AlienVault

About AlienVault

AlienVault, established in 2007, operates as a key entity within the cybersecurity sector, now under the umbrella of AT&T Cybersecurity following its acquisition in 2018. The company was founded in Madrid, Spain, by Julio Casal, Dominique Karg, Alberto Román Linacero, and Ignacio Molleda Carmona. Casal's journey began in the 1990s as a CISO for several ISPs, where he formed Spain's first white-hat penetration testing team and ran an MSSP. This deep experience in network security and threat management directly led to the creation of AlienVault and its foundational open-source project, OSSIM.

The company's core mission is to democratize threat detection and response, making robust security accessible and affordable for organizations of all sizes, particularly small to medium-sized businesses. AlienVault's business model is centered on a subscription-based framework for its Unified Security Management (USM) platform. This model provides a recurring revenue stream, supplemented by professional services like implementation and training. Initially a services-based company, AlienVault strategically pivoted to a product-based model, relocated its headquarters to San Mateo, California, to tap into the US market, and later shifted to a cloud-based subscription revenue model to better serve the mid-market.

AlienVault's flagship offering is the Unified Security Management (USM) platform, which integrates multiple essential security functions into a single solution. This platform, available as USM Anywhere (cloud-based SaaS) and USM Appliance (on-premises), provides asset discovery, vulnerability assessment, intrusion detection (network and host), behavioral monitoring, and SIEM capabilities. A key differentiator is the integration of the Open Threat Exchange (OTX), the world's largest crowd-sourced threat intelligence community. OTX allows tens of thousands of security professionals globally to share threat data collaboratively, which then feeds directly into the USM platform, providing real-time, actionable intelligence. This combination of unified tools and community-powered threat intelligence simplifies complex security operations, enabling resource-constrained IT teams to detect and respond to threats like malware, ransomware, and phishing attacks effectively.

A significant milestone in the company's history was its acquisition by AT&T in July 2018. This event integrated AlienVault's technology into AT&T's extensive cybersecurity portfolio, creating a new division led by then-AlienVault CEO, Barmak Meftah. The acquisition was designed to accelerate the delivery of enterprise-grade security solutions to small and medium-sized businesses by combining AlienVault's platform with AT&T's managed security services and network visibility.