Industry landscapes
Industry report

Funding and advertised pay are reported in USD; filed accounts retain their stated source currency and basis.

Exchange-rate basis

Indicative conversions use ECB reference rates dated 2026-09-14, applied consistently across all periods. They are not historical exchange rates. Indian rupees may use crore (1 crore = 10 million); other currencies use K, M and B. CSV downloads, source documents and quoted news headlines retain their original currencies.

THE SAN FRANCISCO EDITION 2026

San Francisco’s
cybersecurity industry,
in focus.

The companies, capital and talent shaping cybersecurity in San Francisco. Find the leaders. Understand the segments. See where the activity is.

Snapshot: Funding in USD
Illustrated cover for Cybersecurity Industry Landscape of San Francisco
US
COMPANIES · CAPITAL · TALENT

An industry ecosystem,
measured in context.

Cybersecurity illustration
MEET THE COMPANIES

Explore San Francisco’s cybersecurity leaders

24 featured companies from the funding, hiring, revenue and team-size leaderboards.

Expand panel +
Cybersecurity company highlights in San Francisco, snapshot 5 August 2026
Company
CloudFlarecloudflare.com$2.2B3,682$2.17BFYFY2025 filing
Armisarmis.com$1.17B500
Upwindupwind.io$430M19
Personawithpersona.com$417.63M36
HashiCorphashicorp.com$349M2,200$583.14MFYFY2024 filing
Corelightcorelight.com$310.27M306
Lookoutlookout.com$284.34M297
CyberCubecybcube.com$280M76
DELineadelinea.com11 roles942
HackerOnehackerone.com10 roles231
Oktaokta.com9 roles6,013$2.61BFYFY2025 filing
TAC Securitytacsecurity.com8 roles69Financial figure available in RadarView in Radar
ConductorOneconductorone.com7 roles48
TRM Labstrmlabs.com7 roles11
Arkose Labsarkoselabs.com6 roles238
WorkOSworkos.com6 roles33
Abnormal Securityabnormalsecurity.com90
Bureaubureau.id101
Data Theoremdatatheorem.com250
Fortanixfortanix.com350
Hexnodehexnode.com327Financial figure available in RadarView in Radar
Horizon Three AIhorizon3.ai102
Incodeincode.com317
Mitsogomitsogo.com255Financial figure available in RadarView in Radar
24 featured companies

Locked revenue figures are available in Radar; the eight company financial previews stay the same throughout this page. A dash means the figure is outside these featured lists. Revenue years vary by company; the figures are not a like-for-like revenue comparison. Compare annual accounts ↗

Company discovery

Recorded evidence only
THE KEY SIGNALS

Cybersecurity industry KPIs in San Francisco

A few useful ratios bring the size of this ecosystem into perspective.

5 August 2026
Hiring participation8.9%

60 of 677 tracked companies have open roles.

Funding participation47.6%

322 of 677 tracked companies have a recorded round.

Top 3 funding share27.2%

Share of disclosed capital received by the three largest recorded recipients.

Median disclosed round$7.69M

Midpoint of 538 rounds with a disclosed amount.

Scale is concentrated. Opportunity is broader. The three largest funding recipients hold 27.2% of disclosed capital, while 52.4% of tracked companies have no recorded funding round.

Explore the segments →
CAPITAL & COMPANY FORMATION

How San Francisco cybersecurity has grown

Recorded company formation and disclosed funding across the complete annual series shown.

Expand panel +
2016 — 2025

Disclosed funding by year

Sum of recorded funding rounds · USD

San Francisco cybersecurity
$0$995.43M$1.99B$2.99B$3.98B2016: $412.18M20162017: $608.08M20172018: $618.23M20182019: $960.41M20192020: $1.31B20202021: $3.49B20212022: $923.57M20222023: $478.88M20232024: $1.16B20242025: $1.58B2025
View the numbers
Annual cybersecurity funding and company formation in San Francisco
YearFunding (USD)FoundedRaising
2016$412.18M3541
2017$608.08M3644
2018$618.23M5548
2019$960.41M3451
2020$1.31B6743
2021$3.49B3061
2022$923.57M3439
2023$478.88M4041
2024$1.16B3948
2025$1.58B1433
WHERE CAPITAL SITS

Funding concentration

Share of all disclosed company funding.

  • CloudFlare15.7%
  • Armis8.4%
  • Upwind3.1%
  • Other companies72.8%

Funding by stage

612 recorded rounds since 2016

NUMBER OF ROUNDS
Seed & Angel256 41.8%
Series A–B248 40.5%
Series C+ / PE81 13.2%
Grants, debt & other27 4.4%

Recent recorded rounds

Latest recorded rounds · USD
8 rounds

Swipe or scroll horizontally to browse.

Series A05/2026
Fun $72M

Backed by Multicoin Capital and SignalFire and others.

Seed04/2026
Spectrum $19M

Backed by TechOperators and Alumni Ventures.

Series B03/2026
DepthFirst $80M

Backed by Meritech and Forerunner Ventures and others.

Series C03/2026
Eclypsium $25M

Backed by PEAK6 and Ten Eleven Ventures.

Series A03/2026
Corridor $25M

Backed by Felicis Ventures and Conviction and others.

Series A03/2026
Scanner $22M

Backed by Sequoia Capital and CRV and others.

Series B03/2026
1stProtect $20M

Backed by Andra Capital and All Blue Capital.

Seed03/2026
Hacktron $2.93M

Backed by Crane Venture Partners and Project Europe and others.

Largest and notable recorded rounds

Each card is one recorded round
10 cards

Swipe or scroll horizontally to browse.

Series E11/2025
Armisarmis.com$435M

Backed by Goldman Sachs and CapitalG and others.

Series D11/2021
Armisarmis.com$300M

Backed by One Equity Partners and Georgian and others.

Series B01/2026
Upwindupwind.io$250M

Backed by Bessemer Venture Partners and Salesforce Ventures and others.

Series B12/2021
Incodeincode.com$220M

Backed by General Atlantic and SoftBank Group and others.

Series D10/2024
Armisarmis.com$200M

Backed by Alkeon Capital Management and General Catalyst and others.

Series D10/2025
CyberCubecybcube.com$180M

Backed by Spectrum Equity and Hudson Structured Capital Management and others.

THE BUSINESS BEHIND THE ACTIVITY

Revenue, profitability & financial strength

Annual accounts for reporting companies linked to this landscape, on like-for-like currency and reporting bases.

Expand panel +
USD · millions · consolidated

Display conversions use the dated reference rates above. Where a verified rate is unavailable, figures retain their source currency. Each reporting cohort keeps its currency and accounting basis separate.

FY2025 · company accounts; aggregate reporting threshold not met · 2 reporting entities from 5 eligible matches.

Revenue in covered accounts

Sum of reporting-entity revenue; not San Francisco market sales.

Net profit / loss

Combined result for the same cohort.

Aggregate net margin

Combined net income ÷ combined revenue.

Median company revenue

The middle covered reporting entity.

Profitable entities

None of 2 covered entities.

Top-five concentration

Share of covered revenue from the five largest entities.

Annual account trend

Reported cohort totals by year; coverage is stated for every period.

Bar height shows revenue. Changes in coverage can affect totals.

Profitability has two perspectives

FY2025 · 2 reporting entities

Open the company accounts

Up to eight fixed company previews show financial amounts. Search and sort the wider company list, then continue in Radar.

2 reporting entities
Continue your financial research in Radar

Explore full company accounts and filings.

View financials in Radar ↗
SAN FRANCISCO · INDUSTRY COHORTS

How does cybersecurity compare?

Each pair uses the same year, currency and reporting basis. Cohort overlap is disclosed.

IndustryCovered / eligibleRevenue totalMedian revenueNet profit / lossAggregate marginProfitable shareOverlap

Available-account cohorts are not estimates of whole industries. Overlapping entities can occur in more than one cohort; do not add cohort totals.

Coverage, calculations & financial sources

Filed annual accounts for exact designated national identifiers. Every aggregate and peer pair uses one fiscal year, source currency and reporting basis; periods, coverage and overlap are explicit; 2026 partials are excluded.

The same up to eight reporting entities remain open across years, filters and sorts. Other company figures are available in Radar.

Source currencies and accounting bases stay separate. Missing accounts are excluded rather than treated as zero. Exact reporting periods appear on company previews. Annual totals can change with coverage and do not measure growth of a fixed company cohort.

DIGITAL FOOTPRINT

Web traffic, app reach and release cadence

How the San Francisco companies on this page show up online: the sites people visit, the apps they install, and how often those apps ship.

Busiest websites

31 of the 677 companies on this page carry a measured traffic record (4.6%); these are the largest of those, by monthly visits. The median among them is 223,577 visits.

CompanyMonthly visitsAuthorityMobile
Bravebrave.com705,177,6427746.7%
Threadsthreads.com252,106,7319752.6%
Oktaokta.com153,949,4817128.3%
CloudFlarecloudflare.com91,231,3028337.5%
MetaMaskmetamask.io4,529,0267938.6%
HackerOnehackerone.com3,025,1146730.1%
Adobe Connectadobeconnect.com1,036,8282026.4%
Incodeincode.com1,032,2083982.3%
HashiCorphashicorp.com892,4615418.6%
Authyauthy.com728,2695069.1%

Visits and authority are third-party web estimates, not company-reported figures.

Most-installed apps

59 of these companies (8.7%) publish at least one Android app — 88 apps in all, carrying 876.4M installs between them.

Installs are lifetime totals to date at the June 2026 store reading — a measure of reach, not of people using an app today.

App reach by segment

The busiest app inside each of this page’s own segments, with the quarterly release trend behind it (2023Q4–2026Q1).

SegmentAppsInstallsLeading appRelease trend
Cybersecurity87876.4M1.1.1.1 + WARP: Safer Internet 332.7M
Mobile Utility Tools8351.7MBrave Private Web Browser, VPN 263.6M
Internet Browsers4269.5MBrave Nightly 2.6M
Open Source3268.4MBrave Beta 2.3M
Cryptocurrencies580.7MMetaMask: Trade Crypto 46.5M
Enterprise Collaboration1855.2MVoxer Walkie Talkie Messenger 40M
Non Fungible Tokens246.5MMetaMask - Flask 7.7K
Security & Surveillance Technology74.5MTrackView Viewer 3.9M

A company can carry several segment tags, so these rows overlap and should not be added together. Trend lines are zero-based and share one quarter grid, so a flat line is a quiet segment, not a missing one.

Release cadence by quarter

New apps published, beside apps whose most recent update landed in that quarter — the second bar is how much of the shelf is still being maintained.

2022Q4: 42022Q4: 12022Q42023Q4: 32023Q4: 02023Q42024Q1: 32024Q1: 02024Q12024Q2: 22024Q2: 22024Q22024Q3: 32024Q3: 22024Q32024Q4: 12024Q4: 22024Q42025Q1: 32025Q1: 02025Q12025Q2: 12025Q2: 42025Q22025Q3: 12025Q3: 82025Q32025Q4: 42025Q4: 132025Q42026Q1: 32026Q1: 112026Q1

Darker bars are new releases, lighter bars apps updated. 84 of 88 apps carry a release date. The series ends at 2026Q1, the last quarter that closed before the June 2026 reading.

INSIDE THE INDUSTRY

The San Francisco cybersecurity market map

Explore the segments behind the headline numbers.

Expand panel +

Where companies are building

Rank segments by scale, hiring or disclosed funding.

Enterprise tech580
Enterprise software497
Saas339
Enterprise communication76
Consumer digital74
Fintech68
Remote work tools68
Future of work68
Deep tech59
Devsecops50
Anti fraud management46
Blockchain in cybersecurity44

Companies can sit in several segments. Counts and funding overlap.

SEGMENT TO EXPLORE

Enterprise tech

The largest measured segment in this report snapshot.

580companies
10.2%have hiring activity

59 companies hiring · $13.73B disclosed funding

Explore in Radar

How companies make money

Common revenue models; a company can use more than one.

Subscription644
Fee-for-service22
Commission on transaction19
Advertising14
E-commerce - service11
Sponsorship2
E-commerce - product2
Licensing2
THE COMPANIES IN MOTION

Who is listing, hiring leaders, launching and winning work

Recorded corporate activity linked to companies in this landscape.

Expand panel +
Recent corporate headlines 10 dated reports
Mergers & acquisitionsrevyz.io ↗

Spin.AI has acquired data security software company Revyz.

Mergers & acquisitionsvisotrust.com ↗

Protecht Group ("Protecht"), an Australian-based global leader in governance, risk and compliance (GRC) solutions, announced the acquisition of VISO TRUST, a US-based third-party risk management platform powered by artificial intelligence (AI).

Funding roundseclypsium.com ↗

Eclypsium, the IT infrastructure supply chain security company, today announced it has raised a $25 million strategic financing round led by PEAK6 Strategic Capital, with participation by a top three US bank and Ten Eleven Ventures.

Funding roundsrunsybil.com ↗

RunSybil Raises $40M in Seed Funding to Advance AI Cybersecurity Testing

Mergers & acquisitionspromptfoo.dev ↗

OpenAI announced on March 9th that it will acquire Promptfoo, an AI security platform that helps companies identify and fix vulnerabilities in AI systems during development.

Mergers & acquisitionssqrx.com ↗

Zscaler announced that it has acquired browser security firm SquareX for an undisclosed sum.

Funding roundsquill.chat ↗

Quill Meetings announced $6.5 million in seed funding and the launch of Quilliam, a sovereign Chief of AI Staff agent for modern professionals.

Funding roundsopal.dev ↗

Vancouver fintech startup Opal has raised a $1.5 million seed round as it looks to expand its modern corporate card and spend‑management platform for high‑growth companies.

Mergers & acquisitionsloom.com ↗

Mobile gaming giant Scopely has struck a definitive agreement to acquire a majority stake in Loom, the Istanbul-based development studio behind Pixel Flow!, a mobile puzzle game that launched in late 2025 and has already been played by more than 10 million people globally.

Funding roundstrmlabs.com ↗

TRM Labs has now raised a total of $219.9M in total equity funding and is backed by Alumni Ventures, Bessemer Venture Partners, BH Digital, Blockchain Capital, Citi Ventures, CMT Digital, DRW Venture Capital, Galaxy Digital, Goldman Sachs, Thoma Bravo, and Y Combinator.

Full recorded event mix

Top 10 categories among 465 recorded events in the 24-month window.

Funding rounds
126
Leadership moves
122
Earnings
69
Mergers & acquisitions
40
Company announcements
36
New products
34
Capital infusions
10
Job creation
7
Contracts
7
IPO activity
3
7 activity cards

Swipe or scroll horizontally to browse.

Leadership moves

35 tracked people moves

Hexnode ↗
Carl Carozza

Appointment Vice President of Enterprise Sales, Americas

Fortanix ↗
Sampanna Baidya

Appointment A/NZ regional sales director

Fortanix ↗
Mohamed Khangi

Appointment senior sales engineer

Biba ↗
Lesley Maxwell

Appointment Regional Manager for the North

Okta ↗
Shameek Bose

Appointment Vice President of Global Impact

Biba ↗
Paul Dickson

Resignation Previously Chair of Biba’s Finance Committee

Tyler Allen

Appointment Chief Executive Officer

Wallarm ↗
David Cramer

Appointment Chief Operating Officer

Workforce actions

1 companies with reported reductions

Okta ↗

7.0% rolescost reduction

Regulatory events

3 recorded events

CyberCube ↗

subject to customary regulatory approvals

HashiCorp ↗

review pendingFederal Trade Commission (FTC)

Opal ↗

approved allocation of gas productionGovernment

Litigation

2 tracked suits

Company
HashiCorp investor v hashicorp

conflict of interest in IBM acquisitionCivil · Dismissed

Company
HashiCorp Stockholders v hashicorp

Possible breaches of fiduciary duty and other violations of law in HashiCorp\'s transactioCivil · Ongoing

Earnings pulse

Reported company results in the recorded window.

8companies
74period observations
26.5%median reported growth

Median across 67 reported growth observations; companies may contribute multiple periods.

Mergers and acquisitions

Company-linked deal reports; status is preserved as recorded.

Acquirer → targetStatusDateValue / context
Spin.AIRevyz ↗Announced2026-05-01Not stated in snapshot
Protecht GroupVISO Trust ↗Announced2026-04-21Not stated in snapshot
openaiPromptfoo ↗Completed2026-04-14Not stated in snapshot
servicenowArmis ↗Completed2026-03-29$7.8B
zscalerSquareX ↗Announced2026-03-09Not stated in snapshot
scopelyLoom ↗Announced2026-02-19Not stated in snapshot

A discussion or rumour is not a completed transaction. An unstated value is not zero.

PEOPLE & OPPORTUNITY

The talent market

5,267 postings in the preceding 12 months. The full 6,877-posting snapshot covers 114 employers.

Expand panel +

Most advertised job titles

Entry Level Sales422
Business Account Executive283
Sales Representative240
Field Sales203
Outside Sales Representative181
Territory Sales150
0 internship postings

127 tracked postings mention remote work.

The seniority mix

1,895 postings specify a level.

unspecified
4,982
manager
853
entry
428
senior
419
lead
104
intern
91

Skills employers mention

Top skills across 6,877 tracked postings in the available jobs snapshot.

Typescript
127
React
121
Kubernetes
84
Aws
71
Python
67
Go
56
Gcp
54
Postgres
50
Terraform
48
Next.Js
48
ADVERTISED PAY$41.6K/ year

Median across 760 postings with pay data, expressed in USD.

Salary by seniority

manager$99.0K/ year58 postings
entry$30.4K/ year116 postings

Advertised posting medians do not describe all employees or roles.

THE PEOPLE BUILDING THE FIELD

Founders and leaders

570 founders and chief executives across 341 companies.

Expand panel +
12 profiles

Swipe or scroll horizontally to browse.

Education networks

157 profiles with education records.

Stanford University
40
Harvard University
18
University of California (Berkeley)
18
Massachusetts Institute of Technology
14
Harvard Business School
7
University of Toronto
6
University of Chicago
5
Duke University
5

Prior employers

72 profiles with prior-work records.

Google
19
Microsoft
12
Cisco
10
Apple
8
Amazon
7
Salesforce
5
Facebook
5
McKinsey
4

Profiles cover recorded founders and leaders; contact details remain in Radar.

NEWS INTELLIGENCE

How this industry appears in the news

14,060 articles in the measured 12-month window.

Expand panel +
14,060articles in the measured year
3,260articles in 2026Q1
57.9%positive tone in the latest complete year

News volume trends

Cybersecurity coverage tagged San Francisco · articles per complete quarter

01,5753,1494,7246,2992021Q2: 2,0722021Q22021Q3: 2,5592021Q4: 2,1102022Q1: 2,6272022Q2: 2,3102022Q22022Q3: 2,5412022Q4: 2,8782023Q1: 3,4642023Q2: 5,4772023Q22023Q3: 3,4132023Q4: 3,7642024Q1: 3,8202024Q2: 3,6422024Q22024Q3: 3,2902024Q4: 3,0102025Q1: 3,7062025Q2: 3,1882025Q22025Q3: 4,2132025Q4: 2,8392026Q1: 3,2602026Q1
View quarterly article counts
QuarterArticles
2021Q22,072
2021Q32,559
2021Q42,110
2022Q12,627
2022Q22,310
2022Q32,541
2022Q42,878
2023Q13,464
2023Q25,477
2023Q33,413
2023Q43,764
2024Q13,820
2024Q23,642
2024Q33,290
2024Q43,010
2025Q13,706
2025Q23,188
2025Q34,213
2025Q42,839
2026Q13,260

Article volume measures coverage, not market sales.

Tone of coverage over time

2021
3,979 positive · 38 neutral · 3,854 negative
2022
5,051 positive · 56 neutral · 5,237 negative
2023
8,605 positive · 76 neutral · 7,422 negative
2024
7,053 positive · 36 neutral · 6,661 negative
2025
8,070 positive · 54 neutral · 5,812 negative

Leading coverage topics

Cybersecurity coverage tagged San Francisco · ranked by full-period article count.

Public Safety And Crime Incident Reports91,409 articles in the full recorded period
16,384 recent · 18,102 prior
Criminal Law Reform Initiatives70,275 articles in the full recorded period
16,596 recent · 14,177 prior
Sentencing Guidelines And Judicial Discretion64,083 articles in the full recorded period
15,843 recent · 13,975 prior
Legal Rights Of Crime Victims50,927 articles in the full recorded period
12,452 recent · 10,136 prior
Child Abuse And Neglect50,512 articles in the full recorded period
11,792 recent · 9,991 prior
Sexual Violence And Assault49,976 articles in the full recorded period
13,420 recent · 9,348 prior
Criminal Defense Attorney Roles And Ethics44,086 articles in the full recorded period
11,539 recent · 8,845 prior
Prison Reform And Inmate Rehabilitation43,848 articles in the full recorded period
11,420 recent · 8,615 prior
White Collar Crime Detection And Prosecution42,652 articles in the full recorded period
10,290 recent · 9,278 prior
Wrongful Conviction Cases And Exoneration41,915 articles in the full recorded period
10,975 recent · 9,052 prior

Recent and prior counts use the source comparison windows.

Topics gaining and losing attention

United States comparison coverage

KeywordRecentPriorChange
responsible ai3,3452,34842%
cloud infrastructure1,65094375%
officer misconduct1,58193369%
ai transparency90764042%
green data centers80150858%
immigration court75946663%
stablecoin fx impact751190295%
new gadgets69446450%
decentralized forex672282138%
bail reform67139371%
arrest reports2,6184,305-39%
burglary incidents1,5472,638-41%
pardoned individuals3391,365-75%
robbery alerts7941,302-39%
election official misconduct7581,186-36%

Event and signal lenses

United States comparison coverage

All complete annual cohorts shown
Rising

Regulatory Risk

486,112 classified articles

securities fraud, ai regulation compliance, responsible ai

66.7% critical · 23.8% positive
Rising

Funding Momentum

86,757 classified articles

neural network ventures, ai infrastructure financing, ai chip investments

57.4% critical · 36.9% positive
Rising

Growth

103,475 classified articles

tax evasion prosecutions, securities fraud, ai hardware

51.2% critical · 45.3% positive

Cybersecurity coverage tagged San Francisco. Topic labels describe recorded classifications and can include broad context.

RESEARCH SIGNALS

What Cybersecurity research is working on

3,240 papers in the recorded india scope.

Expand panel +
3,240papers
41,368worldwide comparison pool
3,240India-affiliated papers

Research orientation

Breakthrough
1,292
Promising
1,006
Problem-identifying
429
Descriptive
273
Comparative
115
Cautionary
113
Critical
12

Contribution mix

Methods-led
2,272
Empirical
462
Reviews
296
Position pieces
166
Theoretical
44

Tone counts: 2,691 positive · 105 neutral · 444 negative.

Common problems researchers identify
441 papers · 13.6% of this field
  • Computer security217 papers
  • Network security101 papers
  • Intrusion detection system43 papers
  • Exploit31 papers
  • Malware29 papers
  • Firewall29 papers
  • Computer network27 papers
  • Vulnerability26 papers

Landmark: A Deep Learning Approach for Network Intrusion Detection System

Cautions
113 papers · 3.5% of this field
  • Computer security35 papers
  • Intrusion detection system19 papers
  • Network security19 papers
  • Adversarial system14 papers
  • Malware11 papers
  • Computer network11 papers
  • Exploit11 papers
  • Denial-of-service attack10 papers

Landmark: Beehive

Opportunities
2,298 papers · 70.9% of this field
  • Intrusion detection system700 papers
  • Computer security520 papers
  • Network security453 papers
  • Anomaly detection215 papers
  • Scalability193 papers
  • Denial-of-service attack193 papers
  • Computer network178 papers
  • Network packet176 papers

Landmark: BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection

Leading institutions

Georgia Institute of Technology
2,489
University of Illinois Urbana-Champaign
2,012
University of Toledo
1,415
Texas A&M University
1,378
Princeton University
1,284
Arizona State University
1,158

Leading researchers

Guofei Gu
2,223
Roberto Perdisci
1,533
Quamar Niyaz
1,458
Weiqing Sun
1,439
Wenke Lee
1,421
Ahmad Y. Javaid
1,413
Nick Feamster
1,346
Mansoor Alam
1,238

Highly cited breakthrough-labelled papers

  • BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection1,021 citations
  • ZMap: fast internet-wide scanning and its security applications582 citations
  • FRESCO: Modular Composable Security Services for Software-Defined Networks488 citations
  • Building a dynamic reputation system for DNS366 citations
  • Network Intrusion Detection System using Deep Learning320 citations

Common problems researchers identify

396 papers · 7 recurring themes
7 cards

Swipe or scroll horizontally to browse.

Network Security ThreatsCommon problems researchers identify · 01

Network Security Threats

132 papers

33.3% of this theme group

Researchers highlight persistent vulnerabilities and the need for comprehensive monitoring solutions in network infrastructures.

Computer security (97) · Network security (54) · Network Access Control (17) · Network security policy (13)

ANALYSIS OF NETWORK SECURITY THREATS AND VULNERABILITIES BY DEVELOPMENT & IMPLEMENTATION OF A SECURITY NETWORK MONITORING SOLUTION

Strategies for Computer Networks Security

View research history
YearShare index
20227455.7
20237484.3
20247274.0
20254335.6
Exploits and DoS RisksCommon problems researchers identify · 02

Exploits and DoS Risks

103 papers

26.0% of this theme group

Studies focus on modeling and analyzing exploit mechanisms and denial‑of‑service weaknesses across hosts.

Computer security (61) · Exploit (18) · Denial-of-service attack (14) · Vulnerability (15)

A Stochastic Model for Quantitative Security Analyses of Networked Systems

An Improved Model for Analysis of Host Network Vulnerability

View research history
YearShare index
20227454.1
20237463.6
20247234.8
20254334.0
Scalable Traffic VisualizationCommon problems researchers identify · 03

Scalable Traffic Visualization

47 papers

11.9% of this theme group

Works address challenges of visualizing large‑scale traffic and edge‑device data for security insight.

Visualization (4) · Scalability (5) · Traffic analysis (3) · Edge device (3)

Fast monitoring of traffic subpopulations

Connectivity, Traffic Flow and Applied Statistics in Cyber Security

View research history
YearShare index
2022213.4
2023237.8
2024152.5
2025361.7
Intrusion Detection ChallengesCommon problems researchers identify · 04

Intrusion Detection Challenges

37 papers

9.3% of this theme group

Papers examine detection and prevention techniques, emphasizing anomaly identification in network traffic.

Intrusion detection system (35) · Anomaly detection (9) · Intrusion prevention system (6) · Network security (14)

A Deep Learning Approach for Network Intrusion Detection System

A Comprehensive Systematic Literature Review on Intrusion Detection Systems

View research history
YearShare index
2022245.7
2023273.0
2024288.9
2025499.6
Firewall Configuration IssuesCommon problems researchers identify · 05

Firewall Configuration Issues

27 papers

6.8% of this theme group

Research points to complexities in firewall policies, application‑level controls, and context‑aware access.

Firewall (24) · Application firewall (15) · Stateful firewall (5) · Context-based access control (5)

Web Application Firewall: Network Security Models and Configuration

Firewall fingerprinting

View research history
YearShare index
202210.0
20239.7
20247.4
202510.5
Virtual Network Security GapsCommon problems researchers identify · 06

Virtual Network Security Gaps

26 papers

6.6% of this theme group

Analyses reveal weaknesses in network function virtualization and virtualized infrastructure protection.

Virtualization (8) · Network security (14) · Virtual network (3) · Network Functions Virtualization (3)

A survey on security in network functions virtualization

A Survey of Network Function Virtualization Security

View research history
YearShare index
2022237.8
2023251.8
2024231.4
2025292.5
SDN Control‑Plane VulnerabilitiesCommon problems researchers identify · 07

SDN Control‑Plane Vulnerabilities

24 papers

6.1% of this theme group

Studies discuss security concerns in software‑defined networking routing and forwarding planes.

Software-defined networking (19) · Routing control plane (3) · Forwarding plane (3) · Software (5)

A Survey of Security in Software Defined Networks

Software-defined networking security: pros and cons

View research history
YearShare index
202231.0
202332.6
202419.0
202518.5

Cautions

102 papers · 4 recurring themes
4 cards

Swipe or scroll horizontally to browse.

DoS and Firewall InteractionsCautions · 01

DoS and Firewall Interactions

35 papers

34.3% of this theme group

Authors caution about unintended effects when combining firewalls with intrusion detection under denial‑of‑service conditions.

Denial-of-service attack (10) · Computer security (20) · Firewall (5) · Network security (11)

Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems

An evaluation of connection characteristics for separating network attacks

View research history
YearShare index
20227438.9
20237448.8
20247215.4
20254223.6
Adversarial Machine‑Learning ThreatsCautions · 02

Adversarial Machine‑Learning Threats

24 papers

23.5% of this theme group

Works warn that adversarial examples can undermine deep‑learning based intrusion detection, especially in wireless contexts.

Adversarial system (11) · Intrusion detection system (11) · Adversarial machine learning (4) · Wireless (3)

Adversarial Examples Against the Deep Learning Based Network Intrusion Detection Systems

Rallying Adversarial Techniques against Deep Learning for Network Security

View research history
YearShare index
2022314.4
2023340.8
2024330.8
2025556.3
Secure Network Slicing ConcernsCautions · 03

Secure Network Slicing Concerns

22 papers

21.6% of this theme group

Research highlights risks in 5G slicing and negative acknowledgment mechanisms for overall network security.

Network security (9) · Computer security (10) · Computer network (6) · Population (2)

Towards Secure and Intelligent Network Slicing for 5G Networks

To NACK or Not to NACK? Negative Acknowledgments in Information-Centric Networking

View research history
YearShare index
20227588.3
20237612.5
20247375.0
20254391.4
Deployment‑Related VulnerabilitiesCautions · 04

Deployment‑Related Vulnerabilities

21 papers

20.6% of this theme group

Papers flag botnet propagation, protocol flaws, and validation challenges in new security software deployments.

Software deployment (4) · Vulnerability (4) · Botnet (4) · Protocol (3)

Abnormally Malicious Autonomous Systems and Their Internet Connectivity

Validating a custom IPv6 security application using OPNET modeler

View research history
YearShare index
2022321.1
2023310.9
2024224.6
2025331.5

Opportunities

2,120 papers · 7 recurring themes
7 cards

Swipe or scroll horizontally to browse.

IoT Intrusion Detection AdvancesOpportunities · 01

IoT Intrusion Detection Advances

488 papers

23.0% of this theme group

Opportunities focus on deep‑learning models to detect intrusions across heterogeneous Internet‑of‑Things environments.

Intrusion detection system (473) · Intrusion (33) · Internet of Things (49) · Network security (124)

Network Intrusion Detection System using Deep Learning

Enhancing IoT network security through deep learning-powered Intrusion Detection System

View research history
YearShare index
2022944.4
2023949.5
20241009.3
2025954.0
Attack‑Graph Risk ModelingOpportunities · 02

Attack‑Graph Risk Modeling

416 papers

19.6% of this theme group

Studies explore Bayesian and graph‑based frameworks to quantify and predict network attack pathways.

Malware (76) · Exploit (65) · Game theory (32) · Graph (29)

Measuring Network Security Using Bayesian Network-Based Attack Graphs

Measuring Security Risk of Networks Using Attack Graphs

View research history
YearShare index
2022459.3
2023444.0
2024308.2
2025415.4
Policy‑Driven Security EvaluationOpportunities · 03

Policy‑Driven Security Evaluation

383 papers

18.1% of this theme group

Research proposes neural‑network methods to assess and enforce comprehensive network security policies.

Computer security (220) · Network security (211) · Computer network (91) · Network security policy (23)

Network Security

Computer network security evaluation model based on neural network

View research history
YearShare index
20227588.3
20237612.5
20247375.0
20254391.4
Scalable Cloud and Blockchain SecurityOpportunities · 04

Scalable Cloud and Blockchain Security

373 papers

17.6% of this theme group

Works investigate zero‑trust and blockchain architectures for protecting cloud, edge, and IoT deployments.

Scalability (59) · Cloud computing (41) · Software deployment (36) · Blockchain (21)

Zero Trust Architecture Empowered Attack Detection Framework to Secure 6G Edge Computing

A Security Architecture for Networked Internet of Things Devices

View research history
YearShare index
2022848.4
2023825.9
2024569.6
2025850.4
Anomaly Detection for IoT TrafficOpportunities · 05

Anomaly Detection for IoT Traffic

195 papers

9.2% of this theme group

Papers develop clustering and deep‑learning techniques to identify abnormal patterns in IoT data streams.

Anomaly detection (159) · Intrusion detection system (109) · Anomaly-based intrusion detection system (36) · Anomaly (19)

Efficient Approach for Anomaly Detection in Internet of Things Traffic Using Deep Learning

Anomaly Detection by Clustering in the Network

View research history
YearShare index
2022245.6
2023272.9
2024288.7
2025499.6
Application‑Layer DDoS MitigationOpportunities · 06

Application‑Layer DDoS Mitigation

164 papers

7.7% of this theme group

Research targets novel detection and defense mechanisms against low‑traffic, application‑layer denial‑of‑service attacks.

Denial-of-service attack (150) · Application layer DDoS attack (18) · Computer security (61) · Flooding (13)

A detection method for a novel DDoS attack against SDN controllers by vast new low-traffic flows

A Defense System for Defeating DDoS Attacks in SDN based Networks

View research history
YearShare index
20227438.7
20237448.4
20247214.7
20254221.8
Next‑Generation Firewall DesignsOpportunities · 07

Next‑Generation Firewall Designs

101 papers

4.8% of this theme group

Studies present diverse, distributed firewall architectures with enhanced verification and context‑aware access controls.

Firewall (74) · Application firewall (44) · Stateful firewall (28) · Context-based access control (18)

Diverse Firewall Design

Verification of Distributed Firewalls

View research history
YearShare index
202210.0
20239.7
20247.4
202510.5

How this field compares with the research baseline

Orientation shares compared with 25,000 papers in the reference sample.

Research orientationThis fieldReference sample
Breakthrough39.9%26.5%
Promising31.0%37.1%
Problem-identifying13.2%9.6%
Descriptive8.4%17.4%
Comparative3.5%3.9%
Cautionary3.5%4.6%
Critical0.4%0.9%

Concerns receiving less research attention

Counts and shares refer to the stated research pool. A low count describes how much of that research is recorded here, not the absence of a real-world concern.

Concern / example paperPapersShareRaised as a problemWorldwide share
Privacy & surveillanceFolk models of home computer security1194.02%53 (44.5%)3.39%
Safety & misuseAdversarial Examples Against the Deep Learning Based Network Intrusion Detection Systems321.08%8 (25.0%)1.0%
Energy & datacenter footprint00.0%0 (%)0.03%
Water use00.0%0 (%)0.0%
Carbon & emissions of compute00.0%0 (%)0.0%
Hardware, e-waste & supply chain00.0%0 (%)0.0%
Labour & data work00.0%0 (%)0.0%
Bias & fairness00.0%0 (%)0.01%
Concentration of compute power00.0%0 (%)0.02%

Institution and researcher rankings use citations to their covered work. Research scope: United States. This may be broader than the company geography.

INNOVATION SIGNALS

Who files Cybersecurity patents in San Francisco

Published patent filings in the recorded source window.

Expand panel +
220filings 2016–2025
4assignees
34peak annual filings

Filing momentum

0102029392016: 3420162017: 342018: 3220182019: 312020: 3220202021: 192022: 820222023: 82024: 820242025: 142025

Who files the most

Square
232
Gitlab
17
Samsara
9
Affirm
7
DEMAND, SUPPLY & PLACE

Where demand signals run ahead of mapped supply — San Francisco

Compare demand signals in San Francisco’s newsflow with the cybersecurity categories mapped to each signal.

Expand panel +
HOW TO READ THE GAP

Signal percentile − supply percentile = gap in percentile points. Positive gaps highlight questions to investigate. A high signal can reflect spending pressure or access friction, as well as potential demand.

The comparison is relative to the signal families on this page. A supply percentile of zero means the lowest relative reading, not zero companies. It is a prioritisation clue, not measured market size or unmet demand.

COMPARISON PERIOD2025-05-01 to 2026-05-01Against 2024-05-01 to 2025-05-01Explore the signals ↓

The opportunity, in one view

Signal and mapped-supply percentiles, their gap, and change in the signal’s article share.

Swipe horizontally to compare all columns →

4 San Francisco demand signals compared with mapped cybersecurity supply
Signal familySignal percentileSupply percentileRelative gapGap (points)Signal share vs prior year
Security incidents & breaches ↗Risk Pressure50.00.0+50.0+120.2%
Tech workforce shifts ↗Spending Pressure50.033.3+16.7+68.7%
Cloud & platform build-out ↗Infrastructure Shift83.366.7+16.6+239.4%
Open-source momentum ↗Ecosystem Signal16.7100.0-83.3+82.4%

Showing all 4 signals. Select a family for its history and mapped categories.

Where the signals are loudest

All 12 city readings for these demand families in the comparison geography. San Francisco is highlighted.

Mentions per 10,000 articles

Each city’s reading is a share of its own coverage. Rows cover all of the United States for this page's signal families; San Francisco is marked.

Seattle127.4

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

San Francisco86.7

Tech workforce shifts · Cloud & platform build-out · Security incidents & breaches

Minneapolis74.9

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Newark61.3

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Portland59.5

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

St. Louis54.2

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Austin46.1

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Detroit43.9

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

San Diego43.7

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Orlando40.9

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Atlanta40.1

Tech workforce shifts · Security incidents & breaches · Cloud & platform build-out

Las Vegas30.5

Cloud & platform build-out · Tech workforce shifts · Security incidents & breaches

Inside the leading signals

Open any signal for its quarterly history
RISK PRESSURESecurity incidents & breaches+50.0percentile-point gap
THE OPERATING HYPOTHESIS

Breach pressure can push security into every buying decision.

13.83mentions per 10,000 articles+120.2%share change vs prior year

Mapped cybersecurity categories

  • Anti Fraud Management46
  • Blockchain In Cybersecurity44

Companies can appear in multiple categories; these counts are not a unique-company total.

Quarterly share of San Francisco coverage

Mentions per 10,000 articles · zero baseline

071421282024Q3: 52024Q32024Q4: 62024Q42025Q1: 22025Q12025Q2: 242025Q22025Q3: 162025Q32025Q4: 52025Q42026Q1: 122026Q1
View quarterly signal counts
Security incidents & breaches in San Francisco coverage
QuarterMentionsPer 10,000 articles
2024Q3105.3
2024Q4116.43
2025Q172.8
2025Q23224.64
2025Q32016.94
2025Q455.58
2026Q12112.68

Where this signal concentrates in the comparison geography

Newark25.4 / 10,000
Portland22.1 / 10,000
Seattle15.4 / 10,000
SPENDING PRESSURETech workforce shifts+16.7percentile-point gap
THE OPERATING HYPOTHESIS

Hiring, visa and layoff cycles can resize teams — per-seat budgets tend to follow.

36.88mentions per 10,000 articles+68.7%share change vs prior year

Mapped cybersecurity categories

  • Enterprise Communication76
  • Remote Work Tools68
  • Future Of Work68

Companies can appear in multiple categories; these counts are not a unique-company total.

Quarterly share of San Francisco coverage

Mentions per 10,000 articles · zero baseline

0193756742024Q3: 132024Q32024Q4: 382024Q42025Q1: 192025Q12025Q2: 152025Q22025Q3: 642025Q32025Q4: 592025Q42026Q1: 212026Q1
View quarterly signal counts
Tech workforce shifts in San Francisco coverage
QuarterMentionsPer 10,000 articles
2024Q32513.26
2024Q46638.61
2025Q14819.21
2025Q22015.4
2025Q37664.36
2025Q45359.12
2026Q13521.14

Where this signal concentrates in the comparison geography

Seattle91.8 / 10,000
Minneapolis68.4 / 10,000
St. Louis50.7 / 10,000
INFRASTRUCTURE SHIFTCloud & platform build-out+16.6percentile-point gap
THE OPERATING HYPOTHESIS

Cloud and platform build-out can multiply the pipelines and environments a team must manage.

21.32mentions per 10,000 articles+239.4%share change vs prior year

Mapped cybersecurity categories

  • Saas339

Companies can appear in multiple categories; these counts are not a unique-company total.

Quarterly share of San Francisco coverage

Mentions per 10,000 articles · zero baseline

0132538512024Q3: 72024Q32024Q4: 62024Q42025Q1: 52025Q12025Q2: 72025Q22025Q3: 442025Q32025Q4: 242025Q42026Q1: 102026Q1
View quarterly signal counts
Cloud & platform build-out in San Francisco coverage
QuarterMentionsPer 10,000 articles
2024Q3147.43
2024Q4116.43
2025Q1135.2
2025Q2107.7
2025Q35244.03
2025Q42224.54
2026Q11710.27

Where this signal concentrates in the comparison geography

San Francisco23.2 / 10,000
Las Vegas13.6 / 10,000
Seattle13.0 / 10,000
ECOSYSTEM SIGNALOpen-source momentum-83.3percentile-point gap
THE OPERATING HYPOTHESIS

Open-source momentum can seed the commercial layer around the projects teams adopt.

13.06mentions per 10,000 articles+82.4%share change vs prior year

Mapped cybersecurity categories

  • Enterprise Software497
  • Deep Tech59

Companies can appear in multiple categories; these counts are not a unique-company total.

Quarterly share of San Francisco coverage

Mentions per 10,000 articles · zero baseline

071421282024Q3: 72024Q32024Q4: 122024Q42025Q1: 32025Q12025Q2: 202025Q22025Q3: 242025Q32025Q4: 32025Q42026Q1: 62026Q1
View quarterly signal counts
Open-source momentum in San Francisco coverage
QuarterMentionsPer 10,000 articles
2024Q3147.43
2024Q42112.28
2025Q193.6
2025Q22620.02
2025Q32924.56
2025Q433.35
2026Q1106.04

Where this signal concentrates in the comparison geography

San Francisco11.5 / 10,000
Seattle7.1 / 10,000
Boston6.4 / 10,000
RESEARCH & CHANGING CONVERSATIONS

Related research and changing coverage

San Francisco cybersecurity coverage

Expand panel +
RESEARCH CONTEXT · 2021

Exploring the Profiles of Software Testing Jobs in the United States

IEEE Access

23 citations in the snapshot

RESEARCH CONTEXT · 2021

AI and DevOps in Information Technology and Its Future in the United States

SSRN Electronic Journal

14 citations in the snapshot

RESEARCH CONTEXT · 2024

The Integration of AI and Devops in the Field of Information Technology and Its Prospective Evolution in the United States

International Journal for Research in Applied Science and Engineering Technology

7 citations in the snapshot

RESEARCH CONTEXT · 2021

Global and Latin American female participation in evidence-based software engineering: a systematic mapping study

Journal of the Brazilian Computer Society

6 citations in the snapshot

What is growing in this coverage

San Francisco coverage of this page's demand families

KeywordRecent articlesPrior articlesShare change
cloud infrastructure3311358.7%
threat feed integration218301.4%
vulnerability intelligence198263.1%
ai hardware2920121.7%

Share changes describe coverage in the stated comparison periods, not search demand or market size.

UNDERSTAND THE LANDSCAPE

Cybersecurity in San Francisco: key questions

Clear definitions for making better comparisons.

What does this landscape measure?

It measures the tracked company ecosystem, recorded funding, hiring and other available evidence. It is not a market-size estimate.

Can segment counts be added together?

No. A company can belong to several segments, so segment counts and funding can overlap.

What does a missing figure mean?

A dash or unavailable panel means the current reviewed source snapshot does not support that figure.

Company ecosystem snapshot: 5 August 2026. Funding is recorded in USD; filed accounts retain their stated currency and reporting basis. Each section identifies its own coverage. The news and research behind these sections is explorable in Prism.

Canonical landscape ↗
Coming soon