Imperva

Imperva
Name	Imperva
Type	Public (formerly)
Industry	Cybersecurity
Founded	2002
Founders	Shlomo Kramer, Amichai Shulman, Rami Essaid
Headquarters	Redwood City, California
Key people	Pam Murphy (CEO, 2021–2023), Chris Hylen (CEO, 2019–2021), Shlomo Kramer
Revenue	(private)
Products	Web Application Firewall, DDoS protection, Bot Management, Data Security
Website	imperva.com

Imperva is a cybersecurity company specializing in application and data protection, known for web application firewalls, distributed denial-of-service mitigation, bot management, and database security. Founded in 2002 by entrepreneurs with backgrounds in network security and research, the firm has served enterprise clients across finance, healthcare, retail, and government sectors. Its offerings span on-premises appliances, cloud-delivered services, and hybrid deployments, and the company has been involved in acquisitions, venture funding, and a public listing.

History

Founded in 2002 by Shlomo Kramer, Amichai Shulman, and Rami Essaid, the company grew amid an early-2000s rise in demand for application-layer security following incidents affecting Visa, Mastercard, and TJX Companies. Early milestones included product releases targeting web application threats contemporaneous with advances by vendors such as F5 Networks, Akamai Technologies, and Cisco Systems. The firm raised capital from investors including Accel Partners, Jerusalem Venture Partners, and Kleiner Perkins before pursuing an initial public offering that paralleled listings by peers like Palo Alto Networks and Fortinet. Later, the company underwent changes in ownership and leadership during periods shaped by acquisitions involving Thoma Bravo, as well as consolidation trends exemplified by transactions involving Symantec, Broadcom Inc., and FireEye.

Products and Services

The product portfolio encompasses web application firewalls (WAFs), bot management, distributed denial-of-service (DDoS) protection, database activity monitoring, and data security suites. WAF offerings compete with solutions from F5 Networks, Cloudflare, Akamai, and Fastly while database security and activity monitoring target similar markets as IBM Security, Oracle, and McAfee. Cloud-native services integrate with platforms from Amazon Web Services, Microsoft Azure, and Google Cloud Platform, and provide management interfaces compatible with orchestration tools from Kubernetes and Docker, Inc.. Professional services have supported compliance regimes such as PCI DSS, HIPAA, and SOC 2, and training partnerships have included organizations like SANS Institute.

Technology and Architecture

Architectural design blends inline traffic inspection, reverse-proxy routing, and agent-based database monitoring. Network-level defenses leverage content delivery and traffic scrubbing strategies comparable to approaches used by Akamai Technologies and Cloudflare, while application-layer analytics use signature-based detection, anomaly detection, and machine learning techniques similar to research from MIT Computer Science and Artificial Intelligence Laboratory and papers presented at conferences like Black Hat and DEF CON. Database security products implement activity logging and query analysis analogous to technologies from Imperial College London researchers and commercial offerings from Oracle and IBM. Integrations have been built for identity providers such as Okta, Ping Identity, and Microsoft Entra ID.

Corporate Governance and Management

Leadership has included founders with prior exits to companies like Check Point Software Technologies and board members with backgrounds at firms such as Google, Cisco Systems, and Goldman Sachs. The executive suite has seen CEOs and CFOs transition amid private equity involvement from firms like Thoma Bravo and advisory relationships with law firms experienced in securities matters such as Skadden, Arps, Slate, Meagher & Flom LLP. Human resources and diversity initiatives paralleled industry programs from organizations including Women in CyberSecurity and recruitment ties to universities like Stanford University and Tel Aviv University.

Security Incidents and Controversies

The company, operating in the cybersecurity sector, has both responded to third-party vulnerability disclosures reported at venues like CVE entries and been scrutinized during product misconfigurations that affected customer deployments. Debates in the press compared its detection efficacy against competitors including Imperial College London-affiliated research outputs and industry testing by groups such as Gartner and Forrester Research. Legal and contractual disputes have involved vendor-client agreements similar to cases in the sector involving Symantec and McAfee, and public commentary has paralleled critiques leveled at cloud security vendors like Cloudflare over outage impacts during high-profile events.

Market Position and Competitors

Market analyses from firms such as Gartner, Forrester Research, and IDC positioned the company among leaders in web application and API security alongside Akamai Technologies, Cloudflare, F5 Networks, Fastly, and Imperva competitors?; competition extends to database security vendors including IBM, Oracle, McAfee, and niche specialists such as Varonis Systems and Securonix. Strategic moves by peers—including acquisitions by Broadcom Inc. and product expansions from Palo Alto Networks—have shaped consolidation trends and influenced pricing, go-to-market strategies, and cloud integration roadmaps.

Category:Computer security companies