NABL · N-able
Conviction · Low · more likely to lag the S&P 500 over the next three months
Wrong if: a daily close above $5.65
Note written ·
Price against the kill line
13.8% clear of its kill line on the 13 November 2026 close.
How to read this
This note expects the shares to lag the market, so its kill line sits above the price: a close above the red mark would prove the view wrong. Prices run from low on the left to high on the right. The dot is where the stock closed on 13 November 2026, left of the mark while it is below the line; a dot right of the mark has closed through it.
The scale is stretched near the line, so close calls are easy to see. More than 8% from the line, the stock reads well clear, with a hollow dot to show the figure is off the drawn scale.
The kill line is the research note's own test. The portfolio sells on business facts, not on a price. How the portfolio decides
Three months against the kill line
Daily closes, to . Red: the kill line, a daily close above $5.65, on record since 11 November 2026. The shares are up 48.9% since the close; the S&P 500 is down 2.1% over the same sessions. Figures in the note can cover a different window.
Kill line
A daily close above $5.65, which would take the shares well over the post-report range and show them leading the S&P 500. A fourth-quarter annual recurring revenue figure above the $558–560 million guidance, or a 2027 outlook above 5% growth, would also prove the call wrong.
Research onlyNot in the portfolio.
Key figures from the filings · Technology
Quarter to 30 September 2026, filed 5 November 2026; valuation at the 13 November 2026 close
- Revenue, latest quarter ($M)
- 138
- Revenue, change on a year (%)
- +4.9
- Gross margin (%)
- 74.9
- Operating margin (%)
- 11.2
- Free cash flow, four quarters ($M)
- 75.6
- Net cash, cash less debt ($M)
- −300
- Free-cash-flow yield (%)
- 8.8
All filed numbers
What N-able reports to the SEC in its quarterly and annual filings. Each group states its period and filing date once; a figure dated otherwise says so. Built from the filings known on .
| Quarter to | Revenue ($M) | On a year (%) | Gross margin (%) | Operating margin (%) |
|---|---|---|---|---|
| first filed | 138 | +4.9 | 74.9 | 11.2 |
| first filed | 138 | +5.9 | 76.8 | 11.9 |
| first filed restated | 132 | +12.0 | 75.9 | 8.4 |
| first filed restated | 131 | +12.6 | 77.3 | 8.3 |
| first filed restated | 131 | +9.3 | 78.0 | 7.1 |
| Pre-tax income ($M) | 7.5 |
| Net income ($M) | −4.4 |
| Diluted shares, change on a year (%) against the quarter to 30 September 2025 | −1.2 |
| Operating cash flow ($M) | 98.1 |
| Capital spending ($M) | 22.6 |
| Free cash flow ($M) | 75.6 |
| Cash and short-term investments ($M) | 92.5 |
| Debt ($M) non-current long-term debt plus current debt | 393 |
| Net cash, cash less debt ($M) | −300 |
| Deferred revenue ($M) −2.1% on a year | 20.9 |
| Backlog, orders not yet delivered ($M) +9.6% on a year | 267 |
| Receivables ($M) | 45.2 |
| Inventory ($M) | Not reported |
| Shareholders' equity ($M) | 768 |
| Market value ($M) | 861 |
| Enterprise value, market value plus net debt ($M) | 1,161 |
| Enterprise value to sales (×) | Not available |
| Enterprise value to operating income (×) | Not available |
| Price to earnings (×) | Not available |
| Price to book value (×) | 1.1 |
| Free-cash-flow yield (%) | 8.8 |
Short interest (FINRA, settled 15 October 2026, published 26 October 2026): 2.3% of shares outstanding sold short, 2.5 days of average trading to cover, +1.4% since the previous report.
| Window | Bought | Sold |
|---|---|---|
| 90 daysfrom | $0 | $0 |
| 12 monthsfrom | $0 | $0 |
The thesis
N-able is more likely to lag the S&P 500 over the next three months. The company cut its full-year annual recurring revenue (ARR) guidance for the second time on 5 November 2026, and a researcher published 33 exploits against its N-central management product on 8 November 2026. The fourth-quarter report, expected around February 2027, decides whether ARR keeps growing from the $553.1 million reported for the third quarter.
The third-quarter results of 5 November 2026 beat a lowered bar. Revenue was $137.5 million, up 4.9% from a year earlier, against guidance of $134.5–135.5 million. ARR was $553.1 million, up 4.7%. Adjusted earnings before interest, taxes, depreciation and amortization (EBITDA) were $43.6 million, against guidance of $41.0–42.0 million (company 8-K and release).
The forecast moved the other way. Full-year ARR guidance fell to $558–560 million from $562–565 million in August and $581–586 million at the start of 2026. Fourth-quarter revenue is guided to $133–134 million against a $135.35 million analyst estimate. Finsee's review says management framed 2027 as roughly 5% constant-currency ARR growth.
The N-central disclosure adds a second question. CSO Online reported that N-able took its hosted N-central environments offline worldwide, told on-premises customers to shut their servers down, and released hotfix 2026.4 HF2 on 10 November 2026. The shares closed at $4.66 on 10 November 2026 and at $4.80 on 12 November 2026, so the market has treated the episode as contained so far.
Bullish and bearish views on N-able, Inc.
The bull case on N-able, Inc. (NABL), in brief: third quarter cleared the lowered bar. The bear case: full-year ARR guidance fell again.
Bull case
- Third quarter cleared the lowered bar. Revenue of $137.5 million beat the $135.02 million analyst estimate, and adjusted earnings per share of $0.12 beat the $0.10 estimate (5 November 2026 results).
- ARR turned up sequentially. ARR rose to $553.1 million from $544.5 million at the end of the second quarter. Finsee reports gross retention held in the mid-80s percent range.
- No confirmed customer breach so far. N-able told reporters it has seen scanning tied to the published exploits but no evidence of successful exploitation in any customer environment (CSO Online, 10 November to 11 November 2026). The hotfix covers seven CVEs (Common Vulnerabilities and Exposures entries) and all hosted servers were upgraded, per The Hacker News on 10 November 2026.
- Targets sit above the share price. Needham's target is $6 (Buy) and Scotiabank's is $5.45 (Sector Perform), after the 5 November 2026 report. Scotiabank maintained its Hold rating and raised its target on 7 November 2026.
- Buybacks are shrinking the share count. Finsee's review says the company repurchased about 10.2 million shares for $38.7 million under a $125 million authorization.
Bear case
- Full-year ARR guidance fell again. The $558–560 million range is below August's $562–565 million. Constant-currency ARR growth slowed from 8% in the first quarter to 6% in the second and 5% in the third (Finsee review of the report).
- The core product's security record is in question. A researcher published 33 alleged zero-day exploits in four attack chains on 8 November 2026. The most severe needs no login and can run commands on the server (CSO Online). Security firm Previdian logged 68 attack attempts from one address against a decoy server within about 18 hours, and Censys counted 1,728 internet-exposed N-central instances.
- Customers were without the hosted service. N-able took hosted N-central offline on 10 November 2026, and The Hacker News reported that a follow-up hotfix is still expected. N-able has not published the effect on renewals or ARR.
- Margins face pressure in 2027. Management signalled higher go-to-market and AI spending plus one-time costs, per Finsee. The high end of full-year adjusted EBITDA guidance fell to $159.5 million from $161 million.
- Debt is rising as cash falls. Cash was $92.5 million against $392.7 million of debt at 30 September 2026. The full $75 million delayed-draw term loan was drawn after quarter end, and a payment of roughly $67 million for Adlumin, the security business acquired in 2024, is due in the fourth quarter (Finsee review).
Price setup
The shares closed at $4.80 on 12 November 2026, above the 50-day average of $4.47 and the 200-day average of $4.42 (adjusted daily closes). The three-month change is 39.5%, measured from the $3.44 close of 14 August 2026. The 52-week closing low is $3.00, on 22 June 2026. The 52-week intraday high is $8.08, on 12 November 2025.
Recent closes: $4.92 on 5 November 2026, $4.81 on 9 November 2026, $4.66 on 10 November 2026 and $4.79 on 11 November 2026. The shares have held a narrow range since the report and the exploit disclosure.
The market price already reflects a rebound of 39.5% in three months with little added discount for the N-central episode: the shares stayed between $4.66 and $4.81 in the sessions after the exploits were published.
Insider activity is routine. SEC Form 4 filings from 18 August 2026 show tax withholding on vested stock units at $3.44 for the chief executive, chief financial officer and three other executives. The Form 4 filed on 20 August 2026 shows an award of 400,000 shares to Chief Revenue Officer Rosa Russell. The filings list no open-market purchases or sales.
Catalysts ahead
- ~31 December 2026 (est.): Payment of roughly $67 million for Adlumin due in the fourth quarter of 2026. Sets year-end cash and debt after the $75 million term-loan draw.
- ~15 February 2027 (est.): Fourth-quarter and full-year 2026 report with the 2027 outlook. Tests whether ARR reaches the $558–560 million guidance and whether 2027 growth exceeds roughly 5%, and shows any N-central effect on renewals.
What would change the view
A daily close above $5.65, which would take the shares well over the post-report range and show them leading the S&P 500. A fourth-quarter annual recurring revenue figure above the $558–560 million guidance, or a 2027 outlook above 5% growth, would also prove the call wrong.
What it trades with
N-able sells software to managed service providers (MSPs), the IT firms that run technology for small businesses. Because N-central controls the endpoints those providers manage, the exploit disclosure ties the shares to MSP trust and to Cybersecurity spending. The Adlumin security business and the SentinelOne partnership, expanded on 21 October 2026, sit on the same theme. The 13 April 2026 proxy names Silver Lake and Thoma Bravo as the company's sponsors. Leverage makes the shares sensitive to interest rates and credit conditions.
The evidence, claim by claim (8)
- Third-quarter 2026 revenue was $137.5 million, up 4.9% from a year earlier; ARR was $553.1 million, up 4.7%; adjusted EBITDA was $43.6 million against guidance of $41.0–42.0 million. N-able third-quarter 2026 results (8-K Exhibit 99.1) · as of
- Full-year ARR guidance was lowered to $558–560 million from $562–565 million; fourth-quarter revenue was guided to $133–134 million against a $135.35 million analyst estimate. N-able third-quarter 2026 results; analyst estimate recap · as of
- Cash was $92.5 million against $392.7 million of debt; the $75 million delayed-draw term loan was drawn after quarter end; a payment of roughly $67 million for Adlumin is due in the fourth quarter. Finsee third-quarter 2026 earnings review · as of
- A researcher published 33 alleged zero-day exploits against N-central on 8 November 2026; N-able took hosted environments offline and released hotfix 2026.4 HF2 on 10 November 2026, covering seven CVEs. CSO Online · as of
- N-able reported scanning activity tied to the published exploits but no evidence of successful exploitation in any customer environment; Previdian logged 68 attempts from one address within about 18 hours. CSO Online; The Hacker News · as of
- Censys counted 1,728 internet-exposed N-central instances. CSO Online · as of
- Scotiabank maintained its Hold rating and raised its price target on N-able after the third-quarter report. Analyst-action news · as of
- SEC Form 4 filings show executives' shares withheld for tax at $3.44 on 15 August 2026, and an award of 400,000 shares to Chief Revenue Officer Rosa Russell on 19 August 2026. SEC Form 4 filings · as of
Sources
- Lucian Constantin · csoonline.com
- thehackernews.com ·
- SEC EDGAR
- N-able (NABL) Q3 2026 earnings review · finsee.ai
- Finviz
- US security firm N-able pulls the plug on N-central, its key platform, following disclosure of 33 zero-days · cybernews.com