Back in February, I wrote about Nubeva’s painful pivot — a company that shed its TLS assets, downsized operations, and narrowed focus almost entirely to ransomware decryption. It seemed a survival move that came at the cost of scale, revenue, and investor confidence.

Eight months later, Nubeva looks like a company quietly preparing to be acquired. With a newly granted U.S. patent, a slimmed-down cost base, and a history of already selling pieces of its IP, Nubeva is now positioned less as a SaaS growth play and more as an IP tuck-in target for larger cybersecurity firms.

Here is what was mentioned in the company’s most recent MD&A as of July 21, 2025:

“Nubeva is concentrating resources on building a strong portfolio of patents and intellectual property, with a particular focus on the intersection of artificial intelligence and ransomware decryption. These patents are intended to protect and extend our unique position in the market and increase optionality for partnerships, licensing, or merger and acquisition activities (“M & A”).“

The Core Technology: Session Key Intercept

At the heart of Nubeva is its Nubeva Ransomware Reversal technology (NURR) — software that captures cryptographic keys during ransomware encryption. With those keys, ransomware-encrypted files can be decrypted without paying a ransom.

The new patent granted in September 2025 extends that position, protecting Nubeva’s AI-powered decryptor builder. Traditionally, incident response teams must manually build decryptors for new ransomware variants, a process that can take days or weeks. Nubeva’s technology uses AI to generate and test decryptors within hours.

This combination — real-time key capture plus automated decryptor generation — gives Nubeva a rare, defensible capability in ransomware recovery.

The Netskope Connection

The most important signal, however, lies not in the technology itself but in where parts of it have already gone.

• In 2024, Netskope acquired Nubeva’s TLS/SKI patent package, strengthening its cloud security portfolio.
• At the same time, Nubeva’s former CTO (and major NBVA shareholder) joined Netskope, ostensibly to continue to work on / with the technology.
• Now, in 2025, Nubeva has secured a new patent extending SKI into AI-driven ransomware reversal — a natural complement to the IP Netskope already owns.

The connections suggest this is not coincidence. Netskope has already demonstrated interest in Nubeva’s core technology. With Netskope freshly public and perhaps looking to expand, Nubeva’s remaining IP feels less like an orphaned asset and more like a logical next acquisition.

Strategy Reset: Lean, Focused, Acquirable

According to the most recent MD&A, Nubeva has adopted a two-pronged strategy:

1. Expand the IP Portfolio — particularly around the intersection of AI and ransomware decryption.
2. Automate Operations — cut costs in customer support and onboarding to keep the company lean.

This is not the language of a company aiming to become the next CrowdStrike. It’s the language of a company making itself acquisition-ready: defendable IP, low overhead, and optionality for a buyer to plug into a larger platform.

Comparable Deals: What IP-First Companies Fetch

If Nubeva is to be valued, it won’t be on revenue multiples (FY2025 revenue was just $531K vs. $1.44M expenses, with ~$642K net loss). Instead, the best benchmarks are small cybersecurity IP shops acquired primarily for their patents:

• McAfee → Light Point Security (~$25M, 2020)
  <10 employees, browser isolation patents, little revenue.
  Closest comp: small team + unique IP = $25M+ exit.
• CrowdStrike → Preempt Security (~$96M, 2020)
  Behavioral analytics/AI patents, modest traction.
  Shows higher multiples when AI is part of the story.
• SentinelOne → Scalyr (~$155M, 2021)
  Log analysis IP, some early customers.
  Demonstrates ceiling for differentiated data/IP plays.
• Microsoft → Hexadite (~$100M, 2017)
  Automated incident response patents, ~35-person team.
  Relevance: big buyer securing automation IP, parallel to Nubeva’s AI decryptor patent.
• Palo Alto → LightCyber (~$105M, 2017)
  Early-stage behavioral analytics, acquired primarily for IP.

These deals show that small teams with defensible cybersecurity IP routinely transact between $25M and $150M, even with limited commercial scale.

Scenarios: Multiple Paths, One Likely Center of Gravity

While Nubeva technically has several evolutionary options, the weight of evidence tilts toward an M&A outcome:

1. Strategic Acquisition (Most Likely)

• Buyer: Netskope (already owns part of SKI and employs Nubeva’s ex-CTO).
• Other candidates: CrowdStrike, SentinelOne, Palo Alto, Microsoft Defender.
• Potential valuation: $25–100M, depending on competitive tension and perceived strategic fit.

2. Hybrid Licensing + Niche Operations

• Nubeva licenses IP into insurance or MSSP channels while keeping costs lean.
• Valuation: $20–60M, based on recurring licensing plus IP value.

3. Independent Scaling (Lower Probability)

• Automation succeeds, enabling $5–10M ARR over 2–3 years.
• Valuation: $50–150M, but requires execution beyond current resourcing.

Investor Lens

Nubeva is no longer best understood as a micro-cap SaaS hopeful. Instead, it is an IP asset with multiple exit vectors, deliberately streamlined for acquisition.

• Cash on hand (~$3M) gives it time.
• New patent strengthens defensibility.
• Netskope connection provides a natural buyer.

The likely play here is not years of organic scaling, but rather a strategic transaction once the IP matures or when a larger player sees ransomware recovery as essential to its platform.

Valuation Sensitivity: What Could an Exit Look Like?

To make this more tangible, here’s a sensitivity table that frames Nubeva’s potential valuation across different exit paths:

Exit Path / Scenario	Key Drivers	Implied Valuation Range	Comparable Deal Example
Pure IP Tuck-In	Minimal revenue, patents only	$20–30M	McAfee → Light Point ($25M)
IP + Early Licensing	Limited ARR ($1–2M) + defensible IP	$30–60M	Palo Alto → LightCyber ($105M)
Strategic Acquisition w/ AI Angle	AI-enhanced decryptor IP + MSSP/insurer traction	$50–100M	Microsoft → Hexadite ($100M)
Scaled Adoption (Less Likely)	ARR $5–10M, automation proves out	$100–150M	SentinelOne → Scalyr ($155M)

Conclusion: Designed for the Takeout

Nubeva’s pivot was painful, but it may also have been purposeful. By shedding distractions, focusing on ransomware reversal, and doubling down on patents, the company has effectively made itself a ready-made M&A target.

The fact that Netskope already bought the SKI portfolio — and employs Nubeva’s former CTO — suggests a relationship investors should not ignore. Whether Netskope or another cybersecurity player moves first, the logic of acquisition is hard to miss.

This likely isn’t the story of a scrappy startup scaling into a going concern. It looks more like small team with unique, valuable IP, likely to be absorbed into something bigger.

Disclosure  –  The author owns NBVA shares. The Author is not compensated in any way by NBVA and has no commercial or financial relationship with the company except as an investor. Readers are required to do there own due diligence and not rely on any aspect of this blogpost for advice.