Twistlock

Twistlock was a cybersecurity firm that specialized in security for cloud-native applications and workloads. Founded in 2015 by Ben Bernstein and Dima Stopel, the company established a significant market presence by addressing the security needs of containerized environments. Both founders brought valuable experience from their previous decade-long tenures at Microsoft, which informed their approach to enterprise security challenges.

The company's core business centered on providing a comprehensive security platform for technologies like Docker and Kubernetes, which were becoming central to modern software development. Twistlock's platform offered a multi-faceted security solution encompassing vulnerability management, compliance enforcement, and runtime defense tailored specifically for cloud-native architectures. This addressed a critical gap, as traditional security tools were not equipped to handle the dynamic nature of containers. Its client base included a number of large enterprises, with over a quarter of the Fortune 100 using its services prior to its acquisition.

The business model was based on selling this enterprise-grade security suite, which integrated into the continuous integration and continuous delivery (CI/CD) pipeline, allowing developers to scan for vulnerabilities early in the development process. The platform's features included scanning container images, monitoring for threats in runtime environments, and ensuring compliance with industry standards like PCI and HIPAA. A key differentiator was its ability to automatically learn application behavior to build security models, reducing the manual effort required to secure complex systems.

After raising $63.1 million over several funding rounds from investors including Polaris Partners, YL Ventures, and ICONIQ Growth, Twistlock demonstrated significant growth. This trajectory culminated in its acquisition by Palo Alto Networks in July 2019 for approximately $410 million in cash. Following the acquisition, Bernstein and Stopel joined Palo Alto Networks, and Twistlock's technology was integrated into the Prisma Cloud security suite, extending its capabilities to a broader set of cloud security challenges.

Keywords: container security, cloud-native security, Kubernetes security, vulnerability management, runtime defense, compliance, DevSecOps, application security, microservices security, cloud workload protection