Sophos ratings affirmed at 'B' as Fitch sees leverage easing after FY27

Traders Union
All News
Business & Wealth
Companies
Sophos rating and leverage outlook

Highlights

Fitch affirms Sophos's Long-Term Issuer Default Rating at 'B' and senior secured debt at 'B+' with a Stable Outlook, citing strong SMB security position despite high leverage.
Fitch forecasts EBITDA margin to drop to 24.4% in FY27 from 26.9% in FY26, then recover to 26.6% by FY30 on AI-enabled products and MDR market expansion.
Fitch expects slightly negative free cash flow in FY27 due to sales incentive changes and working-capital outflows, rebounding to high single-digit margins by FY30 as deferred revenue effects normalise.

Rating action and operating outlook

As reported by Fitch Ratings, Sophos Intermediate I Limited's Long-Term Issuer Default Rating is affirmed at 'B' with a Stable Outlook, while Sophos Holdings S.A.R.L.'s and Sophos Holdings, LLC's senior secured debt ratings are affirmed at 'B+' with a Recovery Rating of 'RR3'. The agency says the ratings balance high leverage and some cash flow volatility against Sophos's strong position in endpoint and network security for small-and-medium-sized businesses and the middle market.

Fitch expects its defined EBITDA leverage to increase to 6.3x in FY27, with the year ending in March, before falling to 6.0x in FY28. That remains within the agency's sensitivity range for the current rating, and Fitch says the company's October 2026 extension of debt maturities to 2029 reduces refinancing risk.

The agency forecasts Fitch-defined EBITDA margin at 24.4% in FY27, down from 26.9% in FY26, as Sophos absorbs pressure from the Firewall SG product end-of-life and Secureworks customer churn. Margin recovery to 26.6% by FY30 is expected to come from AI-enabled product demand, cross-selling, MDR market expansion and greater operating leverage.

Secureworks integration and market pressures

Secureworks' integration broadens Sophos's portfolio by adding the Taegis managed detection and response service, counter threat intelligence and enterprise detection capabilities into Sophos Central. Fitch says the combined environment strengthens telemetry across endpoint, identity, email, network and cloud systems, while also adding identity threat detection and enterprise security operations expertise.

Sophos's recurring-revenue model, upfront billings and limited capital expenditure continue to support underlying cash generation, but Fitch says revised FY26 sales incentives are changing the timing of cash collection. By prioritising annual contract value and annual recurring revenue growth over multi-year contract sales, the company is expected to see working-capital outflows and slightly negative Fitch-defined free cash flow in FY27 before returning positive in FY28 and reaching high single-digit margins by FY30 as deferred revenue effects normalise.

Fitch says Sophos remains well placed in the SMB security market, while the Secureworks combination could help it target larger enterprises that are typically served by CrowdStrike, SentinelOne and Palo Alto Networks. At the same time, the agency warns that enterprise cybersecurity is difficult to disrupt because switching costs are high, competition may intensify as customers consolidate vendors, and larger rivals may use AI to accelerate product deployment into the SMB segment.

Looking ahead, Fitch expects excess cash flow to be used more for bolt-on acquisitions than for debt repayment or dividends, although elevated sector valuations could limit debt-funded deals unless synergies are clear. The agency also sees supportive market conditions for managed detection and response and incident response through 2029, with double-digit growth driven by more complex threats and broader AI adoption that raises cybersecurity spending needs.

Cohere’s planned acquisition of AI cybersecurity startup AISLE highlighted how AI vendors are moving deeper into enterprise security to strengthen threat detection and vulnerability research capabilities. Our earlier article noted that the deal was positioned to broaden Cohere’s European footprint via AISLE’s Prague engineering hub and add AI-led software vulnerability detection to the group being assembled alongside Aleph Alpha.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.