Public cybersecurity companies
41 companies in the directory are listed on a stock exchange and run on their own. They are ranked by revenue, taken from each company's latest annual report as filed with the SEC.
Companies listed outside the US usually do not file with the SEC, so some of them show no revenue yet. They come last, ordered by staff numbers.
Ranked by revenue
| # | Company | Category | Revenue | Based in | Ownership |
|---|---|---|---|---|---|
| 1 | Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Identity and access management | $331.8bn (FY2026) | Redmond, United States | Public, MSFT |
| 2 | Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Firewalls | $11.5bn (FY2026) | Santa Clara, United States | Public, PANW |
| 3 | Fortinet Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments. | Firewalls | $6.8bn (FY2025) | Sunnyvale, United States | Public, FTNT |
| 4 | Keysight Technologies Test equipment maker whose device security lab, built on Riscure, tests chips, cards and vehicle electronics against side-channel and fault-injection attacks. | IoT, embedded and product security | $5.4bn (FY2025) | Santa Rosa, California, United States | Public, KEYS |
| 5 | Open Text Corporation OpenText provides software and services for managing information across an organisation. | Backup and cyber recovery | $5.2bn (FY2026) | Waterloo, Canada | Public, OTEX |
| 6 | CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | EDR and XDR | $4.8bn (FY2026) | Austin, United States | Public, CRWD |
| 7 | Zscaler Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications. | SASE and SSE | $3.4bn (FY2026) | San Jose, United States | Public, ZS |
| 8 | F5 F5 provides application delivery and security solutions for hybrid multicloud environments. | WAF and bot protection | $3.1bn (FY2025) | Seattle, United States | Public, FFIV |
| 9 | UL Solutions Global testing and certification firm, recognised by the PCI SSC for PTS POI and HSM evaluation, with labs in the UK and China. | Compliance audits (SOC 2, ISO 27001) | $3.1bn (FY2025) | Northbrook, United States | Public, ULS |
| 10 | Okta Okta provides cloud-based identity and access management solutions for workforce and customer identities. | Identity and access management | $2.9bn (FY2026) | San Francisco, United States | Public, OKTA |
| 11 | Check Point Check Point Software provides cyber security solutions including network, cloud, and AI security. | Firewalls | $2.7bn (FY2025) | Tel Aviv, Israel | Public, CHKP |
| 12 | Cloudflare Cloudflare provides a global network for security, performance, and full-stack development. | SASE and SSE | $2.2bn (FY2025) | San Francisco, United States | Public, NET |
| 13 | Elastic Elastic provides the Elasticsearch Platform, which includes search, observability, and security solutions. | SIEM | $1.7bn (FY2026) | Mountain View, United States | Public, ESTC |
| 14 | Commvault Commvault provides a cloud-native platform for data security, identity resilience, and cyber recovery. | Backup and cyber recovery | $1.2bn (FY2026) | Tinton Falls, United States | Public, CVLT |
| 15 | SailPoint SailPoint provides identity governance and security software for human, machine, and AI identities. | Identity governance and administration | $1.1bn (FY2026) | Austin, United States | Public, SAIL |
| 16 | SentinelOne SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection. | EDR and XDR | $1.0bn (FY2026) | Mountain View, United States | Public, S |
| 17 | Tenable Tenable provides an exposure management platform that unifies security visibility, insight, and action across the attack surface. | Vulnerability management | $999.4m (FY2025) | Columbia, United States | Public, TENB |
| 18 | Rapid7 Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management. | Vulnerability management | $859.8m (FY2025) | Boston, United States | Public, RPD |
| 19 | NETSCOUT NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions. | DDoS protection | $859.5m (FY2026) | Westford, United States | Public, NTCT |
| 20 | Netskope, Inc Netskope provides cloud security and networking services for organisations. | SASE and SSE | $709.0m (FY2026) | Santa Clara, United States | Public, NTSK |
| 21 | Rambus Chip IP company licensing automotive-grade hardware security modules, MACsec engines and key provisioning for vehicle chips. | Automotive cybersecurity | $707.6m (FY2025) | San Jose, United States | Public, RMBS |
| 22 | Qualys Qualys provides an enterprise cyber risk and security platform. | Vulnerability management | $669.1m (FY2025) | Foster City, United States | Public, QLYS |
| 23 | Fastly Fastly provides an edge cloud platform that helps businesses deliver, secure, and deploy applications and AI workloads. | WAF and bot protection | $624.0m (FY2025) | San Francisco, United States | Public, FSLY |
| 24 | Varonis Varonis provides data security software that protects data across cloud, SaaS and on-premises environments. | Data security posture management | $623.5m (FY2025) | Miami, United States | Public, VRNS |
| 25 | N-able N-able provides cybersecurity and IT management software for managed service providers and businesses. | Managed security services | $508.8m (FY2025) | Burlington, United States | Public, NABL |
| 26 | A10 Networks A10 Networks provides secure, high-performance networking solutions for applications and AI workloads. | DDoS protection | $290.6m (FY2025) | San Jose, United States | Public, ATEN |
| 27 | OneSpan OneSpan provides authentication, fraud prevention, and eSignature solutions for digital agreements and transactions. | MFA and passwordless authentication | $243.2m (FY2025) | Boston, United States | Public, OSPN |
| 28 | Allot Allot provides network intelligence and security solutions for service providers and enterprises. | DDoS protection | $102.0m (FY2025) | Hod Hasharon, Israel | Public, ALLT |
| 29 | BIO-key International BIO-key provides identity and access management solutions with biometric authentication for enterprises and organisations. | Identity and access management | $5.9m (FY2025) | Holmdel, United States | Public, BKYI |
| 30 | IBM IBM is a technology company that sells software, infrastructure, and consulting services. | SIEM | Armonk, United States | Public, IBM | |
| 31 | NCC Group Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services. | Penetration testing | Manchester, United Kingdom | Public, NCC | |
| 32 | Sectra Sectra provides medical imaging IT and cybersecurity solutions for healthcare and critical infrastructure. | Encryption and key management | Linköping, Sweden | Public, SECT-B | |
| 33 | Clavister Clavister is a Swedish cybersecurity company that develops, tests and supports all its technology in Sweden. | Firewalls | Örnsköldsvik, Sweden | Public, CLAV | |
| 34 | Corero Network Security Corero Network Security provides automatic DDoS protection for businesses and service providers. | DDoS protection | London, United Kingdom | Public, CNS | |
| 35 | Cybertrust Cybertrust is a Japanese company that provides trust services and security products. | Encryption and key management | Tokyo, Japan | Public, 4498 | |
| 36 | F FESCARO Korean supplier of ECU security software, security gateways, TARA, testing and R155 and 21434 consulting. | Automotive cybersecurity | Suwon, South Korea | Public, 0015S0 | |
| 37 | Intertek Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance. | Compliance audits (SOC 2, ISO 27001) | United Kingdom | Public, ITRK | |
| 38 | Riskified Riskified provides AI-powered fraud prevention and chargeback protection for ecommerce merchants. | Fraud and payment fraud prevention | New York, United States | Public, RSKD | |
| 39 | Trend Micro Trend Micro provides cybersecurity products and services for businesses and individuals worldwide. | EDR and XDR | Tokyo, Japan | Public, 4704 | |
| 40 | AUTOCRYPT Korean supplier of in-vehicle security software, V2X and Plug&Charge PKI, security testing tools and R155 consulting. | Automotive cybersecurity | Seoul, South Korea | Public, 331740 | |
| 41 | SGS Swiss testing and certification group offering security evaluations, penetration tests and ISO/SAE 21434 audits. | Penetration testing | Baar, Switzerland | Public, SGSN |
Revenue is in US dollars for the fiscal year shown. The combined figure adds each company's latest year. No revenue is shown for IBM, NCC Group, Sectra, Clavister, Corero Network Security, Cybertrust, FESCARO, Intertek, Riskified, Trend Micro, AUTOCRYPT, SGS.
Categories with public companies
- Firewalls 4 public
- DDoS protection 4 public
- Identity and access management 3 public
- SASE and SSE 3 public
- EDR and XDR 3 public
- Vulnerability management 3 public
- Automotive cybersecurity 3 public
- SIEM 2 public
- WAF and bot protection 2 public
- Encryption and key management 2 public
- Backup and cyber recovery 2 public
- Compliance audits (SOC 2, ISO 27001) 2 public
- Penetration testing 2 public
- Identity governance and administration 1 public
- MFA and passwordless authentication 1 public
- Data security posture management 1 public
- Fraud and payment fraud prevention 1 public
- IoT, embedded and product security 1 public
- Managed security services 1 public
Questions about public cybersecurity companies
- What is the largest public cybersecurity company by revenue?
- Measured by revenue in its latest annual report, Microsoft is the largest public company in the directory. It reported $331.8bn for FY2026.
- How many cybersecurity companies are public?
- 41 companies in the directory have their own stock listing. Companies that belong to a listed group, or to a private equity firm, are not counted here.
- Where do the revenue figures come from?
- Each figure is taken from the company's latest annual report, as filed with the SEC. The year shown after each figure is the fiscal year it covers, and fiscal years end in different months.