Intrusion (INTZ) Q3 2026 earnings review

Intrusion sales rebound on buyout, but losses and dilution grow

Intrusion, a Texas-based provider of cyber threat intelligence and security services, grew total revenue through a recent buyout and a state contract while its losses widened. Reported sales jumped 36% from a year ago to $2.7 million, and by our math sales from businesses it owned a year ago shrank 4% as the State of Texas contract ramped up. However, lower-margin managed services from the acquired VigilAigent unit cut gross margin by 22 percentage points, so gross profit dollars declined and the operating loss expanded to $2.8 million.

At a glance
Sales from businesses owned a year ago$1.9M -4% from a year ago, +31% from last quarter (by our math)
Reported revenue$2.7M +36% from a year ago (includes $0.8M from VigilAigent)
Gross margin55% 77% a year ago and 66% last quarter
Profitability outlookUndated pushed out from prior fiscal 2027 target

⚖️ Verdict: 🔴 Bearish

The story got worse because the revenue rebound failed to bring the business closer to breakeven. VigilAigent added $0.8 million in operating expenses alongside its $0.8 million in sales, interest costs climbed, ending share count jumped 33% from a year ago, and chief executive Tony Scott dropped the fiscal 2027 timeline from the profitability goal. On the positive side, an October swap of $4 million in debt for preferred stock lifted stockholders' equity above $5 million and secured a 180-day Nasdaq listing extension.

The question now is whether the VigilAigent buyout and state contracts can ever cover the company's overhead without high-margin federal software awards. Either promised cost cuts lift margins and narrow the $2.8 million quarterly operating loss, or the lower-margin service mix keeps the business dependent on constant share sales. Next quarter's operating expenses and gross margin will show if the cost cuts are working.

🐂 Bull Case

🟢 strengthening GROWTH

State of Texas Contract Lifted Legacy Sales

Intrusion sells cyber threat intelligence and AI-powered attack prevention software to government and commercial clients. After federal procurement delays cut total sales in half earlier this year, the Texas-based group signed a $4 million annual contract with the State of Texas in May to rebuild its core business.

"Revenue in our legacy business approached prior-year levels, driven primarily by our contract with the State of Texas," chief executive Tony Scott said. While the June purchase of VigilAigent, a managed cybersecurity service provider, added $0.8 million in its first full quarter, sales from businesses Intrusion owned a year ago reached $1.9 million by our math.

That underlying figure rose 31% from the second quarter and shrank just 4.4% from a year ago, a major improvement after falling 22% last quarter. The state work proves the cybersecurity provider can win state government contracts to replace stalled federal spending, even though the one-year deal runs off in mid-2027.

What to watch: state and local government contract renewals or new state wins before the second quarter of 2027. Without another state award or a renewal, underlying revenue will drop once the current Texas contract finishes.

🟢 new CAPITAL ALLOCATION

October Debt Swap Secured a Nasdaq Extension

Heavy operating losses pushed stockholders' equity down to $2.8 million by the end of September and threatened the company's stock exchange listing. In October, Intrusion exchanged $4.0 million of outstanding debt for Series B preferred stock, completed a warrant inducement, and sold shares through its at-the-market facility.

Those transactions lifted stockholders' equity above $5.0 million after the quarter closed. Because equity cleared Nasdaq's threshold, the exchange granted the cybersecurity firm an additional 180-day extension to "regain compliance with the $1.00 minimum bid price requirement", removing the immediate threat of delisting and cutting interest-bearing debt.

What to watch: the Series B preferred stock conversion terms and the updated debt balance in the third-quarter filing. Those disclosures will show how much future dilution common shareholders face from the October debt swap.

🐻 Bear Case

🔴🔴 strengthening CASH contradicts narrative

Losses Widened as Debt and Dilution Mounted

Tony Scott called the third quarter an important step forward as the group integrates VigilAigent and works toward profitability. Yet the acquisition brought $0.8 million of quarterly operating expenses, which matched its $0.8 million revenue contribution and left the combined business burning cash at an even faster clip.

  • Operating loss: $2.8 million, widened from $2.5 million last quarter and $2.1 million a year ago
  • Cash and cash equivalents: $0.4 million on September 30, down from $3.6 million at year-end
  • Total debt: $4.8 million in notes payable and finance leases, up from $3.4 million in June by our math
  • Common shares outstanding: 26.8 million at quarter-end, up 18% in three months and 33% from a year ago

Higher borrowing pushed quarterly interest expense up to $0.4 million from $17 thousand a year ago, widening the net loss attributable to Intrusion by 39% to $2.9 million. With only $0.4 million in the bank and accounts payable past $2.0 million, the cybersecurity firm relies on continuous share issuance to fund operations.

What to watch: operating cash burn and at-the-market share sales in the third-quarter filing. A quarterly cash burn above $2.0 million would require further share issuances over the next two quarters.

🔴🔴 strengthening MARGIN

New Contracts Cut Gross Margin by 22 Points

Intrusion historically earned software-like gross margins above 74% from its threat intelligence database and Intrusion Shield network protection software. Replacing delayed federal software work with state consulting and managed cybersecurity services has reshaped the company's cost structure.

Gross margin dropped to 55.1% in the third quarter, down from 66.4% in the second quarter and 76.6% a year ago. Cost of revenue—the direct labor and delivery cost of serving customers—climbed by 21.4 percentage points of revenue from a year ago to 44.9%, driven by the "addition of lower-margin managed services revenue from VigilAigent".

Because direct delivery costs took nearly half of every new dollar, the 36% jump in reported revenue produced slightly less gross profit ($1.48 million) than the business earned a year ago ($1.51 million). Meanwhile, general and administrative overhead rose 2.6 percentage points of revenue to 55.4%, while sales and marketing fell 17.2 points to 47.5% and research and development fell 11.1 points to 56.5%.

What to watch: the revenue split between Intrusion Shield software and consulting or managed services in the quarterly filing. Another drop in high-margin Shield software sales would keep gross margin near 55% and make breakeven harder to reach.

🔴 persistent DISCLOSURE

Risks this quarter didn't answer

Four standing concerns from prior quarters received no new numbers or dates in the third-quarter earnings release.

  • Department of War contract extension: unmentioned in the release after federal funding delays stalled the award starting in late 2025; any contract award or formal cancellation in the filing would move the revenue case.
  • VigilAigent annual recurring revenue and second closing: no update on the $3.5 million recurring revenue run-rate, and a $181 thousand net loss attributable to noncontrolling interests shows the remaining 40% buyout had not closed during the quarter.
  • Customer concentration: three customers accounted for 91% of first-half revenue; the quarterly filing's concentration note will show whether VigilAigent diversified the customer base.
  • Profitability and synergy timeline: after pushing breakeven targets from 2026 into 2027 across prior quarters, the release removed all dates and offered no update on the previously identified $3 million in annual cost synergies.

👓 Other Themes

new MARGIN

Staff Cuts and Stock-for-Pay Aim to Save Cash

To conserve cash, Intrusion cut staff, lowered contractor and marketing spend, and arranged a "voluntary exchange of management and Board cash compensation for equity". Excluding VigilAigent's $0.8 million cost base, operating expenses in the legacy business fell by $0.2 million, or 5%, from a year ago, though total operating expenses still rose $0.8 million from the second quarter to $4.3 million.

💲 Other KPIs

Deferred revenue (26Q3) $397 thousand
⇘ decelerating

Deferred revenue—cash customers have paid in advance for services not yet delivered—fell by half from the second quarter and dropped 66.3% from a year ago by our math. The $397 thousand quarterly drawdown shows the business recognized past government billings into revenue faster than it collected new upfront contract payments.

Accounts receivable, net (26Q3) $1.08 million
⇘ decelerating

Uncollected customer bills fell 25.9% from $1.45 million in the second quarter and 54.8% from $2.38 million a year ago by our math, net of a $0.1 million allowance. Collecting those second-quarter bills helped fund operations during the third quarter while accounts payable stayed elevated at $2.07 million.

🔮 Guidance

Profitability Target Work toward achieving profitability (no date specified)
🠇 cut from Transition to profitability in FY2027
⇘ decelerating

Cut. Chief executive Tony Scott said the company will "work toward achieving profitability", dropping the explicit fiscal 2027 timeline given last quarter. Across the past four quarters, management has shifted this target from late 2026 to early 2027, then to full-year 2027, and now to an undated goal as quarterly operating losses widened to $2.8 million.

❓ Key Questions

Did Intrusion complete the remaining 40% VigilAigent buyout?

The income statement shows a $181 thousand net loss attributable to noncontrolling interests, meaning Intrusion still owned only 60% of VigilAigent during the quarter. Investors need to know if the $1.3 million cash payment for the remaining 40% has been rescheduled.

What is the status of the Department of War contract?

Management previously blamed federal funding delays for the stalled Department of War contract extension, which used to be a high-margin revenue source. The third-quarter release did not mention the contract at all.

Where are the $3 million in annualized cost synergies?

When Intrusion acquired VigilAigent in June, management identified more than $3 million in potential annualized operating cost synergies. In the third quarter, VigilAigent added $0.8 million in quarterly operating expenses and legacy expenses fell only $0.2 million from a year ago.

What is VigilAigent's current annual recurring revenue?

VigilAigent contributed $0.8 million of revenue in its first full quarter, slightly below the $0.88 million quarterly pace implied by the initial $3.5 million annual recurring revenue figure. Management did not disclose updated recurring revenue or customer retention numbers.