360 Security Technology Inc.

Revenue comes from several distinct streams recognized in different ways: advertising priced either as a fixed fee over a contract term or by user actions such as clicks and resulting purchases; consumer memberships and games recognized over the service period or net of amounts owed to outside game developers; hardware recognized when delivered and accepted; and security products, projects and services recognized as they are delivered, accepted or as work progresses. Government, energy and financial customers procure security work on slower annual budget cycles, so that part of revenue concentrates later in the year while the related costs are spread more evenly across it.

Only a handful of the companies CompanyGraph tracks combine a production business with this kind of subscription and usage-based lock-in economics, making this an uncommon way to scale within its category. CompanyGraph reads the company's scaling pattern as reinvestment-led: it has built extensive self-operated computing and data-center infrastructure and reaches a very large base of devices and users, funded in part by directing a large share of revenue back into research and development rather than into near-term profit, and it has recorded net losses in some past years while doing so. It also holds cash that is large relative to both its near-term obligations and its overall asset base, which is consistent with keeping a funding buffer for continued build-out, though CompanyGraph cannot confirm that is the intended purpose from the data alone.

The company depends on a wide range of upstream industries for its inputs, more industries than it in turn supplies, reflecting how much outside infrastructure and material it draws on relative to what it sends downstream. In its own risk disclosures it names continued access to advanced computing, cloud and large-model technology as a dependency, along with retaining technical staff and keeping the regulatory qualifications needed to operate. It also flags that sanctions from foreign government agencies could make overseas procurement of computing and other core infrastructure harder and more costly to obtain.

The company supplies a narrower set of downstream industries than it draws inputs from. Its own disclosures name government bodies, large enterprises, operators of critical infrastructure, and small and medium-sized businesses across sectors such as energy, finance, manufacturing and transportation as buyers of its security offerings, alongside a broad base of individual consumers reached through its internet products. It states that no single customer accounts for a large concentrated share of its revenue, so its downstream base is disclosed as spread across many buyers rather than concentrated in a few.

Very few companies CompanyGraph tracks combine a production-based security and internet business with this kind of subscription and usage-based lock-in economics, which marks this company's operations as uncommon rather than typical for its category. The company itself points to its accumulated volume of text, image and video data, its very large installed base of security and browser users, a security system that combines cloud, endpoint, data, artificial intelligence, expert and operational layers, and a claimed leading share of domestically discovered advanced threat groups as the strengths that set it apart. CompanyGraph has not verified whether rivals can replicate any of this, so these are presented as the company's own claimed position rather than a confirmed barrier to competition. Structurally near is not the same as moving together or being interchangeable, it means CompanyGraph sees a shared way of operating or a detected pattern, not a price relationship or a comparison verdict.

In its own account of what limits its growth, the company points to the scale of investment and time that artificial intelligence and security development require before they generate returns, long procurement cycles with government and enterprise customers, the operating qualifications it must maintain, and its ability to retain technical talent. It also names harder and more costly access to computing infrastructure under geopolitical restrictions as a limit, and it describes commercial demand for its digital-security products specifically as limited and uneven rather than steadily growing. This differs from what a typical subscription-based software business would emphasize as its main limit, usually keeping customers renewing rather than losing them; this company's own stated limits center more on investment cycles, talent and computing access than on customer churn.

The company's own risk disclosures name technological change, intensifying competition and rising costs of developing new business, and the loss of core technology or key technical staff as the risks it lists first, ahead of operating and management risk, receivables risk, brand and qualification risk, and geopolitical risk. It does not disclose reliance on any single customer for a large share of revenue, and it reports no major litigation or arbitration and no sanctions or penalties against the company or its leadership during the year covered. Its own account does single out exposure to sanctions from foreign government agencies as a named geopolitical risk, alongside the possibility that new products it develops fail to gain the market traction it expects.

The company operates under Chinese securities regulation and under national laws covering cybersecurity, data security, personal information protection, cloud services and generative artificial intelligence, which it names as the frameworks governing its operations. It also discloses that it is subject to sanctions from agencies of the United States government, which it says can raise the cost of its overseas operations and procurement and, combined with wider geopolitical tension, can make computing and other core infrastructure harder and more expensive for it to obtain. Businesses that earn revenue mainly through renewing subscriptions are typically most exposed to customers not renewing relative to what it cost to acquire them; the company's own reported shift of parts of its internet business toward subscriptions and paid usage suggests this particular pressure is still being built out for it rather than already established.