CVLT — Commvault
A $1,000 starter that never graduated. Still real money, so it stays in the book.
Commvault sells cyber-resilience software around data protection, recovery, security and identity resilience. The business has been getting more subscription- and SaaS-heavy. My position is much less exciting: about a $1,000 starter I bought and then never promoted into a real allocation.
This one is a little weird, which honestly is why I want it in the record.
Why I care about this one
Commvault sits in data protection and cyber resilience: backup, recovery, data security and increasingly identity resilience across cloud, hybrid and on-premise environments.
The business has become much more subscription-heavy, and the SaaS piece has been growing faster than the company overall. That is the interesting part. Data keeps spreading across more systems while ransomware, identity attacks and AI-created data make recovery more important, not less.
The operating business has kept moving in the right direction since I bought the tiny starter. In fiscal Q1 2027, total revenue grew 11% year over year, subscription revenue grew 16%, subscription ARR grew 22%, SaaS revenue grew 39%, and free cash flow grew 71%.
The business did not obviously break. I just never did the next round of work required to turn a $1,000 starter into something that deserves meaningful capital. That is on me, not the company.
Fiscal Q1 2027
Primary sources: Fiscal Q1 2027 results ↗ · Investor relations ↗
Fiscal Q1 2027 kept the operating story healthy: subscription ARR $1.054B, SaaS ARR $424M, subscription revenue +16% and free cash flow +71%. My portfolio conclusion did not suddenly become more sophisticated because the quarter was good. This is still a legacy-sized position with no active scenario model, so I need fresh work before I add.
My position
What I actually bought and sold.
| Date | Type | Account | Dollars | Shares | Price | Return now* |
|---|---|---|---|---|---|---|
| Jan 30, 2026 | Buy | Taxable | $1,000 | 11.431 | $87 | +66.4% |
*Return now uses the latest available quote for buys and reinvestments. Sales and fees show “—”.
Valuation & scenario math
I do not have an active buy band for CVLT right now.
That is intentional. The stock going up since I bought it does not magically create a valuation framework, and the old purchase price is not an anchor for what it is worth today. If I am going to add again, I want fresh earnings assumptions, a real scenario model and a comparison against the rest of the portfolio first.
Fresh underwriting first
No active buy band because I have not earned one. Before another dollar goes into CVLT, I need a fresh scenario model and an expected-return comparison against the stuff that already matters more in the portfolio.
Capital allocation
The recurring engine looks good. I still owe the position actual work.
Subscription and SaaS growth plus strong free-cash-flow conversion look encouraging, and the cash balance gives the company flexibility. I leave points off for SBC leakage and, more importantly, because this position has not had enough fresh underwriting for me to pretend I know the deployment/alignment story as well as the bigger holdings.
Stage-relative, not some objective rating-agency grade. The number is there to force the judgment into the open. See the rubric →
What management is actually doing with the cash
The company is funding the platform and still returning cash through repurchases. Management says fiscal 2027 repurchases should be roughly 60% of free cash flow. Fine. I am honestly less interested in forcing a perfect score onto a tiny legacy position than I am in whether the SaaS transition keeps improving per-share cash economics.
What I’m doing with the next dollar
Fresh work.
If CVLT is going to graduate from “small position sitting around” into an actual allocation, I want a current model, explicit expected returns and a reason it beats adding to one of the compounders I already understand better.
Until then, it can sit there. A tiny position existing is not much of a reason to manufacture urgency around it.
What can break this
Cybersecurity is crowded, the company still has to prove that strong SaaS growth translates into durable per-share economics, and stock-based compensation is not exactly invisible.
There is also a portfolio-management problem: every hour I spend rebuilding CVLT is an hour I am not spending on a position that already matters more. That opportunity cost applies to research too.
A sustained slowdown in subscription ARR/SaaS growth, weaker retention, deteriorating cash generation, or evidence that the platform is losing relevance in enterprise cyber resilience would matter.
The more immediate portfolio question is even simpler: if I am never willing to do enough work to justify adding, at some point I should ask why I still own it at all.
The evidence I’m watching
SaaS ARR and subscription revenue keep outgrowing the company, retention stays healthy, free-cash-flow conversion scales with the recurring mix, and the platform wins in cyber resilience without needing expensive acquisition-led growth.
Subscription or SaaS growth slows sharply, retention weakens, SBC eats too much of the per-share progress, or broader security/recovery platforms make the product less relevant.