The Cool Startup Damballa is a leading cyber-security platform for detecting and mitigating advance persistent threats and malware. They started in 2006 and have raised $44.5M to date. Their “Failsafe” platform runs on big data that processes 22 billion records per day, which equates to 8 trillion records per year. Damballa asserts their Advanced Security Platform detects more threats than any other product on the market. Failsafe is used by the Fortune 1000, government agencies, and large enterprises across the world.
The fourth quarter of 2013 was a banner year for Damballa, where bookings and revenues increased to record highs, although they didn’t publish actual revenues. The Failsafe platform works with all endpoint devices including iOS and Android. A big selling feature is the 3rd party integration with Splunk. Splunk offers a leading SIEM for log management, forensics, incident response, investigation, fraud detection and compliance reporting. With all the hacker activity taking place in 2014, we expected Damballa to grow their customer base and revenue to record highs this year again. Damballa would be a great fit for Akamai.
 Company Background
- Started: 2006
- Raised: $44.5M in funding
- Linkedin Employee Count: 86
- C Level: David Scholtz (CEO), Tom Savini (CFO) and Brian Foster (CTO)
- Product: Platform that protects against Advanced Threat Protection and Malware
- Service: Advanced Detection Engine Continuously Watches Network Traffic and isolates infected machines
- Failsafe has visibility to 50% of North American Internet Traffic and one-third of mobile traffic
- Failsafe processes 8 trillion records per year of unfiltered, unstructured network data
- Customers: Fortune 1000, Government Agencies and Mid-market
Platform Features
- Failsafe Platform: automated breach defense system that detects infections
- Provides information on known and unknown threats across all devices including iOS and Android
- Provides data loss protection by blocking high risk activity
- Platform continuously learns its environment and network traffic patterns, in order to block advanced signature-less malware
- Identifies infected devices, and blocks them until they are taken care of
- Assigns risk level to infected devices and stops communication with infected device