Adallom

Last updated
Adallom, Inc.
Company typePrivate
Founded2012 (2012)
Headquarters,
United States
Area served
Global
Key people
Assaf Rappaport, Ami Luttwak, Roy Reznik
ProductsAdallom
Parent Microsoft Corporation

Adallom is a cloud security company based in Menlo Park, California. It secures enterprise software-as-a-service (SaaS) application usage, audits user activity, and protects employees and digital assets from threats in real time. [1]

Contents

Adallom was reportedly acquired by Microsoft for $320 million in July 2015. [2] [3] The Adallom product was rebranded as Microsoft Cloud App Security (MCAS) and announced in general availability as of April 2016. [4] In November 2021, Microsoft Cloud App Security was rebranded as Microsoft Defender for Cloud Apps. [5]

History

Adallom was founded in 2012 by Assaf Rappaport, Ami Luttwak and Roy Reznik, who are former members of the Israeli Intelligence Corps’ Unit 8200 and alumni of the Talpiot program. Adallom’s namesake originates from Ad Halom, otherwise known as the “last line of defense.” [6] In 2013, the founding team was joined by Michael Nicosia, at which point the company pivoted directions using the core solution. Adallom secured $4.5 million (~$5.71 million in 2023) in Series A funding from Sequoia Capital and Zohar Zisapel. [7] The company secured $15 million (~$19 million in 2023) in series B funding led by Index Ventures with contributions from Sequoia Capital Israel. [8]

Adallom was named by CRN as the 10 Coolest Security Startups of 2013. [9]

Product

The founders created Adallom with the adage that SaaS as a class is secure but the way employees actually utilize SaaS is not. In November 2013 Adallom launched a complete security solution that audits activities performed in SaaS applications and develops intelligence to predict and protect from IT security issues, providing SaaS end user enablement while maintaining IT control and visibility. It provides tools to build a consistent security policy across all cloud applications at use within an enterprise. [10]

Adallom’s Smart Engines technology works similarly to the way credit card companies track transactions that appear out of the ordinary because it stops attacks by providing real-time reports of odd behavior. [11]

In December 2013, Adallom discovered and reported a token hijacking vulnerability (CVE-2013-5054) bug in Microsoft Office 365. [12] The identity theft vulnerability in Office 365, found in the wild, allowed attackers to grab user identities and steal email and documents. [13] The problem was reported by Noam Liran, chief software architect at Adallom, and the fix was addressed in Microsoft Security Bulletin MS13-104. [14]

Related Research Articles

<span class="mw-page-title-main">Trend Micro</span> Japanese multinational cyber security company

Trend Micro Inc. is an American-Japanese cyber security software company. The company has globally dispersed R&D in 16 locations across every continent excluding Antarctica. The company develops enterprise security software for servers, containers, & cloud computing environments, networks, and end points. Its cloud and virtualization security products provide automated security for customers of VMware, Amazon AWS, Microsoft Azure, and Google Cloud Platform.

NetApp, Inc. is an American data infrastructure company that provides unified data storage, integrated data services, and cloud operations (CloudOps) solutions to enterprise customers. The company is based in San Jose, California. It has ranked in the Fortune 500 from 2012 to 2021. Founded in 1992 with an initial public offering in 1995, NetApp offers cloud data services for management of applications and data both online and physically.

Google Workspace is a collection of cloud computing, productivity and collaboration tools, software and products developed and marketed by Google. It consists of Gmail, Contacts, Calendar, Meet and Chat for communication; Currents for employee engagement; Drive for storage; and the Google Docs Editors suite for content creation. An Admin Panel is provided for managing users and services. Depending on edition Google Workspace may also include the digital interactive whiteboard Jamboard and an option to purchase add-ons such as the telephony service Voice. The education edition adds a learning platform Google Classroom and today has the name Workspace for Education.

Acumatica provides cloud and browser based enterprise resource planning software for small and medium-sized businesses. The company is headquartered in Kirkland, Washington, in the Seattle metropolitan area.

Veracode is an application security company based in Burlington, Massachusetts. Founded in 2006, it provides SaaS application security that integrates application analysis into development pipelines.

Egnyte is a software company headquartered in Mountain View, California. It sells cloud-based content security, compliance, and collaboration tools for businesses. Egnyte was founded in 2007 with a focus on modernized file servers, but it has since shifted to selling tools that help users securely collaborate with coworkers and third parties.

AvePoint, Inc. is an independent software vendor of SaaS solutions to migrate, manage and protect data in Microsoft 365. AvePoint was founded in 2001 and is headquartered in Jersey City, New Jersey. The company also has offices in the United States, Canada, Australia, South Africa, United Kingdom, France, Germany, Netherlands, Switzerland, Japan, Singapore, and China.

Imperva, Inc. is an American cyber security software and services company which provides protection to enterprise data and application software. The company is headquartered in San Mateo, California.

New Relic, Inc. is an American web tracking and analytics company based in San Francisco. The company's cloud-based software allows websites and mobile apps to track user interactions and service operators' software and hardware performance.

<span class="mw-page-title-main">Microsoft SwiftKey</span> Virtual keyboard app

Microsoft SwiftKey is a virtual keyboard app originally developed by TouchType for Android and iOS devices. It was first released for Android in July 2010, followed by an iOS release in September 2014 following Apple's implementation of third-party keyboard support.

HyTrust, an Entrust company, is an American company. It specialized in security, compliance and control software for the virtualization of information technology infrastructure. The company was founded in 2007 and is based in Mountain View, California. Entrust Corp. acquired it in January 2021.

BetterCloud, an independent software vendor based in New York, NY and with engineering offices in Atlanta, GA, builds unified SaaS management software. A venture-backed startup, BetterCloud has raised $187 million in total funding, with the most recent round was led by Warburg Pincus with series F funding with $75 million raised to date. A previous round of funding was done in April 2018 which was led by Bain Capital Ventures. In December 2016, BetterCloud completed pivot from G Suite to general SaaS management.

<span class="mw-page-title-main">Wunderlist</span> Discontinued task management application

Wunderlist is a discontinued cloud-based task management application. It allowed users to create lists to manage their tasks from a smartphone, tablet, computer and smartwatch. Wunderlist was free; additional collaboration features were available in a paid version known as Wunderlist Pro, released April 2013.

CipherCloud is an American software company providing cloud computing security to businesses. The company was established in 2010 and is based out of San Jose, California.

<span class="mw-page-title-main">Bitium</span> SaaS startup acquired by Google

Bitium was a developer of the cloud service Bitium, which provided single sign-on and identity management for software as a service (SaaS) cloud-based applications before its merger into Google Cloud. Bitium allowed end users to access all of their cloud software accounts using a single set of login credentials. The product could integrate with cloud apps using SAML for enhanced security.

Vera is an enterprise data security and information rights management platform that provides encryption and tracks and controls digital information shared across users, devices, applications, and platforms. Vera gives developers access to its IRM-as-a-service (IRMaaS) platform via a REST API and downloadable software development kit.

<span class="mw-page-title-main">Gili Raanan</span> Israeli inventor

Gili Raanan is an Israeli venture capitalist and one of the inventors of CAPTCHA, the WAF and many other inventions in the fields of Cybersecurity. Raanan started Sanctum in 1997, and invented the first Web application firewall AppShield and the first Web application penetration testing software AppScan. He later started NLayers which was acquired by EMC Corporation pioneering the science of Application discovery and understanding. He was an investor and a General Partner at Sequoia Capital, the Founder of Cyberstarts, and is the first investor and board member at Wiz (company), Adallom, Armis Security, Onavo, Moovit, and Innovid (NYSE:CTV).

Docker, Inc. is an American technology company that develops productivity tools built around Docker, which automates the deployment of code inside software containers. Major commercial products of the company are Docker Hub, a central repository of containers, Docker Desktop, a GUI application for Windows and Mac to manage containers. The historic offering was Docker Enterprise PaaS business, acquired by Mirantis. The company is also an active contributor to various CNCF projects, such as containerd and runC. The main open source offering of the company are Docker Engine and buildkit which are rebranded under the Moby umbrella project. The core specification, Dockerfile, still includes the company trademark, however.

Wiz is a cloud security startup headquartered in New York City. The company was founded in January 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak, all of whom previously founded Adallom. Rappaport is CEO, Costica is VP of Product, Reznik is VP of Engineering, and Luttwak is CTO. The company's platform analyzes computing infrastructure hosted in AWS, Azure, GCP, OCI, and Kubernetes for combinations of risk factors that could allow malicious actors to gain control of cloud resources and/or exfiltrate valuable data.

<span class="mw-page-title-main">Michael Nicosia</span> Italian-American entrepreneur

Michael Nicosia is an Italian–American serial entrepreneur and software technology executive. He currently holds the position of chief operating officer (COO) and Co-Founder of Salt Security. In 2016, Nicosia partnered with Roey Eliyahu, an Israeli national, to establish Salt, a SaaS cybersecurity startup. Salt Security safeguards the application programming interfaces (API) at the apex of contemporary software application.

References

  1. Messmer, Ellen (November 12, 2013). “Start-up Adallom takes on SaaS security monitoring/auditing” Archived January 23, 2014, at the Wayback Machine Network World. Retrieved January 9, 2014
  2. "Microsoft buys Israeli cloud security co Adallom for $320m, With its development center in Tel Aviv, the cyber security company has raised $49.5 million to date". Globes English. July 19, 2015. Archived from the original on July 20, 2015. Retrieved July 20, 2015.
  3. "Microsoft Confirms Purchase Of Cloud Security Firm Adallom – TechCrunch". techcrunch.com. Retrieved 2018-06-26.
  4. "Microsoft marches forward with its security plan, releasing Cloud App Security". TechCrunch. Retrieved 2020-01-28.
  5. "Announcing Microsoft Defender for Cloud Apps". microsoft.com. Retrieved 2021-11-09.
  6. Marshall, David (November 18, 2013). “Startup Adallom takes on SaaS security challenges” InfoWorld. Retrieved January 9, 2014
  7. Shelach, Shmulik (December 12, 2012). “Content security co Adallom raises $4.5m” Globes. Retrieved January 9, 2014
  8. Darrow, Barb (January 20, 2014). “Security startup Adallom scores $15M in funds to build out sales, R&D” GigaOM. Retrieved January 30, 2014
  9. Westervelt, Rob (December 12, 2013). “The 10 Coolest Security Startups Of 2013” CRN. Retrieved January 9, 2014
  10. Kepes, Ben (November 12, 2013). “The Next Israeli Success Story? – Adallom – Uber Control for Cloud Customers” Forbes. Retrieved January 9, 2014
  11. Williams, Alex (November 25, 2013). “The Danger Of Laissez-Faire Security Attitudes” TechCrunch. Retrieved January 9, 2014
  12. Walker, Danielle (December 10, 2013). “Patch Tuesday update addresses 24 bugs, including exploited TIFF zero-day” SC Magazine. Retrieved January 9, 2014
  13. Messmer, Ellen (December 10, 2013). “Identity-theft vulnerability fixed in Microsoft Office 365, says security firm” Archived January 22, 2014, at the Wayback Machine Network World. Retrieved January 9, 2014
  14. Microsoft (December 10, 2013). "Microsoft Security Bulletin MS13-104 - Important." Retrieved January 9, 2014