Radware (RDWR) Q3 2025: Cloud Security ARR Jumps 24% as Subscription Model Drives Visibility
Radware’s third quarter marked a decisive acceleration in cloud security, with ARR up sharply and subscription revenue now over half the business. The company’s pivot to recurring cloud-first revenue is driving operational leverage, while North America led regional growth and AI-powered innovation further differentiated its offering. Management’s guidance signals confidence in sustained demand and improved cash flow, with API security positioned as the next growth engine.
Summary
- Cloud Security Traction: Subscription revenue mix and ARR growth underscore a successful business model shift.
- Operational Leverage Emerges: Margin strength and regional execution highlight scalable cost structure.
- API Security in Focus: Strategic bets on new cloud capabilities to extend growth runway into 2026.
Business Overview
Radware provides cybersecurity solutions focused on protecting applications, APIs, and data centers from distributed denial-of-service (DDoS), bot, and web application attacks. The company generates revenue through a mix of product appliance sales and, increasingly, subscription-based cloud security services—with cloud security now the primary growth engine. Its major segments include cloud security, traditional appliances, and services, with a global footprint and a growing emphasis on recurring revenue models.
Performance Analysis
Q3 results reflect a business in transition to higher-quality recurring revenue, with cloud security ARR up 24% year-over-year and total ARR reaching $240 million. Subscription revenue rose to 52% of total sales, up from 47% a year ago, shifting the revenue mix away from legacy product appliances. North America was the standout, delivering 28% year-over-year growth and now accounting for nearly half of total revenue, while EMEA declined and APAC posted modest gains.
Profitability metrics showed notable improvement: gross margin held above 82%, operating income grew 34% year-over-year, and adjusted EBITDA margin (excluding HOX) climbed to 19.1%. Despite a temporary dip in cash flow due to billing timing and deferred revenue, management expects a return to positive cash flow in Q4, supported by a strong balance sheet with $455 million in liquidity.
- Cloud Security Mix Shift: Subscription revenue now drives more than half of total sales, improving visibility and stability.
- Regional Divergence: Americas outperformed, offsetting EMEA weakness and APAC sluggishness.
- Operational Leverage: Margin expansion achieved alongside continued investment in cloud and AI initiatives.
Management’s focus on recurring revenue and cloud-first offerings is translating into both top-line growth and improved operating leverage, even as legacy segments face headwinds.
Executive Commentary
"Cloud security remained a key growth driver in the third quarter, delivering another exceptional performance. Cloud security ARR climbed to $89 million, up from $72 million in Q3 last year. Our cloud ARR growth trajectory accelerated once again from 21% last quarter to 24% year-over-year growth in Q3."
Roy Zisopel, President and Chief Executive Officer
"Gross margin remained strong at 82.2%, similar to that of Q3 2024, underscoring the efficiency of our operations. Operating income grew 34% year-over-year to $9.6 million, up from $7.2 million in Q3 2024. This growth achieved alongside continued investment in cloud initiatives, highlighting the scalability and resilience of our business model."
Guy Avidan, Chief Financial Officer
Strategic Positioning
1. Recurring Revenue Model Acceleration
Radware’s pivot from product appliance sales to cloud-based subscriptions is reshaping its revenue profile, with recurring revenues now accounting for 82% of the business. This shift boosts revenue predictability and supports higher long-term margins, aligning the company with best-in-class SaaS peers.
2. Cloud Security and AI Differentiation
The company’s cloud security suite—including DDoS mitigation, web application firewall, and bot management—continues to gain traction, particularly as AI and automation enhance threat detection and operational efficiency. The launch and expansion of SOCX, an agentic AI platform, strengthens Radware’s value proposition in proactive, managed security services.
3. Geographic Expansion and Go-to-Market Execution
North America is now the primary growth engine, driven by a fully ramped sales team and expanded cloud infrastructure. The company opened two new cloud security centers in Q3 and plans three more in Q4, supporting both customer acquisition and service delivery scale. OEM partnerships, particularly with Cisco, further extend reach in key verticals.
4. API Security as Next Growth Wave
Management is positioning API security as the “third wave” of cloud growth, targeting the rising threat landscape as APIs proliferate across modern applications. Radware’s AI-powered API security and analytics capabilities are expected to drive incremental ARR in 2026, building on established strengths in DDoS and web application protection.
5. Operational Leverage and Cost Discipline
Despite increased investment in R&D and go-to-market resources, Radware delivered margin expansion and profitability growth, reflecting scalable infrastructure and disciplined cost management. This sets the stage for sustained earnings leverage as subscription revenues scale further.
Key Considerations
Radware’s Q3 demonstrates the benefits of a cloud-first, recurring revenue strategy, but execution in legacy regions and cash flow management remain watchpoints. The company is leveraging its AI-driven platform and global infrastructure investments to capture share in a rapidly evolving security market.
Key Considerations:
- Cloud Security Outperformance: Sustained ARR growth and new logo momentum validate product-market fit and competitive strength.
- North America Leadership: Regional ramp and customer wins position the Americas as the key driver of near-term growth.
- API Security Upside: Early investment in API protection and analytics could unlock a new revenue stream as attacks shift to this vector.
- Cash Flow Volatility: Temporary negative cash flow due to billing and deferred revenue timing requires monitoring, though management expects normalization.
- Legacy Region Weakness: EMEA revenue decline signals continued pressure in non-core markets, partially offset by OEM and partner channels.
Risks
Radware faces risks from macroeconomic volatility, elongated sales cycles, and competitive intensity—especially as larger rivals broaden their offerings. The EMEA revenue contraction highlights exposure to regional softness, and any delays in billing or deferred revenue collection could pressure near-term cash flow. Additionally, the success of API security as a growth lever is not yet proven at scale and will require continued innovation and execution.
Forward Outlook
For Q4 2025, Radware guided to:
- Total revenue of $78 to $79 million
- Non-GAAP operating expenses between $52.5 million and $53.5 million
- Non-GAAP diluted net earnings per share of $0.29 to $0.30
For full-year 2025, management expects:
- RPO (remaining performance obligations) at year-end to exceed 2024 levels
- Return to positive operating cash flow in Q4
Management emphasized recurring revenue and ARR as the primary indicators for forward growth, with cloud security and North America as the main drivers. API security is positioned as an incremental growth engine for 2026 and beyond.
- Cloud ARR growth expected to remain above 20%
- Operational investments to continue, balanced by profitability discipline
Takeaways
Radware’s Q3 cements its transition to a cloud-first, subscription-driven business with operational leverage and a clear growth runway in API security.
- Recurring Revenue Strength: The business model shift is driving higher visibility, margin expansion, and resilience against legacy volatility.
- Strategic Execution: North America momentum, AI-powered innovation, and OEM partnerships are translating to real market share gains.
- 2026 Growth Catalysts: Watch for API security ARR and continued cloud center expansion as leading indicators of future upside.
Conclusion
Radware’s Q3 results validate its strategic pivot to cloud security and recurring revenue, with strong execution in its core growth engines and a disciplined approach to investment and profitability. The company is well-positioned to capitalize on evolving security needs, though execution in legacy regions and new product adoption will remain key to sustaining momentum.
Industry Read-Through
Radware’s results highlight the accelerating shift in cybersecurity from appliance-based sales to recurring cloud and managed services, a trend reshaping the sector’s economics and competitive dynamics. The company’s success in leveraging AI for both automation and protection signals a broader industry move toward intelligent, outcome-based security platforms. API security’s emergence as a growth vector is a critical watchpoint for all application security vendors, as customer needs rapidly evolve toward holistic, cloud-native defense. Regional divergence—particularly North America outperformance and EMEA softness—mirrors trends seen across other security and networking vendors, suggesting continued bifurcation in demand and execution risk for global players.