Demisto

Demisto was established in 2015 by Slavik Markovich, Rishi Bhargava, Dan Sarel, and Guy Rinat, a team with extensive experience in cybersecurity and enterprise software. The founders leveraged their backgrounds from prominent tech and security firms to address a growing need in the security operations market. Markovich, for instance, was previously the CTO of Intel Security's application security business unit. The company's core offering centered on Security Orchestration, Automation, and Response (SOAR), a market it helped to define.

The firm developed a comprehensive platform designed to streamline security operations for enterprises. Its product integrates with a wide array of security tools, allowing organizations to automate repetitive tasks, manage incident response, and collaborate more effectively. Key features included automated playbooks that codify and execute security procedures, a real-time collaborative interface for incident investigation, and detailed analytics for performance measurement. This approach helps security teams manage the high volume of alerts they face and respond to threats more rapidly. The business model was based on selling this enterprise-grade software to organizations with dedicated Security Operations Centers (SOCs).

Demisto's trajectory saw it raise a total of $69 million in venture capital funding before being acquired by Palo Alto Networks in 2019 for $560 million. Following the acquisition, the Demisto platform was integrated into Palo Alto Networks' Cortex suite, becoming the foundation for Cortex XSOAR. This move combined Demisto's SOAR capabilities with Palo Alto Networks' broader security portfolio, including endpoint protection and threat intelligence, to create a more extensive security operations platform. Keywords: SOAR, security orchestration, incident response, cybersecurity automation, security operations, playbook automation, threat intelligence, enterprise security, SOC, Palo Alto Networks