Digital Workforce Services Plc: Business Review, 1 January – 30 September 2025

Uncategorized

Digital Workforce Services Plc |Interim report Q3 | 23 October 2025 at 8.00 EEST

Business Review, 1 January – 30 September 2025 (unaudited)

ADJUSTED EBITDA DOUBLED. PROFESSIONAL SERVICES GREW BY 7%, DRIVEN BY AUTOMATION OUTSOURCING AND AI AGENT SOLUTIONS’ DEVELOPMENT

The effects of the cost-saving measures implemented in the first quarter resulted in improved profitability in the third quarter. The company’s continuous services declined by 3%, due to reduction of license revenue. Revenue from professional services grew by 7%, it was driven by automation outsourcing and AI agent solutions’ development. The company continued its strategic investments, particularly in healthcare business and AI solutions.

July-September 2025

• Revenue was EUR 6.6 (6.6) million and grew by 0.4%
• Adjusted EBITDA was EUR 0.4 (0.2) million and EBITDA EUR 0.3 (0.2) million
• Operating profit was EUR 0.2 (0.1) million
• Revenue from Continuous Services was EUR 4.2 (4.4) million and decreased by 3.0%. The

percentage of revenue was 64.5 % (66.8 %)

• Revenue from Professional Services was EUR 2.3 (2.2) million and grew by 7.4 %
• Earnings per share (EPS) was EUR 0.02 (0.02)
• At the end of the reporting period, cash and bank receivables and other liquid assets were

at EUR 7.6 (11.6) million

• The number of employees at the end of the reporting period was 171 (183) and the

average number of employees was 169 (180)

January-September 2025

• Revenue was EUR 20.1 (20.2) million and decreased by 1.0%
• Adjusted EBITDA was EUR 0.5 (0.7) million and EBITDA EUR -0.5 (0.7) million
• Operating profit was EUR -0.8 (0.4) million
• Revenue from Continuous Services was EUR 13.2 (12.7) million and increased by 3.9%. The

percentage of revenue was 65.6 % (62.8 %)

• Revenue from Professional Services was EUR 6.9 (7.5) million and decreased by 8%.
• Earnings per share (EPS) was EUR -0.08 (0.05)

Other events during the reporting period July-September:

• Company announced on 15 July 2025 of the completion of share repurchase program, and of the continuation of Lago Kapital as liquidity provider after the pause during the share repurchase program
• Company announced on 18 July 2025 of the acquisition of e18 Consulting Ltd.
• Company announced on 18 July 2025 that Antti Karjalainen, CTO, will leave his position as a member of the management team. Karjalainen continues as Executive Advisor, supporting the development of the AI agent business
• Company announced on 27 August 2025 that the Board of Directors has approved the stock option program of 2025, providing the right to issue a maximum of 300,000 share options, entitling the holders to subscribe 300,000 new shares for a subscription price of EUR 3.32 per share during 1 April 2025 to 31 December 2033

Outlook for 2025 (unchanged)

Digital Workforce’s full-year 2025 revenue is expected to be higher than in 2024 and adjusted EBITDA is projected to improve compared to 2024.

Key figures  

* The EBITDA adjustment consists of restructuring costs in 2024 and 2025 and of other expenses of one-off nature

** Gross profit calculation for first quarter of 2025 has been adjusted: the items affecting comparability that were previously presented above Gross profit are now fully allocated to EBITDA. The first quarter Gross profit is now comparable with other quarters.

CEO Jussi Vasama:

In the third quarter of 2025, overall economic uncertainty continued in many enterprise customers. Uncertainty of the market can be seen in the customers’ ability to initiate new projects both in the Nordics and the United States. In the United Kingdom, the government’s investments in digitalization and automation impacted positively the demand for our services.

Digital Workforce’s revenue grew by 0.4 % from the previous year. Professional services revenue grew by 7% from previous year. Growth in total outsourcing of automation services was strong, the demand for such services has noticeably increased in the past year. In the healthcare sector, several ongoing automation projects have progressed according to our expectations.

Continuous services revenue declined by 3% from the previous year. This development was driven by the decline in the less strategic license sales, as well as regular seasonality.

I am very pleased with the improvement of profitability that we have achieved, despite the revenue being slightly below our expectations. Adjusted EBITDA reached 7% of revenue. Profitability improvement is supported by both the cost saving measures carried out in the first half of the year, as well as the increasing focus on scalable businesses.

Professional services business focusing on implementing solutions based on AI agents has grown significantly. The demand increased particularly in the insurance sector and financial services, especially in the Nordics and UK. Our Agent Workforce solution, based on AI agents, has developed significantly, and creates good, scaling growth opportunities for the first half of 2026.

Digital Workforce celebrated its 10th anniversary in August. The entire team came together in Poland for a common technology and AI training, strategy presentation, and value workshop, as well as an anniversary celebration where staff members were rewarded for their commitment to customer work and values-based activity.

After the reporting period, on 1 October 2025, we completed the acquisition of e18 Consulting Ltd. The acquisition supports the strategy of profitable international growth of Digital Workforce and makes healthcare its largest vertical. It also strengthens our position as a leading provider of pathway automation in the UK, where the NHS is one of the world’s largest public healthcare providers. Digital Workforce’s Outsmart platform and delivery capability will provide increasing scale, resilience, innovative new solutions and faster outcomes that free up clinical time and help reduce backlogs.

After the end of the reporting period, we also achieved an important win in automating a Nordic central hospital’s care pathways. The solution is based on our scalable and modular Outsmart offering, and it enables diverse automation in the follow-up of chronic illnesses.

During the year we have made significant transformations of our activities. I see that even in the current economic situation, the company has good potential in executing its strategy of profitable growth.

Events after period-end

On 1 October 2025, Digital Workforce announced that it had completed the acquisition of e18 Consulting Ltd, according to plan originally announced on 18 July 2025. The Board of Directors approved the directed share issue to Louise Wall, founder of the company to be acquired. Louise Wall was appointed as member of the management team responsible for the UK and Ireland healthcare business. Changes to roles of other management team members Karli Kalpala and Stefan Meller were announced at the same time.

This is not an interim report pursuant to the IAS 34 standard. The company adheres to the semi-annual reporting arrangement laid down in the Securities Markets Act and publishes business reviews for the first three and nine months of each year. which present the key information on the company’s financial development. The financial information provided in this business review has not been audited. Unless otherwise stated. the figures in parentheses refer to the corresponding period of the previous year. Percentages and figures presented may include rounding differences and might therefore not add up precisely to the totals presented.

Contact information:

Digital Workforce Services Plc

Jussi Vasama, CEO

Tel. +358 50 380 9893

Laura Viita, CFO

Tel. +358 50 487 1044

Investor relations | Digital Workforce

Certified advisor 

Aktia Alexander Corporate Finance Oy

Tel. +358 50 520 4098

The post Digital Workforce Services Plc: Business Review, 1 January – 30 September 2025 appeared first on Digital Workforce.

Ditch the Keys, Unlock the Future

Uncategorized

Picture this: You’re walking up to your front door, hands full of groceries. Instead of fumbling for keys, your door unlocks automatically as you approach. The entryway lights flick on, your thermostat shifts to the perfect temperature, and your favorite playlist starts, all without you touching a thing. 

The post Ditch the Keys, Unlock the Future appeared first on SmartThings Blog.

Put CLM on Fast Forward for a 47-Day SSL/TLS Certificate Advantage

Uncategorized

Put CLM on Fast Forward for a 47-Day SSL/TLS Certificate Advantage

Change is coming to SSL/TLS certificate management, and it’s arriving faster than most organizations realize. The CA/B Forum’s version of “March Madness” will start rolling out within months and culminate in a rigorous 47-day maximum certificate validity requirement by 2029. The 47-day mandate will force a new approach to outdated manual CLM approaches for several reasons:

• Shorter validity periods mean stronger security posture – Less time for compromised certificates to cause damage, faster revocation cycles, and reduced exposure windows
• Forced automation eliminates human error – Manual certificate management becomes impossible at scale, driving the necessary shift to automated systems
• Competitive differentiation through operational excellence – While competitors struggle with compliance, you’re delivering seamless, uninterrupted services
• Foundation for crypto-agility – The infrastructure you build for 47-day compliance becomes your platform for post-quantum cryptography readiness and future algorithm transitions

Skip the Scramble: Start Scanning Today  

Organizations that embrace this change now will emerge with certificate management capabilities that their competitors won’t match for years.

The Scramble vs. The Strategic Advantage

We’re already seeing two distinct paths emerge in the market. Some organizations are waiting it out, hoping the mandate will be delayed or diluted. Others are seizing the moment, using this transition as their catalyst for CLM modernization.

When compliance deadlines loom, scrambling organizations typically rush to implement band-aid solutions that barely meet requirements and suffer the resulting outages and service disruptions.

Forward-thinking IT security experts will lead their organizations using  a different approach:

• Building comprehensive discovery capabilities that reveal their complete SSL/TLS certificate landscape. This is not just the publicly visible certificates, but the hidden infrastructure certificates that pose the real operational risk.
• Implementing automated lifecycle management that handles certificate provisioning, renewal, and revocation seamlessly across all environments—from public cloud to private networks to edge devices.
• Creating crypto-agile architectures that can adapt to algorithm changes, post-quantum cryptography, and future security requirements without massive infrastructure overhauls.
• Establishing governance frameworks that enforce consistent security policies while supporting business agility and compliance requirements.

Most organizations have no clear picture of how many SSL/TLS certificates they actually have or where those certificates live. The reality is that they are spread across:

• Internal network infrastructure – Servers, databases, APIs, and applications that never appear in public scans.
• Cloud-native environments – Container orchestration platforms, microservices, and serverless functions, each with unique certificate requirements
• Development and staging systems – Non-production environments that still need valid certificates for testing and integration
• IoT and edge devices – Connected devices and edge computing platforms with embedded certificates
• Legacy applications – Older systems still running with forgotten certificates 

The bottom line: You can’t manage what you can’t see, and you can’t secure what you don’t know exists.

The Crypto-Agile Advantage: Future-Proofing for the 47-Day Mandate and More

The 47-day mandate is just the beginning. Post-quantum cryptography is coming. New algorithms will emerge. Security standards will evolve. The infrastructure you build to handle shorter certificate lifespans becomes your foundation for adapting to all of these changes.

Crypto-agility means:

• Seamless algorithm transitions when new cryptographic standards emerge
• Rapid response capabilities for security vulnerabilities or algorithm compromises
• Standardized processes that can accommodate and work seamlessly across multiple certificate authorities and  environments 
• Automated policy enforcement that adapts to changing compliance requirements
• Zero-downtime updates that maintain service availability during security transitions

Organizations building crypto-agile certificate management now will handle future changes with confidence while their competitors struggle through each new requirement.

Building Your 47-Day TLS Advantage: The Practical Steps

So how do forward-thinking organizations actually make this transition? It starts with understanding where you are, then building toward where you need to be.

Step 1: Complete Discovery and Assessment

• Get the full picture of your SSL/TLS certificate landscape—not just the public certificates, but every certificate across every environment. Most organizations discover they have 10-100 times more certificates than they realized.
• Assess your current processes for certificate lifecycle management, crypto-agility readiness, and 47-day compliance gaps. A clear baseline is essential for planning your modernization journey.

Step 2: Design Your Modernization Strategy

• Develop a roadmap that addresses immediate 47-day TLS compliance needs while building long-term crypto-agility capabilities. The best strategies solve today’s problems while positioning for tomorrow’s requirements.
• Plan your automation architecture to handle certificate lifecycle management at enterprise scale across all environments and certificate authorities.

Step 3: Implement and Optimize

• Deploy automated certificate lifecycle management that can handle the operational requirements of 47-day TLS certificates while supporting your broader security and compliance goals.
• Establish governance policies that ensure consistent security standards while supporting business agility and growth.
• Build monitoring and alerting systems that provide visibility into certificate health and proactive management of potential issues.

Schedule a consultation to discuss your specific modernization strategy →

The Time to Act Is Now

PacificSource recently modernized its certificate lifecycle management program, automating and ensuring crypto-agility for IT security. What they knew that others don’t is that the organizations that will thrive in the 47-day TLS era are the ones taking action today. While competitors debate and delay, they’re building the certificate management capabilities that will serve as competitive advantages for years to come.

The window for strategic positioning is closing. Organizations that wait until compliance deadlines are imminent will be forced into reactive, sub-optimal solutions. Those that act now can build comprehensive, crypto-agile certificate management programs that position them as industry leaders.

Your next move matters. Will you be among the organizations that use this transition to leapfrog competitors, or will you be scrambling to catch up while they pull ahead?

The choice is yours, but the time to choose is now.

Ready to Build Your 47-Day TLS Advantage?

Don’t wait for the scramble. Start building your competitive advantage today with a comprehensive understanding of your SSL/TLS certificate landscape and a strategic plan for modernization.

Your next steps:

 Run a Free SSL/TLS Certificate Discovery Scan to see your complete certificate inventory

 Book a Platform Demo to see how automated certificate lifecycle management works in practice

 Speak with a Certificate Lifecycle Expert to discuss your specific requirements and challenges

Digital Workforce continues as the City of Helsinki’s partner in process automation

Uncategorized

  Press release: 7.10.2025, 8:30 – Digital Workforce continues as the City of Helsinki’s partner in process automation

The post Digital Workforce continues as the City of Helsinki’s partner in process automation appeared first on Digital Workforce.

AVX ONE SSH: Comprehensive SSH Key Lifecycle Management for Enterprise Security

Uncategorized

Every unmanaged SSH key is a potential backdoor for unauthorized access. In most enterprises, there are thousands—and sometimes millions—of keys no one is actively tracking. That’s why AppViewX is announcing the general availability of AVX ONE SSH, a purpose-built product that closes one of security’s most overlooked gaps: SSH key sprawl and lifecycle management across hybrid and multi-cloud infrastructures.

The Enterprise SSH Key Challenge

SSH is foundational to secure enterprise operations, enabling everything from server administration to DevOps automation. But, because keys are easy to create and don’t expire by default, they proliferate rapidly and quietly. Over time, organizations accumulate keys scattered across the infrastructure—with limited visibility into who can access what.

The security implications are significant. Every unmanaged key can become an unmonitored access path, resulting in a compliance gap or an audit failure. Recent research indicates that up to 90% of organizations lack a complete inventory of active SSH keys, and 54% still rely on manual processes, like spreadsheets, for key management—clear signals that automation and governance are overdue.

Left unchecked, SSH key sprawl drives three primary enterprise risks:

Security exposure: Persistent access paths that bypass traditional access controls and monitoring.

Compliance failures: Regulations require complete access records, including SSH keys and certificates, and gaps can lead to penalties.

Operational inefficiency: Manual key management does not scale and consumes significant team resources while delivering incomplete coverage.

Meet AVX ONE SSH

Built on AppViewX’s certificate lifecycle management platform, AVX ONE SSH delivers comprehensive SSH key lifecycle management through three core capabilities: visibility, automation, and policy control.

Visibility

Effective security starts with clear visibility. AVX ONE SSH discovers and inventories every key and certificate across the enterprise, eliminating blind spots and providing the intelligence needed to manage risk proactively.

Comprehensive Discovery: Automatically scan and discover all SSH keys and certificates (both user and host) across hybrid, multi-cloud, and DevOps environments to eliminate blind spots.

Centralized Inventory Management: Maintain a single, central inventory of SSH keys and certificates to simplify monitoring and management across a distributed infrastructure.

Trust Relationship Mapping: Visualize trust relationships between users, hosts, servers, and service accounts to enable successful key rotations and maintain operational continuity.

Risk Intelligence: Perform SSH risk assessments and trend analysis using the Risk Dashboard to monitor the status of keys and configurations, enabling proactive security management.

Automation

Managing SSH keys at scale can become overwhelming. AVX ONE SSH automates the entire lifecycle and reduces manual effort to ensure consistent, secure operations.

Complete Lifecycle Automation: Generate, provision, rotate, and delete keys automatically to eliminate manual effort and promote crypto-agility.

One-Click Risk Remediation: Instantly delete or rotate suspicious, shared, orphaned, or weak keys with single-click remediation to contain security threats and enforce security policies.

Automated Workflows: Leverage custom or out-of-the-box workflows to streamline complex rotations and deletions that align with compliance controls or change windows.

Seamless Integration and Self-Service: Automate SSH key and access onboarding via native integrations with IAM and DevOps tools. Allow users to securely request/generate keys and manage access through a self-service UI, so teams manage SSH access the way they prefer to work.

Control

Governance is essential for long-term security. AVX ONE SSH automatically enforces policies, streamlines reporting, and enables access controls to maintain oversight while supporting operational agility.

Zero-Touch Policy Enforcement: Enforce organizational policies for SSH key generation to ensure every key meets standards without manual intervention.

Rotation Policy Management: Define rotation intervals and automate enforcement to maintain a continuous security posture.

Risk Assessment and Compliance: Generate audit-ready reports and maintain detailed logs and trails to demonstrate adherence to regulatory frameworks and security audits.

Granular Access Controls: Apply role-based access control (RBAC) and host grouping to delegate SSH access at scale while retaining centralized oversight and guardrails.

Integrations Built for Your IT Stack

AVX ONE SSH integrates with the existing enterprise systems you’re already using:

Cloud Platforms: Native integration with AWS for seamless key management across hybrid environments.

Identity Systems: Connects with CyberArk and leading PAM solutions to align SSH access with enterprise identity governance.

DevOps Tools: Supports SSH capabilities through APIs, which can be seamlessly integrated with CI/CD pipelines and DevOps tools such as Ansible and Puppet.

ITSM: Connects to ServiceNow, BMC Remedy, and similar platforms to incorporate SSH key requests and approvals into established service management processes.

Flexible Deployment: Choose SaaS for rapid time-to-value or on-premises to meet specific regulatory or security requirements.

Why SSH Lifecycle Management is Critical Now

SSH key sprawl represents a significant and growing security risk that traditional tools and processes cannot address at an enterprise scale. The proliferation of unmanaged keys creates persistent access paths that bypass conventional security controls, while manual management processes can’t keep up with hybrid infrastructure and increased regulatory scrutiny.

To close this gap, organizations need automated discovery to understand their current exposure, policy-driven controls to prevent future sprawl, and integrated workflows that align with existing security operations.

AVX ONE SSH addresses these requirements by transforming SSH lifecycle management from a manual, error-prone process into an automated, policy-driven capability. The result: stronger security posture, lower operational overhead, and faster paths to compliance across environments.

For security teams managing complex, distributed infrastructure, comprehensive SSH lifecycle management is no longer optional—it’s essential for maintaining resilience in today’s threat landscape.

Frequently Asked Questions

Q: Will AVX ONE SSH break access during rotation?
A: No. Rotations are staged with preflight checks, trust-mapping, and canary batches, with automatic rollback on validation failure. You can start in read-only discovery, then roll out changes by host group or business unit to avoid disruption. As long as your infrastructure is fully discovered by AppViewX, rotations will not break. However, for any key instance not discovered by AppViewX, rotations may cause disruption.

Q: Is discovery agentless or agent-based?
A: Agentless by default. AVX ONE SSH enumerates keys and trust relationships via credentialed connections and integrations (e.g., config management/CMDB). For constrained zones, lightweight connectors are supported.

Q: Do you support SSH certificates (OpenSSH CA) and migrations from keys?
A: Yes. AVX ONE SSH manages both traditional keys and OpenSSH certificates, enabling policy-issued, short-lived certs. Many teams use it to phase out long-lived keys and reduce standing access.

Q: How is this different from PAM or a secrets manager (e.g., CyberArk, Vault)?
A: PAM governs privileged sessions; secrets managers store/broker secrets. AVX ONE SSH governs the lifecycle of SSH identities (keys & certs): discovery, mapping, rotation, and policy enforcement—while integrating with PAM/IAM/secrets tools.

Q: Can we enforce policy (algorithms, lifetimes, rotation) and prove compliance?
A: Yes. Define cryptographic and rotation policies; AVX ONE SSH enforces them automatically and produces audit-ready reports and trails (with RBAC and host grouping) to demonstrate control to regulators and auditors.

See AVX ONE SSH in Action

If you don’t know how many SSH keys you have—or who can access them—you already have a problem. If you’re ready to take control, we can help. Get the full breakdown of the solution, integrations, and deployment options in the AVX ONE SSH datasheet, or book a tailored demo to see it in action.

Digital Workforce Services Receives €2.6 Million Order from Major U.S. Utility Company

Uncategorized

The post Digital Workforce Services Receives €2.6 Million Order from Major U.S. Utility Company appeared first on Digital Workforce.