What are the top cybersecurity startups by revenue today?

The ranking of top startups in the cybersecurity market by revenue

Below is a table ranking all the companies in this market by their current revenue scale. You can find our methodology at the end of this page.

If you want a deeper understanding of the market and its current dynamics, get our report covering the Cybersecurity Market.

Which cybersecurity startups make the most revenue today?

Tanium still leads the broad private-company ranking at more than $700 million ARR, while Cato Networks is currently the biggest of the newer cybersecurity startups with more than $415 million ARR.

The definition of “startup” changes the top of this list. Tanium was founded in 2007 and Arctic Wolf is already a large, mature private security company. Include businesses of that age and Tanium sits first, with Arctic Wolf also around the $600 million level based on public evidence from former senior employees.

Among the younger independent companies, Cato is ahead. It has passed $415 million ARR, followed by 1Password at more than $400 million. Snyk, Vanta, Saviynt and ReliaQuest have all crossed $300 million. Huntress is above $250 million, Keeper Security has reached $225 million, and Axonius, Keyfactor and Abnormal AI are above $200 million.

Two famous names have disappeared from the independent ranking. Google has completed its acquisition of Wiz, while ServiceNow has completed its acquisition of Armis. Their standalone revenue history is still useful for understanding the market, but they are no longer independent cybersecurity startups.

Company	Latest useful commercial figure	Metric	Status
Tanium	>$700M	ARR	Private
Arctic Wolf	~$600M	Revenue/ARR scale reported by former executives	Private
Cato Networks	>$415M	ARR	Private
1Password	>$400M	ARR	Private
Snyk	>$300M	ARR	Private
Vanta	>$300M	ARR	Private
Saviynt	>$300M	ARR	Private
ReliaQuest	>$300M	ARR	Private
Huntress	>$250M	ARR	Private
Keeper Security	$225M	ARR	Private
Axonius	>$200M	ARR	Private
Keyfactor	>$200M	ARR	Private
Abnormal AI	>$200M	ARR	Private
Cyera	>$150M	ARR	Private
Pentera	>$100M	ARR	Private

Who leads if we include older private cybersecurity companies like Tanium and Arctic Wolf?

Tanium is the clearest leader, while Arctic Wolf also appears substantially larger than most of the younger cybersecurity unicorns.

Tanium's own corporate material puts annual recurring revenue above $700 million, alongside a roughly $9 billion valuation and around 1,900 employees. At that size, calling Tanium a startup sounds increasingly strange, even though it remains an independent private technology company. Whether a company as large as Tanium still counts as a startup is the kind of line we draw in our report on cybersecurity.

Arctic Wolf is harder to pin down because the company has not published an equally clean current ARR milestone. Former senior employees have publicly described the business as reaching roughly $600 million in scale. We therefore keep Arctic Wolf near the top, but with lower confidence than Tanium or Cato.

If “startup” means any large independent venture-backed cybersecurity company, Tanium leads. If we mean the newer generation that has scaled during the last decade, Cato is currently the cleaner answer.

Is Cato Networks the biggest newer cybersecurity startup right now?

Cato Networks is currently the strongest revenue leader among the newer independent cybersecurity companies, with more than $415 million ARR.

Cato had already crossed $350 million ARR before reporting a new milestone above $415 million with 42% year-over-year growth. It added at least $65 million of recurring revenue in a relatively short period while already operating at substantial scale.

The company now serves more than 4,000 enterprise customers. Its SASE platform combines networking and cybersecurity functions that companies previously bought across VPNs, firewalls, secure web gateways and other products, giving Cato access to unusually large enterprise contracts.

The $415 million disclosure also moves Cato beyond the crowded $300 million group. 1Password remains close above $400 million, but Cato has the fresher public number and is still reporting growth above 40%.

Is 1Password still mostly a password-manager business?

1Password has become a $400 million-plus ARR identity-security company, with enterprise customers now driving most of the business.

The password manager remains the product many people associate with 1Password, but the company has pushed deeper into business identity security, device access, secrets management and the growing problem of machine and AI identities.

1Password announced that ARR had surpassed $400 million while the company remained free-cash-flow positive. It also said more than three-quarters of revenue came from business customers and that the platform served roughly 180,000 organizations.

The company had disclosed $250 million ARR in 2023, so it added at least $150 million between those milestones.

Cato has since edged ahead on the latest public figures, but 1Password remains one of the very few independent cybersecurity companies above $400 million ARR.

How much revenue does Snyk make today?

Snyk has surpassed $300 million ARR, putting the developer-security company firmly in cybersecurity's top private-company tier.

Snyk says it now serves more than 4,500 customers, including roughly one-third of the Fortune 500. Snyk Code alone contributes about $100 million ARR, showing how much the business has expanded beyond its original open-source vulnerability product.

The company now covers code, dependencies, containers, cloud infrastructure, APIs and AI-generated software. AI coding tools are creating much more code without giving security teams a proportional increase in headcount, which gives products like Snyk a wider job to do.

Snyk received enormous attention during the high-valuation SaaS years, so its valuation history can distract from the operating business. Today the simpler fact is that it has built more than $300 million of recurring revenue.

Has Vanta become a major cybersecurity company?

Vanta has become a major private cybersecurity business, crossing $300 million ARR after adding roughly $100 million in only nine months.

Its growth curve has accelerated as the company has become larger. Vanta says it took two years to move from $10 million to $100 million ARR, another 15 months to reach $200 million, then only nine months to pass $300 million.

The company also serves more than 16,000 customers. Vanta originally grew by automating compliance work such as SOC 2 evidence collection, but the product now stretches into continuous controls monitoring, vendor risk, security questionnaires and broader trust management. Which compliance chores buyers would pay to automate away is part of the customer picture we build in our market report about cybersecurity.

AI is expanding that workload too. Companies increasingly have to track fast-changing software, vendors and AI tools instead of preparing evidence once a year for an audit.

Calling Vanta a compliance automation startup now understates the size of the business.

Is Saviynt really as big as Vanta and Snyk now?

Saviynt has joined the $300 million-plus ARR group, putting the identity-security company in roughly the same revenue band as Vanta and Snyk.

Saviynt recently disclosed more than $300 million ARR, more than 80% growth in new customer acquisitions and a 96% customer-retention rate. Those figures came as the company expanded its platform around AI agents and other non-human identities.

Identity security now goes well beyond employee login. Companies have service accounts, applications, workloads, API credentials and AI agents that may all need controlled access to sensitive systems.

That gives Saviynt room to sell beyond traditional identity governance. Its products increasingly combine identity governance, privileged access and controls for machines and autonomous software.

There is not enough precision in three separate “more than $300 million” disclosures to rank Saviynt, Snyk and Vanta exactly. They belong in the same broad revenue tier.

Is ReliaQuest really as large as the big cybersecurity software startups?

ReliaQuest has passed $300 million ARR and is profitable, giving it comparable top-line scale to several of the biggest private cybersecurity software companies.

The comparison needs some care because ReliaQuest combines software with managed security operations. Its GreyMatter platform brings together data and workflows from customers' existing security tools, while the company also provides operational expertise around detection and response.

ReliaQuest says ARR has grown more than fourfold since its earlier KKR investment, recently surpassing $300 million. The company was still growing above 30% annually when it disclosed that figure and said it was operating profitably.

The revenue economics differ from a pure SaaS vendor such as Vanta. For a ranking based on commercial scale, though, ReliaQuest clearly belongs in the $300 million group.

How big is Huntress now?

Huntress has surpassed $250 million ARR while still growing 65% year over year.

The company now protects more than 270,000 businesses, 15 million identities and 5.5 million endpoints across more than 100 countries. Those numbers are unusually large for a private cybersecurity vendor built heavily around small and midsized businesses.

Huntress gets much of that reach through managed service providers. Instead of requiring every smaller business to build its own sophisticated security team, Huntress combines software with a managed security operation that can serve many customers at once.

The latest milestone puts Huntress clearly above most of the younger cybersecurity unicorn population on current revenue. It is also getting close enough to the $300 million tier that the next disclosure could reshuffle the middle of this ranking.

How large has Keeper Security become?

Keeper Security has reached $225 million ARR, putting it among the largest independent identity-security companies.

Keeper says ARR has more than tripled since 2021 and that more than 95,000 organizations now use its products. The company has expanded well beyond consumer password storage into privileged access, secrets management and access controls for machines and AI agents.

Enterprise identity contracts can become much larger than individual password-manager subscriptions, especially as companies try to control credentials spread across cloud systems and automated workloads. Enterprise identity contracts outgrowing individual password-manager subscriptions is the kind of business-model difference we compare in our report covering the cybersecurity market.

Keeper now sits below the $300 million identity companies but above most private vendors still trying to establish a $100 million-plus business.

Has Axonius really become a $200 million cybersecurity company?

Axonius has passed $200 million ARR after doubling its recurring revenue in two years.

The company created a business around a deceptively basic problem: large organizations often do not know exactly which devices, cloud resources, software, identities and other assets they have. Security teams cannot manage exposures reliably if the underlying inventory is incomplete.

Axonius says it now approaches 1,000 customers, including more than 100 Fortune 1000 companies and more than 90 U.S. federal agencies. The company also expects to become free-cash-flow positive in the near term.

Crossing $200 million ARR shows that asset intelligence has become a real cybersecurity category rather than a small supporting feature attached to larger security platforms.

Which cybersecurity startups are climbing the revenue ranking fastest?

Cato, Vanta, Huntress, Axonius and Keyfactor stand out because they are adding large amounts of recurring revenue after already reaching meaningful scale.

Cato moved from above $350 million ARR to above $415 million. Vanta added roughly $100 million in nine months. Huntress reached $250 million while growing 65%. Axonius doubled from $100 million to $200 million ARR in two years.

Keyfactor has followed a similar path. The machine-identity company says it took roughly five years to go from below $10 million to more than $100 million ARR, then only two additional years to double again beyond $200 million.

These absolute gains are more useful than percentage growth alone. Doubling a $10 million business is impressive; adding another $100 million once a company is already large tells us more about the depth of customer demand.

Company	Earlier disclosed milestone	Latest disclosed milestone	Change
Cato Networks	>$350M ARR	>$415M ARR	At least +$65M
Vanta	$200M ARR	>$300M ARR	>$100M in nine months
1Password	$250M ARR	>$400M ARR	At least +$150M
Huntress	Lower prior base	>$250M ARR	65% YoY growth at latest milestone
Axonius	>$100M ARR	>$200M ARR	Doubled in two years
Keyfactor	>$100M ARR	>$200M ARR	Doubled in roughly two years
Saviynt	Lower prior base	>$300M ARR	New customers +80%

Is Cyera already catching the $200 million cybersecurity startups?

Cyera has become one of the fastest-growing challengers, with ARR already above $150 million according to recent reporting.

TechCrunch reported the figure while covering Cyera's latest financing and said the company remained far from profitable as it invested aggressively in sales. The context is useful because Cyera's valuation has grown even faster than its revenue.

The underlying business is data security. As companies spread sensitive information across cloud platforms, SaaS applications and AI systems, they need to know where the data sits, who can reach it and how exposed it is.

Cyera has also been expanding through acquisitions, including a planned deal for non-human identity specialist Oasis Security. That pushes the company toward a wider data-and-identity platform rather than a single security product.

At more than $150 million ARR, Cyera has already moved beyond the early-stage category. It still has some distance to cover before joining Axonius, Keeper or Huntress.

What happened to Wiz and Armis in the cybersecurity startup ranking?

Wiz and Armis have both left the independent-startup ranking because their acquisitions are now complete.

Google completed its acquisition of Wiz and brought the company into Google Cloud while keeping the Wiz brand. Wiz had already become one of cybersecurity's fastest-growing businesses before the deal, so an older ranking would place it near the top.

ServiceNow has also completed its acquisition of Armis. Before that transaction, Armis had passed $300 million ARR after moving from $200 million in less than a year.

These exits change the ranking more than another funding round or small revenue update would. Two businesses that had reached the $300 million-plus range are now part of much larger public companies.

They also show something unusual about cybersecurity: a private company can reach several hundred million dollars of recurring revenue and still be acquired before going public. Private companies reaching hundreds of millions in revenue and still being bought before going public is a signal we watch every quarter in our cybersecurity market report.

Which cybersecurity category has produced the most large private companies?

Identity security currently has the deepest bench of large independent companies, although network security has the biggest younger individual company in Cato.

1Password exceeds $400 million ARR. Saviynt exceeds $300 million. Keeper has reached $225 million, while Keyfactor has crossed $200 million. Identity-related businesses therefore occupy several positions near the top of the private-company ranking.

The category is expanding because companies increasingly need to secure identities that are not employees. Machine accounts, workloads, service identities, API credentials and AI agents can all access corporate systems.

Other categories still produce very large companies. Cato has passed $415 million in SASE and network security, Snyk exceeds $300 million in developer security, Vanta exceeds $300 million in trust and compliance, ReliaQuest exceeds $300 million in security operations, and Huntress exceeds $250 million in managed security.

Category	Example company	Latest disclosed scale
SASE / network security	Cato Networks	>$415M ARR
Identity security	1Password	>$400M ARR
Developer security	Snyk	>$300M ARR
Trust / compliance	Vanta	>$300M ARR
Identity governance	Saviynt	>$300M ARR
Security operations	ReliaQuest	>$300M ARR
Managed security	Huntress	>$250M ARR
Password / privileged access	Keeper Security	$225M ARR
Asset intelligence	Axonius	>$200M ARR
Machine identity	Keyfactor	>$200M ARR
Data security	Cyera	>$150M ARR

Are the biggest cybersecurity startups profitable yet?

A few large cybersecurity startups are already profitable or cash-flow positive, while some of the fastest growers are still spending heavily.

1Password says it is free-cash-flow positive at more than $400 million ARR. ReliaQuest said it was profitable while growing above 30%. Axonius is approaching positive free cash flow after passing $200 million ARR. Tanium has also operated with positive cash generation during parts of its development.

Cyera sits at the other end. TechCrunch reported that the company remained far from profitable despite ARR above $150 million because it was spending heavily to expand.

Funding totals can therefore be misleading. A startup that raises hundreds of millions of dollars may still have less revenue than a quieter company that grew with tighter spending.

For this ranking, funding is context rather than evidence of commercial scale.

Does ARR make cybersecurity startups look bigger than they really are?

ARR is useful for comparing private cybersecurity companies, but it should never be read as if it were audited annual revenue.

Annual recurring revenue measures the annualized value of recurring contracts at a point in time. A fast-growing company can end a year with $300 million ARR even though it recognized less than $300 million of accounting revenue during the year.

Business models also differ. ReliaQuest and Huntress include substantial managed-service components. Cato combines networking with security. Vanta sells compliance and trust software. 1Password has both business and consumer customers.

So we keep ARR labeled as ARR throughout the ranking. It gives a useful picture of commercial scale without pretending every recurring-revenue dollar has identical economics.

Are AI-native cybersecurity startups already catching the revenue leaders?

The newest AI-native cybersecurity startups are growing quickly, but most still sit well below the $200 million-plus leaders in actual revenue scale.

AI has made it possible for very young security companies to raise large rounds and win enterprise customers unusually fast. The gap between valuation and revenue can become enormous during the first few years. A wide gap between valuation and revenue is the kind of risk we rate by likelihood, less obvious ones included, in our report on cybersecurity.

Cyera is one of the strongest examples of a younger company already bridging that gap, with more than $150 million ARR. Abnormal AI reached more than $200 million ARR earlier in its development and remains another example of AI being used to build a sizeable security business.

Many newer companies focused on autonomous SOC agents, offensive security and AI-specific protection remain much smaller commercially even when their funding rounds receive comparable attention.

For now, the revenue ranking is still dominated by companies that have spent years building distribution, customer relationships and large recurring contract bases.

Why are so many cybersecurity startups getting past $200 million ARR?

Cybersecurity now contains enough large spending categories to support several $200 million-plus private companies at the same time.

Enterprise security budgets are spread across identity, cloud security, networking, application security, data security, managed detection, security operations, exposure management and compliance. A startup does not have to dominate the whole cybersecurity market to build a very large business.

AI is adding work to several of those categories. AI-generated code creates new application-security problems. AI agents create identity problems. Companies adopting AI tools create data, governance and compliance problems.

The scale of the current cohort makes the change obvious. Even after removing acquired companies such as Wiz and Armis, we can identify more than ten independent private cybersecurity vendors with credible evidence around or above $200 million in recurring revenue.

Which cybersecurity startups could cross $500 million ARR next?

Cato Networks and 1Password are closest to $500 million ARR, with Cato currently having the stronger recent growth evidence.

Cato already exceeds $415 million ARR and reported 42% year-over-year growth. Reaching $500 million therefore requires less than another $85 million from the latest disclosed milestone.

1Password has passed $400 million, although its public figure is older than Cato's. The company could be closer to $500 million than the disclosure suggests, but there is no reason to invent a current number before 1Password publishes one.

The next group starts above $300 million. Vanta is particularly interesting because it added approximately $100 million ARR in only nine months. Saviynt, Snyk and ReliaQuest also have enough scale to become $500 million businesses without needing several doublings.

Huntress is further back above $250 million, although 65% growth makes the gap less daunting than the raw number suggests.

So, what are the top cybersecurity startups by revenue today?

Tanium leads the broad private cybersecurity ranking, while Cato Networks is currently the strongest answer for the biggest newer independent cybersecurity startup.

Tanium has more than $700 million ARR. Arctic Wolf appears to be around the $600 million level, although its evidence is less formal. Cato has passed $415 million and 1Password more than $400 million. Snyk, Vanta, Saviynt and ReliaQuest form the next group above $300 million.

Below them, Huntress has passed $250 million, Keeper Security has reached $225 million, and Axonius, Keyfactor and Abnormal AI have crossed $200 million. Cyera is already above $150 million according to credible reporting, while Pentera has recently crossed $100 million.

The ranking has changed materially because Wiz and Armis are now owned by Google and ServiceNow. Once those acquired companies are removed, Cato sits at the top of the newer independent generation.

The cleanest current answer is Tanium under the broad definition of a private cybersecurity startup, and Cato Networks if we focus on the newer generation most readers have in mind when they search for cybersecurity startups.