Internet Initiative Japan (IIJ)
3774.TMEDIUMScore: 40.5Managed Security Services · Weight: 10%· Data as of 2026-05-03
Investment Thesis
Japan's original internet backbone ISP (founded 1992, Japan's first commercial internet). IIJ is the only vendor that can provide NETWORK-LEVEL threat detection — cloud-only competitors cannot block at the packet layer. FY2026 guidance: revenue ¥340B, OP ¥36.5B (OP margin 10.7%). 9M FY2026: revenue +8.7%, OP +17.9% — strong operating leverage. Active Cyber Defense Law (Oct 2026) forces 15 critical infrastructure sectors to implement mandatory security monitoring — critical infrastructure operators need ISP-integrated managed security. ROE 14.96%, PB 3.18x reflect recurring infrastructure value.
Risk
1) PE 19x is at upper bound of technology WACC range — guardrail triggered, justified by recurring revenue quality. 2) Two Q3 earnings misses vs consensus (Feb 2026, Apr 2026) — FY2027 guidance may disappoint if infrastructure capex weighs on FCF. 3) Large cloud providers (AWS, Azure) offering competing managed security could compress IIJ pricing power over 3-5 years. 4) FCF not confirmed — capital-intensive network infrastructure may constrain shareholder returns.
Monitoring Trigger
FY2026/03 full-year + FY2027 guidance (May 2026). If FY2027 OP guidance < ¥36B (flat YoY), TRIM. If managed security revenue disclosed separately and growing >15% YoY, ADD. Watch for Active Cyber Defense Law implementation contracts awarded to IIJ in H2 2026.
Key Dates
Key Metrics
Business Segments
| Segment | Revenue | Share | Description |
|---|---|---|---|
| Network Services | ~¥170B | ~50% | Internet connectivity, VPN, MPLS, managed WAN — Japan backbone infrastructure |
| System Integration & Security | ~¥170B | ~50% | Managed firewall, IPS/IDS, DDoS protection, SOC operations, cloud security services |
Supply Chain Evidence
| Evidence | Customer | Product | Detail |
|---|---|---|---|
| confirmed | Japan enterprise / critical infrastructure operators | IIJ Managed Security Service (firewall, IPS/IDS) | IIJ product catalog confirms managed firewall, DDoS protection, managed IPS/IDS for enterprise customers. |
| confirmed | Japan internet traffic (backbone) | IX connectivity + DDoS mitigation at backbone level | IIJ founded Japan's first commercial internet (1992). Operates at Japan Internet Exchange (JPIX) — backbone position enables network-level threat visibility unavailable to cloud-only security vendors. |
| confirmed | Sony (JV partner) | Sensiphia smart agriculture IoT security | IIJ-Sony JV Sensiphia established March 2026 for smart agriculture with embedded IoT security — expanding managed security into OT/IoT verticals. |