Gen Digital Inc. GEN

Key data

The business

GEN Digital is the rent collector of consumer cybersecurity. It owns Norton, Avast, AVG, Avira, and the LifeLock identity brand, sold as auto-renewing annual subscriptions to individuals, not companies. The product is a checkout charge most people set once and ignore, and that forgetfulness is the moat: cheap distribution against a base that renews itself at 77% gross margin. In April 2025 it bought MoneyLion, a consumer finance app offering banking, investing, and Instacash cash advances, and stapled it onto the same mass-market list. The logic is cross-sell: the person who trusts Norton with their identity might let it watch their money. The tension sits right there. Cyber is a mature, high-margin annuity throwing off cash. MoneyLion is lower-margin, faster-growing, and carries something cyber never did, consumer credit risk. And the whole structure rests on $8.2B of debt left over from swallowing Avast in 2022.

The numbers

Two things run underneath the headline: revenue climbs steadily, but the profit growth is coming from the balance sheet, not the business.

Q1 FY27 revenue of $1.34B was up 6.3% on the year, the first clean comparison with a full year of MoneyLion in both periods. Reported net income jumped 59% and EPS 64%, which looks like a business inflecting. It is not. Operating income was $443M against $446M a year earlier, flat, and gross margin slipped to 77% from 79% as lower-margin fintech mixed in. Every dollar of the earnings jump came from below the line: interest expense fell to $124M from $156M as debt was repaid, and the tax bill dropped to $108M from $165M. The Q4 FY26 line carries a large one-time gain and is not run-rate. GEN still does not break out MoneyLion's contribution, so the split between cyber rent and fintech growth stays inferred.

The five-year arc is an acquisition story: Avast roughly doubled revenue into FY23, MoneyLion pushed it to $5.0B in FY26, and organic growth underneath is low single digit. The engine now is financial. Free cash flow ran about $1.5B last year on almost no capital spending. The company put roughly $700M toward debt, cutting long-term borrowings to $8.2B from $8.9B a year ago, and bought back stock, shrinking diluted shares to 603M from 624M. Less interest and fewer shares compound EPS even with operating profit flat. The real question is whether 6% is genuine cross-sell or acquired revenue masking a cyber base that has stopped growing, and the cash customers pre-pay answers it. Right now it is dead flat.

Remaining performance obligations stood at $1.3B at quarter end, hardly the backlog of a business reaccelerating.

Management

Insiders are net sellers, heavily. Over the past year they sold $21.1M against $217K bought, and CEO Ondrej Vlcek did most of it, including $10.4M across two days in late August with the stock near its 52-week high of $31.65. Plan status is not disclosed, so read it as you will: selling into strength by the person who knows the cross-sell math best is worth noting, not damning. Capital allocation is more reassuring, with $634M of buybacks last year plus steady debt paydown and a fresh repurchase authorization approved in August. Pay detail is thin in this filing, but the actions, deleverage and shrink the share count, are the right ones for a cash machine carrying this much debt.

How it fails or surprises you

The cyber base quietly erodes. Deferred revenue is flat at $1.25B and organic growth is low single digit under a 6.3% headline padded by MoneyLion. If Norton and Avast renewals decay faster than fintech grows, total growth drifts toward zero while $8.2B of debt still needs servicing. The tell is sequential deferred revenue and customer deposits, one flat, one already falling. This is the fact the case for owning it explains least well.

Consumer credit bites the fintech. Instacash advances make GEN a small consumer lender now, with those advances sold to Sound Point under a receivables agreement. The filing discloses no delinquency or loss trend. In a consumer downturn the advances sour while interest coverage sits near 4x, a bind a pure software company would never face. Watch for any reserve build or change in the receivables sale terms.

Deleverage and re-rate (right tail). FCF of $1.5B keeps cutting debt and shares, and if cross-sell lifts organic growth to sustained high single digits, EPS compounds double-digit while the multiple, 17.8x trailing and about 10x forward on analysts' non-GAAP earnings against peers near 30x, has room to close. The market prices a static levered rollup. The print that opens this is revenue growth accelerating past 7% with deferred revenue finally turning up.

Closing thoughts

This is not a mispricing waiting to be discovered. It is a known tension priced in plain sight. GEN sits at 17.8x trailing earnings and about 10x forward on analysts' non-GAAP numbers, below cyber peers near 30x, and the discount is the $8.2B of debt and the doubt about whether anything under the hood still grows. On the other side of you are investors who think consumer antivirus is in slow structural decline and MoneyLion is a distraction that bolts credit risk onto a software multiple. No single quarter settles that. The case rests on survival and arithmetic, the $1.5B of free cash flow that keeps cutting debt and share count whether or not the top line inflects. What survives a bad year is the annuity: sticky auto-renew subscriptions at 77% gross margin with almost no capital needs. On balance the downside, a levered rent-collector with a fading base and a new dose of consumer credit, is more clearly defined than the upside, which needs cross-sell to actually work. Judgment, not a number: the left tail is real but slow, the kind you can watch arrive in the deferred-revenue line and step out of.

The bet is still that ordinary people keep paying Norton, Avast, and LifeLock every year to guard their laptops and identities, and mostly forget to cancel, and that MoneyLion sells that same crowd loans and banking. What breaks it is the base eroding faster than fintech and debt paydown can offset. The one pair of numbers that tells you first is total revenue growth against deferred revenue. As long as both hold or rise together, the cross-sell is working and the cash machine keeps buying itself back cheaper. If revenue growth slips under organic zero while deferred revenue falls, the story is a levered melt with a loan book attached, and no buyback rescues that.