“Segmentation built for security; unbound from your network”

Founded: 2013 in California, USA

Category: Cybersecurity

Primary office: Sunnyvale, CA (USA)

Core technical team: Sunnyvale, CA (USA)

Status: Private

Employees: 289

Amount raised: $333 million  (5 rounds – February 2019)

OVERVIEW

  • One platform for visibility and control across any data center and cloud environment
  • Seamlessly protect workloads wherever they go, however the client’s business grows
  • Clients use illumio “to stop lateral movement everywhere. Achieve regulatory compliance, securely migrate applications to the cloud, and overcome data center and cloud security challenges.”

 

PERFORMANCE METRICS

  • Valuation – over $1 billion (2019)
  • Revenue – $45.1 million (2018)

 

ACHIEVEMENTS

  • FIPS 140-2 certification (opens market to US government low classification networks)
  • Illumio leader in Forrester Wave ™ – zero trust extended ecosystem platform providers
  • Best private cloud company according to Forbes (the Cloud 100)

Sells

  • Adaptive security platform (ASP) – one application to protect the business critical “crown jewel” applications
    • subcomponents include virtual enforcement node, policy compute engine
  • Features of ASP – illumination, policy generator, explorer, secure connect, vulnerability maps, segmentation templates

Channels

  • Partners with “market leaders in hyper-converged and software infrastructure, application performance, security, and management technologies to help enterprises create a new foundation for cybersecurity and operate at speed”

Competencies

  • zero-trust framework
  • adaptive micro-segmentation
    • enforces security policies – “If networking supports how things can communicate, security dictates if they should”
    • expands from network segmentation and hypervisors to providing a wide range of segmentation options – user segmentation, coarse-grained segmentation, application segmentation and nano-segmentation
  • decoupling zero-trust segmentation from networking

Resources

Assets

  • PCE Supercluster technology – scales micro-segmentation technology to cover more than 100,000 workloads
  • Policy compute engine – manages segment enforcement – rule management overhead is eliminated for internal data center and cloud security – e.g., one customer reduced 15,000 firewall rules to 40 security policies
  • Adaptive security platform

Processes

  • See, segment, and stay secure with the illumino software-based adaptive security platform
    • Identify all application traffic flows across any workload in any environment in a single view
    • Label group workloads thereby simplifying security policy
    • Implement policy
  • Segmentation strategy – Map application dependencies, orchestrate security policies, identify rogue application behavior, quarantine workloads
  • zero-trust framework (replacing perimeter paradigm) – least privilege – “strategically focused on addressing lateral threat movement within the infrastructure by using micro-segmentation and granular enforcement based on user context, data access controls, application security and the device posture”
  • Two pronged strategy for micro-segmentation
    • legacy applications – focus on service owners, leverage application dependency mapping, bare-metal/VMs
    • new applications – engage DevOps, integrate with a portal/marketplace, use clouds and containers

Priorities

  • Prevent spread of breaches inside data centers

Assertions That Best Describe What the Company Did to Scale Early, Rapidly & Securely

  1. Increase value by using a compelling image of the desired future company to convince others to provide the funding and resources the company requires
  2. Define and implement the plan to scale with the effort, skills, and resilience to increase profitability
  3. Increase demand of products and services by combining two or more resources in a way that the value created from them exceeds the sum of the value created from each resource separately
  4. Develop and sell products that address a problem, job to be done or a need that is shared by a large and growing number of individuals and organization in various regions to increase sales
  5. Increase demand by using scientific and technological advances to develop innovative products and services
  6. To increase value, attain stakeholders’ trust by improving cybersecurity of the company and the players it works with
  7. Increase the company’s value by continuously seeking and receiving funding to support the company’s plan to scale and improve its image in the marketplace