Startups flood into cloud security, M&A will follow

Contact: Adrian Sanabria Scott Denne

Cloud application control (CAC) has emerged suddenly, spawning 15 startups, by our count, in less than two years, and three acquisitions since last fall. The market was born out of the need for nuanced control of enterprise SaaS applications: a gaping hole in offerings across many security categories, including next-generation firewalls and identity and access management.

Given the abundance of available startups and the relevance of this technology to so many vendors, we expect to see more acquisitions in this sector in the near future. We would be surprised if most CAC providers haven’t fielded some interest in an exit at this point.

Cloud application control acquisitions

Date announced Target Acquirer Employees Deal value
September 26, 2013 SaaSID Intermedia 20 Not disclosed
January 15, 2014 CloudUp Networks CipherCloud Two Not Disclosed
February 6, 2014 Skyfence Networks Imperva 20 (estimated) $60m

Source: The 451 M&A KnowledgeBase

Whether CAC eventually takes shape as a feature of a firewall or a cornerstone of a consolidated identity management and cloud encryption offering, this market is here to stay as all enterprises will require a way to control access and data outside their own perimeter.

We’ll explore this sector in depth in a report in tomorrow’s 451 Market Insight.