# Portnox Financial Model

Cloud-native Network Access Control (NAC) and endpoint security SaaS platform for mid-market and enterprise IT teams.

- Canonical: https://finamodel.com/startups/portnox
- Excel download: https://finamodel.com/startup-models/portnox.xlsx
- Category: Enterprise/Security
- Model type: SaaS ARR / Valuation
- Funding round: Series A
- Funding: $22M
- Founded: 2022
- Geography: US, UK & Israel offices; targeting distributed organizations globally [DECK slide 3]
- Customer: B2B

## About the company

Portnox is a cloud-native network-access-control and endpoint-security platform for mid-market and enterprise IT teams. It secures access to corporate networks and devices through a subscription service rather than traditional on-premise NAC infrastructure.

The company sells through direct, channel, and managed-service-provider routes. Its recurring value grows with customers, endpoints covered, and the breadth of security deployment, while channel partners can change acquisition cost and sales velocity.

The model uses an ARR bridge for new logos, endpoint licences, expansion, and churn. It separately tracks direct, channel, and MSP cohorts, then links delivery costs, gross margin, sales capacity, customer support, and hiring to cash flow.

## What's included

- 5-year monthly revenue build with stage-appropriate growth assumptions
- Full P&L, headcount plan, and operating-expense schedule
- Cash-flow statement, runway, and burn-rate tracking
- Valuation via exit multiple with a DCF cross-check
- Returns analysis with MOIC and IRR
- Unit economics including CAC, LTV, payback, and cohort retention

## Product & value proposition

- Core product: **Portnox CLEAR** - cloud-native NAC SaaS. No on-premises hardware required.
- Legacy product: **Portnox CORE** - on-premises NAC (original product, being superseded).
- Key capabilities: Device discovery, access control (802.1X / EAP, cloud RADIUS, certificates, MAC-based auth), risk monitoring, compliance enforcement, endpoint remediation.
- Deployment: sign up online (30 sec), connect network (3 min), configure policies (30 min), full deploy (30 days).
- Differentiation vs. legacy NAC: SaaS / no hardware, vendor-agnostic, simpler deployment, better SaaS integrations (MFA, SIEM), scales from mid-market to enterprise.
- SOC 2 Type 2 certified.
- Gartner Peer Insights: 4.7 stars, 35 reviews (63% five-star, 37% four-star).

## Revenue model

- **Model:** B2B SaaS subscription (implied by "cloud-native / SaaS" positioning and "perpetual licensing" cited as a competitor weakness).
- **Channels:**
  - Direct sales
  - Channel partners
  - Managed Service Providers (MSPs)
- **Target segments:**
  - Distributed organizations with lean IT teams, thousands of devices, compliance-driven (sold direct or via channel)
  - MSPs managing 50–2,000 devices per customer, regional coverage (sold direct)

## Traction & metrics

- ~1,000 customers ("Nearly 1,000 customers")
- 50+ employees
- Founded 2007
- Gartner Peer Insights 4.7★, 35 reviews
- No revenue, ARR, growth rate, churn, NRR, or ACV figures in deck.

## Competition / moat

- **Competitors:** Legacy NAC vendors (on-prem / perpetual license model - names not specified but logos visible on slide 10; likely Cisco ISE, Aruba ClearPass, Forescout).
- **Legacy weaknesses cited:** Vendor lock-in, complex upgrades, on-site hardware, network upgrade dependencies, heavy deployment, configuration complexity.
- **Portnox moat:**
  - Cloud-native / no hardware = lower TCO and faster deployment
  - Vendor-agnostic (works with all networking hardware)
  - Stronger SaaS integrations
  - Simplicity positioning (Frost & Sullivan: "competitive edge is simplicity")
  - Targeting resource-constrained mid-market IT - underserved by complex legacy solutions
  - Existing legacy NAC customers cited as open to switching

## Team & funding ask / use of funds

- **Use of funds (from roadmap slide 12):**
  1. Strengthen GTM positioning & messaging
  2. Invest newly raised capital into Sales, Marketing & Customer Success
  3. Accelerate demand generation engine
  4. Enhance operational efficiencies
  5. Generate robust global sales pipeline (direct & channel)
  6. Improve current NAC product
  7. Extend product offering beyond NAC

## Recommended financial model

- **Archetype + why:** B2B SaaS ARR model. Portnox sells subscription licenses to businesses, scales via direct + channel + MSP, and the key value metrics are ARR, customer count, and NRR. A classic SaaS 3-statement with ARR bridge is the right structure.

- **Forecast horizon & granularity:** 5 years (2022–2026), quarterly Year 1, annual Years 2–5. January 2022 deck implies a raise early 2022 with a multi-year growth plan.

- **Key drivers & assumptions:**

| Driver | Value | Source |
| -- | -- | -- |
| Starting customer count | ~1,000 | - |
| Average ACV (annual contract value) | $8,000–$15,000/yr for mid-market SaaS NAC - typical for 50–500 seat security SaaS; no pricing in deck |
| New logo adds per quarter (Y1) | ~50–80 new customers/quarter - consistent with a 50-person team raising to accelerate S&M |
| New logo growth rate YoY | 30–50% - early-stage cybersecurity SaaS with active GTM investment |
| Gross revenue churn (annual) | 8–12% - NAC is sticky but mid-market has budget sensitivity |
| Net Revenue Retention (NRR) | 105–115% - expansion via seat/device growth within accounts |
| Gross margin | 70–80% - cloud SaaS delivery, no HW COGS; SOC 2-compliant infra overhead |
| S&M as % of revenue | 45–60% in Y1–Y2, declining to 30–35% by Y5 - heavy GTM investment signaled in roadmap |
| R&D as % of revenue | 20–25% - product improvement and NAC extension stated as roadmap priorities |
| G&A as % of revenue | 10–15% |
| MSP channel % of new ARR | 30–40% - MSP segment explicitly targeted; channel deals typically lower ACV but scalable |
| Headcount growth | scale from 50 to ~150 over 5 years, driven by S&M hires first |

- **Scenarios (Base / Bull / Bear - which variables flex):**
  - **Base:** ~50 new logos/quarter Y1, 35% customer growth YoY, 8% gross churn, NRR 108%, ACV $10K
  - **Bull:** Faster channel ramp (MSP), 60% customer growth YoY, NRR 115%, ACV expansion to $12K by Y3
  - **Bear:** GTM takes longer, 20% customer growth YoY, 12% gross churn, ACV stays flat at $8K

- **Required sheets / outputs:**
  1. **Assumptions** - all drivers, toggleable Base/Bull/Bear
  2. **ARR Bridge** - beginning ARR, new ARR (direct + channel), expansion ARR, churn ARR, ending ARR
  3. **Customer Cohort** - new logos by quarter, churn, surviving cohort, NRR by cohort
  4. **P&L (Income Statement)** - revenue, COGS, gross profit, S&M, R&D, G&A, EBITDA, net income
  5. **Headcount Plan** - by department, linked to S&M and R&D opex
  6. **Cash Flow** - operating CF, capex (minimal for SaaS), ending cash; runway analysis
  7. **Balance Sheet** - simplified; deferred revenue, cash, equity
  8. **KPI Dashboard** - ARR, customers, ACV, NRR, CAC payback, Rule of 40, burn multiple

## Frequently asked questions

### Is the Portnox financial model free?

Yes. The Portnox model is a free Excel download with live formulas.

### Can I change the assumptions?

Yes. The workbook is editable and its live formulas recalculate when assumptions change.