Internet Initiative Japan (IIJ)
3774.TMEDIUMManaged Security Services · Weight: 10%· Data as of 2026-05-03
Investment Thesis
Japan's original internet backbone ISP (founded 1992, Japan's first commercial internet). IIJ is the only vendor that can provide NETWORK-LEVEL threat detection — cloud-only competitors cannot block at the packet layer. FY2026 guidance: revenue ¥340B, OP ¥36.5B (OP margin 10.7%). 9M FY2026: revenue +8.7%, OP +17.9% — strong operating leverage. Active Cyber Defense Law (Oct 2026) forces 15 critical infrastructure sectors to implement mandatory security monitoring — critical infrastructure operators need ISP-integrated managed security. ROE 14.96%, PB 3.18x reflect recurring infrastructure value.
Risk
1) PE 19x is at upper bound of technology WACC range — guardrail triggered, justified by recurring revenue quality. 2) Two Q3 earnings misses vs consensus (Feb 2026, Apr 2026) — FY2027 guidance may disappoint if infrastructure capex weighs on FCF. 3) Large cloud providers (AWS, Azure) offering competing managed security could compress IIJ pricing power over 3-5 years. 4) FCF not confirmed — capital-intensive network infrastructure may constrain shareholder returns.
Monitoring Trigger
FY2026/03 full-year + FY2027 guidance (May 2026). If FY2027 OP guidance < ¥36B (flat YoY), TRIM. If managed security revenue disclosed separately and growing >15% YoY, ADD. Watch for Active Cyber Defense Law implementation contracts awarded to IIJ in H2 2026.
Key Dates
Update History
Added via gap analysis. Managed security/SOC infrastructure layer was missing. Japan backbone ISP with integrated security. PE 19x (guardrail flag noted, overridden by recurring revenue moat). FY2026 full-year results imminent.
Key Metrics
Business Segments
| Segment | Revenue | Share | Description |
|---|---|---|---|
| Network Services | ~¥170B | ~50% | Internet connectivity, VPN, MPLS, managed WAN — Japan backbone infrastructure |
| System Integration & Security | ~¥170B | ~50% | Managed firewall, IPS/IDS, DDoS protection, SOC operations, cloud security services |
Supply Chain Evidence
| Evidence | Customer | Product | Detail |
|---|---|---|---|
| confirmed | Japan enterprise / critical infrastructure operators | IIJ Managed Security Service (firewall, IPS/IDS) | IIJ product catalog confirms managed firewall, DDoS protection, managed IPS/IDS for enterprise customers.[source](2026-03) |
| confirmed | Japan internet traffic (backbone) | IX connectivity + DDoS mitigation at backbone level | IIJ founded Japan's first commercial internet (1992). Operates at Japan Internet Exchange (JPIX) — backbone position enables network-level threat visibility unavailable to cloud-only security vendors.[source](2026-03) |
| confirmed | Sony (JV partner) | Sensiphia smart agriculture IoT security | IIJ-Sony JV Sensiphia established March 2026 for smart agriculture with embedded IoT security — expanding managed security into OT/IoT verticals.[source](2026-03-26) |
Sources & References
Peer Comparison
| Company | PE | Fwd PE | ROE | Op Margin | FCF |
|---|---|---|---|---|---|
| Trend Micro | 22.5 | 21.5 | 26.3% | 21.1% | +¥42.7B |
| Digital Arts | 21.7 | 21.7 | 17.8% | 42.7% | N/A |
| HENNGE | 22.9 | 19.5 | 46.0% | 17.6% | N/A |
| Cyber Security Cloud | 20.4 | N/A | 18.6% | 21.7% | +¥578M |
| FFRI Security | 38.7 | 67.1 | 28.4% | 31.3% | N/A |
| Macnica Holdings | 14.7 | N/A | 10.18% | ~3.5% (overall distributor; cyber segment >9%) | N/A |
| Internet Initiative Japan (IIJ) | 19.08 | N/A | 14.96% | 10.7% | N/A |
| Soliton Systems | 14.55 | N/A | ~20% | 14.1% | N/A |