Lower than yr after a shift to the burgeoning identification risk detection and response (ITDR) market from its preliminary roots as a pure-play deception know-how startup, Illusive reached the liquidity promised land this week. Proofpoint has introduced plans to buy the agency for an undisclosed quantity, with the deal set to shut in early 2023.
In accordance with executives from Proofpoint, which focuses on electronic mail and cloud safety, the pickup was spurred by a drive to bolster its know-how portfolio with identity-focused protections. The corporate mentioned it was drawn to Illusive for its identity danger discovery and remediation capabilities, along with post-breach defenses that might construct out Proofpoint’s protections towards ransomware and knowledge theft.
“It is presently far too straightforward for an attacker to show one compromised identification into an organizationwide ransomware incident or knowledge breach,” mentioned Ryan Kalember, govt vp of cybersecurity technique for Proofpoint, in an announcement.
Deception Tech: Not Sufficient on Its Personal
Initially based in 2014 by former Verify Level Software program Applied sciences veteran Ofer Israeli, Illusive touted itself for a very long time for its deception know-how capabilities, focusing totally on breach detection by way of the usage of decoy belongings — together with credentials — seeded on buyer networks.
The agency had raised greater than $54 million in enterprise funds with that market positioning. Nevertheless, pure-play deception more and more has been subsumed as a slim function set inside broader segments, like prolonged detection and response (XDR).
As Forrester’s David Holmes put it in his evaluation of the acquisition of deception participant Attivo by XDR vendor SentinelOne in March, “Deception tech, whereas tremendous cool, was by no means capable of obtain escape velocity by itself, and a few of its shining stars are disappearing into portfolios of bigger distributors.”
Amid that sort of market motion, Illusive pivoted.
Getting into the ITDR House
Earlier this yr, it repositioned itself as an identification danger administration vendor, with the launch of its Illusive Highlight ITDR platform in February.
The platform is just not that massive of a departure from its deception roots — it really works hand-in-hand with the deception know-how the seller had developed and sells by way of its Illusive Shadow product. However the launch of Highlight gave Illusive depart to reposition itself as a significant identification participant and go after a market that business analysts are more and more selling as an vital element of safety applications of the long run.
In March, Gartner named the rise of ITDR as one of many high safety and danger administration developments for 2022.
“Organizations have spent appreciable effort bettering [identity access management] IAM capabilities, however a lot of it has been centered on know-how to enhance consumer authentication, which truly will increase the assault floor for a foundational a part of the cybersecurity infrastructure,” Peter Firstbrook, analysis vp for Gartner, mentioned in that prediction. “ITDR instruments may help defend identification methods, detect when they’re compromised, and allow environment friendly remediation.”
In some ways, this deal by Proofpoint mirrors SentinelOne’s buy of Attivo. Forrester’s Holmes mentioned on the time that the corporate was drawn to Attivo’s identification capabilities first, with the deception ingredient coming second.
“What acquisitions like this one finally imply for safety and danger decision-makers is that they will pivot from deploying a stand-alone deception tech product and begin evaluating how deception will get paired with one or two key tactical domains comparable to identification,” Holmes wrote on the time.
The Proofpoint buy of Illusive solidifies that evaluation.
