Business Overview: SideChannel, Inc. (OTCQB: SDCH)

---

Executive Summary

SideChannel, Inc. is a small-cap cybersecurity company that sells outsourced security leadership and zero-trust network software to mid-market and emerging companies — customers it considers underserved relative to the enterprise accounts that dominate large security vendors' attention. Its core offering is virtual Chief Information Security Officer (vCISO) services, sold as a fixed monthly subscription, supplemented by its proprietary Enclave zero-trust segmentation software and a roster of resold third-party security products.

The company is tiny — about 23 full-time employees and roughly $7.4 million of revenue in fiscal 2025, essentially flat year over year — and trades thinly on the OTCQB under penny-stock rules. It matters within its niche less for scale than for a staffing model (fractional security executives) built specifically for companies too small to hire a full-time CISO.

---

1. Core Business Model & How They Work

SideChannel sells security expertise as a service, then cross-sells proprietary software into the same relationship:

[ Mid-Market Client Lacks In-House CISO ] ➡️ [ SideChannel Places Fractional vCISO ] ➡️ [ vCISO Builds Security Program & Trust ] ➡️ [ Cross-Sell Enclave Software + Third-Party Products ] ➡️ [ Recurring Subscription + License/Resale Revenue ]

Key Operational Drivers

1. vCISO Services: Outsourced CISOs embedded in a client's leadership team on 1-, 3-, 6-, or 12-month renewing subscriptions. Most of the client base uses this offering, and it is the company's largest revenue source.
2. Enclave Software: A proprietary product for network micro-segmentation, zero-trust access, and machine-identity/certificate management, aimed at asset inventory and vulnerability management.
3. Reseller & Commission Revenue: Third-party security product and service partnerships generate commission income alongside direct sales.
4. Lean Staffing Model: As of September 30, 2025 the company had 23 full-time employees plus roughly 15 independent contractors, reflecting a fractional, contractor-heavy delivery model that keeps fixed costs low relative to a traditional consultancy.

---

2. Business Segments

SideChannel, Inc.
├── vCISO Services ───────────────── (majority of clients; primary revenue driver)
└── Cybersecurity Software & Services ── (Enclave license revenue + resold third-party products/commissions)

1. vCISO Services

Fractional, subscription-based security leadership — the company's flagship offering and its largest revenue category, renewing on short cycles (as short as monthly).

2. Cybersecurity Software & Services

Enclave license revenue plus a broad reseller book: third-party risk management, compliance readiness, cloud security, privacy, threat intelligence, managed endpoint security, and training, alongside newer AI-based security operations tooling.

---

3. Product Portfolio

---

4. Competitive Landscape

SideChannel names its competition explicitly and in two tiers:

• Services competitors: Optiv, NCC Group, Coalfire, PwC, EY, Deloitte, and GuidePoint — larger consultancies and dedicated security-services firms.
• Software competitors: Check Point, Cisco, CrowdStrike, F5 Networks, HPE, Huawei, Illumio, Juniper, Microsoft, Netskope, Palo Alto Networks, SonicWall, Sophos, and zScaler — a field dominated by companies with vastly greater R&D budgets and sales reach.

                 MID-MARKET SECURITY POSITIONING
┌──────────────────────────────────────────────────────────┐
│ High                                                        │
│  Enterprise   [CrowdStrike] [Palo Alto Networks] [Cisco]    │
│  Focus                      [Deloitte] [PwC] [EY]           │
│                                                              │
│                        [SideChannel]                        │
│  Mid-Market                (vCISO + Enclave,                │
│  Focus                      fractional model)                │
│ Low                                                         │
└──────────────────────────────────────────────────────────┘
      Low Price/High-Touch ◀──────────────▶ High Price/Scale

The company openly acknowledges in its own filing that larger rivals have far greater financial and marketing resources, that barriers to entry in the space are low, and that it expects pricing pressure to increase — a candid admission of a structurally difficult competitive position.

---

5. Strategic Strengths & Risks

Strengths

• Underserved niche: Mid-market and cloud-native companies genuinely struggle to afford full-time CISOs, giving the vCISO model a real, addressable need.
• Cross-sell path: An existing vCISO client base is a natural channel for Enclave software adoption, and the company has publicly named Enclave as its primary 2026 growth engine.
• Low fixed-cost delivery model: Heavy use of independent contractors over full-time headcount keeps the cost base flexible.

Risks

• Going concern: The company has stated its cash is expected to last only through at least December 2026 and that further, possibly dilutive, financing may be required.
• Warrant overhang: Roughly 12.0 million warrants carrying anti-dilution and price-reset provisions expire April 16, 2026, alongside another 8.3 million placement-agent warrants with weighted-average anti-dilution rights.
• Flat growth: FY2025 revenue was roughly flat year over year at about $7.4 million, with gross margin around 48% — not yet evidence that the Enclave cross-sell strategy is working at scale.
• Material weaknesses: The company has disclosed that its disclosure controls and internal control over financial reporting were currently ineffective.
• Thin trading / control concentration: Executives and directors owned about 46.4% of shares outstanding as of September 30, 2025, and the stock trades thinly on the OTCQB under penny-stock rules.
• No FedRAMP certification, which can disqualify it from government contracts that require it.

---

6. Financial Overview

---

7. Summary Conclusion

SideChannel occupies a genuine, underserved niche — mid-market companies that need senior security leadership but cannot justify a full-time CISO — and is trying to convert that service relationship into recurring software revenue through Enclave. The model is coherent, but the company is small, thinly capitalized, and competing against both specialist consultancies and deep-pocketed platform vendors in a market it itself describes as having low barriers to entry. The near-term outcome hinges less on competitive strategy than on simple survival: whether SideChannel can refinance past its warrant overhang and fund operations through its stated going-concern window before Enclave's cross-sell thesis has a chance to prove out at scale.