Corero's Subscription Model Drives 23% ARR Surge Amid Rising DDoS Threat
Event summary
- Corero Network Security achieved 23% ARR growth, reaching $23.9 million for the year ended December 2025.
- Order intake increased by 20% to $33.8 million, driven by subscription and DDoS Protection-as-a-Service (DDPaaS) adoption.
- The company maintained a 98% customer retention rate, including a $6.8 million renewal and expansion deal with a leading U.S. cloud provider.
- Corero expanded its global presence into Latin America, the Middle East, and APAC through strategic partnerships.
The big picture
The accelerating demand for real-time DDoS protection, fueled by the increasing sophistication and frequency of cyberattacks, validates Corero’s strategic shift towards subscription-based services. This trend reflects a broader market move towards 'as-a-service' models in cybersecurity, as organizations prioritize resilience and operational efficiency. Corero's success hinges on its ability to maintain technological leadership and expand its reach beyond its current partnerships.
What we're watching
- Partner Dependency
- The reliance on partnerships like TechEnabler and HPE Juniper for market access presents a risk if these relationships weaken or competitors gain traction with alternative alliances.
- Cloud Provider Concentration
- The significant renewal and expansion deal with a single U.S. cloud provider highlights a concentration risk; losing this customer would materially impact revenue.
- 400G Appliance Adoption
- The continued adoption rate of SmartWall ONE™ 400G appliances will be a key indicator of Corero’s ability to maintain a competitive edge in the evolving DDoS protection landscape.
Related topics