Threat Stack

Threat Stack was established in 2012 by co-founders Dustin Webber, Jason Meller, and Jen Andre. The company specialized in cloud security management and compliance solutions, operating on a software-as-a-service (SaaS) model. Its core offering, the Threat Stack Cloud Security Platform, was designed to provide continuous security monitoring for cloud environments where traditional network-based controls are ineffective. This platform-independent solution catered to companies of all sizes, operating in on-premise, public, private, or hybrid cloud infrastructures. It aimed to consolidate workload insights, infrastructure monitoring, vulnerability management, and threat intelligence into a single view.

The platform functioned by installing a lightweight agent on each virtual host or container, which then sent event data to the Cloud Security Platform in near real-time. It used a combination of rules-based detection and supervised machine learning to identify threats, vulnerabilities, and anomalous behaviors across the full infrastructure stack, from the cloud management console to hosts and containers. Key features included proactive risk identification, real-time threat detection, and compliance management for standards like HIPAA and PCI DSS. This approach helped security and operations teams to bridge gaps, improve operational efficiency, and reduce the mean time to detect and respond to security incidents.

The company's journey included significant funding milestones, raising a total of $72.4 million over several rounds, including a $45 million Series C in 2017. In a strategic move to enhance its cloud security portfolio, F5 Networks announced its acquisition of Threat Stack in September 2021 for $68 million. Following the acquisition, which was completed in October 2021, Threat Stack's technology was integrated into F5's offerings and rebranded as F5 Distributed Cloud Application Infrastructure Protection (AIP). This integration combines Threat Stack's workload protection with F5's existing application and API security solutions to provide defense-in-depth security across applications and the cloud-native infrastructure they run on.

Keywords: cloud security, workload protection, intrusion detection, compliance management, SaaS, infrastructure monitoring, F5 Networks, threat intelligence, vulnerability management, cloud-native security