Kylinsoft

1.1 Identity, Structure, and Products

Kylinsoft Co., Ltd. (麒麟软件有限公司, also rendered "Kylin Software") is a Chinese developer of secure, domestically controlled operating systems headquartered in the Binhai High-Tech Zone of Tianjin. It sits inside a fully state-owned ownership chain: China Electronics Corporation (CEC), China's largest state-owned electronic-information group, controls the Shanghai-listed China National Software & Service Co. (CSS, 600536), which is Kylinsoft's controlling shareholder. The company is the consolidation vehicle for China's two historically dominant secure-OS lineages — the Galaxy Kylin (银河麒麟) line that traces to National University of Defense Technology research begun in 2001 under the 863 Program, and the NeoKylin / Zhongbiao Kylin desktop line from China Standard Software. Kylinsoft's predecessor, Tianjin Kylin Information Technology Co., was established in December 2014 as a joint CEC/Tianjin strategic deployment; in February 2020 Tianjin Kylin absorbed China Standard Software through a share swap and was renamed Kylinsoft, holding its founding conference on 20 March 2020. Its product portfolio spans server, desktop, embedded and Internet-of-Everything operating systems, marketed under the Galaxy Kylin, NeoKylin and Starlight Kylin brands, plus the openKylin open-source community edition and the newer Kylin 100 Smart Connected OS. Revenue comes from licensing, support/maintenance contracts and government and state-enterprise procurement, making the company a core instrument of China's "Xinchuang" IT-localization drive.[CO001, CO002, CO003, CO004, CO005, CO006]

1.2 Leadership and Governance

Kylinsoft's governance reflects its status as a centrally administered state asset rather than a founder-led startup. The chairman and Communist Party secretary is Chen Zhihua (谌志华), who concurrently chairs the parent China National Software & Service Co.; this dual mandate tightly aligns Kylinsoft's strategy with CSS and ultimately CEC, but concentrates decision rights in a single party-appointed leader and creates evident key-person and political-alignment dependency. The general manager (CEO) is Kong Jinzhu (孔金珠), a long-time core developer of the Galaxy Kylin operating system who leads R&D, ecosystem build-out and the domestic- substitution push. Because Kylinsoft is unlisted and state-controlled, the board, independent directors and full executive roster are not publicly disclosed to the degree expected of a venture-funded company, and there is no founder equity or classic founder-market-fit narrative; instead, governance authority flows from SASAC through CEC and CSS. Strategic direction — kernel choices, ecosystem funding, procurement positioning — is set in coordination with the parent group and national industrial policy. The leadership's deep technical pedigree in secure OS development is a genuine strength, but the opacity of the wider management bench and the single-chair concentration are material governance diligence items.[CO016, CO017, CO018, CO001]

1.3 Funding, Valuation, and Financial Snapshot

In June 2025 Kylinsoft completed a capital increase raising 3 billion yuan (about $417 million), one of the larger domestic-software equity events of the year. The round comprised 2 billion yuan from controlling shareholder China National Software, subscribed via non-public agreement, and 1 billion yuan from qualified strategic investors selected through an on-exchange process. The strategic tranche was led and organised by the Greater Bay Area Fund and included China Mobile Capital, Sinopec Capital, CCB Investment, CSSC Capital, Huihua Fund, Haihe Industrial Fund, the China Internet Investment Fund and Binhai New Area technology-finance vehicles. The deal lifted CSS's stake by roughly 17.6 points to 47.23%. Pricing rested on a SASAC-filed appraisal that valued Kylinsoft's total equity at 8.355 billion yuan as of 31 December 2023, making the company Tianjin's first unicorn of 2025. Underlying public financials are unusually thin for a company of this profile: a disclosure tied to the raise put 2024 revenue at 1.438 billion yuan and net profit at 502 million yuan, and 2025 registered capital rose to 302 million yuan. Cash, burn, current run-rate and the use-of-proceeds split across mobile/fixed terminals, cloud servers and embedded systems are not granularly disclosed, so several cover metrics are carried as gaps with explicit diligence paths.[CO019, CO020, CO021, CO022, CO023, CO024]

1.4 Scale, Milestones, and Adverse Flags

Kylinsoft's headline traction is its installed base: Galaxy Kylin deployments exceeded 16 million sets as of August 2025, concentrated in government, finance, telecom, energy and education, and the company claims more than 70% share of China's government core-application OS market. Its software underpins national projects including the Chang'e lunar and Tianwen Mars programs, and the firm holds a National Science and Technology Progress Award. The product cadence is brisk: Galaxy Kylin V10 launched in August 2020 on Linux kernel 4.19; the openKylin root community opened in July 2022; Galaxy Kylin V11 — China's first commercial OS on the Linux 6.6 kernel, with 120+ proprietary enhancements, a new "Rock/磐石" architecture, an AI assistant and support for AMD, Intel, eight domestic CPUs and seven domestic GPUs — shipped on 26 August 2025 alongside a 500-million-yuan "Kylin Partner 5.0" ecosystem fund; V11 won a CITE2026 innovation gold award in April 2026 and the Kylin 100 Smart Connected OS followed in May 2026. The bull case is offset by genuine adverse signals. The Register noted that 16 million installs is a "minuscule" share in a 1.4-billion- person market, and flagged that the Linux 6.6 LTS base loses upstream support in December 2026 — roughly 16 months after V11 launched — echoing Kylinsoft's earlier choice to keep V10 on an end-of-life 4.19 kernel. Adoption remains heavily mandate-driven rather than competitive.[CO008, CO010, CO011, CO012, CO013, CO014]

1.5 Exhibits

2.1 Market Boundary and Substitutes

Kylinsoft's core market is China's domestic operating-system industry, the basic-software layer of the national "Xinchuang" (信息技术应用创新) IT-application-innovation program that aims to replace foreign hardware and software across government and critical industries. The included spend is paid OS licensing, maintenance and support across desktop, server, embedded and intelligent-terminal deployments inside party-government bodies, state-owned enterprises, banks, telecom operators and other regulated sectors. Excluded from the served market is the large consumer and private commercial PC base, which remains Windows-centric and outside procurement mandates. The status-quo substitutes Kylinsoft displaces are Microsoft Windows on the desktop and international Linux distributions (Red Hat, SUSE, Ubuntu) plus Unix on servers; in China's server market domestic Linux now ships roughly ten times the volume of international brands, while foreign vendors have been pushed to the margins by self-controllable requirements. Adjacent layers in the same full-stack Xinchuang push — domestic CPUs (Loongson, Kunpeng, Phytium), databases, middleware and application software — are complementary spend that shapes OS compatibility requirements but is not OS revenue. The market is therefore best understood as an administratively bounded substitution market rather than an openly contested one.[CM001, CM016, CM017, CM018, CM029, CM035]

2.2 Sizing the Opportunity

Sizing must use multiple lenses because boundary definitions vary widely. At the broadest level, the full Xinchuang industry (chips, OS, database, middleware, applications) is projected to reach about 1.8 trillion yuan by 2026 at roughly a 28.5% compound rate, with 2025 already above 1.5 trillion yuan; some analysts cite 2.2 trillion yuan, illustrating the dispersion. The operating-system slice is far smaller: China's total OS market (PC plus server) is estimated near 45 billion yuan in 2025, split roughly 25 billion yuan server and 20 billion yuan desktop. The directly addressable Xinchuang OS market — party-government plus the eight key regulated industries — is estimated at only about 9.75 to 20.5 billion yuan per year, growing 30%+, with the Xinchuang server segment near 5.75 billion yuan (≈1.15M units) and the Xinchuang PC segment near 4 billion yuan (≈8M units). Against these, Kylinsoft's own 2024 revenue of roughly 1.44 billion yuan implies it already captures a meaningful share of the addressable Xinchuang OS spend, but a tiny fraction of the broad OS or Xinchuang totals. The wide gap between the 45-billion-yuan OS lens and the 10-to-20-billion-yuan Xinchuang OS lens is itself a key diligence flag about which denominator applies.[CM002, CM003, CM004, CM005, CM006, CM024]

2.3 Buyers, Users, and Payers

The buyer, user and payer are frequently the same state institution, which shapes the entire go-to-market. The primary budget owners are party-government IT departments and the CIO/procurement functions of state-owned enterprises, banks, and the three telecom operators (China Mobile, China Telecom, China Unicom), which are among the largest server-OS buyers. Procurement is tender-driven and weighted toward domestic vendors, so government and SOE purchasing accounts for over 60% of domestic OS demand. Adoption follows the official "2+8+N" rollout: first the two party-government segments, then eight priority industries (finance, energy, telecom, education, healthcare, transport, etc.), then a broader "N" of smaller enterprises and regions. Replacement depth varies sharply by segment: party-government desktop substitution has reached roughly 78-80%, while finance sits near 45-50%, energy 52%, education 65%, and telecom 38%. Users are public-sector office workers and back-office/server operators whose familiarity with Windows shapes switching friction; the adoption trigger is almost always a procurement mandate or a security/self-control directive rather than a bottom-up technical preference. This makes the sales motion a policy- and relationship-led enterprise tender process, not a product-led funnel.[CM014, CM019, CM030, CM036, CM037, CM020]

2.4 Growth Drivers and Adoption Constraints

The dominant growth driver is policy: a SASAC directive requires central state-owned enterprises to reach 100% Xinchuang substitution by 2027, and party-government core systems are targeted for full localization by the end of 2025, guaranteeing multi-year mandated demand. Secondary drivers include national-security and self-controllable imperatives amid US-China tech tensions, the digital-China / new-infrastructure investment cycle, and the October 2025 Windows 10 end-of-life that strands hardware and creates a migration moment. The constraints are equally concrete and partly adverse. Ecosystem and application gaps persist — professional industry software, developer toolchains and peripheral compatibility lag Windows — and legacy migration friction slows full replacement. Critically, adoption remains heavily mandate-dependent: outside government and regulated SOEs, private and consumer demand is thin, so the market's growth is administratively created rather than competitively won, leaving vendors exposed to any change in procurement intensity or budget. Windows still holds 70-80% of China's desktop base, macOS about 13%, and Linux including domestic builds only about 1.2-3.4%, underscoring how far real-world penetration trails the government-sector headline figures. These contradictions and the divergent sizing denominators are preserved as explicit diligence gaps.[CM011, CM012, CM013, CM015, CM021, CM022]

2.5 Exhibits

3.1 Competitive Landscape and Rivals

China's domestic operating-system market has consolidated into a small set of state-aligned vendors operating under the Xinchuang localization drive, with Kylinsoft and UnionTech widely framed as a desktop "dual monopoly" and Huawei's openEuler dominating the server root layer. The competitive set spans five archetypes. The direct desktop peer is UnionTech (Tongxin Software, 统信软件), whose Unity Operating System (UOS) was founded as a Beijing venture in 2019, released its first stable build in January 2020, and is built on the Debian-derived Deepin desktop; it is the leading general-market desktop OS and crossed ten million ecosystem adaptations in 2025, the first Chinese OS vendor to do so. The shared server substrate is Huawei's openEuler, an Apache-licensed community root operating system donated to the OpenAtom Foundation in November 2021 that holds roughly 57.3% of China's new server-OS installations in 2025 — and on which Kylinsoft's own Galaxy Kylin server edition is built, making openEuler both an upstream dependency and a strategic counterweight. The emerging substitute is Huawei's HarmonyOS PC, a microkernel desktop OS whose first notebook shipped in May 2025; it removes all Linux/Android code, runs no native Windows applications, and is positioned as the most credible long-run Windows desktop challenger. Niche secure-OS specialists include the separately listed KylinSec (麒麟信安, distinct from Kylinsoft) in power and aerospace, and ChinaSoft FangDe (中科方德, NFSChina) in Windows-compatible desktop. The status-quo alternative remains Microsoft Windows, still roughly 70-80% of China's desktop base and the primary displacement target, with international Linux/Unix (Red Hat Enterprise Linux, Ubuntu, SUSE) as the legacy enterprise reference being phased out of mandated sectors. deepin, a UnionTech-owned community distribution dating to 2004, rounds out the field as an upstream and consumer-facing option.[CP001, CP002, CP003, CP004, CP005, CP006]

3.2 Capability, Pricing, and Go-to-Market Comparison

On capability, the field segments cleanly by workload. Galaxy Kylin leads mission-critical reliability — claiming 99.9999%-class availability, industry-leading number of EAL4/等保四级 security certifications, and reference deployments in space missions, power-grid dispatch and core bank transaction gateways — and operates the deepest ecosystem, with adaptation counts approaching ten million (roughly 7.36 million software plus one million hardware) and 2,200+ Kylin SDK developer interfaces. UnionTech UOS leads desktop user experience: its Deepin Desktop Environment closely mimics Windows 10, cutting reported migration training time from days to hours, and it carries 15,000+ native applications and the largest software/hardware adaptation total (10M+). openEuler leads server and cloud-native breadth but is a community root rather than a turnkey distribution, so enterprises adopt a commercial derivative (Kylin, UOS, or KylinSec) for SLA support. On pricing, all domestic vendors monetize through perpetual or subscription licensing plus paid support and migration services rather than published list prices; deals are won through government and SOE procurement tenders, and one source flags that subscription licensing has triggered compliance disputes in some provincial budget reviews. On go-to-market, Kylin reaches buyers through China Electronics' state channels and party-government mandates, UOS through faster-growing commercial, education and telecom desktop migrations, openEuler through its 2,100+-member community feeding downstream commercial distros, and HarmonyOS through Huawei's hardware installed base. The result is heavy multi-homing: large government buyers routinely certify and deploy both Kylin and UOS, limiting any single vendor's pricing power.[CP012, CP013, CP014, CP015, CP016, CP017]

3.3 Switching Costs, Lock-in, and Distribution Power

Switching costs in this market are high once a system is certified and deployed: application adaptation, hardware-driver qualification, security accreditation and user retraining create multi-year lock-in, which protects every incumbent's installed base — including Kylin's 20-million-plus cumulative deployments and 210,000+ served organizations. Kylin's deepest lock-in is the integrated "PKS" stack (Phytium ARM CPUs plus Kylin OS plus its security subsystem) that binds party-government and defense buyers to a domestically controlled combination, reinforced by certification breadth. Distribution power, however, is concentrated in the state: procurement is mandate-driven, and China Electronics' channel access is Kylin's primary structural advantage rather than independent commercial demand. Two dynamics erode pricing power. First, multi-homing is the norm — central agencies, banks and operators qualify multiple domestic OSes to avoid single-vendor dependence, so Kylin and UOS frequently coexist inside the same buyer. Second, supply and partner access is shared: Kylin, UOS and KylinSec all build their server editions on Huawei's openEuler root, and all depend on the same domestic CPU vendors (Phytium, Kunpeng, Loongson, Hygon, Zhaoxin), so few proprietary supply advantages exist below the integration and certification layer. The practical implication is that competition is less about winning net-new demand — which policy guarantees — than about share of a mandated wallet that buyers deliberately split.[CP022, CP023, CP024, CP025, CP026, CP027]

3.4 Moat Durability and Competitive Risk

Kylinsoft's durable advantages are its state ownership and CEC channel, its 14-year installed-base leadership in party-government and secure-server workloads, its certification depth, and the highest ecosystem maturity among domestic vendors. Each, however, faces a credible threat. The desktop moat is contested by UnionTech, which now leads on out-of-box UX and app breadth and turned its first annual profit (¥238M on ¥718M revenue) in 2025, growing 62% year on year versus Kylinsoft's mid-teens growth. The server moat is structurally capped because Galaxy Kylin server is built on Huawei's openEuler, so Kylin captures integration and support margin but does not own the root ecosystem and competes there with UOS and KylinSec on identical upstream. The long-run desktop threat is HarmonyOS PC, whose microkernel, Huawei hardware reach and consumer ecosystem could displace Linux-based desktops in mass-market and eventually government segments. Most pointedly, domestic OSes — Kylin included — face persistent "shell/套壳" criticism that they are second-stage customizations of Debian/Ubuntu/openEuler with limited independent kernel innovation, alongside documented ecosystem gaps: peripheral and printer-driver lag, professional design software (Adobe, AutoCAD, SolidWorks) running only through Wine with 30-50% performance loss, and slower kernel-level L3 support response than Red Hat that has pushed some banks to self-build support teams. KylinSec's 2025 swing to a net loss with negative operating cash flow illustrates that even certification-rich secure-OS niches struggle to commercialize. Net, Kylinsoft's moat is real but state-contingent and partly shared, not a proprietary technology lead.[CP030, CP031, CP032, CP033, CP034, CP035]

3.5 Exhibits

4.1 Revenue Model, Pricing, and Mix

Kylinsoft monetizes a portfolio of operating systems through four interlocking streams: perpetual or term software licensing (per-seat for desktop editions such as Galaxy Kylin, per-socket/per-node for server editions), recurring support and maintenance subscriptions, paid customization and Windows-to-Kylin migration services, and an ecosystem/partner program anchored by a 500 million yuan "Kylin Partner 5.0" fund that subsidizes ISV and hardware adaptation. Demand is overwhelmingly channeled through government and state-owned-enterprise procurement tenders rather than published price lists, so realized pricing is opaque and volume-tender-driven. The disclosed financial envelope is profitable and growing: parent China National Software (CSS, Shanghai 600536) reported Kylinsoft 2024 revenue of 1.438 billion yuan and net profit of 502 million yuan, and third-party 2025 figures put revenue at roughly 1.632 billion yuan (up about 13.5%) and net profit near 550 million yuan. However, the revenue mix across desktop, server, embedded, industrial and intelligent-computing lines — and the split between license, subscription and services — is not publicly broken out, and the figures reach the market only as a single consolidated line inside CSS disclosures rather than audited standalone Kylinsoft statements. The implied ~35% net margin is high for an OS vendor and likely reflects both genuine software economics and an undisclosed government-subsidy and tax-incentive component that cannot be isolated from public data.[CI001, CI002, CI003, CI004, CI005, CI006]

4.2 Unit Economics and Go-to-Market Efficiency

Sales efficiency is structurally favorable but poorly instrumented in public data. Because Kylinsoft sells into a policy-mandated buyer base through China Electronics' state channels, customer-acquisition cost is low relative to a commercial enterprise-software vendor — demand is created by Xinchuang substitution mandates rather than by paid demand generation — while switching costs (certification, application adaptation, retraining) make the installed base sticky and support revenue durable. Gross margin is not disclosed, but comparable Chinese secure-OS economics imply high software-line gross margins (a listed peer reported OS-product gross margins above 90%), partly offset by lower-margin services and the cost of maintaining adaptation across eight-plus domestic CPU and seven-plus domestic GPU targets. The cost structure is R&D-heavy: the company frames the 2025 raise explicitly as funding sustained, high-intensity OS research, product- line expansion and ecosystem building, and the parent called it the first concentrated, large-scale cash investment in OS R&D in its 40-plus-year history. None of the canonical unit-economics inputs — CAC, payback period, net revenue retention, deferred-revenue balance, services attach rate, or revenue-per-deployment across the 16-million-plus installed base — is published, so the underlying customer economics must be treated as a diligence gap rather than a measured result.[CI010, CI011, CI012, CI013, CI014, CI015]

4.3 Capital Adequacy, Financing, and Traction

Kylinsoft's capital position is anchored by the June 2025 equity increase. As documented in CSS's December 2024 related-party-transaction filing, Kylinsoft raised up to 3 billion yuan: CSS subscribed up to 2 billion yuan via a non-public agreement, and qualified external investors subscribed up to 1 billion yuan through a public listing on the Shanghai United Assets and Equity Exchange, at a price based on a Beijing Zhongtonghua appraisal valuing 100% of Kylinsoft equity at 8.355 billion yuan as of 31 December 2023 (filed with state-asset regulators). The round closed by 30 June 2025, lifting CSS's stake from 40.25% to 47.23% (with a fallback path to 51.79% had only the parent subscribed). The external 1 billion yuan tranche was led by the Greater Bay Area fund and joined by China Mobile Capital, Sinopec Capital, CCB Investment, the China Internet Investment Fund, Tianjin's Haihe Industrial Fund and CEC-affiliated vehicles — a roster that is almost entirely state capital. Because the company is profitable (502 million yuan net in 2024), it is not burning cash in the venture sense, and no material third-party debt or project-finance obligation is disclosed; effective runway is underwritten by the state parent. Public traction metrics are operational rather than financial — 16-million-plus cumulative deployments, 210,000-plus served organizations, ~70% party-government desktop share — and the next financing trigger most discussed externally is a potential public listing, though no filing confirms one. The financing facts here are restated locally; the round-by-round chronology lives in the Company Overview chapter.[CI017, CI018, CI019, CI020, CI021, CI022]

4.4 Financial Verdict and Diligence Blockers

On revenue quality, Kylinsoft scores well on durability and poorly on transparency: revenue is recurring, mandate-protected and profitable, but it is disclosed only as a single consolidated line, its segment and license- versus-services mix is unknown, and the ~35% net margin cannot be decomposed into operating profitability versus government subsidy and tax relief. On the margin path, the high implied software margins are encouraging, but rising multi-architecture adaptation costs and ecosystem subsidies (the 500 million yuan partner fund) could compress them, and the loss-making listed parent — CSS reported 2024 revenue of 5.198 billion yuan, down 22.69%, with a net loss of about 413 million yuan — underscores that Kylinsoft is the group's profit engine carrying weaker affiliates. On capital intensity, the model is asset-light and currently self-funding, but the 3 billion yuan raise signals that sustaining frontier OS R&D requires periodic large state capital injections rather than purely organic cash generation. The decisive underwriting blocker is valuation evidence: the 8.355 billion yuan mark is an end-2023 appraisal accepted by related parties and state regulators, not a market-cleared price, and the bulk of the round was an intra-group subscription. Audited standalone statements, a segmented revenue bridge, the cash balance, deferred-revenue detail, and the subsidy share of profit are all required before the valuation can be independently underwritten.[CI028, CI029, CI030, CI031, CI032, CI033]

4.5 Exhibits

5.1 Product Portfolio and Customer Definition

Kylinsoft's product is a domestic operating system delivered to two customer jobs: replacing Windows on government, finance and SOE desktops, and providing a secure, certified Linux base for mission-critical servers and industrial systems. The flagship is Galaxy Kylin (银河麒麟) V11, unveiled on 26 August 2025 at the 2025 China Operating System Industry Conference and positioned by chief scientist Han Naiping as the first commercial-grade OS built on the Linux 6.6 LTS kernel, shipped in a "fresh-experience, intelligent" desktop edition and a "compute-enabling, stable-secure" server edition. Around the commercial flagship sit openKylin (开放麒麟), the OpenAtom-Foundation-governed open-source community distribution whose 2.0 SP2 release landed in 2026, plus embedded, industrial and the "Kylin 100" smart-connected line aimed at IoT and edge scenarios — though Kylin 100 has limited public technical disclosure and is treated here as a company-claimed roadmap item. Supporting assets include the Kylin SDK (2,200+ developer interfaces in V11), the Kylin App Store, the Kylin Tianyu (天御) security-domain management platform, and the UKUI desktop environment shared with openKylin. Maturity differs sharply across the line: Galaxy Kylin V11 desktop and server are generally available and field-proven at scale, openKylin 2.0 SP2 is a shipping community build with a 3.0 Alpha in May 2026, while the industrial/smart-connected variants are earlier-stage and less documented.[CE001, CE002, CE003, CE004, CE005, CE006]

5.2 Architecture and Operating Mechanism

Galaxy Kylin V11 is built on the Linux 6.6 LTS kernel with more than 120 self-developed kernel features, and introduces the Panshi (Rock, 磐石) architecture as its defining technical layer. Panshi makes the core system immutable: the base OS and applications are decoupled, updates are atomic and roll-back-safe (using OSTree-style deployment), and two companion technologies — the KARE compatibility environment and the Kaiming (开明) package format — preserve the existing application ecosystem on top of the immutable base, delivering "build once, run across versions" portability. On openKylin 2.0 SP2 the same Panshi stack ships enabled by default, composed of an immutable system, KARE 3.0 (switched to the lightweight CRUN container engine), and the Kaiming package format restructured to a base+runtime+app model. Above the base sits the self-developed WLCOM (Kylin-WLCOM) display framework, compatible with both X11 and Wayland, which Kylinsoft credits for lossless HD video and hundred-window smoothness. An AI subsystem and AI assistant provide one-key wake, scheduling of local and cloud compute, local image/text generation, and a "compute-sharing" capability that pools local and cloud power and targets domestic NPUs such as Ascend and Cambricon; openKylin 2.0 SP2 integrates DeepSeek, Tongyi Qianwen and SenseTime models with an installable on-device Qwen2.5-3B for offline use. The architecture is multi-arch by design, adapting Phytium, Kunpeng, Loongson (LoongArch), Hygon, Zhaoxin and Sunway processors plus domestic GPUs, but it remains a downstream Linux distribution: the kernel, Wayland, container engines and much of userspace are upstream open-source components, which bounds Kylinsoft's autonomous-IP claims.[CE009, CE010, CE011, CE012, CE013, CE014]

5.3 Deployment, Roadmap and Differentiation

In deployment, Galaxy Kylin is a packaged, certified OS sold with paid support, migration tooling and a partner ecosystem rather than as a self-service download. Kylinsoft reports a single state-owned bank running 100,000-plus seats, cumulative deployments above 20 million sets, more than 70,000 served organizations, 14 consecutive years as China's top Linux by installed base, and use in national aerospace programs (Tianwen Mars, space-station, Chang'e) with over 100,000 hours of fault-free operation. The server edition adds AI-environment auto-configuration, online/offline workload co-location to raise utilization, a high-performance user-space network stack, and an MPTCP multi-path tool aimed at latency-sensitive securities-trading workloads. The roadmap is anchored by the August 2025 V11 launch, the 2026 openKylin 2.0 SP2 release and a 3.0 Alpha in May 2026, and certification milestones including being the first Linux 6.6-kernel OS to pass China's Operating-System Government-Procurement Requirement Standard and a 2026 CITE innovation award. Differentiation rests on four pillars: security and certification depth, the deepest domestic hardware/software ecosystem (first domestic OS past one million adaptations, 7 million-plus total), the integrated Panshi+AI+security stack, and state ownership/CEC channel reach. The diligence caveat is that none of these pillars is a defensible kernel-level technology moat: UnionTech matches desktop breadth, openEuler underpins the server root, and the "build once run cross-version" and AI features are productization of upstream and third-party model technology.[CE019, CE020, CE021, CE022, CE023, CE024]

5.4 Security, Compliance and Quality Controls

Security is Kylinsoft's primary stated differentiator. Galaxy Kylin V11 advertises a "secure-trusted intrinsic dual-system architecture" spanning hardware, system and application layers with real-time threat monitoring, virus scanning and self-healing, plus a programmable security framework (KSAF) and two-factor authentication for layered static-and-dynamic policy. File-level controls include a file protection box, anti-screenshot, encrypted file transfer and a file shredder, with whole-lifecycle protection across app listing, installation, update and removal, governed through the Kylin Tianyu (天御) security-domain management platform with graded policy enforcement for enterprise endpoint control. The system adds AI-model security that aims to block model poisoning and jailbreak attempts in real time and to redact sensitive output. Compliance positioning leans on China's classified-protection (等保) and commercial-cryptography (商密) regimes and on being the first Linux 6.6-kernel OS certified against the government procurement requirement standard. The diligence gaps are that specific certification levels, scopes and dates are not consistently published in English-accessible sources, the dual-system and AI-security claims are vendor-stated rather than independently benchmarked, and recurring external criticism of domestic OSes — "shell-OS/套壳" doubts about kernel autonomy, 30-50% Wine performance loss on professional design software, and uneven peripheral-driver coverage — applies to Kylinsoft's portfolio and is not resolved by its security messaging.[CE028, CE029, CE030, CE031, CE032, CE033]

5.5 Exhibits

6.1 Customer Base and Segmentation

Kylinsoft sells to the buyers, users and payers created by China's Xinchuang localization mandate, where the procuring entity (a ministry, SOE, bank or hospital) is typically also the user, and budget flows from state or sector IT-localization programs rather than discretionary commercial spend. The base segments by vertical into eight principal clusters: party-government administration (the anchor segment, where Galaxy Kylin holds roughly 70% desktop share); finance and state-owned banks; the three telecom carriers (China Mobile, China Telecom, China Unicom); energy and power grids (State Grid, China Southern Power Grid); healthcare; education; transportation; and aerospace/defense. Geographically the base is overwhelmingly domestic, concentrated in central ministries and provincial governments and in SOE headquarters, with channel delivery through certified system integrators and "Kylin Partner" hardware OEMs rather than direct self-service. Adoption is staged through the national "2+8+N" rollout — two core party-government scenarios, eight priority regulated industries (finance, energy, telecom, transport, education, healthcare, aerospace, and others), and an N-tail of broader sectors — which structures both who buys and in what sequence. The segmentation is strategically valuable but commercially narrow: the highest-value, most durable demand sits in mandated sectors, while the open private market (manufacturing, internet, consumer) remains lightly penetrated and is the principal growth question.[CU001, CU002, CU003, CU004, CU005, CU006]

6.2 Adoption Trajectory and Named Customer Proof

Kylinsoft reports a large and growing installed base: more than 16 million (1,600万) deployments as of the August 2025 industry conference, with cumulative figures of 20 million-plus sets and served-organization counts ranging from 70,000+ to 210,000+ across sources, plus 14 consecutive years as China's top Linux by installed base. Named production references — not pilots — substantiate the breadth. In energy, a State Grid sub-division managing more than 2,000 substations reports an 85% domestic-terminal deployment rate on Galaxy Kylin and UnionTech UOS, and Xingyi Power Supply (China Southern Power Grid) won a 2025 power-sector localization case award on a Kylin-adapted platform. In finance, Galaxy Kylin underpins ICBC and Agricultural Bank key-management and core systems, and Jiangdu Rural Commercial Bank's new OA stack — 200+ business components and 100+ ecosystem kits — runs full-stack on Kylin with a reported 35% efficiency gain. In healthcare, Ruijin Hospital built HR, OA and a "Patient 360" platform on the Galaxy Kylin Advanced Server V10. Manufacturing (FAW), telecom (China Mobile/Telecom data centers and branch terminals), and aerospace (Tianwen, space-station and Chang'e programs, 100,000+ fault-free hours) round out the proof set, reinforced by OEM partners China Greatwall (an "excellence-tier" Kylin partner whose D3000M notebook, D80F3 desktop and Qingtian RF6260 V5 server ship on V11) and Lenovo Kaitian (first to deliver 9-second boot on V11). The trajectory is credible at the headline level but the denominators — seats versus organizations, desktop versus server, mandated versus voluntary — are not consistently disclosed.[CU008, CU009, CU010, CU011, CU012, CU013]

6.3 Retention and Durability

Direct retention metrics — net revenue retention, gross retention, churn, renewal rates or satisfaction scores — are not publicly disclosed by Kylinsoft, so durability must be inferred from the structure of demand. In mandated party-government and regulated-industry deployments, switching costs are high: once an agency has migrated terminals and core systems, re-certified applications, retrained staff and adapted peripherals, reverting or switching vendors is costly and politically disfavored, which implies high de-facto retention within the installed base. The 14-year market- leadership streak, the 100,000+ fault-free aerospace hours, and multi-year multi-system rollouts (e.g., Ruijin Hospital's staged OA-to-Patient-360 expansion) are consistent with durable, expanding accounts. However, three caveats weaken the picture: buyers deliberately multi-home Galaxy Kylin and UnionTech UOS to avoid single-vendor lock-in, so per-vendor share within an account can erode without the account "churning"; renewals depend on continued Xinchuang budget and policy, a macro variable outside Kylinsoft's control; and field references themselves surface persistent application-compatibility friction — CAD and Office rendering lag, data-loss incidents on cross-platform transfer, and uneven peripheral drivers — that could pressure satisfaction if not resolved. Retention is therefore structurally high but evidentially thin, and the absence of disclosed cohort data is itself a diligence gap.[CU018, CU019, CU020, CU021, CU022, CU023]

6.4 Expansion, Concentration and Procurement Risk

Expansion runs along two axes. Within mandated accounts, Kylinsoft lands a beachhead (desktop or one core system) and expands across systems, sites and to the server edition — the Ruijin OA-to-Patient-360 and Jiangdu full-stack OA patterns illustrate land-and-expand. Across the market, the "2+8+N" program widens the addressable base from party-government into the eight priority industries and then the long tail, and the OEM partner program (China Greatwall, Lenovo Kaitian and others) broadens hardware reach. The countervailing concern is concentration. Demand is heavily dependent on government and SOE procurement under policy mandate; private- sector and especially manufacturing/internet adoption is comparatively low, and analysts repeatedly characterize the model as "living off government" with limited market-driven pull. This creates three concentration risks: a policy/budget risk if Xinchuang spending tightens or shifts from "hard replacement" to "soft compatibility"; a buyer-type risk where a few state channels dominate revenue; and a procurement-friction risk, since sole-source-style localization tenders can attract pricing scrutiny and occasional subscription-compliance queries at provincial level. The net assessment is a high-quality but narrowly based customer franchise whose durability is real inside the mandate and unproven outside it.[CU025, CU026, CU027, CU028, CU029, CU030]

6.5 Exhibits

7.1 Severity-Ranked Risk Overview

Ranked by residual exposure, Kylinsoft's risks cluster into four bands. The top band is geopolitical and policy-structural: CEC's Entity-List status and the broader US-China technology war constrain the domestic-silicon supply chain the OS must run on, while the company's revenue depends on the durability of state procurement mandates rather than competitive demand. The second band is technical-dependency risk: the portfolio is a downstream Linux distribution, so its security, hardware enablement and roadmap inherit the GPLv2 Linux kernel and the Linux 6.6 LTS support window, and any lapse in upstream tracking or a "套壳" credibility shock would erode the autonomy narrative that justifies the premium. The third band is commercial and ecosystem risk: low private-sector penetration, application and peripheral compatibility gaps, fragmentation across six-plus domestic CPU architectures, and head-to-head multi-homing against UnionTech UOS and Huawei's openEuler/ HarmonyOS leave the installed base policy-protected but not market-proven. The fourth band is financial-disclosure risk: a loss-making listed parent, undisclosed standalone accounts, an appraisal-based valuation, and an unquantified government-subsidy share of profit. Likelihood is highest for the ecosystem and disclosure risks (already realized in part) and lower but higher-impact for an abrupt geopolitical or policy shift. Mitigation maturity is strongest on certification and least developed on private-market diversification and disclosure transparency.[CR001, CR002, CR003, CR004, CR005, CR006]

7.2 Regulatory, Legal, and Geopolitical Risk

The defining external risk is geopolitical. CEC, Kylinsoft's ultimate state owner through China National Software, is designated on the US Commerce Department's Entity List, and successive 2024-2026 Bureau of Industry and Security rules have tightened controls on advanced chips and semiconductor tooling reaching Chinese state-electronics groups, including Foreign Direct Product Rule extensions. This restricts the leading-edge silicon and EDA tooling available to the domestic CPUs (Phytium, Kunpeng, Loongson) that Kylin certifies against, indirectly capping the performance ceiling of the hardware-plus-OS stack. Legally, the entire portfolio is a derivative of the GPLv2 Linux kernel: Kylinsoft must distribute corresponding source for kernel modifications and cannot impose additional restrictions, which both constrains proprietary lock-in and underpins recurring "套壳" criticism that the system is a customized Linux rather than autonomous IP. Domestically the regulatory backdrop is a tailwind that doubles as a dependency: the Cybersecurity Law, Data Security Law, classified-protection (等保) regime, Critical Information Infrastructure rules and the Xinchuang procurement framework mandate secure-and-controllable domestic software in party-government, finance, telecom and energy systems. That demand is administratively created, so a change in procurement policy, certification criteria, or the political priority attached to Made-in-China-2025-style localization targets is itself a regulatory risk to the revenue base.[CR009, CR010, CR011, CR012, CR013, CR014]

7.3 Operational, Technical, and Ecosystem Risk

Operationally Kylinsoft ships a mature, certified product, but its technical risks are those of a downstream distribution. Galaxy Kylin V11 is built on the Linux 6.6 LTS kernel; that branch's upstream maintenance was scheduled to end in December 2026 but was extended to end-2027, so the immediate end-of-life cliff has eased while the structural dependency on upstream maintainers remains. Hardware enablement, security fixes and driver coverage are inherited from upstream and from domestic-CPU vendors, which fragments testing across at least six instruction-set targets (x86 via Zhaoxin/Hygon, ARM via Phytium/Kunpeng, LoongArch via Loongson) and produces the recurring field complaints — drivers that will not install, unstable application compatibility — reported during Xinchuang migrations. The application ecosystem, though growing, remains far thinner than Windows for professional design, engineering and gaming software, and peripheral driver coverage is uneven. The "套壳" critique — that the differentiation is integration and UI rather than kernel-level innovation — is partially conceded by the company's own documentation that the system is Linux-based, and is a reputational and procurement-credibility risk if localization criteria tighten toward genuine root-technology autonomy. Operational continuity risk is otherwise low: the product is field-proven in banks, grids and aerospace deployments.[CR018, CR019, CR020, CR021, CR022, CR023]

7.4 Partner, Dependency, and Concentration Risk

Kylinsoft's dependency graph is unusually concentrated on the state. Its controlling shareholder and capital provider is China National Software, itself controlled by CEC, so ownership, distribution channel, key-customer sponsorship and a large share of equity funding all route through a single state group — a concentration that is stabilizing in the current policy regime but a single point of failure if state priorities shift. Technically the portfolio depends on the upstream Linux kernel community and the OpenAtom Foundation (for openKylin governance), neither of which Kylinsoft controls, and on a handful of domestic CPU vendors whose own roadmaps are export-control constrained. Commercially, demand is concentrated in party-government, finance, telecom and energy buyers procuring under mandate, with the company itself acknowledging negligible private-sector and individual-consumer penetration; this customer concentration means the installed base is durable only as long as the mandate persists. Competitive multi-homing compounds the dependency: large buyers routinely qualify both Kylin and UnionTech UOS (and increasingly Huawei openEuler/HarmonyOS), so Kylinsoft does not have exclusive lock on its own protected market and competes on adaptation depth and certification rather than switching cost alone.[CR027, CR028, CR029, CR030, CR031, CR032]

7.5 Financial-Model Risk, Mitigations, and Kill Criteria

The operating company is profitable, but the financial-disclosure picture carries real underwriting risk. Kylinsoft's standalone accounts are not published; its results reach the market only as a segment line inside listed parent China National Software (CSS, 600536), which is itself loss-making — CSS reported a 2025 net loss of about 41 million yuan (sharply narrowed from the prior year) on roughly 5.1 billion yuan of revenue, with party-government solution revenue declining and basic-software (the Kylin line) the main growth engine. R&D intensity above 22% of revenue pressures near-term margin, operating cash flow has been volatile at the parent, and the implied government-subsidy and tax-incentive share of Kylinsoft's ~35% net margin is unquantified, so true operating profitability cannot be isolated. The 8.355 billion yuan valuation is an end-2023 appraisal mark filed for a related-party capital increase, not a market-tested price. Mitigations are real but partial: deep certification and a sticky mandated base protect revenue; a 3 billion yuan 2025 raise and positive net income fund R&D without external debt; and ecosystem programs are expanding the application base. The thesis breaks if procurement mandates loosen, if a credible "套壳" or security finding damages certification standing, if export controls choke the domestic silicon the OS depends on, or if standalone disclosure reveals subsidy- dependent rather than organic profitability. Priority diligence asks are the audited standalone accounts, the subsidy reconciliation, and a market-tested valuation reference.[CR035, CR036, CR037, CR038, CR039, CR040]

8.1 Investment Thesis and Anti-Thesis

The bull thesis rests on six reinforcing facts established across this report. Kylinsoft is the policy-anointed leader of China's domestic-OS substitution, with roughly 70% of the party-government desktop segment and fourteen consecutive years atop China's Linux market; its installed base exceeds 16 million deployments across banks, grids, telecoms and aerospace; Galaxy Kylin V11 is a modern, certified Linux 6.6-based stack with an integrated security and AI architecture; the company is genuinely profitable (about 1.6 billion yuan revenue at a ~35% net margin), unlike most venture assets; it is funded and de-risked by a deep-pocketed state parent that just injected 3 billion yuan; and the addressable Xinchuang migration still has years of mandated runway. The anti-thesis is equally structural: demand is administratively manufactured rather than competitively won, so the durable moat is policy, not product; private-sector and consumer penetration is negligible and Windows still dominates the open market; the portfolio is a downstream Linux distribution whose silicon supply chain is throttled by US export controls on CEC-affiliated CPUs; large buyers multi-home with UnionTech UOS and increasingly Huawei openEuler/HarmonyOS, so there is no exclusive lock even inside the protected market; and financial disclosure is thin, with no audited standalone statements and an unquantified government- subsidy share of profit. The investable question is therefore not whether Kylinsoft makes money today — it does — but whether that profitability is organic and durable or policy-contingent and stranded if the mandate eases.[CV001, CV002, CV003, CV004, CV005, CV006]

8.2 Recommendation, Confidence, and Entry Discipline

The recommendation is TRACK / research-more at low-to-medium confidence with a high risk rating. The rationale is that the asset is fundamentally sound but the entry price cannot be independently underwritten: the 8.355 billion yuan mark is an end-2023 appraisal filed for a related-party capital increase, not a competitively cleared round, and the headline 47.23% stake lift and 3 billion yuan injection both flow from the same state group, so there is no arm's-length price discovery and no third-party preference or dilution structure to anchor entry. On a multiples basis the mark is defensible — roughly 5x trailing revenue against listed Xinchuang software peers at 3-6x and below faster-growing UnionTech — but multiples on mandate-driven revenue overstate quality if a material share of profit is subsidy. Entry discipline therefore requires a discount to the appraisal mark to compensate for non-market price formation, disclosure opacity and geopolitical tail risk, plus contractual information rights to obtain standalone accounts. For a state or strategic investor the asset is a hold/accumulate within the national-champion mandate; for an independent financial investor without information rights, the correct posture is to track pending the three gating diligence items rather than to underwrite the headline valuation at face value.[CV010, CV011, CV012, CV013, CV014, CV015]

8.3 Financing Context and Comparable Valuation

The reference set for Kylinsoft is the listed and pre-IPO Xinchuang software cohort. Its listed parent, China National Software (CSS, 600536), trades near 28 billion yuan of market capitalization on roughly 5.9 billion yuan of forward revenue — about 4.8x sales — at a ~52% gross margin, having only just returned to breakeven. Direct OS peer UnionTech (UOS) is preparing a STAR Market IPO, was valued in the 6-10 billion yuan range on 2025 revenue of about 718 million yuan (up ~62%) and a first-time net profit near 239 million yuan, implying a much richer 8-14x sales multiple that the market is willing to pay for higher growth and an imminent liquidity event. Broader application-software comparables bracket the range: Kingsoft Office trades around 16x sales on a >30% net margin, while Yonyou and Taiji sit at roughly 3-4x. Against this set, Kylinsoft's 8.355 billion yuan appraisal on about 1.6 billion yuan of revenue (~5x trailing sales) is mid-cohort — richer than the slow-growth ERP/integrator names, cheaper than UOS and Kingsoft — and is supported by genuine profitability that several peers lack. The caveats are that the Xinchuang sector has de-rated from 10-20x sales in 2020-2022 to 3-6x by 2026, that the Kylinsoft mark is an appraisal rather than a market round, and that its revenue is more mandate-concentrated than the diversified comparables, so the like-for-like multiple should arguably carry a concentration discount rather than a premium.[CV018, CV019, CV020, CV021, CV022, CV023]

8.4 Bull / Base / Bear Scenarios and Valuation Range

The base case assumes the Xinchuang mandate persists through the late-2020s, revenue compounds at the disclosed low-teens rate, the ~35% margin holds with a modest subsidy tail, and the multiple stays in the peer 4-5x band; that supports a valuation of roughly 8-10 billion yuan, essentially validating the appraisal mark. The bull case adds genuine private-sector and overseas traction, AI-OS and smart-connected (Kylin 100) monetization, and a re-rating toward 6-8x on UOS-style growth optics or an eventual public listing, lifting value to roughly 12-18 billion yuan. The bear case is a loosening of procurement mandates or a successor-policy gap after 2025 targets, intensified multi-homing with UOS and HarmonyOS, an export-control shock to the domestic silicon roadmap, or a disclosure event revealing subsidy-dependent rather than organic profit; any of these compresses the multiple to a 2-3x distressed- Xinchuang level and value to roughly 4-6 billion yuan. The distribution is asymmetric to the downside because the upside requires the company to do something it has not yet demonstrated — win unmandated demand — while the downside requires only that the policy tailwind it already depends on weakens. Probability signals favor the base case in the near term given entrenched policy, but the bear scenario's triggers are more controllable by external forces (US export policy, Chinese procurement policy) than by management.[CV027, CV028, CV029, CV030, CV031, CV032]

8.5 Exit Readiness, Kill Triggers, and Final Diligence Asks

Exit readiness is moderate and improving but indirect. The clearest liquidity path is a domestic public listing — either a STAR Market IPO mirroring UnionTech's audit-and-restructure track or continued value crystallization inside listed parent CSS — but no Kylinsoft filing exists, so a near-term arm's-length exit is unconfirmed and state ownership constrains control transfers. The thesis breaks on four monitorable triggers: a loosening or successor-gap in Xinchuang procurement mandates; new US export controls that choke the Phytium/Kunpeng/Loongson silicon the OS certifies against; a credible "套壳" or security finding that damages certification standing; or standalone disclosure showing a government-subsidy share of profit above ~50%. Each trigger maps to a concrete valuation action, from re-rating the multiple down to walking away. The three priority diligence asks that gate the recommendation are: audited standalone Kylinsoft financial statements (to verify the single consolidated revenue line and cash position); a reconciliation of net profit to government grants and tax incentives (to test organic profitability); and a market-tested valuation reference or updated appraisal with the full capital-increase agreement (to underwrite the 8.355 billion yuan mark). Until those are answered, the asset is a high-conviction strategic hold for the state and a track-and-monitor for an independent investor.[CV035, CV036, CV037, CV038, CV039, CV040]