In JRR Tolkien’s masterpiece, ‘The Two Towers’, King Theoden of Rohan (played by the amazing Bernard Hill) seeks to understand the disaster that has befallen his Kingdom and the world. In one particularly poignant scene, coping with the death of his son, set upon by friends who question him, and foes who would see him destroyed, he poses a question to himself…… ‘How did it come to this?’. Something similar could be asked of Nubeva Technologies.

Theoden, King of Rohan, laments his investment in Nubeva stock

Nubeva (TSXV: NBVA, OTC: NBVAF) was originally positioned as a software security solutions provider, with early traction in the TLS/SSL network decryption space. The company’s proprietary Session Key Intercept (SKI) technology was designed for decrypting encrypted network traffic. However, Nubeva recognized a larger opportunity and pivoted to focus on ransomware recovery. This shift led to the development of Nubeva Ransomware Reversal (NuRR)—a tool that enables ransomware decryption without requiring a ransom payment.

However, this pivot has not been without its challenges. The transition from a revenue-driven business model to an intellectual property-focused strategy has resulted in a VERY rough ride for shareholders. Commercial adoption has been halted as Nubeva now prioritizes patent filings and testing over immediate sales. Randy Chou, Nubeva’s CEO, has seemingly decided that instead of taking NuRR to market, the company needed to refine its technology, patent protection, and validation strategy.

A key moment in this transition seems to be Nubeva’s experience with Kroll, where the company struggled to keep up with demand. This experience highlighted the operational challenges of working with business partners, scaling and demonstrated the need for a more automated, AI-driven approach to ransomware recovery. As a result, Nubeva shifted its focus to patent completion, AI integration, and beta testing, working to ensure that its solution can support enterprise-scale adoption before commercialization.

A Focus on Patents Over Commercialization

Unlike traditional cybersecurity companies focused on selling software licenses or managed services, Nubeva clearly has opted not to commercialize NuRR at this time. Instead, its current priority is building and securing its intellectual property portfolio, ensuring that its technology remains defensible and valuable for the long term.

Randy Chou, Nubeva’s CEO, recently confirmed that the company now has four patents pending, complementing its existing intellectual property. These patents strengthen Nubeva’s IP moat. Hopefully, the company’s intellectual property strategy isn’t just about protection— it ideally will be about creating future monetization opportunities through acquisition, licensing or partnerships.

If you’ve been following the Nubeva saga, it is clear that rather than investing in sales efforts, the company has chosen to refine NuRR through real-world testing with a global financial institution. This controlled deployment ideally allows for validation of the solution’s effectiveness while ensuring that its technological framework is optimized before any broad deployment.

This approach may position Nubeva’s technology for future strategic partnerships or being acquired. But it has also means that the company has no real source of revenue. The CEO has done an amateur job at communicating this pivot to the market. In light of the continual share price decline, questions abound about credibility and strategy. Investors are clearly unhappy, and rightfully so.

The Value of a Patented Cybersecurity Tool

Nubeva is not generating material revenue, but its patented technology and intellectual property must be worth something. Companies with useful solutions and strong patent portfolios are often acquisition targets, even in cases where commercialization was limited or non-existent.

Comparing to Industry Transactions

• McAfee acquired Light Point Security (browser isolation patents) for $25M+
• CrowdStrike acquired Preempt Security (behavioral analysis patents) for $96M
• SentinelOne acquired Scalyr (log analysis and threat intelligence patents) for $155M

Looking at these transactions and others, the estimated valuation range for Nubeva’s intellectual property is:

• Current IP Value: $5M – $25M
• Strategic Buyout Potential: $50M – $100M
• If commercial traction improves: $100M – $200M

Although Nubeva’s share price and market capitalization currently reflect a company that is going out of business, an evaluation of the company suggests that its patented IP, pending patents, and unique approach to ransomware decryption could make it an attractive target for acquisition.

How We Got Here

The shift toward a patent-first, AI-enhanced approach is a direct response to lessons learned from previous commercialization efforts—particularly the challenges faced in scaling operations with Kroll. It appears as if the demand for NuRR exceeded what Nubeva’s existing model could support, and it became clear that a scalable, AI-driven decryption solution was necessary to meet the needs of large enterprise clients.

At the same time, the cybersecurity market has seen significant consolidation, with major industry players seeking best-in-class intellectual property rather than new market entrants competing for customers. By focusing on patent completion and real-world validation, the goal seems to be producing a tool that is well-positioned for future licensing opportunities or strategic acquisitions.

However, this path has required patience and resilience from shareholders. Investors have found the wait akin to watching a house burn down. Yet, for those with a long-term perspective, the groundwork being laid might create significant value.

The Road Ahead

With four patents pending, a fully developed IP portfolio, and ongoing beta testing in a global client, Nubeva is positioning itself as a key intellectual property holder in cybersecurity. The company’s value lies not in direct product sales, but in the strength of its IP, which seems like an ideal tool to be acquired by a larger Cybersecurity firm.

For now, Nubeva is a cybersecurity innovator—not a vendor. The company’s commitment to intellectual property development, AI-driven automation, and customer validation makes it now an IP play, not a growth story. While the journey has been challenging for shareholders, the story may very well have a happy ending one day.

Full disclosure: The author is a Nubeva shareholder, but has no other financial interest or relationship with the company.