Investment Case Summary
- The renewal itself is only A$0.6m ARR, but the Telstra channel keeps FirstWave embedded in Federal procurement.
- Combined with Services Australia and Banobras, Q4 FY26 has stacked roughly A$2.8m of contract value in one quarter.
- Revenue concentration through Telstra and government anchors remains the single biggest risk if a major renewal ever slips.
The renewal quietly caps a Q4 FY26 that stacked Services Australia and Banobras onto the same compliance engine.
FirstWave Cloud Technology (ASX:FCT) has extended its Secure Internet Gateway agreement with Telstra (ASX:TLS) for another 12 months from July 2026, delivering ISM-compliant email security into several Commonwealth Government agencies through its CyberCision platform.
The headline dollar figure is small. Total annual recurring revenue under the agreement lifts about 5% to roughly A$0.6 million, with a matching 5% bump in Federal Government users on the platform. On its own, that would barely warrant a paragraph.
The reason we think it matters is the pattern it sits inside. This renewal lands on top of the A$1.85 million Services Australia contract in April and the roughly A$350,000 Banobras win in May, meaning FirstWave has now stacked three compliance-anchored wins into a single quarter.
For a company that has spent years trying to convert a global footprint of 150,000 organisations into meaningful recurring revenue, the shape of Q4 FY26 is starting to look different from prior years.
- Updated
- INSIDER CONVICTION TRADES FY26
The market hasn't noticed yet.
Disclosed by law. Missed by most investors. 129 trades tracked by us.
NO Credit card
- Director buys & sells tracked
- Buy / Hold / Sell verdict on every stock
- Technical analysis included
Why the Telstra plumbing is worth more than the ARR suggests
The economics of this specific extension are modest, but the channel it runs through is not. FirstWave’s CyberCision platform sits inside Telstra and also runs as a Telstra-branded instance on AWS, letting the telco resell FirstWave products under its own label into government and enterprise accounts.
That means every renewal like this one does two jobs. It books recurring revenue directly, and it keeps FirstWave embedded in the procurement plumbing that Federal agencies use to buy ISM-compliant tooling accredited by the Australian Cyber Security Centre.
Losing a A$0.6 million renewal would have been a small revenue hit and a large signalling problem. Keeping it, with a 5% user uplift, quietly reinforces that the Telstra channel is still the front door into Canberra for this product.
The Q4 FY26 stack is where investors should be looking
Services Australia at A$1.85 million, Banobras at around A$350,000, and now the Telstra renewal at roughly A$0.6 million together represent close to A$2.8 million of ARR-relevant contract value announced inside a single quarter. For a micro-cap that has historically struggled to convert pipeline into booked revenue, that cadence is the metric worth tracking.
Our concern is that none of these individual contracts is large enough to move the P&L on its own. The thesis only pays out if this quarterly cadence repeats through FY27, and if the cost base stays where CEO Danny Maher says it is.
The other pressure point is concentration. A large slice of the meaningful revenue continues to flow through Telstra and a handful of government or telco anchor customers, meaning a single lost renewal in the next 12 months would be visible in the accounts.
The Investors Takeaway for FirstWave Cloud Technology
This announcement in isolation is small, and we would not chase the stock on the back of a A$0.6 million renewal. Taken together with Services Australia and Banobras, though, it does start to answer whether the AI-powered compliance pitch is landing with the buyers who matter.
The next test is the FY26 full-year result and the FY27 first-quarter update. Investors will want to see the recurring revenue book step up in aggregate, the cost base hold, and at least one contract in coming quarters that is materially larger than what has been announced so far. Readers wanting broader context on ASX-listed cybersecurity names can find more coverage at stocksdownunder.
