FFRI Security Valuation Multiples

Palo Alto Networks is a platform-based cybersecurity vendor with product offerings covering network security, cloud security, and security operations. The California-based firm has more than 80,000 enterprise customers across the world, including more than three fourths of the Global 2000.

CrowdStrike is a cloud-based cybersecurity company specializing in next-generation security verticals such as endpoint, cloud workload, identity, and security operations. CrowdStrike’s primary offering is its Falcon platform that offers a proverbial single pane of glass for an enterprise to detect and respond to security threats attacking its IT infrastructure. The Texas-based firm was founded in 2011 and went public in 2019.

Incorporated in 1911, International Business Machines, or IBM, is one of the oldest technology companies in the world. It provides software, IT consulting services, and hardware to help business customers modernize their technology workflows. IBM operates in 175 countries and employs approximately 300,000 people. The company has a robust roster of business partners to service its clients, which includes 95% of all Fortune 500 companies. IBM’s products, including Red Hat, watsonx, and mainframes, handle some of the world’s most important data workloads in areas like finance and retail.

Fortinet is a platform-based cybersecurity vendor with product offerings covering network security, cloud security, zero-trust access, and security operations. The firm derives a majority of its revenue through sales of its subscriptions and support-based business. The California-based firm has more than 800,000 customers across the world.

Cloudflare is a software company based in San Francisco, California, that offers security and web performance offerings by utilizing a distributed, serverless content delivery network, or CDN. The firm’s edge computing platform, Workers, leverages this network by providing clients the ability to deploy and execute code without maintaining servers.

Okta is a cloud-native security company that focuses on identity and access management. The San Francisco-based firm went public in 2017 and focuses on two key client stakeholder groups: workforces and customers. Okta’s workforce offerings enable a company’s employees to securely access its cloud-based and on-premises resources. The firm’s customer offerings allow its clients’ customers to securely access the client’s applications.

Zscaler is a software-as-a-service, or SaaS, firm focusing on providing cloud-native cybersecurity solutions to primarily enterprise customers. Zscaler’s offerings can be broadly partitioned into Zscaler Internet Access, which provides secure access to external applications, and Zscaler Private Access, which provides secure access to internal applications. The firm is headquartered in San Jose, California, and went public in 2018.

F5 is a market leader in the application delivery controller market. The company sells products for security, application performance, and automation. Its three customer verticals are enterprises, service providers, and government entities. Revenue is evenly split between its services business and products business with revenue trending toward products due to software adoption. The Seattle-based firm was incorporated in 1996, and went public in 1999.

Rubrik Inc is a company that offers data security solutions to organizations ranging from the largest companies world-wide to mid-sized smaller customers. Its platform is architected to help organizations achieve cyber resilience, which encompasses cyber posture and cyber recovery. It enables organizations to confidently accelerate digital transformation and leverage the cloud to realize business agility. Geographically, the company operates in the Americas, EMEA (Europe, the Middle East, and Africa) and APAC (Asia Pacific). It generates maximum revenue from Americas.

Gen is a cybersecurity pure-play that offers security, identity protection, and privacy solutions to individual consumers. The firm's cyber safety offerings, via brands such as Norton, Avast, and LifeLock, have long maintained their positions as some of the most recognizable consumer-focused security and identity-protection products.

Check Point Software Technologies is a pure-play cybersecurity vendor. The company offers solutions for network, endpoint, cloud, and mobile security in addition to security management. Check Point, a software specialist, sells to enterprises, businesses, and consumers. Around 50% of revenue is generated in Europe, the Middle East, and Africa, 40% from the Americas, and 10% from the Asia-Pacific region. The firm, based in Tel Aviv, Israel, was founded in 1993 and has about 5,000 employees.

CACI International Inc is an information solutions and services provider, offering information solutions and services to its customers. The company's primary customers are agencies and departments of the U.S. government, which account for the vast majority of the firm's revenue. It provides information solutions and services supporting national security missions and government modernization for intelligence, defense, and federal civilian customers. Some of the services provided by the company are functional software development, data, and business analysis, IT operations support, naval architecture, and life cycle support intelligence among others. The company's operating segments are; Domestic operations and International operations. It derives key revenue from the Domestic segment.

SailPoint Inc delivers solutions to enable comprehensive identity security for the enterprise. The company does this by unifying identity data across systems and identity types, including employee identities, non-employee identities, and machine identities. The SaaS and customer-hosted offerings of the company leverage intelligent analytics to give organizations critical visibility into which identities currently have access to which resources, which identities should have access to those resources, and how that access is being used. Its solutions enable organizations to establish, control, and automate policies that help them define and maintain a robust security posture and achieve regulatory compliance.

360 Security Technology Inc is engaged in the research and development of Internet security technology, design, development, and promotion of Internet security products, as well as commercial services such as Internet advertising and services based on Internet security products, Internet value-added services, and smart hardware services. The company operates through two segments. The Internet and Smart Hardware Business segment covers Internet commercialization, such as advertising and services, value-added Internet businesses like AI products and game distribution, and smart hardware, including cameras, video doorbells, driving recorders, and children’s smartwatches. The Security Business segment focuses on digital security operations.

SentinelOne is a cloud-based cybersecurity company specializing in endpoint protection. SentinelOne’s primary offering is its Singularity platform that offers a single pane of glass for an enterprise to detect and respond to security threats attacking its IT infrastructure. The California-based firm was founded in 2013 and went public in 2021.

CommVault Systems Inc provides data and information management software applications and services. The firm sells software licenses and services to large global enterprises, small- and midsize businesses, and government agencies through both its salesforce and its network of reseller partners. Its software solutions include Cleanroom Recovery, HyperScale X, Air Gap Protect, Compliance, Cloud Rewind, and Clumio Backtrack. The company operates in the United States and exports to many other countries.

Glory View Technology Co Ltd is engaged in providing smart city solutions, including smart medical care, smart education, smart community, smart buildings, smart government affairs, and smart parks in the three areas of smart people's livelihood, urban comprehensive management, and smart parks.

Clear Secure Inc is an identity company making experiences safer and easier digitally and physically. It is involved in creating a frictionless travel experience while enhancing security. Its secure identity platform uses biometrics to automate the identity verification process through lanes in airports, helping to make the travel experience safe and easy. The Company's operations are mainly focused on growing and maintaining its secure identity network across multiple offerings in both aviation and non-aviation channels.

Qualys is a cloud security and compliance solutions provider that helps businesses identify and manage their security risks and compliance requirements. The California-based company has more than 10,000 customers worldwide, the majority of which are small- and medium-size businesses. Qualys was founded in 1999 and went public in 2012.

Netskope Inc is redefining the security and networking of cloud and AI. The company has formed a cloud-native platform that offers converged security and networking services to enable fast and secure AI, cloud, and web access at the edge.

Varonis Systems is a cybersecurity vendor focused on data privacy and security. The firm is currently undergoing a cloud transition as it weans its on-premises customers over to its cloud products that are delivered as software-as-a-service. The New York-based firm was founded in 2005 and went public in 2014.

BlackBerry, once known for being the world’s largest smartphone manufacturer, is now exclusively a software provider with a stated goal of end-to-end secure communications for enterprises. The firm provides endpoint management and other secure communications software to enterprises, specializing in regulated industries like government and financial institutions. BlackBerry also has a sizable embedded software business primarily serving the automotive market, with some exposure to the industrial market.

Trend Micro Inc provides antivirus and other security products that protect the flow of information on PCs, file servers, e-mail servers, and the Internet gateway. The company operates through four geographic segments: Japan, North America, Europe, and Asia-Pacific.

Founded in 2002, Tenable is a cybersecurity company that began providing vulnerability management solutions under its Nessus software. In recent years, Tenable has expanded its portfolio to provide a broader range of exposure management modules. Solutions include cloud security and compliance, active directory management, operational technology security and advanced vulnerability analytics. The Maryland-based company went public in 2018.

Cellebrite DI Ltd is an Israeli digital intelligence company that provides tools for federal, state, and local law enforcement as well as enterprise companies and service providers to collect, review, analyze, and manage digital data. Some of its products include Cellebrite UFED, Cellebrite Physical Analyzer, Cellebrite UFED Cloud, Cellebrite Frontliner, Cellebrite Responder, Cellebrite Premium, and Cellebrite Seeker.

NetScout Systems Inc is a provider of service assurance and cybersecurity solutions to enterprise and government networks. It bases its solutions on proprietary adaptive service intelligence technology, which helps customers monitor and identify performance issues and provides insight into network-based security threats. These solutions also deliver real-time and historical information, which provides insight to restore service and understand the quality of user experience. The company derives revenue from the sale of network management tools and security solutions. Its geographical regions include USA, which derives maximum revenue, Europe, Asia, and Rest of the World.

AvePoint Inc provides customizable solutions to optimize SaaS operations, enable secure collaboration, and accelerate digital transformation across technologies and industries. Its Confidence Platform delivers a comprehensive set of cloud-based solutions enabling IT operations, development operations, and cybersecurity professionals to monitor and secure the digital workplace using SaaS tools.

A10 Networks Inc is a provider of secure application and network infrastructure solutions for enterprises and service providers across on-premises, hybrid cloud, and distributed environments. The company's offerings include application delivery and traffic management, distributed denial-of-service (DDoS) protection, application and API security, and centralized management. It serves customers across multiple industries, including telecommunications, technology, financial services, public sector, industrial, retail, gaming, and education. The majority of the company's revenue is derived from the sale of secure networking and cybersecurity solutions and related maintenance and support services.

Qi An Xin Technology Group Inc provides a new generation of enterprise-level network security products and services to government and corporate customers.

Venustech Group Inc is a provider of network security products, trusted security management platform, as well as specialized security services and solutions in China.

CETC Cyberspace Security Technology Co Ltd is a China-based company that offers security-related products and services. It provides professional and autonomous network information security solutions, products, and services. It offers password products, network security products, and security information systems. The group is committed to building a life-cycle security solution from chip to system for a party and government users.

CloudWalk Technology Co Ltd is engaged in the provision of efficient human-machine collaborative operating systems and industry solutions. It is a man-machine coordination platform, that provides users with cross-scene, cross-industry and personalized AI services, in the hope of building a more harmonious and warmer intelligent future.

Progress Software Corp provides software operate in one operating segment: software products for the development, deployment, and management of responsible, AI-powered applications and digital experiences. The following are products: Chef, Corticon, Data Direct, Developer Tools, Flowmon, Kemp LoadMaster, MarkLogic, MOVEit, OpenEdge, Semaphore, ShareFile, Sitefinity, WhatsUp Gold. Geographical regions include the United States, Canada, EMEA, Latin America, and Asia Pacific.

Hangzhou DPtech Technologies Co Ltd focuses on network security and application delivery products and solutions. The security and application delivery products portfolio includes Application Firewall, IPS, Bandwidth Management, Deep Packet Inspection, Web Application Firewall, Anti-DDoS, Appliction Delivery and others.

Radware Ltd provides cyber security and application delivery solutions. The company provides solutions for cloud, on-premises, and software-defined data centers (SDDC). The solutions of the company secure the digital experience by providing infrastructure, application, and network protection and availability services to enterprises globally. The business segments of the company are Radware’s Core Business and The Hawks’ Business. The company derives maximum revenue from Radware’s Core Business. It generates the majority of its revenue from the United States.

Secunet Security Networks AG is an IT and telecommunications security provider. It offers public-sector clients and private-sector companies a comprehensive portfolio of products and consulting services for the protection of data, infrastructures, and digital identities as well as for information transmission, storage, and processing. Its services include consulting on IT security, software development, development, integration, operations, maintenance, and support of products. The company operates through two divisions, Public Sector, and Business Sector. The company generates maximum revenue from Public Sector.

Eastcompeace Technology Co Ltd is a provider of smart card and system solution. The firm provides secure qualified products and services including scratch card, contactless card, dual interface card, citizen card, transportation card, social security card, SIMePay, terminal, device management system, mobile payment system, smart tracking system, banking card perso solution, one card solution, and overall solutions. It caters its services to telecommunications, banking and payment, government and public sectors. The company is based in China with a presence in Singapore, Bangladesh, India, and Russia.

Red Violet Inc is a software and services company. It specializes in data analysis, providing cloud-based, mission-critical information solutions to enterprises in a variety of industries. Through its CORE data fusion platform, it provides mission-critical information about individuals, businesses and assets.

Mitek Systems Inc is engaged in the development, sale, and service of proprietary software solutions related to mobile imaging. The firm is a software development company with expertise in artificial intelligence, and machine learning. It serves more than 7,900 financial services organizations, financial technology (fintech) brands, telecommunications companies, and marketplace brands across the globe. The company's Mobile Deposit solution is used by consumers for mobile check deposits. The company's Mobile Verify verifies a user's identity online, enabling organizations to build safer digital communities, whereas CheckReader enables financial institutions to automatically extract data from a check image received across any deposit channel - branch, ATM, RDC, and mobile.

Founded in 2000, Rapid7 is a cybersecurity company that began providing vulnerability management solutions. It has, however, expanded its portfolio to provide extended detection and response; security information and event management; cloud security, threat intelligence, and application security; and security orchestration, automation, and response. The Boston-based company went public in 2015.

BeiJing Certificate Authority Co Ltd is a leading information security solution provider in China. The main business is electronic certification services, electronic certification products and manageable information security services.

Tinexta is an operator of an industrial group intended for the digital transformation and growth of companies. The company offers advanced services for digital identity and certification, cybersecurity, digital marketing, and access to financing, enabling companies, professionals, and institutions to get access to innovation and internationalization. Its segments include: Digital Trust, Cybersecurity, and Business Innovation. The company derives maximum revenue from Digital Trust segment.

Nsfocus Technologies Group Co Ltd is a China based internet and application security company. It offers enterprise-level network security solutions and services. The products offered by the company are Anti-DDoS system, Cloud DDoS protection service, Threat intelligence subscription service, Web application firewall, and Web vulnerability scanning system. In addition, it also offers solutions such as cloud DDoS defenses, on-premises DDoS defenses, Hybrid DDoS defenses, global threat intelligence, among others. The company has a business presence in China and other international countries.

CANCOM SE is a hybrid IT service provider. The group's range of IT solutions includes consulting, implementation, services and the operation of IT systems. As a hybrid IT integrator and service provider, the company delivers a range of services and solutions that includes business solutions and managed services such as cloud computing, analytics, enterprise mobility, IT security, hosting or as-a-service offerings. In geographical terms, the company operates in Germany, Austria as well as Switzerland, Romania and Belgium.

Asiainfo Security Technologies Co Ltd is a leader in China's network security software field, and a network security company that knows the Internet and the cloud in the industry.

Riskified Ltd has built a next-generation eCommerce risk management platform that allows online merchants to create trusted relationships with their consumers. It generates revenue by granting merchants access to its eCommerce risk management platform and reviewing and approving eCommerce transactions for legitimacy. Its merchants include some of the ecommerce brands including Wayfair, Lastminute.com, SHEIN, and Macy’s. Its merchants operate in a variety of verticals, including Payments, Money Transfer & Crypto, Tickets & Travel, Electronics, Home, Fashion & Luxury Goods, General Retail and Food. The company derived maximum revenue from Israel.

GB Group PLC provides identity intelligence solutions through its three divisions Location, Identity, and Fraud. It offers electronic ID Verification services, ID Registration, ID Engage, and ID Trace and Investigates software and services. GB Group's technology supports customers in traditional banking, government, utilities, retail, transport, and newly emerging industries such as eCommerce, online gaming, cryptocurrency, and mobile payments. The company has a geographical presence in the United Kingdom, the United States of America, and Australia and generates revenues from the sale of software and rendering of services.