NETSCOUT SYSTEMS INC (NTCT)

Item 2. Management's Discussion and Analysis of Financial Condition and Results of Operations

You should read the following discussion and analysis of our financial condition and results of operations in conjunction with the condensed consolidated financial statements and notes thereto included elsewhere in this Quarterly Report and in our Annual Report on Form 10-K for the fiscal year ended March 31, 2026, filed with the Securities and Exchange Commission (SEC) on May 14, 2026 (Annual Report). This discussion contains forward-looking statements that involve risks and uncertainties. When reviewing the discussion below, you should keep in mind the substantial risks and uncertainties that could impact our business. In particular, we encourage you to review the risks and uncertainties described in Part I, Item 1A "Risk Factors" in our Annual Report. These risks and uncertainties could cause actual results to differ significantly from those projected in forward-looking statements contained in this report or implied by past results and trends. Forward-looking statements are statements that attempt to forecast or anticipate future developments in our business, financial condition or results of operations. See the section titled "Cautionary Statement Concerning Forward-Looking Statements" that appears at the beginning of this Quarterly Report. These statements, like all statements in this report, speak only as of the date of this Quarterly Report (unless another date is indicated), and, except as required by law, we undertake no obligation to update or revise these statements in light of future developments.

Overview

We are an industry leader with over four decades of experience in providing enterprise network observability, carrier service assurance, AIOps, cybersecurity, and DDoS, protection solutions. Our unique visibility platform and solutions are powered by our pioneering DPI, technology at scale, which is used by many Fortune 500 companies to protect their digital business services against disruption. Service providers and enterprises, including local, state and federal government agencies, rely on our solutions to achieve the visibility and protection necessary to optimize network performance, ensure the delivery of high-quality, mission-critical applications and services, gain timely insight into the end-user experience, and protect their networks from attack. The majority of our solutions are designed to provide Smart Data, a high-fidelity, decision-grade data foundation derived from real-time network activity across legacy, hybrid, and cloud-native environments. This data is designed to enable a unified view of performance, availability, and security, support faster root-cause analysis and operational decision-making, and is increasingly used to inform broader observability platforms and automated and AI-driven workflows. With our offerings, customers can quickly, efficiently and effectively identify and resolve issues that result in downtime, service interruptions, poor service quality, or compromised data, thereby reducing mean time to resolution of issues and driving compelling returns on their investments in their networks and broader technology initiatives. Significant technology trends and catalysts for our business include the evolution of customers' digital transformation initiatives, such as migration to cloud environments and to the edges of their networks; the rapidly evolving cybersecurity threat landscape; advancements in artificial intelligence and business analytics that can enhance observability and are increasing the need for high-quality, real-time data to support automated and AI-driven operations; and the continued evolution and potential opportunities related to 5G technology across both the service provider and enterprise customer verticals.

Our operating results are affected by a variety of factors, including customer demand, product and services mix, pricing, operating costs, competition, and our ability to successfully execute our growth and strategic initiatives. See Part I, Item 1A, “Risk Factors” in our Annual Report for additional information regarding factors that may affect our business and operating results.

On May 1, 2026, the Company acquired the assets and certain liabilities comprising DigiCert, Inc.'s DDoS protection business pursuant to an Asset Purchase Agreement (the "Acquisition"). The Digicert DDoS protection business acquisition enhances the Company’s cybersecurity offerings and enables the integration of certain infrastructure of the Company’s Arbor Cloud network, while expanding its DDoS protection capabilities. The DigiCert DDoS protection business acquisition is expected to contribute approximately $20 million in annualized revenue from the acquisition date, while providing the Company with greater control of the Arbor Cloud network and a clearer path to scaling cloud-based services over time.

Global and Macroeconomic Conditions

We continue to closely monitor current global and macroeconomic conditions, including the impacts of armed conflicts or warfare, global geopolitical tension, stock market volatility, industry-specific capital spending trends, exchange rate fluctuations, inflation, interest rates, international trade relations (including trade protection measures, such as tariffs and other trade barriers), and the risk of a recession, including the manner and extent to which they have impacted and could continue to impact our business, customers, employees, supply chain, and distribution network. In addition, our industry is experiencing AI-related supply-chain dynamics which could influence the timing and size of certain customer orders. The full extent of the impacts of these global and macroeconomic conditions remains dynamic. We remain optimistic but cognizant of ongoing macroeconomic dynamics and

19

Table of Contents

constrained customer spending in the service provider market and firmly focused on driving product innovation, sustaining annual revenue growth, and enhancing margins through continued disciplined cost management as we navigate the current macroeconomic landscape. As a result, we have continued our efforts to manage discretionary costs and align spending with the current environment while we continue to execute on our long-term strategic plans.

Though we continue to monitor the impacts of evolving global and macroeconomic conditions on our business, we believe our current cash reserves and access to capital through our revolving credit facility leave us well-positioned to manage our business in today's environment. We expect net cash provided by operations combined with cash, cash equivalents, marketable securities and borrowing availability under our revolving credit facility to provide sufficient liquidity to fund current obligations, capital spending, and working capital requirements over at least the next twelve months. We continue to take actions to manage costs and increase productivity throughout our company, including managing discretionary spending and hiring activities, but are continuing to invest in areas that advance our business for the future. In addition to our cash equivalents, we had $600 million available under a revolving credit facility based on covenant levels at June 30, 2026.

Results Overview

Total revenue increased $23.7 million, or 13%, for the three months ended June 30, 2026, as compared to total revenue for the three months ended June 30, 2025, driven by increases in both product and service revenue. Growth was primarily driven by demand for service assurance offerings from enterprise customer channels. U.S. revenue increased 24% while international revenue decreased 1%.

Our gross profit percentage increased 2 percentage points to 79 % during the three months ended June 30, 2026, as compared with the three months ended June 30, 2025, primarily due to increased product revenue growth and a more favorable product mix associated with increased licensing of our software products.

Net income for the three months ended June 30, 2026 was $21.8 million, as compared with a net loss for the three months ended June 30, 2025 of $3.7 million. The increase of $25.5 million in net income was primarily due to a $23.7 million increase in revenue, $3.7 million increase in tax benefit, $3.4 million increase in capitalized software, $1.1 million increase in interest income, partially offset by $11.8 million increase in employee-related expenses primarily due to an increase in variable incentive compensation.

At June 30, 2026, we had cash, cash equivalents, marketable securities and investments (current and non-current) of $668.5 million. This represents a decrease of $36.7 million from $705.1 million at March 31, 2026. This decrease was primarily due to $55.0 million used in the acquisition of the DDoS Protection Business of DigiCert, $25.3 million used for tax withholdings on restricted stock units, $20.2 million in purchases of marketable securities, and $3.5 million used for capital expenditures, partially offset by $50.8 million of net cash provided by operations, and $23.8 million in proceeds from the maturity of marketable securities during the three months ended June 30, 2026.

Use of Non-GAAP Financial Measures

We supplement the United States GAAP financial measures we report in quarterly and annual earnings announcements, investor presentations and other investor communications by reporting the following non-GAAP measures: non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income, non-GAAP diluted net income per share, and adjusted EBITDA. Non-GAAP gross profit removes expenses related to the amortization of acquired intangible assets, share-based compensation expense, and acquisition-related depreciation expense from gross profit (GAAP). Non-GAAP income from operations includes the aforementioned adjustments related to non-GAAP gross profit and also removes executive transition costs, and restructuring charges from income (loss) from operations (GAAP). Non-GAAP net income includes the foregoing adjustments related to non-GAAP income from operations, and also removes the income tax effects of such adjustments from net income (loss) (GAAP). Non-GAAP diluted net income per share is non-GAAP net income divided by total outstanding shares on a diluted basis. Adjusted EBITDA includes the aforementioned adjustments related to non-GAAP net income and also removes interest and other expense, income tax expense, and non-acquisition related depreciation from net income (GAAP). Beginning in the third quarter of fiscal year 2026, we have renamed non-GAAP EBITDA from operations to adjusted EBITDA. We now reconcile this metric to GAAP net income; however, the adjustments included, and the resulting amounts are unchanged from prior periods. This change is intended to align terminology with common market practice.

These non-GAAP measures are not prepared in accordance with GAAP, should not be considered an alternative for measures

20

Table of Contents

prepared in accordance with GAAP (gross profit, income (loss) from operations, net income, and diluted net income per share), and may have limitations because they do not reflect all our results of operations as determined in accordance with GAAP. These non-GAAP measures should only be used to evaluate our results of operations in conjunction with the corresponding GAAP measures. The presentation of non-GAAP information is not meant to be considered superior to, in isolation from, or as a substitute for results prepared in accordance with GAAP. These non-GAAP measures should not be used to evaluate our results of operations against those of our peers or other companies, as the definitions and calculations of our non-GAAP measures may not be the same as those used by other companies, even if the measures share the same name.

Management believes these non-GAAP financial measures will enhance the reader's over

[Excerpt truncated for page length; source filing is linked above.]

Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations

The following information should be read in conjunction with the audited consolidated financial information and the notes thereto included in this Annual Report. In addition to historical information, the following discussion and other parts of this Annual Report contain forward-looking statements that involve risks and uncertainties. You should not place undue reliance on these forward-looking statements. Actual events or results may differ materially due to the factors discussed in Item 1A. "Risk Factors" and elsewhere in this Annual Report. These factors may cause our actual results to differ materially from any forward-looking statement. See the section titled "Cautionary Statement Concerning Forward-Looking Statements" that appears at the beginning of this Annual Report.

Overview

We are an industry leader with over four decades of experience in providing enterprise network observability, carrier service assurance, cybersecurity, and DDoS, protection solutions. Our unique visibility platform and solutions are powered by our pioneering DPI, technology at scale, which is used by many Fortune 500 companies to protect their digital business services against disruption. Service providers and enterprises, including local, state and federal government agencies, rely on our solutions to achieve the visibility and protection necessary to optimize network performance, ensure the delivery of high-quality, mission-critical applications and services, gain timely insight into the end-user experience, and protect their networks from attack. The majority of our solutions are designed to provide Smart Data, a high-fidelity, decision-grade data foundation derived from real-time network activity across legacy, hybrid, and cloud-native environments. This data enables a unified view of performance, availability, and security, supports faster root-cause analysis and operational decision-making, and is increasingly used to inform broader observability platforms and automated and AI-driven workflows. With our offerings, customers can quickly, efficiently and effectively identify and resolve issues that result in downtime, service interruptions, poor service quality, or compromised data, thereby reducing mean time to resolution of issues and driving compelling returns on their investments in their networks and broader technology initiatives. Significant technology trends and catalysts for our business include the evolution of customers' digital transformation initiatives, such as migration to cloud environments and to the edges of their networks; the rapidly evolving cybersecurity threat landscape; advancements in artificial intelligence and business analytics that can enhance observability and are increasing the need for high-quality, real-time data to support automated and AI-driven operations; and the continued evolution and potential opportunities related to 5G technology across both the service provider and enterprise customer verticals.

Our operating results are influenced by a number of factors, including, but not limited to the volume, mix, and quantity of products and services sold; pricing, costs and availability of materials used in our products; growth in employee-related costs, including commissions; and the expansion of our operations. Factors that affect our ability to maximize our operating results include, but are not limited to: our ability to introduce and enhance existing products; the marketplace acceptance of those new or enhanced products; continued expansion into international markets; expansion into new or adjacent markets; development of strategic partnerships; competition; successful acquisition and integration efforts; and our ability to control costs and make improvements in a highly competitive industry.

Global and Macroeconomic Conditions

We continue to closely monitor current global and macroeconomic conditions, including the impacts of armed conflicts or warfare, global geopolitical tension, stock market volatility, industry-specific capital spending trends, exchange rate fluctuations, inflation, interest rates, international trade relations (including trade protection measures, such as tariffs and other trade barriers), and the risk of a recession, including the manner and extent to which they have impacted and could continue to impact our business, customers, employees, supply chain, and distribution network. In addition, our industry is experiencing AI-related supply-chain dynamics which could influence the timing and size of certain customer orders. The full extent of the impacts of these global and macroeconomic conditions remain dynamic. We remain optimistic but cognizant of ongoing macroeconomic dynamics and constrained customer spending in the service provider market and firmly focused on driving product innovation, sustaining annual revenue growth, and enhancing margins through continued disciplined cost management as we navigate the current macroeconomic landscape. As a result, we have continued our efforts to manage discretionary costs and align spending with the current environment while we continue to execute on our long-term strategic plans.

38

Table of Contents

Though we continue to monitor the impacts of evolving global and macroeconomic conditions on our business, we believe our current cash reserves and access to capital through our revolving credit facility leave us well-positioned to manage our business in today's environment. We expect net cash provided by operations combined with cash, cash equivalents, marketable securities and investments and borrowing availability under our revolving credit facility to provide sufficient liquidity to fund current obligations, capital spending, and working capital requirements over at least the next twelve months. We continue to take actions to manage costs and increase productivity throughout our company, including managing discretionary spending and hiring activities, but are continuing to invest in areas that advance our business for the future. In addition to our cash equivalents, based on covenant levels at March 31, 2026, we had an incremental $600 million available to us under our revolving credit facility.

Results Overview

Total revenue increased $36.8 million, or 4% for the fiscal year ended March 31, 2026, compared to the fiscal year ended March 31, 2025, driven by increases in both product and service revenue. Growth was supported by higher demand for service assurance and cybersecurity offerings across enterprise and service provider customer verticals. International revenue increased 8% and U.S. revenue increased 2%.

Our gross profit percentage increased by one percentage point to 79% during the fiscal year ended March 31, 2026 as compared with the fiscal year ended March 31, 2025 primarily driven by a two percentage point increase to 86% in product gross profit percentage due to a more favorable product mix associated with increased licensing of our software products.

Net income for the fiscal year ended March 31, 2026 was $95.5 million as compared with net loss for the fiscal year ended March 31, 2025 of $366.9 million. The increase of $462.5 million in net income was primarily due to the absence of goodwill impairment charges in 2026, compared to $427.0 million in goodwill impairment charges in fiscal year 2025, as well as a $36.8 million increase in revenue, a $19.6 million decrease in restructuring charges, a $5.5 million decrease in interest expense, and a $3.1 million increase in interest income. The increases to net income were partially offset by a $21.8 million increase in income tax expense, and a $17.9 million increase in employee-related expenses primarily due to an increase in variable incentive compensation.

At March 31, 2026, we had cash, cash equivalents, and marketable securities and investments (current and non-current) of $705.1 million . This represents an increase of $212.7 million compared to the fiscal year ended March 31, 2025. This increase was primarily due to $294.5 million of net cash provided by operations, $67.9 million proceeds from maturity of marketable securities, $11.8 million proceeds from sale of an equity investment, partially offset by $163.4 million used to purchase of marketable securities, $60.8 million used to repurchase shares of our common stock, $15.9 million used for tax withholdings on restricted stock units, and $9.1 million used for capital expenditures, during the fiscal year ended March 31, 2026.

39

Table of Contents

Use of Non-GAAP Financial Measures

We supplement the United States GAAP financial measures we report in quarterly and annual earnings announcements, investor presentations and other investor communications by reporting the following non-GAAP measures: non-GAAP gross profit, non-GAAP income from operations, non-GAAP net income, non-GAAP diluted net income per share, and adjusted EBITDA. Non-GAAP gross profit removes expenses related to the amortization of acquired intangible assets, share-based compensation expense, and acquisition-related depreciation expense from gross profit (GAAP). Non-GAAP income from operations includes the aforementioned adjustments related to non-GAAP gross profit and also removes goodwill impairment charges, executive transition costs, and restructuring charges from income (loss) from operations (GAAP). Non-GAAP net income includes the foregoing adjustments related to non-GAAP income from operations, and also removes the income tax effects of such adjustments as well as any loss on extinguishment of debt from net income (loss) (GAAP). Non-GAAP diluted net income per share is non-GAAP net income divided by total outstanding shares on a diluted basis. Adjusted EBITDA includes the aforementioned adjustments related to non-GAAP net income and also removes interest and other expense, income taxes, and non-acquisition related depreciation from net income (GAAP). Beginning in the third quarter of fiscal year 2026, we have renamed non-GAAP EBITDA from operations to adjusted EBITDA. We now reconcile this metric to GAAP net income, however, the adjustments included, and the resulting amounts are unchanged from prior periods. This change is intended to align terminology with common market practice.

These non-GAAP measures are not prepared in accordance with GAAP, should not be considered an alternative for measures prepared in accordance with GAAP (gross profit, income (loss) from operations, net income, and diluted net income per share), and may have limitations because they do not reflect all our results of operations as determined in accordance with GAAP. These non-GAAP measures should only be used to evaluate our results of operations in conjunction with the corresponding GAAP measures. The presentation of non-GAAP information is not meant to be considered superior to, in isolation from, or as a substitute for results prepared in accordance with GAAP. These non-GAAP measures should not be used to evaluate our results of operations against those of our peers or other companies, as the definitions and calculations of our non-GAAP measures may not be the same as those used by other companies, even if the measures share the same name.

Management believes these non-GAAP financial measures will enhance the reader's overall understanding of our current financial performance and our prospects for the future by providing a higher degree of transparency for certain financial measures and providing a level of disclosure that helps investors understand how management plans and measures our business. We believe that providing these non-GAAP measures to investors provides them with a view of our operating results that may be more easily compared to peer companies and also enables investors to consider our operating results on both a GAAP and non-GAAP basis during and following the integration period of our a

[Excerpt truncated for page length; the complete text is on the linked full-MD&A page.]