move to our customer video. So our customers, Zscaler. Zscaler is a U.S. cloud-based security company. And they are doing more than $2 billion and very significant actually year-over-year increase. And they integrated our product, actually, the DPI product for the past 10 years plus. I will let you hear what he is saying about us.

Stefan Sebastian

attendee
#33

Sure. My name is Stefan Sebastian. I am the Director of Product Management at Zscaler, looking after our ZIA product line with a particular emphasis on firewall IPS controls and DNS controls. Yes. Zscaler is very much focused on cybersecurity, providing cybersecurity for the Global 2000 target customers. So that's the top 2,000 largest corporate entities globally. We're pretty successful at reaching that G2K focus on the Fortune 500 as well and generally trend towards the largest customers. We're just over $2 billion. We're a publicly traded company. So this is public information, so $2 billion per year in annual revenue. Our growth is pretty pronounced. You can look at some of that. And we're there to largely secure the traffic proceeding outbound and make sure that this -- the users, IoT and OT devices and various different entities around the corporation are secure. Well, overall, there's a couple of key reasons. First is the visibility and exposure that Qosmos Enea has. So the depth and the breadth of the application identification, of course, was one of the primary concerns for us. And the fact that Qosmos Enea is a market leader made sure that it wasn't just Zscaler. Yes, we're a big company, but it's not just Zscaler asking for application identifications or providing validation points, it's a whole body of customers that are making demands of Enea, and we're benefiting by those demands. So if there's a detection problem, it's not just Zscaler identifying that detection problem, it's other customers saying, this detection has to be better and Zscaler gaining the benefit of that. So the reputation, the visibility that Qosmos has and the fact that it has a significant footprint all factored into our decision-making with Qosmos. This is one of the real pleasures that we have is working with folks at Enea. I mean I'm not sure if I should name them, but folks like [ JP, Danny ]. The team that we work with is very responsive to our needs. And what I can do as a guy working on the product side, I can reach out to those folks at Enea. They're very accessible. They provide answers in a timely manner. And I can interrogate them on what should we be doing, how can we get more out of the solution. And they're pretty responsive. So they not only coach me, but they're very accessible to my engineering team.

Jean-Pierre Coury

executive
#34

Just So a few words about Zscaler. As you can see, it's very important how we are seeing from our customers like we are very robust. We are also a kind of extension of his own team, engineering team. So this is what we value purpose. So we live their pains and we give them the solution for it. So -- and of course, the strong support that we are delivering. So it's a long learning journey with our partners. We bring our vision, our road map, and we ask for the feedback, and we build it for the future. And what Stefan is saying is we have the CNO positioning, the horizontal positioning where all the customers are taking benefits for it. So we do only products. We don't have services. We have one product. We share it on the DPI side with our customers, and we understand the requirements and we build it based on the customers feedback. So we are the key differentiators that we have already talked about the -- we are specialized in the DPI and threat detection, and this is unique today in the market. One supplier delivering both features. We have to grow the signature base. As you can see here, the numbers application metadata, it's huge that you are, and you continue investing in this. Of course, on the AI side, this is [ dispense ] of Enea. It's not only embedded security actually that is the delivering. So we are working jointly with other business group, headed by Osvaldo on this AI strategy. And we are actually preparing ourselves for the encryption, and I'll talk probably later about it. But this is one of our solid AI strategy today, and we are sharing with our customers to validate our approach, and we are getting great feedback from our partners. And as I said, it's very driven by our customers. So we need to be all the time driven our roadmap based on our customers' feedback and our vision to the future. So we have also the challenges. Before I talk about challenges, I will talk about the market dynamics. So as I started in the beginning, the story about the one project what you did. It is what we are seeing today is a general tendency for cloud service providers to build that in-house security solution. And to do that, they need us. And this is what we are seeing. And we are -- and also we are seeing another trend, which is today the security solutions is seen as a function, the concept of adding a security function from a third party. And this is what we are helping our customers to do. So this is exactly in our positioning today. And this MSSP or the system integrator, this is what Osvaldo tried to touch a little bit about it at the beginning. What you are seeing today, it's more and more of these actors, they want to have this combined actually technology, the DPI or you can call it DPI or probes. Today, we have it another form factor from our initial DPI, plus the anomaly detection. So we want -- we are seeing this also trend today as well. As for challenges, so the main one today, it's the encryption. Osvaldo talked about it. I'll also be talking about it on the DPI side. If the traffic is completely blind, then the customer, the visibility will disappear. And this is the question that we are having. So we are preparing ourselves for it. And it could be a challenge, a threat, but also we are seeing this as an opportunity if we do it, of course, in the right way. So we're seeing these challenges and I'm seeing this as an opportunity because you have the technology, we're thinking about it, and we are also validating to our customers today to prepare ourselves for this challenge if it's happening next year. And of course, the second one is linked to our pricing, pricing to our main competitor, where he wants to only to compete on the pricing while we are pushing the value-based pricing. In terms of opportunities, we are seeing great actual opportunities around the threat detection. As you can see, the market is on the cybersecurity or the IT or the SASE security that Osvaldo showed, we saw the numbers for the future. We want to be part of it. And we're seeing the opportunities also there. And T1 cloud service providers, in-house security solution. This is what you're seeing as opportunities as well. We continue seeing it. And of course, in cyber defense, we continue our investment to support cyber defense projects as well. Our objective for next year, we want to increase our market share in cybersecurity market. We have everything. We know the market is here. We have the products and we have good signals from our partners and also the market. We want to be also part of -- in the government space and cyber defense, we want to strengthen our position next year. And of course, the change related to the encryption, we're seeing as challenge, but as an opportunity, as I said before, and we will be with our customers, reassuring them and creating more value for them. And we want to explore this market fourth objective, the MSSP market. We already started some trials today. We want to learn before actually move on to production. So we learn in this process from our customers, our proof of concepts in 2025. And we've the same approach that we did with the threat detection. We launched with our customers. We learn together and we launch the product. And this is how we want to do on this MSSP. We are seeing a very good sign today, and we'll continue doing it next year. And of course, we are looking to deliver a double-digit growth. Thank you.

Anders Lidbeck

executive
#35

Thank you, Jean-Pierre. Just 2 seconds. We have a question from the online people. And that's if we partner in security, to strengthen our offering when we go to market. And I hope we've answered that question, both on John side and with Jean-Pierre. Jean-Pierre's part of his business is to embed the technology in other companies' solution for them to sell it to the market. So that's a very clear form of partnering. Jean-Pierre, I'm not sure that you have convinced the people of what you're actually selling. On the T-shirts, some of you have a T-shirt with glasses. And with those glasses, you can look into the traffic, that's the analogy. But we're not selling glasses. Are we? So you have one more minute to actually explain what it is that you're selling. And the other thing -- the other question I want to ask you is that I know that you really love selling to small startups in Silicon Valley, small deals, mushroom, planting mushoons. That's the second question. And you have 4 minutes to wrap up.

Jean-Pierre Coury

executive
#36

Thank you, Anders. This is a big challenge. On the highways, you have what you call the radar. If you go speed or your speed, he will control your speed. So we are the radar of the highways, what you call it the Internet, the packets. So our product, the building block that they're giving to our customers, he will count all the packets. He will get more visibility. If it's Facebook packets, then we classify it in good sessions. This is what this is the visibility we say about the network, about the highways of the network. It's -- so this is what you are delivering as a component to our customer. He needs to have full visibility of his network. So I need to have the best radar in the market. And this is what we are delivering today, deliver this visibility so he can develop his own use case based on real visibility of his network.

Anders Lidbeck

executive
#37

That's what Zscaler is doing.

Jean-Pierre Coury

executive
#38

Exactly. Exactly. So Zscaler, they didn't develop in-house. He said, you are the leader, give me this OEM or this SDK, they integrate it. They have full visibility and after they build their own use case and secure the network. About the second question, Enea, we are a technology company, so we like to be always connected to the new technology. Being in the U.S., we have a strong installed base in the U.S. We're also talking to the startups. And what we like about startups, they want -- they're dreaming of course, about the future, but they're very connected to the tomorrow's actually new technology or new features. And they are a fast learning thinking. So -- and you want to be part of it. So we're working on them on the technical strategy. We learn from them, they learn from us. And of course, as you know, this word of start-ups, one day, a good start-ups will be acquired by the biggest one, and we want to be part of this. So this is my answer for your question, Anders.

Anders Lidbeck

executive
#39

Yes. It's a great way to scale our business. And you have been successful in at least 2 or 3 cases where we sold the start-ups. They implemented this in their product. The start-up was acquired by a big company in the U.S. That company took this product with our technology inside and sold it through their channels. And all of a sudden, our revenues more than doubled or ten-folded. No, so it's a great strategy. So thank you for that, Jean-Pierre. And now it's time to stretch your legs for a 15-minute coffee break. I'm pretty sure it's right behind you. So thank you for that. [Break]

Anders Lidbeck

executive
#40

All right. I'm sorry to interrupt the break. But I have had some time to speak with some of you guys and understand that there are actually more questions than I have anticipated in the program. So we need to make room for that. And to be able to do that, we need to start. And I guess the coffee will be standing behind you guys. So if you need more coffee that's feel free to grab one. So do you remember the Swedish television show from the '80s, Pojken med guldbyxorna. Yes. Oh, yes, one of my favorites. So you're saying that we have a couple of them here in the room. Yes. I can imagine. We actually have -- you just met one of them, Jean-Pierre. And for the one of you speaking English, and I think there is -- it's difficult to translate Pojken med guldbyxorna, but it's a small kid who one day woke up and understood that he could just pull money out of his pants. And that was the plot. So with those words, I would like to invite our own golden man, Ammar Hamdan from our Dubai office.

Ammar Hamdan

executive
#41

Thank you, Anders. Hello, everyone.

Anders Lidbeck

executive
#42

Hello. So Ammar, you've worked from the U.S. to Dubai and spent many years not only with Enea, but also with Openwave and Motorola. Can you tell me a bit about your background?

Ammar Hamdan

executive
#43

Yes. So I was very technical, working with Motorola, Qualcomm between New York, San Diego, California, then got an opportunity to -- and the challenge to go to Dubai. So moved back to the Middle East, managed many large-scale projects in the ICT sector before coming to Openwave and back to the telco industry. So I've been with the company now 13 years in multiple roles and working with our customers really.

Anders Lidbeck

executive
#44

Yes. And doing a great job. So you're also coming -- you came into Enea through an acquisition. What was your sort of take on that?

Ammar Hamdan

executive
#45

It was scary. We woke up in the morning, you're acquired, acquired Enea, what's going to happen. But I have to say, after these years, Enea does acquisitions in a very different way. Enea acquires a company, this is a successful company. Let it go on and grow and collaborate and integrate with the rest of the business units. Now why is that important? The key people within the companies that have been acquired, you'll see them still there, growing and growing Enea as a company. So it's been going very well.

Anders Lidbeck

executive
#46

Yes. I'm really happy to hear that, and I'm happy to have you here.

Ammar Hamdan

executive
#47

Thank you.

Anders Lidbeck

executive
#48

So. I'll give you control, but you're actually -- then you're not selling Jean-Pierre's product. You're responsible for EMEA and APAC, but not selling Jean-Pierre's product.

Ammar Hamdan

executive
#49

That is correct. So just to differentiate, we sell also traffic management, we call DPI. We have different markets that we're selling to that was explained earlier in the day. We're selling over to telecom operators, which are service providers all across the globe, and we're selling full-scale solutions. We're understanding what their problem is. We're understanding what the challenge is, and we're coming back with a solution that fits into their networks. My friend, Jean-Pierre, sells the component that is sold into vendors that come up with a solution, the Zscalers and others. So we work in quite different markets, but cooperate a lot. So what are we focused on? My name is Ammar Hamdan, I'm based in Dubai and across the world because we're traveling almost every week and responsible for selling our focus area, networks and security. Now I speak with customers on a weekly basis. What we care about is understanding what challenges they have. What we want to know is how we can help them to give value. That is extremely important, and I keep repeating that. Now what are the challenges with operators? We talk today about risks, cybersecurity risks, tracing, tracking, messaging. That's huge. Every one of us could be affected with that personally. I'm scared when I think about it for my family. But operators have to think a little bit more. Their risks go to infrastructure risks, how much are they paying on their infrastructure. Their risks go on to revenue loss. We talked about messaging protection. We talked about how John can help us in that. As one operator told me, SMS revenue is top line revenue with almost 0 cost. You would do anything to protect that, and that's what we help with. They also have issues with customer churn and customer acquisition. So our solutions fit in to help service providers across the board. So let's listen to what customers think about us in network security. Let's start off with that. [Presentation]

Ammar Hamdan

executive
#50

Okay. So we heard from one of our customers, extremely important messages within this, in my opinion. You heard that we are there to help them solve their issues, their challenges. We are there and we are adaptable, flexible. We're listening to our customers. We're coming back with value. We are there not only for the risks of yesterday, not for the risks of today, but the risks that were coming tomorrow, extremely important. This is an ever-evolving area. Technology is changing by the day. Risks are changing by the day. Signatures are changing by the day. We are there to always be ahead and be able to help our customers. We talked about Telecom Egypt before, but Telecom Egypt was very important. It was a risk. Customer came to us and they said, our VIPs, high-profile individuals within the country are being spoofed. You know what that means? Any one of you sitting there, you get a call, I'm the Prime Minister. Do this. It's a national security. Now our team was there working with them, understanding their network and was able to come up with a solution within weeks to help them prevent, stop that risk. And we are working with them now on the second phase. We're working with them on other security threats. And why are they working with us? They trust us. We help them in the time of need, our solution was adaptable, and we were able to do that. Another customer in the Middle East for a number of years, we had a crash course on SS7 today. We started with them with SS7. We went on, did GTP-C. We did diameter. Over 11 million potential threats are blocked monthly. They are using our threat intelligence unit. That's big. Once voice threats came up, what did they do? They came to Enea. We trust you guys, give us voice. 150,000 potential threats are blocked daily. We're growing our business with them. We started off -- this is a group. We started off with the first operator. We grew what we are doing with them. We're growing the use cases. We're already in the second operator and the third operator. We're landing and we're expanding. Now let's shift gears a little bit. Talk about the other threats. Talk about the revenue loss, increased spend, customer churn and acquisition. What is happening over there? 5G is coming in, excellent. Operator has to spend more with revenue. We have to help them be able to manage their spend, protect their existing revenues, acquire new customers and prevent churn. Our solutions go in and help operators with that. This is another operator. We announced it in Q3 '24. They have a big problem. Their ISP costs are high. We've been talking for years about our solutions and optimization in RAN and others. We're doing it here on the ISP side. They have $25 to $35 per mega to transfer data to their customers. It's unsustainable. They came to us. We worked with them. We found a solution. We are saving them over $3 million a year. So there's a direct return of investment on the solution. Not only that, we're helping improve the quality of experience for their customers. We are helping them with the same solution to go into new use cases in fraud detection, zero-rated fraud detection and reseller detection. This is the first operator within a group. We're already talking to the second and the third. We are growing that business. This one I'm very excited about. It's a little different. We have a customer for a number of years. They want to be the best operator giving quality of experience to their customers in country. For many years, you look at Ookla test, you look at other tests, they are #1. Is that enough? No. They wanted to ensure that they can get to their customers, give them coverage anywhere in the country. They can't build a network around to do that. So they said, we'll go to space. We'll go with Starlink. And they provided connectivity to their users using Starlink. Now what is the problem there? It's expensive. How am I going to give connectivity to all my customers with very expensive tariffs, it doesn't work. So they needed a solution to ensure that they can give critical connectivity to their users at affordable prices. Our traffic management solution comes in to help create packages catered for critical communication using Starlink across the country while improving the quality of experience. Again, a solution to a problem that an operator has where we step in to help. Why this is exciting? Where we started with the first operator. If we look in the press, Starlink has already signed up with 6 different operators, and this will continue to grow. So we have agility within our solutions, and we keep growing that. Now, where are we going? I have a lot of opportunities across the region. I'm not going to give any numbers definitely today, but it's exciting. We are sitting with the operators, finding, listening and coming up with value, and I will continue to do value.

Anders Lidbeck

executive
#51

Perfect. Thank you, Ammar. So just to be clear here also, the last 2 opportunities you talked about were actually traffic management based.

Ammar Hamdan

executive
#52

Correct.

Anders Lidbeck

executive
#53

So I know that's one of your favorite products that we haven't talked about in the earlier presentations, but that if you read the press release 2 days ago, it was also a traffic management win. Tell us why traffic management is such a great product?

Ammar Hamdan

executive
#54

Traffic management, I describe it as a toolbox we give to operators and tell them, you can use this toolbox to solve issues you have. You can improve quality of experience. You can do savings on your infrastructure and sweat out your network. You can understand your customer behavior. We're talking about AI. AI is a very important subject. Everyone is talking about it. Our solution is sitting in a place in the network where we can see and understand the quality of experience, what traffic and where customers are going to personas to give the operator the means to better quality of experience, to give the operator the means to operate their network, to give the operator the means to understand their customers' persona to give differentiated packages to their customers and grow their customer base. So I just -- it works.

Anders Lidbeck

executive
#55

It's works. It's a product for land and expand.

Ammar Hamdan

executive
#56

Definitely.

Anders Lidbeck

executive
#57

It's actually where the expression comes from. Just stay here for a second. So the -- we've honed in during this afternoon on our security business. So Jean-Pierre and John talked about the security business. But with Enea, you also get traffic management. Think about that. You have this whole security business and you have the traffic management business.

Ammar Hamdan

executive
#58

May I add one thing, Anders? I apologize. The spread of our technology differentiates us than others for a specific reason. We've been talking about messaging this morning. We talked about SMS. We talked about how we're helping protect revenue. But it's also moving to WhatsApp business, it's moving to RCS. It's moving -- technology is moving. Our product portfolio spans across and is able to complement each other to always be there and give the solution to our operators. I apologize.

Anders Lidbeck

executive
#59

No, don't apologize. But this is like buying -- you know what else you get with Enea, the cybersecurity portfolio, the traffic management, the WiFi opportunities, the OSE opportunities that we closed the deal with yesterday, Jean-Pierre closed that deal. We announced it this morning. Ammar closed the deal we announced a couple of days ago. But what do we get more than this? We don't have time to talk about it, but we also get our Stratum product on which we closed in the beginning of the quarter, the biggest deal in modern Enea history, a $27 million recurring business for the coming 3 years, of which $22 million are committed. So, it's in the bank. The $22 million is not in the bank because it's not paid yet, but it's signed. But at the end of this, between $22 million and $27 million will be in the bank account of Enea. So Enea is not only cybersecurity. It's not only cybersecurity and traffic management of Wi-Fi and Stratum. It's the whole thing, which I think is so amazing, but it also puts requirement on managing this company because we can't do everything, then the result will be little. We take it step by step. But when we meet again in a few years, don't be surprised if some of these other products have taken the lead. Ammar, what do you say about this?

Ammar Hamdan

executive
#60

I can say there's a market.

Anders Lidbeck

executive
#61

But you're not allowed to sell it.

Ammar Hamdan

executive
#62

Soon.

Anders Lidbeck

executive
#63

Soon, you will.

Ammar Hamdan

executive
#64

Yes.

Anders Lidbeck

executive
#65

Let's hope so. So you know the decision here. We had some issues with it a couple of years ago. We focused on the resource. We managed to deliver the product so that the customer were so happy or satisfied, they signed this. And gradually, we might open this up going forward. But this is not the focus of today. I just felt that we can't have a Capital Markets Day and not talk about the biggest deal in the modern history of Enea. So with that, thank you so much, Ammar.

Ammar Hamdan

executive
#66

Thank you.

Anders Lidbeck

executive
#67

I would actually like to now spend a few minutes on questions to Osvaldo, John, Jean-Pierre and Ammar. And of course, if you have a question for me, before we jump into the numbers. So who has the mic? Anyone? Yes, we have Fredrik. Let's -- and Osvaldo, Ammar, John Jean-Pierre, please. We'll open up another window for questions at the wrap-up, but let's take some of the questions now.

Fredrik Lithell

analyst
#68

Fredrik Lithell from Handelsbanken. I'm not sure if this is working, but I'm trying anyhow. I was curious, I think, John, correct me if I'm wrong, on the firewall side, you talked about the gray traffic on the ATP and the CPaaS ecosystem and the gray traffic has been talked about for anyhow the last 10 years, and it has been a big problem. So lifting and giving a little bit more perspective on how you have during this time period, been able to control it and push it back or minimize it? Or is it still equally a big problem? Is it still the same volumes? Are you just chasing the bad guys over and over again? Or how does it work?

John Hughes

executive
#69

So can you hear me okay? Yes. So the problem has been around for many years. It's something we've been securing with some of our customers for all those years. But it's continually a problem. So trying to decide how best to describe this. The ecosystem from the brand, so the enterprise who wants to send the message originally to the CPaaS who are in the middle and then out to the operator and the subscriber. There are actually tens and tens of what we call aggregators, smaller companies sitting in the middle of that flow. And their costs squeezed. So they're trying to find the cheapest way to deliver that to the end user to get their $0.01 maybe per message out of the flow. Those are the companies that I suppose we can call the problem. They're the main problem. They pop up, they disappear. They're continually looking for profits. And they're the ones that are difficult to control. So the problem doesn't go away. It's continuous because they're always under pressure to make money. As I said, new ones pop up, they're trying to make money. Everyone is offering the best deal. Come with us, we'll give you the best deal for delivering your messages. And in actual fact, the originator, the brand, by the time their message is delivered, they have no idea how it got there because of all these different players in the ecosystem. And there's least cost routing is a way that this is done. But like I said, there's no control over how these messages go. So by the time it gets delivered, maybe there's one bad egg in the flow that's delivering it on a route that they shouldn't deliver it on, and that's where we step in. So it's still a problem. It's been a problem for many years. The example I gave earlier of $50 million per annum, that's with a customer that we've been with for 8 to 10 years, and the problem is still there. It's not going away as far as we can tell for the foreseeable future.

Anders Lidbeck

executive
#70

Thank you, John.

Simon Granath

analyst
#71

Simon Granath here with ABG. So I had a question on AdaptiveMobile. You've had this business since 2021. You have only recently given us detailed revenue breakdown on at least how much your cybersecurity revenue comprised. But -- and the latest growth rates have certainly been strong, but my understanding is that the growth rates were a little bit more lukewarm in 2022, 2023. So could you talk a little bit what has happened over the past 12 months? Has something happened in the market, something happened with long sales cycles or something with the product offering?

John Hughes

executive
#72

Well, again, I would go back. There's just a few different dynamics at play. One of them is what we just talked about. We didn't focus on this grey route business, the ATP monetization or the acquisition. Actually before I became Head the business group in '22. It's something I immediately felt passionate about. I knew a lot about this space, and I wanted to go after that. So that's something that has certainly helped us to grow our revenues. And as I said, it helped us build that solid foundation of recurring revenues from which we can go after other business. And then on top of that, yes, we're seeing growth in the Middle East, in particular. We saw some really good deals, upsell deals to existing customers in the signaling space. And that's also helped to drive our growth over the last 12 to 24 months.

Anders Lidbeck

executive
#73

Thank you, John. So there's....

Unknown Attendee

attendee
#74

There is a saying in the world of telecom, if not in overall life, centralize what you can, distribute what you must. And that, I think we can take to the art of security also. And that makes the question, where do you draw the line? Should security in the longer run be embedded very, very far out in the network in order to assure security also within the smaller loops, so to say?

John Hughes

executive
#75

I can start on this one, and I might hand over...

Anders Lidbeck

executive
#76

So you answer and we have to...

John Hughes

executive
#77

Yes, sure. I might hand over to Osvaldo. The -- our solutions today, they sit at the edge. So we're depending on the solution that it is, but predominantly at the edge. So we're looking at interconnect traffic and trying to protect this. We actually launched at MWC last year a solution we refer to as our overlay solution. And that's to address exactly the point you just made. And what we're looking to do there is put probes on different elements of the network, distributed probes on different elements of the network, which report back centrally to say if there's anomalies or vulnerabilities because especially when we move into 5G with network slicing, the trust and the threats don't just come from external sources, like when we move into 5G, they can come from within. So yes, I hope that answers your question.

Anders Lidbeck

executive
#78

Thank you, John. So let's take -- well, one final question here.

Daniel Landberg

analyst
#79

Daniel Landberg, Handelsbanken. A question to Osvaldo. You mentioned that your solution is embedded in many other companies' security products, and you talked also about the potential that you will bring your own more comprehensive product, I guess, to the end market instead of an embedded product to others. Is that correct, understood? And can you give us any time frame and any indication of what markets you will go after?

Osvaldo Aldao

executive
#80

Yes. Okay. Very good. Thank you for the question. That's correct. So, so far, what we have done is to embed our technology into some companies like Jean-Pierre mentioned the case of Zscaler. In that case, Zscaler had to take our capabilities and to put it in their own code and to put it in the product and to go to market. What we are exploring is to go directly to market with some product that we call it non-code, basically that they can manage service provider -- security service providers can take on without having to do any coding. So basically, it's a way for us to built -- to expand to an adjacent market that we've seen that there is potential.

Anders Lidbeck

executive
#81

Okay. Great. So thank you all, and thank you for the questions. And again, we'll open up the next window at the end of the day. Great. So now we'll switch gear, and we'll talk about the numbers a bit. And to do that, I would like to invite first Ulf up here. Ulf is our CEO, and many of you have met him. Ulf also joined Enea through an acquisition. And I guess you can see a pattern here. We managed to secure some great people. We make them comfortable in Enea. And sometimes we promote them, but more important, we managed to keep them working for Enea and contributing to our success. So Ulf, can you please share a bit about your background and how you felt being acquired by Enea?

Ulf Stigberg

executive
#82

Sure. Thank you, Anders. And a little bit on my background. I spent some 10 years with Ericsson at different financial positions, but also as a design engineer in the beginning. And maybe on the interesting side, also as a sales manager for Ericsson test equipment. So I end up with spending a whole day in the back seat of a car in Singapore trying to convince Singtel to buy our Ericsson's test equipment. So I have spanned responsibilities within the Ericsson, but mostly within the financials. In the beginning of 2000, I was part of a founding team founding Aptilo Networks. That was later acquired by Enea in 2020. And Aptilo was growing from 0 to SEK 120 million in turnover in 20 years. So it was a long ride, but very interesting. And how was it to be acquired? Yes. I think Enea was very professional in the M&A process, and we felt like that we had very clear objectives and targets and the integration process went very smooth. And it felt like Aptilo actually found a home for the company within the Enea and where both competence and profitability could be utilized in the Enea Group. And I think that is really key coming in as an acquired company to feel like we actually can contribute in many different ways.

Anders Lidbeck

executive
#83

All right. Thank you for that, Ulf, and it's really great to have you here as well. So please take us through our first 9 months 2024.

Ulf Stigberg

executive
#84

Thank you. So a little bit of a revisit to the 9 months report. We reported a net sales of SEK 653 million with an EBITDA margin of 33%, ended up with a net debt of SEK 170 million. For the 9 months, we reported SEK 2.34 earnings per share, and we had an operating cash flow of SEK 176 million. On the cost side, we spent 24% in relation to sales on R&D activities. which is very important for, of course, our future sales that we have products that are competitive. Diving down a little bit more on the sales side. The 9 months sales is divided by these different shares. And as you can see, Security and Network have similar size in terms of volume, but we have a little bit different characteristics. The security area has a higher share of recurring revenue and higher share of secured business already in the beginning, whilst the network area has a more scalable model with the larger projects, but with a very high margin. So they are a little bit different in terms of financial characteristics. Looking at the growth, we had double-digit growth in our focus areas for the first 9 months. In total, 11% organic year-to-year growth for the first 9 months. And looking at the Security business, we could end with 13% year-over-year growth for the 9 months. And this is achieved through solid customer base, continued to order capacity and functionality upgrades. So the base is actually very important, and we see that our current customers want to expand in capacity as well as functionality and buy upgrades. Of course, new products generate new business, and we have a high share of recurring revenue, which gives a stable, predictable revenue within this area. For the Network business, we can see 9% growth -- year-over-year growth for the first 9 months. And despite challenging data in this area, posting a 9 months growth is just shy of double digit. So we are very proud of that figure as well. And here as well, we have a very loyal customer base and also with capacity upgrades has helped us to meet this growth figure. And we can actually also tick off several new customer wins over the last 6 months. So a combination of current customer base and new wins with new customers. This leaves us with a stable 33% adjusted EBITDA margin over the 9 months. And as you can see, it varies a little bit between the quarters, but the red line here indicates the rolling 12 months EBITDA figure. And we are just now at just shy of 35%, 33%. And this is achieved by, of course, growth on the top line, but also as a result of the changes we made and introduced in 2023. The operational expenses was reduced by some SEK 30 million, leaving the operational spend going from SEK 390 million to SEK 368 million. But the total cost is a combination of, of course, change in depreciations and amortizations as well as change in the capitalization of R&D expenses. Looking at gross margin and EBITDA margin, we are quite stable on a 78% gross margin. And the share of gross margin is distributed as in the left pie chart here. So we're quite equal in gross margin between Security and Networks and the gross margin contributed from OS is about 9%. And the gross margin or the cost of sales in Enea is mainly built on cost for staff. So we are quite fixed in that perspective in cost of sales. That means that the gross margin will vary between, if the combination of sales is more software or if we have recurring revenue. Security area, slightly above the company level with the embedded security solutions, which are a little bit higher in gross margin. And the gross margin will vary depending on revenue mix. If you have a better or higher mix of software, it will report a higher gross margin. Then looking at the EBITDA. So the total EBITDA is distributed between the segments like this, higher on Security. And the big takeaway here is that 80% -- 83% of the total EBITDA is generated from our focus areas. So looking back 10 years, you could say that OS was probably 83% of the total at least. But now we're actually in the other way around. A little bit on the cash flow. This is from the Q3 report. We reported a profit before tax on SEK 44 million, and we have a quite large share of noncash items of SEK 135 million. That takes us to SEK 176 million in operational cash flow. That cash is spent on, first of all, investments in our products, capitalized R&D, but also as -- with the buyback program that we're buying back shares from the market. And finally, we have made some amortization. So the 9 months in total cash flow was reported SEK 12 million positive.

Anders Lidbeck

executive
#85

Yes. I think -- so we'll again come back to this at the wrap-up. But our business now, there are some challenges and opportunities in the business also from a financial perspective. It's not only about reporting the numbers. It's also about managing the business from a financial and legal perspective, and you are in charge of that. So can you share some details of that, please?

Ulf Stigberg

executive
#86

Yes. We have worked quite a lot with the control of cash collection. And I think we have made some progress. I think it's really important to always leave Enea with some leverage to keep the leverage in a customer relation until the project is finalized. Many -- in many cultures, we are exposed to in the world, the negotiation doesn't stop when you sign the agreement. The negotiation stops at payment. And this is a very interesting and very challenging environment, but exposed to that environment, you need to keep leverage in the delivery to be able to actually put some effort to and put something against the arguments that, yes, customer try to postpone payment.

Anders Lidbeck

executive
#87

Yes. And this is actually also when you look at the slide. So what we've done is we've used SEK 100 million of our cash surplus to improve the net debt position and buy back shares during the first 9 months of the year.

Ulf Stigberg

executive
#88

Correct.

Anders Lidbeck

executive
#89

Yes. That a company that spreads cash flows. That's for sure. All right. Thank you, Ulf.

Ulf Stigberg

executive
#90

Thank you.

Anders Lidbeck

executive
#91

You will be coming back later. But for now, I would like to say thank you, Ulf.

Ulf Stigberg

executive
#92

Thank you.

Anders Lidbeck

executive
#93

And I would like to dive a bit deeper into what's under the hood of these numbers because one thing is, again, you see the rolling 12 months, you see the quarterly numbers, but you need to look at it, I think, on a slightly bigger -- from -- with a slightly bigger perspective. And the biggest perspective is, of course, that 10 years ago, this didn't exist. Only the OS part existed, 9% of our business that we have discussed today existed. That's kind of interesting. And to help me drill down into these numbers, I would like to invite, Hakan. Hakan joined Enea back in 2009, and he worked with me as a corporate development and later CFO when we were trying to sort of find this business beyond OS. But you've left Enea, Hakan. Why are you here?

Hakan Rippe

attendee
#94

Well, since I left end of '18, I moved back from the U.S. to Sweden with my family and been doing a little bit of CFO work and the consulting. And since 1 year, roughly, I'm back supporting Enea on a consulting basis, and that feels actually great.

Anders Lidbeck

executive
#95

Yes. Isn't it great to see Jean-Pierre, Ammar, Osvaldo and all these people, John delivering these beautiful results.

Hakan Rippe

attendee
#96

Oh yes. I mean it's absolutely fantastic. And this is, again, a journey that was initiated many years ago. And still, it's only -- we're early in the big book of Enea, early chapters still.

Anders Lidbeck

executive
#97

Yes. Why do you think we've managed to keep all these great people?

Hakan Rippe

attendee
#98

Well, I think there are a couple of reasons here. First, the acquisitions that we made. I mean, clearly, it's about the people. On both ends, I'd say, good people is sort of a must, and we have great people both in the acquisitions and on the sort of receiving end here. And second, I'd say the business model or the integration model whereas -- and we touched upon that, whereas centralize what you must to distribute what you can. That was a good one or if it was -- okay. But the point is this, what we do is we balance a global sort of integration model with keeping strength and leverage on the local level. And that balance, I think, is very important. Third, I'd like to just add the culture. The people here are very loyal, loyal to the customers, loyal to each other. And there's also a great performance culture. These guys like to win, and that's also what I think is really important, why this works.

Anders Lidbeck

executive
#99

I couldn't agree more. So let's jump into the numbers actually. And we skip this because we don't have time. And here, I know that you have something to add, Hakan.

Hakan Rippe

attendee
#100

Yes. I mean when you look at the -- a couple of comments then to all this. Looking at the top line of Enea, you might look at this, this is a sort of flat business, but there is lots of action going on underneath the surface. So we've had a declining legacy OS business, clearly a challenging 2023. We have sort of repositioned the efforts in the focus areas, adjusted investments and putting more efforts into cybersecurity and also accelerated recurring revenue, and we'll touch upon this. Clearly, the dilution from the declining OS business is coming to an end. Think about this that in '15, this was a SEK 331 million revenue business. Now it's single digit as a percentage of the total net sales. Looking at the focus area, as we have heard, we had double-digit growth in these focus areas for both '22 and year-to-date '24. Again, '23 was a little bit rougher, but very important. We had 15% recurring revenue growth within the focus areas during that period. And over all this time period, we have had been propelled by the security growth. So you have an average growth rate here of 14% during this 2.75 years. Now not all revenues are equal. We've been touching a couple of times here on the recurring revenue. You know all about recurring revenue, repetitive revenues that are typically time-based, such as subscriptions, support and maintenance, time-based production license, those type of things. During the 3 years, Enea's recurring revenues has grown from 50% of total net sales to 70%, and that's remarkable. Now remember that the Legacy business is 100% recurring. So how do we do in the focus areas? Well, we've been growing recurring revenues at an annual growth rate of 12%, and the share is now up to 67% in these focus areas. Looking at this on the annual picture, the total annual recurring revenue of Enea is currently on a 12-month basis measured end of Q3, SEK 600 million, which represents 67% of net sales. And the majority of this and a growing majority of this comes from the focus areas. And I think this is very, very encouraging in order to sort of think about future growth. Moving to profitability. So 3-year performance of EBITDA, I believe this is a real solid picture. So we hit 34% adjusted EBITDA, 34% and 33% year-to-date. And about half of the quarters, we were actually above the financial ambition, so almost there, but clearly, above the guidance for this year, which was 30%. Cash flow is an interesting measure. And you -- when you look at the cash flow statement, many of you are analysts here, you -- the way I like to look at this is to sort of understand what is actually the raw business producing here. So what I did, I took out the changes in working capital to sort of get away from little bit of the volatility, I adjusted 4 nonrecurring items, I adjusted for unrealized FX effects, this tends to go a little bit up and down to get sort of to the raw business cash flow. And you see here that we're trending at annualized level of, let's say, SEK 170 million to SEK 200 million. I'd like to say that Enea produces cash flow SEK 200 million a year, but okay, SEK 170 million to SEK 200 million, which is roughly 20% cash margin on net sales, and I think this is fantastic. If we extend the time period and looking at the 5-year, now in this picture, I choose adjusted EBITDA less CapEx, something that Jesper say at Redeye refers to as EBITDAC. And you see also here, I believe this is a solid profit delivery. Normalized level, I'd say, is between SEK 200 million and SEK 240 million a year. Redeye's estimate for this year is SEK 215 million. So again, a solid performance. However, if you map this with the share price, you see the things are not as solid when referring to the share price. The interesting thing with this chart is that you both have the EBITDA less CapEx in million dollars and the share price in SEK on the same chart. And you'll see there that we clearly experienced multiple contraction in '22 and '23. However, we recovered a little bit. So where do we go from here? In order to sort of address that, I would like to introduce a reference point. that reference point being something referred to as the Nordic SaaS peer group, Software as a Service peer group. This is a group of 41 companies that is covered by, among others, Redeye, on a quarterly basis, companies -- 41 companies with, I'd say, a varying degree of SaaS features. As you'll see here, Enea with 70% recurring revenue we have from a business model perspective, clearly some significant SaaS features in that aspect. Okay. So one of the measures that this group is measured on is something called Rule of 40. I'm sure most of you know what this is, but it's a combination of net sales growth and profitability and sort of the concept goes that being a healthy SaaS company should ideally have a combined net sales growth plus profitability above 40%. If you run this for Enea with, let's say, 11% year-to-date revenue growth focus areas, EBITDA year-to-date 33%, less CapEx, 10%, you're at 34%, Rule-of-40 score, 34%, okay? This group, on average, is 13%. So when we look at this group and sort of try to position ourselves from a Rule-of-40 perspective, we end up in the upper half and more or less exactly in the middle of the upper half. The upper half has a median Rule-of-40 score of 32%, and we are at 34%, so slightly above. That's the introduction of the reference point. So where do we go from here? Well, it's actually -- it's up to you. The story goes, you should never comment on share price, right? So I will not do that. I will only stick to the facts and give you some data points and leave the opinions to you. Going from below and up. 2023, SEK 27 Enea's volume-weighted average price through 2023; SEK 100, that's where we were at least a couple of days ago; 2022, somewhere between SEK 125, SEK 130, the average price that year. If we apply now the median enterprise value-to-sales multiple of 3.6 back to this peer group, full peer group median multiple to our revenue, as estimated again by Rasmus, we're somewhere -- the share price -- that would mean that the implicit share price would end up at somewhere around SEK 150. Again, 2 data points being the historical average prices, but remember, I said we match actually perfectly well with the upper half of this peer group as we scored 34% versus 32% being the median score of the upper half. So here, I had applied the group median on enterprise value sales of 5.7. I applied the average enterprise value-to-sales multiple of this upper half peer group of 6.5. And finally, I'd apply the implicit EV-to-EBITDAC multiple of almost 40 of this particular peer period. And you'll see where that -- what that sort of means implicitly multiplying these sort of key figures with the relevant metrics of Enea. Again, data points. And I will leave the opinions for you. Thank you so much.

Anders Lidbeck

executive
#101

Thank you, Hakan. So before we hand over the responsibility of opinions, you being an outsider now, what's your own opinion on this?

Hakan Rippe

attendee
#102

Well, for me, the good news is actually is that the dilution is coming to an end. Recurring revenue is on a decent level. And to me, that gives me comfort that we have a pretty or actually very good future. So I feel good about this. I have some -- share some out.

Anders Lidbeck

executive
#103

Okay. Thank you for that. So with that, thank you, Hakan [indiscernible]. Ulf, if you can please come back here. And [indiscernible], if could open up for some questions on the numbers, please.

Simon Granath

analyst
#104

Okay. Thanks for the presentation. I forgot to mention that earlier. Simon Granath here with ABG again. And I was wondering a little bit on your financial targets here, you're targeting double-digit growth in your target areas. Do you feel like you have the capacity in place to achieve this regardless or not whether the market improves? And I say this in wake of the still lukewarm telecom market?

Anders Lidbeck

executive
#105

Yes. So thank you for that question. And I will come back to that actually. But let me try to answer the question anyways, right here and right now. So that's nothing I would like to commit to at this point in time. So it's still not a culture of Enea, and something that we want to instill in all our operations is that to overdeliver, not to overpromise and underdeliver. So I cannot and Enea cannot nor predict the market will change the market, but the market conditions are, as you rightly say, we feel them too, yes, slightly lukewarm. But we are operating within that market, and I don't think it's -- there's some great niches in that market that we are addressing, but the overall market is a bit lukewarm. And so that's why we're still holding on to our still to filled, the focused areas, 10% OS, it's still percent -- 9% OS, it's still 9%, 10% OS, it's still slightly below SEK 100 million. And with that going down at 18%, 20%, it is still diluting the numbers, but it will come down further over the next 12 to 24 months. So the answer is, today, we're not going to change the numbers, and we're not going to give you new numbers, new ambitions, new guidance. But the long-term ambition we have is very well within reach, and we've already been there in our focus areas. So that is the answer I will give you on that.

Fredrik Lithell

analyst
#106

Fredrik Lithell from Handelsbanken, Umeå. Thanks for all the presentations. Very interesting to listen to. I was -- wanted to come back to your strategy, the E3 with Evolve, Enhance and Expand, and you are around 650 employees total, and you have great positions in several subsegments. How are you going to sort of choose where to invest your R&D capabilities in order not to make you too thin on new areas and all of that? So how do you prioritize your money?

Anders Lidbeck

executive
#107

Thank you, Fredrik. That is, of course, a million-dollar question. And one of the key questions we're working on, we don't lack investment opportunities or requests for investments. On the contrary, we have loads of them. And we took slight long-term turn here in '21, '22, where we overinvested in our own product development, not based on that there wasn't opportunities, but we simply couldn't deliver on all the opportunities at the same time. So we have a thorough investment board process that Osvaldo and his team is leading, where the majority of our 24% R&D investment goes into the day-to-day improvement of the products more or less in the accordance with what we've already sold. And then the enhancement is also going through the product management process of what of all the requirements we have that we can prioritize. And then the smallest portion goes into adjacent markets, new things. But that's a small part of the 24%. And as long as we are here, we're going to keep that a very tight process. So both the sales side of things as well as the R&D side of things to keep that tight ship and invest, but not think that we can sort of invent the most fantastic product never yet invented because that is simply not Enea. That's the work of other companies. Do we have...

Unknown Analyst

analyst
#108

Daniel, Handelsbanken again. And also thank you for a great presentations here today. I was thinking, Anders, if you could comment a little bit more on your current M&A strategy in terms of adjacent markets, but also we heard that decryption must be quite important nowadays. We have quantum safe networks, et cetera, being sold by some suppliers and so on, that should make the network more safer. Just your thoughts on the white spots?

Anders Lidbeck

executive
#109

Yes. No. But of course. So thank you, again, and this is an adjacent question to the question from Fredrik. So we do not think and I do not think that we should pour hundreds of millions in own R&D to invent the things not yet invented or to invent things that someone else have already invented. I think we should improve our own product development, and we should enhance it, and we should add what you've heard a lot of things today about AI and then gradually improve the product. And instead, we want to increase the portfolio and with acquisitions. We've done that successfully, and that's why we again can present the company we're presenting today. But we are -- we don't want to become an acquisition machine that we have 2, 3 acquisitions a year pumping up the numbers. We want to do strategic acquisitions. We want to be able to integrate them. And when it comes to these acquisitions, it's about channel to market. It's about geographic distribution, but it's also about product. And when it's about product, it's very much so that it is within the cybersecurity space that we would like to strengthen our portfolio. And it's also very much in security outside the telecom operators. So if we meet again in 24 months, I hope that Enea has even stronger security portfolio, and we have an even stronger operation outside the operators. But I don't want to give you a product. I don't want to give you a white spot and even that will be weird. So I cannot answer and I wouldn't want to answer that part of the question.

Andreas Joelsson

analyst
#110

Andreas Joelsson, Carnige. And I will have a follow-up to Handelsbanken's fine questions. What is the risk that you have too many focused areas. There has been a lot of examples of companies with too much or too broad product portfolio. So how do you make sure that you have the focus, and also how you get the synergies out of the various products that you have?

Anders Lidbeck

executive
#111

Thank you for that, Andreas. Yes, those are very well-connected questions. And for me, it's like I can argue it's what I'm doing, actually. Besides creating -- trying to create a winning culture, I'm trimming my hedges. I'm trimming all these beautiful ideas and wonderful thoughts about new markets and new initiatives that is coming from salespeople, great salespeople with great ideas and great initiatives, and they back them up with all this as the fantastic opportunity as well as great engineers and great product managers with amazing products they want to develop. Because I know that was really embedded in your question that if you have too much focus -- too many focus areas, you don't have enough focus to win. And at the end of the day, that's what it's all about. It's not having a great portfolio. It's about winning the deals and in a software business it's very much about winning deals. And in a dull market, it's even more about winning the deals because in our industry, if we bid for a deal, and we win it, that money is more or less 100% contribution, at least plus 80% contribution. If you bid for the same deal and lose it, it's 0. So there is no price for the number 2. And this is a message that I've been preaching all the time. And the way to do it is, first of all, you need to sort of align that, that is your opinion. And you need to select a management team that appreciates this and understands this and can run with this message. So if you tell them that this is not like the discussion with Ammar. It's not like Stratum, it's not -- cannot create opportunities. But we cannot afford to have more Stratum opportunities right now because, most certainly, we wouldn't win them against the big guys. And if we would win them, it would dilute our efforts to secure the customers we have. So sorry, I know you have opportunities, but you're not allowed. Focus on traffic management and our Firewalls business, and Jean-Pierre focused on our -- and that is security products. And so how do we secure that that's not happening going forward? Well, you have to secure it. No one else will do it for you because if you leave the organization running, you will have a mess, I guarantee you, That's my best answer. All right. Anyone else? Let me check here. And if not, yes, it's -- we actually have a question here. Your long-term ambition is including M&A? Or is it pure organic growth and M&A will come on top? Well, the long-term ambition is the organic development of the company and M&A will come on top. That's the answer. So okay, we will now also have the opportunity to -- you will have the opportunity to meet our incoming CEO Teemu Salmi . And he will present himself and then you will have the opportunity to ask a few questions if you have any. All right. Should we try to thank you Ulf and Hakan, and welcome Teemu..

Teemu Salmi

attendee
#112

Thank you, Anders. Can you hear me?

Anders Lidbeck

executive
#113

We can hear you very well. How are you?

Teemu Salmi

attendee
#114

I am very fine. Thank you. How are you? I hope you've had a great afternoon.

Anders Lidbeck

executive
#115

Yes. We're fine. Thank you. So I just said, maybe you heard that, that I will now give you the opportunity to introduce yourself, and then we'll take any questions from the audience here. So please, Teemu, go ahead.

Teemu Salmi

attendee
#116

Thank you so much, Anders, and good afternoon to all of you. And of course, in the perfect conditions, I would have wanted to be there physically myself today on the stage with you, but I am also, of course, engaged in another job right now, and I haven't right now, actually a customer event ongoing in Helsinki in Finland. That's where I am physically right now. But yes, let me give you a short introduction of myself. Teemu Salmi, Finnish name, as you can hear, but Swedish citizen. I was born in Finland, but lived outside of Finland for most of my life. Now actually, the last 2.5 years, for the first time in my life, worked in Finland, as I was recruited as CEO for a Finland's, and one of the big cybersecurity consulting companies in the Nordic called Nixu, stock-listed company when I joined. And it's been a journey since I joined, we've been acquired, we've been taken of, now stuck here in Helsinki. And now I'm actually in the process of integrating 3 companies in the cybersecurity, realm that DNV, Det Norske Veritas has bought, and I'm currently CEO of those 3 combined companies called DNV Cyber. A little bit about my history. I -- before I joined Nixu 2.5 years ago, I spent 5 years at Stora Enso in the forestry industry as the Group CIO and Head of the Digitalization Agenda there. And also, in parallel with that, I was also the Managing Director of a start-up business we had in with some consumer products that we were developing. And prior to Stora Enso, I spent a big time of my career 18 years with Ericsson. In Ericsson, I held various positions, mostly in the services space. And the last 4.5 or 4 years of my career in Ericsson, I lived in the Middle East, I lived in Dubai, and I was responsible for the security services for 23 countries in the Middle East and Eastern Africa. And the last year of Ericsson, I was responsible for the business of -- business unit called IT and cloud at that point in time, selling and delivering IT and cloud services of the Ericsson portfolio to the same 23 countries, I was running services for prior to that. I'm a systems engineer as a background, but I haven't worked so much with software development in my life. I actually quickly jumped on the leadership track and held various leadership positions in different industries during my career. Next year, when I join Enea, I will turn 52, so that's -- you have my age. I live in Stockholm, actually. Right now, actually, I live in Helsinki and Stockholm. But I have my family in Stockholm in the southern part of Stockholm. So looking much forward to moving back home and jumping on the job with Enea, and I really look forward to that 1st of April next year. South of Stockholm, I live with my wife and I have -- well, I almost had 2 kids but they're not kids anymore. They are 20 and 14, but that's still my 2 young beloved ones at home. I'm a bit of a sports freak. I love making sure that I keep myself fit, and I'm a runner. So when I'm not working, I run, so I use my energy 24/7 to something at least. Yes. A little bit about my history and who I am and very much open for taking any questions from the audience, even though I can't see you in the audience, but still.

Anders Lidbeck

executive
#117

All right. Thank you for that, Teemu. So do we have a question for Teemu?

Simon Granath

analyst
#118

Teemu, Simon Granath here again, with ABG. Thanks for the reduction to yourself. I was wondering what in particular do you see in Enea, and what do you seek to bring to the table? And then I was wondering if you have any learning experience that you might summarize from being at a company that had been acquired?

Teemu Salmi

attendee
#119

Thank you. I heard Simon, and then I had a break for 30 seconds. I'm really sorry, Simon, can you repeat the question? I apparently had some bad network hiccup here -- can you -- sorry, but can you repeat the question?

Simon Granath

analyst
#120

Yes, yes, of course. No problem at all. I was just wondering whether you could summarize on what you seek to bring to the table to Enea, and also which learning experience as you might have from being at a company that had been acquired previously?

Teemu Salmi

attendee
#121

Well, I think that what I can bring to Enea is quite a lot of learning from the cybersecurity area and we're working quite a lot with cybersecurity before. And especially now in my last 2.5 years, leading a cybersecurity consulting business of 500 people, I think I can bring quite a lot of learnings from that. And of course, also from being on the other side, being a Group CIO for 5 years as well and how that enterprise thinking of cybersecurity. And then, of course, also, I think I can bring quite a lot of my telecom experience from my Ericsson time. This is -- it's like coming home for me coming back to Enea. So I hope that -- and of course, combined with that quite passionate leadership. I think also, and I hope that I can bring my passionate leadership also into Enea and then sprinkle that with quite some M&A experience that I've been having. Right now, the last 1.5 years been going through it myself being now part of a company that has been acquired and now going through quite a major integration of 3 companies into 1. So -- and you said learning experience from that. I think some of the learning experiences have to be a bit humble and be proud of the history of all the companies that you acquired. There's a lot of competence and capabilities and you need to make sure that you bring the best of these words together, while you, at the same time, are building 1 new on company, right? Which is also important, so you can reap the benefits of the good things of whatever you're bringing together, right? But that I have been working hands on with now here for the past 1.5 years, and I hope to be able to bring that as well with me to my Enea job.

Anders Lidbeck

executive
#122

Thank you, Teemu and Simon, Anyone else? This is your last chance before March 31, probably not, but. Okay. Well, thank you so much, Teemu. Thank you for making the time to call in. This is really appreciated. And we look forward to you coming on board 1st of April next year.

Teemu Salmi

attendee
#123

Thank you so much, and have a great afternoon ahead. Thank you so much for having me. Bye-bye.

Anders Lidbeck

executive
#124

Okay. So now it's time to wrap up. And how are you feeling? Do you have more questions? Yes. We have some few minutes. So let me again then invite Osvaldo, Jean-Pierre and why not Ammar. Jean got most of the questions last time. So I'll -- if you have a question for Jean, he is here so, of course, You're ready, Daniel.

Unknown Analyst

analyst
#125

My name is Fredrik Lithell from Handelsbanken, no just kidding. A question is to Jean-Pierre and it is a little bit on -- we see some early signs that we have cellular private networks taking up a bit with 5G also and with slicing or non-slicing also with telcos or without telcos since sometimes in the enterprise space. So my question is, is this also a deep package inspection market opportunity, direct or indirect for Enea and for Qosmos.

Jean-Pierre Coury

executive
#126

Yes, to make sure that I understand the question, I will answer, and I will see after they have good answers. Actually, we are seeing more direct actually today opportunities, like you said, what we call directed solution vendors, such as Zscaler. This is our direct, we call it direct selling to the approach. So yes, we are seeing it more and more the customer, they don't want any monologic solution, less flexible, and they're looking for cost effective also on the other side. So they want to control their own destiny on the cybersecurity by bringing us. So more the flexibility, less expensive and they're investing a little bit more on the engineering side. So this is the way that -- this is why we are seeing more opportunities by bringing in slice by slice, actually, these are the components we say it on the cutsecurity feature that the customers are looking to bring into their own products.

Unknown Analyst

analyst
#127

Perfect. May I have another question and that would be, I guess, to John, but doesn't matter...

Anders Lidbeck

executive
#128

John, there's a question for you.

Unknown Analyst

analyst
#129

Maybe, I guess you can talk about -- that is a little bit on -- you mentioned initially that you are taking part of working with GSMA on the standard side that i.e. that you have influence there. And we also now see 5G stand-alone being -- finally being slowly built globally. And we have some ambitions among operators to have programmable networks, and this is built on the CAMARA organization via something called Open Gateway and so on. And authentication, for example, will be part of this as a network default thing. My question is, have you looked into this Open Gateway, the 3GPP Release-17, 18 and what it brings to in terms of threats versus opportunities for Enea? A little bit detailed question, but, yes.

Anders Lidbeck

executive
#130

Why not.

Osvaldo Aldao

executive
#131

Exactly. It's good to take the opportunity. I can answer that. Yes, we are engaged with customers in Europe to work on the CAMARA API. One of the things -- in case you are not familiar with the case, what is happening is that networks have been designed for one service and now it's mobile broadband. And that was a very well-defined service for consumer products. Now the whole -- in the telco industry, we are trying to repurpose those networks. And to do that, we need API. Because if you're an enterprise and you want to build a new service on top of these mobile networks, the most efficient way is to do it through an API, where you could get services from the network. So there is a definition for that, driven by the CAMARA project, and it is a good initiative because I think the whole industry is aligned finally to one single definition about those APIs. We are engaged with some customers in Europe and the main reason is because the API is defined in the northbound interface. But if you think about the portfolio that we have, we have a very good connection within in the network. And what we are doing is to automate the connectivity between the API requests and touching all the nodes that you have in the network. And we are doing a programmable workflow in order to be able to -- from 1 API to be able to reach out to a wider set of nodes, most of the cases, multi-vendor nodes. So we are neutral vendor playing in the native telecom protocols.

Unknown Analyst

analyst
#132

Perfect. And the last question, I promise, and that would be on the rich communication. You talked about it, that you also do offer solutions there. And you talked about, for example, Google RCS and so on coming in from the side. But RCS initially [indiscernible] IMS an old technology, but can your solution be within, especially perhaps deep packet inspection but also in the firewall side? Is it as relevant in RCS messaging as it is within SMS? Or is the risk that Google takes RCS over the top and brings the security on the Level 7, more or less on the Layer 7 instead of Level 3, 4, 5?

Osvaldo Aldao

executive
#133

Sure. We -- definitely, we are working and collaborating with Google on the RCS. I think the way that we are positioning our messaging firewall is as a multichannel protection, meaning that when we deploy this into one of our CPaaS clients. Basically, we protect all the different channels where they distribute this message. And we are trying to simplify that for our customers. So we have one single protection rules regardless of it that messages SMS, MMS, RCS or even API calls. That's why we want to extend, and that's what we are doing today. We are extending from an SMS firewall to a multichannel to cover all these possible angles.

Anders Lidbeck

executive
#134

All right. Anyone else? So I would also like to then -- sorry, Simon.

Simon Granath

analyst
#135

Yes, sorry, I'll take one more. Anders, you and I have discussed many times that you're probably add more value than you're able to extract in terms of pricing. So I'm not exactly whom to direct this question to. But how can you describe in brief terms how you make sure that you actually get the value that you bring to the table so to speak?

Anders Lidbeck

executive
#136

So I think it's -- I think I answered the last time that, yes, we bring more value to the table than we are getting paid for. I'm not sure I think it's a negative all the time because that is how it works. What's the value of a car? Is it the value of the car? Is it the value that it can take you to the job? And that value is different between different people. But what John talked about, and I think it's a really important message here is that -- and that -- you asked also the question, how come that your -- it seems like your security business is growing. And John, before -- John took over in '22 and the guy before John was sort of a pure-play security individual that didn't think that the CPaaS business was -- it wasn't revenue that was as good as firewall revenue from the telecom operators. John saw the opportunity and one of the opportunities is actually to get our fair share of what we're creating. So we have a revenue share opportunity. So it's not the big deals that you're looking for, the $2 million perpetual deals that we can announce, but it's a smaller deal in the beginning, but we're generating recurring revenues and we're generating a revenue share that gives us a fair share of the value. And the same what I was trying to highlight was Jean-Pierre here. Another example, we're not bringing in the $2 million deals. It might be a $500,000 deal with a startup in Silicon Valley, but that is swamped up by Cisco. And all of a sudden, it's recurring revenue is of a lot of money. So those are examples of that. But going forward, if you -- Enea, the way to be able to take more -- a bigger part of the value here is that we need to become a bigger company, discussing with the operators and being able not just to sell the product, but to sell a bigger solution that we can price a bit indifferent to the actual individual product that you can buy from Cellusys or from MOBILion. But this solution, you can only buy from Enea and that we can price it more of a value. But that's a journey, and we're not there today for all the products. But going forward, that's certainly an area that we want to explore. Sorry? Yes, you can add a small one both of you.

John Hughes

executive
#137

[indiscernible] earlier something else we did in the almost immediately after I took over was to look at how -- thank you. Look at how we were defining our product management. And to your question, how we carved up value, how we sold value and how we ensured that we got the best return for the value we gave, we worked very closely with Osvaldo. He had already done this in other parts of the business. We introduced value packs. So we carved up our products into different value packs, and it allows us to only sell what the customer is looking for, it also gives us opportunities to upsell additional value. We probably weren't as stringent on that in our former capacity as adaptive mobile and maybe we gave a little bit too much of the right to use to our customers. They bought our solutions, so flexible, they can do anything. But now it's very boxed off so that we can upsell the value.

Anders Lidbeck

executive
#138

All right. Thank you for that, John. I also want to take the opportunity to further answer your question Andreas, how do we make sure that we keep the focus and that we are not becoming diluted and someone might have asked, how do we make sure we create the synergies? And I think behind me here, you have a perfect example on how we try to implement that in reality. So Jean-Pierre here, he doesn't sell traffic management. He doesn't sell firewalls. He is not really involved in that. He lives and dies with the Embedded Security business. John lives and dies with the Firewall business and sleeps about that, dreams about that, how can I improve that. So those are separate business groups focused very much on their own -- on their thing. Osvaldo is trying -- is having a position where we're trying to create the synergies, not by taking over the responsibility of the different business units, but working on a higher level to make sure that we have a corporate strategy that's also impacting the different business units. And I would like to -- Roland, if you quickly come here. So we haven't spoken about our telecom portfolio today because we don't have time to do that, but Roland is responsible for our business group only working with the other telecom products. So he lives and sleeps and dreams about those products, and he has a P&L responsibility on that. So Osvaldo goes across these are our business units. And Ammar who runs the EMEA and APAC sales organization, is selling Roland's and John's products. So keeping the focus, trying to get the synergies, but not doing everything at the same time and with that killing the different acquired businesses. That's another way of how we implement in reality, the answer to the question you asked. Roland, who are you?

Roland Steiner

executive
#139

Sorry?

Anders Lidbeck

executive
#140

Who are you?

Roland Steiner

executive
#141

Yes, I think some of you may know me, I was maybe only one who was there, 2019 on the last Capital Market Day already. I'm also coming from an acquisition. I'm actually based in Vienna. So my roots are Siemens, Nokia Siemens. And I was running the kind of brain on Osvaldo's picture for the last 20 years to the classical telecom stuff, which is not the focus of today, but still a big portion to Enea's business. Yes.

Anders Lidbeck

executive
#142

Yes. Thank you. All right. So with that, I think if there's nothing further -- yes, there is one. Thank you.

Unknown Analyst

analyst
#143

[Technical Difficulty].

Anders Lidbeck

executive
#144

So now you have a great choice now. The one you direct that question to you will have a slightly different answer from very positive to very positive, a little less positive to very strict, so choose. So we are not taking this product through the sales organization in 2024. We are focusing in on making sure that the delivery to the few customers we have are successful. It's SEK 27 million, and I said it's not yet in the bank, but I will be in the bank the end of this, but still, it has to be delivered. So -- and that's Roland's responsibility. We have opened up for how to take this great product investment and how to use it in a smaller scale, on a smaller scale in existing projects or in projects that we're trying to win. And we actually have some success already with that. So again, if we meet in 12 months, you might see more of this product, but the corporate answer today is we're not changing plans based on that big deal. But it can be dreamed, it's allowed.. Okay. Thank you very much, all of you, and thanks for your job well done. It's time to answer Simon's question again then. We are simply reiterating our financial ambition and guidance. I think you've already noted that for 2024, we're more or less spot on this or above this guidance for the year. When it comes to the long-term ambition to generate double-digit growth in our focused business areas and an EBITDA margin of 25%, I hope that we've been able to show you that we are very much on that trajectory, and we've already delivered that in a couple of quarters, and it's not little, it's not nothing. It's done with a declining OS business and with some products in our portfolio that are still not growing as the rest, we have been able to achieve this while generating SEK 170 million to SEK 200 million free cash flows or operating cash flows over the years. And this year, we have spent SEK 100 million in lowering our net debt, buying back shares and still improved our bank account a bit. So lots of this is happening. And that was really my ambition starting this afternoon that we should be able to give you some information into this so that you feel confident that this is actually not so far away. I also said that I wanted you to better appreciate our cybersecurity or security portfolio. Enea is not anymore an OS business, it's not any more a Consulting business, it's not any more a Telecom business, it is also a Cybersecurity business. Just the subway from [indiscernible] and you'll find one of the world's leading cybersecurity companies in the world. And I also wanted you -- I wanted the crash course on SS7 and I'm not sure who I'm going to ask if that's been delivered, but it's actually instead of having one line of communication, actually first check if this is the correct call. That is the purpose of the SS7. That is what we're protecting. So if you didn't catch it, that's a simple answer. And not the least important thing what I wanted to achieve today was for you to meet the leadership team of Enea, or a bigger part of the leadership team of Enea. You haven't met Anna today. She is HR and People and Culture, and you haven't met Stephanie, who is in Australia at the moment, is in marketing. But you met the group of people that I think are outstanding, and I hope that you feel that you had the opportunity to understand who we are, apart from the normal CEO and CFO conversations that you normally have after the quarterly reports. So with that, thank you so much for coming here and spending a few hours with us. And I hope you feel it has been hours well spent, worthwhile. And thank you so much again.

This call discussed

For developers and AI pipelines

Programmatic access to Enea AB (publ) earnings transcripts and 32,000+ others is available through the EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments, full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.