Trustwave

Trustwave
Name	Trustwave
Type	Private
Industry	Cybersecurity
Founded	1995
Headquarters	Chicago, Illinois, United States
Key people	Babak Zanjani, Michael Murray, Rita Hartz
Products	Managed security services, PCI compliance, threat intelligence
Revenue	(private)
Parent	Singtel (acquired 2015)

Trustwave Trustwave is a Chicago-based cybersecurity company offering managed security services, compliance, and threat intelligence to enterprises and service providers. Founded in 1995, the company grew through acquisitions, research labs, and partnerships across the technology and financial sectors. Trustwave's operations intersect with standards bodies, payment networks, law enforcement collaborations, and global telecommunications firms.

History

Trustwave was founded in 1995 during the expansion of the internet and the rise of Internet Corporation for Assigned Names and Numbers interactions and early PCI Security Standards Council developments. In the 2000s the company expanded through acquisitions including firms that had connections to DigiCert, M86 Security, and Secure Computing alumni, aligning with compliance initiatives tied to Visa and MasterCard rules. Trustwave established research labs that engaged with actors such as Europol and Federal Bureau of Investigation task forces addressing financial malware targeting institutions like JPMorgan Chase and Bank of America. In 2011 the company sold an SSL certificate business that intersected with disputes involving Comodo-related incidents and discussions involving Mozilla Foundation policies. In 2015 Trustwave was acquired by Singtel in a move reflecting consolidation seen in transactions similar to AT&T and Verizon in the security marketplace. Post-acquisition, Trustwave continued global expansion into markets where firms such as British Telecom and Orange S.A. operate, while servicing customers in sectors represented by Walmart, Target Corporation, and HCA Healthcare.

Services and Products

Trustwave offers a portfolio that includes managed detection and response services analogous to offerings from firms like CrowdStrike, FireEye, and Palo Alto Networks. Its managed security services center model parallels operations run by IBM Security and AT&T Cybersecurity. Trustwave provides Payment Card Industry compliance services working with stakeholders such as the Payment Card Industry Security Standards Council, Discover Financial Services, and auditors aligned with KPMG and Deloitte. Its vulnerability scanning and penetration testing services are comparable to assessments performed by NCC Group and Mandiant (now part of Google Cloud). Trustwave's product set also includes secure web application testing, endpoint detection similar to McAfee solutions, and managed firewall configurations that integrate with devices from Cisco Systems and Juniper Networks.

Technology and Research

Trustwave operates research facilities that publish malware analysis and threat intelligence akin to reports from Symantec and Trend Micro. Its SpiderLabs team performed reverse engineering and incident response comparable to work by Kaspersky Lab and ESET. Trustwave leverages threat feeds and indicators of compromise with exchange formats used by MITRE and contributes to conventions referenced by FIRST and OWASP. The company developed tools and telemetry systems interoperable with Splunk and Elastic NV stacks and integrated with orchestration platforms resembling Palo Alto Networks Cortex and ServiceNow. Research collaborations have involved academic and standards institutions such as Carnegie Mellon University, MIT, and Stanford University researchers examining botnets, POS malware, and web application flaws like those cataloged in CVE listings.

Notable Incidents and Controversies

Trustwave's history includes controversies related to forensic access and law enforcement assistance that drew attention from civil liberties advocates and media outlets such as The New York Times, Wired, and The Guardian. The company became part of debates involving certificate issuance standards overseen by Mozilla Foundation and incident disclosures that referenced investigations involving entities like Heartland Payment Systems and TJX Companies. High-profile incident responses involved cooperation with agencies including the United States Secret Service and Department of Homeland Security components, prompting discussions about private-sector roles in investigations similar to controversies seen with Hacking Team and Palantir Technologies. Trustwave's handling of certain digital forensics cases was scrutinized by legal teams and academic commentators associated with Electronic Frontier Foundation critiques and analyses published in journals indexed by institutions such as Harvard Law School.

Corporate Structure and Ownership

Trustwave operated as an independent private company before being acquired by Singtel in 2015, a transaction reflecting trends in telecom-led cybersecurity consolidation similar to BT Group and Deutsche Telekom investments. Post-acquisition, governance involved executives with previous tenures at firms like Symantec, RSA Security, and Sun Microsystems. The company's board and executive leadership engaged with international regulatory frameworks overseen by bodies such as Financial Conduct Authority in the UK and compliance requirements relevant to Office of the Comptroller of the Currency in the United States. Trustwave's corporate strategy included alliances with channel partners and managed service providers comparable to relationships held by HP Enterprise and Capgemini.

Customers and Partnerships

Trustwave served a range of customers across retail, healthcare, financial services, and telecommunications, including organizations comparable to Target Corporation and HCA Healthcare in sectoral profile. The company partnered with technology vendors such as Cisco Systems, Microsoft, and Oracle Corporation to integrate security controls into enterprise environments. In payments and merchant services, Trustwave worked with networks and processors including Visa, MasterCard, and American Express and engaged auditing firms like Ernst & Young for compliance attestations. Trustwave also maintained relationships with cloud and hosting providers similar to Amazon Web Services and Google Cloud Platform for delivering managed detection services and collaborated with academic research groups at institutions such as University of Cambridge and University of Oxford on cybersecurity studies.

Category:Computer security companies