Security

Check Point Software revenue fell 1% to $670 million and billings fell 5%, and the recovery moved to 2027

Third-quarter revenue fell 1% to $670 million, legacy license sales dropped about 19% and billings fell 5%, while CEO Nadav Zafrir conceded the recovery is more gradual than promised and now points to 2027. Seven analysts re-priced the stock within a day.

Vincent JiangVincent Jiang · 3 min read
Share
Check Point CEO Nadav Zafrir with Executive Chairman Gil Shwed
1 / 7Slide 1 of 7
Check Point CEO Nadav Zafrir (right) with Executive Chairman Gil Shwed at the CEO handover announced in December 2024.

Check Point Software+4.19% — Check Point Software, up 4.19 percent today Technologies, the Israeli network-security pioneer, fell about 12% in premarket trading on November 3 after third-quarter revenue came in at $670 million, down 1% year over year 2. The number met the company's own guidance, and non-GAAP earnings of $2.49 a share matched forecasts 16.

What the market had been sold since July was a floor: chief executive Nadav Zafrir had said the third quarter would mark the lowest point for product revenue. He confirmed that on the earnings call, then delivered the sentence that moved the stock: "the pace of recovery is gradual, more gradual than we previously expected" 12.

Two businesses share one ticker, and only one is shrinking

The subscription half is doing its job. Subscription revenue rose 11% to $339 million and now makes up 51% of the total 1. Annual recurring revenue from the newer lines (AI security, email security and continuous threat exposure management, a discipline the industry calls CTEM) grew more than 38%; email security alone passed $200 million in ARR 1.

The legacy half is not keeping up. License sales from the traditional firewall business fell about 19% 2, and calculated billings dropped 5% 1. RBC Capital Markets reads the prints the same way: customer deal delays and weaker product sales are pushing revenue recognition into 2027 3.

Management is buying where growth used to be

The company repurchased 2.5 million of its own shares for $325 million during the quarter at an average of $132, about $1.4 billion over the trailing twelve months, out of roughly $4 billion in cash 1. A 12% premarket drop from the $141.50 close on November 2 452 left the stock below the price management paid for its own paper.

Even the promised rebound leans partly on pricing rather than demand. Check Point raised firewall prices 12% to 20% effective October 4, an increase management says could add up to three points to revenue growth, against a weak-shekel headwind that could reach $50 million of 2027 expenses 1.

The -1% quarter was the end of a ten-quarter deceleration, not a surprise event

Revenue growth fell from about 6% to negative over three quarters

-2%0%2%4%6%8%Q1 '24Q3 '24Q1 '25Q3 '25Q1 '26Q3 '26zero growth-1%first negative quarter
Data
Revenue growth, YoY
Q1 '245.8%
Q2 '246.6%
Q3 '246.5%
Q4 '246.1%
Q1 '256.5%
Q2 '256%
Q3 '256.7%
Q4 '255.9%
Q1 '264.8%
Q2 '261.3%
Q3 '26-1%
Year-over-year revenue growth by calendar quarter, percent. Source: Check Point quarterly figures via SEC filings; Zolmax.1,7

The street re-priced the stock by the next morning

JP Morgan cut its price target to $155 from $167 5. Citigroup nudged its target up to $145 4. The most recent targets span $131 to $175 4, around a stock that closed November 2 at $141.50 45. The ratings tell the quieter story: 10 buys, 26 holds, zero sells 6.

Nobody is calling the franchise broken, and nobody is calling the recovery priced in either.

Seven targets span $131 to $175 around a $141.50 stock

Only Scotiabank sits meaningfully above the pre-drop price

  • Estimate
$0$50$100$150$200Morgan Stanley$131Wells Fargo$135RBC Capital$140Citigroup$145UBS$150JP Morgan$155cut from $167Scotiabank$175Nov 2 close
Data
Value
Morgan Stanley (estimate)$131
Wells Fargo (estimate)$135
RBC Capital (estimate)$140
Citigroup (estimate)$145
UBS (estimate)$150
JP Morgan (estimate)$155
Scotiabank (estimate)$175
Analyst price targets in US dollars, all estimates, against the November 2 close of $141.50 (dashed line). Sources: Citigroup and JP Morgan notes via TradingView, November 4, 2026.4,5

The line that decides the trade

Fourth-quarter guidance of $720 million to $770 million sits below the analyst estimate of roughly $787 million 12. Management itself expects subscription growth to slow modestly in the fourth quarter before re-accelerating in the first half of 2027 1. Zafrir has scheduled a capital markets day in Las Vegas on February 10 to argue the longer case 1.

Between now and then the tell is not revenue, it is billings: until customers stop slipping into 2027, every quarter here is a promise about the next one.

Get Security by email, free

The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.

Loading CHKP

Reader comments

0 comments

    More in Security

    All in this topic →

    Security

    CrowdStrike, SentinelOne and Evoke Security claimed the same seat inside Anthropic's Claude Cowork in 24 hours

    Anthropic's agent workspace created a security blind spot no endpoint tool can watch; SentinelOne, Evoke Security and CrowdStrike each claimed the seat inside it within about a day, and none disclosed what the seat pays. CrowdStrike shareholders are paying a category premium of 168 times forward earnings for it.

    Security

    Heron's shared fraud network lets rival loan funders flag defaults early, against $2 billion of yearly losses

    A New York underwriting startup has quietly launched a shared early-default network for merchant cash advance funders, turning competitors' losses into everyone's early warning. It is live on the site, absent from the press feed, and the moat is the member list itself.

    Security

    CrowdStrike pays a reported $495 million for Fiddler AI and Dreadnode and unveils an AI kill switch

    The $495 million for Fiddler AI and Dreadnode came from the Wall Street Journal, not the company: mostly cash, closing in fiscal Q4 2027. Shareholders of a 49.8-times-book stock fund the layer that watches, tests and kills enterprise AI agents.

    Security

    Tenable's Q4 guide leaves out PHP2Shell demand, and CERT-FR flagged a 9.9 flaw in Tenable's own product

    Tenable beat its third quarter and ran nine sessions to a one-year high, but its own fourth-quarter guide prices the AI-and-PHP2Shell demand story at zero, and France's CERT-FR just flagged a 9.9 flaw in the company's identity product.

    Security

    Cellebrite's 154 European police contracts total €69.4 million, and the EU Ombudsman is probing the secrecy

    A Statewatch map counts 154 public contracts worth €69.4 million across Europe, EU funds included, while the Ombudsman probes EU secrecy over the company. CLBT reports Q3 on November 12.

    Security

    SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead.

    SailPoint published the rulebook for policing AI agent tool calls on October 31. Workday, Cognition and Akamai spent October buying or shipping the same layer, and the December print must show whether anyone pays SailPoint for it.

    Get the newsletter

    The day's AI and market news, in your inbox every weekday.