Demisto

The firm developed a comprehensive platform designed to streamline security operations for enterprises. Its product integrates with a wide array of security tools, allowing organizations to automate repetitive tasks, manage incident response, and collaborate more effectively. Key features included automated playbooks that codify and execute security procedures, a real-time collaborative interface for incident investigation, and detailed analytics for performance measurement. This approach helps security teams manage the high volume of alerts they face and respond to threats more rapidly. The business model was based on selling this enterprise-grade software to organizations with dedicated Security Operations Centers (SOCs).

Demisto's trajectory saw it raise a total of $69 million in venture capital funding before being acquired by Palo Alto Networks in 2019 for $560 million. Following the acquisition, the Demisto platform was integrated into Palo Alto Networks' Cortex suite, becoming the foundation for Cortex XSOAR. This move combined Demisto's SOAR capabilities with Palo Alto Networks' broader security portfolio, including endpoint protection and threat intelligence, to create a more extensive security operations platform. Keywords: SOAR, security orchestration, incident response, cybersecurity automation, security operations, playbook automation, threat intelligence, enterprise security, SOC, Palo Alto Networks