Company type | Private company |
---|---|
Nasdaq: ZFOX | |
ISIN | US98955G1031 |
Industry |
|
Founded | 2013 |
Founders |
|
Headquarters | Baltimore, Maryland |
Number of locations | 3 |
Owner |
|
Subsidiaries | IDX |
Website | www |
ZeroFox Holdings, Inc. is an external cybersecurity company based in Baltimore, Maryland. [1] [2] It provides cloud-based software as a service (SaaS) for organizations to expose and disrupt phishing and fraud campaigns, botnet exposures, credential theft, impersonations, data breaches, and physical threats that target brands, domains, people, and assets.
ZeroFox was created in 2013 under the name Riskive, but changed to its current name months later. The company began as a startup in an 8,000 sq. ft. space inside Betamore - a startup incubator in Baltimore's Federal Hill neighborhood.
In 2015, ZeroFox raised $27 million in Series B funding. By 2016, the company had outgrown its space and moved to an 18,000 sq. ft. space inside a former Pabst Brewing facility in South Baltimore. [3] In 2017, ZeroFox raised $40 million in funding led by Redline Capital Management, a European venture firm, and Silver Lake Waterman, a fund that focuses on pre-IPO companies. Prior investors New Enterprise Associates, Highland Capital Partners and Core Capital also contributed. The investment helped bring ZeroFox's total funding to $88 million. [4]
ZeroFox partners with other software organizations such as IBM, Hootsuite, Splunk, ThreatQuotient, and others to visualize, analyze, and predict cyber security threats to respond quickly to reduce the impact of incidents. [5] ZeroFox partners with Google Cloud to warn users against phishing domains. [6]
In 2020, ZeroFox closed a new $74 million round of financing led by Intel Capital. This funding round was one of the largest a Maryland cyber firm has landed in recent years. This brings ZeroFox's backing to $162 million to date. [7]
The company went public on August 4, 2022 through a $1.4B SPAC deal. In the deal, ZeroFox also acquired ID Experts Holdings, Inc. (“IDX”). The combined company was then called ZeroFox Holdings, Inc. and traded on the Nasdaq Stock Market under the ticker symbol “ZFOX” for its common stock and “ZFOXW” for its publicly traded warrants. [8] [9] [10]
On February 6, 2024, ZeroFox announced that it had entered into a definitive agreement to be acquired by Haveli Investments, a leading private equity firm focused on enterprise software and cybersecurity. Under the terms of the merger agreement, Haveli Investments will acquire ZeroFox in an all-cash transaction at an enterprise value of approximately $350 million. [11]
On May 13, 2024, it was announced that Haveli Investments had completed the purchase of ZeroFox Holdings. [12]
The company faced criticism over its handling of the 2015 protests over the death of Freddie Gray when it singled out its nonviolent organizers. ZeroFox labeled DeRay McKesson and Johnetta Elzie as high physical threats to law enforcement despite not being suspected of any criminal activity. [30] [31] [32] ZeroFox was unsuccessful at differentiating between impersonating troll accounts and Elzie's actual social media presence. [33]
ZeroFox signed a $14 million social media intelligence contract with the FBI on Dec 30, 2020, taking over from Dataminr, which held the contract until Dec. 31, 2020. This transition period led to decreased visibility leading up to the 2021 United States Capitol attack, and led agents to calling it an expletive sounding similar to ZeroFox. [34] [35] [36]
Computer security is the protection of computer software, systems and networks from threats that can lead to unauthorized information disclosure, theft or damage to hardware, software, or data, as well as from the disruption or misdirection of the services they provide.
The SANS Institute is a private U.S. for-profit company founded in 1989 that specializes in information security, cybersecurity training, and selling certificates. Topics available for training include cyber and network defenses, penetration testing, incident response, digital forensics, and auditing. The information security courses are developed through a consensus process involving administrators, security managers, and information security professionals. The courses cover security fundamentals and technical aspects of information security. The institute has been recognized for its training programs and certification programs. Per 2021, SANS is the world’s largest cybersecurity research and training organization. SANS is an acronym for SysAdmin, Audit, Network, and Security.
Cybercrime encompasses a wide range of criminal activities that are carried out using digital devices and/or networks. These crimes involve the use of technology to commit fraud, identity theft, data breaches, computer viruses, scams, and expanded upon in other malicious acts. Cybercriminals exploit vulnerabilities in computer systems and networks to gain unauthorized access, steal sensitive information, disrupt services, and cause financial or reputational harm to individuals, organizations, and governments.
Trend Micro Inc. is an American-Japanese cyber security software company. The company has globally dispersed R&D in 16 locations across every continent excluding Antarctica. The company develops enterprise security software for servers, containers, and cloud computing environments, networks, and end points. Its cloud and virtualization security products provide automated security for customers of VMware, Amazon AWS, Microsoft Azure, and Google Cloud Platform.
Cyveillance is an American cybersecurity company founded in 1997, based in Reston, Virginia. The company provides cybersecurity services including brand protection, social media monitoring and threat investigation, analysis, and response services. Its Cyveillance Intelligence Center subscription-based product monitors for information leaks; phishing and malware attacks and other online fraud schemes; sale of stolen credit and debit card numbers; threats to executives and events; counterfeiting; and trademark and brand abuse.
UST, formerly known as UST Global, is a provider of digital technology and transformation, information technology and services, headquartered in Aliso Viejo, California, United States. Stephen Ross founded UST in 1998 in Laguna Hills. The company has offices in the Americas, EMEA, APAC, and India.
Proofpoint, Inc. is an American enterprise cybersecurity company based in Sunnyvale, California that provides software as a service and products for email security, identity threat defense, data loss prevention, electronic discovery, and email archiving.
An insider threat is a perceived threat to an organization that comes from people within the organization, such as employees, former employees, contractors or business associates, who have inside information concerning the organization's security practices, data and computer systems. The threat may involve fraud, the theft of confidential or commercially valuable information, the theft of intellectual property, or the sabotage of computer systems.
Palo Alto Networks, Inc. is an American multinational cybersecurity company with headquarters in Santa Clara, California. The core product is a platform that includes advanced firewalls and cloud-based offerings that extend those firewalls to cover other aspects of security. The company serves over 70,000 organizations in over 150 countries, including 85 of the Fortune 100. It is home to the Unit 42 threat research team and hosts the Ignite cybersecurity conference. It is a partner organization of the World Economic Forum.
RiskIQ, Inc. was a cyber security company that was based in San Francisco, California. It provided cloud-based software as a service (SaaS) for organizations to detect phishing, fraud, malware, and other online security threats.
Cyren Inc. was a cloud-based Internet security technology company that provided security services and threat intelligence services to businesses. It offered a range of services including web security, DNS security, anti-spam solutions, phishing detection, ransomware protection, URL filtering, malware detection, and botnet attack prevention. Cyren also provided endpoint protection for mobile devices and Internet of Things (IoT) gateways. Major clients included Microsoft, Google, Check Point, Dell, T-Mobile, and Intel. The company announced its closure in February 2023.
Cyber threat intelligence (CTI) is a subfield of cybersecurity that focuses on the structured collection, analysis, and dissemination of data regarding potential or existing cyber threats. It provides organizations with the insights necessary to anticipate, prevent, and respond to cyberattacks by understanding the behavior of threat actors, their tactics, and the vulnerabilities they exploit. Cyber threat intelligence sources include open source intelligence, social media intelligence, human Intelligence, technical intelligence, device log files, forensically acquired data or intelligence from the internet traffic and data derived for the deep and dark web.
Verimatrix provides cybersecurity products and services that protect video content, streaming media, mobile applications, websites and APIs. The company merged with Inside Secure in 2019. It is headquartered in France and Asaf Ashkenazi is the CEO.
CrowdStrike Holdings, Inc. is an American cybersecurity technology company based in Austin, Texas. It provides endpoint security, threat intelligence, and cyberattack response services.
Greg Martin is a cybersecurity expert and entrepreneur. Martin was the founder of cyber-security company Anomali and the founder of the cyber security company JASK . Martin is credited with inventing the first Threat Intelligence Platform (TIP), and is the creator of the popular open source Honeypot project “Modern Honey Network”.
Cisco Talos, or Cisco Talos Intelligence Group, is a cybersecurity technology and information security company based in Fulton, Maryland. It is a part of Cisco Systems Inc. Talos' threat intelligence powers Cisco Secure products and services, including malware detection and prevention systems. Talos provides Cisco customers and internet users with customizable defensive technologies and techniques through several of their own open-source products, including the Snort intrusion prevention system and ClamAV anti-virus engine.
Perimeter 81 is an Israeli cloud and network security company that develops secure remote networks, based on the zero trust architecture, for organizations. Its technology replaces legacy security appliances like VPNs and firewalls.
Zscaler, Inc. is an American cloud security company based in San Jose, California. The company offers cloud-based services to protect enterprise networks and data.
The Israeli cybersecurity industry is a rapidly growing sector within Israel's technology and innovation ecosystem. Israel is internationally recognized as a powerhouse in the cybersecurity domain, with numerous cybersecurity startups, established companies, research institutions, and government initiatives. Tel Aviv itself is being ranked 7th in annual list of best global tech ecosystems, as reported by the Jerusalem Post.
Fortra is an American cybersecurity company based in Eden Prairie, Minnesota. The company was founded as Help/38 in 1982, rebranded as HelpSystems in 1988, and became Fortra in 2022. Fortra is owned by private equity firms TA Associates, Harvest Partners, Charlesbank Capital Partners, and HGGC.
But the end-of-the-year changeover limited the FBI's understanding of what was happening online at a key juncture, just as extremists were mobilizing. FBI agents started using an alternative service known as ZeroFox that was unfamiliar to many in the bureau. The change came as a surprise, causing confusion about how to use the new system. Some agents and analysts felt the new service was a significant downgrade, particularly when it came to tracking things on Twitter. Within the FBI, some frustrated agents quickly started using a derisive nickname for ZeroFox — replacing the "Fox" with a similar-sounding expletive, to indicate how little use it seemed to have.31"It wasn't that we were blind, it just turned out to be a bad time to have less visibility into what was happening online, because we were changing systems and a lot of people didn't really know the new system," said one person familiar with the matter.
Fact check: false. FBI agents have said in court records that they monitor public social media, and the bureau recently signed a $14 million contract with a "threat intelligence" company called ZeroFox "to proactively identify threats to the United States and its interests" on the internet. For years, the FBI has had a similar arrangement with DataMinr, which can flag social media postings of interest to its clients.